ToolWar | Information Security (InfoSec) Tools: Scanner

WAppEx (Web Application Exploiter) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy69Bs634VQydTJdv0uGtFpQKr3ts7eZw6ppQEaiyIybkyhkxNo7FP1mBlS7oZ-MTfnVkAX0YqJg5yifhrgQ90taO_P751HCiUSd3hrXBXP1-qD46VxnlmEySD4yRYu_eyy_XS5xdzAJwO/s1600/wappex+screenshot+toolwar.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WAppEx Screenshot ToolWar" border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy69Bs634VQydTJdv0uGtFpQKr3ts7eZw6ppQEaiyIybkyhkxNo7FP1mBlS7oZ-MTfnVkAX0YqJg5yifhrgQ90taO_P751HCiUSd3hrXBXP1-qD46VxnlmEySD4yRYu_eyy_XS5xdzAJwO/s400/wappex+screenshot+toolwar.png" title="WAppEx Screenshot ToolWar" width="400" /></a></div>
<div style="text-align: justify;">
<b>WAppEx</b> is an integrated <i>Web Application security</i>  assessment and exploitation platform designed with the whole spectrum of  security professionals to web application hobbyists in mind. It  suggests a security assessment model which revolves around an extensible  exploit database. Further, it complements the power with various tools  required to perform all stages of a web application attack.</div>
<div style="text-align: justify;">
The Exploit Database contains the all the logic associated with  trivial fingerprinting, exploitation techniques, and payloads that  address a wide range of web application vulnerabilities with the  emphasis being on high-risk and zero-day vulnerabilities.</div>
<div style="text-align: justify;">
Some of the vulnerabilities already bundled within the Exploit  Database include Local File Disclosure (LFD), Local File Inclusion  (LFI), Remote File Inclusion (RFI), SQL Injection (SQLI), Remote OS  Command Execution (RCE), and Server-side Code Injection (SCI). WAppEx  can detect these vulnerabilities in a target, take full advantage of it,  and through neatly designed payload codes get as much access to the  exploited target as possible in as short a time as possible. Some of the  payloads included within the database are various reverse shells,  arbitrary code execution, command execution, arbitrary file upload…</div>
<div style="text-align: justify;">
Since all the attack logic rests in the form of scripts within the  Exploit Database, it is easily extensible, flexible and updatable  through community servers. Users, too, can add mature, sophisticated  exploits and payloads in the same fashion. The database grows on a daily  basis, and our dedicated team of research and development are working  non-stop to maintain the richest, most up-to-date aggregate of exploits.  The number of exploits is soon bound to surpass hundreds. Meanwhile,  users can share their own created exploits and payloads with the  community and contribute to this growing momentum.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/6IXFN5fTvNk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://itsecteam.com/counter/?files=WAppEx/WAppEx2.0.exe" target="_blank">WAppEx 2.0.exe</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.itsecteam.com/ </div>
</div>

WAppEx (Web Application Exploiter) :: Tools

WAppEx is an integrated Web Application security assessment and exploitation platform designed with the whole spectrum of security p...

HexInject (Packet Injector and Sniffer) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzK_BWuo2OLgYHxEDEesWWuhQmgxt1u0PEIyEohkdj3RWfavzjVtjH2twPtDOXnHhiV2X7msomnkjgMAhBLW39M01tbrSi1xfPu88vKCzBBcCCz2gl8yWWG-H5RLVu-JR_T68rHRTMs3pc/s1600/hexinject+screenshot+toolwar.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="hexinject screenshot toolwar" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzK_BWuo2OLgYHxEDEesWWuhQmgxt1u0PEIyEohkdj3RWfavzjVtjH2twPtDOXnHhiV2X7msomnkjgMAhBLW39M01tbrSi1xfPu88vKCzBBcCCz2gl8yWWG-H5RLVu-JR_T68rHRTMs3pc/s320/hexinject+screenshot+toolwar.png" title="hexinject screenshot toolwar" width="294" /></a></div>
<div style="text-align: justify;">
<b>HexInject</b> is a very versatile <b>Packet Injector and Sniffer</b>, that provide a command-line framework
            for raw network access.<br />
<br />
It's designed to <b>work together</b> with others
            command-line utilities, and for this reason it facilitates
            the creation of powerful shell scripts capable of reading,
            intercepting and modifying network traffic in a transparent
            manner.</div>
<div style="text-align: justify;">
<b>HexInject</b> has now reached version <b>1.5</b> (<i>Feb 21
                2013</i>) and a few changes have been made. In
              particular the <i>features have been redistributed</i>
              between <b>multiple tools</b>, following the unix
              philosophy.</div>
<ul style="text-align: justify;">
<li><b>hexinject</b> remains the main sniffer and
                injector.<br />
              </li>
<li><b>prettypacket</b> disassembles raw packets (received
                on its standard input) and print their field. It can
                also print example packets (useful if you want to know
                the structure of an header).<br />
              </li>
<li> <b>hex2raw</b> converts hexstring (the textual
                format used by hexinject) to raw data, and vice-versa. A
                basic xxd
                tool.<br />
              </li>
<li><b>packets.tcl</b> is an experimental packet forger,
                written in TCL. It uses a simple packet representation
                format based on <b>APD</b> (http://wiki.hping.org/26).
                The output of the tool can be <i>piped to hexinject raw
                  inject mode</i>.</li>
</ul>
<b>Download Here :: </b><a href="http://sourceforge.net/projects/hexinject/files/hexinject-1.5/hexinject-1.5.tar.gz/download" target="_blank">HexInject v1.5.tar.gz</a><br />
<b>Guide :: </b>http://hexinject.sourceforge.net/hexinject_introduction.pdf  <br />
<b>Source ::</b> http://hexinject.sourceforge.net/</div>

HexInject (Packet Injector and Sniffer) :: Tools

HexInject is a very versatile Packet Injector and Sniffer , that provide a command-line framework for raw network access. ...

