Researcher Resources - Tools

Starter Zone
22

Updated, thanks @Nahamsec. Sorry for the delay in getting that added :smile:

23

This is pretty useful (sqlmap is awesome and this plugin saves time imo):

24

I have a plethora of tools i can link and talk about, maybe a tools subforum would be appropriate instead of s thread?

1 Like
25

Yeah, that may be something that we do eventually as the forum grows and this thread grows along with it. In these early stages of the forumā€™s launch Iā€™d like to keep things relatively consolidated and then spread out as the need arises.

For now, please feel free to start new threads discussing particular tools and sets of tools. You can use the ā€œSecurity Researchā€ category for those threads. Then from those threads we can start consolidating lists and pull them into this master thread :smile:

26

I highly recommend people use the latest scans.io data to find additional hosts that may be in scope for those *.target.com targets!

4 Likes
27

This + grep is your friend.

1 Like
28

Thanks @jstnkndy! Just added Scans.io :slight_smile:

1 Like
29

Iā€™ll toss in R & (when your data gets HUGE) Spark as some ā€œout of the boxā€ thinking when it comes to ā€œtoolsā€. Donā€™t get me wrong, I :heart: a great deal of the infosec-specific ones listed, but we also need more statistical analysis & better visuals coming out of our space. There are many, many packages in R that can help in the infosec domain. We post alot on dds.ec and talk abt them quite a bit on the twitterz.

Also, donā€™t forget PhantomJS (unless I missed seeing it in the lists above) [canā€™t post a third link, too n00b here].

1 Like
30

Great, thanks @hrbrmstr! I just added those to the list. I also bumped up your user privs :smile:

31

As demonstrated at Shmoocon this year, httpscreenshot is a fantastic tool to quickly and visually identify targets.

1 Like
32

Great add! httpscreenshot is awesome :slight_smile: Thanks @jstnkndy

1 Like
33

99% built by @breenmachine, just sayinā€™

1 Like
34

Hi All,

I am not an expert for web app security but trying to improve my skills on web security. These days i am focusing on burpsuite.I am a beginner for burpsuite and i know its a very good tool but requires lot of tuning.It will be highly appreciable if someone can guide me for burpsuite. plz reach me at fuzzsqlb0f@gmail.com

Thanks

35

At the office this morning we had a micro-ctf, two challenges required de-obsfucating javascript. Many used http://jsbeautifier.org/ and https://hackvertor.co.uk/public =)

3 Likes
36

iOS App Security Assessment Tool : idb
http://www.idbtool.com/
Comprehensive security and attack framework for Android : drozer
https://labs.mwrinfosecurity.com/tools/drozer/

3 Likes
37

hello everyone
I have a question ā€¦
what configuration do you have on Brup ? something to enable/disable or default setting ?
what it is the best config of Brup so go smoothly?

and what kind version do u use !!
I use 1.6.0387 pro version and it seems to go slow ā€¦and crash and now i use something like 1.6.027

thank you

38

Itā€™s great and awesome knowledgeable contentā€¦

39

Thanks for all that amazing tools! and special thanks to the bug crowd team

Hereā€¦ My open redirect scannerā€¦ works like a charmā€¦

https://github.com/ak1t4/open-redirect-scanner

regards!

@ak1t4

1 Like
40

You should add pen test box. (http://pentestbox.org)

41

Thank u for the post. Itā€™ll be useful for newbies like me.