Top 14 Web Vulneranlity Scanners

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://s3.amazonaws.com/knowbe4-images/KnowBe4+WP+Images/vuln_scan_kb4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="424" src="https://s3.amazonaws.com/knowbe4-images/KnowBe4+WP+Images/vuln_scan_kb4.jpg" width="640" /></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><br /></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">In the past, many popular websites have been hacked. Hackers are now active and always try to hack websites and leak data. This is why security testing of web applications is very important. And here comes the role of web application security scanners. Web Application Security Scanner is a software program which performs automatic black box testing on a web application and identifies security vulnerabilities. Scanners do not access the source code, they only perform functional testing and try to find security vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Various paid and free web application vulnerability scanners are available. In this post, we are listing the best free open source web application vulnerability scanners. I am adding the tools in random order. So please do not think it is a ranking of tools.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">I am only adding open source tools which can be used to find security vulnerabilities in web applications. I am not adding tools to find server vulnerabilities. And do not confuse with free tools and open source tools. Because there are various other tools available for free, but they do not provide source code to other developers. Open source tools are those which offer source codes to developers so that developers can modify the tool or help in further development.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the best open source web application penetration testing tools:</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Grabber</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Grabber is a nice web application scanner which can detect many security vulnerabilities in web applications. It performs scans and tells where the vulnerability exists. It can detect the following vulnerabilities:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Cross site scripting</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SQL injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Ajax testing</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File inclusion</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">JS source code analyzer</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Backup file check</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It is not fast as compared to other security scanners, but it is simple and portable. This should be used only to test small web applications because it takes too much time to scan large applications.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool does not offer any GUI interface. It also cannot create any PDF report. This tool was designed to be simple and for personal use. You can try this tool just for personal use. If you are thinking of it for professional use, I will never recommend it.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool was developed in Python. And an executable version is also available if you want. Source code is available, so you can modify it according your needs. The main script is grabber.py, which once executed calls other modules like sql.py, xss.py or others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download it here: <a href="http://rgaucher.info/beta/grabber/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://rgaucher.info/beta/grabber/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Source code on Github: <a href="https://github.com/neuroo/grabber" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/neuroo/grabber</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Vega</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Vega is another free open source web vulnerability scanner and testing platform. With this tool, you can perform security testing of a web application. This tool is written in Java and offers a GUI based environment. It is available for OS X, Linux and Windows.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It can be used to find SQL injection, header injection, directory listing, shell injection, cross site scripting, file inclusion and other web application vulnerabilities. This tool can also be extended using a powerful API written in JavaScript.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">While working with the tool, it lets you set a few preferences like total number of path descendants, number of child paths of a node, depth and maximum number of request per second. You can use Vega Scanner, Vega Proxy, Proxy Scanner and also Scanner with credentials. If you need help, you can find resources in the documentation section:</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Documentation: <a href="https://subgraph.com/vega/documentation/index.en.html" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://subgraph.com/vega/documentation/index.en.html</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Vega: <a href="https://subgraph.com/vega/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://subgraph.com/vega/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span class="pardot-title" style="background: rgb(51, 66, 75); border: 0px; box-sizing: border-box; color: white; display: block; font-family: inherit; font-size: 13px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 55px; margin: 0px; padding: 0px 45px; text-transform: uppercase; vertical-align: baseline; width: 580px;">Dont Forget To Comment Below</span><span style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit;"></span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit;"><br /></span></div>Zed Attack Proxy<br /><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Zed Attack Proxy is also known as ZAP. This tool is open source and is developed by AWASP. It is available for Windows, Unix/Linux and Macintosh platforms. I personally like this tool. It can be used to find a wide range of vulnerabilities in web applications. The tool is very simple and easy to use. Even if you are new to penetration testing, you can easily use this tool to start learning penetration testing of web applications.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the key functionalities of ZAP:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Intercepting Proxy</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Automatic Scanner</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Traditional but powerful spiders</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Fuzzer</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Web Socket Support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Plug-n-hack support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Authentication support</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">REST based API</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Dynamic SSL certificates</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Smartcard and Client Digital Certificates support</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can either use this tool as a scanner by inputting the URL to perform scanning, or you can use this tool as an intercepting proxy to manually perform tests on specific pages.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download ZAP : <a href="http://code.google.com/p/zaproxy/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/zaproxy/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Wapiti</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wapiti is also a nice web vulnerability scanner which lets you audit the security of your web applications. It performs black-box testing by scanning web pages and injecting data. It tries to inject payloads and see if a script is vulnerable. It supports both GET and POSTHTTP attacks and detects multiple vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It can detect following vulnerabilities:</div><ul style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin: 0px 1.5em 1.5em; padding: 0px; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File Disclosure</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">File inclusion</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Cross Site Scripting (XSS)</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Command execution detection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">CRLF Injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SEL Injection and Xpath Injection</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Weak .htaccess configuration</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Backup files disclosure</li><li style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">and many other</li></ul><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wapiti is a command-line application. So, it may not be easy for beginners. But for experts, it will perform well. For using this tool, you need to learn lots of commands which can be found in official documentation.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Wapiti with source code: <a href="http://wapiti.sourceforge.net/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://wapiti.sourceforge.net/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">W3af</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">W3af is a popular web application attack and audit framework. This framework aims to provide a better web application penetration testing platform. It is developed using Python. By using this tool, you will be able to identify more than 200 kinds of web application vulnerabilities including SQL injection, Cross-Site Scripting and many others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It comes with a graphical and console interface. You can use it easily by using its easy to understand interface.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you are using it with Graphical Interface, I do not think that you are going to face any problem with the tool. You only need to select the options and then start the scanner. If a website needs authentication, you can also use authentication modules to scan the session-protected pages.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">We have already covered this tool in detail in our previous W3af walkthrough <a href="http://resources.infosecinstitute.com/series/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">series</a>. You can read those <a href="http://resources.infosecinstitute.com/articles/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">articles</a> to know more about this tool.