ToolWar | Information Security (InfoSec) Tools: Penetration

Burp Suite 2020.12.1 :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAT2UhRmZvzULaQVdcEZDtIFgNvPBCuTUbZWHvPtZZ5gx6ibqfq6BYj-4RfUfNMVxfg1JsA6uD4KKYpcQKye1XV_E1DMgkYO8CCKDPceWmNfn-3OVLCMEvmMVmLYzvRih9jGTKLa8xnlbs/s836/Burp-Suite-Professional-2020-Free-Download.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Burp Suite Professional 2020.12.1" border="0" data-original-height="484" data-original-width="836" height="231" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAT2UhRmZvzULaQVdcEZDtIFgNvPBCuTUbZWHvPtZZ5gx6ibqfq6BYj-4RfUfNMVxfg1JsA6uD4KKYpcQKye1XV_E1DMgkYO8CCKDPceWmNfn-3OVLCMEvmMVmLYzvRih9jGTKLa8xnlbs/w400-h231/Burp-Suite-Professional-2020-Free-Download.jpg" title="Burp Suite Professional 2020.12.1" width="400" /></a></div><br /><div style="text-align: justify;">
<b>Burp Suite</b> is a large platform for performing security testing of web applications. Its various tools work seamlessly  together to support the entire testing process, from initial mapping and  analysis of an application's attack surface, through to finding and  exploiting security vulnerabilities. </div>
<div style="text-align: justify;">
Burp gives you full control, letting you combine advanced manual  techniques with state-of-the-art automation, to make your work faster, more  effective, and more fun.</div>
<div style="text-align: justify;">
It contains a variety of tools with numerous interfaces between them  designed to facilitate and speed up the process of attacking an  application. All of the tools share the same framework for handling and  displaying HTTP messages, persistence, authentication, proxies, logging,  alerting and extensibility.  There is a limited free version and also  Burp Suite Professional ($399 per user per year). </div>
<div class="rounded-corner-box grey-box">
<ul class="green-list" style="text-align: justify;">
<li>An intercepting <b>Proxy</b>,  which lets you inspect and modify traffic between your browser and the  target application.</li>
<li>An application-aware <b>Spider</b>,  for crawling content and functionality.</li>
<li>An advanced web application <b>Scanner</b>,  for automating the detection of numerous types of vulnerability.</li>
<li>An <b>Intruder</b> tool, for  performing powerful customized attacks to find and exploit unusual  vulnerabilities.</li>
<li>A <b>Repeater</b> tool, for  manipulating and re-sending individual requests.</li>
<li>A <b>Sequencer</b> tool, for  testing the randomness of session tokens.</li>
<li>The ability to <b> save your work</b> and resume working later.</li>
<li><b>Extensibility</b>, allowing you  to easily write your own plugins, to perform complex and highly  customized tasks within Burp.</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/pBkzvp7xuCI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="https://portswigger.net/burp/releases/professional-community-2020-12-1" target="_blank">Burp Suite v2020.12.1</a><b>
</b></div>
<div style="text-align: left;">
<b>Source ::</b> http://portswigger.net/index.html</div>
</div>
</div>

Burp Suite 2020.12.1 :: Tools

Burp Suite is a large platform for performing security testing of web applications. Its various tools work seamlessly together to suppor...

Unicornscan :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Unicornscan Logo" border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-Se65R6_fXbhsEvZ4OGb94u-Hutt37Pcs2drLQu7Mk9bGq9J2Z4v_z2fEgACR2By3wGwaimGRLdxDXBz6znTBTgn3m44TEEgIITTVw-YrbRClrzUCcIrvn4Rz-jcjutLIAfRSU1lnnYyq/s320/unicornscan+logo.png" title="Unicornscan Logo" width="320" /></div>
<div style="text-align: justify;">
<b>Unicornscan </b>is a new<i> information gathering and correlation engine</i> built 
for and by members of the security research and testing communities. It 
was designed to provide an engine that is Scalable, Accurate, Flexible, 
and Efficient. It is released for the community to use under the terms 
of the GPL license. </div>
<h4 style="text-align: justify;">
Benefits:</h4>
<div style="text-align: justify;">
<b>Unicornscan</b> is an attempt at a User-land Distributed TCP/IP stack.
 It is intended to provide a researcher a superior interface for 
introducing a stimulus into and measuring a response from a TCP/IP 
enabled device or network. Although it currently has hundreds of 
individual features, a main set of abilities include:
</div>
<ul style="text-align: justify;">
<li> Asynchronous stateless TCP scanning with all variations of TCP Flags.
</li>
<li> Asynchronous stateless TCP banner grabbing
</li>
<li> Asynchronous protocol specific UDP Scanning (sending enough of a signature to elicit a response).
</li>
<li> Active and Passive remote OS, application, and component identification by analyzing responses.
</li>
<li> PCAP file logging and filtering
</li>
<li> Relational database output
</li>
<li> Custom module support
</li>
<li> Customized data-set views </li>
</ul>
<br />
<b>Video Tutorial ::</b> <a href="https://www.youtube.com/watch?v=u_nvGriEb9M" target="_blank">Click Here</a> <br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/osace/files/unicornscan/unicornscan%20-%200.4.7%20source/unicornscan-0.4.7-2.tar.bz2/download">Unicornscan - 0.4.7-2</a><br />
<b>Official Website :: </b>http://www.unicornscan.org/ </div>

Unicornscan :: Tools

Unicornscan is a new information gathering and correlation engine built for and by members of the security research and testing commu...

