Vulnerability Assessment
Changelog...The vulnerability assessment directory contains software which can be used to detect security vulnerabilities in software, services and network design.
- Authforce
Authforce is a HTTP authentication bruteforce tool. It uses various methods to brute force username and password pairs.
Browse: HTTP / FTP / HOMEPAGE
- CIS
CIS is a free security scanner written and maintained by Cerberus Information Security, Ltd and is designed to help administrators locate and fix security holes in their computer systems. Runs on Windows NT or 2000.
Browse: HTTP / FTP / HOMEPAGE
- ike-scan
The ike-scan tool scans IP addresses for VPN servers by sending a specially crafted IKE packet to each host within a network. Most hosts running IKE will respond, identifying their presence. The tool then remains silent and monitors retransmission packets. These retransmission responses are recorded, displayed and matched against a known set of VPN product fingerprints.
Browse: HTTP / FTP / HOMEPAGE
- Nessus
Nessus is a modular network security scanner. Well regarded as the premier vulnerability assessment utility, Nessus features NASL (Nessus Attack Scripting Language) which allows for custom written security tests. Nessus also recognises services running on non-default ports and its vulnerability database is updated daily.
Browse: HTTP / FTP / HOMEPAGE
- Nikto
Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 2200 potentially dangerous files/CGIs, versions on over 140 servers, and problems on over 210 servers.
Browse: HTTP / FTP / HOMEPAGE
- NSAT
NSAT is a fast, highly configurable, bulk network security scanner for over 50 different services and hundreds of vulnerabilities. It's main advantage is its flexibility and configurability. NSAT currently supports distributed scanning.
Browse: HTTP / FTP / HOMEPAGE
- SARA
Security Auditor's Research Assistant is a third generation Unix-based security analysis tool that is primarily based off the well known SATAN project. SARA tests for multiple vulnerabilities including the 'SANS/FBI Top 20' and will run on most Unix operating systems including Mac OS X.
Browse: HTTP / FTP / HOMEPAGE
- SATAN
SATAN stands for Security Administrator Tool for Analyzing Networks and does exactly what it sounds like. Written by Wietse Venema and Dan Farmer in 1995, SATAN is one of the original assessment tools. Largely superceded by SARA.
Browse: HTTP / FTP / HOMEPAGE
- ScanSSH
ScanSSH scans a list of addresses and networks for running SSH servers and their version numbers. scanssh supports random selection of IP addresses from large network ranges and is useful for gathering statistics on the deployment of SSH servers in a company or the Internet as whole. The author of ScanSSH, Neils Provos, has also done extensive work with privilege separated OpenSSH and written other security tools like honeyd.
Browse: HTTP / FTP / HOMEPAGE
- Spike
Spike is a fuzzer creation kit. Spikes' API attempts to make duplicating an unknown protocol easier for a reverse engineer or security researcher.
Browse: HTTP / FTP / HOMEPAGE
- Whisker
Whisker is a well-regarded Web/CGI vulnerability scanner by RFP. Unfortunately, it is now officially listed as deprecated. Nikto is the designated successor to Whisker, and features an updated version of libwhisker.
Browse: HTTP / FTP / HOMEPAGE
Browse this directory with: HTTP / FTP
(Note: This list of software and information available at Wiretapped is not exhaustive. Users are encouraged to browse and search the archive and read any available "-README.txt" files that are available)
Questions / Suggestions:
Should you have any questions regarding Wiretapped or suggestions for additional software or material that we can mirror, please send an email to web[at]wiretapped.net
$Id: vulnerability-assessment.html,v 1.6 2006/07/26 14:20:47 gbayley Exp $