ToolWar | Information Security (InfoSec) Tools: Top 100

Burp Suite 2020.12.1 :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAT2UhRmZvzULaQVdcEZDtIFgNvPBCuTUbZWHvPtZZ5gx6ibqfq6BYj-4RfUfNMVxfg1JsA6uD4KKYpcQKye1XV_E1DMgkYO8CCKDPceWmNfn-3OVLCMEvmMVmLYzvRih9jGTKLa8xnlbs/s836/Burp-Suite-Professional-2020-Free-Download.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Burp Suite Professional 2020.12.1" border="0" data-original-height="484" data-original-width="836" height="231" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAT2UhRmZvzULaQVdcEZDtIFgNvPBCuTUbZWHvPtZZ5gx6ibqfq6BYj-4RfUfNMVxfg1JsA6uD4KKYpcQKye1XV_E1DMgkYO8CCKDPceWmNfn-3OVLCMEvmMVmLYzvRih9jGTKLa8xnlbs/w400-h231/Burp-Suite-Professional-2020-Free-Download.jpg" title="Burp Suite Professional 2020.12.1" width="400" /></a></div><br /><div style="text-align: justify;">
<b>Burp Suite</b> is a large platform for performing security testing of web applications. Its various tools work seamlessly  together to support the entire testing process, from initial mapping and  analysis of an application's attack surface, through to finding and  exploiting security vulnerabilities. </div>
<div style="text-align: justify;">
Burp gives you full control, letting you combine advanced manual  techniques with state-of-the-art automation, to make your work faster, more  effective, and more fun.</div>
<div style="text-align: justify;">
It contains a variety of tools with numerous interfaces between them  designed to facilitate and speed up the process of attacking an  application. All of the tools share the same framework for handling and  displaying HTTP messages, persistence, authentication, proxies, logging,  alerting and extensibility.  There is a limited free version and also  Burp Suite Professional ($399 per user per year). </div>
<div class="rounded-corner-box grey-box">
<ul class="green-list" style="text-align: justify;">
<li>An intercepting <b>Proxy</b>,  which lets you inspect and modify traffic between your browser and the  target application.</li>
<li>An application-aware <b>Spider</b>,  for crawling content and functionality.</li>
<li>An advanced web application <b>Scanner</b>,  for automating the detection of numerous types of vulnerability.</li>
<li>An <b>Intruder</b> tool, for  performing powerful customized attacks to find and exploit unusual  vulnerabilities.</li>
<li>A <b>Repeater</b> tool, for  manipulating and re-sending individual requests.</li>
<li>A <b>Sequencer</b> tool, for  testing the randomness of session tokens.</li>
<li>The ability to <b> save your work</b> and resume working later.</li>
<li><b>Extensibility</b>, allowing you  to easily write your own plugins, to perform complex and highly  customized tasks within Burp.</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/pBkzvp7xuCI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: left;">
<br />
<b>Download Here :: </b><a href="https://portswigger.net/burp/releases/professional-community-2020-12-1" target="_blank">Burp Suite v2020.12.1</a><b>
</b></div>
<div style="text-align: left;">
<b>Source ::</b> http://portswigger.net/index.html</div>
</div>
</div>

Burp Suite 2020.12.1 :: Tools

Burp Suite is a large platform for performing security testing of web applications. Its various tools work seamlessly together to suppor...

Metasploit Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Metasploit Framework" border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRSOyPh20yguq6DjZOgkEcBHC8wQ_Io1QDFE0-kXz-N9y7eoKn8qmNGwMSzoLNGU14xryBBHoTyJIlzutFs5ok3tgblKnFB2yXitsliLOPa4eGDX0ubGavMFLynPT0JKFv4f_tnTkl8Hdn/s320/metasploit-framework-toolwar.png" title="Metasploit Framework" width="320" /></div>
<div style="text-align: justify;">
<b>Metasploit Framework</b> is a most usable framework for exploiting network or servers. <b>Metasploit</b> <b>Framework</b> took the security world by storm when it was released in  2004. It is an advanced open-source platform for developing, testing,  and using exploit code. The extensible model through which payloads,  encoders, no-op generators, and exploits can be integrated has made it  possible to use the <b>Metasploit Framework</b> as an outlet for cutting-edge  exploitation research. It ships with hundreds of exploits, as you can  see in their list of modules.  This makes writing your own exploits easier, and it certainly beats  scouring the darkest corners of the Internet for illicit shellcode of  dubious quality.  One free extra is <i>Metasploitable,</i>  an intentionally insecure Linux virtual machine you can use for testing  Metasploit and other exploitation tools without hitting live servers.  </div>
<div style="text-align: justify;">
<i><b>Metasploit</b></i> was completely free, but the project was acquired by Rapid7  in 2009 and it soon sprouted commercial variants.  The Framework itself  is still free and open source, but they now also offer a  free-but-limited Community edition, a more advanced Express edition  (<i>$3,000</i> per year per user), and a full-featured Pro edition (<i>$15,000</i> per  user per year).  Other paid exploitation tools to consider are Core Impact (more expensive) and Canvas (less).  </div>
<div style="text-align: justify;">
The Metasploit Framework now includes an official Java-based GUI and also Raphael Mudge's excellent Armitage.  The Community, Express, and Pro editions have web-based GUIs.</div>
<div style="text-align: justify;">
The <b>Metasploit Project</b> is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.<br />
Its best-known sub-project is the open source.<sup class="reference" id="cite_ref-bsdlicense_1-1"></sup> <b>Metasploit Framework</b>, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.<br />
The Metasploit Project is well known for its anti-forensic and evasion tools, some of which are built into the Metasploit Framework.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/q0xkf1g2mbY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: left;">
<br />
<b>Download Here</b><b> ::</b> <a href="http://www.rapid7.com/products/metasploit/metasploit-community-registration.jsp" target="_blank">Metasploit Community Eddition</a></div>
<div style="text-align: left;">
<u><b>Official Website</b> </u>:: http://www.metasploit.com/</div>
</div>
</div>

