ToolWar | Information Security (InfoSec) Tools: Python

IronWASP (Web Application Advaced Security Testing Platform) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiIe0rfi3alWm5nNnOkzOsCwxWkvTGEZszoQ6V6CqzE9CWjbo_A4crurTQ2UKyOjm5HLNA9FL0P67Vjg2Rvnfuaj9HaEy5iky1SX9TfSfsJi_qC8Zn3KcLEp5JD_gC0J3Wo6HKzEwuAMrm/s1600/IronWASP+Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="IronWASP Screenshot" border="0" height="222" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiIe0rfi3alWm5nNnOkzOsCwxWkvTGEZszoQ6V6CqzE9CWjbo_A4crurTQ2UKyOjm5HLNA9FL0P67Vjg2Rvnfuaj9HaEy5iky1SX9TfSfsJi_qC8Zn3KcLEp5JD_gC0J3Wo6HKzEwuAMrm/s1600-rw/IronWASP+Screenshot.png" title="IronWASP Screenshot" width="640" /></a></div>
<b>IronWASP (Iron Web application Advanced Security testing Platform)</b> is an  open source <a href="http://www.toolwar.com/search/label/System" target="_blank">system</a> for <a href="http://www.toolwar.com/search/label/Web" target="_blank">web</a> application <a href="http://www.toolwar.com/search/label/Vulenrability" target="_blank">vulnerability</a> testing. It is  designed to be customizable to the extent where users can create their  own custom <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">scanners</a> using it.         Though an advanced user with <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a>/Ruby scripting expertise  would be able to make full use of the platform, a lot of the tool's  features are simple enough to be used by absolute beginners. </div>
<div style="text-align: justify;">
<b>IronWASP</b> has a plugin system that supports Python and Ruby. The version  of Python and Ruby used in <b>IronWASP</b> is IronPython and IronRuby which is  syntactically similar to CPython and CRuby. However some of the standard  libraries might not be available, instead plugin authors can make use  of the powerful IronWASP API.                   </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>IronWASP Blog : : </b><a href="http://blog.ironwasp.org/" target="_blank">Click Here </a></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/yUoPRnEf22I?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="https://ironwasp.org/ironwasp.zip" target="_blank">IronWASP v0.9.7.5</a><b> </b>(.zip)</div>
<div style="text-align: justify;">
<b>Linux :: </b></div>
<div style="text-align: justify;">
<b><span style="font-family: "Courier New",Courier,monospace;">wget http://blog.anantshri.info/content/uploads/2013/01/ironwasp_installer.sh.txt -O ~/ironwasp_installer.sh && sh ~/ironwasp_installer.sh </span></b></div>
<div style="text-align: justify;">
<b>Mac :: </b>IronWASP runs on Mac with <a href="http://www.codeweavers.com/products/">CrossOver</a>.</div>
<div style="text-align: justify;">
<b>Official Website :: </b><a href="http://ironwasp.org/">http://ironwasp.org/</a></div>

IronWASP (Web Application Advaced Security Testing Platform) :: Tools

IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testin...

Pytbull (IDS/IPS Testing) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="pytbull ids mode" border="0" height="291" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBUJPMHKujz46n6sRck2NZDM075hEsNEerHmckZ-25awz2AFXTsWET-KZg7ngqkBZi0hpKmBHgm9_EwaLliZYrhmFPjNhRYcjqM3beHBHH4szekg9xDZKMPb1parSaCEd4KfgunPEj-e4f/s1600-rw/pytbull-ids-mode.png" title="pytbull ids mode" width="400" /></div>
<b>Pytbull</b> is an <b>Intrusion Detection/Prevention System (IDS/IPS) testing framework</b> for <i><a href="http://www.toolwar.com/2013/09/snort-tools_7.html" target="_blank">Snort</a> and Suricata.</i> We all know the greatness of these two projects. Even though it concentrates on Snort and Suricata, it can possibly be used to test the <a href="http://www.toolwar.com/search/label/Detect" target="_blank">detection</a> and blocking capabilities of other <b><a href="http://www.toolwar.com/search/label/IDS" target="_blank">IDS</a>/<a href="http://www.toolwar.com/search/label/IPS" target="_blank">IPS</a></b> also. You can also use it to compare IDS/IPS, or compare their configuration modifications or to simply check/validate configurations. The <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> is well equipped with about 300 tests grouped in 8 testing modules, such as:You've just set up your Intrusion Detection/Prevention System  (IDS/IPS) and feel "Now I'm secure". But how can you be so sure? And how  much do you trust your IDS/IPS?</div>
<div style="text-align: justify;">
The only way to ensure your <b>IDS/IPS</b> detects and blocks unwanted  traffic is to test it with specific payloads and <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a>, but this job can  take hours or even days...</div>
<div style="text-align: justify;">
Why all this pain? Here is where pytbull comes in!</div>
<div style="text-align: justify;">
<b>Pytbull</b> is a <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> based flexible IDS/IPS <a href="http://www.toolwar.com/search/label/Testing" target="_blank">testing</a> framework  shipped with more than 300 tests, grouped in 9 modules, covering a large  scope of attacks (clientSideAttacks, testRules, badTraffic,  fragmentedPackets, multipleFailedLogins, evasionTechniques, shellCodes,  denialOfService, pcapReplay)</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/_zS1f-F9niw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://downloads.sourceforge.net/project/pytbull/pytbull-2.0.tar.bz2" target="_blank">Pytbull v2.0</a> (.tar.bz2)</div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://pytbull.sourceforge.net/ </div>

Pytbull (IDS/IPS Testing) :: Framework

Pytbull is an Intrusion Detection/Prevention System (IDS/IPS) testing framework for Snort and Suricata. We all know the greatness o...

