SecTools

OAT

Jalal Rohani — Wed, 29 Aug 2007 13:20:50 +0000

OAT (Oracle Auditing Tools) - is a set of tools which can be used to audit Oracle databases running on the Microsoft Windows platform. The Tools are Java based and were tested on both Windows and Linux. They should hopefully also run on any other Java platform. http://www.cqure.net/wp/?page_id=2

These icons link to social bookmarking sites where readers can share and discover new web pages.

Mistress

Jalal Rohani — Wed, 29 Aug 2007 13:19:31 +0000

Mistress in an ‘Application Sadism Environment’ and can also be called a fuzzer. It is written in Python and was created for probing file formats on the fly and protocols with malformed data, based on pre-defined patterns. It is recommended that the project site be visited for further documentation and use cases.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Metacoretex

Jalal Rohani — Wed, 29 Aug 2007 13:07:19 +0000

MetaCoretex security scanner is an extremely modular plugin based security scanner written entirely in JAVA to allow the use of JDBC Type IV drivers when scanning databases. Initially, most plugins will likely be for DBs.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Jbrofuzz

Jalal Rohani — Wed, 29 Aug 2007 13:05:40 +0000

JBroFuzz is a stateless network protocol fuzzer that emerged from the needs of penetration testing. Written in Java, it allows for the identification of certain classess of security vulnerabilities, by means of creating malformed data and having the network protocol in question consume the data. Info: http://www.owasp.org/index.php/Category:OWASP_JBroFuzz

These icons link to social bookmarking sites where readers can share and discover new web pages.

ISR-Form

Jalal Rohani — Wed, 29 Aug 2007 13:05:01 +0000

Gets the form data from a webpage Info: http://www.infobyte.com.ar/

These icons link to social bookmarking sites where readers can share and discover new web pages.

Cisco Enable Bruteforcer

Jalal Rohani — Wed, 29 Aug 2007 01:16:08 +0000

Cisco internal bruteforcer Usage: enabler [-u user] [port]

These icons link to social bookmarking sites where readers can share and discover new web pages.

MBSA

Jalal Rohani — Sat, 24 Jun 2006 09:46:14 +0000

MBSA : Microsoft Baseline Security Analyzer Microsoft Baseline Security Analyzer (MBSA) is an easy-to-use tool designed for the IT professional that helps small and medium-sized businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Built on the Windows Update Agent and Microsoft Update infrastructure, MBSA ensures consistency with other Microsoft management products including Microsoft Update (MU), Windows Server Update Services (WSUS), Systems Management Server (SMS) and Microsoft Operations Manager (MOM). Apparently MBSA on average scans over 3 million computers each week.

These icons link to social bookmarking sites where readers can share and discover new web pages.

SAINT

Jalal Rohani — Sat, 24 Jun 2006 09:39:01 +0000

SAINT : Security Administrator’s Integrated Network Tool SAINT is another commercial vulnerability assessment tool (like Nessus, ISS Internet Scanner, or Retina). It runs on UNIX and used to be free and open source, but is now a commercial product.

These icons link to social bookmarking sites where readers can share and discover new web pages.

QualysGuard

Jalal Rohani — Fri, 23 Jun 2006 20:23:20 +0000

QualysGuard : A web-based vulnerability scanner Delivered as a service over the Web, QualysGuard eliminates the burden of deploying, maintaining, and updating vulnerability management software or implementing ad-hoc security applications. Clients securely access QualysGuard through an easy-to-use Web interface. QualysGuard features 5,000+ unique vulnerability checks, an Inference-based scanning engine, and automated daily updates to the QualysGuard vulnerability KnowledgeBase.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Sara

Jalal Rohani — Fri, 23 Jun 2006 20:17:20 +0000

Sara : Security Auditor’s Research Assistant SARA is a vulnerability assessment tool that was derived from the infamous SATAN scanner. They try to release updates twice a month and try to leverage other software created by the open source community (such as Nmap and Samba).

These icons link to social bookmarking sites where readers can share and discover new web pages.