Metasploit Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Metasploit Framework" border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRSOyPh20yguq6DjZOgkEcBHC8wQ_Io1QDFE0-kXz-N9y7eoKn8qmNGwMSzoLNGU14xryBBHoTyJIlzutFs5ok3tgblKnFB2yXitsliLOPa4eGDX0ubGavMFLynPT0JKFv4f_tnTkl8Hdn/s320/metasploit-framework-toolwar.png" title="Metasploit Framework" width="320" /></div>
<div style="text-align: justify;">
<b>Metasploit Framework</b> is a most usable framework for exploiting network or servers. <b>Metasploit</b> <b>Framework</b> took the security world by storm when it was released in  2004. It is an advanced open-source platform for developing, testing,  and using exploit code. The extensible model through which payloads,  encoders, no-op generators, and exploits can be integrated has made it  possible to use the <b>Metasploit Framework</b> as an outlet for cutting-edge  exploitation research. It ships with hundreds of exploits, as you can  see in their list of modules.  This makes writing your own exploits easier, and it certainly beats  scouring the darkest corners of the Internet for illicit shellcode of  dubious quality.  One free extra is <i>Metasploitable,</i>  an intentionally insecure Linux virtual machine you can use for testing  Metasploit and other exploitation tools without hitting live servers.  </div>
<div style="text-align: justify;">
<i><b>Metasploit</b></i> was completely free, but the project was acquired by Rapid7  in 2009 and it soon sprouted commercial variants.  The Framework itself  is still free and open source, but they now also offer a  free-but-limited Community edition, a more advanced Express edition  (<i>$3,000</i> per year per user), and a full-featured Pro edition (<i>$15,000</i> per  user per year).  Other paid exploitation tools to consider are Core Impact (more expensive) and Canvas (less).  </div>
<div style="text-align: justify;">
The Metasploit Framework now includes an official Java-based GUI and also Raphael Mudge's excellent Armitage.  The Community, Express, and Pro editions have web-based GUIs.</div>
<div style="text-align: justify;">
The <b>Metasploit Project</b> is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.<br />
Its best-known sub-project is the open source.<sup class="reference" id="cite_ref-bsdlicense_1-1"></sup> <b>Metasploit Framework</b>, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.<br />
The Metasploit Project is well known for its anti-forensic and evasion tools, some of which are built into the Metasploit Framework.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/q0xkf1g2mbY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: left;">
<br />
<b>Download Here</b><b> ::</b> <a href="http://www.rapid7.com/products/metasploit/metasploit-community-registration.jsp" target="_blank">Metasploit Community Eddition</a></div>
<div style="text-align: left;">
<u><b>Official Website</b> </u>:: http://www.metasploit.com/</div>
</div>
</div>

Metasploit Framework

Metasploit Framework is a most usable framework for exploiting network or servers. Metasploit Framework took the security world by st...

NetSleuth (Network Monitoring and Forensic Analysis) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="netsleuth logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnMrr3NyERcpGCqRi_R4P6lMHK0f1RnEnoloLM5uTw3-WmKU3ztlXHMM6wOMnFHty78NHNfF_VrPivDUL-BoT5R3gIrqaaMaGfAFMdVood9c8mcXv14tb5c7lO3Cw971VUfHUUyRc2qV0G/s1600/netsleuth+logo.png" title="netsleuth logo" /></div>
<div style="text-align: justify;">
<span style="font-size: small;"><b>NetSleuth</b> is a free <i>network monitoring and forensic analysis tool.</i> NetSleuth identifies and fingerprints network devices by silent network monitoring or by processing data from PCAP files.</span></div>
<div style="text-align: justify;">
<span style="font-size: large;">NetSleuth features:</span></div>
<div style="text-align: justify;">
</div>
<ul style="text-align: justify;">
<li>A realtime overview of devices connected to a network.</li>
<li>No requirement for hardware or reconfiguration of networks.</li>
<li>“Silent portscanning” and undetectable network monitoring.</li>
<li>Offline analysis of pcap files to aid in intrusion response and network forensics.</li>
<li>Automatic identification of a vast array of device types, including 
smartphones, tablets, gaming consoles, printers, routers, desktops and 
more</li>
</ul>
<div style="text-align: justify;">
<span style="font-weight: normal;"><span style="font-size: large;">Silent PortScanning:</span></span></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
Many network devices broadcast various information across the 
network. Often this is for ‘zero configuration’ style services, for 
example Apple’s Bonjour protocol. This information often contains 
information on the machine, and services running on that device – great 
information for fingerprinting.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
For this reason, it is possible to obtain port scanning style 
information completely silently. NetSleuth also does not put the network
 adapters into promiscuous mode, mitigating some techniques to detect 
sniffing network adapters.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: large;">Offline Analysis :</span></div>
<div style="text-align: justify;">
<span style="font-size: small;">A network capture from any network with consumer devices will contain
 a huge amount of rich broadcast traffic for analysis. NetSleuth can 
analyse and extract this data from .pcap files from Snort, Wireshark or 
other tools. It can also analyse data intercepted by Kismet (the 
.pcapdump) files.</span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: small;"><b>Tutorial [T] ::</b> <a href="http://netgrab.co.uk/blog/" target="_blank">Click Here</a></span></div>
<div style="text-align: justify;">
<b><span style="font-size: small;">Download Here :: </span></b><span style="font-size: small;"><a href="https://dl.dropbox.com/u/89573721/NetSleuth%20Installer.msi" target="_blank">NetSleuth (for Windows)</a></span><b><span style="font-size: small;"><br /></span></b></div>
<div style="text-align: justify;">
<span style="font-size: small;"><b>Official Website :: </b>http://netgrab.co.uk/netsleuth/ </span></div>
</div>

NetSleuth (Network Monitoring and Forensic Analysis) :: Tools

NetSleuth is a free network monitoring and forensic analysis tool. NetSleuth identifies and fingerprints network devices by silent net...