Flunym0us (Wordpress Vulnerability Scanner) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRufBOKc1OhlATweF2T2DA6RzQ1RaW4teULU82vacYOyWYROE7IcTk2iaaqm8nd8OaWbZQKEKAcmX1x6UG1k6hOByiwXeU2uE2jDdkKAfuxwxAxBHilBRXcwC9kgA0aZyHPjIMuJhyphenhyphenDCN5/s1600/wordpress+vulnerability+scanner.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Wordpress Vulnerability Scanner" border="0" height="200" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRufBOKc1OhlATweF2T2DA6RzQ1RaW4teULU82vacYOyWYROE7IcTk2iaaqm8nd8OaWbZQKEKAcmX1x6UG1k6hOByiwXeU2uE2jDdkKAfuxwxAxBHilBRXcwC9kgA0aZyHPjIMuJhyphenhyphenDCN5/s400-rw/wordpress+vulnerability+scanner.jpg" title="Wordpress Vulnerability Scanner" width="400" /></a></div>
<br />
<b>Flunym0us</b> is a <i><b>Vulnerability <a href="http://www.toolwar.com/search/label/Scanner" target="_blank">Scanner</a> for Wordpress and Moodle</b></i> designed by Flu Project Team. <b>Flunym0us</b>  has been developed in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a>.<b> Flunym0us</b> performs dictionary attacks  against <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> sites. By default, <b>Flunym0us</b> includes a dictionary for  <b>Wordpress </b>and other for Moodle. </div>
<h3>
Tutorials :: </h3>
<b>Flunym0us requires python. Arguments allowed: </b><br />
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-h, --help: Show this help message and exit  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-wp, --wordpress: Scan WordPress site  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-mo, --moodle: Scan Moodle site  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-H HOST, --host HOST: Website to be scanned  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-w WORDLIST, --wordlist WORDLIST: Path to the wordlist to use  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-t TIMEOUT, --timeout TIMEOUT: Connection timeout  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-r RETRIES, --retries RETRIES: Connection retries  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-p PROCESS, --process PROCESS: Number of process to use  </span></blockquote>
<blockquote>
<span style="font-family: "Courier New",Courier,monospace;">-T THREADS, --threads THREADS: Number of threads (per process) to use  </span></blockquote>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/qDeHQYbFuxM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
<span style="font-family: inherit;">Download ::</span> </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="https://flunym0us.googlecode.com/files/flunym0us2.0.tar.gz" target="_blank">Flunym0us.tar.gz</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.flu-project.com/</div>

Flunym0us (Wordpress Vulnerability Scanner) :: Tools

Flunym0us is a Vulnerability Scanner for Wordpress and Moodle designed by Flu Project Team. Flunym0us has been developed in Python ...

Malware Classifier (Malware Analysis) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="adobe malware classifier " border="0" height="266" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJFSWBvBrB6iEW5mUe0RLgLd4aTklWqEcrJku4K5HoKfHloY6DDXgTMVL4g8funQXw0_Yaxw2LuVUfUe3WqD_yvQoVBSUtp-dpw3XWg7kkmWbJlum9If5NsE1Kifvf0LFPi1Gryz7sq1ot/s400-rw/adobe+malware+classifier.png" title="adobe malware classifier " width="400" /></div>
<div style="text-align: justify;">
<b>Adobe Malware Classifier</b> is a command-line tool that lets antivirus 
analysts, IT administrators, and security researchers quickly and easily
 determine if a <b><i>binary file contains malware</i></b>, so they can develop <b>
<a href="http://www.toolwar.com/search/label/Malware" target="_blank">malware</a> detection</b> signatures faster, reducing the time in which users' 
systems are vulnerable.
Malware Classifier uses machine learning algorithms to classify Win32 
binaries – EXEs and DLLs – into three classes: 0 for “clean,” 1 for 
“malicious,” or “UNKNOWN.”<br /><br />
The tool was developed using models resultant from running the J48, J48 
Graft, PART, and Ridor machine-learning algorithms on a dataset of 
approximately 100,000 malicious programs and 16,000 clean programs. <br />
The tool extracts seven key features from an unknown binary, feeds them 
to one of the four classifiers or all of them, and presents its 
classification of the unknown binary.</div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
<b>Python :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/files/AdobeMalwareClassifier.py/download" target="_blank">AdobeMalwareClassifier.py</a><br />
<b>Source :: </b><a href="http://sourceforge.net/projects/malclassifier.adobe/?source=navbar">http://sourceforge.net/projects/malclassifier.adobe/?source=navbar</a></div>

Malware Classifier (Malware Analysis) :: Tools

Adobe Malware Classifier is a command-line tool that lets antivirus analysts, IT administrators, and security researchers quickly and e...

PDFMiner (PDF Parser and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="PDF Analyzer Logo" border="0" height="320" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMCjJJbO6cbhxU25HoYQQ8ON_84A1pWFiyQLa-JFIozC6ngptY0JwR3i0kmDfGHn30rDY8c8i1AKJlt85WCyQGkQ1xtKs733iaogmoBtlkajjWUsAMFPoLlIFMdiiDWpacJze0pKS8trfk/s320-rw/PDF+Analyzer+logo.png" title="PDF Analyzer Logo" width="320" /></div>
<div style="text-align: justify;">
<b>PDFMiner </b>is a tool for <i>extracting information from PDF documents.</i>
Unlike other <b>PDF-</b>related tools, it focuses entirely on getting 
and<i> <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzing</a> text data</i>. <b>PDFMiner </b>allows one to obtain
the exact location of text in a page, as well as 
other information such as fonts or lines.
It includes a PDF converter that can transform <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF</a> files
into other text formats (such as HTML). It has an extensible
PDF parser that can be used for other purposes than text analysis.

