cisotunisia-blog

[cisotunisia-blog]

openvas-scanner

The Open Vulnerability Assessment System is a modular security auditing tool, used for testing remote systems for vulnerabilities that should be fixed. It is made up of two parts: a scan server, and a client. (more…)

[cisotunisia-blog]

openvas-manager

The OpenVAS-Manager is a layer between OpenVAS-Scanner and various client applications such as OpenVAS-Client or Greenbone Security Assistant. (more…)

[cisotunisia-blog]

openvas-cli

OpenVAS-CLI collects command line tools to handle with the OpenVAS services via the respective protocols. (more…)

[cisotunisia-blog]

openvas-administrator

This is the administrator module for the Open Vulnerability Assessment System (OpenVAS). It is intended to simplify the configuration and administration of an OpenVAS server both on a local installation as well as on a remote system. (more…)

[cisotunisia-blog]

HexorBase

HexorBase is a database application designed for administering and auditing multiple database servers simultaneously from a centralized location, it is capable of performing SQL queries and bruteforce attacks against common database servers (MySQL, SQLite, Microsoft SQL Server, Oracle, PostgreSQL ). (more…)

[cisotunisia-blog]

Greenbone Security Assistant

The Greenbone Security Assistant is a web application that connects to the OpenVAS Manager and OpenVAS Administrator to provide for a full-featured user interface for vulnerability management. (more…)

[cisotunisia-blog]

cisco-global-exploiter

Cisco Global Exploiter (CGE), is an advanced, simple and fast security testing tool. (more…)

[cisotunisia-blog]

Zaproxy – OWASP Zed Attack Proxy The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

[cisotunisia-blog]

CAT – Scans cisco routers for common vulnerabilities

CAT – Scans cisco routers for common vulnerabilities

Perl script which scans cisco routers for common vulnerabilities.

Cisco Auditing Tool - g0ne [null0] Usage:     -h hostname (for scanning single hosts)     -f hostfile (for scanning multiple hosts)     -p port #   (default port is 23)     -w wordlist (wordlist for community name guessing)     -a passlist (wordlist for password guessing)     -i [ioshist]    (Check for IOS History bug)     -l…

[cisotunisia-blog]

Dradis - reporting framework

Dradis – reporting framework

Dradis is an open source framework to enable effective information sharing, specially during security assessments. (more…)

[cisotunisia-blog]

inviteflood – SIP/SDP INVITE message flooding over UDP/IP

inviteflood – SIP/SDP INVITE message flooding over UDP/IP

A tool to perform SIP/SDP INVITE message flooding over UDP/IP. (more…)

[cisotunisia-blog]

Websploit – The Websploit Framework

Websploit – The Websploit Framework

WebSploit Is An Open Source Project For: (more…)

[cisotunisia-blog]

Miranda – UPNP administration tool

Miranda – UPNP administration tool

Miranda is a Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices, particularly Internet Gateway Devices (aka, routers). (more…)

[cisotunisia-blog]

dbpwaudit – Online password audits of DB engines

dbpwaudit – Online password audits of DB engines

DBPwAudit is a Java tool that allows you to perform online audits of password quality for several database engines. (more…)

[cisotunisia-blog]

Aircrack-ng – Configure fake access points

Aircrack-ng – Configure fake access points

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. (more…)

[cisotunisia-blog]

burpsuite – Platform for security testing of web applications

burpsuite – Platform for security testing of web applications

Burp Suite is an integrated platform for performing security testing of web applications. (more…)

[cisotunisia-blog]

Backdoor Factory

The goal of BDF is patch executable binaries with user desidered shellcode and continue normal execution of the prepatched state. (more…)