Free and Open-Source Software: Difference between revisions

From SecurityTools
← Older edit
VisualWikitext
Insert Burp Suite Community Edition, pointing to Burp Suite internal page
m →‎D: Clean up extraneous keystrokes in dirb description.
 
(23 intermediate revisions by the same user not shown)
Line 2: Line 2:


=== A ===
=== A ===
[[AirCrack-NG]] - A complete suite of tools to assess WiFi network security
 
* [[Advanced Policy Firewall]] (apf) - A [[NetFilter]] firewall command-line management tool similar to [[IPTables]]
* [[Advanced Port Scanner]] - A graphical port scanner for Windows which has the capability of identifying programs running on listening ports
* [[AirCrack-NG]] - A complete suite of tools to assess WiFi network security
* [[Angry IP Scanner]] - A port and host scanner for Windows.
* [[AutoRecon]] - A multi-threaded network reconnaisance tool intended to save time in penetration testing environments and CTFs


=== B ===
=== B ===
[[Burp Suite|Burp Suite Community Edition]] - Web Application testing software  
 
* [[Burp Suite|Burp Suite Community Edition]] - Web Application testing software  
=== C ===
=== C ===
* [[Cain and Abel]] - A freely available Windows password sniffer and cracker


=== D ===
=== D ===
* [[dirb]] - A CLI [[Fuzzer|fuzzing tool]] for finding hidden web objects based on dictionary attacks
* [[dirb-gendict]] - A command line tool for generating dictionaries to be used with the above [[dirb]] tool
* [[DirBuster JF|DirBuster]] (James Fischer) - A Java-based, [[Fuzzer|fuzzing tool]] with a graphical interface used for finding hidden URIs/web resources
* [[DirBuster 1llusion|DirBuster]] (Mr1llusion) - A Python script [[Fuzzer|fuzzing tool]] used for finding hidden URIs/web resources from the command line


=== E ===
=== E ===
* [[EtherApe]] - A graphical network monitor and sniffer
* [[Ettercap]] - A suite of tools for Man-in-the-Middle (MITM) attacks


=== F ===
=== F ===
* [[ffuf - Fuzz Faster U Fool]] - A fast web [[fuzzer]] written in Go
* [[Firewall-cmd]] - The command-line client for the firewalld daemon
* [[Firewall builder]] - A no-longer-maintained graphical interface to manage Netfilter/iptables, ipfw, PF, Cisco PIX, and other firewall rules
* [[froggy]] - A subdomain enumeration tool


=== G ===
=== G ===
* [[Garud]] - An automated reconnaisance tool which enumerates a target and all sub-domains and finds low-hanging fruit
* [[GoBuster]] - A [[Brute Forcer|brute-forcing]] tool finding for hidden URIs, cloud hosts, DNS subdomains, and more
* [[Gufw]] - A graphical interface for managing [[Uncomplicated Firewall]] rules


=== H ===
=== H ===
* [[Hashcat]] - A multi-operating system, high-speed password recovery tool
* [[Hash Suite]] - A Windows-based high-performance password cracker
* [[httpx]] - A fast HTTP toolkit


=== I ===
=== I ===
[[IPTables]] - The userspace command line program used to configure the Linux 2.4.x and later packet filtering rulesets
 
* [[INetSim]] - A suite of tools for simulating Internet services to test network behavior of tools or unknown software
* [[IPTables]] - The userspace command line program used to configure Linux 2.4.x and later packet filtering rulesets


=== J ===
=== J ===
* [[John the Ripper]] - A multi-platform password cracker


=== K ===
=== K ===
* [[Kismet]] - A suite of tools for wireless sniffing, network and device detection, and wardriving


=== L ===
=== L ===
* [[L0phtCrack]] - An open-source password hash cracker
* [[Lynis]] - An open-source security auditing tool for Unix-based operating systems


=== M ===
=== M ===
* [[Maltego|Maltego Community Edition]] - An open-source intelligence and graphical link analysis tool
* [[MASSSCAN]] - An extremely high-speed port scanner. Most famously used for scanning the entire internet in mere minutes
* [[mdk3]] - A tool for exploiting common IEEE 802.11 protocol weaknesses
* [[Medusa]] - The massively speedy, highly parallel, modular login brute-forcing password cracker


