infosec.html

---
layout: layout
title: "infosec"
---
	  <h3>Games</h3>
	    <p>
		<ul>
		<li><a href="http://cryptogeddon.com/">Cryptogeddon</a></li>
		<li><a href="http://ctf365.com/">ctf365</a></li>
		</ul>
	    </p>

	  <h3>Privacy Tools</h3>
	    <p>
		<ul>
		<li><a href="https://disconnect.me/tools">Collusion</a></li>
		<li><a href="https://www.privacytools.io/">Privacytools.io</a></li>
		</ul>
	    </p>

	  <h3>News</h3>
	    <p>
		<ul>
		<li><a href="http://www.reddit.com/r/netsec/">Reddit InfoSec</a></li>
		<li><a href="https://www.schneier.com/">Schneier on Security</a></li>
		<li><a href="http://www.darkreading.com/">Dark Reading</a></li>
		<li><a href="http://www.scmagazine.com/">SC Magazine</a></li>
		<li><a href="http://www.theregister.co.uk/security/">The Register - Security</a></li>
		<li><a href="http://arstechnica.com/security/">Ars Technica - Security</a></li>
		<li><a href="http://www.f-secure.com/weblog/">F-Secure Weblog</a></li>
		<li><a href="http://nakedsecurity.sophos.com/">Naked Security (from Sophos)</a></li>
		<li><a href="http://krebsonsecurity.com/">Krebs on Security</a></li>
		<li><a href="http://securityaffairs.co/wordpress/">Security Affairs</a></li>
		<li><a href="http://googleonlinesecurity.blogspot.ca/">Google Online Security Blog</a></li>
		</ul>
	    </p>
	   
	  <h3>Threat Centers</h3>
	    <p>
		<ul>
		<li><a href="https://isc.sans.edu/">SANS Internet Storm Center</a></li>
		<li><a href="http://ics-cert.us-cert.gov/">ICS-CERT</a></li>
		<li><a href="http://technet.microsoft.com/en-us/security/dn440717">Microsoft Security TechCenter</a></li>
		<li><a href="https://www.alienvault.com/open-threat-exchange/latest-threats">Alien Vault OTX</a></li>
		<li><a href="http://www.checkpoint.com/defense/advisories/public/index.html">Check Point Threat Center</a></li>
		<li><a href="http://www.mcafee.com/us/threat-center.aspx">McAfee Threat Center</a></li>
		<li><a href="http://www.symantec.com/security_response/publications/threatreport.jsp">Symantec Threat Report</a></li>
		<li><a href="http://www.kaspersky.com/internet-security-center">Kaspersky Internet Security Center</a></li>
		<li><a href="http://www.akamai.com/stateoftheinternet/">Akamai SotI</a></li>
		<li><a href="http://osvdb.com/">Open Sourced Vulnerability DB</a></li>
		<li><a href="http://cve.mitre.org/">CVE - Common Vulnerabilities and Exposures</a></li>
		<li><a href="http://nvd.nist.gov/home.cfm">National Vulnerability DB</a></li>
		<li><a href="http://googleprojectzero.blogspot.com">Google's Project Zero</a></li>
		<li><a href="http://map.ipviking.com/">IPViking Live Attack Map</a></li>
		<li><a href="https://www.virustotal.com/">VirusTotal</a></li>
		</ul>
	    </p>
	   
	  <h3>Governance</h3> 
	    <p>
	    	<ul>
		<li><a href="https://www.isc2.org/">(ISC)2</a></li>
		<li><a href="https://www.isaca.org/">ISACA</a></li>
		<li><a href="https://www.owasp.org/index.php/Main_Page">OWASP</a></li>
		<li><a href="http://news.netcraft.com/">Netcraft</a></li>
		<li><a href="http://sectools.org/">SecTools.org</a></li>
		</ul>
	    </p>

	  <h3>InfoSec Bounty Programs</h3>
	    <p>
		<ul>
		<li><a href="https://bugcrowd.com/">bugcrowd</a></li>
		<li><a href="https://hackerone.com/">HackerOne vulnerability broker</a></li>
		<li><a href="http://www.google.com/about/appsecurity/">Google App Security</a></li>
		<li><a href="http://googleonlinesecurity.blogspot.ca/">Google Online Security Blog</a></li>
		<li><a href="http://www.microsoft.com/security/msrc/default.aspx">Microsoft Security</a></li>
		<li><a href="http://www.microsoft.com/security/msrc/report/bountyprograms.aspx">Microsoft Security Bounty Programs</a></li>
		</ul>
	    </p>

