Questions tagged [tools]
Tools used by security professionals
201
questions
10
votes
2
answers
15k
views
Tools to scan for PII [closed]
I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and ...
- 153
4
votes
1
answer
550
views
How to encrypt an entire portable HDD, so that it cannot be read/written without the password for it?
I use a portable USB drive (Seagate FreeAgent Go Flex) to keep all my personal stuff, and though the HDD company does offer a password scheme to control access to it, that would work only on windows, ...
- 145
18
votes
4
answers
3k
views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so it is important to understand the criteria people might use when assessing Security static analysis tools.
...
- 62.1k
6
votes
2
answers
4k
views
Virus detection with Process Explorer
Can Process Explorer ( Windows apparently) detect a virus? Is it even possible?
- 171
0
votes
1
answer
347
views
System image that does not allow for recovery of deleted files?
We are working with an contractor regarding a compromised computer. The contractor has asked for a dd dump of the drive. However, my understanding is that dd would allow the contractor to recover ...
- 387
6
votes
4
answers
9k
views
Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?
The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
- 38.3k
7
votes
3
answers
678
views
Which resources can help me learn how to use metasploit? [closed]
I tried google search but I can't find good resources to learn how to use the metasploit framework.
Where would you suggest a beginner go to learn about using metasploit?
- 181
6
votes
3
answers
461
views
Are there password/passphrase guessers/crackers which can utilize facts supplied about the target?
I was just reading a discussion about cracking passwords that said the person running the tool might know things about the target like the birthday of his first girlfriend's dog but the tool won't.
...
- 582
6
votes
5
answers
3k
views
What password cracking software is commonly used?
I am curious to know how secure my passwords are.
What password cracking software is commonly used?
Preferably open source.
EDIT: I am actually looking to crack my passwords used on services I don'...
- 842
4
votes
2
answers
3k
views
How to see whether the pcap contains RTP traffic?
I am analyzing the traffic of a VOIP application. I started up wireshark, and made sure no other application was using internet, and then had a a voice call on the application. Wireshark captured some ...
15
votes
3
answers
9k
views
Smartphone / GSM Sniffer
This question would be in the category of SmartPhone Sniffers.
So we have sniffers that can show the packets that are being sent across a wired or wireless (802.11) network. I am just performing a ...
- 563
22
votes
4
answers
47k
views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
- 329
3
votes
4
answers
2k
views
Comparing penetration testing suites
I've been using Backtrack for a while now. I was wondering if there is anything better, or on par with, that is worth looking into. Thoughts?
- 1,125
3
votes
1
answer
436
views
testing for 'Dangling Cursor'
While reading the updated Top 25 exploits in the Common Weakness Enumeration I came across an exploit that I was not familiar with. It is numbered CWE-619: Dangling Database Cursor.
I was wondering ...
- 882
21
votes
6
answers
68k
views
Browsing exploits with Metasploit console
Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.
- 3,536
6
votes
3
answers
7k
views
Firewall Configuration Audits
I'm looking to perform policy audits against firewall configurations and/or rulesets. This should be performed independently of any configuration management systems, ideally by operating off the ...
- 15.3k
6
votes
2
answers
4k
views
What tools exist to help me monitor OCSP certificate validation failures?
The discussion at Why isn't OCSP required by default in browsers? notes that many browsers by default simply ignore failure to check web site TLS certificate revocation status via the Online ...
- 20.7k
9
votes
4
answers
8k
views
extract from pcap all protocols found
I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark
I think tshark is able to do it, but ...
- 1,062
3
votes
1
answer
3k
views
Are there any tools for automated penetration testing of Silverlight applications? [closed]
I'd like to find a tool to assist with automated penetration testing of Silverlight applications, in a similar vein to AppScan for webapps.
Specifically, I'm looking for a tool that can cope with ...
- 183
6
votes
4
answers
697
views
What kind of IT security applications do you guys run on your laptop/desktop? [closed]
I know a lot of people run different security applications on their laptops/desktops. I use Little Snitch on my Macbook Pro. I like to know where my applications are sending data and where I am ...
16
votes
6
answers
9k
views
Lightweight Live Pen-test OS [closed]
Does anyone know of any lightweight OSs that are great for Pen-testing? I would love to have a very lightweight live OS that I can boot off a USB and try some pen-testing against some of my Windows/...
- 263
7
votes
1
answer
11k
views
High concentration of UDP traffic, good or bad?
Should a network have a high concentration of UDP traffic compared to TCP traffic bad for a network especially in the context of network security?
I'm looking at my organization's network protocol ...
- 383
14
votes
5
answers
29k
views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
- 781
-3
votes
1
answer
1k
views
Is there a need for a simple SAAS security risk assessment application? [closed]
Apologies if this is question is not quite right for this site, I have been working on a small startup simple security risk assessment application, mainly to scratch my own itch and am looking to get ...
- 5,833
6
votes
6
answers
3k
views
What are some good, free tools to run automated security audits for PHP code?
I've been looking for some time now and have come up short. The most promising I found was Spike PHP, which seems to no longer work. I'm looking to scan my code for potential risks of SQL Injection, ...
- 161
6
votes
7
answers
16k
views
What tools exist to manage large scale firewall rulesets?
For an enterprise firewall you may have over 50 thousand rules. With typical errors in firewall rules including things like mistyped network masks you couldn't hope to manually review the release.
So ...
- 61.5k
7
votes
1
answer
1k
views
Tools to identify and report hacking attempts originating inside reputable organizations?
