This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Phoenix/Tools"
| Line 10: | Line 10: | ||
Pantera<br/ > | Pantera<br/ > | ||
Suru<br/ > | Suru<br/ > | ||
| − | httpedit<br/ > | + | httpedit (curses-based) - http://www.neutralbit.com/en/rd/httpedit/<br/ > |
Charles<br/ > | Charles<br/ > | ||
Odysseus<br/ > | Odysseus<br/ > | ||
| Line 21: | Line 21: | ||
WhiteAcid's XSS Assistant - http://www.whiteacid.org/greasemonkey/<br/ > | WhiteAcid's XSS Assistant - http://www.whiteacid.org/greasemonkey/<br/ > | ||
<br/ > | <br/ > | ||
| − | <b>HTTP testing</b><br/ > | + | <b>HTTP general testing / fingerprinting</b><br/ > |
Torture.pl Home Page - http://stein.cshl.org/~lstein/torture/<br/ > | Torture.pl Home Page - http://stein.cshl.org/~lstein/torture/<br/ > | ||
JoeDog's Seige - http://www.joedog.org/JoeDog/Siege/<br/ > | JoeDog's Seige - http://www.joedog.org/JoeDog/Siege/<br/ > | ||
| − | OPEN-LABS: metoscan (http method testing) - http://www.open-labs.org/ | + | OPEN-LABS: metoscan (http method testing) - http://www.open-labs.org/<br/ > |
| − | <br/ > | + | Load-balancing detector - http://ge.mine.nu/lbd.html<br/ > |
| − | |||
Net-Square: httprint - http://net-square.com/httprint/<br/ > | Net-Square: httprint - http://net-square.com/httprint/<br/ > | ||
<br/ > | <br/ > | ||
| Line 37: | Line 36: | ||
<b>Cookie editing / poisoning</b><br/ > | <b>Cookie editing / poisoning</b><br/ > | ||
CookieSpy - http://www.codeproject.com/shell/cookiespy.asp<br/ > | CookieSpy - http://www.codeproject.com/shell/cookiespy.asp<br/ > | ||
| + | Cookies Explorer - http://www.dutchduck.com/Features/Cookies.aspx<br/ > | ||
<br/ > | <br/ > | ||
<b>Ajax and XHR scanning</b><br/ > | <b>Ajax and XHR scanning</b><br/ > | ||
| Line 42: | Line 42: | ||
<br/ > | <br/ > | ||
<b>SQL injection scanning</b><br/ > | <b>SQL injection scanning</b><br/ > | ||
| − | 0x90.org: home of Absinthe, Mezcal, etc - http://0x90.org/releases.php | + | 0x90.org: home of Absinthe, Mezcal, etc - http://0x90.org/releases.php<br/ > |
| + | sqlninja: a SQL Server injection and takover tool - http://sqlninja.sourceforge.net/<br/ > | ||
| + | <br/ > | ||
<b>Firefox Add-ons (Malware)</b><br/ > | <b>Firefox Add-ons (Malware)</b><br/ > | ||
FFsniFF - http://azurit.gigahosting.cz/ffsniff/<br/ > | FFsniFF - http://azurit.gigahosting.cz/ffsniff/<br/ > | ||
| Line 51: | Line 53: | ||
Online Microsoft script decoder - http://www.greymagic.com/security/tools/decoder/<br/ > | Online Microsoft script decoder - http://www.greymagic.com/security/tools/decoder/<br/ > | ||
<br/ > | <br/ > | ||
| − | <b> | + | <b>Browser-based security fuzzing / checking</b><br/ > |
| + | Zalewski's MangleMe - http://lcamtuf.coredump.cx/mangleme/mangle.cgi<br/ > | ||
| + | hdm's tools: Hamachi, CSSDIE, DOM-Hanoi, AxMan - http://metasploit.com/users/hdm/tools/<br/ > | ||
bcheck - http://bcheck.scanit.be/bcheck/<br/ > | bcheck - http://bcheck.scanit.be/bcheck/<br/ > | ||
| + | Stop-Phishing: Projects page - http://www.indiana.edu/~phishing/?projects<br/ > | ||
<br/ > | <br/ > | ||
<b>PHP file inclusion scanning</b><br/ > | <b>PHP file inclusion scanning</b><br/ > | ||
Unl0ck Research Team: tool for searching in google for include bugs - http://unl0ck.net/tools.php | Unl0ck Research Team: tool for searching in google for include bugs - http://unl0ck.net/tools.php | ||
<br/ > | <br/ > | ||
Revision as of 01:57, 15 January 2007
LiveCD
Sunday, January 14, 2007 6:54 AM 817811456 AOC_Labrat-ALPHA-0008.iso - http://www.packetfocus.com/hackos/
HTTP proxying / editing
Burp - http://www.portswigger.net/
Paros - http://www.parosproxy.org/
Fiddler - http://www.fiddlertool.com/
Web Proxy Editor
Pantera
Suru
httpedit (curses-based) - http://www.neutralbit.com/en/rd/httpedit/
Charles
Odysseus
RSnake's XSS cheat sheet based-tools and encoding tools
HTMangLe - http://www.fishnetsecurity.com/Tools/HTMangLe/publish.htm
JBroFuzz - http://sourceforge.net/projects/jbrofuzz
[ZIP] XSSFuzz - http://ha.ckers.org/fuzzer/XSSFuzz.zip
WhiteAcid's XSS Assistant - http://www.whiteacid.org/greasemonkey/
HTTP general testing / fingerprinting
Torture.pl Home Page - http://stein.cshl.org/~lstein/torture/
JoeDog's Seige - http://www.joedog.org/JoeDog/Siege/
OPEN-LABS: metoscan (http method testing) - http://www.open-labs.org/
Load-balancing detector - http://ge.mine.nu/lbd.html
Net-Square: httprint - http://net-square.com/httprint/
Browser-based HTTP tampering / editing
TamperIE - http://www.bayden.com/Other/
isr-form - http://www.infobyte.com.ar/development.html
TamperData - http://tamperdata.mozdev.org/
Modify Headers - http://modifyheaders.mozdev.org/
Cookie editing / poisoning
CookieSpy - http://www.codeproject.com/shell/cookiespy.asp
Cookies Explorer - http://www.dutchduck.com/Features/Cookies.aspx
Ajax and XHR scanning
Sprajax - http://www.denimgroup.com/sprajax.html
SQL injection scanning
0x90.org: home of Absinthe, Mezcal, etc - http://0x90.org/releases.php
sqlninja: a SQL Server injection and takover tool - http://sqlninja.sourceforge.net/
Firefox Add-ons (Malware)
FFsniFF - http://azurit.gigahosting.cz/ffsniff/
Web application services that aid in web application security assessment
net.toolkit - http://clez.net/
ServerSniff - http://www.serversniff.net/
Online Microsoft script decoder - http://www.greymagic.com/security/tools/decoder/
Browser-based security fuzzing / checking
Zalewski's MangleMe - http://lcamtuf.coredump.cx/mangleme/mangle.cgi
hdm's tools: Hamachi, CSSDIE, DOM-Hanoi, AxMan - http://metasploit.com/users/hdm/tools/
bcheck - http://bcheck.scanit.be/bcheck/
Stop-Phishing: Projects page - http://www.indiana.edu/~phishing/?projects
PHP file inclusion scanning
Unl0ck Research Team: tool for searching in google for include bugs - http://unl0ck.net/tools.php