Wifislax (Wireless Security and Forensic) :: Distribution

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wifislax logo toolwar" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF4P8a1KMCdkVYaPLGKUNXWKY5r3RBA-jVAQk9ZIyE-tZcQERTe91zNkfqs0cpT_VP1Q7348n4Q94pxQl26E0ZF1jgopk13oNTCA0WbhaOoeuBcukeJmNEsZDBOZNYsyOXQ-ewywl45zSr/s1600/wifislax+logo+toolwar.png" title="wifislax logo toolwar" /></div>
<div style="text-align: justify;">
Wifislax is a Slackware-based live CD containing a variety of security  and forensics tools. The distribution's main claim to fame is the  integration of various unofficial network drivers into the Linux kernel,  thus providing out-of-the-box support for a large number of wired and  wireless network cards. </div>
<div style="text-align: justify;">
<a href="http://distrowatch.com/wifislax"></a> Wifislax  4.6, an updated build of the Slackware-based live CD with a collection  of security and forensics tools, has been released. This is mostly a  maintenance release to fix a serious bug in Reaver, a WiFi passphrase  brute-force attack utility, the use of which resulted in segmentation  fault in the previous release of Wifislax. The Linux kernel has been  updated to version 3.6.11 with a number of new drivers to support  tablets, touchscreen devices, multi-function printers, etc. The KDE  desktop has been upgraded to version 4.10.5 and an option to boot into a  lighter Xfce desktop remains available. Other package upgrades include  Firefox 22.0, OpenJDK 7u25 and Wireshark 1.10.0, as well as the latest  version of the Flash browser plugin. A number of new programs, such as  nano and texinfo, have been added. The release announcement  which contains a full changelog is in Spanish only, but the  distribution itself can boot into either Spanish or English localisation  of the KDE or Xfce desktops. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KOy6JmoxlYM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here ::</b> <a href="http://www.downloadwireless.net/isos-fase-testing/wifislax-current/wifislax-4.7-22092013.iso" target="_blank">Wifislax 4.7 ISO</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.wifislax.com/</div>
</div>

Wifislax (Wireless Security and Forensic) :: Distribution

Wifislax is a Slackware-based live CD containing a variety of security and forensics tools. The distribution's main claim to fame i...

OWASP Bricks (Web Application Security Learning Platform) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="owasp bricks logo toolwar" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxsW3jxRxCdfOllufBaZ0_uBwcmN-L7j2Fru8xOc1lTFeRLUMkcvyN_lnUYOrjG-Cv-Kr7b_qYk_j1a9LcRAikKyTgFkdJ9FQiNFFmJxMlrHdzndXtyTN6QhxPsCgBWGFX6oyy1lcxLLeR/s200/owasp+bricks+logo+toolwar.png" title="owasp bricks logo toolwar" width="199" /></div>
<div style="text-align: justify;">
<b>OWASP Bricks</b> is a <i>Web application security learning platform</i> built on PHP and MySQL. <b>Bricks</b> is a deliberately vulnerable web application built on PHP and MySQL. The project focuses on variations of commonly seen application security vulnerabilities and exploits. Each 'brick' has some sort of vulnerability which can be exploited using tools (Mantra and ZAP). The mission is to 'break the bricks' and thus learn the various aspects of web application security.<br />
<br />
<b>Bricks</b> is a web application security learning platform built on PHP and MySQL. The project focuses on variations of commonly seen application security issues. Each 'Brick' has some sort of security issue which can be leveraged manually or using automated software tools. The mission is to 'Break the Bricks' and thus learn the various aspects of web application security.<br />
<br />
<b>Bricks</b> is a completely free and open source project brought to you by OWASP. The complete documentation and instruction videos can also be accessed or downloaded for free. Bricks are classified into three different sections: login pages, file upload pages and content pages.</div>
<b></b><br />
<b></b><br />
<b></b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/j5I0wPvQxTg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/mCo6ajvBv50?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>D</b><b>ownload Here :: </b><a href="http://sourceforge.net/projects/owaspbricks/files/Atrai%20-%201.8/OWASP%20Bricks%20-%20Atrai.zip/download" target="_blank">OWASP Bricks v1.8</a><br />
<b>Official Website :: </b>http://sechow.com/<b><br /></b></div>

OWASP Bricks (Web Application Security Learning Platform) :: Framework

OWASP Bricks is a Web application security learning platform built on PHP and MySQL. Bricks is a deliberately vulnerable web applicat...

Revenssis (Penetration Testing Suite for Android Devices) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
 <img alt="revenssis logo toolwar" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5akPP1gYogJsMY0bpiMUplwpdcoAnNdS8L6KM7gDgc3SKxos7q-Nq9vqTkjw6087MYguSsXpZd_73Azac59n9vrG46CPIYY881-rMZxH42vQUcK0mtCLM0EZlZuMtE4t2Owqa8liUPc55/s320/revenssis+logo+toolwar.jpg" title="revenssis logo toolwar" width="213" /></div>
<div style="text-align: justify;">
<b>Revenssis</b> is a complete <i>Penetration testing suite for Android devices</i>. Nicknamed as the "Smartphone Version of Backtrack", Revenssis  Penetration Suite is a set of all the useful types of tools used in  Computer and Web Application security. Tools available in it include:  Web App scanners, Encode/Decode & Hashing tools, Vulnerability  Research Lab, Forensics Lab, plus the must-have utilities (Shell, SSH,  DNS/WHOIS Lookup, Traceroute, Port Scanner, Spam DB Lookup, Netstat...  etc). All these fitting in an application approx. 10MB (post  installation). </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://revenssis-penetration-testing-suite.googlecode.com/files/Revenssis.apk" target="_blank">Revenssis.apk</a> & (Available at Play Store)</div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/revenssis-penetration-testing-suite/</div>
</div>

Revenssis (Penetration Testing Suite for Android Devices) :: Tools

Revenssis is a complete Penetration testing suite for Android devices . Nicknamed as the "Smartphone Version of Backtrack",...

