All other tools

Microsoft's Attack Surface Analyzer Tool

Attack Surface Analyzer tool is announced by the microsoft regarding the issues of the security changes.It detects all the changes have been done in the security by analyzing the registry entries,ActiveX controls & the added files in the windows system.

The aim of the microsoft developer is very clean that any 3rd party software is installed on the system then this tool is checking that weather the installed tool increased the attack surface on the windows platform or not.To generate a report, the tool needs to scan a system before and after the program in question is installed.

There are several tools available to hack IIS server (type IIS hacking tools on Google you’ll find lot of them) therefore if you are running a IIS server then you must be careful it should be kept overprotected since tools assures that even skids or script kiddies can attempt a hack and can also become successful. Following are some tools that can help you protect an IIS server, please note that you’ll not need all of them, choose them according to your need.

• Server Mask:
  It modifies all you web server’s “fingerprint” by removing unnecessary HTTP response data, modifying cookie values, removing the need to serve files extensions and adjusting other response data. Server mask makes it difficult to find real banner, fingerprint and vulnerability of system thus fooling an attacker to try wrong exploit thus allowing detection of attack by IDS and IPS.

• Server Mask IP100:
  It stops TCP/IP fingerprinting used to exploit system using flaw in TCP/IP model. It stops IP spoofing by adding authentication to unprotected TCP/IP packets. It helps in stopping DoS attack, session hijack, DNS cache poisoning attack.

Darkjumper is a free penetration testing tool.This is really an important tool for checking many vulnerabilities in web based applications and websites. 


Features

1. User enumeration
2. Scan sqli, blind sqli, LFI and RFI on each web server hosted at the same
3. Scanning CGI and web structure common path
4. Port Scan
5. Auto Dictionary Attack after user enumeration
6. Auto sql inject after mysql injection bug found (looking for automatic column width)
7. Additional proxy function
8. Additional verbosity
9. Features ip and geo checking

Download Here:
http://sourceforge.net/projects/darkjumper/

Versie 3.5.1 van het Metasploit Framework , Metasploit Express en Pro Metasploit zijn live gegaan! Deze parallel uitgebrachte versie voegt 47 nieuwe modules en 8 nieuwe scripts (sinds 3.5.0)toe. Hierdoor komt het totaal op 635 exploits, 314 extra modules, en 215 payloads. Metasploit biedt nu extra exploits voor SAP BusinessObjects, Exim mailservers, ProFTPD file transfer installaties, SCADA-implementaties (BACnet, Citect, Datac), Novell NetWare servers, Microsoft Internet Explorer, en browser plugins, zoals Adobe Flash en Oracle Java. Verbeteringen zijn aangebracht aan de client-side Java exploits. De Meterpreter payload ondersteunt nu webcam, microfoon, en het scherm spionage. Brute kracht modules ondersteunen lege gebruikersnamen en nu ook de Unix "r"-diensten, VNC en SNMP-protocollen. De Nessus import plugin is bijgewerkt, basisondersteuning voor nCircle is toegevoegd, en het kader kan nu in de PWDump en John de uitvoer van de Ripper formaten. De volledige release notes voor de kader kan worden gevonden online .