Metasploit Framework (The best hacking tool )

  What is Metasploit Framework ?

Metasploit software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments, providing true security risk intelligence. Capabilities include smart exploitation, password auditing, web application scanning, and social engineering. Teams can collaborate in Metasploit and present their findings in consolidated reports.
Metasploit editions range from a free edition to professional enterprise editions, all based on the Metasploit Framework, an open source software development kit with the world's largest, public collection of quality-assured exploits.
Metasploit can help penetration test, can find vulnerability,payload,exploit etc…
(more tutorial will come soon about metasploit)

 What is a vulnerability?

GFI LanGuard (Vulnerability scanning tool)

GFI LanGuard gives you a complete picture of your network setup and helps you to maintain a secure and compliant network state. It does this faster and more effectively through its automated patch management features and with minimal administrative effort

Over 50,000 vulnerability assessments are carried out across your network, including your virtual environments.

GFI LanGuard checks your operating system, virtual environments and installed applications using vulnerability check databases such as OVAL and SANS Top 20. It allows you to analyze the state of your network security, what the risks are, how exposed your network is and how to take action before it is compromised.

   Download Link :: here

   Official website : www.gfi.com

Banner Grabbing Countermeasures : Disabling or Changing Banner

IIS User can use these tools to disable or change banner information :  

•  IIS LOCKDOWN TOOL         Website : www.microsoft.com 

                                 Download Link ::       here                                  

• SERVERMASK             

                                 Website : http://www.port80software.com/products/servermask/
                                 Download Link ::       here                  

Friendly Pinger 5.0 (network inventory..)

Friendly Pinger - is a powerful and user-friendly application for network administration, monitoring and inventory.

• Visualization of your computer network as a beautiful animated screen;
• Monitoring network devices availability;
• Notification when any server wakes up or goes down;
• Ping of all devices in parallel at once;
• Audit software and hardware components installed on the computers over the network;

Portable Storage Explorer (Display remote network...)

Portable Storage Explorer displays remote network computer USB devices, removable storage, CD-Rom and DVD drive information and state, drive type, serial number, revision, device name, last cleaned time, device vendor and product name, operational state, created and modified time, device library and more... You must have administrative privileges on the remote network computer. All the mentioned features are provided with a user friendly graphical interface.

Types of password Attacks (hacking)

Bidiblah Automated Scanner (hack tools)

what is BiDiBLAH ?

Working with large international companies and organizations finding every single Internet Access Point and exposed Internet Services became a big part of our assessment. Our customers realized that it was not only the complex vulnerability on a single host that bit them, but more often the single unsecured host somewhere on their vast perimeter that allowed attackers to breach the network. Thus, footprinting became such a big component of our services that we were often asked to perform projects that only entailed performing a footprint. Our methodology was

Httprint (hack - fingerprinting tool)

 Introduction
httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers, despite the fact that they may have been obfuscated by changing the server banner strings, or by plug-ins such as mod_security or servermask. httprint can also be used to detect web enabled devices which do not have a server banner string, such as wireless access points, routers, switches, cable modems, etc. httprint uses text signature strings and it is very easy to add signatures to the signature

Port Detective (hack tools)

The Port Detective performs a remote port scan on your IP address. This scan helps you determine if you are properly secured, or if you have the proper ports available and open for hosting a server on your Cable or DSL modem.  If you have a Cable Modem or xDSL modem, Port Detective will give you the details on what TCP/IP ports are open, in use or blocked. Why not run your own web server from your home?  Port Detective will

Resource Hacker (hack tools)

Resource Hacker is a freeware utility to view, modify, rename, add, delete and extract resources in 32bit Windows executables and resource files (RES). It incorporates an internal resource script compiler and decompiler and works on Win95, Win98, WinME, WinNT, Win2000 and WinXP operating systems.
Viewing Resources: Cursor, Icon, Bitmap, GIF, AVI, and JPG resource images can be viewed. WAV and MIDI audio resources can be played. Menus, Dialogs, MessageTables, StringTables, Accelerators, Delphi Forms, and VersionInfo resources can be

Colasoft MAC Scanner (hack tools)

 Colasoft MAC Scanner allows to scan the network and get a list of
MAC addresses along with IP address, machine name, and
manufacturer's information.

It can automatically detect all subnets according to the IP addresses
configured on multiple NICs of a machine.

It supports multi-threaded scanning. 