Yara (Malware Identification and Classification) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="yara logo toolwar" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKAYkHKynInHb6UvL_uNSYygzssfvA8Usl6A5CEKTElTLxrhw14_GJ2R_-QH8rkImx08HK67pJi4trQH6Osr7rRBGdHk631OfVQLHOgusXNlZKrc_EdCURJUhlOA8pc3i1axVRFoAyaLpH/s200/yara+logo+toolwar.png" title="yara logo toolwar" width="180" /></div>
<div style="text-align: justify;">
<b>YARA</b> is a tool aimed at helping malware researchers to identify and  classify malware  samples. With <b>YARA</b> you can create descriptions of  malware families based on textual or  binary patterns contained on  samples of those families. Each description consists of a set of strings  and a Boolean expression which determines its logic.</div>
<div style="text-align: justify;">
This is just a simple example, more complex and powerful rules can be  created by using binary strings with wild-cards, case-insensitive text  strings, special operators, regular expressions and many other features  that you can find explained in <b>YARA's </b>documentation. </div>
<div style="text-align: justify;">
<b>YARA</b>  is multi-platform, running on Windows, Linux and Mac OS X, and can be  used through its command-line interface or from your own Python scripts  with the yara-python extension.  </div>
<div style="text-align: justify;">
Python users can also use yara-ctypes  by Michael Dorman. He has also written a multi-threaded command-line  YARA scanner based on yara-ctypes that can exploit the benefits of  current multi-core CPUs when scanning big file collections. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/JyS3bnGBErw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here ::</b> <a href="http://yara-project.googlecode.com/files/yara-1.7.tar.gz" target="_blank">Yara 1.7.tar.gz</a> (for Linux)<br />
                               <a href="http://yara-project.googlecode.com/files/yara-1.7-win32.zip" target="_blank">Yara 1.7 win32.zip</a> (for Windows)</div>
<div style="text-align: justify;">
<b>Source :: </b>http://code.google.com/p/yara-project/ </div>
</div>

Yara (Malware Identification and Classification) :: Tools

YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions ...

Web-Sorrow (Web Security Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="web-sorrow logo toolwar" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnOHBqWrrM6YdiWnHWuSXu1hw29NNTVhSAjq4r1DQIgKad8aYZSfNdcOvACdnf8mUPaNbFAYLbM1Tt853Lb_tpG0qgN_XQLCNnSFMsuNr8A1JT216rUO42Z3DHdJwp6-OoBk1VmU4cdoRt/s1600/websorrow+logo+toolwar.jpg" title="web-sorrow logo toolwar" /></div>
<div style="text-align: justify;">
<b>Web-Sorrow </b>is a<span itemprop="description"> <i>versatile security scanner</i> for the <i>information disclosure and fingerprinting</i> phases of pentesting.</span><b>Web-Sorrow</b> is a perl based tool for misconfiguration, version detection,   enumeration,  and server information scanning. It's entirely focused  on Enumeration and collecting Info  on the target server. <b>Web-Sorrow</b> is a  "safe to run" program, meaning it is not  designed to be an exploit or  perform any harmful attacks. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: large;">Basic overview of capabilities:</span></div>
<ul style="text-align: justify;">
<li><b>Web Services:</b> a CMS and it's version number, Social media widgets and buttons, Hosting provider, CMS plugins, and favicon fingerprints.</li>
<li><b>Authentication areas:</b> logins, admin logins, email webapps.</li>
<li><b>Bruteforce:</b> Subdomains, Files and Directories.</li>
<li><b>Stealth:</b> with -ninja you can gather valuable info on the target with as few as 6 requests, with -shadow you can request pages via google cache instead of from the host.</li>
<li><b>AND MORE:</b> Sensitive files, default files, source disclosure, directory indexing, banner grabbing (see below for full capabilities) </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/1n1zKEi6BF8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://web-sorrow.googlecode.com/files/Web-Sorrow_v1.5.0FINAL%28patched_version%29.zip" target="_blank">Web-Sorrow 1.5.0.zip</a><br />
<b>Source ::</b> http://code.google.com/p/web-sorrow/<br />
<ul style="text-align: justify;">
</ul>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>

Web-Sorrow (Web Security Scanner) :: Tools

Web-Sorrow is a versatile security scanner for the information disclosure and fingerprinting phases of pentesting. Web-Sorrow is a p...

Vega (Web Vulnerability Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="vega scanner logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitqDoBTtkOWZbJB0V8gJz3IkgP9erP4PYe2g0GG_Yy1h0owqXN7iIoOt6_0ZGHotmGgJUAsjT1XP8PoV330tgVjFZjEvyHtvN7NybCqt60IAafpqq3fE7IoBM0cA88uyjM6qtiEiQbLOW9/s1600/vega+scanner+logo.JPG" title="vega scanner logo" /></div>
<div style="text-align: justify;">
<b>Vega</b> is a free and open source scanner and testing platform to test the  security of web applications. Vega can help you find and validate SQL  Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive  information,        and other vulnerabilities. It is written in Java, GUI based, and  runs on <b>Linux</b>,        <b>OS X</b>, and <b>Windows</b>.       <br />
<br />
Vega includes an automated scanner for quick tests and an  intercepting proxy for tactical inspection. The Vega scanner finds XSS  (cross-site scripting), SQL injection, and other vulnerabilities.       Vega can be extended using a powerful API in the language of the  web: <b>Javascript</b>.<br />
<div id="modules">
<h3>
Modules</h3>
<ul id="modulesList">
<li>Cross Site Scripting (XSS)</li>
<li>SQL Injection</li>
<li>Directory Traversal</li>
<li>URL Injection</li>
<li>Error Detection</li>
<li>File Uploads</li>
<li>Sensitive Data Discovery</li>
</ul>
<div id="core">
<h3>
Core</h3>
<ul id="coreList">
<li>Automated Crawler and Vulnerability Scanner</li>
<li>Consistent UI</li>
<li>Website Crawler</li>
<li>Intercepting Proxy</li>
<li>SSL MITM</li>
<li>Content Analysis</li>
<li>Extensibility through a Powerful Javascript Module API</li>
<li>Customizable alerts</li>
<li>Database and Shared Data Model</li>
</ul>
</div>
</div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/X3BGO9U8zuU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.subgraph.com/downloads/VegaSetup32.exe">Microsoft Windows 32-bit (x86)</a><br />
                               <a href="http://www.subgraph.com/downloads/VegaBuild-linux.gtk.x86.zip">Linux GTK 32-bit Intel</a><br />
                               <a href="http://www.subgraph.com/downloads/Vega.dmg">Mac OS X 32-bit Intel</a>  <b> </b><br />
<b>Official Website :: </b>http://www.subgraph.com/ 
</div>
</div>