KOLKATA (Web Application Fingerprinting) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="kolkata web application fingerpriniting tool" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjblh7okaX78YSdEtAzJwG8C6OYlRXWupeC8svbS39nXWePEaV3Mo3xwGCYqinIFajRoXhBNxjZq6rPBWvgB2KbTQUATdjhFPRbPkVyKrcJykmaOUlLLJs27Q6mzqszFpUXleLMIcCjPYT-/s1600/Web-App-fingerprint-sized-293x150.jpg" title="kolkata web application fingerpriniting tool" /></div>
<div style="text-align: justify;">
<b>Kolkata</b> is a <i>web application fingerprinting engine</i> written in <a href="http://www.toolwar.com/2013/09/perl-language.html" target="_blank" title="Perl">Perl</a> that combines cryptography with IDS evasion. Kolkata uses session splicing for IDS evasion and configurable checksums of static files in order to determine the version of a web application. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://www.blackhatlibrary.net/releases/kolkata.tgz" target="_blank">Kolkata.tgz</a> </div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.blackhatlibrary.net/Kolkata</div>
</div>

KOLKATA (Web Application Fingerprinting) :: Tools

Kolkata is a web application fingerprinting engine written in Perl that combines cryptography with IDS evasion. Kolkata uses session ...

Geo Spider (Monitoring Network Activity on Map) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbWV44FLZKalMnAjREF-I6OdDsUwc8q8EwkD0Vrz9v6_qfsLxumQAmI7V2QA5jjDvQHv_lphNXWDOoh8mNq087eIot2qjII9DGgbyhpiaOgFKnltL02GivcLVY4D_Fc7TFi3uqF0qBSUYm/s1600/GEO_Spider.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="geospider logo" border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbWV44FLZKalMnAjREF-I6OdDsUwc8q8EwkD0Vrz9v6_qfsLxumQAmI7V2QA5jjDvQHv_lphNXWDOoh8mNq087eIot2qjII9DGgbyhpiaOgFKnltL02GivcLVY4D_Fc7TFi3uqF0qBSUYm/s400/GEO_Spider.jpg" title="geospider logo" width="400" /></a></div>
<div style="text-align: justify;">
<b>GEO Spider</b> helps you to <b>trace, identify and monitor your network activity on world map</b>. You can trace any website
or IP address on the Earth. Built on <b>.NET technology</b> GEO Spider uses fast and reliable approach in detecting hostnames, IP addresses, domain names.
</div>
<div style="text-align: justify;">
While many IP lookup tools only provide network provider locations, GEO Spider
uses unique IP location engine to provide a much higher level of accuracy by
identifying the actual physical city and country location of servers and
routers. GEO Spider can analyze and trace all network applications on the fly, including
HTTP/HTTP.</div>
<h4 style="text-align: justify;">
How does GEO Spider work?</h4>
<div style="text-align: justify;">
GEO Spider monitors all your network activity and shows full 
information about each connection. All connections are passed through 
GEO Spider Spy engine, so you can trace all your connections (where you 
have been in the world and where you located now).

GEO Spider expands your Windows tools to provide magic 
versatility. It will make a great addition to your network toolkit.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Trial Download Here :: </b><a href="http://oreware.com/download_prog.php?id_prog=22" target="_blank">Geo Spider (for Windows)</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://oreware.com/</div>
</div>

Geo Spider (Monitoring Network Activity on Map) :: Tools

GEO Spider helps you to trace, identify and monitor your network activity on world map . You can trace any website or IP address on the...

FOCA (Metadata Analyzer) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="foca logo toolwar" border="0" height="163" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_r5MVkxBwNCvxK4jGg_H_RQHnfDhbTNp2Ed3tEy8FL8RJflwgVTcEHORzatASmF21pYF3JkyjxWwvdkXkQPlEFQ9LqD0YSXkcSyanqj0nX60zI8V7FRSOWyo3v2q1_uhF7VZYi4VsChVJ/s400/foca+logo.jpg" title="foca logo toolwar" width="400" /></div>
<div style="text-align: justify;">
<b>FOCA</b> will <b>analyze metadata</b> from Microsoft Office Documents, PDF  files, Open Office Files and Word Perfect files, EXIF Metadata out of  images and the best part is that you can add the files you collected  manually or found and downloaded thru web searches using Google and Live  Search witch makes it extremely flexible for pentests. it will  enumerate Users, Folders, Printers, Emails and the version of Software  used to create the file. This tool will run on Windows XP and Windows  Vista, I found it to be really unstable in Windows 7 Beta.</div>
<div style="text-align: justify;">
<b>FOCA</b> means seal in Spanish language. <b>FOCA</b> or <b>Fingerprinting Organizations with Collected Archives</b> is a tool to discover files on target website and extract metadata from it. FOCA is a Windows based tool for the metadata extraction. It provides a GUI for easy usage. FOCA basically uses search engines for the purpose of discovering files and extracts metadata from them. There also exists an online version of the application, which can be found at http://www.informatica64.com/foca/ </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/c2LSHt8HB34?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://dl2.downloadcrew.com/?r=SBPN%2FSBPN_3.0.mvc&t=1382010847&c=c77d0352a0aaf602ef24185ec25a0bdc6fe7b201&sw=22211" target="_blank">FOCA 3.0</a><b>
</b></div>
<div style="text-align: justify;">
<b>Online Version :: </b>http://www.informatica64.com/foca/ </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.informatica64.com/foca.aspx</div>
</div>

FOCA (Metadata Analyzer) :: Tools

FOCA will analyze metadata from Microsoft Office Documents, PDF files, Open Office Files and Word Perfect files, EXIF Metadata out of...

OpenSCAP :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="openscap logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXQFj4zLeCW14YEVKoqD8MA3fWadKIZo-_UJ6_GUaXS8XEx85KgovsQNqIQM9VbWcOQV7B_waPPpDlc9txypQddRoEgzz-bnZoHLzIalEcR8xhVoDKoglRqmBHG6aSJZNh5NyrnFUrUOCe/s1600/open-scap-logo_small.png" title="openscap logo" /></div>
<div style="text-align: justify;">
The <b>OpenSCAP </b>Project is created to provide an open-source framework 
to the community which enables integration with the <i>Security Content 
Automation Protocol (SCAP) suite</i> of standards and capabilities. It is 
the goal of OpenSCAP to provide a simple, easy to use set of interfaces 
to serve as the framework for community use of SCAP.
</div>
<div style="text-align: justify;">
<b>SCAP </b>is a line of standards managed by NIST. It was created to 
provide a standardized approach to maintaining the security of 
enterprise systems, such as automatically verifying the presence of 
patches, checking system security configuration settings, and examining 
systems for signs of compromise. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Text Tutorial :: </b><a href="http://www.open-scap.org/page/Documentation" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://www.open-scap.org/page/Download" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.open-scap.org/page/Main_Page </div>
</div>

OpenSCAP :: Framework

The OpenSCAP Project is created to provide an open-source framework to the community which enables integration with the Security Conten...