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can access source code at the Github repository:<a href="https://github.com/andresriancho/w3af/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/andresriancho/w3af/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download it from the official website: <a href="http://w3af.org/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://w3af.org/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">WebScarab</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">WebScarab is a Java-based security framework for analyzing web applications using HTTP or HTTPS protocol. With available plugins, you can extend the functionality of the tool. This tool works as an intercepting proxy. So, you can review the request and response coming to your browser and going to thw server. You can also modify the request or response before they are received by server or browser.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you are a beginner, this tool is not for you. This tool was designed for those who have a good understanding of HTTP protocol and can write codes.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Webscarab provides many features which helps penetration testers work closely on a web application and find security vulnerabilities. It has a spider which can automatically find new URLs of the target website. It can easily extract scripts and HTML of the page. Proxy observes the traffic between server and your browser, and you can take control of the request and response by using available plugins. Available modules can easily detect most common vulnerabilities like SQL injection, XSS< CRLF and many other vulnerabilities.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Source code of the tool is available on Github: <a href="https://github.com/OWASP/OWASP-WebScarab" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/OWASP/OWASP-WebScarab</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download WebScarab here:<a href="https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Skipfish</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Skipfish is also a nice web application security tool. It crawls the website and then check each pages for various security threats and at the end prepares the final report. This tool was written in C. It is highly optimized for HTTP handling and utilizing minimum CPU. It claims that it can easily handle 2000 requests per second without adding a load on CPU. It use a heuristics approach while crawling and testing web pages. This tool also claims to offer high quality and less false positives.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool is available for Linux, FreeBSD, MacOS X and Windows.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Skipfish or code from GOogle Codes: <a href="http://code.google.com/p/skipfish/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/skipfish/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Ratproxy</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Ratproxy is also an open source web application security audit tool which can be used to find security vulnerabilities in web applications. It is supports Linux, FreeBSD, MacOS X, and Windows (Cygwin) environments.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool is designed to overcome the problems users usually face while using other proxy tools for security audits. It is capable of distinguishing between CSS stylesheets and JavaScript codes. It also supports SSL man in the middle attack, which means you can also see data passing through SSL. You can read more about this tool here: <a href="http://code.google.com/p/ratproxy/wiki/RatproxyDoc" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/ratproxy/wiki/RatproxyDoc</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download <a href="http://code.google.com/p/ratproxy/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/ratproxy/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">SQLMap</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">SQLMap is another popular open source penetration testing tool. It automates the process of finding and exploiting SQL injection vulnerability in a website’s database. It has a powerful detection engine and many useful features. So, a penetration tester can easily perform SQL injection check on a website.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It supports range of database servers including MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB. It offers full support to 6 kinds of SQL injection techniques: time-based blind, boolean-based blind, error-based, UNION query, stacked queries and out-of-band.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Access the source code on Github repository:<a href="https://github.com/sqlmapproject/sqlmap" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/sqlmapproject/sqlmap</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download SQLMap here: <a href="https://github.com/sqlmapproject/sqlmap" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">https://github.com/sqlmapproject/sqlmap</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Wfuzz</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Wfuzz is another freely available open source tool for web application penetration testing. It can be used to brute force GET and POST parameters for testing against various kinds of injections like SQL, XSS, LDAP and many others. It also supports cookie fuzzing, multi-threading, SOCK, Proxy, Authentication, parameters brute forcing, multiple proxy and many other things. You can read more about the features of the tool here: <a href="http://code.google.com/p/wfuzz/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/wfuzz/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">This tool does not offer a GUI interface, so you will have to work on command line interface.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download Wfuzz from code.google.com: <a href="http://code.google.com/p/wfuzz/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://code.google.com/p/wfuzz/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Grendel-Scan</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Grendel-Scan is another nice open source web application security tool. This is an automatic tool for finding security vulnerabilities in web applications. Many features are also available for manual penetration testing. This tool is available for Windows, Linux and Macintosh. This tool was developed in Java.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download the tool and source code: <a href="http://sourceforge.net/projects/grendel/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://sourceforge.net/projects/grendel/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Watcher</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Watcher is a passive web security scanner. It does not attack with loads of requests or crawl the target website. It is not a separate tool but is an add-on of Fiddler. So you need to first install Fiddler and then install Watcher to use it.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">It quietly analyzes the request and response from the user-interaction and then makes a report on the application. As it is a passive scanner, it will not affect the website’s hosting or cloud infrastructure.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download watcher and its source code: <a href="http://websecuritytool.codeplex.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://websecuritytool.codeplex.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">X5S</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">X5s is also a Fiddler add-on which aims to provide a way to find cross-site scripting vulnerabilities. This is not an automatic tool. So, you need to understand how encoding issues can lead to XSS. You need to manually find the injection point and then check where XSS can be in the application.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">We have covered the X5S in a previous post. So, you can refer to that article to read more about X5S and XSS.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download X5S and source code from codeplex: <a href="http://xss.codeplex.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://xss.codeplex.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">You can also refer to this official guide to know how to use X5S:<a href="http://xss.codeplex.com/wikipage?title=tutorial" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://xss.codeplex.com/wikipage?title=tutorial</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Arachni</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Arachni is an open source tool developed for providing a penetration testing environment. This tool can detect various web application security vulnerabilities. It can detect various vulnerabilities like SQL Injection, XSS, Local File inclusion, remote file inclusion, unvalidated redirect, and many others.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">Download this tool here: <a href="http://www.arachni-scanner.com/" style="border: 0px; box-sizing: border-box; color: #297aa0; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; color: blue; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">http://www.arachni-scanner.com/</span></a></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 700; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">Final Word</span></div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">These are the best open source web application security testing tools. I tried my best to list all the tools available online. If a tool was not updated for many years, I did not mention it here. Because if a tool is more than 10 years old, it can create compatibility issues in the recent environment. If you are a developer, you can also join the developers’ community of these tools and help these tools to grow. By helping these tools, you will also increase your knowledge and expertise.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you want to start penetration testing, I will recommend using Linux distributions which have been created for penetration testing. These environments are backtrack, gnacktrack, backbox and blackbuntu. All these tools come with various free and opensource tools for website penetration testing. So, you can go with those environments.</div><div style="border: 0px; box-sizing: border-box; color: #474747; font-family: Montserrat, sans-serif; font-size: 14px; font-stretch: inherit; line-height: 25.8999996185303px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">If you think I forgot to mention an important tool, you can drop a comment and I will try to add it.</div></div>