	  <h3>Interesting Github repos</h3>
	    <p>
		<ul>
		<li><a href="https://github.com/showcases/security">Github Security Showcase</a></li>
		<li><a href="https://github.com/bro/bro">Bro</a> (<a href="https://github.com/toddhdow/bro">my fork</a>)</li>
		<li><a href="https://github.com/aol/moloch">Moloch - IPv4 full PCAP capturing</a> (<a href="https://github.com/toddhdow/moloch">my fork</a>)</li>
		<li><a href="https://github.com/ossec/ossec-hids">OSSEC HIDS</a> (<a href="https://github.com/toddhdow/ossec-hids">my fork</a>)</li>
		<li><a href="https://github.com/rapid7/metasploit-framework">Rapid7 Metasploit Framework</a> (<a href="https://github.com/toddhdow/metasploit-framework">my fork</a>)</li>
		<li><a href="https://github.com/etsy/MIDAS">MAC Intrusion Detection Analysis System</a> (<a href="https://github.com/toddhdow/MIDAS">my fork</a>)</li>
		<li><a href="https://github.com/jipegit/OSXAuditor">OS X Auditor</a> (<a href="https://github.com/toddhdow/OSXAuditor">my fork</a>)</li>
		<li><a href="https://github.com/AlienVault-Labs/AlienVaultLabs">AlienVault projects</a> (<a href="https://github.com/toddhdow/AlienVaultLabs">my fork</a>)</li>
		<li><a href="https://github.com/cuckoobox/cuckoo">Cuckoo Sandbox malware analysis</a> (<a href="https://github.com/toddhdow/cuckoo">my fork</a>)</li>
		<li><a href="https://github.com/presidentbeef/brakeman">Brakeman - static analysis security vulnerability scanner for Ruby on Rails applications</a> (<a href="https://github.com/toddhdow/brakeman">my fork</a>)</li>
		<li><a href="https://github.com/sleuthkit/sleuthkit">Sleuthkit - command line digital forensics tools that allow you to investigate volume and file system data</a> (<a href="https://github.com/toddhdow/sleuthkit">my fork</a>)</li>
		<li><a href="https://github.com/gamelinux/passivedns">DNS network sniffer</a> (<a href="https://github.com/toddhdow/passivedns">my fork</a>)</li>
		<li><a href="https://github.com/mozilla/mig">Mozilla cloud security investigator</a> (<a href="https://github.com/toddhdow/mig">my fork</a>)</li>
		<li><a href="https://github.com/jeffbryner/MozDef">Mozilla Defense Platform</a> (<a href="https://github.com/toddhdow/MozDef">my fork</a>)</li>
		<li><a href="https://github.com/facebook/osquery">SQL powered operating system instrumentation, monitoring, and analytics.</a> (<a href="https://github.com/toddhdow/osquery">my fork</a>)</li>
		<li><a href="https://github.com/Netflix/Scumblr">Netflix Scumblr</a> (<a href="https://github.com/toddhdow/Scumblr">my fork</a>)</li>
		<li><a href="https://github.com/threatstream/mhn">The Modern Honeynet</a> (<a href="https://github.com/toddhdow/mhn">my fork</a>)</li>
		<li><a href="https://github.com/google/grr">GRR Rapid Response: remote live forensics for incident response</a> (<a href="https://github.com/toddhdow/grr">my fork</a>)</li>
		<li><a href="https://github.com/radare/radare2">unix-like reverse engineering framework and commandline tools</a> (<a href="https://github.com/toddhdow/radare2">my fork</a>)</li>
		<li><a href="https://github.com/beefproject/beef">The Browser Exploitation Framework Project</a> (<a href="https://github.com/toddhdow/beef">my fork</a>)</li>
		</ul>
	    </p>

	  <h3>Training</h3>
	    <p>
		<ul>
		<li><a href="https://class.coursera.org/crypto-012">Coursera - Crypto 101</a></li>
		<li><a href="https://www.owasp.org/index.php/Category:OWASP_Testing_Project">OWASP Testing Guide v4</a></li>
		<li><a href="http://www.amanhardikar.com/mindmaps/PracticeUrls.html">Penetration Testing Practice Lab - Vulnerable Apps/ Systems</a></li>
		</ul>
	    </p>
	    
	  <h3>Interesting</h3>
	    <p>
		<ul>
		<li><a href="https://simplysecure.org/">Simply Secure</a></li>
		<li><a href="https://letsencrypt.org/">Lets Encrypt.org</a></li>
		<li><a href="http://andresriancho.github.io/nimbostratus/">Nimbostratus - AWS fingerprinting and exploiting</a></li>
		</ul>
	    </p>

	  <h3>Vulnerability Research Sites</h3>
	    <p>
		<ul>
		<li><a href="http://www.google.com/about/appsecurity/">Google App Security</a></li>
		<li><a href="http://www.microsoft.com/security/msrc/default.aspx">Microsoft Security</a></li>
		<li><a href="http://www.symantec.com/security_response/publications/threatreport.jsp">Symantec</a></li>
		<li><a href="http://www.fireeye.com/cyber-attack-landscape/">Fireeye</a></li>
		<li><a href="http://nvd.nist.gov">National Vulnerability Database</a></li>
		<li><a href="http://www.securitytracker.com">SecurityTracker</a></li>
		<li><a href="http://www.securiteam.com">SecuriTeam</a></li>
		<li><a href="http://www.secunia.com">Secunia</a></li>
		<li><a href="http://www.hackerstrom.com">Hackerstorm Vulnerability Database Tool</a></li>
		<li><a href="http://www.hackerwatch.org">HackerWatch</a></li>
		<li><a href="http://www.securityfocus.com">SecurityFocus</a></li>
		<li><a href="http://www.securitymagazine.com">Security Magazine</a></li>
		<li><a href="http://www.exploit-db.com">Exploit Database</a></li>
		<li><a href="https://db.risk.io/">riskDB</a></li>
		<li><a href="http://nvd.nist.gov/">the national vulnerability database</a></li>
		<li><a href="http://www.webappsec.org/">the web applications security consortium</a></li>
		<li><a href="http://www.exploit-db.com/">the exploit database</a></li>
		<li><a href="http://www.shodanhq.com/">SHODAN</a></li>
		<li><a href="http://www.metasploit.com/">the metasploit project</a></li>
		<li><a href="http://www.alienvault.com/alienvault-labs/open-threat-exchange">Alienvault</a></li>
		<li><a href="http://www.cybersquared.com/">CyberSquared</a></li>
		<li><a href="http://cps-vo.org/group/SoS">Science of Security in Cyber-Physical Systems Virtual Organization</a></li>
		<li><a href="http://pwnwiki.io/#!index.md">PwnWiki</a> (<a href="https://github.com/pwnwiki/pwnwiki.github.io">github repo of same site</a>)</li>
		<li><a href="https://pki.google.com/">Google PKI - certificates, etc.</a></li>
		</ul>
	    </p>