VAST (VIPER Assessment Security Tools) :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="VAST Linux Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzXoQr64-bFgc0IjRQl4rz17tbSJQ_Vj22HSQlOjJddv5DmqTlVr61mqn2Nc35eFezk41f0Qf5npwsgbat_ixW8ONQdn4qOP1IsVzK931BWqtLc_4On2aZJNExbH13r7z6QqDHexFIWVrj/s1600/vast+linux+logo.png" title="VAST Linux Logo" /></div>
<div style="text-align: justify;">
<b>VAST</b> is a <i>VIPER Assessment Security Tools Linux security distribution</i>. <b>VAST</b> is a Linux-based security distribution specifically designed for <b>Pentesting VoIP and UC networks.</b> It enables security professionals and  UC administrators to rapidly perform VoIP security assessments and  enumerate vulnerabilities in IP Phones or IP PBX servers in a lab  environment. With VAST, a security consultant has every tool necessary  to carry out a successful onsite or remote penetration test or  vulnerability assessment against a UC network. VAST is built on Mint  Linux 13 and includes all of the open source VIPER Lab tools, in  addition to some other network pentest tools.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/j3gKnMAMLbs?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/vipervast/files/VAST3.1/vast.iso/download" target="_blank">VAST Distribution</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://vipervast.sourceforge.net/ </div>
</div>

VAST (VIPER Assessment Security Tools) :: Distribution

VAST is a VIPER Assessment Security Tools Linux security distribution . VAST is a Linux-based security distribution specifically des...

Matriux :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="matriux logo" border="0" height="172" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGH_1dFXf9r-j5uQethVAQgIkPIJ2hfg9mwn-W0QQjsCn3x3c_a08dudXKpu78Qgq5YKkw8dMH0fONfrk-pSGsdTH5G0YCUrcVuUrFzrow68QtcE95vndH__UwV-6WqLAnM04pTzV7-d7g/s320/matriux+logo.jpg" title="matriux logo" width="320" /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
The <b>Matriux</b> is a phenomenon that was waiting to happen. It is a <i> fully featured security distribution </i>based on Debian consisting of a  powerful bunch of more than <b>300 open source</b> and free tools that can be  used for various purposes including, but not limited to, penetration  testing, ethical hacking, system and network administration, cyber  forensics investigations, security testing, vulnerability analysis,  and  much more. It is a distribution designed for security enthusiasts and  professionals, although it can be used normally as your default desktop  system.</div>
<div style="text-align: justify;">
With <b>Matriux</b>, you can turn any system into a powerful penetration  testing toolkit, without having to install any software into your  hardisk. Matriux is designed to run from a Live environment like a CD /  DVD or USB stick or it can easily be installed to your hard disk in a  few steps. Matriux also includes a set of computer forensics and data  recovery tools that can be used for forensic analysis and investigations  and data retrieval.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: center;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/W6BgzpN9Co0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/HpG6NZyT5xk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><b>Authentification</b></b></div>
<div style="text-align: center;">
Username: <b>root</b><br />
Username: <b>matriux</b><br />
Username: <b>tiger</b><br />
Password: <b>toor</b></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://linuxfreedom.com/matriux/Matriux_Leandros20130923.iso" target="_blank">Matriux Leandros ISO</a> </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.matriux.com/ </div>
</div>

Matriux :: Distribution

The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution based on Debian consisting of a...

Katana (Security Suite) :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: both; text-align: center;">
<img alt="katana logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMSbSG85pmi-m_F-HR3S76YmZ7XvVAJdDrFeEMUAgFWeZWQNuv-XTVp5kdZ44ePTBqagWCfIm-OttLK5TI832kqhbREco9fx8m3PzahkLoGW_nLEfrl26n5OIz2tYbkM9H3sVo787-erIb/s1600/katana+logo.png" title="katana logo" /></div>
<div style="text-align: justify;">
<b>Katana</b> is a portable multi-boot security suite which brings together  many of today's best security distributions and portable applications to  run off a single Flash Drive. It includes distributions which focus on  Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and  Malware Removal. Katana also comes with over 100 portable Windows  applications; such as Wireshark, Metasploit, NMAP, Cain & Abel, and  many more. </div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/q4pV0fJMOjM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<b>Download Here :: </b><a href="http://public.acetolyne.net/katana-v2.0.rar" target="_blank">Katana v2.0</a><br />
<b>Official Website ::</b> http://www.hackfromacave.com/katana.html</div>
<div style="text-align: justify;">
</div>
</div>

Katana (Security Suite) :: Distribution

Katana is a portable multi-boot security suite which brings together many of today's best security distributions and portable app...

