A security tester’s toolkit @DevConnections

Last week I presented my Security Tester’s Toolkit talk or as I subtitled it “How to get arrested by doing stupid stuff!” at IT/DevConnections in Las Vegas.

Here are the list of tools and resources that I used or mentioned and also by request the hardware that I demonstrated during the the talk

Recon

• CVE Database
• National Vulnerability Database
• Exploit Database by Offensive Security
• Punkspider Vulnerability Search Engine
• XSSPosed – XSS Research
• Shodan – The Search Engine for the Internet of Things
• Search Diggity by Bishop Fox
• NMAP – Network Mapping tool

Operating Systems

• Kali Linux – Debian based Linux based penetration testing operating system

Wi-Fi Tools

• airmon-ng
• airodump–ng
• airbase-ng
• HostAPD
• Reaver
• Wash
• MANA Toolkit
• PwnStar

Attack tools

• Metasploit Framework
• Armitage
• Cobalt Strike
• Nessus
• Veil Framework
• MITMf

Hardware

• Wi-Fi Pineapple by Hak5
• Alfa Networks AWUS036H
• Alfa Networks AWUS036NH
• Alfa Networks 9dBi Omni-directional antenna
• Alfa Networks Pen booster
• Great Scott Gadgets LAN Tap Pro

There are a lot of tools mentioned and demoed in this talk but that is only the tip of the testing toolkit iceberg.