Penetration Testing

KCPentrix project is Live CD design to be a standalone Penetration testing toolkit for pentesters and security analysts. KCPenTrix based on SLAX, a Slackware live cd and gentoo,auditor and whoppix. The Powerful modularity which KCPenTrix uses, allow us easily customize our version, and... Platforms: *nix

GnackTrack is an open and free project to merge penetration testing tools and the linux Gnome desktop. GnackTrack is a Live (and installable) Linux distribution designed for Penetration Testing and is based on Ubuntu. Platforms: *nix

DSniff project is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of... Platforms: *nix

THC-Amap is a next-generation tool for assistingnetwork penetration testing. It performs fast and reliable application protocol detection, independant on the TCP/UDP port they are being bound to. THC-Amap is a next-generation scanning tool for pentesters. It attempts to identify applications... Platforms: *nix

Pangolin is an automatic SQL injection penetration testing (Pen-testing) tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can... Platforms: Windows

Metasploit Express is security software for security professionals in enterprises and government agencies who need to carry out penetration tests against their systems quickly and easily. It adds a graphical user interface to the Metasploit Framework, the de-facto leader in pentesting tools,... Platforms: Windows

Metasploit Express is an affordable, easy-to-use penetration testing solution powered by Metasploit, the world's largest, fully tested, integrated public database of exploits. Metasploit Express enables you to validate the strengths and weaknesses of your overall security program. It also helps... Platforms: Windows, 2003, Windows Vista, XPX64, 2008, 7, 7x64

Metasploit Express is security software for security professionals in enterprises and government agencies who need to carry out penetration tests against their systems quickly and easily. It adds a graphical user interface to the Metasploit Framework, the de-facto leader in pentesting tools, and... Platforms: *nix

Metasploit Express is security software for security professionals in enterprises and government agencies who need to carry out penetration tests against their systems quickly and easily. It adds a graphical user interface to the Metasploit Framework, the de-facto leader in pentesting tools, and... Platforms: *nix

Secure Auditor is a unified risk management solution which enables user to perform enumeration, scanning, auditing, penetration testing and forensics on different operational systems from single console with 30 embedded utilities like Cisco Configuration Manager, Oracle Password Auditor, Windows... Platforms: Windows

BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking. Regardless if you're making BackTrack your primary operating system, booting from a LiveDVD, or using your favorite... Platforms: Linux

WS-Attacker is a modular framework for web services penetration testing. It is a free and easy to use software solution, which provides an all-in-one security checking interface with only a few clicks. Platforms: Windows, Mac, Linux

Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Inguma includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler. Platforms: Mac

DoSHTTP is an easy to use and powerful HTTP Flood Denial of Service (DoS) Testing Tool for Windows. DoSHTTP includes URL Verification, HTTP Redirection, Port Designation, Performance Monitoring and Enhanced Reporting. DoSHTTP uses multiple asynchronous sockets to perform an effective HTTP Flood.... Platforms: Windows

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working... Platforms: *nix

Snort Report is an add-on module for the Snort Intrusion Detection System. Snort Report add-on provides realtime reporting from the MySQL database generated by Snort. It has been tested on Redhat 6.2, 7.0, 7.1, and OpenBSD 2.9.. Symmetrix Technologies is a complete network integrator and... Platforms: *nix

Arudius is a live CD Linux distribution based on Minislack (Zenwalk) and Slaxs Linux Live scripts. It contains an extensive set of software tools used by IT security professionals for penetration testing and vulnerability analysis. Its goal is to include the most comlete set of useful tools... Platforms: *nix

Wyd project is a password profiler. In current IT security environments, files and services are often password protected. In certain situations it is required to get access to files and/or data even when they are protected and the password is unknown. wyd.pl was born of those two of... Platforms: *nix

Stompy provides a tool to check the security of Web session IDs and other tokens. Stompy the session stomper is a penetration testing tool that performs an automated analysis and runs an array of fairly sophisticated tests on WWW session identifiers (or any other tokens) to see whether they are... Platforms: *nix

Pentoo is a Linux LiveCD, it means that you can boot a linux environment on any x86 based PC. It is like KNOPPIX except that Pentoo is based on the Gentoo distribution and is oriented penetration testing. You can view the list of all available tools here . Well, I know there is already many... Platforms: *nix