Vega (Web Vulnerability Scanner) :: Tools

Vega is a free and open source scanner and testing platform to test the security of web applications. Vega can help you find and valid...

WebSploit (Social Engineering) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="websploit toolwar" border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEje9oakw4MwuEK6iy3HIek2xj5mb_LsZOay9_XMRBRyU35SQN-xtsA4v-gwp4fWeo1cV1b8_dEqn9HhojRyIDzb7nJoYNan32e9z42TsFIncTz5P9HCekjl9StYeAHMUqCPD7VGIrOiOAZI/s200/websploit+toolwar.png" title="websploit toolwar" width="200" /></div>
<div style="text-align: justify;">
<b>WebSploit</b> is a <b>Framework</b> for Social Engineering Works, Scan, Crawler & Analysis Web, Automatic Exploiter, Network Attacks and done a lot things.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
[+]Autopwn - Used From Metasploit For Scan and Exploit Target Service</div>
<div style="text-align: justify;">
[+]wmap - Scan,Crawler Target Used From Metasploit wmap plugin</div>
<div style="text-align: justify;">
[+]format infector - inject reverse & bind payload into file format</div>
<div style="text-align: justify;">
[+]phpmyadmin Scanner</div>
<div style="text-align: justify;">
[+]LFI Bypasser</div>
<div style="text-align: justify;">
[+]Apache Users Scanner</div>
<div style="text-align: justify;">
[+]Dir Bruter </div>
<div style="text-align: justify;">
[+]admin finder </div>
<div style="text-align: justify;">
[+]MLITM Attack - Man Left In The Middle, XSS Phishing Attacks</div>
<div style="text-align: justify;">
[+]MITM - Man In The Middle Attack</div>
<div style="text-align: justify;">
[+]Java Applet Attack</div>
<div style="text-align: justify;">
[+]MFOD Attack Vector </div>
<div style="text-align: justify;">
[+]USB Infection Attack </div>
<div style="text-align: justify;">
[+]ARP Dos Attack</div>
<div style="text-align: justify;">
[+]Web Killer Attack</div>
<div style="text-align: justify;">
[+]Fake Update Attack</div>
<div style="text-align: justify;">
[+]Fake Access point Attack</div>
<div style="text-align: justify;">
[+]Wifi Honeypot</div>
<div style="text-align: justify;">
[+]Wifi Jammer</div>
<div style="text-align: justify;">
[+]Wifi Dos</div>
<div style="text-align: justify;">
[+]Bluetooth POD Attack</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/E80oxU4qH_k?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/websploit/files/latest/download" target="_blank">WebSploit Framework v2.0.4</a> (for Linux)<br />
<b>Source ::</b> http://sourceforge.net/projects/websploit/</div>

WebSploit (Social Engineering) :: Framework

WebSploit is a Framework for Social Engineering Works, Scan, Crawler & Analysis Web, Automatic Exploiter, Network Attacks and done...

Plecost (Wordpress Fingerprinting) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="plecost toolwar" border="0" height="125" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBHuory4E0AoQuGVKSzfeD2m0Sg2jDwQH2-3a65iMNtFyqZWvaHXt4atW0QBG1toIQHMJ9k_LJMY0XxohKsnpaV_TDkE3duLnLEzYs6hcT0cojeU1vZD4MPCJvJZrzEtKiFfvgmc1C8-en/s200/logo_plecost.jpg" title="plecost toolwar" width="200" /></div>
<div style="text-align: left;">
<span id="goog_705127854"></span><span id="goog_705127855"></span><br /></div>
<div style="text-align: justify;">
<b>Plecost  </b>is a <i>Wordpress finger printer tool</i>, plecost search and retrieve  information  about the plugins versions installed in Wordpress systems.  It can analyze  a single URL or perform an analysis based on the results  indexed by Google.  Additionally displays CVE code associated with each  plugin, if there. </div>
<div style="text-align: justify;">
<b>Plecost </b>retrieves the information contained on  Web sites supported by  Wordpress, and also allows a search on the  results indexed by Google. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZoKlR2UhgWY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: <a href="http://plecost.googlecode.com/files/plecost-0.2.2-9-beta.tar.gz" target="_blank">Plecost 0.2.2.9beta </a></b>(for Linux)</div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.iniqua.com/ </div>
</div>

Plecost (Wordpress Fingerprinting) :: Tools

Plecost is a Wordpress finger printer tool , plecost search and retrieve information about the plugins versions installed in Wordpr...

