netsniff-ng v0.5.8-rc0

netsniff-ng is a free, performant Linux network analyzer and networking toolkit. If you will the Swiss army knife for network packets The gain of performance is reached by built-in zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space, and vice versa.

Download

JHijackv.02 beta -A simple Java Fuzzer

JHijackv.02 beta

Description: A simple Java Fuzzer mainly used for numeric session hijacking and parameter enumeration.

Requirement: JRE/JDK 1.4 or above

Demonstrations:    Session Hijacking      BlindSQLInjection      HTTP Form Brute Forcing

Documentation: aldeid.com 

 

Source and Download

 

Virtual Hacking Lab

Virtual Hacking Lab

A mirror of deliberately insecure applications and old softwares with known vulnerabilities. Used for proof-of-concept /security training/learning purposes. Available in either virtual images or live iso or standalone formats.

Virtual Hacking Lab Web Site

Source and download

guide

Learn Ethical Hacking :)

OWASP Security Shepherd - Learn Ethical Hacking

OWASP Security Shepherd - Learn Ethical Hacking

Security Shepherd is a security aware in depth project. Designed with the aim of fostering security awareness among a varied skill-set demographic. This project enables users to learn or to improve upon existing manual penetration testing skills.

How to

Download - Google code

Download _ Sourceforge

Hcon Security Testing Framework

HconSTF is Open Source Penetration Testing Framework based on different browser technologies, Which helps any security professional to assists in the Penetration testing or vulnerability scanning assessments.contains webtools which are powerful in doing xss(cross site scripting), Sql injection, siXSS, CSRF, Trace XSS, RFI, LFI, etc. Even useful to anybody interested in information security domain - students, Security Professionals,web developers, manual vulnerability assessments and much more.

Source and download

Open Source Admin Tools

Adminer (formerly phpMinAdmin)

Adminer (formerly phpMinAdmin) is a full-featured database management tool written in PHP. Conversely to phpMyAdmin, it consist of a single file ready to deploy to the target server. Adminer is available for MySQL, PostgreSQL, SQLite, MS SQL and Oracl

PhpSysInfo

PhpSysInfo: a customizable PHP script that displays information about your system nicely

Swiss File Knife - A Command Line Tools Collection

combines many functions in a single, portable executable that belongs onto every USB stick. Search and convert text files, instant simple FTP/HTTP server, find duplicate files, compare folders, treesize, run own commands on all files of a folder - it's all within a single tool. Download from sourceforge. This package contains binaries and source code for Windows (7/Vista/XP), Linux and Mac. You may also download just the Windows executable sfk.exeor the Linux binary for Ubuntu or DSL. No installation, no registry changes, instant use.

A tcpdump Tutorial and Primer

A tcpdump Tutorial and Primerer

Image from securitywizardry.com

Read more

credit and source 

Web Exploitation Engine 0.1 - tool

Web Exploitation Engine 0.1 - tool


This is a simple utility for exploiting command injection vulnerabilities in web applications. Supports POST and GET requests. Can deliver an "inline shell" or a (python) reverse shell.

download and source

Awesome Duplicate Photo Finderv1.1

Awesome Duplicate Photo Finderv1.1

Awesome Duplicate Photo Finder is a powerful tool that helps you to find and remove duplicate photos or similar pictures on your PC. It is able to compare pictures that were resized or with corrected colors (e.g. contrast modified, black and white photos, etc.)

Download

HOWTO : SQLi Lab Series

HOWTO : SQLi Lab Series

The following is the SQLi Lab, which is created by Audi-1 who is an Offensive Security Certified Expert (OSCE). He explains how SQLi works.

SQLi Lab Series - Introduction

SQLi Lab Series - Error Based

SQLi Lab Series - Double Query / SubQuery

SQLi Lab Series - Blind Injection - Boolean Based

SQLi Lab Series - Blind Injection - Time Based

SQLi Lab Series - Using Outfile / Dumpfile

SQLi Lab Series - Post Based

SQLi Lab Series - Double Query

SQLi Lab Series - Update Query

SQLi Lab Series - Insert Query / Headers

SQLi Lab Series - Cookie Based

Second Order Injection

The whole series of the video of SQLi Lab Series

Source

Top 5 sites to create Resume Online

Top 5 sites to create Resume Online

http://www.myresumeonline.org/start/

http://cvmkr.com/

http://resumizer.com/free_resume_creator.htm

http://www.jobspice.com/home

http://resumecompanion.com/

_Saba

Anonymous-DoS

 protonanon

an anonymous dedicated http flood program

Description

What is Anonymous-DoS?
Anonymous-DoS is a http flood program written in hta and javascript, designed
to be lightweight, portable, possible to be uploaded to websites whilst still
having a client version, and made for Anonymous ddos attacks.