Top 14 Web Vulneranlity Scanners

In the past, many popular websites have been hacked. Hackers are now active and always try to hack websites and leak data. This is why secur...

+ Read more »

Hack Facebook Accounts By Sending A Text Message

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">This post will demonstrate a simple bug which will lead to a full takeover of any Facebook account, with <strong style="-webkit-transition: all 0.2s ease; box-sizing: border-box; transition: all 0.2s ease;">no user interaction</strong>.</div><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Facebook gives you the option of linking your mobile number with your account. This allows you to receive updates via SMS, and also means you can login using the number rather than your email address.</div><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">The flaw lies in the <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">/ajax/settings/mobile/confirm_phone.php</code> end-point. This takes various parameters, but the two main are <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">code</code>, which is the verification code received via your mobile, and <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">profile_id</code>, which is the account to link the number to.</div><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">The thing is, <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">profile_id</code> is set to your account (obviously), but changing it to your target’s doesn’t trigger an error.</div><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">To exploit this bug, we first send the letter <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">F</code> to <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">32665</code>, which is Facebook’s SMS shortcode in the UK. We receive an 8 character verification code back.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; text-align: center; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-1.jpg" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-1.jpg" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: 400px; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">We enter this code into the activation box (located <a href="https://www.facebook.com/settings?tab=mobile" style="-webkit-transition: all 0.2s ease; border-bottom-color: rgb(162, 162, 162); border-bottom-style: dotted; border-bottom-width: 1px; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;">here</a>), and modify the <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">profile_id</code> element inside the <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">fbMobileConfirmationForm</code> form.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-2-1.png" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-2-1.png" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: auto; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Submitting the request returns a 200. You can see the value of <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">__user</code> (which is sent with all AJAX requests) is different from the <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">profile_id</code> we modified.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-3-1.png" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-3-1.png" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: auto; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Note: You may have to reauth after submitting the request, but the password required is yours, not the targets.</div><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">An SMS is then received with confirmation.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; text-align: center; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-4.jpg" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-4.jpg" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: 400px; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Now we can initate a password reset request against the user and get the code via SMS.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-5-1.png" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-5-1.png" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: auto; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Another SMS is received with the reset code.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; text-align: center; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-6-1.jpg" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-6-1.jpg" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: 400px; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">We enter this code into the form, choose a new password, and we’re done. The account is ours.</div><figure style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px; margin: 0px; padding-bottom: 10px; padding-top: 10px; transition: all 0.2s ease;"><a class="image-popup" href="https://fin1te.net/images/facebooksms/facebook-sms-7.png" style="-webkit-transition: all 0.2s ease; box-sizing: border-box; color: #555555; text-decoration: none; transition: all 0.2s ease;"><img src="https://fin1te.net/images/facebooksms/facebook-sms-7.png" style="-webkit-transform: translateY(0px); -webkit-transition: all 0.25s ease; border: 0px; box-sizing: border-box; height: auto; margin-bottom: 10px; max-width: 100%; opacity: 0.7; transform: translateY(0px); transition: all 0.25s ease; vertical-align: middle;" /></a></figure><h4 id="fix" style="background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.5rem; line-height: 24px; margin-bottom: 1.5rem; text-rendering: optimizeLegibility;">Fix</h4><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">Facebook responsed by verifying that you have permission to modify the phone number on the profile denoted by <code style="background-color: #f2f2f2; border-radius: 3px; border: 1px solid rgb(230, 230, 230); box-sizing: border-box; font-family: source-code-pro, monospace; font-size: 0.875rem; line-height: 1.71429; margin: 0px 2px; padding: 0px 5px; white-space: nowrap;">profile_id</code>.</div><h4 id="timeline" style="background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.5rem; line-height: 24px; margin-bottom: 1.5rem; text-rendering: optimizeLegibility;">Timeline</h4><ul style="background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 16px; line-height: 24px;"><li style="box-sizing: border-box; font-size: 1rem; line-height: 1.5; margin-bottom: 0.75rem;">23rd May 2013 - Reported</li><li style="box-sizing: border-box; font-size: 1rem; line-height: 1.5; margin-bottom: 0.75rem;">28th May 2013 - Acknowledgment of Report</li><li style="box-sizing: border-box; font-size: 1rem; line-height: 1.5; margin-bottom: 0.75rem;">28th May 2013 - Issue Fixed</li></ul><h4 id="note" style="background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.5rem; line-height: 24px; margin-bottom: 1.5rem; text-rendering: optimizeLegibility;">Note</h4><div style="-webkit-transition: all 0.2s ease; background-color: white; box-sizing: border-box; color: #222222; font-family: source-sans-pro, sans-serif; font-size: 1.125rem; line-height: 1.55556; margin-bottom: 1.5rem; transition: all 0.2s ease;">The bounty assigned to this bug was $20,000, clearly demonstrating the severity of the issue.</div></div>

Hack Facebook Accounts By Sending A Text Message

This post will demonstrate a simple bug which will lead to a full takeover of any Facebook account, with  no user interaction . Facebook giv...

