Questions tagged [tools]
Tools used by security professionals
43
questions
63
votes
16
answers
57k
views
What tools are available to assess the security of a web application?
What tools are available to assess the security of a web application?
Please provide a small description of what the tool does.
Update: More specifically, I'm looking for tools that assume no ...
- 5,089
125
votes
6
answers
252k
views
How to find out what programming language a website is built in?
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
- 1,742
17
votes
3
answers
2k
views
How to evaluate a password manager?
How can we quantify the trade-off between password aggregation and convenience?
Password managers such as lastpass are convenient, but aggregation of passwords into a common store may reduce security....
- 3,003
30
votes
7
answers
998
views
How to keep an eye on upgrades, patches and security issues for used open-source libraries?
For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
- 401
15
votes
3
answers
9k
views
Smartphone / GSM Sniffer
This question would be in the category of SmartPhone Sniffers.
So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
- 563
4
votes
3
answers
10k
views
How to check if USB device isn't malicious?
Let's say I've got a generic, cheap mouse.
It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device?
(on ...
- 225
15
votes
13
answers
77k
views
How can I intercept and modify HTTP requests?
Are there any free tools available that let me intercept and modify HTTP requests for testing?
I am looking for tools which allow me to send custom HTTP headers.
- 1,883
14
votes
3
answers
4k
views
How to recover securely deleted data
Since we all know files are recoverable with programs after being deleted from the recycling bin, everyone is told to do secure wipes by putting random data over the files you're deleting on the disk ...
- 296
8
votes
1
answer
2k
views
Identifying, analyzing, and predicting weak session cookies
To elaborate on this, I'm looking at this from the perspective of a hacker/penetration tester. Many times I have seen web applications that I know have weak cookies. I can tell this because I can ...
- 241
6
votes
6
answers
3k
views
What are some good, free tools to run automated security audits for PHP code?
I've been looking for some time now and have come up short. The most promising I found was Spike PHP, which seems to no longer work. I'm looking to scan my code for potential risks of SQL Injection, ...
- 161
47
votes
5
answers
59k
views
What's an easy way to perform a man-in-the-middle attack on SSL?
I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server.
Assuming the following:
I've got a certificate that the client will accept, via poor cert validation ...
- 135k
22
votes
4
answers
47k
views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
- 329
22
votes
7
answers
2k
views
Computer Forensics: what is in your toolbox?
What tools do you use for collecting evidence, making disk images, inspecting live memory and so on?
- 2,020
17
votes
4
answers
2k
views
Network Forensics - what is in your toolbox
In similar vein to this question on computer forensics, what tools would you have in your toolbox for infrastructure and network forensics. Typical example cases would be if you were called in either ...
- 61.5k
15
votes
1
answer
4k
views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?
- 1,287
11
votes
3
answers
6k
views
Can anyone suggest good open source tools for scanning source code for vulnerabilities? [closed]
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
- 1,204
9
votes
4
answers
2k
views
What good, standard digital signature / timestamp verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify via software run locally on public data.
For example, imagine ...
- 20.7k
6
votes
3
answers
462
views
What CVE identifier will follow after CVE-2012-9999?
I am writing an application which uses CVE identifiers to cross-reference vulnerabilities. I would like to make it compatible with future CVE identifiers.
If it happens that there are more than 9999 ...
- 163
6
votes
7
answers
16k
views
What tools exist to manage large scale firewall rulesets?
For an enterprise firewall you may have over 50 thousand rules. With typical errors in firewall rules including things like mistyped network masks you couldn't hope to manually review the release.
So ...
- 61.5k
4
votes
3
answers
5k
views
Are there any tools that focus on shellcode analysis?
Shellcode presents certain challenges for disassembly. It often self-modifies, jumps to the stack (where the shellcode will likely be placed), and relies on certain unusual tricks that standard ...
- 135k
3
votes
3
answers
13k
views
What sites are still vulnerable to FireSheep?
Am doing a Firesheep Demo in a few weeks as a security awareness project. However I can't seem to get it working, and I'm wondering if it's just because the handlers it ships with are now outdated ...
- 9,313
3
votes
2
answers
374
views
Is it possible to make a "proof of anteriority" for sites content?
Given a site that publishes unique content online and given that there are lots of site scrapers and persons stealing content and reposting it as their own, inevitably you will have the same content ...
