Home

SpyHat Favorites Network Security Tools

A simple Unix utility which reads and writes data across network connections, using TCP or UDP protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts.

Nmap ("Network Mapper") is a free open source utility for network exploration or security auditing

A connect-based TCP port scanner, pinger and hostname resolver.

hping2 assembles and sends custom ICMP/UDP/TCP packets and displays any replies. It was inspired by the ping command, but offers far more control over the probes sent.

Retina is designed to scan any machine on an internet, intranet, or extranet network in order to identify existing vulnerabilities and check adherence of established security policies. Retina provides help on fixing identified vulnerabilities, and produces a comprehensive report of each scan.

Retina WiFi Scanner is a comprehensive wireless detection tool that incorporates Retina Network Security Scanner technology to discover all active wireless devices and connections on a company network.

The premier Open Source vulnerability assessment tool. Nessus is a remote security scanner for Linux, BSD, Solaris, etc. It is plug-in-based, has a GTK interface, and performs over 1200 remote security checks. It allows for reports to be generated in HTML, XML, LaTeX, and ASCII text, and suggests solutions for security problems.

Nikto is a web server scanner which looks for over 2000 potentially dangerous files/CGIs and problems on over 200 servers.

Paros is a proxy which acts as a man-in-the-middle between web server and your PC. With this tool, you can easily intercept and modify both HTTP and HTTPS/SSL data passing through, including header (cookies) and body content (form fields). You can use it to test the security of your web application. Its features include spider, website hierarchy analysis, message interception, on-the-fly HTTP(S) filters and vulnerability scanning.

N-Stealth is a vulnerability-assessment product that scans web servers to identify security problems and weaknesses that might allow an attacker to gain privileged access.

THC-Hydra - the best parallized login hacker is available: for Samba, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support and is part of Nessus.

Ethereal is a free network protocol analyzer for Unix and Windows.

Sleuth is Web Application analysis tool. It has been designed to help you probe through a site to try to gather insight into how it works and how the authors designed it.

LANWalk Scanner is a powerful tool for both network administrators and users interested in the network security issues.

LANguard scans networks and reports information such as service pack level of each machine, missing security patches, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more.

John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP LM hashes, plus several more with contributed patches.

LANguard scans networks and reports information such as service pack level of each machine, missing security patches, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more.

L0phtCrack attempts to crack Windows & Unix passwords from hashes which it can obtain.

SolarWinds is a plethora of network discovery/monitoring/attack tools.

bsd-airtools is a package that provides a complete toolset for wireless 802.11b auditing. Namely, it currently contains a bsd-based wep cracking application, called dweputils (as well as kernel patches for NetBSD, OpenBSD, and FreeBSD).