Netcat - simple utility reads and writes data across TCP or UDP network connections

Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol.
It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.

It provides access to the following main features:

• Outbound and inbound connections, TCP or UDP, to or from any ports.
• Featured tunneling mode which allows also special tunneling such as UDP to TCP, with the possibility of specifying all network parameters (source port/interface, listening port/interface, and the remote host allowed to connect to the tunnel.
• Built-in port-scanning capabilities, with randomizer.
• Advanced usage options, such as buffered send-mode (one line every N seconds), and hexdump (to stderr or to a specified file) of trasmitted and received data.
• Optional RFC854 telnet codes parser and responder.

Download netcat-0.7.1.tar.gz (398.9 kB) Download other versions from here Source- http://sourceforge.net/projects/netcat/ http://netcat.sourceforge.net/ For more information- http://sectools.org/tool/netcat/ Netcat - The Swiss Army Knife

UPDATE OWASP Zed Attack Proxy(ZAP) v 2.0.0 - an easy-to-use integrated penetration testing tool for finding vulnerabilities in Web applications

OWASP Zed Attack Proxy (ZAP) is an easy-to-use integrated penetration testing tool for finding vulnerabilities in Web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen tester's toolbox. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
Some of ZAP's features:

• Intercepting Proxy
• Active scanner
• Passive scanner
• Brute Force scanner
• Spider
• Fuzzer
• Port Scanner
• Dynamic SSL certificates
• API
• Beanshell integration

Some of ZAP's characteristics:

• Easy to install (just requires java 1.7)
• Ease of use a priority
• Comprehensive help pages
• Fully Internationalized
• Under active development
• Open source
• Free (no paid for 'Pro' version)
• Cross platform
• Involvement actively encouraged

It supports the following languages:

• English
• Brazilian Portuguese
• Chinese
• Danish
• Filipino
• French
• German
• Greek
• Indonesian
• Italian
• Japanese
• Persian
• Polish
• Russian
• Spanish

Download version 2.0.0 from here
ZAP_2.0.0_Windows.exe
ZAP_2.0.0_Linux.tar.gz
ZAP_2.0.0_Mac_OS_X.zip

OWASP Zed Attack Proxy v 2.0.0 released on 30-Jan-2013

There is a new version of the OWASP Zed Attack Proxy (ZAP) available right now, and there are so many changes in it that we’ve decided to call it version 2.0.0.

If you just want to get stuck in and download it then head over to http://code.google.com/p/zaproxy/downloads/list : it's available for Windows, Linux and Mac OS. 

(Note that the Mac OS specific release is coming soon, but the Linux release is actually cross platform and will work fine on Macs)

And if you want to learn a bit more about the changes then read on...

We can only cover the new features at a high level in one blog post, but the plan is to host a Google hangout demonstrating many of these features at 17:00 UTC on Friday 8th Feb. Details to be announced via https://twitter.com/zaproxy 

Simon will also be presenting a talk at FOSDEM on Feb 2nd: Practical Security for developers, using OWASP ZAP

New features

An integrated add-ons marketplace

ZAP can be extended by add-ons that have full access to all of the ZAP internals. Anyone can write add-ons and upload them to the ZAP Add-on Marketplace (OK, so its a Google code project called zap-extensions, but you get the idea).

More importantly you can now browse, download and install those add-ons from within ZAP. Most add-ons can be dynamically installed (and uninstalled) so you wont even need a restart.

You can choose to be notified of updates, and even be automatically updated. And as the scan rules are now implemented as add-ons you can get the latest rules as soon as they are published.

A replacement for the 'standard' Spider

The ‘old’ Spider was showing its age, so its been completely rewritten, and is much faster and more comprehensive than the old one. This is still a 'traditional' spider that analyses the HTML code for any links it can find.

A new 'Ajax' spider

In addition to the 'traditional' spider we've added an Ajax spider which is more effective with applications that make heavy use of JavaScript. This uses the Crawljax project which drives a browser (using Selenium) and so can discover any links an application generates, even ones generated client side.