	  <h2>Ultimate Pen Test (summary provided by SANS):</h2>
	  <h3>Network Pen Testing</h3>
	    <p>
		<ul>
		<li><a href="http://www.kali.org/">Kali</a></li>
		<li><a href="https://github.com/gentilkiwi/mimikatz">Mimikatz - clear text password from memory tool</a></li>
		<li><a href="http://www.metasploit.com/">Metasploit</a></li>
		<li><a href="http://www.lanmaster53.com/">Recon-ng - open source recon tool</a></li>
		<li><a href="http://nmap.org/">nmap</a></li>
		<li><a href="https://www.paterva.com/">Maltego</a></li>
		<li><a href="https://www.python.org/">Python</a></li>
		<li><a href="https://www.trustedsec.com/social-engineer-toolkit/">Social Engineering Toolkit</a></li>
		<li><a href="http://www.anonymizer.com">anonymizer.com</a></li>
		<li><a href="https://www.elevenpaths.com/labstools/foca/index.html">FOCA (Fingerprinting Organizations with Collected Archives)</a></li>
		<li><a href="https://www.thc.org/thc-hydra/">THC-Hydra - remote password guessing tool</a></li>
		<li><a href="http://ettercap.github.io/ettercap/">Ettercap - ARP poisoning / MITM</a></li>
		<li><a href="http://www.oxid.it/cain.html">Cain and Able - ARP poisoning / password cracking</a></li>
		<li><a href="http://www.openwall.com/john/">John the Ripper - password cracking</a></li>
		<li><a href="http://hashcat.net/oclhashcat/">Hashcat - password recovery</a></li>
		<li><a href="https://github.com/infobyte/evilgrade">ISR-EvilGrade - intercept and hijack software updates</a></li>
		<li><a href="https://www.wireshark.org">wireshark</a></li>
		<li><a href="http://netcat.sourceforge.net/">Netcat</a></li>
		<li><a href="http://www.secdev.org/projects/scapy/">Scapy - packed crafting tool</a></li>
		</ul>
	    </p>

	  <h3>Wireless Software</h3>
	    <p>
		<ul>
		<li><a href="http://kismetwireless.net/">Kismet - passive wireless discovery</a></li>
		<li><a href="http://www.aircrack-ng.org/">Aircrack-ng - wireless tools</a></li>
		<li><a href="http://www.microsoft.com/en-ca/download/details.aspx?id=4865">Netmon - Windows network monitor tool</a></li>
		</ul>
	    </p>

	  <h3>Wireless Hardware</h3>
	    <p>
		<ul>
		<li><a href="http://store.rokland.com/products/alfa-awus051nh-802-11n-dual-band-300-mbps-wireless-n-usb-adapter">Alfa AWUS051NH v2 802.11n Dual Band 300 mbps Wireless-N USB adapter</a></li>
		<li><a href="http://www.senaindustrial.com/products/industrial_bluetooth/ud100.php">Parani SENA UD-100 Bluetooth USB Adapter</a></li>
		<li><a href="http://hakshop.myshopify.com/collections/gadgets/products/ubertooth-one?variant=82584132">Ubertooth One</a></li>
		<li><a href="http://hakshop.myshopify.com/collections/wifi-pineapple-kits">Wifi-Pineapple</a></li>
		<li><a href="http://www.amazon.com/GlobalSat-BU-353-USB-GPS-Receiver/dp/B000PKX2KA">TripNav BU-353 GPS receiver</a></li>
		<li><a href="http://www.fab-corp.com/home.php?cat=276">Antennas</a></li>
		<li><a href="http://www.digikey.com/product-search/en?x=0&y=0&lang=en&site=us&KeyWords=rzusb">ZigBee Atmel RZUSB</a></li>
		<li><a href="http://www.atmel.com/">ZigBee Atmel RZUSB manufacturer</a></li>
		<li><a href="http://rtlsdr.org/">RTLSDR - software defined radio site</a></li>
		</ul>
	    </p>

	  <h3>Mobile Software</h3>
	    <p>
		<ul>
		<li><a href="http://developer.android.com/sdk/index.html">Android Emulator and SDK</a></li>
		<li><a href="http://www.icopybot.com/plist-editor.html">Plist editor for windows</a></li>
		<li><a href="http://www.yunqa.de/delphi/doku.php/products/sqlitespy/">SQLLiteSpy</a></li>
		<li><a href="http://elcomsoft.com/eppb.html">Elcomsoft Phone Password Breaker</a></li>
		<li><a href="http://code.google.com/p/iphone-dataprotection/">iPhone Data Protection Tools</a></li>
		<li><a href="http://www.redsn0w.us">Redsn0w - all-purpose iOS jailbreaking tools for iOS 5</a></li>
		<li><a href="http://chatteronthewire.org/">Satori - passive OS LAN fingerprinting tool</a></li>
		<li><a href="https://github.com/mwrlabs/drozer">Drozer - Android sectest platform (formerly Mercury)</a></li>
		<li><a href="http://www.apple.com/support/business-education/">Apple Corporate Management docs</a></li>
		</ul>
	    </p>