=== N ===
=== N ===
[[Nikto]] - A free command-line utility vulnerability scanner


[[NMap]] - A network discovery and security auditing port/host scanner
* [[NCrack]] - A high-speed, multi-platform network authentication cracking tool
* [[NetCat]] - A networking utility which reads and writes data across network connections, using the [[wikipedia:Internet_protocol_suite|TCP/IP protocol]]
* [[NetStumbler]] - A Windows-based wireless network detection tool used for wardriving and WiFi mapping
* [[NFTables]] - The newer [[NetFilter]] userspace program replacing [[IPTables]] for Linux firewall management
* [[Nikto]] - A free command-line utility vulnerability scanner
* [[NMap]] - A network discovery and security auditing port/host scanner


=== O ===
=== O ===
* [[OpenVAS]] - A full-featured vulnerability scanner forked from the [[Nessus]] code base in 2006
* [[ophCrack]] - An open-source Windows-password cracking program
* [[Oracle VirtualBox]] - An open-source system virtualization tool
* [[OSSEC]] - A free Host Intrusion Detection System (HIDS) tool


=== P ===
=== P ===
* [[p0f]] - An open-source, passive-listening traffic fingerprinting tool for Unix-based systems
* [[PimpMyKali]] - A script for fixing Kali virtualized system problems
* [[Port Authority]] - An [https://www.android.com/ Android based], high-speed scanner that allows you to quickly discover hosts on your network and will display useful network information about your device and other hosts
* [[PortQry]] - A command-line port scanner which runs on Windows 2000 based servers
* [[PortQryUI]] - A graphical interface the the above-listed [[PortQry]] tool
* [[pwncat]] - A post-exploit tool for streamlining red team operations


=== Q ===
=== Q ===


=== R ===
=== R ===
* [[Raccoon]] - An offensive security tool for reconnaissance and information gathering


=== S ===
=== S ===
[[Snort|Snort (Community Ruleset)]] - A free and open-source network intrusion detection system (NIDS) and an intrusion prevention system (IPS)
 
* [[SMap]] - A command-line options compatible replacement for [[NMap]] powered for the [https://www.shodan.io/ Shodan] port scanning API
* [[Snort|Snort (Community Ruleset)]] - A free and open-source network intrusion detection system (NIDS) and intrusion prevention system (IPS)


=== T ===
=== T ===
[[tcpdump]] - A powerful command-line packet analyzer
 
* [[tcpdump]] - A powerful command-line packet analyzer
* [[TCP Port Scanner]] - An application that uses high-speed [[wikipedia:Transmission_Control_Protocol#Connection_establishment|SYN]] scanning to find open ports on a network
* [[Test My Defenses]] - A free website by ZScaler to test and advise on how to improve your protection against Ransomware
* [[THC-Hydra]] - A [[wikipedia:GNU_General_Public_License|GPLed]] proof-of-concept password cracking tool


=== U ===
=== U ===


* [[Uncomplicated Firewall]] (UFW) - A command-line tool for managing NetFilter firewalls, available in Ubuntu and Debian distributions
=== V ===
=== V ===


=== W ===
=== W ===
[[Wireshark]] - The world’s foremost, widely-used network protocol analyzer
 
* [[Wfuzz]] - A [[Fuzzer|fuzzing tool]] for finding hidden web resources
* [[Wireshark]] - The world’s foremost, widely-used network protocol analyzer


=== X ===
=== X ===


=== Y ===
=== Y ===
* [[Yuki Chan The Auto Pentest]] - A Linux-based automated penetration testing tool to audit standard security settings


=== Z ===
=== Z ===
[[ZAProxy|Zed Attack Proxy]] - The world's most widely used web application scanner
 
* [[ZAProxy|Zed Attack Proxy]] - The world's most widely used web application scanner

Latest revision as of 03:52, 2 November 2024

Free and Open-Source Software (FOSS) is software that is Free Software and Open-Source Software. There is so much FOSS in the security domain that I believe this warrants its own wiki page.

