Questions tagged [tools]
Tools used by security professionals
201
questions
125
votes
6
answers
252k
views
How to find out what programming language a website is built in?
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
- 1,742
63
votes
16
answers
57k
views
What tools are available to assess the security of a web application?
What tools are available to assess the security of a web application?
Please provide a small description of what the tool does.
Update: More specifically, I'm looking for tools that assume no ...
- 5,089
48
votes
5
answers
8k
views
Open-source penetration-test automation
What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them?
Does one simply use Metasploit RC files? A network vulnerability ...
- 19k
47
votes
5
answers
59k
views
What's an easy way to perform a man-in-the-middle attack on SSL?
I'd like to perform a man-in-the-middle attack on SSL connections between clients and a server.
Assuming the following:
I've got a certificate that the client will accept, via poor cert validation ...
- 135k
40
votes
5
answers
8k
views
How should source code security be checked?
How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
- 2,257
30
votes
8
answers
4k
views
Best way to administer all my passwords
I am trying to figure out what the best solution is to store different types of passwords:
Personal passwords (my personal email, my company's email, all the services I use to buy things like ...
- 403
30
votes
7
answers
998
views
How to keep an eye on upgrades, patches and security issues for used open-source libraries?
For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
- 401
28
votes
4
answers
29k
views
What benefits does Nessus have over OpenVAS?
Nessus and OpenVAS appear to have fairly similar features. Why would you choose one over the other, besides the benefit of commercial support (which isn't available for Nessus Home Feed users anyways)?...
- 19k
24
votes
4
answers
5k
views
Reduce Noise when Penetration Testing
Recently I participated in a capture the flag competition which was attached with SOC analysis teams monitoring our traffic.
There we were told that many tools were very noisy. Eg Sqlmap which has ...
- 455
22
votes
7
answers
8k
views
Convenient cross-platform help on checking secure hashes like SHA-256
It is often helpful to be able to obtain a good cryptographic checksum of a file, e.g. the SHA-256 hash. This can be used to verify file integrity, so long as you have a reliable source for the hash.
...
- 20.7k
22
votes
7
answers
2k
views
Computer Forensics: what is in your toolbox?
What tools do you use for collecting evidence, making disk images, inspecting live memory and so on?
- 2,020
22
votes
4
answers
47k
views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
- 329
21
votes
6
answers
68k
views
Browsing exploits with Metasploit console
Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.
- 3,536
21
votes
6
answers
3k
views
Backing up sensitive data - pitfalls and best practices
Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
- 20.7k
18
votes
4
answers
3k
views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so it is important to understand the criteria people might use when assessing Security static analysis tools.
...
- 62.1k
17
votes
7
answers
21k
views
Affordable web application attack tools
I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of $...
- 3,857
17
votes
4
answers
2k
views
Network Forensics - what is in your toolbox
In similar vein to this question on computer forensics, what tools would you have in your toolbox for infrastructure and network forensics. Typical example cases would be if you were called in either ...
- 61.5k
17
votes
3
answers
2k
views
How to evaluate a password manager?
How can we quantify the trade-off between password aggregation and convenience?
Password managers such as lastpass are convenient, but aggregation of passwords into a common store may reduce security....
- 3,003
16
votes
5
answers
19k
views
VeraCrypt/TruCrypt - I can't understand why you'd want to create a "hidden" volume...?
I can't think of a reason as to why you'd want to create a hidden volume in VeraCrypt. It says because "you may be asked to hand the information," but why would I need to hand it over? Nobody has any ...
- 421
16
votes
6
answers
9k
views
Lightweight Live Pen-test OS [closed]
Does anyone know of any lightweight OSs that are great for Pen-testing? I would love to have a very lightweight live OS that I can boot off a USB and try some pen-testing against some of my Windows/...
- 263
16
votes
3
answers
974
views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
- 3,950
15
votes
13
answers
77k
views
How can I intercept and modify HTTP requests?
Are there any free tools available that let me intercept and modify HTTP requests for testing?
I am looking for tools which allow me to send custom HTTP headers.
- 1,883
15
votes
1
answer
4k
views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?
- 1,287
15
votes
3
answers
9k
views
Smartphone / GSM Sniffer
This question would be in the category of SmartPhone Sniffers.
So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
- 563
14
votes
3
answers
4k
views
How to recover securely deleted data
Since we all know files are recoverable with programs after being deleted from the recycling bin, everyone is told to do secure wipes by putting random data over the files you're deleting on the disk ...
- 296
14
votes
5
answers
29k
views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
- 781
13
votes
5
answers
13k
views
Good file encryption tools [closed]
Could you please help me find a good file encryption tool? The target OS is Linux, but tools for Windows are welcome, too. FOSS tools are preferred. The tool must be reliable both for the recovery of ...