+ Read more »

Become A Great Hacker By Following Simple Steps

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"><span style="font-size: small;">1. Learn TCP/IP, Basic Information gathering, Proxies, Socks, SSL, VPN, VPS, RDP, FTP, POP3, SMTP, Telnet, SSH.</span><br /><span style="font-size: small;">2. Learn Linux, Unix, Windows - You can do this using vmware or any virtual desktop utility.</span><br /><span style="font-size: small;">3. Learn a programming language that's compatible with all OS - Perl, Python, C, ASM</span><br /><span style="font-size: small;">4. Learn HTML, PHP, Javascript, ASP, XML, SQL, XSS, SQLI, RFI, LFI</span><br /><span style="font-size: small;">5. Learn Reverse engineering and crack some programs for serials easy ones like mirc, winzip, winrar or old games.</span><br /><span style="font-size: small;">6. Code a fuzzer for common protocols - ftp, pop3, 80, 8080 - Pick some free software like ftp server, mail server, apache or iis webserver or a webserver all-in-one pack, or teamspeak, ventrilo, mumble.</span><br /><span style="font-size: small;">7. Code a tool that uses grep to sort out unique code in source codes.</span><br /><span style="font-size: small;">8. Make a custom IPtable, IPsec firewall that blocks all incoming traffic and out going traffic and add filters to accept certain ports that your software or scripts use.</span><br /><span style="font-size: small;">9. Pick a kernel in linux or unix, also pick a Microsoft OS version lets say Winxp pro sp2 put them on the virtual desktops (vmware) and find and code a new local exploit in those versions, then install a Apache webserver on the Linux/Unix and a IIS webserver on the winxp pro and attempt to find and code a new local reverse_tcp_shell exploit.</span><br /><span style="font-size: small;">10. Learn Cisco Router and Switch configuration and setup.</span><br /><span style="font-size: small;">11. Learn Checkpoint Setup and Config</span><br /><span style="font-size: small;">12. Learn Wifi scanning, cracking, sniffing.</span><br /><span style="font-size: small;">13. Pick a person in you phonebook for the area code you live in or city then ring the person on a anonymous line like skype or a payphone or a carded sim and attempt to social engineer the person for his name, address, data of birth, city born, country born, ISP connected with, Phone company connected with, What bank he/she uses and anything else you can get. Then Attempt to ring using a spoof caller ID software with the person's phone number - call the ISP and try reset the password to his/her internet connection/web-mail, get access to bank account or ask them to send out a new *** to a new address (drop) with a new pin, reset of phone company passwords.</span><br /><span style="font-size: small;">14. Use your information gathering skills to get all the information off a website like a shop then use the spoof caller-id software or hack your phone to show a new number of the Webserver's Tech Support number then ring the shop owner and try get the shop site password.</span><br /><span style="font-size: small;">15. Do the same thing but attempt to use a web attack against a site or shop to gain admin access.</span><br /><span style="font-size: small;">16. Once got access upload a shell and attempt to exploit the server to gain root using a exploit you coded not someone else s exploit.</span><br /><span style="font-size: small;">17. Make your own Linux Distro</span><br /><span style="font-size: small;">18. Use your own Linux Distro or use a vanilla Linux gnome (not kde) keep it with not much graphics so you can learn how to depend on the terminal and start from scratch install applications that you will only need for a blackbox (Security test box), make folders for fuzzers, exploits, scanners..etc Then load them up with your own scripts and other tools ( By this stage you shouldn't need to depend on other peoples scripts).</span><br /><span style="font-size: small;">19. Learn macosx and attempt to gain access to a Macosx box whether it be your own or someone's else.</span><br /><span style="font-size: small;">20. Create a secure home network and secure your own systems with your own Security policies and firewall settings.</span></span></span><br style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;" /><span style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif;"><br /></span><span style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: #0b5394; font-size: small;">All this isn't a over night learning it will take a nice 3 - 4 years to learn a bit of this 5+ years to learn most of it and even then you may need time to keep learn as IT keeps changing ever day.</span><br /><span style="font-size: small;"><br /></span><span style="color: #0b5394; font-size: small;">As long as your dedicated to learning you won't have any problems and if you learn all that you should easy get a job in any company if you show proof that you can do these things (print out scripts that you made or put on disc) to show the companies.</span></span></div>

Become A Great Hacker By Following Simple Steps

1. Learn TCP/IP, Basic Information gathering, Proxies, Socks, SSL, VPN, VPS, RDP, FTP, POP3, SMTP, Telnet, SSH. 2. Learn Linux, Unix, Window...

+ Read more »

Facebook Hacking Softwares

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"><br /><span style="font-family: Georgia, 'Times New Roman', serif;"><b>1. PWN STAR</b><br /><br />A bash script to launch the AP, can be configured with a variety of attack options. Including a php script and server index.html, for phishing. Can act as a multi-client captive portal using php and iptables. Exploitation classics such as crime-PDF, De-auth with aireplay, etc..<br /><br /><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfvAzAqbmrrn8GWbukjaXxVFBeMkm6bzdsC5UoGYcCffE0xLL_G_23vsDCPw044RHSipik2dGWrY6AR23pRcYbDXA_k1xZfB5zqrqNfbE8yI33CgWJmiLQ-MKgOUaA8QIGw1XtRJxBho9s/s640/PwnSTARscreenshot.png" style="border: none; padding: 0px;" /></span><b style="font-family: Georgia, 'Times New Roman', serif;"><br /></b><br /><b style="font-family: Georgia, 'Times New Roman', serif;">General Features:</b><br /></span></span><br /><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Managing Interfaces and MAC Spoofing</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Set sniffing</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Phishing Web</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Karmetasploit</li><li style="margin: 0px 0px 0.25em; padding: 0px;">WPA handshake</li><li style="margin: 0px 0px 0.25em; padding: 0px;">De-auth client</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Managing Iptables</li></span></ul><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px; text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">    <b><a href="https://code.google.com/p/pwn-star/downloads/list" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">Download This PWN Star</a></b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b>2. ZED ATTACK PROXY (ZAP)</b><br /><br />(ZAP) is an integrated penetration testing tool for finding vulnerabilities in web applications. This tool is designed for use by people with a variety of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to the toolbox tester.<br /><br /><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhixt96f9LB0_9i7u2NfgNTW2FHS5x2Ei9C6Z_cqp3mBF5DqLVJ56rRkba_XNJEKa9r2HcuSUzKuZIbDKVAT45rZI7ZPCZEmFVJJnqC3H2vn-fkG7U60CZFpmNKMZ6j5i_X-0gS6CcnC6kB/s640/zap1-3historyfilter.jpg" style="border: none; padding: 0px;" /></span></span></span><br /><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b>Key Features:</b></span></span></span></div><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"><br /></span></span><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><div></div><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Intercepting Proxy</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Active scanners</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Passive scanners</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Brute Force scanner</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Spider</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Fuzzer</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Port Scanner</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Dynamic SSL certificates</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">API</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Beanshell integration</span></span></span></li></ul><span style="background-color: black;"><span style="color: lime;"><br /><span style="font-family: Georgia, 'Times New Roman', serif;">                                                    <a href="https://code.google.com/p/zaproxy/downloads/detail?name=ZAP_WEEKLY_D-2012-10-22.zip&can=2&q=" style="border: none; color: #0a3adb; outline: none; text-decoration: none;" target="_blank"><b>ZAP Download Here:</b></a></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><br /><b>3. SET (SOCIAL ENGINEERING TOOLKIT)</b><br /><br />Tools that focus on attacking the human element of weakness and inadvertence. This tool is widely used today and is one of the most successful tools demonstrated at Defcon.</span></span></span><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG9bOUVHWqACBZinDUJC1G0B3dHynpZgFz7Sqpv-7Q4HicpyQVfJn8h1EDq2R2fQFerNm2XL-ZpT3EM8zY82CKPaG3K4SR1WJPb4xIig813-xvE9rQRJRBv7ItbPnEVN17ydiRbhk40GoT/s320/Set-Box_2.png" style="border: none; padding: 0px;" /></span></span></span></div><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><b>Key Features:</b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Spear-Phishing Attack Vector</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Java Applet Attack Vector</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Metasploit Browser Exploit Method</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Credential Harvester Attack Method</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Tabnabbing Attack Method</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Man Left in the Middle Attack Method</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Web Jacking Attack Method</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Multi-Attack Web Vector</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Infectious Media Generator</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Teensy USB HID Attack Vector</li></span></ul><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><br /><div style="text-align: center;"><b><a href="https://www.trustedsec.com/downloads/social-engineer-toolkit/" style="border: none; color: #0a3adb; outline: none; text-decoration: none;" target="_blank">Download Social Engineering Toolkit here:</a></b></div><br /><b>4. BURP SUITE</b><br /><br />Burp Suite is a very nice tool for web application security testing. This tool is great for pentester and security researchers. It contains a variety of tools with many interfaces between them designed to facilitate and accelerate the process of web application attacks.<br /><br /><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirJS4T7xibz7TKfIFq8myIpoSq8mrrzOEIfpQm4APPTQZ_dEbOHV43rJKri0E71jY3Z-4xPJW_CA-HMvG2f1Po-VMemVKpgzpeRfx-nPIvbcyCkRiCgkq2_dRiYpVnjud_NP2aVSA73PDM/s640/scanner.png" style="border: none; padding: 0px;" /><br /><br /><b>General Function:</b></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Interception proxies</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Radar and spiders crawling</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Webapps scanner</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Tool assault</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Repeater and sequencer tools</li></span></ul><span style="font-family: Georgia, 'Times New Roman', serif;"><div style="border: medium none; outline: none medium; text-align: center;"><a href="http://portswigger.net/burp/download.html" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank"><b>Burp Suite Download Here:</b></a></div><b><br />5. ETTERCAP</b><br /><br />Ettercap is a multipurpose sniffer / interceptor / logger for Local Area Network . It supports active and passive dissection of many protocols (even in code) and includes many feature for network and host analysis.<br /><br /><br /><img src="http://i1-linux.softpedia-static.com/screenshots/Ettercap_2.jpg" style="border: none; padding: 0px;" /><br /><br /><b>General Function:</b></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">To capture traffic and data</li><li style="margin: 0px 0px 0.25em; padding: 0px;">To do logging network</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Etc.