</div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Features</h3>
<ul style="text-align: justify;">
<li> Written entirely in Python. (for version 2.4 or newer)
</li>
<li> Parse, analyze, and convert PDF documents.
</li>
<li> PDF-1.7 specification support. (well, almost)
</li>
<li> CJK <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a> and vertical writing scripts support.
</li>
<li> Various font types (Type1, TrueType, Type3, and CID) support.
</li>
<li> Basic encryption (RC4) support.
</li>
<li> PDF to HTML conversion (with a sample converter web app).
</li>
<li> Outline (TOC) extraction.
</li>
<li> Tagged contents extraction.
</li>
<li> Reconstruct the original layout by grouping text chunks.
</li>
</ul>
<div style="text-align: justify;">
<b>PDFMiner</b> is about 20 times slower than 
other C/C++-based counterparts such as XPdf. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<h4>
How to Install</h4>
<ol>
<li> Install <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> 2.4 or newer.
     (<b>Python 3 is not supported.</b>)
</li>
<li> Download the PDFMiner source.
</li>
<li> Unpack it.
</li>
<li> Run <code>setup.py</code> to install:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;"># <b>python setup.py install</b></span>
</pre>
</blockquote>
</li>
<li> Do the following test:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;">$ <b>pdf2txt.py samples/simple1.pdf</b>
Hello
World
Hello
World
H e l l o
W o r l d
H e l l o
W o r l d</span>
</pre>
</blockquote>
</li>
<li> Done!
</li>
</ol>
<div style="text-align: justify;">
For more tutorials visit official website.</div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://pypi.python.org/packages/source/p/pdfminer/pdfminer-20131113.tar.gz" target="_blank">PDFMiner-20131113.tar.gz</a><b> </b></div>
<div style="text-align: justify;">
<b>Official Website :: </b> <a href="http://www.unixuser.org/~euske/python/pdfminer/index.html">http://www.unixuser.org/~euske/python/pdfminer/index.html</a></div>

PDFMiner (PDF Parser and Analyzer) :: Tools

PDFMiner is a tool for extracting information from PDF documents. Unlike other PDF- related tools, it focuses entirely on getting and ...

MKBRUTUS (Password Bruteforcer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="mkbrutus logo" border="0" height="353" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiViiIesu7ycbO83Ze95F3a6rEbAX25oe7Fu42GbSYsUNI3kB976gsBmupnszGaShO0BrXpfcovw7eL-mTFKzHBM5y1alSSOorU68wJFAnK6FS7k-ta0w9IKoKwvfhbKIb7l1RW3OkN9O2/s640-rw/mkbrutus+logo.png" title="mkbrutus logo" width="640" /></div>
<div style="text-align: justify;">
<b>MKBRUTUS </b>is a Password bruteforcer for <b>MikroTik devices</b> or boxes running <b>RouterOS. MKBRUTUS</b> is a tool developed in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> 3 that performs <i>bruteforce  attacks</i> (dictionary-based) <i>systems against RouterOS </i>(ver. 3.x or newer)  which have the 8728/TCP port open. Currently has all the basic features of a tool to make dictionary-based  attacks, but in the future we plan to incorporate other options.</div>
<div style="text-align: justify;">
Some boxes running<i> <b>Mikrotik RouterOS</b></i> (3.x or newer) have the API port enabled (by default, in the port 8728/TCP) for administrative purposes instead SSH, Winbox or HTTPS (or have all of them). This is (another) <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attack</a> vector as it might be possible to perform a bruteforce to obtain valid credentials if no protection is available on that port. As the API uses a specific privative protocol, some code published by the vendor was included. Python 3.x is required in order to run this tool. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux</b><b> :: </b><a href="https://github.com/mkbrutusproject/MKBRUTUS/tarball/master" target="_blank">MKBRUTUS</a><b>  </b></div>
<div style="text-align: justify;">
<b>Windows</b> :: <a href="https://github.com/mkbrutusproject/MKBRUTUS/zipball/master" target="_blank">MKBRUTUS </a><br />
<b>Official Website :: </b><a href="http://mkbrutusproject.github.io/MKBRUTUS/">http://mkbrutusproject.github.io/MKBRUTUS/</a> </div>

MKBRUTUS (Password Bruteforcer) :: Tools

MKBRUTUS is a Password bruteforcer for MikroTik devices or boxes running RouterOS. MKBRUTUS is a tool developed in Python 3 that perfo...

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s1600/wifinger.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WiFinger" border="0" height="240" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s320-rw/wifinger.jpg" title="WiFinger" width="320" /></a></div>
<div style="text-align: justify;">
<b>WiFinger </b>was planed to become the ﬁrst available <i>wireless</i> <i>LAN<a href="http://www.toolwar.com/search/label/Spoofer" target="_blank"> spooﬁng</a> detection tool</i>. <b>WiFinger</b> is a passively identifies wireless access points based on matching the
 Information Elements in their <b>beacon packets </b>against a fingerprint 
database. It is written in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> and uses Scapy, and has been tested in
 <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>.
</div>
<div style="text-align: justify;">
Currently we only have a handful of signatures, so if you want to contribute to this tool, here’s what you can do:</div>
<ol style="text-align: justify;">
<li>Get your access point and enable WPA and WPS (if supported).</li>
<li>Capture the beacon frames that your access point is broadcasting and save them to a pcap file.</li>
<li>Send us the pcap file along with as much information about the 
access point as you can (make, model, <a href="http://firmware/" target="_blank">firmware</a> version, hardware 
revision, ESSID and BSSID).</li>
</ol>
<h3>
 </h3>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://www.sourcesec.com/Lab/wifinger.tar.gz" target="_blank">WiFinger.tar.gz</a> <br />
<b>Official Website :: </b><a href="http://wifinger.sourceforge.net/">http://wifinger.sourceforge.net/</a>

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

WiFinger was planed to become the ﬁrst available wireless LAN spooﬁng detection tool . WiFinger is a passively identifies wireless ac...

