Aujas Networks Pvt Ltd, Bangalore

Details of the IT Security Audit Tools

Freeware Tools

  1. NMAP - Port Scanning.
  2. Super Scan - Port Scanning
  3. Netcat - Network Utility.
  4. Telnet Client - Network Utility.
  5. Putty - Network Utility
  6. SNMPWalk - SNMP Scanner
  7. User2SID & SID2User - Look up Windows service identifiers.
  8. John The Ripper - Unix and NT password Cracker
  9. WireShark - Wireshark is a network protocol analyzer for Unix and Windows.
  10. Snort - A free lightweight network intrusion detection system for UNIX and Windows.
  11. MetaSpoilt - Exploitation Framework
  12. Backtrack Live CD - Exploitation framework.
  13. Nikto - Network Vulnerability Scanner.
  14. BlackWidow - Website Profiling Tool.
  15. Wget - Network Utility
  16. Paros - HTTP Interceptor.
  17. Burp Suite - HTTP Interceptor.
  18. Brutus - Brute Force Password Attack
  19. WFetch - HTTP Raw Methods Debugging
  20. AnEc Cookie Editor (Firefox Plug-in) - Cookie Editor
  21. Netstumbler - Detection of Wireless LANs
  22. Kismet - 802.11 wireless network detector, sniffer, and intrusion detection system.
  23. MYSQL Administration Tool - MYSQL Administration.
  24. GoCR Decoder - OCR reader.

Commercial Tools

  1. Acunetix - Web Vulnerability Scanning Tool.
  2. CodeSecure – Code Review Tool
  3. Nessus – Network Vulnerability Scanner

Proprietary Tools

  1. PHP Security Audit Script : This script checks for insecure web configurations.