</li></span></ul><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><div style="text-align: center;"><b><a href="http://sourceforge.net/projects/ettercap/files/ettercap/0.7.5-Assimilation/ettercap-0.7.5.tar.gz/download" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">Download Ettercap Here:</a></b></div></span><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><b>6. SANS INVESTIGATIVE FORENSIC TOOLKIT (SIFT)</b><br /><br />The SANS Investigative Forensic Toolkit (SIFT) Workstation is a VMware Appliance that can be configured with all the requirements to perform a detailed digital forensic. Compatible with Expert Witness Format (E01), Advanced Forensic Format (AFF), and raw (dd) evidence formats. The new version has been completely rebuilt on the Ubuntu base with many additional tools and capabilities that are used in modern forensic technology.</span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1JInUi442Ll2g9r_YtiZRKSJNr7JPPsDB4Rb84_tuNAFWUWQQXanqppXROjvLCSNhrol6ZyJf9wpaRpK6vfQW2-uQ-voEfvR-NveN_uZIBSMUd3QF53Imw8u_9rJDs5FQhloO127mD55x/s1600/SANS+Investigative+Forensic+Toolkit+2.14+Released.jpg" style="border: none; padding: 0px;" /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><b>General Function SIFT:</b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">iPhone, Blackberry, and Android Forensic Capabilities</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Registry Viewer (YARU)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Compatibility with F-Response Tactical, Standard, and Enterprise</li><li style="margin: 0px 0px 0.25em; padding: 0px;">PTK 2.0 (Special Release - Not Available for Download)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Automated Generation Timeline via log2timeline</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Many Firefox Investigative Tools</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Windows Journal Parser and Shellbags Parser (jp and sbag)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Many Windows Analysis Utilities (prefetch, usbstor, event logs, and more)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Complete Overhaul of Regripper Plugins (added over 80 additional plugins)</li></span></ul><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><br /></b></span></span></span><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><a href="http://computer-forensics.sans.org/community/downloads" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank"><b>Download the SANS Investigative Forensic Toolkit (SIFT) here:</b></a></b></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b></b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><br /><b>7. WIRESHARK</b><br /><br />Wireshark is the most widely used and most popular in the world the protocol analyzer, and is the de facto standard across many industries and educational institutions to analyze the network in different protocol.<br /><br /><img height="472" src="http://www.wireshark.org/docs/wsug_html_chunked/wsug_graphics/ws-main.png" style="border: none; padding: 0px;" width="640" /><br /><br /><b>General Function:</b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><br /></span></span><ul style="font-family: Georgia, 'Times New Roman', serif; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Live capture and offline analysis</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Standard three-pane packet browser</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Captured data network can be browsed via a GUI, or via the TTY-mode tshark utility</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">The most powerful display filters in the industry</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Rich VoIP analysis</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Read / write many different capture file formats</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Etc.</span></span></li></ul><div style="border: medium none; font-family: Georgia, 'Times New Roman', serif; outline: none medium; text-align: center;"><span style="background-color: black;"><span style="color: lime;"><a href="http://www.wireshark.org/download.html" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank"><b>Download Wireshark Here:</b></a></span></span></div><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">8. WEBSPLOIT</b></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">WebSploit is an Open Source Project for Remote Scan and Analysis System of the weaknesses in web applications.</span></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSXJkxGiQS2kjq9KgHYS2-zCCqWjtZSYqJ7uFRCTgSiUOkLIkVytPDln-LFkmxvQhKTBuTiq1IyeaYUiZP-8UGlwc98Rol9lBKcf5ir4B_Wc9r6G2CQS-7aUa3vRUcqhchDJxRXgKEA4ri/s640/WebSploit+Framework+2.0.3+with+Wifi+Jammer.jpg" style="border: none; padding: 0px;" /></span></span></span><span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">Key Features: </b></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br />[>] Social Engineering Works<br />[>] Scan, Web Crawler & Analysis<br />[>] Automatic Exploiter<br />[>] Support Network Attacks<br />-<br />[+] Autopwn - Used From Metasploit For Scan and Exploit Target Service<br />[+] WMAP - Scan, Target Used Crawler From Metasploit WMAP plugin<br />[+] format infector - inject the payload into reverse and bind file format<br />[+] phpmyadmin Scanner<br />[+] LFI Bypasser<br />[+] Apache Users Scanner<br />[+] Dir Bruter<br />[+] admin finder<br />[ +] MLITM Attack - Man Left In The Middle, XSS Phishing Attacks<br />[+] MITM - Man In The Middle Attack<br />[+] Java Applet Attack<br />[+] MFOD Attack Vector<br />[+] USB Infection Attack<br />[+] Dos ARP Attack<br />[+ ]'s Killer Attack<br />[+] Attack Fake Update<br />[+] Fake Access Point Attack</span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><br /></b></span></span></span><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><a href="http://sourceforge.net/projects/websploit/files/latest/download" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank"><b>Download WebSploit Framework here:</b></a></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><br />9. WINAUTOPWN</b><br /><br />WinAutoPWN is a tool that is used to exploit the Windows Framework directly, so that we are automatically going to be an administrator on the windows. Widely used by "Defacer" Indonesia to deface the Windows Server<img src="http://www.binushacker.net/wp-includes/images/smilies/icon_smile.gif" style="border: none; padding: 0px;" /><br /><br /><img height="461" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqfVYTDlCxAt4R1kMEQ2dE_02ccXM8dBTnsblluUnVE7VPFUWv8mYesGW48vmZJLhDBZE62InpLitAwAO3YeFOAQgc3WlobInqyhSJrLyWbWH9sPBhjjXzm8ughHfLv90c3AEHb0MoD-Wm/s640/winAUTOPWN+v3.2+Released.jpg" style="border: none; padding: 0px;" width="640" /></span></span></span><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><a href="https://adf.ly/Fq5vt" style="border: none; color: #0a3adb; outline: none; text-decoration: none;" target="_blank"><b>Download WinAutoPWN Here:</b></a></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><b>10. HASHCAT</b><br /><br />Hashcat are a variety of tools to crack passwords in encrypted, it is very powerful for password recovery.<br /><br /><img height="471" src="http://hashcat.net/hashcat/hashcat.png" style="border: none; padding: 0px;" width="640" /></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><b><span style="font-family: Georgia, 'Times New Roman', serif;">General Function:</span></b></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Multi-Threaded</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Free</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Multi-Hash (up to 24 million hashes)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Multi-OS (Linux, Windows and OSX native binaries)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Multi-Algo (MD4, MD5, SHA1, DCC, NTLM, MySQL, ...)