Penetration Testing

KCPentrix project is Live CD design to be a standalone Penetration testing toolkit for pentesters and security analysts. KCPenTrix based on SLAX, a Slackware live cd and gentoo,auditor and whoppix. The Powerful modularity which KCPenTrix uses, allow us easily customize our version, and... Platforms: *nix

GnackTrack is an open and free project to merge penetration testing tools and the linux Gnome desktop. GnackTrack is a Live (and installable) Linux distribution designed for Penetration Testing and is based on Ubuntu. Platforms: *nix

DSniff project is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of... Platforms: *nix

THC-Amap is a next-generation tool for assistingnetwork penetration testing. It performs fast and reliable application protocol detection, independant on the TCP/UDP port they are being bound to. THC-Amap is a next-generation scanning tool for pentesters. It attempts to identify applications... Platforms: *nix

Pangolin is an automatic SQL injection penetration testing (Pen-testing) tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can... Platforms: Windows

Metasploit Express is an affordable, easy-to-use penetration testing solution powered by Metasploit, the world's largest, fully tested, integrated public database of exploits. Metasploit Express enables you to validate the strengths and weaknesses of your overall security program. It also helps... Platforms: Windows, 2003, Windows Vista, XPX64, 2008, 7, 7x64

BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated to hacking. Regardless if you're making BackTrack your primary operating system, booting from a LiveDVD, or using your favorite... Platforms: Linux

WS-Attacker is a modular framework for web services penetration testing. It is a free and easy to use software solution, which provides an all-in-one security checking interface with only a few clicks. Platforms: Windows, Mac, Linux

Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python. Inguma includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler. Platforms: Mac

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working... Platforms: *nix

Snort Report is an add-on module for the Snort Intrusion Detection System. Snort Report add-on provides realtime reporting from the MySQL database generated by Snort. It has been tested on Redhat 6.2, 7.0, 7.1, and OpenBSD 2.9.. Symmetrix Technologies is a complete network integrator and... Platforms: *nix

Arudius is a live CD Linux distribution based on Minislack (Zenwalk) and Slaxs Linux Live scripts. It contains an extensive set of software tools used by IT security professionals for penetration testing and vulnerability analysis. Its goal is to include the most comlete set of useful tools... Platforms: *nix

Wyd project is a password profiler. In current IT security environments, files and services are often password protected. In certain situations it is required to get access to files and/or data even when they are protected and the password is unknown. wyd.pl was born of those two of... Platforms: *nix

Stompy provides a tool to check the security of Web session IDs and other tokens. Stompy the session stomper is a penetration testing tool that performs an automated analysis and runs an array of fairly sophisticated tests on WWW session identifiers (or any other tokens) to see whether they are... Platforms: *nix

Pentoo is a Linux LiveCD, it means that you can boot a linux environment on any x86 based PC. It is like KNOPPIX except that Pentoo is based on the Gentoo distribution and is oriented penetration testing. You can view the list of all available tools here . Well, I know there is already many... Platforms: *nix

OSWA-Assistant is a self-contained, freely downloadable, wireless-auditing toolkit for both IT-security professionals and End-users alike. This toolkit is our contribution to the wireless security/auditing community and, as the "Assistant" moniker implies, and is designed for the following... Platforms: *nix

A collaboration between the open source community and Rapid7, Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments, providing true security risk intelligence. Capabilities include smart... Platforms: Windows

A collaboration between the open source community and Rapid7, Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments, providing true security risk intelligence. Capabilities include smart... Platforms: Linux

A collaboration between the open source community and Rapid7, Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments, providing true security risk intelligence. Capabilities include smart... Platforms: Linux

UNetbootin allows you to create bootable Live USB drives for Ubuntu, Fedora, and other Linux distributions without burning a CD. It runs on Windows, Linux, and Mac OS X. You can either let UNetbootin download one of the many distributions supported out-of-the-box for you, or supply your own Linux... Platforms: Mac