jSQL Injection - Java based automated SQL injection tool

jSQLi is java based free SQL Injection Tool.  It is very easy for user to retrieve database information from a vulnerable web server.

SQL Injection features:

GET, POST, header, cookie methods
normal, error based, blind, time based algorithms
automatic best algorithms detection
data retrieving progression
proxy setting
evasion
for now supports MySQL


Download it from here:
http://

chapcrack: A tool for cracking MS-CHAPv2 network handshakes

Chapcrack is a tool for parsing and decrypting MS-CHAPv2 network handshakes. In order to use it, a packet with an MS-CHAPv2 network handshake must be obtained. The tool is used to parse relevant credentials from the handshake. In other words, Chapcrack parses the credential information out of MS-CHAPv2 handshakes, sends to Cloudcracker which in turn will return a packet that can be decrypted by

List of Best Ethical Hacking / Penetration Testing Tools

Here is list of useful and Best Software tools that helpful in Ethical Hacking and Penetration Testing, Forensics ...


MetaSploit :

Metsploit is a very Powerful PenTesting Tool . Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. The Metasploit Project is also well known for anti-forensic and evasion tools, some of which are built into

Download Hash Code Verifier v1.0 : A tool to verify the File Integrity

Hello BTS Readers,
we are happy to announce that we have released our second security tool 'Hash Code Verifier'.  Hash Code Verifier is a Cross-platform application to verify the Integrity of your download files. Hash Code verifier can be very useful if you want to check if a downloaded file is original and not corrupted or modified by hackers.

In order prevent users from such problem,

Automated Blind SQL Injection Attacking Tools~bsqlbf Brute forcer

What is Blind SQL Injection:Some Websites are vulnerable to SQL Injection but the results of injection are not visible to the attacker.  In this situation, Blind SQL Injection is used. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This

Learn Web Application Exploits and Defenses for free~Penetration Testing

Are you willing to Learn Web Application Exploitation and Defense against that? Here is the chance for you.   Google Labs provides a Lab to learn Web Application for free of cost.


Penetration Testing :
Learn how hackers find security vulnerabilities!
Learn how hackers exploit web applications!
Learn how to stop them! 
This code lab shows how web application vulnerabilities can be exploited

Hash Code Cracker v1.2 Video Tutorials

Running Application:How to start Hash Code Cracker Jar with double Click?
How to Run Hash Code Cracker Jar using Command Prompt?
In Linux:
Terminal: The same procedure is followed for Linux version.  Just open the Terminal instead command Prompt.


Using Application for Cracking password:
How to Crack the Password using Online Cracker Hash Code Cracker v1.2?

How to Crack the Password using Online Cracker Hash Code Cracker v1.2?

Watch on Youtube

How to Run Hash Code Cracker Jar using Command Prompt~Password Cracking

Watch on Youtube

How to start Hash Code Cracker Jar with double Click~Password Cracking

Watch on Youtube

Pangolin a SQL Injection Testing Tool ~PenTesting Tools

Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint,

How to Install BlackBuntu inside VirtualBox ~ PenTesting Tutorials

This tutorial will guide you to install the  BlackBuntu(Penetration testing Distribution) inside the Virtual Box

First of all download and install the virtual box.


After installation, you can start VirtualBox as follows:

On a Windows host, in the standard "Programs" menu, click on the item in the "VirtualBox" group. On Vista or Windows 7, you can also type "VirtualBox" in the search box of

pytbull – Intrusion Detection/Prevention System (IDS/IPS) Testing Framework

What is pytbull?Pytbull is a python based flexible IDS/IPS testing framework shipped with more than 300 tests, grouped in 9 modules, covering a large scope of attacks (clientSideAttacks, testRules, badTraffic, fragmentedPackets, multipleFailedLogins, evasionTechniques, shellCodes, denialOfService, pcapReplay)
Pytbull is shipped with about 300 tests grouped in 9 testing modules:
clientSideAttacks:

Xcode SQL Injection / LFI / XSS & Webshell Vulnerability Scanner

XCODE Exploit: Vulnerable and Webshell Scanner.Once downloaded, extract all the files and run XCodeXploitScanner.exe, Dork Click It and a tool will collect links from Dork you enter and displays the list is. after displaying List, you will be able to conduct SQL injection vulnerability scanning / Local File Inclusion / Cross Site Scripting on the web that is in the list.

This tool will send the

xdos.c: A Simple HTTP DoS Tool! ~ C programming Code

A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users.


#define WIN32_LEAN_AND_MEAN
#include
#include
#include

unsigned long thread = 0;

static int connect_tv(struct sockaddr_in *addr, int timeout);
static DWORD WINAPI dosmain(LPVOID p)

INSECT Pro 2.7 ~ Penetration security auditing and testing Tool

INSECT Pro 2.7 - This penetration security auditing and testing software solution is designed to allow organizations of all sizes mitigate, monitor and manage the latest security threats vulnerabilities and implement active security policies by performing penetration tests across their infrastructure and applications.

INSECT can help to build a strong security posture that is easy to use so

ERPScan WEBXML Checker- Security Testing for SAP J2EE applications

ERPScan WEBXML checker is a freeware tool that is intended for checking security configuration of SAP J2EE applications by scanning a WEB.XML file . It is intended to checking WEB.XML files for different vulnerabilities and missconfigurations like Verb Tampering, Invoker servlet bypass and other missconfigurations. Detailed information about that vulnerabilities can be found in whitepaper “

Snort v 2.9.1~Network intrusion prevention and detection system (IDS/IPS)

Snort® is an open source network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and nearly 400,000 registered users, Snort has become the de facto standard for IPS. 
It is  capable of performing

TheHarvester v2.1 Blackhat Edition Upgraded

TheHarvester is a tool for gathering e-mail accounts, subdomain names, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, pgp key servers).
This tools is intended to help Penetration testers in the early stages of the project It’s a really simple tool, but very effective.
This is the official change log for theHarvester:

DNS Bruteforcer
DNS

Matriux Krypton |Pen Testing Tool

The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network administration, cyber forensics investigations, security testing, vulnerability analysis, and much more. It is