AppUse (Android Penetest Platform Unified Standalone Environment) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="AppUse Logo Toolwar" border="0" height="83" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAGd8j-mE-M4Gmc0wQX2ZY7qpYdv95XXv4NpOzK9WLTHwYqqFV8nnfozdqxXwDM2PNNsHequwQfXkRNV_q-R9pGjLcTjhUeWZ0rqyhycnqLPeKsd_XvMc0gDSFoBWQA_Zfa-tNuu36nUjh/s320/AppUse+logo.png" title="AppUse Logo Toolwar" width="320" /></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>AppUse</b> is a <i>Android Penetest Platform Unified Standalone Environment</i>. <b>AppSec Labs</b> recently developed the </span><b style="text-align: justify;">AppUse Virtual Machine</b><span style="text-align: justify;">. This system is a unique, </span><b style="text-align: justify;">free</b><span style="text-align: justify;">,  platform for mobile application security testing in the android  environment, and it includes unique custom-made tools created by AppSec  Labs.</span></div>
<div style="text-align: justify;">
The system is a blessing to security  teams, who from now on can easily perform security tests on Android  applications. It was created as a virtual machine targeted for  penetration testing teams who are interested in a convenient,  personalized platform for android application security testing, for  catching security problems and analysis of the application traffic.</div>
<div style="text-align: justify;">
Now, in order to test Android applications, all you will need is to download <b>AppUse Virtual Machine</b>, activate it, load your application and test it.</div>
<div style="text-align: justify;">
There is no need for installation of  simulators and testing tools, no need for SSL certificates of the proxy  software, everything comes straight out of the box pre-installed and  configured for an ideal user experience.</div>
<div style="text-align: justify;">
Security experts who have seen the  machine were very excited, calling it the next ‘BackTrack’ (a famous  system for testing security problems), specifically adjusted for android  application security testing.</div>
<div style="text-align: justify;">
<b>AppUse VM</b> closes gaps  in the world of security, now there is a special and customized testing  environment for android applications; an environment like this has not  been available until today, certainly not with the rich format offered  today by <b>AppUse VM</b>.</div>
<div style="text-align: justify;">
This machine is intended for the daily  use of security testers everywhere for Android applications, and is a  must-have tool for any security person.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>Tutorial File :: </b><a href="https://appsec-labs.com/AppUse_guide" target="_blank">Click Here </a></span></div>
<div style="text-align: justify;">
<b><span style="text-align: justify;">Download Here :: </span></b><span style="text-align: justify;"><a href="http://sourceforge.net/projects/appuse-android-pentest/files/AppUse%201.6_release.rar/download" target="_blank">AppUse-1.6.rar</a></span><b><span style="text-align: justify;"><br />
</span></b></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>Official Website :: </b>https://appsec-labs.com/ </span></div>
</div>

AppUse (Android Penetest Platform Unified Standalone Environment) :: Framework

AppUse is a Android Penetest Platform Unified Standalone Environment . AppSec Labs recently developed the AppUse Virtual Machine . Thi...

Belch (Binary Protocol Pen-Testing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="binary penetration toolwar" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghScz4peffH3Ja7mGFWJDPwhNDV6F4dfiL3mFvd9W2fuHuDBj4LvJqkwRydZCF__q-Jqq-K6-2OXS-TClsJUkaXYlrCPp9PFm8VAOBw9kSfvH6lN6y8ylw5xcy5epYUTDvXIBCmCMXlHKl/s400/binary+penetration+toolwar.jpg" title="binary penetration toolwar" width="400" /></div>
<span style="font-family: inherit;"><b>Belch</b> is a B<i>inary Protocol Pen-Testing Tool.</i> It is used to aid in automation of testing AMF and Java-Serialization applications.</span></div>
<div style="text-align: justify;">
<span style="font-family: inherit;"> </span></div>
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>Belch</b>  performs on the fly transformation of binary data to human readable XML  format. It was tested successfully against AMF version 3 and Java  Serialization applications. Belch can be used as a translation peer for  any Automatic scanner integrating automatic testing to the binary  communication. Belch has been tested with various scanners such as  BurpSuite, Accunetix, AppScan, Sqlmap etc.</span></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/6wiCy3yZvl4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b><span style="font-family: inherit;">Download Here ::</span></b><span style="font-family: inherit;"> <a href="https://www.appsec-labs.com/system/files/Belch_1.0.13.zip" target="_blank">Belch 1.0.13 (Windows)</a></span><b><span style="font-family: inherit;">
</span></b></div>
<div style="text-align: justify;">
<span style="font-family: inherit;"><b>Official Website :: </b>https://appsec-labs.com/ </span></div>
</div>

Belch (Binary Protocol Pen-Testing) :: Tools

Belch is a B inary Protocol Pen-Testing Tool. It is used to aid in automation of testing AMF and Java-Serialization applications. ...

WAppEx (Web Application Exploiter) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy69Bs634VQydTJdv0uGtFpQKr3ts7eZw6ppQEaiyIybkyhkxNo7FP1mBlS7oZ-MTfnVkAX0YqJg5yifhrgQ90taO_P751HCiUSd3hrXBXP1-qD46VxnlmEySD4yRYu_eyy_XS5xdzAJwO/s1600/wappex+screenshot+toolwar.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WAppEx Screenshot ToolWar" border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy69Bs634VQydTJdv0uGtFpQKr3ts7eZw6ppQEaiyIybkyhkxNo7FP1mBlS7oZ-MTfnVkAX0YqJg5yifhrgQ90taO_P751HCiUSd3hrXBXP1-qD46VxnlmEySD4yRYu_eyy_XS5xdzAJwO/s400/wappex+screenshot+toolwar.png" title="WAppEx Screenshot ToolWar" width="400" /></a></div>
<div style="text-align: justify;">
<b>WAppEx</b> is an integrated <i>Web Application security</i>  assessment and exploitation platform designed with the whole spectrum of  security professionals to web application hobbyists in mind. It  suggests a security assessment model which revolves around an extensible  exploit database. Further, it complements the power with various tools  required to perform all stages of a web application attack.</div>
<div style="text-align: justify;">
The Exploit Database contains the all the logic associated with  trivial fingerprinting, exploitation techniques, and payloads that  address a wide range of web application vulnerabilities with the  emphasis being on high-risk and zero-day vulnerabilities.</div>
<div style="text-align: justify;">
Some of the vulnerabilities already bundled within the Exploit  Database include Local File Disclosure (LFD), Local File Inclusion  (LFI), Remote File Inclusion (RFI), SQL Injection (SQLI), Remote OS  Command Execution (RCE), and Server-side Code Injection (SCI). WAppEx  can detect these vulnerabilities in a target, take full advantage of it,  and through neatly designed payload codes get as much access to the  exploited target as possible in as short a time as possible. Some of the  payloads included within the database are various reverse shells,  arbitrary code execution, command execution, arbitrary file upload…</div>
<div style="text-align: justify;">
Since all the attack logic rests in the form of scripts within the  Exploit Database, it is easily extensible, flexible and updatable  through community servers. Users, too, can add mature, sophisticated  exploits and payloads in the same fashion. The database grows on a daily  basis, and our dedicated team of research and development are working  non-stop to maintain the richest, most up-to-date aggregate of exploits.  The number of exploits is soon bound to surpass hundreds. Meanwhile,  users can share their own created exploits and payloads with the  community and contribute to this growing momentum.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/6IXFN5fTvNk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://itsecteam.com/counter/?files=WAppEx/WAppEx2.0.exe" target="_blank">WAppEx 2.0.exe</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.itsecteam.com/ </div>
</div>