	  <h3>Web App Tools</h3>
	    <p>
		<ul>
		<li><a href="http://portswigger.net/burp/">Burp Suite</a></li>
		<li><a href="http://sourceforge.net/projects/dirbuster/">DirBuster</a></li>
		<li><a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project">Zed Attack Proxy</a></li>
		<li><a href="http://sqlmap.org/">SQLMap</a></li>
		<li><a href="https://cirt.net/Nikto2">Nikto</a></li>
		<li><a href="http://sourceforge.net/projects/samurai/">SamuraiWTF - pre-built testing system</a></li>
		<li><a href="https://addons.mozilla.org/en-US/firefox/">Firefox add-ons incl HackBar, User Agent Switcher, Web Developer, Tamper Data, Firebug</a></li>
		<li><a href="http://sourceforge.net/projects/laudanum/">Laudanum - injectible web scripts</a></li>
		<li><a href="http://beefproject.com/">BeEF - Browser Exploitation Framework</a></li>
		</ul>
	    </p>

	  <h3>Exploit Development</h3>
	    <p>
		<ul>
		<li><a href="https://hex-rays.com/index.shtml">IDA disassembler and debugger</a></li>
		<li><a href="http://msdn.microsoft.com/en-us/windows/hardware/hh852365">WinDbg</a></li>
		<li><a href="http://debugger.immunityinc.com/">Immunity Debugger</a></li>
		<li><a href="https://github.com/corelan/mona">mona.py - exploit dev plugin for Immunity Debugger and WinDbg</a></li>
		<li><a href="http://www.zynamics.com/bindiff.html">BinDiff - works with IDA</a></li>
		<li><a href="https://github.com/openrce/sulley">Sulley fuzzing framework</a></li>
		<li><a href="http://www.gnu.org/software/gdb/">DDB: GNU Debugger</a></li>
		<li><a href="http://www.vmware.com/">VMWare VM</a></li>
		<li><a href="https://www.virtualbox.org/">VirtualBox</a></li>
		</ul>
	    </p>

	  <h3>Summary &amp; Collaboration Tools</h3>
	    <p>
		<ul>
		<li><a href="http://fastandeasyhacking.com/">Armitage</a></li>
		<li><a href="http://www.metasploit.com/">Metasploit</a></li>
		<li><a href="http://dradisframework.org/">Dradis Framework</a></li>
		<li><a href="http://www.gremwell.com/">MagicTree</a></li>
		</ul>
	    </p>



	  <h2>Footprinting Tools</h2>
	  <h3>Website Research Tools</h3>
	    <p>
		<ul>
		<li><a href="http://news.netcraft.com">Netcraft</a></li>
		<li><a href="http://webmaste-a.com/link-extractor-internal.php">Webmaster</a></li>
		<li><a href="http://www.iwebtool.com">iWEBTOOL</a></li>
		<li><a href="http://www.archive.org">Archive</a></li>
		</ul>
	    </p>

	  <h3>DNS and WHOIS Tools</h3>
	    <p>
		<ul>
		<li><a href="http://network-tools.com/">network-tools.com</a></li>
		<li><a href="http://network-tools.com/nslook/">NSlookup</a></li>
		<li><a href="http://www.samspade.org">Sam Spade</a></li>
		<li><a href="http://www.webferret.com">WebFerret</a></li>
		<li><a href="http://www.whois.arin.net">ARIN</a></li>
		<li><a href="http://www.domaintools.com">DomainTools</a></li>
		<li><a href="http://www.networksolutions.com">Network Solutions</a></li>
		<li><a href="http://www.jufsoft.com/whereisip/">WhereIsIP</a></li>
		<li><a href="http://www.dnsstuff.com">DNSstuff</a></li>
		<li><a href="http://www.betterwhois.com/">BetterWhois</a></li>
		<li><a href="http://dnsdigger.com">DNS-Digger</a></li>
		<li><a href="http://www.spyfu.com">SpyFu</a></li>
		<li><a href="http://www.isc.org/software/bind">Dig</a></li>
		</ul>
	    </p>

	  <h3>Traceroute Tools and Links</h3>
	    <p>
		<ul>
		<li><a href="http://www.visualware.com">VisualRoute Trace</a></li>
		<li><a href="http://http://3dnsmp.com">3d Visual Route</a></li>
		<li><a href="http://www.visualiptrace.com">VisualIPTrace</a></li>
		<li><a href="http://www.foundstone.com">Trout / McAfee Foundstone</a></li>
		<li><a href="http://pingplotter.com">PingPlotter</a></li>
		<li><a href="http://www.pathanalyzer.com">Path Analyzer Pro</a></li>
		</ul>
	    </p>

	  <h3>Website Mirroring Tools and Sites</h3>
	    <p>
		<ul>
		<li><a href="http://softbytelabs.com">BlackWidow</a></li>
		<li><a href="http://reamweaver.com">Reamweaver</a></li>
		<li><a href="http://www.gnu.net/s/wget">Wget</a></li>
		<li><a href="http://www.tenmax.com/teleport/pro/home.htm">Teleport Pro</a></li>
		<li><a href="http://www.archive.org">Archive</a></li>
		<li><a href="http://www.google.com">Google cache</a></li>
		</ul>
	    </p>