Re: Should I report hacking attempts? - Server Fault
Lots of people look at their own logs for attacks from the outside. But who regularly reports such attacks back to the source? I'm mainly ...
- 20.7k
8
votes
2
answers
2k
views
Classical Cryptography Tools
I'm wondering if there are any tools out there that can assist in solving classical cipher text. I'm looking into developing some tools such as frequency analysis, transposition tools and so on but ...
- 398
11
votes
3
answers
6k
views
Can anyone suggest good open source tools for scanning source code for vulnerabilities? [closed]
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
- 1,204
1
vote
2
answers
584
views
is there any solution to manage network forensic, SIEM and intelligence analysis and investigation in a enterprise network?
Anyone have experience in a solution to manage in an integrated view this functionality ?
- network forensic
- SIEM
- intelligence analysis and investigation
Like Niksun or Solera solution do ?
I'm ...
- 1,066
0
votes
1
answer
715
views
IR Jump Bag - What kind of bag/container to use?
I am working on putting together an Incident Response Jump Bag (detailed here).
Any suggestions on what type of container/bag to use for this? It seems like a lot of little items that could be ...
- 1,387
4
votes
3
answers
741
views
What is the proper priority/mix of (people, tools and technology, processes) to optimize defense?
I'm curious if people have different views on this and why.
Update based on comments:
Defend enterprises.
Quotes:
"Long-time blog readers should know that I don't rely on tools to defend my ...
- 13.8k
21
votes
6
answers
3k
views
Backing up sensitive data - pitfalls and best practices
Obviously, securely backing up sensitive data is a challenge. A remote backup is important for surviving a variety of disasters. What are some of the "gotcha's" lurking out there, and what best ...
- 20.7k
9
votes
4
answers
2k
views
What good, standard digital signature / timestamp verification clients are widely or easily deployed?
I'm looking for a good way to publish data along with a digital signature (and ideally a timestamp) which is as easy as possible to verify via software run locally on public data.
For example, imagine ...
- 20.7k
8
votes
6
answers
8k
views
Fortify360 - Sinks & Sources - Vulnerability count
In an application security environment, I use Fortify Software's Fortify360 on a daily basis.
One of my biggest hurdles is explaining the numbers (sources vs sinks)
Fortify flags each location in ...
- 1,996
16
votes
3
answers
974
views
Are there any decent web app security scanners that can integrate with a build server?
I've spent a lot of time in TeamCity recently and the nightly code quality metrics coming from the dupe finder, FxCop and NDepend have been great.
What I'd really like to do is find a decent web app ...
- 3,950
7
votes
4
answers
1k
views
Firewall Reviews - What is in your Toolbox?
In the vein of the questions about forensics, I'd be interested to hear what tools/techniques people use on Firewall reviews, both in terms of periodic reviews as an auditor or consultant, or ...
- 62.1k
17
votes
4
answers
2k
views
Network Forensics - what is in your toolbox
In similar vein to this question on computer forensics, what tools would you have in your toolbox for infrastructure and network forensics. Typical example cases would be if you were called in either ...
- 61.5k
15
votes
1
answer
4k
views
What should be included in a jump bag and how often should it be reviewed?
What items should be included in a jump bag? How often do you review your jump bag?
- 1,287
9
votes
4
answers
2k
views
Persisting and comparing NMAP scans
Does anyone have any good recommendations on a good tool for persisting NMAP scans to database?
It may be a tool for persisting or simply a java library for easy parsing of the nmap xml scan result ...
- 16.2k
30
votes
7
answers
998
views
How to keep an eye on upgrades, patches and security issues for used open-source libraries?
For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
- 401
8
votes
4
answers
1k
views
Benefits of secure code review in-IDE vs. fatapp vs. webapp
For those of you who have worked with commercial secure code review tools such as:
Klocwork
Coverity
Armorize
Fortify
Checkmarx
Appscan Source Edition (formerly
Ounce)
Or perhaps a free or open-...
- 19k
4
votes
3
answers
398
views
Which languages are better for attacks against websites?
Which languages are better for writing tools for attacking websites, through, say, a DDOS? High level, low level, and does it even make a difference?
- 1,851
10
votes
2
answers
431
views
Why is FireSheep such a big deal?
We've had WireShark and other tools for a long time before. Why does everybody make such a big deal about FireSheep?
- 1,851
13
votes
3
answers
1k
views
Tools and methodologies to share pentest and/or source code analysis results [closed]
I would like to hear from you which tools (commercial and open source) do you use to share results during collaborative penetration test or source code/binary analysis. Well-known Dradis framework ...
anonymous
12
votes
4
answers
3k
views
Powerful security tools to use in penetration testing
I want to ask you about some good security tools you've used or heard about, please let us know the ability in every tool and the difficulty to use it and which is the best situation to use this tool ....
- 383
48
votes
5
answers
8k
views
Open-source penetration-test automation
What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them?
Does one simply use Metasploit RC files? A network vulnerability ...
- 19k
28
votes
4
answers
29k
views
What benefits does Nessus have over OpenVAS?
Nessus and OpenVAS appear to have fairly similar features. Why would you choose one over the other, besides the benefit of commercial support (which isn't available for Nessus Home Feed users anyways)?...
- 19k
15
votes
13
answers
77k
views
How can I intercept and modify HTTP requests?
Are there any free tools available that let me intercept and modify HTTP requests for testing?
I am looking for tools which allow me to send custom HTTP headers.
- 1,883
22
votes
7
answers
2k
views
Computer Forensics: what is in your toolbox?
What tools do you use for collecting evidence, making disk images, inspecting live memory and so on?
- 2,020