WAppEx (Web Application Exploiter) :: Tools

WAppEx is an integrated Web Application security assessment and exploitation platform designed with the whole spectrum of security p...

Wifislax (Wireless Security and Forensic) :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wifislax logo toolwar" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF4P8a1KMCdkVYaPLGKUNXWKY5r3RBA-jVAQk9ZIyE-tZcQERTe91zNkfqs0cpT_VP1Q7348n4Q94pxQl26E0ZF1jgopk13oNTCA0WbhaOoeuBcukeJmNEsZDBOZNYsyOXQ-ewywl45zSr/s1600/wifislax+logo+toolwar.png" title="wifislax logo toolwar" /></div>
<div style="text-align: justify;">
Wifislax is a Slackware-based live CD containing a variety of security  and forensics tools. The distribution's main claim to fame is the  integration of various unofficial network drivers into the Linux kernel,  thus providing out-of-the-box support for a large number of wired and  wireless network cards. </div>
<div style="text-align: justify;">
<a href="http://distrowatch.com/wifislax"></a> Wifislax  4.6, an updated build of the Slackware-based live CD with a collection  of security and forensics tools, has been released. This is mostly a  maintenance release to fix a serious bug in Reaver, a WiFi passphrase  brute-force attack utility, the use of which resulted in segmentation  fault in the previous release of Wifislax. The Linux kernel has been  updated to version 3.6.11 with a number of new drivers to support  tablets, touchscreen devices, multi-function printers, etc. The KDE  desktop has been upgraded to version 4.10.5 and an option to boot into a  lighter Xfce desktop remains available. Other package upgrades include  Firefox 22.0, OpenJDK 7u25 and Wireshark 1.10.0, as well as the latest  version of the Flash browser plugin. A number of new programs, such as  nano and texinfo, have been added. The release announcement  which contains a full changelog is in Spanish only, but the  distribution itself can boot into either Spanish or English localisation  of the KDE or Xfce desktops. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KOy6JmoxlYM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here ::</b> <a href="http://www.downloadwireless.net/isos-fase-testing/wifislax-current/wifislax-4.7-22092013.iso" target="_blank">Wifislax 4.7 ISO</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.wifislax.com/</div>
</div>

Wifislax (Wireless Security and Forensic) :: Distribution

Wifislax is a Slackware-based live CD containing a variety of security and forensics tools. The distribution's main claim to fame i...

Revenssis (Penetration Testing Suite for Android Devices) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="revenssis logo toolwar" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5akPP1gYogJsMY0bpiMUplwpdcoAnNdS8L6KM7gDgc3SKxos7q-Nq9vqTkjw6087MYguSsXpZd_73Azac59n9vrG46CPIYY881-rMZxH42vQUcK0mtCLM0EZlZuMtE4t2Owqa8liUPc55/s320/revenssis+logo+toolwar.jpg" title="revenssis logo toolwar" width="213" /></div>
<div style="text-align: justify;">
<b>Revenssis</b> is a complete <i>Penetration testing suite for Android devices</i>. Nicknamed as the "Smartphone Version of Backtrack", Revenssis  Penetration Suite is a set of all the useful types of tools used in  Computer and Web Application security. Tools available in it include:  Web App scanners, Encode/Decode & Hashing tools, Vulnerability  Research Lab, Forensics Lab, plus the must-have utilities (Shell, SSH,  DNS/WHOIS Lookup, Traceroute, Port Scanner, Spam DB Lookup, Netstat...  etc). All these fitting in an application approx. 10MB (post  installation). </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://revenssis-penetration-testing-suite.googlecode.com/files/Revenssis.apk" target="_blank">Revenssis.apk</a> & (Available at Play Store)</div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/revenssis-penetration-testing-suite/</div>
</div>

Revenssis (Penetration Testing Suite for Android Devices) :: Tools

Revenssis is a complete Penetration testing suite for Android devices . Nicknamed as the "Smartphone Version of Backtrack",...