Web Socket support

ZAP now supports WebSockets, so ZAP can now see all WebSocket messages sent to and from your browser. As with HTTP based messages, ZAP can also intercept WebSocket messages and allows you to change them on the fly.

You can also fuzz WebSockets messages as well using all of the fuzzing payloads included in ZAP from projects like JBroFuzz and fuzzdb. And of course you can easily add your own fuzzing files.

Quick Start tab

The first main tab you will now see is a ‘Quick Start’ tab which allows you to just type in a URL and scan it with one click.

This is an ideal starting point for people new to application security, but experts can easily remove it if they find it distracting.

Session awareness

ZAP is now session aware, so it can recognise and keep track of multiple sessions. It allows you to create new sessions, switch between them, and applies to all of the other components, like the Spider and Active Scanner.

User defined Contexts

You can now define any number of ‘contexts’ - related sets of URLs which make up an application. You can then target all URLs in a context, for example using the Spider or Active Scanner. You can also add the contexts to the scope, and associate other information, such as authentication details.

Session scope

The session scope allows you to specify which contexts you are interested at any one time. You can restrict what you see in various tabs to just the URLs in scope, and prevent accidentally attacking URLs not in scope by using the Protected mode.

Different modes

ZAP now supports 3 modes:

• Safe, in which no potentially dangerous operations permitted
• Protected, in which you can perform any actions on URLs in scope
• Standard, in which you can do anything to any URLs

A scripting console

This allows you to access any internal ZAP data structures dynamically using any scripting language that supports JSR 223,

Authentication handling

You can now associate authentication details with any context, which allows ZAP to do things like detect if and when you are logged out and automatically log you back in again. This is especially useful when used via the API in security regression tests.

More API support

The REST API has been significantly extended, giving you much more access to the functionality ZAP provides.

Fine grained scanning controls

The active scan rules can now be tuned to adjust their strength (the number of attacks they perform) and the threshold at which they report potential issues.

New and improved active and passive scanning rules

We have uploaded the results from running ZAP 2.0.0 against wavsep (the most comprehensive open source evaluation project we are aware of) to the ZAP wiki: http://code.google.com/p/zaproxy/wiki/TestingWavsep

Many stability and usability fixes

Source-

http://owasp.blogspot.in/2013/01/owasp-zed-attack-proxy-v-200.html

For more information -
http://code.google.com/p/zaproxy/
https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

Security Tools from Microsoft

Security Tools for IT Pros 

Security management tools and technologies that enable IT Pros to assess vulnerabilities and strengthen security across the organization.

Most Popular

	Microsoft Baseline Security Analyzer (MBSA) An easy-to-use tool that provides a streamlined method to identify missing security updates and common security misconfigurations.
	Malicious Software Removal Tool This tool checks your computer for infection by specific, prevalent malicious software and helps to remove the infection if found. Updated versions released second Tuesday of each month.

Featured

Microsoft Security Compliance Manager Tool (SCM)

An end-to-end Solution Accelerator which will help you plan, deploy, operate, and manage your security baselines for Windows client and server operating systems, and Microsoft applications.Download

UrlScan Security Tool

This tool helps prevent potentially harmful requests from reaching the server by blocking specific HTTP requests. Download

Microsoft Assessment and Planning Toolkit

This is an agentless, automated, multi-product planning and assessment tool for quicker and easier desktop, server and cloud migrations. Download

Enhanced Mitigation Experience Toolkit

This tool allows users to manage Security mitigation technologies on their system making it more difficult for an attacker to exploit vulnerabilities in a given piece of software. Download

Related Tools

• Microsoft Update
• Microsoft Security Essentials
• Windows Defender
• Window Server Update Services

Source-

http://technet.microsoft.com/en-us/security/cc297183.aspx?WT.mc_id=MSCOM_EN_US_DLN_NEWS_131Z4ENUS22401

WebSurgery - suite of tools for security testing of web applications

WebSurgery is a suite of tools for security testing of web applications. It was designed for security auditors to help them with the web application planning and exploitation. Currently, it uses an efficient, fast and stable Web Crawler, File/Dir Brute forcer, Fuzzer for advanced exploitation of known and unusual vulnerabilities such as SQL Injections, Cross site scripting (XSS), Brute force for login forms, identification of firewall-filtered rules, DOS Attacks and WEB Proxy to analyze, intercept and manipulate the traffic between your browser and the target web application.