WhatWeb (Identifies Websites) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s1600/whatweb+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WhatWeb Screenshot" border="0" height="188" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s400-rw/whatweb+screenshot.png" title="WhatWeb Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WhatWeb </b><i>identifies websites.</i> Its goal is to answer the question, 
“<i>What is that Website?”</i>. <b>WhatWeb</b> recognises <i>web technologie</i>s including 
content management systems (CMS), blogging platforms, 
statistic/analytics packages, JavaScript libraries, web servers, and 
embedded devices. WhatWeb has over 900 plugins, each to recognise 
something different. WhatWeb also identifies version numbers, email 
addresses, account IDs, web framework modules, SQL errors, and more.</div>
<div style="text-align: justify;">
<b>WhatWeb</b> can be stealthy and fast, or thorough but slow. <b>WhatWeb</b> 
supports an aggression level to control the trade off between speed and 
reliability. When you visit a website in your browser, the transaction 
includes many hints of what web technologies are powering that website. 
Sometimes a single webpage visit contains enough information to identify
 a website but when it does not, <b>WhatWeb</b> can interrogate the website 
further. The default level of aggression, called ‘passive’, is the 
fastest and requires only one HTTP request of a website. This is 
suitable for scanning public websites. More aggressive modes were 
developed for in penetration tests.</div>
<div style="text-align: justify;">
Most WhatWeb plugins are thorough and recognise a range of cues from 
subtle to obvious. For example, most WordPress websites can be 
identified by the meta HTML tag, e.g. ‘‘, but a minority of WordPress 
websites remove this identifying tag but this does not thwart WhatWeb. 
The WordPress <b>WhatWeb</b> plugin has over 15 tests, which include checking 
the favicon, default installation files, login pages, and checking for 
“/wp-content/” within relative links.</div>
<h3>
Features:</h3>
<div style="text-align: justify;">
* Over 900 plugins<br />
* Control the trade off between speed/stealth and reliability<br />
* Plugins include example URLs<br />
* Performance tuning. Control how many websites to scan concurrently.<br />
* Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB.<br />
* Recursive web spidering<br />
* Proxy support including TOR<br />
* Custom HTTP headers<br />
* Basic HTTP authentication<br />
* Control over webpage redirection<br />
* Nmap-style IP ranges<br />
* Fuzzy matching<br />
* Result certainty awareness<br />
* Custom plugins defined on the command line</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.morningstarsecurity.com/downloads/whatweb-0.4.7.tar.gz">whatweb-0.4.7.tar.gz</a></div>
<div style="text-align: justify;">
<b>Tutorial :: </b>  <a href="http://www.morningstarsecurity.com/research/whatweb" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
</div>

WhatWeb (Identifies Websites) :: Tools

WhatWeb identifies websites. Its goal is to answer the question, “ What is that Website?” . WhatWeb recognises web technologie s inclu...

IKE Scan (Fingerprinting IPsec VPN Systems) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcR9RJFPXN5Woh63bjnW3K4BL8h78YqmsHhjWw9_sn02RfyPePlHARZxNahjALBnhYKNjFeKswsJ3T1wySPXaFBVwqG2gLt_wYMPhB-PuL_5toZ39tExguNXw4UEOw9NciozR-f1XQkl3l/s1600/ike+scan+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ike-scan-screenshot" border="0" height="170" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcR9RJFPXN5Woh63bjnW3K4BL8h78YqmsHhjWw9_sn02RfyPePlHARZxNahjALBnhYKNjFeKswsJ3T1wySPXaFBVwqG2gLt_wYMPhB-PuL_5toZ39tExguNXw4UEOw9NciozR-f1XQkl3l/s400-rw/ike+scan+screenshot.png" title="Ike-scan-screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b><i>IKE Scan</i></b> is a command-line tool for <i>discovering, 
fingerprinting and testing IPsec VPN systems</i>.  It constructs and sends 
IKE Phase-1 packets to the specified hosts, and displays any responses 
that are received.
</div>
<div style="text-align: justify;">
<b><i>ike-scan</i> </b>allows you to:
</div>
<ul>
<li style="text-align: justify;"> Send IKE packets to any number of destination hosts, using a configurable output bandwidth or packet rate.
<dl><dd>This is useful for VPN detection, when you may need to scan large address spaces.
</dd></dl>
</li>
<li style="text-align: justify;"> Construct the outgoing IKE packet in a flexible way.
<dl><dd>This includes IKE packets which do not comply with the RFC requirements.
</dd></dl>
</li>
<li style="text-align: justify;"> Decode and display any returned packets.
</li>
<li><div style="text-align: justify;">
Crack aggressive mode pre-shared keys. You can use ike-scan to obtain the PSK hash data, and then use <i>psk-crack</i> to obtain the key.
</div>
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
<b>Download :: </b></h3>
<ul style="text-align: justify;">
<li>for Linux : <span class="wf_file_text"><a class="wf_file" href="http://www.nta-monitor.com/files/ike-scan/ike-scan-1.9.tar.gz"><span class="wf_file_text">ike-scan-1.9.tar.gz</span></a></span></li>
<li><span class="wf_file_text"><span class="wf_file_text">Github: <a href="https://github.com/royhills/ike-scan" title="https://github.com/royhills/ike-scan">https://github.com/royhills/ike-scan</a></span></span></li>
</ul>
<div style="text-align: justify;">
This will compile on Unix and Linux systems as well as Windows 
systems with Cygwin. You will need a C compiler, the "make" utility and 
the appropriate system header files to compile ike-scan. It uses 
autoconf and automake, so compilation and installation is the normal 
./configure; make; make install process.</div>
<ul style="text-align: justify;">
<li>Windows : <a class="wf_file" href="http://www.nta-monitor.com/files/ike-scan/ike-scan-win32-1.9.zip"><span class="wf_file_text">ike-scan-win32-1.9.zip</span></a></li>
</ul>
<div style="text-align: justify;">
This is a zip file containing a Win-32 binary version of ike-scan 
together with the Cygwin DLL which provides posix support. It runs on 
Win-9x, NT, 2000 and XP. The executable was produced by compiling the 
ike-scan source on a Windows system running Cygwin.</div>
<h3 style="text-align: justify;">
Tutorial ::  </h3>
<div style="text-align: justify;">
<b><span style="font-size: small;">IKE-Scan User Guide</span>  ::</b> <a href="http://www.nta-monitor.com/wiki/index.php/Ike-scan_User_Guide" target="_blank">Click Here</a></div>

IKE Scan (Fingerprinting IPsec VPN Systems) :: Tools

IKE Scan is a command-line tool for discovering, fingerprinting and testing IPsec VPN systems . It constructs and sends IKE Phase-1 p...

