Questions tagged [tools]
Tools used by security professionals
201
questions
0
votes
0
answers
25
views
What are the top visualization tools out there for threat investigation?
cybersecurity professionals! I'm a researcher at a large danish university, and I've been fortunate to secure funding for a project aimed at enhancing the visualization of threat investigations in ...
- 1
0
votes
1
answer
55
views
Looking at internal ports through netstat command [closed]
I have a connection to another machine and was looking at which ports are open internally and which ports are open on all interfaces, I ran the following netstat command to achieve this
netstat -ano
...
- 199k
1
vote
1
answer
89
views
How do you de-duplicate security risk findings obtained from various different tools?
You potentially use a variety of scanners and processes (e.g. Threat Modelling) which produces a set of overlapping outputs. How do you avoid repeated findings which are duplicated across toolsets?
- 33.4k
0
votes
2
answers
739
views
What exactly is Application.Hacktool.AMZ?
I have been using Windows Product Key Viewer for ages to read current Windows' serial number. I had never any hack- or virus-related issue about this application.
A few days ago I have installed ...
- 891
-3
votes
1
answer
360
views
Getting started with sn1per scanning [closed]
I just pulled down the repository for an elite penetration testing tool call sn1per I want to use this tool to scan a list of websites. My goal is to automate the steps of a manual penetration test.
...
- 128k
5
votes
1
answer
1k
views
Creating a DDoS attack using DirectConnect
I have been trying to hack around with Apex DirectConnect. What I wish to do is to utilize the querying nature of P2P apps like DC to generate a DDoS attack (see links for reference here, here and ...
- 2,265
0
votes
1
answer
71
views
Do popular pentest tools leave any digital fingerprints?
Do pentesting tools leave behind any information in order to identify the attacker?
- 128k
18
votes
4
answers
3k
views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so it is important to understand the criteria people might use when assessing Security static analysis tools.
...
AviD♦
- 73.2k
4
votes
3
answers
10k
views
How to check if USB device isn't malicious?
Let's say I've got a generic, cheap mouse.
It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device?
(on ...
- 1
-2
votes
1
answer
546
views
Online service to download file from URL directly as zip [closed]
Is there an online service which allows to download a file from a URL directly zipped?
I want to analyze a potential malicious JavaScript file with some automatic anti virus engines but I don't want ...
- 125
1
vote
0
answers
359
views
Looking for origin/ verification of malicious domain names [closed]
My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
- 128k
3
votes
1
answer
3k
views
Where to find complete Kali image for docker with all the tools? [closed]
As of now, I am using Windows 10 & I want to run kali Linux on Docker. For that, I took the copy from the kali official site Here
But after running I found it's just a base OS it doesn't contain ...
- 299
1
vote
0
answers
102
views
Shuffle Tool / Software [closed]
I use GPG symmetric, to encrypt text file.
Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions:
...
- 11
16
votes
3
answers
974
views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
- 2,265
1
vote
2
answers
371
views
OpenSource API Security Testing Automation?
I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
CommunityBot
- 1
22
votes
7
answers
8k
views
Convenient cross-platform help on checking secure hashes like SHA-256
It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash.
...
- 2,265
8
votes
7
answers
33k
views
Are there any tools for scanning for SQL injection vulnerabilities while logged in?
Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems ...
- 442
0
votes
1
answer
216
views
How does a hacker reach a back-end file to exploit it?
I read this post: How does hacking work? and I saw that Chris Dale answered the question with some PHP exploit instructions. However, how does a hacker can read a PHP file (or another back-end file), ...
- 128k
28
votes
4
answers
29k
views
What benefits does Nessus have over OpenVAS?
Nessus and OpenVAS appear to have fairly similar features. Why would you choose one over the other, besides the benefit of commercial support (which isn't available for Nessus Home Feed users anyways)?...
- 128k
0
votes
1
answer
1k
views
Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank
I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
CommunityBot
- 1
1
vote
0
answers
212
views
Collaboration tools [closed]
Is there any good alternatives to the lair-framework. I think that was an awesome platform, and unfortunately its not maintained anymore and no more updates to it. But i have tried all other kinds of ...
- 128k
0
votes
0
answers
96
views
Hacking Attempt Requests Not showing Up on Webserver Logs But Google Analytics Shows it
Which hacking tool makes a request and does not show up on web-server logs?
/en/latest/ has been requested over 116, we don't have this URL on the website at all!
The request to that URL does not show ...
- 35
0
votes
1
answer
4k
views
Where can I find a list of Indicators of Compromise (IOC) conditions?
OpenIOC.org has several schemas defining Indicators of Compromise.
The Schema is defined here:
http://schemas.mandiant.com/2010/ioc/ioc.xsd
While under IndicatorItemContext/search says it is xs:...