Metasploit Framework

Metasploit Framework is a most usable framework for exploiting network or servers. Metasploit Framework took the security world by st...

eMailTrackerPro :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipm5lCo7c-C8Zh8fBebeme0YA0c8SYv4pY8x8hgwDgSrpTJjQtw1od8KHEPNCkJmMqdpYmzJ9KP_Xh5WzwvdEwcsuvgZPv9plIDzbPLfy6hzyfH484jFfbGp6xtgCHpg7yDFPfJGT2Hche/s1600/emailtrackerpro+logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="emailtrackerpro logo" border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipm5lCo7c-C8Zh8fBebeme0YA0c8SYv4pY8x8hgwDgSrpTJjQtw1od8KHEPNCkJmMqdpYmzJ9KP_Xh5WzwvdEwcsuvgZPv9plIDzbPLfy6hzyfH484jFfbGp6xtgCHpg7yDFPfJGT2Hche/s320/emailtrackerpro+logo.jpg" title="emailtrackerpro logo" width="320" /></a></div>
<div style="text-align: justify;">
<b>eMailTrackerPro </b>is a <b>email tracking tool</b> for emails that trace the location of email as well as it provides additional facilities like report abuse and spam filter. Over 97% of all email is spam. Spam can be harmless but annoying, it can  contain viruses or it can try and trick someone into giving up personal  details which in turn leads to identity fraud. EmailTrackerPro not only  offers the ability to <b>trace an email</b> using the email header but it also comes with a <b>spam filter</b>  (advanced edition), which scans each email as it arrives and warns the  user if it's suspected spam. Essentially stopping spam email before it  reaches its intended recipient. Pro version available at $29.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: small;">An email 'header' contains all the information required to track where  it came from. It holds the footprint of each server the email travelled  through which in almost all cases leads us back to the city/town the  email originated.  </span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><br />
</span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><span style="color: #333333;">Whois information is  essentially contact details for the organization that registered/is  responsible for the IP address or website being traced. Also uncovered  are any services running on the destination machine.</span></span></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;">The most valuable feature is the ability to trace more than one IP address or domain name at a time. <b>Trace as many IP addresses and domain names as required</b> and either output the results to a new tab or an Excel/HTML file.</span></span></span></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/smoGpdnGgVg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;"><b>Trial Download Here ::</b> <a href="http://download.visualware.com/pub/emt/emt.exe" target="_blank">eMailTrackerPro v10.0b (for Windows)</a></span></span></span></div>
<div style="text-align: justify;">
<span style="color: #333333; font-size: 14px;"><span style="font-size: small;"><span style="color: #333333;"><b>Official Website ::</b>  http://www.emailtrackerpro.com/</span></span> </span></div>
</div>

eMailTrackerPro :: Tools

eMailTrackerPro is a email tracking tool for emails that trace the location of email as well as it provides additional facilities like ...

FOCA (Metadata Analyzer) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="foca logo toolwar" border="0" height="163" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_r5MVkxBwNCvxK4jGg_H_RQHnfDhbTNp2Ed3tEy8FL8RJflwgVTcEHORzatASmF21pYF3JkyjxWwvdkXkQPlEFQ9LqD0YSXkcSyanqj0nX60zI8V7FRSOWyo3v2q1_uhF7VZYi4VsChVJ/s400/foca+logo.jpg" title="foca logo toolwar" width="400" /></div>
<div style="text-align: justify;">
<b>FOCA</b> will <b>analyze metadata</b> from Microsoft Office Documents, PDF  files, Open Office Files and Word Perfect files, EXIF Metadata out of  images and the best part is that you can add the files you collected  manually or found and downloaded thru web searches using Google and Live  Search witch makes it extremely flexible for pentests. it will  enumerate Users, Folders, Printers, Emails and the version of Software  used to create the file. This tool will run on Windows XP and Windows  Vista, I found it to be really unstable in Windows 7 Beta.</div>
<div style="text-align: justify;">
<b>FOCA</b> means seal in Spanish language. <b>FOCA</b> or <b>Fingerprinting Organizations with Collected Archives</b> is a tool to discover files on target website and extract metadata from it. FOCA is a Windows based tool for the metadata extraction. It provides a GUI for easy usage. FOCA basically uses search engines for the purpose of discovering files and extracts metadata from them. There also exists an online version of the application, which can be found at http://www.informatica64.com/foca/ </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/c2LSHt8HB34?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://dl2.downloadcrew.com/?r=SBPN%2FSBPN_3.0.mvc&t=1382010847&c=c77d0352a0aaf602ef24185ec25a0bdc6fe7b201&sw=22211" target="_blank">FOCA 3.0</a><b>
</b></div>
<div style="text-align: justify;">
<b>Online Version :: </b>http://www.informatica64.com/foca/ </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.informatica64.com/foca.aspx</div>
</div>

FOCA (Metadata Analyzer) :: Tools

FOCA will analyze metadata from Microsoft Office Documents, PDF files, Open Office Files and Word Perfect files, EXIF Metadata out of...