Owasp Mantra (Browser Based Web Security Framework) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Owasp Mantra logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRrctdBWOhmYDQr246V7zjjW9kQoBxnS08108GujNouk7J1REEDUIjd6xdFgb7tlZvc9AGb1xJ1_E1wXBIkhT4Rg6ILFmQmUQkgns4JDBPiUh4Juv9Xy6p3vvVRuT2Wt2AqC8o3fI5OSGf/s1600/Owasp+Mantra+Logo.jpg" title="Owasp Mantra logo" /></div>
<b></b><br />
<div style="text-align: justify;">
<b><span itemprop="description">OWASP Mantra</span></b><span itemprop="description"> is a  Free and Open Source <i>Browser Based Web Security Framework</i></span><b>. OWASP Mantra</b> is a collection of free and open source  tools integrated into a web browser, which can become handy for  students, penetration testers, web application developers,security  professionals etc. It is portable, ready-to-run, compact and follows the  true spirit of free and open source software. </div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>OWASP Mantra</b>  is lite, flexible, portable and user friendly with a nice graphical  user interface. You can carry it in memory cards, flash drives, CD/DVDs,  etc. It can be run natively on Linux, Windows and Mac platforms. It can  also be installed on to your system within minutes. Mantra is  absolutely free of cost and takes no time for you to set up. </div>
<div style="text-align: justify;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/CRJkGZlV6Vk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.exe/download" target="_blank">OWASP Mantra</a> (for Windows)<b>
</b></div>
<div style="text-align: justify;">
                              <a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2032.tar.gz/download" target="_blank"> OWASP Mantra</a> (for Linux)<b> </b></div>
<div style="text-align: justify;">
                              <a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.mpkg.zip/download" target="_blank"> OWASP Mantra </a>(for MAC)<b> </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b>  http://www.getmantra.com/</div>
</div>

Owasp Mantra (Browser Based Web Security Framework) :: Framework

OWASP Mantra is a Free and Open Source Browser Based Web Security Framework . OWASP Mantra is a collection of free and open source ...

WebVulScan :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="webvulscan logo" border="0" height="81" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9FLujpJDiKSgCxd2omhEfyclXF4hvby5jnLlqtMync5SkKiG0L0vl9k5Q8U8Bcvae_LHuY-IRdDxwntDNxTuzxnreDQb76xx2Be-jBECYlRfWn_Adw-ZQp9g01-H_oEeg1B1jcd2SdgzA/s1600/webvulscan+logo.png" title="webvulscan logo" width="320" /></div>
<div style="text-align: justify;">
<b>WebVulScan</b>
 is a <i>web application vulnerability scanner</i>. It is a web application 
itself written in PHP and can be used to test remote, or local, web 
applications for security vulnerabilities. As a scan is running, details
 of the scan are dynamically updated to the user. These details include 
the status of the scan, the number of URLs found on the web application,
 the number of vulnerabilities found and details of the vulnerabilities 
found.  </div>
<div style="text-align: justify;">
After a scan is complete, a detailed PDF report is 
emailed to the user. The report includes descriptions of the 
vulnerabilities found, recommendations and details of where and how each
 vulnerability was exploited. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>The vulnerabilities tested by WebVulScan are:</b><br /> </div>
<ul style="text-align: justify;">
<li>Reflected Cross-Site Scripting</li>
<li>Stored Cross-Site Scripting</li>
<li>Standard SQL Injection</li>
<li>Broken Authentication using SQL Injection</li>
<li>Autocomplete Enabled on Password Fields</li>
<li>Potentially Insecure Direct Object References</li>
<li>Directory Listing Enabled</li>
<li>HTTP Banner Disclosure</li>
<li>SSL Certificate not Trusted</li>
<li>Unvalidated Redirects</li>
</ul>
<div style="text-align: justify;">
<b>Features:</b><br /> </div>
<ul style="text-align: justify;">
<li>Crawler: Crawls a website to identify and display all URLs belonging to the website.</li>
<li>Scanner: Crawls a website and scans all URLs found for vulnerabilities.</li>
<li>Scan History: Allows a user to view or download PDF reports of previous scans that they performed.</li>
<li>Register: Allows a user to register with the web application.</li>
<li>Login: Allows a user to login to the web application.</li>
<li>Options: Allows a user to select which vulnerabilities they wish to test for (all are enabled by default).</li>
<li>PDF Generation: Dynamically generates a detailed PDF report.</li>
<li>Report Delivery: The PDF report is emailed to the user as an attachment.</li>
</ul>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="https://webvulscan.googlecode.com/files/webvulscan_v0.12.zip" target="_blank">WebVulScan v0.12</a></div>
<div style="text-align: justify;">
<b>Source ::</b> https://code.google.com/p/webvulscan/</div>
</div>

WebVulScan :: Tools

WebVulScan is a web application vulnerability scanner . It is a web application itself written in PHP and can be used to test remote,...

Wavsep (Web Application Vulnerability Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wavsep toolwar" border="0" height="331" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMSoRbPxK7O4Yj9z_uKOjtWacWbm1y998Bf2-i_alefuOMauXKrwgdJxF8pcp09hpZ7d49PMUzgrTmZ7eRH199RCw1d4rlsbz6PmOvb-bY3Au-exVkvJpmGS6OVdOe61ns-Q5MZPGO89_r/s1600/Wavsep+logo.png" title="wavsep toolwar" width="640" /></div>
<div style="text-align: justify;">
<b>Wavsep</b> is a <b>Web Application Vulnerability Scanner Evaluation Project.</b> and <b>Wavsep</b> is a <i>vulnerable web application</i> designed to help assessing the features,
 quality and accuracy of web application vulnerability scanners. </div>
<div style="text-align: justify;">
This
 evaluation platform contains a collection of unique vulnerable web 
pages that can be used to test the various properties of web application
 scanners. </div>
<div style="text-align: justify;">
Although some of the test cases are vulnerable to additional exposures, 
the purpose of each test case is to evaluate the detection accuracy of 
one type of exposure, and thus, “out of scope” exposures should be 
ignored when evaluating the accuracy of vulnerability scanners.  </div>
<div style="text-align: justify;">
<b><br /></b></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="https://wavsep.googlecode.com/files/wavsep-v1.2-war-linux.zip" target="_blank">Wavsep 1.2</a> (for Linux)<b></b></div>
<div style="text-align: justify;">
                               <a href="https://wavsep.googlecode.com/files/wavsep-v1.2-war.zip" target="_blank">Wavsep 1.2</a> (for Windows)<b><br /></b></div>
<div style="text-align: justify;">
<b>Read More :: </b>https://code.google.com/p/wavsep/</div>
</div>