How does it work?
It will flood a chosen web server with HTTP connections, with enough it will
crash the server, resulting in a denial of service.

Source and Download

Java LOIC Beta

Java LOIC

 Beta

 acruxaldebaran

Network stress testing application.

Description

JavaLOIC is a clone of LOIC written entirely in java.

This project is not related with Praetox.

Source & Download

LastActivityView is a tool for Windows

LastActivityView is a tool for Windows operating system that collects information from various sources on a running system, and displays a log of actions made by the user and events occurred on this computer.

Source and Download

ESSPEE - Penetration Testing & Forensics

ESSPEE - Penetration Testing & Forensics

ESSPEE is a derivetive of Back | Track 5, based on Ubuntu 12.04. Designed for users who wish to use only free software. It is packed with featured security tools with stable configurations. This version consolidates the Unity desktop interface; a brand new way to find and manage your applications.

Thanks to Back Track, Blackbuntu, CAINE and DEFT for inspiration.

Being a sole developer to this distro, I wish it could help Open Source community with a better interface for Penetration testing and Forensics. I really enjoyed my work for last six months.

Please let me know about bugs and if possible provide solution also.

So finally, "This is the season of roses and wine, this moment is yours....Just live it up !!!"

Thanks again.

ESSPEE - Penetration Testing & Forensics Web Site

Top 125 Network Security Tools

Top 125 Network Security Tools

We're very impressed by the collective smarts of the security community and we highly recommend reading the whole list and investigating any tools you are unfamiliar with. Click any tool name for more details on that particular application, including the chance to read (and write) reviews. Many site elements are explained by tool tips if you hover your mouse over them. Enjoy!

http://sectools.org/

Document Hub

Document Hub. interesting site.

http://dochub.io

Upload your files anonymously and free on AnonFiles.com

Upload your files anonymously and free on AnonFiles.com.

https://anonfiles.com/


Upload your files anonymously and free on AnonFiles.com.
We offer you hotlinking, 500 MB filesize limit and unlimited bandwidth.
AnonFiles.com is your number one Anonymous File Upload site.

-Saba

ESSPEE - Penetration Testing & Forensics

ESSPEE - Penetration Testing & Forensics

ESSPEE is a derivetive of Back | Track 5, based on Ubuntu 12.04. Designed for users who wish to use only free software. It is packed with featured security tools with stable configurations. This version consolidates the Unity desktop interface; a brand new way to find and manage your applications.

Thanks to Back Track and Blackbuntu for inspiration.

Being a sole developer to this distro, I wish it could help Open Source community with a better interface for Penetration testing and Forensics. I really enjoyed my work for last six months.

Please let me know about bugs and if possible provide solution also.

So finally, "This is the season of roses and wine, this moment is yours....Just live it up !!!"

Features

• A Perfect Forensics Mode - Read-Only Mount
• A Perfect Stealth Mode - Networking Disabled
• Net Activity Viewer - GUI for All Network Connection
• Ruby 1.9.3 - The Latest Available Ruby
• Python 3 +
• Padding Orale Exploit Tool
• Kvirustotal Online Scanning - Scan Suspicious File with File Manager
• Gnome Pie - Press Ctrl+Alt+E and See The Magic
• Babel Enterprise - ISO 27001 Implementation
• Meld - View and Edit the Difference between Two Files or Folders
• MySQL Workbench - MySQL GUI Administration Tool
• OSSEC - System Integrity Monitor
• Linux Kernel 3.4.5-esspee (1000 Hz) Multicore Special
• VMware Player 4.0.4
• Libreoffice 3 with all Plugins
• Penguin Pills - GUI for Multi-Antivirus Products
• Wine QT - A Brand New Interface for Wine Software Managemnet
• FSlint - Duplicate File Finder
• DocFetcher Text Search - Search Words within The Documents
• Tor Browser - Be Anonymous
• Ophcrack GUI

 




Source and Credit

Subterfuge Project -Automated Man-in-the-Middle Attack Framework

subterfuge Automated Man-in-the-Middle Attack Framework

Source and Credit

How to video (Youtbe)

subterfuge Automated Man-in-the-Middle Attack Framework

Project HomeDownloadsWikiIssuesSource

Search    Search within:     All wiki pages   Featured pages   Current pages       My starred pages     Deprecated pages     for

Screenshots Updated May 29, 2012 by topher.s...@gmail.com Screenshots Credential Harvesting: Network View Module: Settings Page: Module Selection Page: Code Injection Example: