Faraday v1.0.7 - Integrated Penetration-Test Environment a multiuser Penetration test IDE

Faraday introduces a new concept (IPE) Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit.

The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Designed for simplicity, users should notice no difference between their own terminal application and the one included in Faraday. Developed with a specialized set of functionalities that help users improve their own work. Do you remember yourself programming without an IDE? Well, Faraday does the same as an IDE does for you when programming, but from the perspective of a penetration test.

Changes made to the UX/UI:

• Improved Vulnerability Edition usability, selecting a vulnerability will load it's content automatically.
• ZSH UI now is showing notifications.
• ZSH UI displays active workspaces.
• Faraday now asks confirmation when exiting out. If you have pending conflicts to resolve it will show the number for each one.
• Vulnerability creation is now supported in the status report.
• Introducing SSLCheck, a tool for verifying bugs in SSL/TLS Certificates on remote hosts. This is integrated with Faraday as a plugin.
• Shodan Plugin is now working with the new API.
• Some cosmetic changes for the status report.

Bugfixes:

• Sorting columns in the Status Report is running smoothly.
• The Workspace icon is now based on the type of workspace being used.
• Opening the reports in QT UI opens the active workspace.
• UI Web dates fixes, we were showing dates with a off-by-one error.
• Vulnerability edition was missing 'critical' severity.
• Objects merge bugfixing
• Metadata recursive save fix

Download Faraday

Read More

[TestingWhiz] Test Automation Tool

TestingWhiz™ is an easy, intuitive and affordable solution based on a robust FAST® automation engine. It uses effortless and intelligent recording techniques like keyword-driven testing, data driven testing, Excel inputs, object recorder and Java scripting to offer powerful test automation solutions like automated regression testing, cross browser testing, image comparison and language translation.

TestingWhiz easily automates the testing of your web applications on multiple browsers. Record the test case just once and play it back in any browser. TestingWhiz saves your time in doing manual testing for new browser versions. Supported browsers: Internet Explorer, Mozilla Firefox, Google Chrome, Safari and Opera.

System Requirements
Operating System : Windows XP/ Windows Vista/ Windows 7/ Windows 8
Processor : Intel Pentium 4 or later
RAM : 1 GB (2 GB Recommended)
Free Disk Space : 300 MB
Java Version : JRE 6 or later

Browser Support
Internet Explorer: Version 7, 8, 9 and l0
Mozilla Firefox: Version 3.6 to version 20
Google Chrome: Version 19 to version 29
Apple Safari: Version 5.x
Opera: Version 12.x

Download TestingWhiz

Read More

[Faraday] Penetration Test IDE

Faraday introduces a new concept (IPE) Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Features:

* +40 Plugins (Metasploit, Amap, Arachini, Dnsenum, Medusa, Nmap, Nessus, w3af, Zap and More!)

* Collaborative support 

* Information Highlighting 

* Knowledge Filtering 

* Information Dashboard 

* Conflict Detection 

* Support for multiple Workspaces 

* IntelliSense Support 

* Easy Plugin Development 

* XMLRPC, XML and Regex Parsers

Download Faraday

Read More

[Evil Foca] IPv4 and IPv6 Penetration testing tool

Evil Foca is a tool for Pentesters and Security Auditors to perform security testing in IPv4/ IPv6 data networks.

• The tool is capable to do different attacks such as:
• MITM on IPv4 networks using ARP Spoofing and DHCP ACK injection.
• MITM on IPv6 networks using Neighbor Advertisement Spoofing, SLAAC Attack, fake DHCPv6.
• DoS (Denial of Service) on IPv4 networks using ARP Spoofing.
• DoS (Denial of Service) on IPv6 networks using SLAAC Attack.
• DNS Hijacking. 

Download Evil Foca

Read More

[sb0x] Caja de herramientas para pruebas de penetración

Ruquirment Sistema: para ejecutar sb0x necesita instalar Python 2.7.x

Características Herramientas:

1. WordPress fuerza bruta
2. Escáner servidor
3. Web de administración buscador
4. FTP fuerza bruta del servidor
5. Perl bind shell
6. DSL fuerza bruta enrutador
7. NETGEAR fuerza bruta Router
8. MS12-020 de Windows RDP Dos explotar

Descargar sb0x

Read More

[Kvasir] Tools for effective data management during a Penetration Test

Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test.

Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of actual and potential vulnerabilitites to review. Port scanners can return thousands of ports for just a few hosts. How easy is it to share all this data with your co-workers?

That's what Kvasir is here to help you with. Here's what you'll need to get started:

•     The latest version of web2py (http://www.web2py.com/)
•     A database (PostgreSQL known to work)
•     A network vulnerability scanner (Nexpose/Nmap supported)
•     Additional python libraries

Kvasir is a web2py application and can be installed for each customer or task. This design keeps data separated and from you accidentally attacking or reviewing other customers.

This tool was developed primarily for the Cisco Systems Advanced Services Security Posture Assessment (SPA) team. While not every method used by the SPA team may directly relate we hope that this tool is something that can be molded and adapted to fit almost any working scenario.

Download Kvasir

Read More