WEB Crawler

WEB Crawler was designed to be fast, accurate, stable, completely parametrable and the use of advanced techniques to extract links from Javascript and HTML Tags. It works with parametrable timing settings (Timeout, Threading, Max Data Size, Retries) and a number of rules parameters to prevent infinitive loops and pointless scanning (Case Sensitive, Dir Depth, Process Above/Below, Submit Forms, Fetch Indexes/Sitemaps, Max Requests per File/Script Parameters). It is also possible to apply custom headers (user agent, cookies etc) and Include/Exclude Filters. WEB Crawler come with an embedded File/Dir Brute Forcer which helps to directly brute force for files/dirs in the directories found from crawling.

WEB Bruteforcer

WEB Bruteforcer is a brute forcer for files and directories within the web application which helps to identify the hidden structure. It is also multi-threaded and completely parametrable for timing settings (Timeout, Threading, Max Data Size, Retries) and rules (Headers, Base Dir, Brute force Dirs/Files, Recursive, File’s Extension, Send GET/HEAD, Follow Redirects, Process Cookies and List generator configuration).
By default, it will brute force from root / base dir recursively for both files and directories. It sends both HEAD and GET requests when it needs it (HEAD to identify if the file/dir exists and then GET to retrieve the full response).

WEB Fuzzer

WEB Fuzzer is a more advanced tool to create a number of requests based on one initial request. Fuzzer has no limits and can be used to exploit known vulnerabilities such (blind) SQL Inections and more unsual ways such identifing improper input handling, firewall/filtering rules, DOS Attacks.

WEB Editor

A simple WEB Editor to send individual requests. It also contains a HEX Editor for more advanced requests.

WEB Proxy

WEB Proxy is a proxy server running locally and will allow you to analyze, intercept and manipulate HTTP/HTTPS requests coming from your browser or other application which support proxies.

Download Setup
Download Portable
Documentation
Changes

Source-

http://www.surgeonix.com/blog/index.php/archives/117

Svchost Process Analyzer -Checks your svchost.exe process for trojans

Svchost.exe is the most mysterious process in Windows 8/7/XP/Vista. Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). The authentic svchost.exe file is located in C:\Windows\System32, but numerous viruses and trojans use the same file and process name to hide their activities.

The free Svchost Process Analyzer lists all svchost instances and checks the services they contain. This makes it easy to uncover Svchost worms like the infamous Conficker worm.

Svchost Process Analyzer is a 100% freeware program from www.neuber.com. There is absolutely no installation required. Simply download and run the software.

Read also the svchost.exe user comments.

System requirements
Windows 7, Vista, XP, 2000, 2003, 2008 (32/64 Bit)
400 KB free disk space

Download »Svchost Process Analyser«

Source -
http://www.neuber.com/free/svchost-analyzer/

OPSWAT Security Score beta - free tool that scans your computer for the status of your installed security applications

OPSWAT Security Score is a free tool that scans your computer for the status of your installed security applications and provides a score along with recommendations on how to improve both the score and the security of your device.

The OPSWAT Security Score tool is powered by OPSWAT's OESIS Framework, a development toolkit that can be integrated to solutions to enable detection and management of antivirus, antiphishing, backup, patch management, firewall, public file sharing, hard disk encryption and many other types of third party applications. Security Score uses OESIS to scan your computer for the presence of these types of applications and to get information about their current status. This information is then used to generate your score.

OPSWAT's score calculation is based on security industry and market research reports, over ten years of expertise in the security field, and feedback from leading security technology vendors on the relative importance of the categories and status of security software.

Download it now to find out your security score!

Compatible with Windows XP, Vista, 7 and 8
Requires Internet Explorer 8 or higher

Source-

http://www.opswat.com/products/security-score

Process Hacker 2.29 - View and manage processes, services and more with this powerful tool.