Wavsep (Web Application Vulnerability Scanner) :: Tools

Wavsep is a Web Application Vulnerability Scanner Evaluation Project. and Wavsep is a vulnerable web application designed to help as...

WebSecurify (Web Application Security Testing Suite) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="WebSecurify Logo" border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6oDiePzFfVKkO_hIeIuuwUrY6JK_X5Dj2Qixb9RxFDbSH9HJQhnKNdbrUrhYJgkZvvGLDCGDwSM_WrRrnjNY0SljItRogRVQLCbGVrWM0Lj4E5vwOcNvmid67GVlEJUmenmwit6QPaN3P/s1600/Websecurify+logo.jpg" title="WebSecurify Logo" width="320" /></div>
<div style="text-align: justify;">
<b>Websecurify</b> is a <i>web application security testing</i> suite  designed from the ground up to provide the best combination of automatic  and manual vulnerability testing technologies. It is available for all  major desktop platforms including mobile devices and web via our online  security suite. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Main features of <b>Websecurify</b> include: </div>
<ul style="text-align: justify;">
<li>Simple to use user interface. </li>
<li>World-class analytical and scanning technology. </li>
<li>Available for all major operating systems (Windows, Mac, Linux) including mobile devices (iOS, Android). </li>
<li>Easily extensible with the help of add-ons and plugins. </li>
<li>Moduler and reusable design. </li>
<li>Built-in internationalization support.  </li>
<li>Powerful manual testing tools and helper facilities included. </li>
<li>Flexible, hassle-free licensing. </li>
<li>Innovative in every way.  </li>
<li>Frequent updates. </li>
<li>Much, much more. </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/PMT_A7YtEAs?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="https://websecurify.googlecode.com/files/websecurify-for-firefox-2.1.0.xpi" target="_blank">WebSecurify 2.1.0</a> (for Firefox)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.tar.gz" target="_blank">WebSecurify Suite 1.0.0</a> (for Linux)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.exe" target="_blank">WebSecurify Suite 1.0.0</a> (for Windows)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.dmg" target="_blank">WebSecurify Suite 1.0.0</a> (for MAC)<br />
<b>Official Website :: </b>http://www.websecurify.com/<br />
<ul style="text-align: justify;">
</ul>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
</div>
</div>

WebSecurify (Web Application Security Testing Suite) :: Tools

Websecurify is a web application security testing suite designed from the ground up to provide the best combination of automatic and...

Zed Attack Proxy ( Zaproxy ) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="ZAProxy Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmu0fkacdAzN-GWTtIyI1XINok6jSC1qVPlNiE4-TnxAZ1UesBgsD1o8zq0598LWwrn0_K48Bo-3AMzgdRMhxFYo6Sh3Ze0nN4RV2sTOxOO0ZL0ixnKLkIUryAOAPhyphenhypheng44Kda8MJxtYJxR/s1600/Zed+Attack+Proxy+Logo.png" title="ZAProxy logo" /></div>
<div style="text-align: justify;">
The <b>Zed Attack Proxy (ZAP)</b> is an easy to use integrated penetration  testing tool for finding <b>vulnerabilities in web applications.</b> It is designed to be used by people with a wide range of security  experience and as such is ideal for developers and functional testers  who are new to penetration testing. <b>ZAProxy</b> provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. </div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/a-lJafBdAeM?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b>
</b> <b> </b><br />
<b>Download Here :: </b><a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Mac_OS_X.zip" target="_blank">ZAP 2.2.1 MAC-OS.zip</a> (for MAC OS)
                          <br />
                               <a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Windows.exe" target="_blank">ZAP 2.2.1.exe </a>(for Windows) 
                           <br />
                               <a href="http://zaproxy.googlecode.com/files/ZAP_2.2.1_Linux.tar.gz" target="_blank">ZAP 2.2.1.tar.gz</a> (for Linux)
<b> </b><br />
<b>Official Website ::</b> https://www.owasp.org/</div>

Zed Attack Proxy ( Zaproxy ) :: Tools

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It ...