HULK (Web Server DDoS) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="hulk ddos tool" border="0" height="212" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmkIpDIrPxvWHtvaai_4lmV1eyCCUucwGOrd8aUni-ylFt1wNOuMbrXPPPrtc8hntwhyphenhyphenoPGGfY1vutVU40iKl62ewiHoIVJpoPAVQxG0fGoJuJYywjG5L1Kwvzl-NBExPpV23vg0rSOtoY/s320-rw/hulk+web+server+logo.jpg" title="hulk ddos tool" width="320" /></div>
<b>HULK</b> is a <i>web server denial of service tool (DDoS Tool)</i> written for research 
purposes. It is designed to generate volumes of unique and obfuscated 
traffic at a webserver, bypassing caching engines and therefore hitting 
the server's direct resource pool.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The <b>Hulk Web server</b> is a brainchild of Barry Shteiman. This<i> DDoS attack 
tool </i>distinguishes itself from many of the other tools out in the wild. 
According to its creator, the Hulk Web server was born of his conclusion
 that most available DDoS attack tools produced predictable repeated 
patterns that could easily be mitigated. The principle behind the Hulk 
Web server is that a unique pattern is generated at each and every 
request, with the intention of increasing the load on the servers as 
well as evading any intrusion detection and prevention systems. </div>
<h3 style="text-align: justify;">
Some Techniques</h3>
<ul style="text-align: justify;">
<li>Obfuscation of Source Client – this is done by using a list of known
 User Agents, and for every request that is constructed, the User Agent 
is a random value out of the known list</li>
<li>Reference Forgery – the <i>referer</i> that points at the request is obfuscated and points into either the host itself or some major prelisted websites.</li>
<li>Stickiness – using some standard Http command to try and ask the 
server to maintain open connections by using Keep-Alive with variable 
time window</li>
<li>no-cache – this is a given, but by asking the HTTP server for <i>no-cache</i> , a server that is not behind a dedicated caching service will present a unique page.</li>
<li>Unique Transformation of URL – to eliminate caching and other 
optimization tools, I crafted custom parameter names and values and they
 are randomized and attached to each request, rendering it to be Unique,
 causing the server to process the response on each event.</li>
</ul>
<div style="text-align: justify;">
<b>Video Tutorial :: </b><a href="https://www.youtube.com/watch?v=dYjx2VoXjEA" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank">Hulk.zip</a><b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank"> </a></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.sectorix.com/ </div>

HULK (Web Server DDoS) :: Tools

HULK is a web server denial of service tool (DDoS Tool) written for research purposes. It is designed to generate volumes of unique an...

Search Admin Page :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdcso7UY1h5XykvO-IVJgbC7WBbxEMzF5qNNokr9_1Qn_h3XUVzOaC9vF31WIxkYIrecDz-y7AY_03oY1TckohiD4gHeEPavrbbxUXu6xIISF-n-pX8cy3XbCkg9aCHwdwPVMqZ85x5ADg/s1600/admin-page-logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><img alt="admin page logo" border="0" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj97Ace25MACKbume5zTfWwhcH97pPJJSgUkBumonW7ThiP9l85PtQfgOS2xUDDoi1qwpu5I_PzD9J79Lo5Jfy68wAxHwkX8ONP6t6bIuVeXeA2mrmh7aRVkY7u9rYcJKpXkE_Oeu6RStIr/s1600-rw/admin+page.jpg" title="admin page logo" /></div>
<br />
<b>Search Admin Page</b> is a script that written in python. With the help <i>admin page finder script</i> we can find admin panel of website. This codes searches for admin pages, and in the future will also execute SQL/XSS injections and return the outputs.  <br />
  <br />
<b>Download Here ::</b> <a href="https://github.com/ephexeve/Search-admin-page/archive/master.zip" target="_blank">Search Admin Finder (.py)</a><br />
<b>Source ::</b> https://github.com/ephexeve/Search-admin-page

Search Admin Page :: Tools

Search Admin Page is a script that written in python. With the help admin page finder script we can find admin panel of website. This c...

Polyvaccine (Polymorphic Detection Engine) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="http logo toolwar" border="0" height="240" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7Ssb4iktrAq-1DF0nSISPStIk_c880oa92Afo9cJfj4vr1GAGb65APEC0Efd4mJ9Ra_FRt84OkcM3cr48QO7tIb_zq3ABSlag7v7UH3Prm8dS-h5bLjN_8WoXu_DdbNNgrSbRz5l8TfuA/s320-rw/http+logo+toolwar.jpg" title="http logo toolwar" width="320" /></div>
<div style="text-align: justify;">
<b>Polyvaccine </b>is a <i>Polymorphic Detection Engine </i><b>Polyvaccine </b>is a detection software that enables protection to HTTP 
or SIP servers from unknown binary attacks, such as polymorphic exploit 
attacks, and DDoS at application layer.
</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Polyvaccine is supports the next platforms:</b>
</div>
<div style="text-align: justify;">
Linux x86_32(deprecated) x86_64
Freebsd x86_64 (beta)
Polyvaccine have the next main characteristics:
</div>
<div style="text-align: justify;">
Don't need signature updates.
The main three task(detection, protection, filtering) could be placed distributed on several nodes
The architecture is fully distributed (using dbus as main orb).
The integration with other subsystems such as logger, firewalls and so on is easy just by using simple python scripts.
Don't have support for Sql-injection, just any type of binary attacks.
Don't try to replace the functions of a NIDS.
The management task are negligible. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Help ::</b> http://code.google.com/p/polyvaccine/w/list</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://polyvaccine.googlecode.com/files/polyvaccine-0.5.tar.gz" target="_blank">Polyvaccine-0.5.tar.gz</a></div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/polyvaccine/</div>
</div>

Polyvaccine (Polymorphic Detection Engine) :: Tools

Polyvaccine is a Polymorphic Detection Engine Polyvaccine is a detection software that enables protection to HTTP or SIP servers from u...

