Wireless hacking

zaproxy a web application penetration testing tool

Today i am going to write about a penetration testing tool for finding vulnerabilities in web application tool. I found it on code.google.com . zaproxy

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pentester's toolbox.

Download Arachni | Web Application Security Scanner

arachniweb Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process.Unlike other scanners, Arachni takes into account the dynamic nature of web applications and can detect changes caused while travelling through the paths of a web application's cyclomatic complexity.This way attack/input vectors that would otherwise be undetectable by non-humans are seamlessly handled by Arachni.

Download Here:
https://github.com/Zapotek/arachni/downloads

Insect Pro v.2.1 released

INSECT Pro is a penetration security auditing and testing software solution designed to allow organizations of all sizes mitigate, monitor and manage the latest security threats vulnerabilities and implement active security policies by performing penetration tests across their infrastructure and applications.

INSECT can help to build a strong security posture that is easy to use so both professional penetration testers and less experienced security pros will have all the tools they need to reduce costs, proactively find vulnerabilities, assess risk, and check the effectiveness of security defenses.

The product’s user friendly interface has -among other options- the choice between an offensive and inoffensive attack that gives the user the ability to make different kinds of attacks without the possibility of damage and includes functions for generating complete and comprehensive reports from the gathered information.

Download Here:

http://insectpro.highprofilesite.com/

Read more.. http://www.youtube.com/user/InsecurityResearch

Soure: hackingtricks.in

Armitage for Metasploit Setup Walkthrough

Rob Fuller and Raphael Mudge talk about Armitage; a cross-platform GUI front-end for Rapid7′s Metasploit. Mudge demonstrate setting up the software, scanning for targets, attacking hosts with client side attacks or remote exploits, and finally pivoting throughout the network using pass-the-hash techniques.

Metasploit Framework is an open source program for testing and executing exploit code against a remote target machine. Armitage, is a GUI for Metasploit built into the framework used to scan hosts, find exploits, execute the exploit on the host, and analyze exploit process. You will learn how to use Armitage and Metasploit.

Wireless hacking

More Articles …