- 239
13
votes
4
answers
7k
views
How can I remotely wipe the contents of a Linux Laptop if its been stolen?
I am currently investigating using Linux Laptops for my development team. We currently run Windows. The one advantage that keeps coming up for Windows over Linux from a system administration / ...
- 131
13
votes
3
answers
72k
views
How can I detect the remote operating system?
Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
- 1,070
13
votes
3
answers
1k
views
Tools and methodologies to share pentest and/or source code analysis results [closed]
I would like to hear from you which tools (commercial and open source) do you use to share results during collaborative penetration test or source code/binary analysis. Well-known Dradis framework ...
anonymous
12
votes
4
answers
3k
views
Powerful security tools to use in penetration testing
I want to ask you about some good security tools you've used or heard about, please let us know the ability in every tool and the difficulty to use it and which is the best situation to use this tool ....
- 383
11
votes
3
answers
6k
views
Can anyone suggest good open source tools for scanning source code for vulnerabilities? [closed]
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
- 1,204
10
votes
2
answers
431
views
Why is FireSheep such a big deal?
We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
- 1,851
10
votes
2
answers
15k
views
Tools to scan for PII [closed]
I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and ...
- 153
10
votes
1
answer
7k
views
How to Perform Vulnerability Assessment for WCF services
Does anyone know how to perform penetration testing/vulnerability assessment for Microsoft WCF services I couldn't find a tools till now , any tools available and guides are welcome
- 867
9
votes
4
answers
8k
views
extract from pcap all protocols found
I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark
I think tshark is able to do it, but ...
- 1,062
9
votes
1
answer
3k
views
Any MITM tool for forcing weak SSL cipher suite?
Let's say I'm trying to reverse engineering communctions between an Android app and a web server uing HTTPS.
At beginning, I tried to do MITM using webmitm and a fake cert. But the app failed to ...
- 777
9
votes
4
answers
2k
views
Persisting and comparing NMAP scans
Does anyone have any good recommendations on a good tool for persisting NMAP scans to database?
It may be a tool for persisting or simply a java library for easy parsing of the nmap xml scan result ...
- 16.2k
9
votes
4
answers
2k
views
What good, standard digital signature / timestamp verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify via software run locally on public data.
For example, imagine ...
- 20.7k
9
votes
4
answers
207
views
Fingerprinting the webpage content
I'm moderating a closed section of a forum - think 'covered by NDA' (not actually, but it's a good equivalent of the situation), with restricted access.
Sometimes we find screenshots from that forum ...
- 223
8
votes
7
answers
33k
views
Are there any tools for scanning for SQL injection vulnerabilities while logged in?
Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems ...
- 442
8
votes
3
answers
4k
views
Who (which process) is calling curl?
On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server.
Basically I installed little Snitch and find out that "somebody" is using curl periodically.
...
- 733
8
votes
2
answers
2k
views
Classical Cryptography Tools
I'm wondering if there are any tools out there that can assist in solving classical cipher text. I'm looking into developing some tools such as frequency analysis, transposition tools and so on but ...
- 398
8
votes
6
answers
8k
views
Fortify360 - Sinks & Sources - Vulnerability count
In an application security environment, I use Fortify Software's Fortify360 on a daily basis.
One of my biggest hurdles is explaining the numbers (sources vs sinks)
Fortify flags each location in ...
- 1,996
8
votes
4
answers
1k
views
Benefits of secure code review in-IDE vs. fatapp vs. webapp
For those of you who have worked with commercial secure code review tools such as:
Klocwork
Coverity
Armorize
Fortify
Checkmarx
Appscan Source Edition (formerly
Ounce)
Or perhaps a free or open-...
- 19k
8
votes
2
answers
13k
views
How can I view the NTFS $MFT using correct field names?
I am trying to view an NTFS master file table. Each tool I have used so far extracts all of the entries, but puts non standard headers such as STANDARD_INFORMATION_ON instead of say $...
- 301
8
votes
1
answer
2k
views
Identifying, analyzing, and predicting weak session cookies
To elaborate on this, I'm looking at this from the perspective of a hacker/penetration tester. Many times I have seen web applications that I know have weak cookies. I can tell this because I can ...
- 241
8
votes
1
answer
565
views
CERT FOE Fuzzing Framework documentation
So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
- 97
7
votes
3
answers
678
views
Which resources can help me learn how to use metasploit? [closed]
I tried google search but I can't find good resources to learn how to use the metasploit framework.
Where would you suggest a beginner go to learn about using metasploit?
- 181
7
votes
1
answer
11k
views
High concentration of UDP traffic, good or bad?
Should a network have a high concentration of UDP traffic compared to TCP traffic bad for a network especially in the context of network security?
I'm looking at my organization's network protocol ...
- 383