	  <h3>E-mail Tracking</h3>
	    <p>
		<ul>
		<li><a href="http://www.emailtrackerpro.com">eMailTrackerPro</a></li>
		<li><a href="http://www.politemail.com">PoliteMail</a></li>
		</ul>
	    </p>

	  <h3>Google Hacking</h3>
	    <p>
		<ul>
		<li><a href="http://www.hackersforcharity.org/ghdb/">Google Hacking Database</a></li>
		<li><a href="http://code.google.com/p/googlehacks/">Google Hacks</a></li>
		<li><a href="http://it.toolbox.com/blogs/managing-infosec/google-hacking-master-list-28302">Google Hacking Master List</a></li>
		</ul>
	    </p>

	  <h2>Scanning and Enumeration Tools</h2>
	  <h3>Ping Sweep</h3>
	    <p>
		<ul>
		<li><a href="http://www.angryip.org">Angry IP Scanner</a></li>
		<li><a href="http://colasoft.com">Colasoft Ping</a></li>
		<li><a href="http://ultraping.webs.com">Ultra Ping Pro</a></li>
		<li><a href="http://www.digilextechnologies.com">Ping Scanner Pro</a></li>
		<li><a href="http://www.magnetosoft.com">MegaPing</a></li>
		<li><a href="http://www.kilievich.com">Friendly Pinger</a></li>
		</ul>
	    </p>

	  <h3>Scanning Tools</h3>
	    <p>
		<ul>
		<li><a href="http://www.foundstone.com">SuperScan</a></li>
		<li><a href="http://nmap.org/">Nmap (ZenMap)</a></li>
		<li><a href="http://www.netscantools.com">NetScan Tools Pro</a></li>
		<li><a href="http://www.hping.org">Hping</a></li>
		<li><a href="http://www.solarwinds.com">LAN Surveyor</a></li>
		<li><a href="http://www.magnetosoft.com">MegaPing</a></li>
		<li><a href="http://www.nscan.hypermart.net">NScan</a></li>
		<li><a href="http://www.infiltration-systems.com">Infiltrator</a></li>
		<li><a href="http://netcat.sourceforge.net">Netcat</a></li>
		<li><a href="http://ntsecurity.nu">IPEye</a></li>
		<li><a href="http://www.thc.org">THC-Amap</a></li>
		</ul>
	    </p>

	  <h3>War Dialing</h3>
	    <p>
		<ul>
		<li><a href="http://www.thc.org/thc-tsng/">THC-SCAN</a></li>
		<li><a href="http://www.securelogix.com">TeleSweep</a></li>
		<li><a href="http://www.securityfocus.com/tools/48">ToneLoc</a></li>
		<li><a href="http://www.wyae.de">PAWS</a></li>
		<li><a href="http://warvox.org/">WarVOX</a></li>
		</ul>
	    </p>

	  <h3>Banner Grabbing</h3>
	    <p>
		<ul>
		<li><a href="http://en.wikipedia.org/wiki/Telnet">Telnet</a></li>
		<li><a href="http://www.grc.com">ID Serve</a></li>
		<li><a href="http://netcraft.com">Netcraft</a></li>
		<li><a href="http://sourceforge.net/apps/mediawiki/xprobe/index.php?title=Main_Page">Xprobe</a></li>
		<li><a href="http://freeworld.thc.org">THC-AMAP</a></li>
		</ul>
	    </p>

	  <h3>Vulnerability Scanning</h3>
	    <p>
		<ul>
		<li><a href="http://www.nessus.org">Nessus</a></li>
		<li><a href="http://saintcorporation.com">SAINT</a></li>
		<li><a href="http://www.gfi.com">GFI LanGuard</a></li>
		<li><a href="http://eeye.com">Retina</a></li>
		<li><a href="http://www.coresecurity.com">Core Impact</a></li>
		<li><a href="http://technet.microsoft.com">Microsoft BSA</a></li>
		<li><a href="http://cirt.net/nikto2">Nikto</a></li>
		<li><a href="http://download.spidynamics.com/webinspect/default.htm">WebInspect</a></li>
		<li><a href="http://www.gfi.com/lannetscan/">GFI Languard</a></li>
		</ul>
	    </p>

	  <h3>Proxy, Anonymizer, and Tunneling</h3>
	    <p>
		<ul>
		<li><a href="https://www.torproject.org/">Tor</a></li>
		<li><a href="http://proxychains.sourceforge.net/">ProxyChains</a></li>
		<li><a href="http://www.softcab.com/proxychain/index.php">SoftCab</a></li>
		<li><a href="http://www.proxifier.com">Proxifier</a></li>
		<li><a href="http://www.http-tunnel.com">HTTP Tunnel</a></li>
		<li><a href="http://anonymouse.org/">Anonymouse</a></li>
		<li><a href="http://anonymizer.com">Anonymizer</a></li>
		<li><a href="http://psiphon.ca">Psiphon</a></li>
		</ul>
	    </p>