HconSTF Firebase :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="HconSTF Firebase logo" border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie59x9tAQk0z4gWdFP2_zVG1GYhru2Q-ffsIeHFz0fVVWbmFlESGeDp_0EaPo_5EBjV7q8jPR-ll7DpTFN_Ry2bbhg6_OaVIhavnDlThkzqn_f9SWnf0Z5zRxonm4_2do3wWOoioBCWC6d/s640/HconSTF+Logo.jpg" title="HconSTF Firebase logo" width="640" /></div>
<br />
<div style="text-align: justify;">
<b>HconSTF Firebase</b> is Fully 
Customizable, Versatile in Usage can be used in many Web related hacking
 needs, Simple and easy to use interface, small in size and light on 
resources. contains hundreds of features for :</div>
<ul style="text-align: justify;">
<li>Web Penetration Testing</li>
<li>Web Exploits Development</li>
<li>Web Malware Analysis</li>
<li>OSINT & Cyber spying </li>
</ul>
<div style="text-align: justify;">
Very comprehensive and plenty of tools for exploitation and supports verbose debugging features for Web Exploit Development. <span style="clear: left; float: left; margin-top: 0px; margin-top: 0px; position: relative; z-index: 10;"></span>
<b>HconSTF</b> <b>Firebase</b> contains blend of online and offline tools for Pentesting called 'WebUI'. includes scanners, encoders, and much more. IDB is Integrated database with huge amount of Web payload. Helps in many Open source intelligence based tasks like</div>
<ul style="text-align: justify;">
<li>Passive Web & Network Reconnaissance</li>
<li>Doxing <br /></li>
<li>Cyber Spying</li>
<li>Hash cracking</li>
</ul>
<div style="text-align: justify;">
Encoding / Decoding & hashing Features and tools, supports wide 
variety of formats, character set and algorithms for making payloads 
undetectable. Darknets and proxies integrated, Spoofing tools. supports integration 
with many decoy options, includes many tools for proxies and anonymizing
 networks.  </div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b> PDF Tutorials :: </b><a href="http://www.hcon.in/uploads/1/8/1/9/1819392/quick_malware_analysis_using_hconstf.pdf" target="_blank">Quick Malware Analysis Using HconSTF</a><br />
                              <a href="http://www.hcon.in/uploads/1/8/1/9/1819392/http_headers_spoofing_using_hconstf.pdf" target="_blank">HTTP Headers Spoofing Using HconSTF</a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://sourceforge.net/projects/hconframework/files/HconFramework-Fire/HconSTF_0.5_Prime/HconSTF_v0.5_Prime.exe" target="_blank">Firebase_0.5.exe</a><b> </b>(for Windows)<b> </b></div>
<div style="text-align: justify;">
                               <a href="http://sourceforge.net/projects/hconframework/files/HconFramework-Fire/HconSTF_0.5_Prime/HconSTF_v0.5_Linux_x86.tar.bz2" target="_blank">Firebase_0.5.tar.bz2</a> (for Linux)<b><br /></b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.hcon.in/</div>
</div>

HconSTF Firebase :: Framework

HconSTF Firebase is Fully Customizable, Versatile in Usage can be used in many Web related hacking needs, Simple and easy to use int...

Retina Network Security Scanner :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Retina Network Security Scanner " border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiubNWtpBLmbJ5zJZSm-gdz7mA4T5y-QACUD_rdWidlyjJ7_VlIZN5D2o2FIEvy5sND_8Gdpb0i-B3KgskplhrSDJDXXGI2dOx-jt_KdGbygaLWWfWIftLGqTijaSPk9XAsdsDdCRzyiKZK/s1600/retina_scanner.gif" title="Retina Network Security Scanner " /></div>
<h3 style="text-align: justify;">
      Retina Network Security Scanner: Integrated Network, Web and Virtual Vulnerability Assessment ::</h3>
<div style="text-align: justify;">
With over 10,000 deployments since 1998, BeyondTrust® <b>Retina  Network Security Scanner</b> is the most sophisticated vulnerability  assessment solution on the market. Available as a standalone application or as part of the  Retina CS unified vulnerability management platform, Retina Security Scanner enables you to efficiently identify IT exposures and prioritize  remediation enterprise-wide. Retina Network Security Scanner, the  industry’s most mature and effective vulnerability scanning technology,  identifies the vulnerabilities – missing patches, configuration  weaknesses, and industry best practices - to protect an organization’s  IT assets. Retina provides cost-effective security risk assessment, as  well as enables security best practices, policy enforcement, and  regulatory audits.</div>
<div style="text-align: justify;">
<br /></div>
<div class="box">
<h3 style="text-align: left;">
Why Beyond Trust for Network Security Scanning        </h3>
<ul class="list" style="text-align: justify;">
<li><b>Discover</b> all network (local and remote), web and virtual assets in your environment</li>
<li><b>Reveal</b> at-risk personally identifiable information (PII) and other sensitive data</li>
<li><b>Identify</b> system, application, database, OS and web application vulnerabilities via agent-based and/or agentless scanning</li>
<li><b>Assess</b> risk and prioritize remediation based on exploitability (from Core Impact®, Metasploit®, Exploit-db), CVSS, & other factors</li>
<li><b>Confirm</b> exploitability through penetration testing, with one click to the open-source Metasploit Framework</li>
<li><b>Report</b> progress and results to colleagues in management, compliance, audit, risk and other roles</li>
<li><b>Analyze</b> threats and gain security intelligence through the optional Retina CS vulnerability management console</li>
<li><b>Share</b> data with popular solutions for SIEM, GRC and other security management platforms</li>
<li>Full  support for VMware environments, including online and offline virtual  image scanning, virtual application scanning and integration with  vCenter</li>
<li>Ability to audit for Personally Identifiable Information (PII) on remote targets</li>
</ul>
</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZxxHl3c9mkQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/" target="_blank">Retina Scanner Trial</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.beyondtrust.com/</div>
</div>

Retina Network Security Scanner :: Tools

Retina Network Security Scanner: Integrated Network, Web and Virtual Vulnerability Assessment :: With over 10,000 deployments si...