RAFT (Response Analysis and Further Testing Tool) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="raft screenshot toolwar" border="0" height="234" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimx_ZNEI51-G8nYISMge30CIKHECpzubYpi9piek4_sk1Vx-fycO9fyXjDqnJonrPsM9JtQnHlVYfLJherJ3izDMfofh8e8Io_SK8VHPH0kXza5Dzz389c2CdCyGPhWSsUJwgEhDhOo7Fi/s320-rw/raft+logo+toolwar.png" title="raft screenshot toolwar" width="320" /></div>
<div style="text-align: justify;">
<span style="font-family: Arial,Helvetica,sans-serif;"><b>RAFT</b> is a<i> Response Analysis and Further Testing Tool</i>. <b>RAFT</b> is a testing tool for the identification of vulnerabilities in 
web applications. <b>RAFT</b> is a suite of tools that utilize common shared 
elements to make testing and analysis easier. The tool provides 
visibility in to areas that other tools do not such as various client 
side storage.<b> RAFT</b> uses markup to create templates for fuzz testing. </span></div>
<div style="text-align: justify;">
<b><br /></b></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://raft.googlecode.com/files/RAFT-3.0.1-win32-setup.exe" target="_blank">RAFT 3.0.1.exe</a></div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/raft/</div>
</div>

RAFT (Response Analysis and Further Testing Tool) :: Tools

RAFT is a Response Analysis and Further Testing Tool . RAFT is a testing tool for the identification of vulnerabilities in web appli...

HosProxy (HTTP to SMTP Proxy) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLBxI1RnSP18NLjVt5I0QjbdHaiR-Fshh1E_VEvvQcMdQENM0ZPMBdUK8lm38zoBWPgjKA009eLSPWbOLSyLpX4U7eW8wslkOt5rd-s_cqgMyFp2W4Da3Wgb3Bbgc74tRip8au6LmBAAkn/s1600/hosproxy.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hosproxy :: toolwar" border="0" height="320" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLBxI1RnSP18NLjVt5I0QjbdHaiR-Fshh1E_VEvvQcMdQENM0ZPMBdUK8lm38zoBWPgjKA009eLSPWbOLSyLpX4U7eW8wslkOt5rd-s_cqgMyFp2W4Da3Wgb3Bbgc74tRip8au6LmBAAkn/s1600-rw/hosproxy.png" title="Hosproxy :: toolwar" width="289" /></a></div>
<div style="text-align: justify;">
<b>HosProxy</b> is a <i>HTTP to SMTP proxy</i> or we can say that this is a<i> HTTP tunneler</i>. <b>HosProxy</b> is a tool designed to let you access the web in a LAN without 
internet connection but with access to an E-mail system only.

HoS means Http over SMTP, that is to say, using the E-mail system as 
http-proxy to navigate the web.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>HoSProxy is made up of two parts:</b>

</div>
<div style="text-align: justify;">
<b>HosTunnel</b>: You need an external server (outside LAN) which must 
be running HoSTunnel (with root privileges to listen on port 25) and 
which receives and sends emails with encoded and packaged http 
requests/responses.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>HoSProxy</b>: An internal proxy connected to the web browser, that sends 
HTTP request trough emails via the company SMTP server, and polls for 
responses in the company POP/IMAP server. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here :: <a href="http://www.edge-security.com/soft/hosProxy-1.0.tar.gz" target="_blank">HosProxy1.0</a> </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> </div>
</div>

HosProxy (HTTP to SMTP Proxy) :: Tools

HosProxy is a HTTP to SMTP proxy or we can say that this is a HTTP tunneler . HosProxy is a tool designed to let you access the web ...

ProxyStrike (Web Application Proxy) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge78U7MQQKmBqqrofRPUEQ8S5bYcppmr1mk7FrI-pqVmZXoW3WPniXtP2cfLNP1GdtGlQzq165Y2DSHUK7MACZoWV7Bu4izxybRx63m-unu5dcdFSeHnTLGfhyI6rsmrtNjga-GHs1EE8F/s1600/proxystrike+logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="86" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge78U7MQQKmBqqrofRPUEQ8S5bYcppmr1mk7FrI-pqVmZXoW3WPniXtP2cfLNP1GdtGlQzq165Y2DSHUK7MACZoWV7Bu4izxybRx63m-unu5dcdFSeHnTLGfhyI6rsmrtNjga-GHs1EE8F/s1600-rw/proxystrike+logo.jpg" width="400" /></a></div>
<div style="text-align: justify;">
<b>ProxyStrike v2.1</b> is an active Web Application Proxy.  It's a tool designed to find vulnerabilities while browsing  an  application. It was created because the problems we faced in the  pentests of web applications that depends heavily on Javascript, not  many web scanners did it good in this stage, so we came with this proxy.  </div>
<div style="text-align: justify;">
Right now it has available Sql injection and XSS plugins.  Both  plugins are designed to catch as many vulnerabilities  as we can, it's  that why the SQL Injection plugin is a  Python port of the great  DarkRaver "Sqlibf". </div>
<div style="text-align: justify;">
The process is very simple, ProxyStrike runs  like a proxy listening in port 8008 by default, so you have to browse  the desired web site setting your browser to use ProxyStrike as a proxy,  and ProxyStrike will analyze all the paremeters in background mode. For  the user is a passive proxy because you won't see any different in the  behaviour of the application, but in the background is very active. :) </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/l8kioy4QX7U?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://proxystrike.googlecode.com/files/proxystrike-2.2.tar.bz2">ProxyStrike-2.2.tar.gz</a> (for Linux)<br />
                               <a href="http://proxystrike.googlecode.com/files/ProxyStrike-2.2.zip" target="_blank">ProxyStrike-2.2.zip  </a>(for Windows)<b>  </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.edge-security.com/proxystrike.php</div>
</div>

ProxyStrike (Web Application Proxy) :: Tools

ProxyStrike v2.1 is an active Web Application Proxy. It's a tool designed to find vulnerabilities while browsing an application....