- 413
0
votes
1
answer
5k
views
Is there a tool to test whether a server supports any cipher suite?
I would like to test whether a server is using some bad cipher suites.
The problem is, many of the bad cipher suites have been removed from openssl 1.x(e.g. suites exposed to FREAK). Therefore, ...
0
votes
1
answer
10k
views
Recon-ng v5 - How to add domains?
I just started with recon-ng today, I was following tutorials but every tutorial is outdated with most of them describing the functions of v4.
I was able to update myself with simple additions like ...
0
votes
1
answer
217
views
How to pentest RMI
I have a Swing client that communicates through T3 protocol (RMI) with a Server. Now I want to capture the requests and modify them (like HTTP in Burp or OWASP ZAP).
Is there any attack proxy for RMI/...
CommunityBot
- 1
8
votes
1
answer
2k
views
Identifying, analyzing, and predicting weak session cookies
To elaborate on this, I'm looking at this from the perspective of a hacker/penetration tester. Many times I have seen web applications that I know have weak cookies. I can tell this because I can ...
-1
votes
4
answers
608
views
Do black hat hackers or even hacktivists use penetration testing tools?
I was reading digital forensics as part of my curriculum and came across some tools used for hacking (ethical hacking aka pentration testing). There is a bunch of tools out there. I was wondering if ...
- 128k
1
vote
0
answers
3k
views
Why does Volatility fail on windows 10 dumps and what other tools can I use? [closed]
So I am trying to extract data from a full memory dump (Made with either dumpit or a BSOD). WinDBG manages to extract some information from it, but Volatility is silent:
PS F:\> C:\Python27\python....
- 4,859
3
votes
1
answer
3k
views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
48
votes
5
answers
8k
views
Open-source penetration-test automation
What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them?
Does one simply use Metasploit RC files? A network vulnerability ...
CommunityBot
- 1
13
votes
3
answers
73k
views
How can I detect the remote operating system?
Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
- 3,012
1
vote
0
answers
99
views
For creating tools, Bash, Perl or Python? Which should I invest my time in to? [closed]
Having trouble choosing between the three, I would of course love to learn all three in the future, but right now I'm curious as to which language would be the most beneficial to me.
Also, I'm aware ...
- 325
47
votes
5
answers
59k
views
What's an easy way to perform a man-in-the-middle attack on SSL?
I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server.
Assuming the following:
I've got a certificate that the client will accept, via poor cert validation ...
CommunityBot
- 1
2
votes
1
answer
4k
views
Tools to produce an MD5 collision?
I'd like to learn a bit more about MD5 collisions.
So let's assume I have a message m:
m = somesecretmessage
And I hash that message:
z = md5(m)
The only know information is z. I do not know m.
...
- 15.6k
9
votes
4
answers
2k
views
What good, standard digital signature / timestamp verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify via software run locally on public data.
For example, imagine ...
CommunityBot
- 1
0
votes
1
answer
172
views
Security test within a staging environment. Is SOAPUI sufficient as a test tool?
Currently I am working on a project in which I am supposed to define the following aspects as a test manager:
Conception of a penetration test for a test staging environment
Planning security ...
- 1,012
6
votes
3
answers
7k
views
Firewall Configuration Audits
I'm looking to perform policy audits against firewall configurations and/or rulesets. This should be performed independently of any configuration management systems, ideally by operating off the ...
- 1,492
-2
votes
2
answers
514
views
Why use tools such as BurpSuite, nmap or SQLmap?
I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
- 128k
13
votes
5
answers
13k
views
Good file encryption tools [closed]
Could you please help me find a good file encryption tool? The target OS is Linux, but tools for Windows are welcome, too. FOSS tools are preferred. The tool must be reliable both for the recovery of ...
CommunityBot
- 1
30
votes
8
answers
4k
views
Best way to administer all my passwords
I am trying to figure out what the best solution is to store different types of passwords:
Personal passwords (my personal email, my company's email, all the services I use to buy things like ...
- 403
21
votes
6
answers
68k
views
Browsing exploits with Metasploit console
Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.
- 1
14
votes
5
answers
29k
views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
- 111
125
votes
6
answers
253k
views
How to find out what programming language a website is built in?
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
-1
votes
2
answers
654
views
ZAP: Evaluate / Show response in browser
Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser.
However, since the payload was sent with POST, I can't just use "Open URL in ...
- 1,490
1
vote
1
answer
162
views
Multicore hacker tools?
Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
- 66.5k
1
vote
1
answer
2k
views
Malware Execution Delay
I am new to malware analysis and am currently using Cuckoo to understand some of the basics.
I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
CommunityBot
- 1
0
votes
1
answer
9k
views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
- 1
40
votes
5
answers
8k
views
How should source code security be checked?
How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
- 32.7k
0
votes
1
answer
147
views
How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?
My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
- 15.4k