A

  • Advanced Policy Firewall (apf) - A NetFilter firewall command-line management tool similar to IPTables
  • Advanced Port Scanner - A graphical port scanner for Windows which has the capability of identifying programs running on listening ports
  • AirCrack-NG - A complete suite of tools to assess WiFi network security
  • Angry IP Scanner - A port and host scanner for Windows.
  • AutoRecon - A multi-threaded network reconnaisance tool intended to save time in penetration testing environments and CTFs

B

C

  • Cain and Abel - A freely available Windows password sniffer and cracker

D

  • dirb - A CLI fuzzing tool for finding hidden web objects based on dictionary attacks
  • dirb-gendict - A command line tool for generating dictionaries to be used with the above dirb tool
  • DirBuster (James Fischer) - A Java-based, fuzzing tool with a graphical interface used for finding hidden URIs/web resources
  • DirBuster (Mr1llusion) - A Python script fuzzing tool used for finding hidden URIs/web resources from the command line

E

  • EtherApe - A graphical network monitor and sniffer
  • Ettercap - A suite of tools for Man-in-the-Middle (MITM) attacks

F

G

  • Garud - An automated reconnaisance tool which enumerates a target and all sub-domains and finds low-hanging fruit
  • GoBuster - A brute-forcing tool finding for hidden URIs, cloud hosts, DNS subdomains, and more
  • Gufw - A graphical interface for managing Uncomplicated Firewall rules

H

  • Hashcat - A multi-operating system, high-speed password recovery tool
  • Hash Suite - A Windows-based high-performance password cracker
  • httpx - A fast HTTP toolkit

I

  • INetSim - A suite of tools for simulating Internet services to test network behavior of tools or unknown software
  • IPTables - The userspace command line program used to configure Linux 2.4.x and later packet filtering rulesets

J

K

  • Kismet - A suite of tools for wireless sniffing, network and device detection, and wardriving

L

  • L0phtCrack - An open-source password hash cracker
  • Lynis - An open-source security auditing tool for Unix-based operating systems

M

  • Maltego Community Edition - An open-source intelligence and graphical link analysis tool
  • MASSSCAN - An extremely high-speed port scanner. Most famously used for scanning the entire internet in mere minutes
  • mdk3 - A tool for exploiting common IEEE 802.11 protocol weaknesses
  • Medusa - The massively speedy, highly parallel, modular login brute-forcing password cracker

N

  • NCrack - A high-speed, multi-platform network authentication cracking tool
  • NetCat - A networking utility which reads and writes data across network connections, using the TCP/IP protocol
  • NetStumbler - A Windows-based wireless network detection tool used for wardriving and WiFi mapping
  • NFTables - The newer NetFilter userspace program replacing IPTables for Linux firewall management
  • Nikto - A free command-line utility vulnerability scanner
  • NMap - A network discovery and security auditing port/host scanner

O

  • OpenVAS - A full-featured vulnerability scanner forked from the Nessus code base in 2006
  • ophCrack - An open-source Windows-password cracking program
  • Oracle VirtualBox - An open-source system virtualization tool
  • OSSEC - A free Host Intrusion Detection System (HIDS) tool

P

  • p0f - An open-source, passive-listening traffic fingerprinting tool for Unix-based systems
  • PimpMyKali - A script for fixing Kali virtualized system problems
  • Port Authority - An Android based, high-speed scanner that allows you to quickly discover hosts on your network and will display useful network information about your device and other hosts
  • PortQry - A command-line port scanner which runs on Windows 2000 based servers
  • PortQryUI - A graphical interface the the above-listed PortQry tool
  • pwncat - A post-exploit tool for streamlining red team operations

Q

R

  • Raccoon - An offensive security tool for reconnaissance and information gathering

S

  • SMap - A command-line options compatible replacement for NMap powered for the Shodan port scanning API
  • Snort (Community Ruleset) - A free and open-source network intrusion detection system (NIDS) and intrusion prevention system (IPS)

T

  • tcpdump - A powerful command-line packet analyzer
  • TCP Port Scanner - An application that uses high-speed SYN scanning to find open ports on a network
  • Test My Defenses - A free website by ZScaler to test and advise on how to improve your protection against Ransomware
  • THC-Hydra - A GPLed proof-of-concept password cracking tool

U

  • Uncomplicated Firewall (UFW) - A command-line tool for managing NetFilter firewalls, available in Ubuntu and Debian distributions

V

W

X

Y

Z

Retrieved from "https://securitytools.wiki/index.php?title=Free_and_Open-Source_Software&oldid=291"