	  <h3>Enumeration</h3>
	    <p>
		<ul>
		<li><a href="http://technet.microsoft.com">PSTools</a></li>
		<li><a href="http://lcamtuf.coredump.cx/p0f.shtml">P0f</a></li>
		<li><a href="http://www.foundstone.com">SuperScan c/o Foundstone</a></li>
		<li><a href="http://www.svrops.com/svrops/dwnldutil.htm">User2Sid/Sid2User</a></li>
		<li><a href="http://www.secure-bytes.com">SNMP Scanner</a></li>
		<li><a href="http://www.nsauditor.com">NSauditor</a></li>
		<li><a href="http://www.solarwinds.com">SolarWinds</a></li>
		<li><a href="http://www.ldapsoft.com">LDAP Admin</a></li>
		<li><a href="http://www.ldapexplorer.com">LEX</a></li>
		<li><a href="http://www.microsoft.com">Ldp.exe</a></li>
		<li><a href="http://windowsecurity.com">User2Sid/Sid2User</a></li>
		<li><a href="http://www.wtcs.org">SNMPUTIL</a></li>
		<li><a href="http://www.solarwinds.com">IP Network Browser</a></li>
		<li><a href="http://www.sys-security.com/index.php?page=xprobe">Xprobe</a></li>
		</ul>
	    </p>

	  <h2>System Hacking Tools</h2>
	  <h3>Password Hacking Tools</h3>
	    <p>
		<ul>
		<li><a href="http://www.oxid.it">Cain</a></li>
		<li><a href="http://www.openwall.com">John the Ripper</a></li>
		<li><a href="http://www.lcpsoft.com">LCP</a></li>
		<li><a href="http://www.thc.org/thc-hydra/">THC-Hydra</a></li>
		<li><a href="http://www.elcomsoft.com/">ElcomSoft</a></li>
		<li><a href="http://lastbit.com/">Lastbit</a></li>
		<li><a href="http://ophcrack.sourceforge.net">Ophcrack</a></li>
		<li><a href="http://www.aircrack-ng.org/">Aircrack</a></li>
		<li><a href="http://www.antsight.com/zsl/rainbowcrack/">Rainbow crack</a></li>
		<li><a href="http://www.hoobie.net/brutus/">Brutus</a></li>
		<li><a href="http://www.windowspasswordsrecovery.com">Windows Password Recovery</a></li>
		<li><a href="http://ntsecurity.nu">KerbCrack</a></li>
		</ul>
	    </p>

	  <h3>Sniffing</h3>
	    <p>
		<ul>
		<li><a href="http://www.wireshark.org/">Wireshark</a></li>
		<li><a href="http://www.effetech.com">Ace</a></li>
		<li><a href="http://ntsecurity.nu">KerbSniff</a></li>
		<li><a href="http://ettercap.sourceforge.com">Ettercap</a></li>
		</ul>
	    </p>

	  <h3>Keyloggers and Screen Capture</h3>
	    <p>
		<ul>
		<li><a href="http://www.keyprowler.com">KeyProwler</a></li>
		<li><a href="http://www.handy-keylogger.com">Handy Key Logger</a></li>
		<li><a href="http://www.actualkeylogger.com">Actual Keylogger</a></li>
		<li><a href="http://www.actualspy.com">Actual Spy</a></li>
		<li><a href="http://www.keylogger.net">Ghost</a></li>
		<li><a href="http://www.oleansoft.com">Hidden Recorder</a></li>
		<li><a href="http://www.16software.com">IcyScreen</a></li>
		<li><a href="http://www.spyarsenal.com">DesktopSpy</a></li>
		<li><a href="http://digitaldream.persiangig.com">USB Grabber</a></li>
		</ul>
	    </p>

	  <h3>Covering Tracks</h3>
	    <p>
		<ul>
		<li><a href="http://www.ibt.ku.dk">ELsave</a></li>
		<li><a href="http://www.acesoft.net">EraserPro</a></li>
		<li><a href="http://www.webroot.com">WindowWasher</a></li>
		<li><a href="http://www.microsoft.com">Auditpol</a></li>
		<li><a href="http://www.ntsecurity.nu">WinZapper</a></li>
		<li><a href="http://www.evidence-eliminator.com">Evidence Eliminator</a></li>
		</ul>
	    </p>

	  <h3>Packet Crafting/Spoofing</h3>
	    <p>
		<ul>
		<li><a href="http://www.komodia.com">Komodia</a></li>
		<li><a href="http://www.hping.org/">Hping2</a></li>
		<li><a href="http://sourceforge.net">PackEth</a></li>
		<li><a href="http://sourceforge.net">Packet generator</a></li>
		<li><a href="http://softperfect.com">Netscan</a></li>
		<li><a href="http://www.secdev.org/projects/scapy/">Scapy</a></li>
		<li><a href="http://nemesis.sourceforge.net">Nemesis</a></li>
		</ul>
	    </p>

	  <h3>Session Hijacking</h3>
	    <p>
		<ul>
		<li><a href="http://www.parosproxy.org/">Paros Proxy</a></li>
		<li><a href="http://portswigger.net">Burp Suite</a></li>
		<li><a href="http://codebutler.github.com/firesheep">Firesheep</a></li>
		<li><a href="http://erratasec.blogspot.com/2009/03/hamster-20-and-ferret-20.html">Hamster/Ferret</a></li>
		<li><a href="http://ettercap.sourceforge.net">Ettercap</a></li>
		<li><a href="http://packetstormsecurity.com">Hunt</a></li>
		</ul>
	    </p>

	  <h2>Cryptography and Encryption</h2>
	  <h3>Encryption Tools</h3>
	    <p>
		<ul>
		<li><a href="http://www.truecrypt.org">TrueCrypt</a></li>
		<li><a href="http://microsoft.com">BitLocker</a></li>
		<li><a href="http://www.securstar.com">DriveCrypt</a></li>
		</ul>
	    </p>