Core Impact (Penetration Testing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
<div class="separator" style="clear: both; text-align: center;">
<img alt="Core Impact Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIERJw3Z8Ck4G1D8uZCWO-51nYWGOB_3oAQdBXGbGlWl0gjqA412gk4Hx5PnroCEt5G0Pzj9JVlARldZuaI74Ebrx9hqLRBQAJsspt4ASLEQufZnWlvtQ9opDp9iYQ8Be1lLDpjaIyvEvT/s1600/core+impact+logo.gif" title="Core Impact Logo" /></div>
<div style="text-align: justify;">
<b>Core  Impact Pro</b>  is the most comprehensive, commercial-grade penetration  testing  product available, enabling you to conduct real-world  assessments  across a broad spectrum of risk areas.</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; text-align: justify; top: -1999px;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
<br /></div>
</div>
</div>
<div class="field field-name-field-page-section field-type-field-collection field-label-hidden">
<div class="field-items">
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-end-user-security-awareness"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
End-User Security Awareness Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
End-User Security Awareness Testing with CORE Impact </div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
- See more at: http://www.coresecurity.com/what-core-impact-tests#sthash.VW9qqD0n.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
E   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, including:<br />
<br /></div>
</div>
</div>
<div class="field field-name-field-page-section field-type-field-collection field-label-hidden">
<div class="field-items">
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-end-user-security-awareness"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
End-User Security Awareness Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
End-User Security Awareness Testing with CORE Impact </div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
- See more at: http://www.coresecurity.com/what-core-impact-tests#sthash.VW9qqD0n.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
E   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, including:<br />
<br /></div>
</div>
</div>
<div class="field field-name-field-page-section field-type-field-collection field-label-hidden">
<div class="field-items">
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-end-user-security-awareness"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
End-User Security Awareness Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
End-User Security Awareness Testing with CORE Impact </div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
- See more at: http://www.coresecurity.com/what-core-impact-tests#sthash.VW9qqD0n.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
E   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, including:<br />
<br /></div>
</div>
</div>
<div class="field field-name-field-page-section field-type-field-collection field-label-hidden">
<div class="field-items">
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-end-user-security-awareness"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
End-User Security Awareness Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
End-User Security Awareness Testing with CORE Impact </div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
- See more at: http://www.coresecurity.com/what-core-impact-tests#sthash.VW9qqD0n.dpuf</div>
</div>
</div>
</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; text-align: justify; top: -1999px;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas, including:<br />
<br /></div>
</div>
</div>
<div class="field field-name-field-page-section field-type-field-collection field-label-hidden">
<div class="field-items">
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-end-user-security-awareness"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
End-User Security Awareness Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
End-User   Security Awareness Testing with CORE Impact Pro determines the   susceptibility of email users to social engineering attacks, assesses   the overall security of their systems, and depicts how individual   client-side exposures can be linked to large-scale breaches of backend   servers.<br />
<a href="http://www.coresecurity.com/test-security-awareness-phishing-other-social-engineering-attacks">More about End-User Security Awareness Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item odd">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-endpoint-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Endpoint Penetration Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
CORE Impact Pro enables you to penetration test standard desktop images prior to deployment in your live environment.<br />
<a href="http://www.coresecurity.com/endpoint-penetration-testing">More about Endpoint Penetration Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-mobile-device-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Mobile Device Penetration Testing </h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Mobile   device penetration testing with Impact Pro pinpoints and addresses  gaps  in end-user awareness and security exposures in their devices  before  attackers do. With CORE Impact Pro’s Mobile Device Penetration  Testing  capabilities, you can demonstrate the exploitability of  iPhone®,  Android™ and BlackBerry® smart phones using the same attack  techniques  employed by criminals today.<br />
<a href="http://www.coresecurity.com/mobile-device-penetration-testing">More about Mobile Device Penetration Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item odd">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-network-device-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Network Device Penetration Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Impact   Pro is the first commercial-grade penetration testing software that  can  specifically target network devices and prove how a single  intrusion  could escalate into a widespread data breach.<br />
<a href="http://www.coresecurity.com/penetration-testing-network-devices">More about Network Device Penetration Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-network-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Network Penetration Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Network   Penetration Testing with CORE Impact Pro replicates the actions of an   attacker taking advantage of OS, service and application weaknesses   across network systems, revealing where exploitable vulnerabilities are,   how they can be linked to traverse your network, how defenses react,   and what remediation steps are necessary.<br />
<a href="http://www.coresecurity.com/network-penetration-testing-servers-workstations">More about Network Penetration Testing > </a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item odd">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-password-identity-cracking"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Password and Identity Cracking</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
CloudCypher,   a new online service from CORE, works with Windows NTLM Hashes   discovered by Impact Pro during testing and attempts to determine   plaintext passwords for those hashes. Any passwords that are determined   will be passed back to the Impact Pro workspace that requested them.   This is done through the use of modules, the original module that   submitted the hashes will be used to retrieve the resulting passwords.   These obtained passwords can then be used for additional security   testing. CloudCypher was created and is managed by CORE and held within   Amazon Web Services.<br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-web-application-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Web Application Penetration Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Web   Application Penetration Testing with CORE Impact Pro allows you to   pinpoint exploitable Cross-Site Scripting, SQL Injection and all other   OWASP Top 10 vulnerabilities in your web applications, not only giving   visibility into where application weaknesses exist, but also    determining how they can open the door to subsequent network-based   attacks.<br />
<a href="http://www.coresecurity.com/web-application-penetration-testing">More about Web Application Penetration Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item odd">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-wireless-network-penetration-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Wireless Network Penetration Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Wireless   Penetration Testing with CORE Impact Pro allows IT security managers  to  identify at-risk wireless networks, crack encryption codes, and  trace  attack paths from initial points of wireless exposure to backend   resources housing critical data -- gaining actionable data at each step   for efficient remediation.<br />
<a href="http://www.coresecurity.com/wireless-network-penetration-testing">More about Wireless Network Penetration Testing ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-ips-ids-firewall-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Testing the Efficacy of IPS/IDS, Firewalls and Other Defenses</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
Using   CORE Impact software solutions, you can proactively test the efficacy   of their network, endpoint, web application, wireless, and email   defenses both to ensure that these technologies are working properly,   and to aid in the process of evaluating products to determine ROI and   influence future buying decisions.<br />
<a href="http://www.coresecurity.com/assessing-ipsids-firewalls-and-other-defenses-penetration-testing">More about Testing the Efficacy of Defenses ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
</div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item odd">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-vulnerability-validation"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
Validating Vulnerabilities Identified by Scanners</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
CORE   Impact integrates with the most widely-used network and web   vulnerability scanners, allowing you to import scan results and run   exploits to test identified vulnerabilities.<br />
<a href="http://www.coresecurity.com/penetration-testing-validate-network-and-web-vulnerability-scan-results">More about Validating Vulnerability Scan Results ></a><br />
<br />
<hr class="special-line wide-line" style="margin-left: 0px; margin-right: 0px;" />
  </div>
</div>
</div>
</div>
</div>
</div>
<div class="field-item even">
<div class="entity entity-field-collection-item field-collection-item-field-page-section clearfix">
<div class="content">
<div class="field field-name-field-anchor-link field-type-link-field field-label-hidden">
<div class="field-items">
<div class="field-item even">
<a href="http://www.blogger.com/null" name="core-impact-scada-testing"></a></div>
</div>
</div>
<div class="field field-name-field-title field-type-text field-label-hidden">
<h2>
SCADA Security Testing</h2>
</div>
<div class="field field-name-field-body field-type-text-with-summary field-label-hidden">
<div class="field-items">
<div class="field-item even">
CORE   Security is partnering with ExCraft labs, a CORE Secured Partner, that   has created numerous exploits specifically for SCADA systems, that are   utilized in CORE Impact Pro. <br />
<a href="http://www.coresecurity.com/system/files/attachments/2013/08/ExCraft_SCADA_Datasheet_August_2013_secured.pdf" target="_blank">More about SCADA Security Testing > </a></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
- See more at: http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; text-align: justify; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpufCORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
</div>
<div id="stcpDiv" style="left: -1988px; position: absolute; text-align: justify; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf<br />
<div id="stcpDiv" style="left: -1988px; position: absolute; top: -1999px;">
CORE   Impact Pro is the most comprehensive, commercial-grade penetration   testing product available, enabling you to conduct real-world   assessments across a broad spectrum of risk areas - See more at:   http://www.coresecurity.com/what-core-impact-tests#sthash.T0OprB8R.dpuf</div>
</div>
<div style="text-align: justify;">
<b>Core Impact</b>  isn't cheap (be prepared to spend at least $30,000), but it  is widely  considered to be the most powerful exploitation tool  available. It  sports a large, regularly updated database of professional  exploits,  and can do neat tricks like exploiting one machine and then   establishing an encrypted tunnel through that machine to reach and   exploit other boxes. </div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/YO18QnijA0I?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b> </b> <b> </b>
<b><a href="http://ws.coresecurity.com/ImpactProTrialRequest2013.html" target="_blank">Request Trial Here </a></b>
 <a href="http://www.coresecurity.com/" target="_blank"><b>Official Website</b></a></div>