Ncrack (High-speed Network Authentication Cracking Tool) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="ncrack logo" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTZ3lIMmsg2bXFQ3EfDcXfWLUJYog8aMnAtiIuV7NgIFh5oFH9Cs8lIdCCaS_kVyWFjG3wzkScAgwHcpPTnk5dnBtQS-drog-Hs0joSkX89M1wR7jfrG6DXK-qbBc19tSAKwdvG0eWaygL/s320/ncrack_logo.png" title="ncrack logo" width="284" /></div>
<div style="text-align: justify;">
<b>Ncrack</b> is a <i>High-speed Network Authentication Cracking Tool</i>.  It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on <b>Ncrack</b> when auditing their clients.  <b>Ncrack</b> was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts. </div>
<div style="text-align: justify;">
<b>Ncrack's</b> features include a very flexible interface granting the user full control of network operations, allowing for very sophisticated bruteforcing attacks, timing templates for ease of use, runtime interaction similar to Nmap's and many more.  Protocols supported include RDP, SSH, http(s), SMB, pop3(s), VNC, FTP, and telnet. </div>
<div style="text-align: justify;">
<b>Ncrack</b> was started as a "<i>Google Summer of Code"</i> Project in 2009. While it is already useful for some purposes, it is still unfinished, alpha quality software. It is released as a standalone tool and can be downloaded from the section below. Be sure to read the Ncrack man page to fully understand Ncrack usage. If you  are a developer and want to write your own Ncrack modules, studying the Ncrack Developer's Guide would be the first step. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/bmldcBOxyvc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b> Download Here ::</b> <a href="http://nmap.org/ncrack/dist/ncrack-0.4ALPHA-setup.exe">ncrack-0.4ALPHA-setup.exe</a><b> (</b>for Windows)</div>
<div style="text-align: justify;">
                               <a href="http://nmap.org/ncrack/dist/ncrack-0.4ALPHA.tar.gz">ncrack-0.4ALPHA.tar.gz</a> (for Linux) </div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://nmap.org/ncrack/ </div>
</div>

Ncrack (High-speed Network Authentication Cracking Tool) :: Tools

Ncrack is a High-speed Network Authentication Cracking Tool . It was built to help companies secure their networks by proactively test...

AppUse (Android Penetest Platform Unified Standalone Environment) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="AppUse Logo Toolwar" border="0" height="83" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAGd8j-mE-M4Gmc0wQX2ZY7qpYdv95XXv4NpOzK9WLTHwYqqFV8nnfozdqxXwDM2PNNsHequwQfXkRNV_q-R9pGjLcTjhUeWZ0rqyhycnqLPeKsd_XvMc0gDSFoBWQA_Zfa-tNuu36nUjh/s320/AppUse+logo.png" title="AppUse Logo Toolwar" width="320" /></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>AppUse</b> is a <i>Android Penetest Platform Unified Standalone Environment</i>. <b>AppSec Labs</b> recently developed the </span><b style="text-align: justify;">AppUse Virtual Machine</b><span style="text-align: justify;">. This system is a unique, </span><b style="text-align: justify;">free</b><span style="text-align: justify;">,  platform for mobile application security testing in the android  environment, and it includes unique custom-made tools created by AppSec  Labs.</span></div>
<div style="text-align: justify;">
The system is a blessing to security  teams, who from now on can easily perform security tests on Android  applications. It was created as a virtual machine targeted for  penetration testing teams who are interested in a convenient,  personalized platform for android application security testing, for  catching security problems and analysis of the application traffic.</div>
<div style="text-align: justify;">
Now, in order to test Android applications, all you will need is to download <b>AppUse Virtual Machine</b>, activate it, load your application and test it.</div>
<div style="text-align: justify;">
There is no need for installation of  simulators and testing tools, no need for SSL certificates of the proxy  software, everything comes straight out of the box pre-installed and  configured for an ideal user experience.</div>
<div style="text-align: justify;">
Security experts who have seen the  machine were very excited, calling it the next ‘BackTrack’ (a famous  system for testing security problems), specifically adjusted for android  application security testing.</div>
<div style="text-align: justify;">
<b>AppUse VM</b> closes gaps  in the world of security, now there is a special and customized testing  environment for android applications; an environment like this has not  been available until today, certainly not with the rich format offered  today by <b>AppUse VM</b>.</div>
<div style="text-align: justify;">
This machine is intended for the daily  use of security testers everywhere for Android applications, and is a  must-have tool for any security person.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>Tutorial File :: </b><a href="https://appsec-labs.com/AppUse_guide" target="_blank">Click Here </a></span></div>
<div style="text-align: justify;">
<b><span style="text-align: justify;">Download Here :: </span></b><span style="text-align: justify;"><a href="http://sourceforge.net/projects/appuse-android-pentest/files/AppUse%201.6_release.rar/download" target="_blank">AppUse-1.6.rar</a></span><b><span style="text-align: justify;"><br />
</span></b></div>
<div style="text-align: justify;">
<span style="text-align: justify;"><b>Official Website :: </b>https://appsec-labs.com/ </span></div>
</div>

AppUse (Android Penetest Platform Unified Standalone Environment) :: Framework

AppUse is a Android Penetest Platform Unified Standalone Environment . AppSec Labs recently developed the AppUse Virtual Machine . Thi...