Process Hacker is a free and open source process viewer. This multi-purpose tool will assist you with debugging, malware detection and system monitoring. It includes powerful process termination, memory viewing/editing and other unique and specialized features.

Features

• Clear overview of running processes and resource usage
• Detailed system information and graphs
• Views and edits services
• Powerful process termination
• Bypasses security software and rootkits
• Other features useful for debugging and analyzing software

Download processhacker-2.29-setup.exe (1.8 MB)

Download processhacker2 all versions from here

Download other versions from here

Source-

http://processhacker.sourceforge.net/

http://sourceforge.net/projects/processhacker/

jSQL Injection v0.2 - Java tool for automatic database injection.

An easy to use SQL injection tool for retrieving database information's from a distant server

jSQL Injection features:

• GET, POST, header, cookie methods
• normal, error based, blind, time based algorithms
• automatic best algorithms detection
• data retrieving progression
• proxy setting
• evasion

For now supports MySQL.

Running injection requires the distant server url and the name of the parameter to inject.

If you know an injection should work but the jSQL tool doesn't access the database, you can inform me by email or use the discussion group.

For a local test, you can use the following PHP source code with the URL http://127.0.0.1/simulate_get.php?lib= :

mysql_connect("localhost", "root", "");
mysql_select_db("my_own_database");

$result = mysql_query("SELECT * FROM my_own_table where my_own_field = {$_GET['lib']}") # time based
or die( mysql_error() ); # error based
if(mysql_num_rows($result)!==0) echo" true "; # blind
while ($row = mysql_fetch_array($result, MYSQL_NUM))
    echo join(',',$row); # normal

Changelog version 0.2 :

- new buttons: start, stop, pause, resume
- timeout of 15 seconds for each requests (avoid unresponsive window)
- stopping a request processes and loads the data it has already found (when possible)
- new tabs: chunk, binary, header
- new method: timebased
- evasion: space to /**/, lower to mixed case (select to sElEcT)
- errorbased multilang message (Duplicate entry '1' for key, Duplicata du champ '1' pour la clef, etc)
- contact informations
- smoother graphic design

Download -

jsql-injection-v0.2.jar 

Download other versions -

http://code.google.com/p/jsql-injection/downloads/list   

Source -

http://code.google.com/p/jsql-injection/

Previous post regarding Jsql -

http://santoshdudhade.blogspot.in/2012/07/jsql-injection-java-gui-for-database.html

xSQLScanner Version 1.6 - Advanced SQL Password Audit Tool

xSQL Scanner is a advanced SQL audit tool created by SeCToR-X (_sector_x@hackermail.com or rodrigomatuck@globo.com) that allow user find weak passwords and vulnerabilities over MS-SQL, My-SQL and PostgreSQL protocols.

Features of xSQL Scanner:

Vulnerability Audit options
Launch exploits:
MSSQL empty Password Exploit
MSSQL 7 DoS module
Test for weak passwords
Wordlist option
Userlist option
SQL Portscanner
Range IP Address audit and more


What's new in Version 1.6?

- Session bugs fixed;
- wordlists updated;
- PostgreSQL support added;
- SQL PortScan updated;
- Exceptions fixed;
- Progressbar bug fixed;
- MSSQL 7 DoS module added. 

Download - XSQL Scanner V1.6

Source -
http://www.securityfocus.com/archive/101/522540/30/30/threaded

Visit Website -
http://atrixteam.blogspot.in/

Lynis - Security and system auditing tool

Lynis is an auditing tool for Unix (specialists). It scans the system and available software, to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes.

This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems. It can be run without prior installation, so inclusion on read only storage is no problem (USB stick, cd/dvd).

Lynis assists auditors in performing Basel II, GLBA, HIPAA, PCI DSS and SOX (Sarbanes-Oxley) compliance audits.

Intended audience:
Security specialists, penetration testers, system auditors, system/network managers.