Metagoofil (Metadata Collector) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkQLKtXpb3No1UQcK1FDTNllNO8AstihoEiHYCpHCz53YhwCfTzFkzz9MTTv8yRf-XZSB0inZ2YMtXCal5vSHKmptGpZgHsC_2YQzjwrTnCAcgT_itVzlfjMAeEgoAz4DBKm2rKJOg_DTO/s1600/metagoofil2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Metagoofil :: Toolwar" border="0" height="204" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkQLKtXpb3No1UQcK1FDTNllNO8AstihoEiHYCpHCz53YhwCfTzFkzz9MTTv8yRf-XZSB0inZ2YMtXCal5vSHKmptGpZgHsC_2YQzjwrTnCAcgT_itVzlfjMAeEgoAz4DBKm2rKJOg_DTO/s1600-rw/metagoofil2.png" title="Metagoofil :: Toolwar" width="640" /></a></div>
<div style="text-align: justify;">
<b>Metagoofil</b> is a tool for metadata collector.<b> Metagoofil</b> is an <i>information gathering tool</i> designed for extracting  metadata of public documents (pdf,doc,xls,ppt,docx,pptx,xlsx) belonging  to a target company. </div>
<div style="text-align: justify;">
The tool will perform a search in Google to  identify and download the documents to local disk and then will extract  the metadata with different libraries like Hachoir, PdfMiner and others.  With the results it will generate a report  with usernames, software  versions and servers or machine names that will help Penetration testers  in the information gathering phase. This new version supports local directory scanning. The application has been tested in Linux and OSX. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/y9gVMlSgfZk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://metagoofil.googlecode.com/files/metagoofil-2.2.tar.gz">Metagoofil-2.2.tar.gz</a></div>
<div style="text-align: justify;">
<b>For More Info & Official Website :: </b>http://www.edge-security.com/metagoofil.php </div>
</div>

Metagoofil (Metadata Collector) :: Tools

Metagoofil is a tool for metadata collector. Metagoofil is an information gathering tool designed for extracting metadata of public...

theHarvester :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiIIzokLInF2EID2SzoS48OA8PCcTlfr34cM33fT_P-FcSx516Yp7Dc_2mLeehq2PMvuPEpdtQrpb0bj1QYXdmjybOZc11vcwotYaWEJpF7FpiDFgcvo2D3PIzX2kQyogQ5aRO2aqCH-j8/s1600/theharvester1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="theHarvester :: Tools" border="0" height="232" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiIIzokLInF2EID2SzoS48OA8PCcTlfr34cM33fT_P-FcSx516Yp7Dc_2mLeehq2PMvuPEpdtQrpb0bj1QYXdmjybOZc11vcwotYaWEJpF7FpiDFgcvo2D3PIzX2kQyogQ5aRO2aqCH-j8/s1600-rw/theharvester1.png" title="theHarvester :: Tools" width="640" /></a></div>
<div style="text-align: justify;">
<b>theHarvester</b> is a information gathering suite. The objective of this program is to gather emails, subdomains, hosts,  employee names, open ports and banners from different public sources  like search engines, PGP key servers and SHODAN computer database.</div>
<div style="text-align: justify;">
This tool is intended to help Penetration testers in the early  stages of the penetration test in order to understand the customer  footprint on the Internet. It is also useful for anyone that wants to  know what an attacker can see about their organization.</div>
<div style="text-align: justify;">
This is a complete rewrite of the tool with new features like: </div>
<ul style="text-align: justify;">
<li>Time delays between request </li>
<li>All sources search </li>
<li>Virtual host verifier </li>
<li>Active enumeration (DNS enumeration, Reverse lookups, TLD expansion) </li>
<li>Integration with SHODAN computer database, to get the open ports and banners </li>
<li>Save to XML and HTML </li>
<li>Basic graph with stats </li>
<li>New sources </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/tqqoZYgwUr0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="https://theharvester.googlecode.com/files/theHarvester-2.2a.tar.gz">theHarvester2.2.tar.gz</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.edge-security.com/theharvester.php</div>
</div>

theHarvester :: Tools

theHarvester is a information gathering suite. The objective of this program is to gather emails, subdomains, hosts, employee names, o...

Wfuzz (Bruteforcing Web Applications,) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wfuzz logo" border="0" height="66" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTyDNKxZPiR8vIvwe8wqdIXpWW_PX8rNIqTPrlYgusHa2x8KH7cW0tcwx2yPpeMO3s43rG8ZKpQxpeTYCmW0uzUqftuWNDufFvFzCOCr9jkle9HezFTKo4IT1FDPS_30JfJLMo67nUGLsS/s1600-rw/wfuzz+logo.png" title="wfuzz logo" width="200" /></div>
<div style="text-align: justify;">
<b>Wfuzz</b> is a tool designed for <i>bruteforcing Web Applications</i>, it can be  used for finding resources not linked (directories, servlets, scripts,  etc), bruteforce GET and POST parameters for checking different kind of  injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters  (User/Password), Fuzzing,etc. It performs multiple injection points capability with multiple dictionaries and post, headers, and authentication data brute forcing.</div>
<div style="text-align: justify;">
<b>Some features:</b> </div>
<div style="text-align: justify;">
<pre>* Multiple Injection points capability with multiple dictionaries 
  * Recursion (When doing directory bruteforce)
  * Post, headers and authentication data brute forcing
  * Output to HTML
  * Colored output
  * Hide results by return code, word numbers, line numbers, regex.
  * Cookies fuzzing
  * Multi threading
  * Proxy support
  * SOCK support
  * Time delays between requests
  * Authentication support (NTLM, Basic)
  * All parameters bruteforcing (POST and GET)
  * Multiple encoders per payload
  * Payload combinations with iterators
  * Baseline request (to filter results against)
  * Brute force HTTP methods
  * Multiple proxy support (each request through a different proxy)
  * HEAD scan (faster for resource discovery)
  * Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i,
    Vignette, Coldfusion and many more.</pre>
<pre> </pre>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZKszw17Dv-s?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<pre> </pre>
<pre> </pre>
<b> Download Here :: </b><a href="http://wfuzz.googlecode.com/files/wfuzz-2.0.tgz" target="_blank">wfuzz 2.0.tgz</a><b>
</b>
<b> </b><br />
<b>Official Website :: </b>http://www.edge-security.com/</div>
</div>

Wfuzz (Bruteforcing Web Applications,) :: Tools

Wfuzz is a tool designed for bruteforcing Web Applications , it can be used for finding resources not linked (directories, servlets, s...