	  <h3>Hash Tools</h3>
	    <p>
		<ul>
		<li><a href="http://www.digitalvolcano.co.uk/content/md5-hash">MD5 Hash</a></li>
		<li><a href="http://nirsoft.net">HashCalc</a></li>
		</ul>
	    </p>

	  <h3>Steganography</h3>
	    <p>
		<ul>
		<li><a href="http://www.dancemammal.com">ImageHide</a></li>
		<li><a href="http://www.darkside.com.au">gifShuffle</a></li>
		<li><a href="http://www.quickcrypto.com">QuickStego</a></li>
		<li><a href="http://www.stego.com">EZStego</a></li>
		<li><a href="http://openstego.sourceforge.net/">Open Stego</a></li>
		<li><a href="http://spychecker.com">S Tools</a></li>
		<li><a href="http://nixbit.com">JPHIDE</a></li>
		<li><a href="http://home.tele2.at/wbailer/wbstego/">wbStego</a></li>
		<li><a href="http://sourceforge.net">MP3Stegz</a></li>
		<li><a href="http://www.securekit.net">OurSecret</a></li>
		<li><a href="http://omnihide.com">OmniHidePro</a></li>
		<li><a href="http://www.mathworks.com">AudioStega</a></li>
		<li><a href="http://steghide.sourceforge.net">StegHide</a></li>
		<li><a href="http://www.xptools.net">XPTools</a></li>
		</ul>
	    </p>

	  <h3>Cryptanalysis</h3>
	    <p>
		<ul>
		<li><a href="http://cryptanalysisto.sourceforge.net">Cryptanalysis</a></li>
		<li><a href="http://addario.org">Cryptobench</a></li>
		<li><a href="http://evercrack.sourceforge.net">EverCrack</a></li>
		</ul>
	    </p>

	  <h2>Sniffing</h2>
	  <h3>Packet Capture</h3>
	    <p>
		<ul>
		<li><a href="http://wireshark.org">Wireshark</a></li>
		<li><a href="http://www.cacetech.com">CACE</a></li>
		<li><a href="http://tcpdump.org">tcpdump</a></li>
		<li><a href="http://www.colasoft.com">Capsa</a></li>
		<li><a href="http://www.wildpackets.com">OmniPeek</a></li>
		<li><a href="http://www.netwitness.com">NetWitness</a></li>
		<li><a href="http://www.winpcap.org">Windump</a></li>
		<li><a href="http://monkey.org">dsniff</a></li>
		<li><a href="http://etherape.sourceforge.net">EtherApe</a></li>
		</ul>
	    </p>

	  <h3>Wireless</h3>
	    <p>
		<ul>
		<li><a href="http://www.kismetwireless.net">Kismet</a></li>
		<li><a href="http://www.netstumbler.net">NetStumbler</a></li>
		</ul>
	    </p>

	  <h3>MAC Flooding/Spoofing</h3>
	    <p>
		<ul>
		<li><a href="http://www.irongeek.com/i.php?page=backtrack-3-man/macof">Macof (Linux tool)</a></li>
		<li><a href="http://www.klcconsulting.net">SMAC</a></li>
		</ul>
	    </p>

	  <h3>ARP Poisoning</h3>
	    <p>
		<ul>
		<li><a href="http://www.oxid.it">Cain</a></li>
		<li><a href="http://ufasoft.com">UfaSoft</a></li>
		<li><a href="http:www.xfocus.net">WinARP Attacker</a></li>
		</ul>
	    </p>

	  <h2>Trojans and Malware</h2>
	  <h3>Wrappers</h3>
	    <p>
		<ul>
		<li><a href="http://homepage.ntlworld.com/chawmp/elitewrap">EliteWrap</a></li>
		</ul>
	    </p>

	  <h3>Monitoring Tools</h3>
	    <p>
		<ul>
		<li><a href="http://free.antivirus.com">HiJackThis</a></li>
		<li><a href="http://www.whatsrunning.net">What’s Running</a></li>
		<li><a href="http://www.nirsoft.net">CurrPorts</a></li>
		<li><a href="http://labs.idefense.com/software/malcode.php">SysAnalyzer</a></li>
		<li><a href="http://sourceforge.net/projects/regshot">Regshot</a></li>
		<li><a href="http://www.driveshq.com">Driver Detective</a></li>
		<li><a href="http://tools.sysprogs.org">SvrMan</a></li>
		<li><a href="http://processhacker.sourceforge.net">ProcessHacker</a></li>
		<li><a href="www.mcafee.com/us/downloads/free-tools/fport.aspx">Fport</a></li>
		</ul>
	    </p>

	  <h3>Attack Tools</h3>
	    <p>
		<ul>
		<li><a href="http://netcat.sourceforge.net">Netcat</a></li>
		<li><a href="http://nemesis.sourceforge.net">Nemesis</a></li>
		</ul>
	    </p>

	  <h3>IDS</h3>
	    <p>
		<ul>
		<li><a href="http://www.snort.org">Snort</a></li>
		</ul>
	    </p>

	  <h3>Evasion Tools</h3>
	    <p>
		<ul>
		<li><a href="http://www.ktwo.ca">ADMutate</a></li>
		<li><a href="http://PacketStormsecurity.org/UNIX/IDS/nidsbench/">NIDSBench</a></li>
		<li><a href="http://www.net-security.org">IDSInformer</a></li>
		<li><a href="http://inundator.sourceforge.net">Inundator</a></li>
		</ul>
	    </p>

