This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:Penetration Testing Tools"
From OWASP
m (→Information Gathering Tools) |
(Fixed dead links and added additional information.) |
||
| Line 31: | Line 31: | ||
{{:Template:OWASP Tool Headings}} | {{:Template:OWASP Tool Headings}} | ||
| − | {{OWASP Tool Info || tool_name = [http://www.openssl.org/ OpenSSL]}} | + | {{OWASP Tool Info || tool_name = [http://www.openssl.org/ OpenSSL] |
| − | {{OWASP Tool Info || tool_name = [http://www. | + | | tool_owner = [http://openssl.com/who.html OpenSSL Software Foundation] |
| + | | tool_licence = [https://www.openssl.org/source/license.txt Apache-style license] | ||
| + | | tool_platforms = Win, Lin, Mac, FreeBSD | ||
| + | }} | ||
| + | {{OWASP Tool Info || tool_name = [http://www.mcafee.com/us/downloads/free-tools/ssldigger.aspx SSL Digger] | ||
| + | | tool_owner = Intel Corporation | ||
| + | | tool_licence = [http://www.mcafee.com/br/resources/legal/mcafee-software-free-eula.pdf McAfee Software royalty-Free License] | ||
| + | | tool_platforms = Win, Windows .NET Framework | ||
| + | }} | ||
|} | |} | ||
| Line 39: | Line 47: | ||
{{:Template:OWASP Tool Headings}} | {{:Template:OWASP Tool Headings}} | ||
{{OWASP Tool Info || tool_name = [http://www.jammed.com/%7Ejwa/hacks/security/tnscmd/tnscmd-doc.html TNS Listener]}} | {{OWASP Tool Info || tool_name = [http://www.jammed.com/%7Ejwa/hacks/security/tnscmd/tnscmd-doc.html TNS Listener]}} | ||
| − | {{OWASP Tool Info || tool_name = [http://www.quest.com/toad Toad]}} | + | {{OWASP Tool Info || tool_name = [http://www.quest.com/toad Toad] |
| + | | tool_owner = [https://software.dell.com Dell Inc.] | ||
| + | }} | ||
|} | |} | ||
| − | |||
=== Authentication Testing Tools === | === Authentication Testing Tools === | ||
Latest revision as of 20:42, 14 June 2016
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
- 1 Penetration Testing Tools
- 1.1 Information Gathering Tools
- 1.2 Configuration Management Testing Tools
- 1.3 Authentication Testing Tools
- 1.4 Session Management Testing Tools
- 1.5 Authorization Testing Tools
- 1.6 Data Validation Testing Tools
- 1.7 Denial of Service Testing Tools
- 1.8 Web Services Testing Tools
- 1.9 Ajax Testing Tools
- 1.10 HTTP Traffic Monitoring
- 1.11 Encoders / Decoders
- 1.12 Web Testing Frameworks
Penetration Testing Tools
Information Gathering Tools
- Fingerprinting
| Name | Owner | Licence | Platforms |
| httprint | NetSquare Inc | no cost for personal, educational and non-commercial use. | Win, Lin, Mac, FreeBSD |
| httprecon | Marc Ruef | GPL | Win |
| Netcraft | Netcraft Inc | N/A | WebBased |
| WebRecon | Aung Khant | GPL | WebBased |
Configuration Management Testing Tools
- SSL Testing
| Name | Owner | Licence | Platforms |
| OpenSSL | OpenSSL Software Foundation | Apache-style license | Win, Lin, Mac, FreeBSD |
| SSL Digger | Intel Corporation | McAfee Software royalty-Free License | Win, Windows .NET Framework |
- DB Listener Testing
| Name | Owner | Licence | Platforms |
| TNS Listener | |||
| Toad | Dell Inc. |
Authentication Testing Tools
- Password Brute Force Testing
| Name | Owner | Licence | Platforms |
| Burp Intruder | |||
| Brutus | |||
| Cain & Abel | oxid | Freeware | Windows |
| John the Ripper | |||
| Ophcrack | |||
| THC Hydra | The Hacker's Choise | Lin |
Session Management Testing Tools
| Name | Owner | Licence | Platforms |
| CookieDigger |
Authorization Testing Tools
Data Validation Testing Tools
- Fuzzers
- SQL Injection Testing
- XSS Testing
- Buffer Overflow Testing
| Name | Owner | Licence | Platforms |
| Skipfish | N/A | Apache | Linux |
| w3af | NA | GPL v2 | Python required (cross platform) |
Denial of Service Testing Tools
Web Services Testing Tools
Ajax Testing Tools
HTTP Traffic Monitoring
- Web Proxies
| Name | Owner | Licence | Platforms |
| Burp Suite | |||
| Paros Proxy | |||
| Webscarab | |||
| TamperIE | |||
| Tamper Data | |||
| SPIKE Proxy | |||
| Suru Web Proxy | |||
| Charles | |||
| Odysseus | |||
| JS Commander | |||
| ratproxy |
- Sniffers
Encoders / Decoders
- CAPTCHA Decoders
| Name | Owner | Licence | Platforms |
| PWNtcha | |||
| The Captcha Breaker |
Web Testing Frameworks
| Name | Owner | Licence | Platforms |
| w3af | Andres Riancho and w3af team | GPLv2 | Windows, Linux |
| Websecurify | GNUCITIZEN / Websecurify | GPLv2 | Windows, Mac OS, Linux |
| ZeroDayScan | Free | Online, Cloud |
This category currently contains no pages or media.
