Category:Penetration Testing Tools
From OWASP
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
Contents
- 1 Penetration Testing Tools
- 1.1 Information Gathering Tools
- 1.2 Configuration Management Testing Tools
- 1.3 Authentication Testing Tools
- 1.4 Session Management Testing Tools
- 1.5 Authorization Testing Tools
- 1.6 Data Validation Testing Tools
- 1.7 Denial of Service Testing Tools
- 1.8 Web Services Testing Tools
- 1.9 Ajax Testing Tools
- 1.10 HTTP Traffic Monitoring
- 1.11 Encoders / Decoders
Penetration Testing Tools
Information Gathering Tools
- Fingerprinting
| Name | Owner | Licence | Platforms |
| httprint | |||
| httprecon | |||
| Netcraft |
Configuration Management Testing Tools
- SSL Testing
| Name | Owner | Licence | Platforms |
| OpenSSL | |||
| SSL Digger |
- DB Listener Testing
| Name | Owner | Licence | Platforms |
| TNS Listener | |||
| Toad |
Authentication Testing Tools
- Password Brute Force Testing
| Name | Owner | Licence | Platforms |
| Burp Intruder | |||
| Brutus | |||
| John the Ripper | |||
| Ophcrack | |||
| THC Hydra |
Session Management Testing Tools
| Name | Owner | Licence | Platforms |
| CookieDigger |
Authorization Testing Tools
Data Validation Testing Tools
- Fuzzers
- SQL Injection Testing
- XSS Testing
- Buffer Overflow Testing
Denial of Service Testing Tools
Web Services Testing Tools
Ajax Testing Tools
HTTP Traffic Monitoring
- Web Proxies
| Name | Owner | Licence | Platforms |
| Burp Suite | |||
| Paros Proxy | |||
| Webscarab | |||
| TamperIE | |||
| Tamper Data | |||
| SPIKE Proxy | |||
| Suru Web Proxy | |||
| Charles | |||
| Odysseus | |||
| JS Commander | |||
| ratproxy |
- Sniffers
Encoders / Decoders
- CAPTCHA Decoders
| Name | Owner | Licence | Platforms |
| PWNtcha | |||
| The Captcha Breaker |
This category currently contains no pages or media.