Vega (Web Vulnerability Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="vega scanner logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitqDoBTtkOWZbJB0V8gJz3IkgP9erP4PYe2g0GG_Yy1h0owqXN7iIoOt6_0ZGHotmGgJUAsjT1XP8PoV330tgVjFZjEvyHtvN7NybCqt60IAafpqq3fE7IoBM0cA88uyjM6qtiEiQbLOW9/s1600/vega+scanner+logo.JPG" title="vega scanner logo" /></div>
<div style="text-align: justify;">
<b>Vega</b> is a free and open source scanner and testing platform to test the  security of web applications. Vega can help you find and validate SQL  Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive  information,        and other vulnerabilities. It is written in Java, GUI based, and  runs on <b>Linux</b>,        <b>OS X</b>, and <b>Windows</b>.       <br />
<br />
Vega includes an automated scanner for quick tests and an  intercepting proxy for tactical inspection. The Vega scanner finds XSS  (cross-site scripting), SQL injection, and other vulnerabilities.       Vega can be extended using a powerful API in the language of the  web: <b>Javascript</b>.<br />
<div id="modules">
<h3>
Modules</h3>
<ul id="modulesList">
<li>Cross Site Scripting (XSS)</li>
<li>SQL Injection</li>
<li>Directory Traversal</li>
<li>URL Injection</li>
<li>Error Detection</li>
<li>File Uploads</li>
<li>Sensitive Data Discovery</li>
</ul>
<div id="core">
<h3>
Core</h3>
<ul id="coreList">
<li>Automated Crawler and Vulnerability Scanner</li>
<li>Consistent UI</li>
<li>Website Crawler</li>
<li>Intercepting Proxy</li>
<li>SSL MITM</li>
<li>Content Analysis</li>
<li>Extensibility through a Powerful Javascript Module API</li>
<li>Customizable alerts</li>
<li>Database and Shared Data Model</li>
</ul>
</div>
</div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/X3BGO9U8zuU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.subgraph.com/downloads/VegaSetup32.exe">Microsoft Windows 32-bit (x86)</a><br />
                               <a href="http://www.subgraph.com/downloads/VegaBuild-linux.gtk.x86.zip">Linux GTK 32-bit Intel</a><br />
                               <a href="http://www.subgraph.com/downloads/Vega.dmg">Mac OS X 32-bit Intel</a>  <b> </b><br />
<b>Official Website :: </b>http://www.subgraph.com/ 
</div>
</div>

Vega (Web Vulnerability Scanner) :: Tools

Vega is a free and open source scanner and testing platform to test the security of web applications. Vega can help you find and valid...

Owasp Mantra (Browser Based Web Security Framework) :: Framework

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Owasp Mantra logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRrctdBWOhmYDQr246V7zjjW9kQoBxnS08108GujNouk7J1REEDUIjd6xdFgb7tlZvc9AGb1xJ1_E1wXBIkhT4Rg6ILFmQmUQkgns4JDBPiUh4Juv9Xy6p3vvVRuT2Wt2AqC8o3fI5OSGf/s1600/Owasp+Mantra+Logo.jpg" title="Owasp Mantra logo" /></div>
<b></b><br />
<div style="text-align: justify;">
<b><span itemprop="description">OWASP Mantra</span></b><span itemprop="description"> is a  Free and Open Source <i>Browser Based Web Security Framework</i></span><b>. OWASP Mantra</b> is a collection of free and open source  tools integrated into a web browser, which can become handy for  students, penetration testers, web application developers,security  professionals etc. It is portable, ready-to-run, compact and follows the  true spirit of free and open source software. </div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>OWASP Mantra</b>  is lite, flexible, portable and user friendly with a nice graphical  user interface. You can carry it in memory cards, flash drives, CD/DVDs,  etc. It can be run natively on Linux, Windows and Mac platforms. It can  also be installed on to your system within minutes. Mantra is  absolutely free of cost and takes no time for you to set up. </div>
<div style="text-align: justify;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/CRJkGZlV6Vk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.exe/download" target="_blank">OWASP Mantra</a> (for Windows)<b>
</b></div>
<div style="text-align: justify;">
                              <a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2032.tar.gz/download" target="_blank"> OWASP Mantra</a> (for Linux)<b> </b></div>
<div style="text-align: justify;">
                              <a href="http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.mpkg.zip/download" target="_blank"> OWASP Mantra </a>(for MAC)<b> </b></div>
<div style="text-align: justify;">
<b>Official Website ::</b>  http://www.getmantra.com/</div>
</div>

Owasp Mantra (Browser Based Web Security Framework) :: Framework

OWASP Mantra is a Free and Open Source Browser Based Web Security Framework . OWASP Mantra is a collection of free and open source ...

XSSF (Cross Site Scripting Framework) :: Frameworks

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
 <img alt="xssf logo" border="0" height="78" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRD7_Qf3uczuo0jjl0Zn_xPYsVPilG-slUfjqxWr6RMznK9kSfykhHi_5W-1840tZGKc1ZvtGq8u5QN8FR7UESwAG-5eb_FgAwzBqGQGXISA38J5LPbFteBRt4N5f9hiDXxFAsRLttzrq9/s1600/xssf+logo.png" title="xssf logo" width="200" /> </div>
<div style="text-align: justify;">
The <b>Cross-Site Scripting Framework </b>(<b>XSSF</b>) is a  security tool designed to turn the XSS vulnerability exploitation task  into a much easier work. The <b>XSSF</b> project aims to demonstrate the real  dangers of XSS vulnerabilities, vulgarizing their exploitation. This  project is created solely for education, penetration testing and lawful  research purposes.  </div>
<div style="text-align: justify;">
XSSF allows creating a <b>communication channel</b>  with the targeted browser (from a XSS vulnerability) in order to  perform further attacks. Users are free to select existing modules (a  module = an attack) in order to target specific browsers. </div>
<div style="text-align: justify;">
XSSF  provides a powerfull documented API, which facilitates development of  modules and attacks. In addition, its integration into the <b>Metasploit Framework</b> allows users to launch MSF browser based exploit easilly from an XSS vulnerability. </div>
<div style="text-align: justify;">
In  addition, an interesting though exploiting an XSS inside a victim's  browser could be to browse website on attacker's browser, using the  connected victim's session. In most of cases, simply stealing the victim  cookie will be sufficient to realize this action. But in minority of  cases (intranets, network tools portals, etc.), cookie won't be useful  for an external attacker. That's why <b>XSSF Tunnel</b> was created to help the attacker to help the attacker browsing on affected domain using the victim's session. </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/AhUhOirEfTE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: left;">
<br />
<b>Download Here ::</b> <a href="https://xssf.googlecode.com/files/XSSF-3.0.zip" target="_blank">XSSF-3.0.zip</a></div>
<div style="text-align: left;">
<b>Source :: </b>https://code.google.com/p/xssf/</div>
</div>

XSSF (Cross Site Scripting Framework) :: Frameworks

The Cross-Site Scripting Framework ( XSSF ) is a security tool designed to turn the XSS vulnerability exploitation task into a much...