</li><li style="margin: 0px 0px 0.25em; padding: 0px;">SSE2 accelerated</li><li style="margin: 0px 0px 0.25em; padding: 0px;">All Attack-Modes except Brute-Force and Permutation can be extended by rules</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Very fast Rule-engine</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Rules compatible with JTR and PasswordsPro</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Possible to resume or limit session</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Automatically recognizes recovered hashes from outfile at startup</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Can automatically generate random rules</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Load saltlist from an external file and then use them in a Brute-Force Attack variant</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Able to work in an distributed environment</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Specify multiple wordlists or multiple directories of wordlists</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Number of threads can be configured</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Lowest priority threads run on</li><li style="margin: 0px 0px 0.25em; padding: 0px;">30 + Algorithms is implemented with performance in mind</li><li style="margin: 0px 0px 0.25em; padding: 0px;">... and much more</li></span></ul><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><br /></b></span></span></span><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><a href="http://hashcat.net/hashcat/" style="border: none; color: #0a3adb; outline: none; text-decoration: none;" target="_blank"><b>Download HashCat Here:</b></a></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><br /><b>11. UNISCAN</b><br /><br />Uniscan is a scanner for web applications, written in perl for Linux. Currently Uniscan version is 6.2.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIs8gF0ZwU2Y53VyIuArl7pFVXbtPag8BA3Z492cHlIor6Gc6mt3B8bC1msJZuCAWVwwwdhFcA3QPHNUylbzQb9KfFPQKmHaMsF2EwcabJ9l7Y2EkPyMEm7X_BbLCF2m08obCMitKCbE19/s1600/uniscan.png" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIs8gF0ZwU2Y53VyIuArl7pFVXbtPag8BA3Z492cHlIor6Gc6mt3B8bC1msJZuCAWVwwwdhFcA3QPHNUylbzQb9KfFPQKmHaMsF2EwcabJ9l7Y2EkPyMEm7X_BbLCF2m08obCMitKCbE19/s640/uniscan.png" style="border: none; padding: 0px; position: relative;" /></a><br /><br /><b>General Function:</b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><b><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></b></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Identification of system pages through a Web Crawler.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Use of threads in the crawler.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Control the maximum number of requests the crawler.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Control of variation of system pages identified by Web Crawler.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Control of file extensions that are ignored.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Test of pages found via the GET method.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Test the forms found via the POST method.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Support for SSL requests ( HTTPS ).</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Proxy support.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Generate site list using Google.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Generate site list using Bing.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Plug-in support for Crawler.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Plug-in support for dynamic tests.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Plug-in support for static tests.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Plug-in support for stress tests.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Multi-language support.</span></span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Web client.</span></span></span></li></ul></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;"><br /></b></span></span><div style="font-family: Georgia, 'Times New Roman', serif; text-align: center;"><span style="background-color: black;"><span style="color: lime;"><b><a href="http://sourceforge.net/projects/uniscan/files/6.2/uniscan6.2.tar.gz/download" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">Download Uniscan Here:</a></b></span></span></div><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">12. OLYYDBG</b></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">OllyDbg is a 32-bit assembler debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source code is not available.</span></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><img height="395" src="http://www.binushacker.net/wp-content/uploads/cracking-dengan-ollydbg.jpg" style="border: none; padding: 0px;" width="640" /></span></span></span><span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">General Function:</b></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Intuitive user interface, no cryptical commands</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Code analysis - traces registers, recognizes procedures, loops, API calls, switches, tables, constants and strings</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Directly loads and debugs DLLs</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Object file scanning - locates routines from object files and libraries</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Allows for user-defined labels, comments and function descriptions</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Understands debugging information in Borland ® format</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Saves patches between sessions, writes them back to executable file and updates fixups</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Open architecture - many third-party plugins are available</li><li style="margin: 0px 0px 0.25em; padding: 0px;">No installation - no trash in registry or system directories</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Debugs multithreaded applications</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Attaches to running programs</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Configurable disassembler, supports both MASM and IDEAL formats</li><li style="margin: 0px 0px 0.25em; padding: 0px;">MMX, 3DNow! and SSE instructions and the data types, Including Athlon extensions</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Full UNICODE support</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Dynamically recognizes ASCII and UNICODE strings - also in Delphi format!