OstroSoft Internet Tools (hack tools)

OstroSoft Internet Tools is integrated set of network information utilities. It is intended for use by network, domain and systems administrators, network security professionals, Internet users and everyone who wants to know more about network and Internet.
It gives you such vital information as:

• which computers on domain are running specified service - for example: how many newsservers are available on domain (Domain Scanner)
• what network services are running on specified computer (remote or local) - for example: Web

Advanced IP scanner (hack tools)

Advanced IP Scanner is a free, fast and easy-to-use network scanner for Windows. In a matter of seconds, this utility finds all the computers on your network and provides easy access to their various resources, whether HTTP, HTTPS, FTP or shared folders. With Advanced IP Scanner, you can wake up and shut down remote groups of Windows machines. If you use Radmin remote access software, you will also enjoy the improved Radmin Server detection and integration capabilities, which allow you to connect to any scanned machine with Radmin Server.

SolarWinds Engineers Toolset v10.6 (best hack tools)

 Engineer's Toolset includes 49 powerful network management, monitoring and troubleshooting tools to easily and effectively manage your network.

With the Workspace Studio, you can organize your tools to tackle troubleshooting challenges and then recall that workspace with a click when you need it – saving valuable set-up time. And shared credential management saves even more time as you switch easily between the tools you need without re-entering credentials.
Fire up Engineer’s Toolset on your workstation and get out of the wiring closet. Take control of your day and your network with powerful, timesaving features,

NetBruteScanner (hack tools)

NetBrute scans a range of IP addresses for shared resources that have been shared via Microsoft File and Printer Sharing. In addition, any SMB compatible shared resources will show (i.e. Samba Servers on a Unix/Linux machine). It is to be used by system administrators or home users to see what types of resources are shared and to warn the computer users if any unsecured resources are displayed.
Ideally, only folders and printers should be shared if it is intended for the whole world to access them. If the folders and printers are not intended for the whole world, then passwords should be applied to the resources. 

LanSpy (network security & port scanner) freeware

LanSpy - network security & port scanner

LanSpy is a set of network utilities brought together in a single program with simple and easy-to-use interface. LanSpy help network administrators maintain and manage their networks.
LanSpy includes fast port scanner for gathering information about open ports on remote computer, LanSpy displays services using these ports.
Look at your computer with bad guys eyes!

LanSpy is made for gathering the following information about a remote computer:

• Ping
• Domain name
• NetBios names

Megaping scanner (hack tools)

MegaPing is the ultimate must-have toolkit that provides all essential utilities for Information System specialists, system administrators, IT solution providers or individuals.

MegaPing includes:

Scanners: Comprehensive Security Scanner, Port scanner (TCP and UDP ports), IP scanner, NetBIOS scanner, Share Scanner.
All Scanners can scan individual computers, any range of IP addresses, domains, and selected type of computers inside domains.

NetworkActiv Port Scanner (hack tools)

NetworkActiv Port Scanner is a network exploration and administration tool that allows you to scan and explore internal LANs and external WANs. Because of the versatility and choosable operating modes available in NetworkActiv Port Scanner, it may be used by experienced network administrators as well as by novices. NetworkActiv Port Scanner provides all the basic features that you'd expect in an advanced network scanner, but also provides many additional features and technologies, some of which being completely unique to this scanner. NetworkActiv Port Scanner provides scanning performance simply not found in other Windows based network scanners, but one will need to actually try it to understand just how fast a network scan can be.

Infiltrator network security scanner (hack tools)

Infiltrator is a network security scanner that can quickly audit your network computers for possible vulnerabilities, exploits, and information enumerations. It comes with a built-in database of known vulnerabilities, that can be updated online and allows you to select the items to scan for or to add custom entries to be included. Infiltrator can reveal and catalog a variety of information, including installed software, shares, users, drives, hotfixes, NetBios and SNMP information, open ports and much more. It can also audit password and security policies, perform HTTP/CGI server auditing and registry auditing. In addition, the program includes 18

Atelier web security port scanner (hack tools)

High-speed TCP Connect scanning engine, with adjustable maximum number of simultaneously opened ports (up to 512).
Full remote host information:

• Official name - If using the DNS or similar resolution system, it is the Fully Qualified Domain Name (FQDN) that caused the server to return a reply. If using a local "hosts" file, it is the first entry after the IP address.
• Aliases - Supported alternate names.
• List of IP addresses.
• HTTP server brand and model.
• Local host name and IP address.
• Full report on TCP connections and incoming data,