Core Impact (Penetration Testing) :: Tools

CORE Impact Pro is the most comprehensive, commercial-grade penetration testing product available, enabling you to conduct real-world ...

BackTrack 5 R3 :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="BackTrack :: ToolWar" border="0" height="238" src="http://t2.gstatic.com/images?q=tbn:ANd9GcQsQqy4NevFDShk6gryjrDUSA8h4ldiJWhuO_k9Kj9rqNxIPcQbKw" title="BackTrack :: ToolWar" width="320" /></div>
<div style="text-align: justify;">
<b>BackTrack</b> is a most usable or power distribution based on the Ubuntu Linux distribution aimed at digital forensics and penetration testing use. It was named after backtracking, a search algorithm. In March 2013, the Offensive Security team created a fork of <b>BackTrack</b> named Kali Linux.</div>
<div style="text-align: justify;">
<b>BackTrack</b> provides users network, foot-printing, information gathering, wireless pentesting and with easy access to a comprehensive and large  collection of security-related tools ranging from port scanners to  Security Audit. Support for Live CD and Live USB  functionality allows users to boot BackTrack directly from portable  media without requiring installation, though permanent installation to  hard disk and network is also an option.</div>
<div style="text-align: justify;">
<b>BackTrack</b> is an Operating system which is especially made for  Hackers,<sup> </sup>ethical Hackers, Penetration testers etc.This operating system  includes all the security assessments and features till date.This distro  got it all,Slick Interface, Powerful yet latest  tools, high compatibly large software library, tons of tutorial.<br />
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Y0_fL62UfuY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="http://www.backtrack-linux.org/ajax/download_redirect.php?id=BT5R3-GNOME-32.iso" target="_blank">BackTrack 5 R3 (.iso)</a><b>
</b></div>
<div style="text-align: left;">
<b>Official Website :: </b>http://www.backtrack-linux.org/</div>
</div>

BackTrack 5 R3 :: Distribution

BackTrack is a most usable or power distribution based on the Ubuntu Linux distribution aimed at digital forensics and penetration test...

Nikto (Web Server Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="separator" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: center;">
<img alt="nikto logo" border="0" height="320" src="http://www.cirt.net/images/nikto.png" title="nikto logo" width="173" /></div>
<div style="text-align: justify;">
<b>Nikto</b> is an Free Open Source (<a href="http://www.gnu.org/licenses/licenses.html#GPL">GPL</a>)  <b><i>web server scanner</i></b> which performs comprehensive tests against web  servers for multiple items, including over 6500 potentially dangerous  files/CGIs, checks for outdated versions of over 1250 servers, and  version specific problems on over 270 servers. It also checks for server  configuration items such as the presence of multiple index files, HTTP  server options, and will attempt to identify installed web servers and  software. Scan items and plugins are frequently updated and can be  automatically updated.</div>
<div style="text-align: justify;">
<br />
<b>Nikto</b> is not designed as an overly stealthy tool. It will test a  web server in the quickest time possible, and is fairly obvious in log  files. However, there is support for LibWhisker's anti-IDS methods in  case you want to give it a try (or test your IDS system).</div>
<div style="text-align: justify;">
<br />
Not <i>every</i> check is a security problem, though most are.   There are some items that are "info only" type checks that look for  things that may not have a security flaw, but the webmaster or security  engineer may not know are present on the server. These items are usually  marked appropriately in the information printed. There are also some  checks for unknown items which have been seen scanned for in log files.</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/UwzamgJ6Qt4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="http://www.cirt.net/nikto/nikto-2.1.5.tar.gz" target="_blank">Nikto2 2.1.5 tar.gz</a><b>
</b></div>
<div style="text-align: left;">
<b>Official Website ::</b> http://www.cirt.net/nikto2</div>
</div>

Nikto (Web Server Scanner) :: Tools

Nikto is an Free Open Source ( GPL ) web server scanner which performs comprehensive tests against web servers for multiple items, ...

Subscribe to: Posts ( Atom )