</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Recognizes complex code constructs, like call to jump to procedure</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Decodes calls to more than 1900 standard API and 400 C functions</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Gives context-sensitive help on API functions from external help file</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Sets conditional, logging, memory and hardware breakpoints</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Traces program execution, logs arguments of known functions</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Shows fixups</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Dynamically traces stack frames</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Searches for imprecise commands and masked binary sequences</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Searches whole allocated memory</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Finds references to constant or address range</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Examines and modifies memory , sets breakpoints and Pauses program on-the-fly</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Assembles commands into the shortest binary form</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Starts from the floppy disk</li></span></ul><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b><br /></b></span><br /><div style="text-align: center;"><span style="font-family: Georgia, 'Times New Roman', serif;"><b style="border: medium none; outline: none medium;"><a href="http://ollydbg.de/odbg201e.zip" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">OllyDbg Download Here:</a></b></span></div><span style="font-family: Georgia, 'Times New Roman', serif;"><div style="text-align: center;"></div></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><div><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">13. BBQSQL</b></span></span></div><div><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;"><br /></b></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">BBQSQL an Opensource SQL injection tools with the framework specifically designed to carry out the process in hyper fast, database agnostic, easy to setup, and easy to modify. This is another amazing release from Arsenal Blackhat USA 2012. When conducting security assessments of applications, we often find that it is difficult to SQL vulnerabilities exploitable, with this tool will be extremely easy.<br /><br />BBQSQL written in the Python programming language. This is very useful when complex SQL injection attack vulnerabilities. BBQSQL also a semi-automated tool, which allows little customization for those who are finding it difficult to trigger a SQL injection. The tool is built to be database agnostic and very versatile. It also has an intuitive UI for setting up the attack much easier.<br /><br /><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitsPOmnSLXJGNssEgz_A1NDfMBmQT9yV1grFYyLpduLz1oYH4Ay6OrBlqPLVifk5hTbZ64elWlqmfS2OcKomr8Ogu2jENacTLo1KWrsAtrZ99fb5U5PxupX02kE7DWe-4jtQoMU3m4MnY3/s640/BBQSQL.jpg" style="border: none; padding: 0px;" /><br /><br /><b>General Function:</b></span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><br /></span></span><ul style="font-family: Georgia, 'Times New Roman', serif; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">SQL Injection Tools</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">URL</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">HTTP Method</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Headers</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Cookies</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Encoding methods</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Redirect behavior</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Files</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">HTTP Auth</span></span></li><li style="margin: 0px 0px 0.25em; padding: 0px;"><span style="background-color: black;"><span style="color: lime;">Proxies</span></span></li></ul><div style="border: none; font-family: Georgia, 'Times New Roman', serif; outline: none; text-align: center;"><span style="background-color: black;"><span style="color: lime;"><a href="https://github.com/Neohapsis/bbqsql/" style="border: none; color: #0a3adb; outline: none; text-decoration: none;" target="_blank"><b>Download BBQSQL Here:</b></a></span></span></div><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span></div><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">14. CRYPTOHAZE</b></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;">Tools to crack password / hash where cryptohaze supports CUDA, OpenCL , and the CPU code (SSE, AVX, etc.). Can run on OS that support CUDA. These are intended to make it easier to pentester did crack the hash.</span></span></span> <span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg917K9WkyyMqo5YMoH2DYIbPVk2CqrKGFbXC2uykABjVX1HbY08EXgzGpMtuoudnsfrf8f9yRvzs_XodW8VV5vhQg0wiOv46PwXdmQU2OnJplJsk6YUU3P9kEhLVZambgCXf5MEgijjQw/s640/Hacker+going+to+demonstrate+open+source+tool+to+crack+Hashes+with+speed+of+154+Billion++per+sec.png" style="border: none; padding: 0px;" /></span></span></span><span style="background-color: black;"><span style="color: lime;"><br /></span></span><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;">General Function:</b></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span></span><ul style="line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Crack various kinds of hash</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Showing results from crackhash</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Cracking on various OS platforms</li></span></ul><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br />                                          </span></span></span></div><div style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><div style="text-align: center;"><span style="background-color: black;"><span style="color: lime;"><b style="font-family: Georgia, 'Times New Roman', serif;"><a href="http://sourceforge.net/projects/cryptohaze/files/Cryptohaze-Combined/" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">Download Cryptohaze Here:</a></b></span></span></div><span style="background-color: black;"><span style="color: lime;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /><br /><b>15. SAMURAI WEB TESTING FRAMEWORK (SWTF)</b><br />SWTF is used to do testing / pentest against web application, is used to find a weakness and exploited to perform web. Very comprehensive and widely used in the world, including one used by staff binushacker<br /><br /><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0eBf7RcOHYtuNfiqoAercDa4YoidN8qqm0pOWPL7Rvvt1s3cXjts0icAkAmQZGkPmURVDmBTeX36HVHn31nenKVk6nLPK-VwtUsF4AGXQUmtnA8jhDtQ9lQAM1IySe2FBwNAOPFojSY35/s640/The+Samurai+Web+Testing+Framework+v+2.0RC5.jpg" style="border: medium none; padding: 0px;" /><br /><br /><b>General Function:</b></span></span></span></div><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"><span style="color: lime;"></span></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"></span><span style="background-color: black; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;"></span><br style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px;" /><ul style="background-color: #d1a261; color: silver; font-family: 'Trebuchet MS', Trebuchet, sans-serif; font-size: 13px; line-height: 18.2000007629395px; margin: 0.5em 0px; padding: 0px 2.5em;"><span style="background-color: black;"><span style="font-family: Georgia, 'Times New Roman', serif;"><li style="margin: 0px 0px 0.25em; padding: 0px;">Web Scanner</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Web Mapping</li><li style="margin: 0px 0px 0.25em; padding: 0px;">Web Exploitation</li></span></span></ul><span style="background-color: #d1a261; color: silver; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18.2000007629395px;"></span><br /><div style="text-align: center;"><b><a href="http://sourceforge.net/projects/samurai/files/" style="border: medium none; color: #0a3adb; outline: none medium; text-decoration: none;" target="_blank">Download The Samurai Web Testing Framework</a></b></div></div>

Facebook Hacking Softwares

1. PWN STAR A bash script to launch the AP, can be configured with a variety of attack options. Including a php script and server index.html...

+ Read more »