Examples of audit tests:
- Available authentication methods
- Expired SSL certificates
- Outdated software
- User accounts without password
- Incorrect file permissions
- Firewall auditing

System requirements:

- Compatible operating system (see 'Supported operating systems')
- Default shell

Supported operating systems

Tested on:
- Arch Linux
- CentOS
- Debian
- Fedora Core 4 and higher
- FreeBSD
- Gentoo
- Knoppix
- Mac OS X
- Mandriva 2007
- OpenBSD 4.x
- OpenSolaris
- OpenSuSE
- PcBSD
- PCLinuxOS
- Red Hat, RHEL 5.x
- Slackware 12.1
- Solaris 10
- Ubuntu

Downloads

1.3.0 - Latest release
1.2.9 - Previous release

Packages

- Lynis RPM (spec)
- Non-official RPM's (by Peter Linnell) 
- Debian package
- Lynis Demo

Documentation

Source -
http://www.rootkit.nl/projects/lynis.html

Screenshot -

Goohost - Simple shell script extracts hosts/subdomains, ip or emails for a specific domain with Google search

Goohost is a simple shell script written by Watakushi that extracts hosts/subdomains, ip or emails for a specific domain with Google search.

Installation

First create a directory for the installation

$ mkdir -p /pentest/enumeration/google/goohost/

Then download the tool and make it executable:

$ cd /pentest/enumeration/google/goohost/
$ wget http://dl.dropbox.com/u/10761700/goohost.sh
$ chmod +x goohost.sh

Usage

Syntax

$ ./goohost.sh -t domain.tld [-m <host|ip|mail> -p <1-20> -v]

Options

-t <domain>

target domain. E.g. backtrack.linux.org

-m <method>

method: <ip|host|mail>

Default value is set to host

• host: raw google hosts and subdomains search
• ip: raw google hosts and subdomains search and performs a reverse DNS resolution
• mail: raw google email search

-p <num>

Max number of pages (1-20) to download from Google.

Default 5

-v

verbosity.

Default is set to off

Example

Method: IP (-m ip)

$ ./goohost.sh -m ip -t aldeid.com
Results saved in file report-27526-aldeid.com.txt 
$ cat report-27526-aldeid.com.txt
www.aldeid.com 80.14.163.161

Method: Host (-m host)

$ ./goohost.sh -m host -t aldeid.com
Results saved in file report-29958-aldeid.com.txt 
1 results found! 
$ cat report-29958-aldeid.com.txt
www.aldeid.com

Method: Mail (-m mail)

$ ./goohost.sh -m mail -t aldeid.com
Results saved in file report-14152-aldeid.com.txt 
0 results found!

Source -

http://www.aldeid.com/wiki/Goohost

secscan-py - Web Apps Scanner and Much more utilities

SecScan is the Multithreading Web Vulnerability Scanner plus professional Utilities for penetrating testers.A compact Web Apps Vulnerable Scanner for amateur pentester.
Feature -

SQLi, XSS, LFI, RFI

Utilities -

Admin/login finder, sub-domain finder, online/offline MD5 cracker, Router checker, local IP lookup

Stable version will covers -

auto SQL injector (bind with SlowQL) Fuzzer, Port/OS Scanner, MD5/SHA1 bruteforcer, MD5/SHA1 crypter,

Known bugs -

Still crash during MD5 dictionary attack on large lengths of text. XSS sometime gives false positive.

How to run - 

To run: ./SecScan

bug issues report at: norske.drittsekk@gmail.com || digiopen55@gmail.com

Fix issues & upgrades:

- Crash during LFI & XSS scans
- More MD5 Dictionary cracking features & functions.
- Run more stable in SQL scan mode.
- Able to search more than 20 pages. (max is 90 to avoid cut off/CAPTCHA-request by search engine)
- more search engine choice. Default is still Ask Engine. (Bing & Yahoo are fine, not recommend Google API)
- More stealthy
- Random user-agent generator

Will add more in near-future:

- SQL injector (bind with my other project slowQL)
- MD5 bruteforcer (offline)
- SHA1 Dic/Brute cracker
- Hex viewer.
- Proxy finder
- Proxified mode
- Heuristic port & OS scanner (similar to N-map)

Download: SecScan ver 1.1 (beta)
http://secscan-py.googlecode.com/files/SecScan-v1.1b
Download other versions-
http://code.google.com/p/secscan-py/downloads/list

Screenshot -