asked on

Penetration test software

Hello,

We plan to release a financial transactions web site in production. Before this however we need to perform a complete penetration test for this solution.

So I would like to suggest me any possible penetration test software to assist us in this area.

Thank you in advance

VMthinker

I would highly recommend the network tool Yersinia and w33f. However be warned that Yersinia can cripple your network so please remember to save your IOS configurations or other networking configuration files before attempting the attacks.

--------------------------------------

Please award helpful / correct if this post has helped

By: Another VMware newbie, VMthinker

ujitnos

You can use Nessus, a great tool for vulnerability testing.
http://www.nessus.org/download/nessus_download.php

csalaski

Metasploit - http://www.metasploit.com/

Nmap - http://nmap.org/

Nessus already listed above.

Brad Howe

Hi,

Here are a couple more. While Metasploit and nmap are TOOLS, they are not automated pentesting suites. They are tools for a manual penetration project. As well, some of hte suites below are used for internal vulnerability assessment and not necesarily a full attack on an application.

I am surprise nobody mentioned "BACKTRACK 4.0"
http://www.backtrack-linux.org/

Advanced IP Port Scanner

HP Webinspect
https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-201-200%
5E9570_4000_100

Cerberus Internet Scanner
http://www.securityinnovation.com/security-report/october/tools/CerberusInternetScanner(CIS).htm

CyberCop Scanner
http://nsslabs.com/grouptests/va/edition2/nai_cybercop_scanner/nai_cybercop_scanner.htm

Foundscan
http://www.foundstone.com/us/resources-free-tools.asp

Nessus
http://www.nessus.org/download/nessus_download.php

NetRecon
http://www.securityinnovation.com/security-report/tools/NetRecon.htm

Note this is only a few, there are MANY!!!

When picking a tool suite. Think of the following.

COST
PLATFORM SUPPORT (Intel, Unix,Mac)
EASE OF USE
COMPATIBILITY
REPORTING CAPABILITIES

Hope it helps,
Hades666

ASKER CERTIFIED SOLUTION

Brad Howe

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

csalaski

I agree with Hades666, having a professional service do the testing is the best advice.

madunix

yes professional service would the best, but why not to hack around
looking @ http://sectools.org/web-scanners.html
mylist:
1. Nessus (Linux if you can) http://www.nessus.org/nessus/
2. Nikto (Linux) http://www.cirt.net/nikto2
3. Paros proxy (Linux if you can) http://www.parosproxy.org/index.shtml
4. Ike-scan (Linux) http://www.nta-monitor.com/tools/ike-scan/
5. SARA (Security Auditor's Research Assistant) (Linux) http://www-arc.com/sara/
6. MBSA (discutable) http://technet.microsoft.com/en-us/security/cc184923.aspx
7. Backtrack http://www.linux-magazine.com/w3/issue/77/BackTrack.pdf
8. skipfish http://code.google.com/p/skipfish/
9. our own perl/shell scripts
10. appscan http://www-01.ibm.com/software/awdtools/appscan/
my recommendation goes for appscan from IBM ex. Watchfire

madunix

for a summary link look @ http://projects.webappsec.org/Web-Application-Security-Scanner-List

Brad Howe

But then again, I always fall to Backtrack. No footprint with all the toolsets I need. As per the link, the list is good but then again, most of them are vulnerability assessment tools and again not neccesarily pentration testing tools.
Regardless, IF you are doing this by yourself,
A) have valid backups
B) turn off IDS
C) GET CONSENT as it is criminal offense.
I would highly suggest you just get an approved penetration vendor and have it contractually scheduled, approved and reported against.
Just my 2 cents.
-Hades666

johnf23

ASKER

OK I will test it