|  |  |  |  |  |  | 

Cracking Tools Cyber Forensics Ethical Hacking and Pentesting Hacking Tools Operating System Security Windows

Ethical Hackers Penetration Testing Scanners and Platforms

img-responsive

There are hundreds of tools around that widely used for hacking and penetration testing. Many of them cloning the other one, so you’ll find here major ones. It will updated regularly

Metasploit

This top hacking tool package of 2017 lets you simulate real-world attacks to tell you about the weak points and finds them. As a penetration tester, it pin points the vulnerabilities with Nexpose closed–loop integration using Top Remediation reports. Using the open source Metasploit framework, users can build their own tools and take the best out of this multi-purpose hacking tool.

Supported platforms and download:

Metasploit is available for all major platforms including Windows, Linux, and OS X.

Download link.

Acunetix WVS

Acunetix is a web vulnerability scanner (WVS) that scans and finds out the flaws in a website that could prove fatal. This multi-threaded tool crawls a website and finds out malicious Cross-site Scripting, SQL injection, and other vulnerabilities. This fast and easy to use tool scans WordPress websites from more than 1200 vulnerabilities in WordPress.

cunetix comes with a Login Sequence Recorder that allows one to access the password protected areas of websites. The new AcuSensor technology used in this tool allows you to reduce the false positive rate. Such features have made Acunetix WVS a preferred hacking tools that you need to check out in 2017.

Supported platforms and download:

Acunetix is available for Windows XP and higher.

Download link.

Nmap/ZenMap

Nmap – also known as Network Mapper – falls in the category of a port scanner tool. This free and open source hacking tool is the most popular port scanning tool around that allows efficient network discovery and security auditing. Used for a wide range of services, Nmap uses raw IP packets to determine the hosts available on a network, their services along with details, operating systems used by hosts, the type of firewall used, and other information.

Last year, Nmap won multiple security products of the year awards and was featured in multiple movies including The Matrix Reloaded, Die Hard 4, and others.  Available in the command line, Nmap executable also comes in an advanced GUI avatar.

Supported platforms and download:

Nmap is available for all major platforms including Windows, Linux, and OS X.

Download link.

Wireshark/TShark/Ethereal

Wireshark is a well-known packet crafting tool that discovers vulnerability within a network and probes firewall rule-sets. Used by thousands of security professionals to analyze networks and live pocket capturing and deep scanning of hundreds of protocols. Wireshark helps you to read live data from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others.

Supported platforms and download:

This GTK+-based network protocol analyzer runs with ease on Linux, Windows, and OS X.

Download link.

Tenable Nessus Vulnerability Scanner

This top free security tool of 2017 works with the help of a client-server framework. Developed by Tenable Network Security, the tool is one of the most popular vulnerability scanners we have. Nessus serves different purposes to different types of users – Nessus Home, Nessus Professional, Nessus Manager and Nessus Cloud.

Using Nessus, one can scan multiple types of vulnerabilities that include remote access flaw detection, misconfiguration alert, denial of services against TCP/IP stack, preparation of PCI DSS audits, malware detection, sensitive data searches etc. To launch a dictionary attack, Nessus can also call a popular tool Hydra externally.

Apart from the above mentioned basic functionalities, Nessus could be used to scan multiple networks on IPv4, IPv6, and hybrid networks. You can set scheduled scan to run at your chosen time and re-scan all or a subsection of previously scanned hosts using selective host re-scanning.

Supported platforms and download:

Nessus is supported by a variety of platforms including Windows 7 and 8, Mac OS X, and popular Linux distros like Debian, Ubuntu, Kali Linux etc.

Download link

Maltego

Maltego is a great hacker tool that analyzes the real world links between people, companies, websites, domains, DNS names, IP addresses, documents and whatnot. Based on Java, this tool runs in an easy-to-use graphical interface with lost customization options while scanning.

Supported platforms and download:

Maltego security tool is available for Windows, Mac, and Linux.

Download link

Social-Engineer Toolkit

This Python-driven tool is the standard tool for social engineering penetration tests with more than two million downloads. It automates the attacks and generates disguising emails, malicious web pages and more.

Supported platforms and download:

To download SET on Linux, type the following command:

Apart from Linux, Social-Engineer Toolkit is partially supported on Mac OS X and Windows.

Netsparker

Netsparker is a popular web application scanner that finds flaws like SQL injection and local file induction, suggesting remedial actions in a read-only and safe way. As this hacking tool produces a produces a proof of exploitation, you don’t need to verify the vulnerability on your own. Just in case it can’t verify a flaw automatically, it’ll alert you. This hacking tool is very easy to get started with. Simply enter the URL and let it perform a scan. Netsparker supports JavaScript and AJAX-based applications. So, you don’t need to configure the scanner or rely on some complex scanning settings to scan different types of web applications.

Supported platforms and download:

Netsparker web app scanner is available for Windows

Download link

w3af

w3af comes both in command line and graphical user interface to suit the needs of a hacker. In less than 5 clicks and using the predefined profile for the beginners, one can audit the security of a web application. As it’s well documented, the new users can easily find their way. Being an open source hacking tool, an experienced developer can play with the code, add new features, and create something new.

Supported platforms and download:

w3af is available for Linux, BSD, and OS X. On Windows, its older versions are supported.

Download link

ethical-hackers-penetration-testing-scanners-and-platforms

ABOUT THE AUTHOR

Application Security , Information and Software Security Specialist Ethical Hacker and Pentester

POST YOUR COMMENTS