WebSecurify (Web Application Security Testing Suite) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="WebSecurify Logo" border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6oDiePzFfVKkO_hIeIuuwUrY6JK_X5Dj2Qixb9RxFDbSH9HJQhnKNdbrUrhYJgkZvvGLDCGDwSM_WrRrnjNY0SljItRogRVQLCbGVrWM0Lj4E5vwOcNvmid67GVlEJUmenmwit6QPaN3P/s1600/Websecurify+logo.jpg" title="WebSecurify Logo" width="320" /></div>
<div style="text-align: justify;">
<b>Websecurify</b> is a <i>web application security testing</i> suite  designed from the ground up to provide the best combination of automatic  and manual vulnerability testing technologies. It is available for all  major desktop platforms including mobile devices and web via our online  security suite. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Main features of <b>Websecurify</b> include: </div>
<ul style="text-align: justify;">
<li>Simple to use user interface. </li>
<li>World-class analytical and scanning technology. </li>
<li>Available for all major operating systems (Windows, Mac, Linux) including mobile devices (iOS, Android). </li>
<li>Easily extensible with the help of add-ons and plugins. </li>
<li>Moduler and reusable design. </li>
<li>Built-in internationalization support.  </li>
<li>Powerful manual testing tools and helper facilities included. </li>
<li>Flexible, hassle-free licensing. </li>
<li>Innovative in every way.  </li>
<li>Frequent updates. </li>
<li>Much, much more. </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/PMT_A7YtEAs?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="https://websecurify.googlecode.com/files/websecurify-for-firefox-2.1.0.xpi" target="_blank">WebSecurify 2.1.0</a> (for Firefox)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.tar.gz" target="_blank">WebSecurify Suite 1.0.0</a> (for Linux)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.exe" target="_blank">WebSecurify Suite 1.0.0</a> (for Windows)<br />
                               <a href="https://websecurify.googlecode.com/files/Websecurify%20Suite%201.0.0.dmg" target="_blank">WebSecurify Suite 1.0.0</a> (for MAC)<br />
<b>Official Website :: </b>http://www.websecurify.com/<br />
<ul style="text-align: justify;">
</ul>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
</div>
</div>

WebSecurify (Web Application Security Testing Suite) :: Tools

Websecurify is a web application security testing suite designed from the ground up to provide the best combination of automatic and...

Dsniff (Network Auditing and Penetration Testing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="dsniff logo" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglUy8nXzRshwrinWN2ncP0FaDpYLKIOQs5Y27PszGBcR3CoDhFcwdi-kGlc0Cm9CZTT-uxTsAEkp4gGy6sDWgCGvNHeulvsGzdM-nZMX_xPVe_Ztr9HwuRetrvK8KwwB5q2UtbhWE67EiC/s200/dsniff+logo.png" title="dsniff logo" width="166" /></div>
<div style="text-align: justify;">
<b>Dsniff</b> is a collection of tools for network auditing and penetration testing. <b>dsniff</b>, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.</div>
<div style="text-align: justify;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/QTWwNsTj5FA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.monkey.org/~dugsong/dsniff/dsniff-2.3.tar.gz" target="_blank">dsniff 2.3.tar.gz</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b> http://www.monkey.org/</div>
</div>

Dsniff (Network Auditing and Penetration Testing) :: Tools

Dsniff is a collection of tools for network auditing and penetration testing. dsniff , filesnarf, mailsnarf, msgsnarf, urlsnarf, and we...

Reaver (WiFi Cracking or Wireless Auditor) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="wifi logo" border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiV-NPgsuzClXAHxkWhbCHhzK2NTn1xbiJssKhzPeNVEHgd7UYq4a5gjLn5UDIfWLH4CG9pkT_RtThm11mzMWjbpmZVDdzgNsSXDpHyOsvuPneH5OUQPNTcEhToCtCF8mYfP2ZmA-O_BNDM/s320/wifi+logo.jpg" title="wifi logo" width="320" /></div>
<div style="text-align: justify;">
<b>Reaver </b>implements a <i>brute force attack</i> against <i>Wifi Protected Setup  (WPS)</i> registrar PINs in order to recover WPA/WPA2 passphrases.<b> Reaver</b> is a <i>WPA attack tool </i>developed by <b>Tactical Network Solutions </b> and sold by Reaver Systems, LLC that exploits a protocol design flaw in  <i>WiFi Protected Setup (WPS)</i>. This vulnerability exposes a side-channel  attack against Wi-Fi Protected Access (WPA) versions 1 and 2 allowing  the extraction of the Pre-Shared Key (PSK) used to secure the network.  With a well-chosen PSK, the WPA and WPA2 security protocols are assumed  to be secure by a majority of the 802.11 security community.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
WPS allows users to enter an 8 digit PIN to connect to a secured  network without having to enter a passphrase.  When a user supplies the  correct PIN the access point essentially gives the user the WPA/WPA2 PSK  that is needed to connect to the network.  Reaver will determine an  access point's PIN and then extract the PSK and give it to the attacker.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Current attacks against WPA networks involve the computation of  rainbow tables based on a dictionary of potential keys and the name  (SSID) of the network being attacked. Rainbow tables must be  re-generated for each network encountered and are only successful if the  PSK is a dictionary word. However, <b>Reaver</b> is not restricted by the  limitations of traditional dictionary-based attacks. Reaver is able to  extract the WPA PSK from the access point within 4 - 10 hours and  roughly 95% of modern consumer-grade access points ship with WPS enabled  by default.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/eWy5DDc5Hn0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://reaver-wps.googlecode.com/files/reaver-1.4.tar.gz" target="_blank">Reaver 1.4.tar.gz</a></div>
<div style="text-align: justify;">
<b>Official Website ::  </b>http://www.tacnetsol.com/</div>
</div>

Reaver (WiFi Cracking or Wireless Auditor) :: Tools

Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. R...

TOR :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="TOR Logo :: ToolWar" border="0" height="202" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyyARrPvpVxCbs27_V9z_I7eiYf6vKlAU3NSgxPPVrtH8oiCvPx5XVYp_tRUQdSsTNoN-cqZuUykCYKshqTrkRJ6FYg08wKhEL4MAJ-HPtxU4_HQAYY5nSICcYuOEvSgF7zT7gQAGvJz3n/s1600/Tor_project_logo_hq.png" title="TOR Logo :: ToolWar" width="320" /></div>
<div style="text-align: justify;">
<b>Tor</b> is a network of <i>virtual tunnels</i> designed to improve privacy and  security on the Internet by routing your requests through a series of  intermediate machines. It uses a normal <i>proxy server interface</i> so that  ordinary Internet applications like web browsers and chat programs can  be configured to use it. In addition to helping preserve users'  anonymity, <b>Tor</b> can help evade firewall restrictions. <b>Tor's</b> hidden  services allow users publish web sites and other services without  revealing their identity or location. For a free cross-platform GUI,  users recommend Vidalia.  Remember that Tor exit nodes are sometimes run by malicious parties and can sniff your traffic,  so avoid authenticating using insecure network protocols (such as  non-SSL web sites and mail servers).  That is always dangerous, but  particularly bad when routing through Tor.</div>
<div style="text-align: justify;">
<b>Tor</b> protects you by bouncing your communications around a           distributed network of relays run by volunteers all around           the world: it prevents somebody watching your Internet           connection from learning what sites you visit, and it prevents           the sites you visit from learning your physical location.           Tor works with many of your existing applications, including           web browsers, instant messaging clients, remote login, and           other applications based on the TCP protocol.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/KDNEoddcBSY?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://www.torproject.org.in/dist/torbrowser/tor-browser-2.2.37-1_en-US.exe" target="_blank">TOR 2.2.37.exe</a><b> (for Windows)</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.torproject.org.in/ </div>
</div>

TOR :: Tools

Tor is a network of virtual tunnels designed to improve privacy and security on the Internet by routing your requests through a serie...

OSSIM (Open Source Security Information Management.) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="OSSIM Logo" border="0" height="76" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKHiO374Af3mSSAyULAoG0kCcQsJVpOHnKzFd1sZtjNBW2G8UhmbrtP8agq2Spe3qGKouz9XwP-21bnqVjI68dIP1EnBlYiQxz-IkZ17TIBU4XKfl1m-JdgG3bw0hpwXRNpKUvaESnAC-V/s1600/ossim.jpg" title="OSSIM Logo" width="400" /></div>
<div style="text-align: justify;">
<b>OSSIM</b> stands for <b>Open Source Security Information Management</b>. Its goal  is to provide a comprehensive compilation of tools which, when working  together, grant network/security administrators with a detailed view  over each and every aspect of networks, hosts, physical access devices,  and servers. OSSIM incorporates several other tools, including Nagios and OSSEC HIDS. <b>OSSIM</b> is a powerful suite of geospatial libraries and applications used  to process imagery, maps, terrain, and vector data. The software has  been under active development since 1996 and is deployed across a number of private, federal and civilian agencies.   </div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/AfwSZuND8QI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<b></b></div>
<div style="text-align: justify;">
<br />
<b>Download Here ::  </b><a href="http://download.osgeo.org/ossim/release/latest/rhel5-8/sandbox-x86_64-gcc-4.1/dot_gvm.tgz">dot_gvm.tgz</a></div>
<div style="text-align: justify;">
                                <a href="http://download.osgeo.org/ossim/release/latest/windows/omar-server-1.8.16-x86_64-installer.exe">omar-server-1.8.16-x86_64-installer.exe</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://trac.osgeo.org</div>
</div>

OSSIM (Open Source Security Information Management.) :: Tools

OSSIM stands for Open Source Security Information Management . Its goal is to provide a comprehensive compilation of tools which, when...

Medusa (Network Login Auditor) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Medusa :: ToolWar" border="0" height="255" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK3f_MFbnEtHpKhpPlu5AEr0HOMWDTCNtT7ERsvlMInBpQ4WrVB7ZFRlxi1jlprgRtVU1R6Le31k_akZEbQzDS_JYoDjL3Il_Xmtd3nweVcYg1hjtM58kLrq4Hlmcij2WZnXlyeS2ouNAA/s1600/medusaLogo.jpg" title="Medusa :: ToolWar" width="320" /></div>
<div style="text-align: justify;">
<b>Medusa </b>is a <i>Parallel Network Login Auditor</i> and <b>Medusa </b>is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application:  </div>
<ul style="text-align: justify;">
<li><b>Thread-based parallel testing.</b> Brute-force testing can be performed against multiple hosts, users or passwords concurrently.    </li>
<li><b>Flexible user input.</b> Target information (host/user/password) can be specified in a variety of ways. For example, each item can be either a single entry or a file  containing multiple entries. Additionally, a combination file format allows the user  to refine their target listing.    </li>
<li><b>Modular design.</b> Each service module exists as an independent .mod file. This means that no modifications are necessary to the core application in order to extend the supported list  of services for brute-forcing. </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/WTpjaYxbITw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b>Download Here :: </b> 
<a href="http://www.foofus.net/jmk/tools/medusa-2.1.1.tar.gz" target="_blank">Medusa 2.1.1.tar.gz</a><b><br /></b><br />
<b>Official Website :: </b>http://foofus.net/ </div>

Medusa (Network Login Auditor) :: Tools

Medusa is a Parallel Network Login Auditor and Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The ...

Ntopng (Network Traffic) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="ntop logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQC-FRUFjRvLyaY9yXMGSelHOEh0UATbuipctkwpL4fDcTGpiq_OG6fGuOqc5CmX6DYVsegpj5rP4yvk6R-mC9ggf8Zg6FgPnUNqyV2K43kGkvcLkFpmpac148XDdV5B_sTjQBPmrkoBGC/s1600/ntop+logo.png" title="ntop logo" /></div>
<div style="text-align: justify;">
<b>Ntopng</b>, the next generation version of the original ntop, a <i>network  traffic</i> probe that shows the network usage, similar to what the popular  top Unix command does. ntopng is based on libpcap and it has been  written in a portable way in order to virtually run on every Unix  platform, MacOSX and on Win32 as well.<b> </b></div>
<div style="text-align: justify;">
<b>Ntop</b> shows network usage in a way similar to what top does for  processes. In interactive mode, it displays the network status on the  user's terminal. In Web mode, it acts as a Web server, creating an HTML  dump of the network status. It sports a NetFlow/sFlow emitter/collector,  an HTTP-based client interface for creating ntop-centric monitoring  applications, and RRD for persistently storing traffic statistics.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/-P7C0by-TLA?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/ntop/files/ntopng/ntopng-1.0.tar.gz/download" target="_blank">ntopng-1.0.tar.g<b>z</b></a><b> </b>(for Linux )<b>  </b></div>
<div style="text-align: justify;">
<b>                               </b><a href="http://www.nmon.net/packages/Win32/ntopng-1.0-demo.exe" target="_blank">ntopng-1.0demo.exe</a> (for Windows)  <b> </b><br />
<b>Official Website :: </b>http://www.ntop.org/ </div>
</div>

Ntopng (Network Traffic) :: Tools

Ntopng , the next generation version of the original ntop, a network traffic probe that shows the network usage, similar to what the p...

Retina Network Security Scanner :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Retina Network Security Scanner " border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiubNWtpBLmbJ5zJZSm-gdz7mA4T5y-QACUD_rdWidlyjJ7_VlIZN5D2o2FIEvy5sND_8Gdpb0i-B3KgskplhrSDJDXXGI2dOx-jt_KdGbygaLWWfWIftLGqTijaSPk9XAsdsDdCRzyiKZK/s1600/retina_scanner.gif" title="Retina Network Security Scanner " /></div>
<h3 style="text-align: justify;">
      Retina Network Security Scanner: Integrated Network, Web and Virtual Vulnerability Assessment ::</h3>
<div style="text-align: justify;">
With over 10,000 deployments since 1998, BeyondTrust® <b>Retina  Network Security Scanner</b> is the most sophisticated vulnerability  assessment solution on the market. Available as a standalone application or as part of the  Retina CS unified vulnerability management platform, Retina Security Scanner enables you to efficiently identify IT exposures and prioritize  remediation enterprise-wide. Retina Network Security Scanner, the  industry’s most mature and effective vulnerability scanning technology,  identifies the vulnerabilities – missing patches, configuration  weaknesses, and industry best practices - to protect an organization’s  IT assets. Retina provides cost-effective security risk assessment, as  well as enables security best practices, policy enforcement, and  regulatory audits.</div>
<div style="text-align: justify;">
<br /></div>
<div class="box">
<h3 style="text-align: left;">
Why Beyond Trust for Network Security Scanning        </h3>
<ul class="list" style="text-align: justify;">
<li><b>Discover</b> all network (local and remote), web and virtual assets in your environment</li>
<li><b>Reveal</b> at-risk personally identifiable information (PII) and other sensitive data</li>
<li><b>Identify</b> system, application, database, OS and web application vulnerabilities via agent-based and/or agentless scanning</li>
<li><b>Assess</b> risk and prioritize remediation based on exploitability (from Core Impact®, Metasploit®, Exploit-db), CVSS, & other factors</li>
<li><b>Confirm</b> exploitability through penetration testing, with one click to the open-source Metasploit Framework</li>
<li><b>Report</b> progress and results to colleagues in management, compliance, audit, risk and other roles</li>
<li><b>Analyze</b> threats and gain security intelligence through the optional Retina CS vulnerability management console</li>
<li><b>Share</b> data with popular solutions for SIEM, GRC and other security management platforms</li>
<li>Full  support for VMware environments, including online and offline virtual  image scanning, virtual application scanning and integration with  vCenter</li>
<li>Ability to audit for Personally Identifiable Information (PII) on remote targets</li>
</ul>
</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZxxHl3c9mkQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
</div>
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://www.beyondtrust.com/Products/RetinaNetworkSecurityScanner/" target="_blank">Retina Scanner Trial</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.beyondtrust.com/</div>
</div>

Retina Network Security Scanner :: Tools

Retina Network Security Scanner: Integrated Network, Web and Virtual Vulnerability Assessment :: With over 10,000 deployments si...