Python :: Language

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="python language" border="0" height="135" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpExOoE4hsaGCsRcSrU5xeyA-0ekDDYwliXlXKz7I4JZQ_wbopZ8h1D45vfAz4Af6EdRf1UX5RWro6byJZxKzCSfgVuQZCtFFeWcMAo2iYCSZW-WnHCcOf0ZqWForDfezheQS4gJ1qYFMJ/s400-rw/python-logo.png" title="python language" width="400" /></div>
<div style="text-align: justify;">
<b>Python Language </b>is most powerful scripting language that mostly use by hackers and administrators. <b>Python</b> is a widely used <i>general-purpose</i>, <i>high-level programming language</i>.<sup class="reference" id="cite_ref-AutoNT-34_11-0"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-AutoNT-34-11"></a></sup><sup class="reference" id="cite_ref-12"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-12"></a></sup><sup class="reference" id="cite_ref-13"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-13"></a></sup> Its design philosophy emphasizes code readability, and its syntax allows programmers to express concepts in fewer lines of code than would be possible in languages such as C.<sup class="reference" id="cite_ref-Summerfield_14-0"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-Summerfield-14"></a></sup><sup class="reference" id="cite_ref-15"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-15"></a></sup> The language provides constructs intended to enable clear programs on both a small and large scale.<sup class="reference" id="cite_ref-AutoNT-7_16-0"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-AutoNT-7-16"></a></sup></div>
<div style="text-align: justify;">
<b>Python</b> supports multiple programming paradigms, including object-oriented, imperative and functional programming or procedural styles. It features a dynamic type system and automatic memory management and has a large and comprehensive standard library.<sup class="reference" id="cite_ref-About_17-0"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-About-17"></a></sup></div>
<div style="text-align: justify;">
Like other dynamic languages, Python is often used as a scripting language,  but is also used in a wide range of non-scripting contexts. Using  third-party tools, Python code can be packaged into standalone  executable programs (such as <i>Py2exe</i>, or <i>Pyinstaller<sup class="reference" id="cite_ref-18"><a href="http://en.wikipedia.org/wiki/Python_%28programming_language%29#cite_note-18"></a></sup></i>). Python interpreters are available for many operating systems.</div>
<div style="text-align: justify;">
<i>CPython</i>, the reference implementation of Python, is free and open source software  and has a community-based development model, as do nearly all of its  alternative implementations. CPython is managed by the non-profit Python Software Foundation.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/vatWx6DGBUA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.python.org/download/" target="_blank">Python Latest</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.python.org/</div>
<div style="text-align: justify;">
<b>Source :: </b>Wikipedia</div>
</div>

Python :: Language

Python Language is most powerful scripting language that mostly use by hackers and administrators. Python is a widely used general-purp...

Scapy (Packet Manipulation Program) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixDMYzpCAucl9pKf-Mk09QsfG2IwmA1dJkaN5O6H2a3yQi3yfK4Nb0oif8umCFFqJ1pZG88TIoB9kT0qarpsMD4LDECLTCMP-wPBdmSi29nzXcwh9ildaRJxDl_7UcYSlKRSw3xMJF3g9c/s1600/scapy1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="scapy" border="0" height="234" loading="lazy" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixDMYzpCAucl9pKf-Mk09QsfG2IwmA1dJkaN5O6H2a3yQi3yfK4Nb0oif8umCFFqJ1pZG88TIoB9kT0qarpsMD4LDECLTCMP-wPBdmSi29nzXcwh9ildaRJxDl_7UcYSlKRSw3xMJF3g9c/s320-rw/scapy1.png" title="scapy" width="320" /></a></div>
<div style="text-align: justify;">
<b>Scapy</b> is very powerful interactive <i>packet manipulation program</i>. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more. It can easily handle most classical tasks like <i> scanning, tracerouting, probing, unit tests, attacks or network discovery</i> (it can replace  hping, 85% of <i>nmap, arpspoof, arp-sk, arping, tcpdump, tethereal, p0f,</i> etc.). It also performs  very well at a lot of other specific tasks that most other tools can't handle, like sending invalid frames, injecting your own 802.11 frames,  combining technics (VLAN hopping+ARP cache poisoning, VOIP decoding on  WEP encrypted channel, ...), etc.</div>
<div style="text-align: justify;">
First, with most other tools, you won't build someting the author did not imagine.  These tools have been built for a specific goal and can't deviate much from it.  For example, an ARP cache poisoning program won't let you use double 802.1q encapsulation. Or try to find a program that can send, say, an ICMP packet with padding (I said padding, not payload, see?). In fact, each time you have a new need, you  have to build a new tool.  </div>
<div style="text-align: justify;">
Second, they usually confuse decoding and interpreting. Machines are good at decoding and can help human beings with that. Interpretation is reserved to human beings. Some programs try to mimic this behaviour. For instance they say "this port is open" instead of "I received a SYN-ACK". Sometimes they  are right. Sometimes not. It's easier for beginners, but when you know what you're doing, you keep on trying to deduce what really happened from the program's interpretation to make your own, which is hard because you lost a big amount of information. And you often end up using <tt>tcpdump -xX</tt> to  decode and interpret what the tool missed. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Third, even programs which only decode do not give you all the information they received. The network's vision they give you is the one their author thought was sufficient. But it is not complete, and you have a bias. For instance, do you know a tool that reports the padding ? </div>
<div style="text-align: justify;">
Scapy tries to overcome those problems. It enables you to build exactly the packets you want. Even if I think stacking a 802.1q layer on top of TCP has no  sense, it may have some for somebody else working on some product I don't know.  Scapy has a flexible model that tries to avoid such arbitrary limits.  You're free to put any value you want in any field you want, and stack them like you want. You're an adult after all.  </div>
<div style="text-align: justify;">
In fact, it's like building a new tool each time, but instead of dealing with a hundred line C program, you only write 2 lines of Scapy. </div>
<div style="text-align: justify;">
After a probe (scan, traceroute, etc.) Scapy always gives you the full  decoded packets from the probe, before any interpretation. That means that you  can probe once and interpret many times, ask for a traceroute and look at the padding for instance. </div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/MnPmNXJxDoQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b><br /></b>
<b>Download Here :: </b><a href="http://www.secdev.org/projects/scapy/files/scapy-latest.zip" target="_blank">Scapy Latest Version</a><b><br /></b><br />
<b>Official Website ::</b> http://www.secdev.org/projects/scapy/</div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
</div>

Scapy (Packet Manipulation Program) :: Tools

Scapy is very powerful interactive packet manipulation program . It is able to forge or decode packets of a wide number of protocols, s...

Subscribe to: Posts ( Atom )