Hackers Center - Security Tools and Texts

Scrubyt 0.4

2010-02-21T03:16:01.000-07:00

scRUBYt! a simple but powerful web scraping toolkit written in Ruby. It's purpose is to free you from the drudgery of web page crawling, looking up HTML tags, attributes, XPaths, form names and other typical low-level web scraping stuff by figuring these out from your examples copy'n'pasted from the Web page or straight from Firebug.

Sahi V3

2010-02-15T08:38:04.000-07:00

Sahi is an automation tool to test web applications. Sahi injects javascript into web pages using a proxy and the javascript helps automate web applications.

UrlParams 2.2.0

2010-02-10T11:07:23.000-07:00

Shows you the GET and POST parameters of the current website in the sidebar.
You can alter their values, add new parameters, switch get/post and more.

TemperIE

2010-02-06T01:49:33.000-07:00

TamperIE is a useful tool for security testing your web applications, in order to ensure you don't make foolish assumptions about the data sent by client browsers.� Since the tool exposes and allows tampering with otherwise inconvenient input, many user-input security flaws immediately become apparent.

Nikto 2

2010-02-01T05:40:25.000-07:00

Nikto is an Open Source web server scanner which performs comprehensive tests against web servers for multiple items, including over 6100 potentially dangerous files/CGIs, checks for outdated versions of over 950 servers, and version specific problems on over 260 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

hcraft 1.0.0

2010-01-30T11:11:14.000-07:00

hcraft is a HTTP systems penetration testing tool designed to make exploitation of known vulnerabilities in HTTP systems a dynamic, simple process. hcraft is intended to help take the details out of executing HTTP based attacks that require you to specially craft an HTTP request. By defining a modeline for a given vulnerability in the modes file you can instruct hcraft in how the HTTP request should be constructed, then use the tool to select the appropriate mode and include the dynamic parts of the attack such as target host, port, and the filename to retrieve or the command to execute.

MSNPawn 1.1

2010-01-28T09:17:57.000-07:00

MSNPawn has been designed and developed on the .Net framework and must be installed on the system. The following utilities have been bundled with MSNPawn .

httprint

2010-01-25T11:10:22.000-07:00

httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers, despite the fact that they may have been obfuscated by changing the server banner strings, or by plug-ins such as mod_security or servermask. httprint can also be used to detect web enabled devices which do not have a server banner string, such as wireless access points, routers, switches, cable modems, etc. httprint uses text signature strings and it is very easy to add signatures to the signature database.

DIRB

2010-01-23T11:16:17.000-07:00

DIRB: Tool for doing Web Scanning by looking for hidden Web Objects. It works by launching a dictionary attack against a Web server and analizing the responses. DIRB main purpose is to help in Web application security auditing.

WebInject 1.4

2010-01-20T12:53:00.000-07:00

WebInject is a free tool for automated testing of web applications and web services. It can be used to test individual system components that have HTTP interfaces (JSP, ASP, CGI, PHP, AJAX, Servlets, HTML Forms, XML/SOAP Web Services, REST, etc), and can be used as a test harness to create a suite of [HTTP level] automated functional, acceptance, and regression tests. A test harness allows you to run many test cases and collect/report your results. WebInject offers real-time results display and may also be used for monitoring system response times.