GFI LanGuard (Network Security and Vulnerability Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="GFI LanGuard Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcaqnxj6PryFfmdA27PMtg6RTLi_D2RinrCLnRHafGyxaPJRNIoWk3SvBnIBNY4P7sQ8srkEZpziGDQrFZB4SVr4qudT5JnTTnLu3wxxndRRYlMOdipE_hRPoKWZ6ZTpdyfiUfKHWmOjnB/s1600/gfi+languard+logo.jpg" title="GFI LanGuard Logo" /></div>
<div style="text-align: justify;">
<b>GFI LanGuard</b> is a network security and vulnerability scanner designed to  help with patch management, network and software audits, and  vulnerability assessments.  The price is based on the number of IP  addresses you wish to scan.  A free trial version (up to 5 IP addresses)  is available.</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-content" style="text-align: justify;">
<div class="listing-head">
<b>Patch management: Fix vulnerabilities before an attack</b></div>
<div class="rtf-content">
Patch management  is vital to your business. Network  security breaches are most commonly caused by missing network patches.  GFI LanGuard scans and detects network vulnerabilities before they are  exposed, reducing the time required to patch machines on your network.  GFI LanGuard patches Microsoft ®, Mac® OS X®, Linux® and more than 50  third-party operating systems and applications, and deploys both  security and non-security patches.</div>
</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-head" style="text-align: justify;">
<b>Vulnerability assessment: Discover security threats early</b></div>
<div style="text-align: justify;">
More than 50,000 vulnerability assessments are carried  out across your networks, including virtual environments. GFI LanGuard  scans your operating systems, virtual environments and installed  applications through vulnerability check databases such as OVAL and SANS  Top 20. GFI LanGuard enables you to analyze the state of your network  security, identify risks to the network, determine its degree of  exposure, and address how to take action before it is compromised.</div>
<div style="text-align: justify;">
<br /></div>
<div class="listing-head" style="text-align: justify;">
<b>Network auditing: Analyze your network centrally</b></div>
<div style="text-align: justify;">
GFI LanGuard provides a detailed analysis of the state of  your network. This includes applications or default configurations  posing a security risk. GFI LanGuard also gives you a complete picture  of installed applications; hardware on your network; mobile devices that  connect to the Exchange servers; the state of security applications  (antivirus, anti-spam, firewalls, etc.); open ports; and any existing  shares and services running on your machines.</div>
<div style="text-align: justify;">
</div>
<div style="text-align: center;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ui6OGUxz0YQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://www.gfi.com/products-and-solutions/network-security-solutions/gfi-languard/download" target="_blank">GFI LanGuard Trial</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website ::</b> http://www.gfi.com/</div>
<div style="text-align: justify;">
</div>
</div>

GFI LanGuard (Network Security and Vulnerability Scanner) :: Tools

GFI LanGuard is a network security and vulnerability scanner designed to help with patch management, network and software audits, and ...

AppScan (Automates Application Security Testing) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx8YPLDg0utLh0EPbSdrLn4k-qEIsYaJriNRe839ymoJtopG6opHEI6k2EyXF-zKLYHNategTWApxVIkRCPjNK3Vz5xXWAeopPY9pF7zfL_EC4upmJp5CpballXpiDa014AMp9cMGmkkpd/s1600/appscan_logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx8YPLDg0utLh0EPbSdrLn4k-qEIsYaJriNRe839ymoJtopG6opHEI6k2EyXF-zKLYHNategTWApxVIkRCPjNK3Vz5xXWAeopPY9pF7zfL_EC4upmJp5CpballXpiDa014AMp9cMGmkkpd/s1600/appscan_logo.png" /></a></div>
<div style="text-align: justify;">
<b>IBM Security AppScan</b> software automates application security testing  by scanning applications, identifying vulnerabilities and generating  reports with intelligent fix recommendations to ease remediation. </div>
<div style="text-align: justify;">
<b>AppScan</b> provides security testing throughout the application development  lifecycle, easing unit testing and security assurance early in the  development phase. Appscan scans for many common vulnerabilities, such  as cross site scripting, HTTP response splitting, parameter tampering,  hidden field manipulation, backdoors/debug options, buffer overflows and  more. AppScan was merged into IBM's Rational division after IBM  purchased its original developer (Watchfire) in 2007.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/bLOTiObtNLo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<b>
</b></div>
<b>
</b> <b> </b><br />
<b>Download Here ::  </b>
<a href="http://www-03.ibm.com/software/products/us/en/appscan/" target="_blank">AppScan Trial</a><b><br /></b><br />
<b>Official Website :: </b>http://www-03.ibm.com</div>

AppScan (Automates Application Security Testing) :: Tools

IBM Security AppScan software automates application security testing by scanning applications, identifying vulnerabilities and generat...

Netsparker (Web Application Security Scanner) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="netsparker logo" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicMGrfOExKRYZTaQVyTdfHiWt-z5hlFOGb-jetJ4qBhS-ehtZKfmqajzNgrERuXbA8XaLQbut0_2wHGyY1z0w6415SADANeramfxe6Q9GM0nJ1FJ_cc_JQfaP-olfXaWJohX6S2CeTgiTW/s1600/netsparker+logo.jpg" title="netsparker logo" width="200" /></div>
<br />
<div style="text-align: justify;">
<b>Netsparker</b> is the only False-positive-free web application security  scanner. Simply point it at your website and it will automatically  discover the flaws that could leave you dangerously exposed. <b>Netsparker</b> is a web application security scanner, with support for both  detection and exploitation of vulnerabilities. It aims to be false  positive–free by only reporting confirmed vulnerabilities after  successfully exploiting or otherwise testing them.</div>
<div style="text-align: justify;">
With its unique <b>False-Positive Free</b> guarantee,  Netsparker is the only web application security scanner that uses a  built-in exploitation engine to positively confirm vulnerabilities,  leaving you free to spend your time eliminating threats, not proving  them.</div>
<div style="text-align: justify;">
Netsparker’s <b>Post Exploitation</b> feature  takes automated exploitation to the next level, revealing additional  insight into your security infrastructure that no other automated  testing product can match.</div>
<div style="text-align: justify;">
And with <b>Integrated Exploitation</b>  you can manually exploit identified vulnerabilities directly from  within Netsparker, enabling you to see the real impact of an attack just  by clicking a button.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ZszVng1qC4g?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="https://www.mavitunasecurity.com/demo/" target="_blank">Netsparker Demo</a><b>
</b></div>
<div style="text-align: justify;">
<b>Official Website :: </b> https://www.mavitunasecurity.com/</div>
</div>

Netsparker (Web Application Security Scanner) :: Tools

Netsparker is the only False-positive-free web application security scanner. Simply point it at your website and it will automaticall...

Subscribe to: Posts ( Atom )