	  <h3>Wireless</h3>
	    <p>
		<ul>
		<li><a href="http://wigle.net">WIGLE</a></li>
		<li><a href="http://www.cacetech.com">AirPcap</a></li>
		<li><a href="http://madwifi-project.org">Madwifi</a></li>
		<li><a href="http://www.kismetwireless.net">Kismet</a></li>
		<li><a href="http://www.netstumbler.com">NetStumbler</a></li>
		<li><a href="http://airmagnet.com">AirMagnet WiFi Analyzer</a></li>
		<li><a href="http://Wirelessdefence.org/Contents/Aircrack_airodump.htm">Airodump</a></li>
		<li><a href="http://www.Aircrack-ng.org">Aircrack</a></li></li>
		<li><a href="http://airsnort.shmoo.com/">AirSnort</a></li>
		<li><a href="http://www.BluejackingTools.com">BT Browser</a></li>
		<li><a href="http://sourceforge.net/projects/bluescanner/">BlueScanner</a></li>
		<li><a href="http://bluediving.sourceforge.net">Bluediving</a></li>
		<li><a href="http://www.brothersoft.com">SuperBlueTooth Hack</a></li>
		<li><a href="http://kismac.de/">KisMAC</a></li>
		<li><a href="http://performancewifi.net">NetSurveyor</a></li>
		<li><a href="http://www.metageek.net">inSSIDer</a></li>
		<li><a href="http://cacetech.com">WiFi Pilot</a></li>
		<li><a href="http://wildpackets.com">OmniPeek</a></li>
		</ul>
	    </p>

	  <h3>Web Attacks</h3>
	    <p>
		<ul>
		<li><a href="http://microsoft.com">Wfetch</a></li>
		<li><a href="http://www.computec.ch">Httprecon</a></li>
		<li><a href="http://www.grc.com">ID Serve</a></li>
		<li><a href="http://sandsprite.com">WebSleuth</a></li>
		<li><a href="http://softbytelabs.com">BlackWidow</a></li>
		<li><a href="http://curl.haxx.se">cURL</a></li>
		<li><a href="http://www.foundstone.com">CookieDigger</a></li>
		<li><a href="http://owasp.org">WebScarab</a></li>
		<li><a href="http://nstalker.com">Nstalker</a></li>
		<li><a href="http://www.rawlogic.com">NetBrute</a></li>
		</ul>
	    </p>

	  <h3>SQL Injection</h3>
	    <p>
		<ul>
		<li><a href="http://labs.portcullis.co.uk">BSQL Hacker</a></li>
		<li><a href="http://marathontool.codeplex.com">Marathon</a></li>
		<li><a href="http://itsecteam.com">Havil</a></li>
		<li><a href="http://code.google.com">SQL Injection Brute</a></li>
		<li><a href="http://gdssecurity.com">SQL Brute</a></li>
		<li><a href="http://sqlninja.sourceforge.net">SQLNinja</a></li>
		<li><a href="http://darknet.org.uk">SQLGET</a></li>
		</ul>
	    </p>

	  <h2>Miscellaneous</h2>
	  <h3>Pen Test Suites</h3>
	    <p>
		<ul>
		<li><a href="http://www.coresecurity.com">Core Impact</a></li>
		<li><a href="http://immunitysec.com">CANVAS</a></li>
		<li><a href="http://www.metasploit.org">Metasploit</a></li>
		<li><a href="http://www.fastandeasyhacking.com">Armitage</a></li>
		<li><a href="http://codenomicon.com">Codenomicon</a></li>
		<li><a href="http://computer-forensics.sans.org/community/downloads#login">SANS SIFT Kit (SANS Investigative Forensics Toolkit)</a></li>
		<li><a href="http://www.kali.org/">Kali</a></li>
		<li><a href="http://www.alienvault.com/">Alien Vault’s OSSIM</a> consists of the following:</li>
		<ul>
		<li>Server/Framework:</li>
			<ul>
			<li>Nagios</li>
			<li>OCSInventory</li>
			<li>NFSen</li>
			<li>Ntop (interface)</li>
			</ul>
		<li>Sensors:</li>
			<ul>
			<li>Snort</li>
			<li>Nfcap/Fprobe</li>
			<li>P0f</li>
			<li>Pads</li>
			<li>Arpwatch</li>
			<li>Ntop</li>
			<li>Nmap</li>
			<li>OpenVAS</li>
			<li>OSSEC</li>
			<li>Kismet</li>
			</ul>
		</ul>
		</ul>
	    </p>

	  <h3>Extras</h3>
	    <p>
		<ul>
		<li><a href="http://www.microsoft.com/technet/sysinternals/default.mspx">SysInternals</a></li>
		<li><a href="http://www.tripwire.com/">Tripwire</a></li>
		</ul>
	    </p>

	  <h3>Linux Distributions</h3>
	    <p>
		<ul>
		<li><a href="http://distrowatch.com">Distrowatch</a></li>
		<li><a href="http://www.remote-exploit.org/index.php/BackTrack">BackTrack</a></li>
		</ul>
	    </p>

	  <h3>Sources for the above list include:</h3>
	    <p>
		<ul>
		<li><a href="http://www.google.com/about/appsecurity/">Google App Security</a></li>
		<li>CEH Certified Ethical Hacker All-in-One Exam Guide</li>
		<li><a href="https://www.risk.io/">Risk.io</a></li>
		</ul>
	    </p>