GFI LanGuard (Network Security and Vulnerability Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="GFI LanGuard Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcaqnxj6PryFfmdA27PMtg6RTLi_D2RinrCLnRHafGyxaPJRNIoWk3SvBnIBNY4P7sQ8srkEZpziGDQrFZB4SVr4qudT5JnTTnLu3wxxndRRYlMOdipE_hRPoKWZ6ZTpdyfiUfKHWmOjnB/s1600/gfi+languard+logo.jpg" title="GFI LanGuard Logo" /></div>
<div style="text-align: justify;">
<b>GFI LanGuard</b> is a network security and vulnerability scanner designed to  help with patch management, network and software audits, and  vulnerability assessments.  The price is based on the number of IP  addresses you wish to scan.  A free trial version (up to 5 IP addresses)  is available.</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-content" style="text-align: justify;">
<div class="listing-head">
<b>Patch management: Fix vulnerabilities before an attack</b></div>
<div class="rtf-content">
Patch management  is vital to your business. Network  security breaches are most commonly caused by missing network patches.  GFI LanGuard scans and detects network vulnerabilities before they are  exposed, reducing the time required to patch machines on your network.  GFI LanGuard patches Microsoft ®, Mac® OS X®, Linux® and more than 50  third-party operating systems and applications, and deploys both  security and non-security patches.</div>
</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-head" style="text-align: justify;">
<b>Vulnerability assessment: Discover security threats early</b></div>
<div style="text-align: justify;">
More than 50,000 vulnerability assessments are carried  out across your networks, including virtual environments. GFI LanGuard  scans your operating systems, virtual environments and installed  applications through vulnerability check databases such as OVAL and SANS  Top 20. GFI LanGuard enables you to analyze the state of your network  security, identify risks to the network, determine its degree of  exposure, and address how to take action before it is compromised.</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-head" style="text-align: justify;">
<b>Network auditing: Analyze your network centrally</b></div>
<div style="text-align: justify;">
GFI LanGuard provides a detailed analysis of the state of  your network. This includes applications or default configurations  posing a security risk. GFI LanGuard also gives you a complete picture  of installed applications; hardware on your network; mobile devices that  connect to the Exchange servers; the state of security applications  (antivirus, anti-spam, firewalls, etc.); open ports; and any existing  shares and services running on your machines.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ui6OGUxz0YQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://www.gfi.com/products-and-solutions/network-security-solutions/gfi-languard/download" target="_blank">GFI LanGuard Trial</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.gfi.com/</div>
<div style="text-align: justify;">
</div>
</div>

GFI LanGuard (Network Security and Vulnerability Scanner) :: Tools

GFI LanGuard is a network security and vulnerability scanner designed to help with patch management, network and software audits, and ...

Netsparker (Web Application Security Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="netsparker logo" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicMGrfOExKRYZTaQVyTdfHiWt-z5hlFOGb-jetJ4qBhS-ehtZKfmqajzNgrERuXbA8XaLQbut0_2wHGyY1z0w6415SADANeramfxe6Q9GM0nJ1FJ_cc_JQfaP-olfXaWJohX6S2CeTgiTW/s1600/netsparker+logo.jpg" title="netsparker logo" width="200" /></div>
<br />
<div style="text-align: justify;">
<b>Netsparker</b> is the only False-positive-free web application security  scanner. Simply point it at your website and it will automatically  discover the flaws that could leave you dangerously exposed. <b>Netsparker</b> is a web application security scanner, with support for both  detection and exploitation of vulnerabilities. It aims to be false  positive–free by only reporting confirmed vulnerabilities after  successfully exploiting or otherwise testing them.</div>
<div style="text-align: justify;">
With its unique <b>False-Positive Free</b> guarantee,  Netsparker is the only web application security scanner that uses a  built-in exploitation engine to positively confirm vulnerabilities,  leaving you free to spend your time eliminating threats, not proving  them.</div>
<div style="text-align: justify;">
Netsparker’s <b>Post Exploitation</b> feature  takes automated exploitation to the next level, revealing additional  insight into your security infrastructure that no other automated  testing product can match.</div>
<div style="text-align: justify;">
And with <b>Integrated Exploitation</b>  you can manually exploit identified vulnerabilities directly from  within Netsparker, enabling you to see the real impact of an attack just  by clicking a button.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZszVng1qC4g?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="https://www.mavitunasecurity.com/demo/" target="_blank">Netsparker Demo</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b> https://www.mavitunasecurity.com/</div>
</div>

Netsparker (Web Application Security Scanner) :: Tools

Netsparker is the only False-positive-free web application security scanner. Simply point it at your website and it will automaticall...

Wapiti (Vulnerability Scanner for Web Applications) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Wapiti Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_vAvYcVPv2XdyfBL7FvNMBsXInHGcYgu5w0H4yb8E4dSyA-eU7KHJry7W8hCJLZWQQNL50PY4hjXSWX9F2RgbL8k0a9CFw4r0wU4Y-ay2rmGZWsFrXXfX-gb7gs97ZXxXCtujF3TnqglK/s1600/wapiti+logo.gif" title="Wapiti Logo" /></div>
<div style="text-align: justify;">
<b>Wapiti </b>is a vulnerability scanner for web applications. It currently  search vulnerabilities like XSS, SQL and XPath injections, file  inclusions, command execution, LDAP injections, CRLF injections... It  use the Python programming language.<b> </b></div>
<div style="text-align: justify;">
<b>Wapiti</b> allows you to audit the security of your web applications.  It performs "<b>black-box</b>" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data.Once it gets this list, <b>Wapiti</b> acts like a <i>fuzzer,</i> <i>injecting payloads</i> to see if a script is vulnerable.</div>
<div style="text-align: justify;">
<b>Wapiti </b>can detect the following vulnerabilities : </div>
<ul style="text-align: justify;">
<li>File Handling Errors (Local and remote include/require, fopen, readfile...)</li>
<li>Database Injection (PHP/JSP/ASP SQL Injections and XPath Injections)</li>
<li>XSS (Cross Site Scripting) Injection</li>
<li>LDAP Injection</li>
<li>Command Execution detection (eval(), system(), passtru()...)</li>
<li>CRLF Injection (HTTP Response Splitting, session fixation...)</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/RaoEcKMZL6Q?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/wapiti/files/latest/download" target="_blank">Wapiti 2.2.1.zip</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://wapiti.sourceforge.net/</div>
</div>

Wapiti (Vulnerability Scanner for Web Applications) :: Tools

Wapiti is a vulnerability scanner for web applications. It currently search vulnerabilities like XSS, SQL and XPath injections, file i...

Subscribe to: Posts ( Atom )