- 33
0
votes
1
answer
5k
views
Is there a tool to test whether a server supports any cipher suite?
I would like to test whether a server is using some bad cipher suites.
The problem is, many of the bad cipher suites have been removed from openssl 1.x(e.g. suites exposed to FREAK). Therefore, ...
- 103
48
votes
5
answers
8k
views
Open-source penetration-test automation
What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them?
Does one simply use Metasploit RC files? A network vulnerability ...
- 19k
21
votes
6
answers
3k
views
Backing up sensitive data - pitfalls and best practices
Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
- 20.7k
16
votes
6
answers
9k
views
Lightweight Live Pen-test OS [closed]
Does anyone know of any lightweight OSs that are great for Pen-testing? I would love to have a very lightweight live OS that I can boot off a USB and try some pen-testing against some of my Windows/...
- 263
14
votes
5
answers
29k
views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
- 781
12
votes
4
answers
3k
views
Powerful security tools to use in penetration testing
I want to ask you about some good security tools you've used or heard about, please let us know the ability in every tool and the difficulty to use it and which is the best situation to use this tool ....
- 383
10
votes
2
answers
431
views
Why is FireSheep such a big deal?
We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
- 1,851
9
votes
1
answer
3k
views
Any MITM tool for forcing weak SSL cipher suite?
Let's say I'm trying to reverse engineering communctions between an Android app and a web server uing HTTPS.
At beginning, I tried to do MITM using webmitm and a fake cert. But the app failed to ...
- 777
8
votes
3
answers
4k
views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
- 733
8
votes
4
answers
1k
views
Benefits of secure code review in-IDE vs. fatapp vs. webapp
For those of you who have worked with commercial secure code review tools such as:
Klocwork
Coverity
Armorize
Fortify
Checkmarx
Appscan Source Edition (formerly
Ounce)
Or perhaps a free or open-...
- 19k
8
votes
7
answers
33k
views
Are there any tools for scanning for SQL injection vulnerabilities while logged in?
Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems ...
- 442
7
votes
1
answer
1k
views
Tools to identify and report hacking attempts originating inside reputable organizations?
Re: Should I report hacking attempts? - Server Fault
Lots of people look at their own logs for attacks from the outside. But who regularly reports such attacks back to the source? I'm mainly ...
- 20.7k
6
votes
2
answers
4k
views
What tools exist to help me monitor OCSP certificate validation failures?
The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
- 20.7k
6
votes
1
answer
11k
views
SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns
I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
- 545
4
votes
1
answer
286
views
Data analyzer tools [closed]
I have to find information that can be located in files on a hard drive.
Are there good tools to search for specific keywords (even in the hard disk free space area ;-), detect encrypted files, detect ...
- 569
3
votes
1
answer
1k
views
Tools for Verifying Secure Deletion [closed]
It is recommended to verify the zeroing-out was done properly when you try to secure delete a HDD. From this post, some drives with firmware bugs prevent secure erase from working properly.
What are ...
- 131
3
votes
1
answer
3k
views
Pointers for john the ripper rulesets
I've been pouring over the JtR ruleset documentation and making little progress. I understand how to use it to make various permutations from a given wordlist, that's fine. However, I'm trying to ...
- 133
3
votes
1
answer
3k
views
Are there any tools for automated penetration testing of Silverlight applications? [closed]
I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.
Specifically, I'm looking for a tool that can cope with ...
- 183
1
vote
2
answers
7k
views
What is the best tool to anonymize your scans (network/ports)? [closed]
What are the best tools to anonymize my port scanners and vulnerability assessment tools (like nmap , metasploit ) ...?
I have been using Backtrack and tor network with proxychains to do this, but ...
- 867
1
vote
4
answers
2k
views
Completely wiping a HDD (i.e. nothing is recoverable) [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to see if there's a method that can completely wipe out the content of a HDD, so that nothing previously ...
- 113
1
vote
1
answer
847
views
RK Hunter Warns about /usr/lib/apache2/mpm-event/apache2 uses deleted files, how to further investigate the matter and how shall I treat it?
I have a cloud server that I am preparing for a small E-Commerce website deployment.
I've used a RSA-2048 keys right before booting the newly purchased server, with the help of the Provider's Control ...
- 173