Las 100 mejores herramientas de seguridad en redes

Lista elaborada y documentada originalmente por Gordon Lyon en sectools.org sin duda un gran esfuerzo de su parte.

1. Nessus : Premier UNIX vulnerability assessment tool
2. Wireshark : Sniffing the glue that holds the Internet together
3. Snort : Everyone’s favorite open source IDS
4. Netcat : The network Swiss army knife
5. Metasploit Framework : Hack the Planet
6. Hping2 : A network probing utility like ping on steroids
7. Kismet : A powerful wireless sniffer
8. Tcpdump : The classic sniffer for network monitoring and data acquisition
9. Cain and Abel : The top password recovery tool for Windows
10. John the Ripper : A powerful, flexible, and fast multi-platform password hash cracker
11. Ettercap : In case you still thought switched LANs provide much extra security
12. Nikto : A more comprehensive web scanner
13. Ping/telnet/dig/traceroute/whois/netstat : The basics
14. OpenSSH / PuTTY / SSH : A secure way to access remote computers
15. THC Hydra : A Fast network authentication cracker which support many different services
16. Paros proxy : A web application vulnerability assessment proxy
17. Dsniff : A suite of powerful network auditing and penetration-testing tools
18. NetStumbler : Free Windows 802.11 Sniffer
19. THC Amap : An application fingerprinting scanner
20. GFI LANguard : A commercial network security scanner for Windows
21. Aircrack : The fastest available WEP/WPA cracking tool
22. Superscan : A Windows-only port scanner, pinger, and resolver
23. Netfilter : The current Linux kernel packet filter/firewall
24. Sysinternals : An extensive collection of powerful windows utilities
25. Retina : Commercial vulnerability assessment scanner by eEye
26. Perl / Python / Ruby : Portable, general-purpose scripting languages
27. L0phtcrack : Windows password auditing and recovery application
28. Scapy : Interactive packet manipulation tool
29. Sam Spade : Freeware Windows network query tool
30. GnuPG / PGP : Secure your files and communication w/advanced encryption
31. Airsnort : 802.11 WEP Encryption Cracking Tool
32. BackTrack : An Innovative Penetration Testing live Linux distribution
33. P0f : A versatile passive OS fingerprinting tool
34. Google : Everyone’s Favorite Search Engine
35. WebScarab : A framework for analyzing applications that communicate using the HTTP and HTTPS protocols
36. Ntop : A network traffic usage monitor
37. Tripwire : The grand-daddy of file integrity checkers
38. Ngrep : Convenient packet matching & display
39. Nbtscan : Gathers NetBIOS info from Windows networks
40. WebInspect : A Powerful Web Application Scanner
41. OpenSSL : The premier SSL/TLS encryption library
42. Xprobe2 : Active OS fingerprinting tool
43. EtherApe : EtherApe is a graphical network monitor for Unix modeled after etherman
44. Core Impact : An automated, comprehensive penetration testing product
45. IDA Pro : A Windows or Linux disassembler and debugger
46. SolarWinds : A plethora of network discovery/monitoring/attack tools
47. Pwdump : A window password recovery tool
48. LSoF : LiSt Open Files
49. RainbowCrack : An Innovative Password Hash Cracker
50. Firewalk : Advanced traceroute
51. Angry IP Scanner : IP address and port scanner
52. RKHunter : An Unix Rootkit Detector
53. Ike-scan : VPN detector/scanner
54. Arpwatch : Keeps track of ethernet/IP address pairings and can detect certain monkey business
55. KisMAC : A A GUI passive wireless stumbler for Mac OS X
56. OSSEC HIDS : An Open Source Host-based Intrusion Detection System
57. Openbsd PF : The OpenBSD Packet Filter
58. Nemesis : Packet injection simplified
59. Tor : An anonymous Internet communication system
60. Knoppix : A general-purpose bootable live system on CD or DVD
61. ISS Internet Scanner : Application-level vulnerability assessment
62. Fport : Foundstone’s enhanced netstat
63. chkrootkit : Locally checks for signs of a rootkit
64. SPIKE Proxy : HTTP Hacking
65. OpenBSD : The Proactively Secure Operating System
66. Yersinia : A multi-protocol low-level attack tool
67. Nagios : An open source host, service and network monitoring program
68. Fragroute/Fragrouter : A network intrusion detection evasion toolkit
69. X-scan : A general scanner for scanning network vulnerabilities
70. Whisker/libwhisker : Rain.Forest.Puppy’s CGI vulnerability scanner and library
71. Socat : A relay for bidirectional data transfer
72. Sara : Security Auditor’s Research Assistant
73. QualysGuard : A web-based vulnerability scanner
74. ClamAV : A GPL anti-virus toolkit for UNIX
75. cheops / cheops-ng : Gives a simple interface to many network utilities, maps local or remote networks and identifies OS of machine
76. Burpsuite : An integrated platform for attacking web applications
77. Brutus : A network brute-force authentication cracker
78. Unicornscan : Not your mother’s port scanner
79. Stunnel : A general-purpose SSL cryptographic wrapper
80. Honeyd : Your own personal honeynet
81. Fping : A parallel ping scanning program
82. BASE : The Basic Analysis and Security Engine
83. Argus : A generic IP network transaction auditing tool
84. Wikto : Web Server Assessment Tool
85. Sguil : The Analyst Console for Network Security Monitoring
86. Scanrand : An unusually fast stateless network service and topology discovery system
87. IP Filter : Portable UNIX Packet Filter
88. Canvas : A Comprehensive Exploitation Framework
89. VMware : Multi-platform Virtualization Software
90. Tcptraceroute : A traceroute implementation using TCP packets
91. SAINT : Security Administrator’s Integrated Network Tool
92. OpenVPN : A full-featured SSL VPN solution
93. OllyDbg : An assembly level Windows debugger
94. Helix : A Linux Distribution with Computer Forensics in Mind
95. Bastille : Security hardening script for Linux, Mac OS X, and HP-UX
96. Acunetix Web Vulnerability Scanner : Commercial Web Vulnerability Scanner
97. TrueCrypt : Open-Source Disk Encryption Software for Windows and Linux
98. Watchfire AppScan : Commercial Web Vulnerability Scanner
99. N-Stealth : Web server scanner
100. MBSA : Microsoft Baseline Security Analyzer

Etiquetas: herramientas, Redes, tools