100 free security tools for ethical hackers and forensic investigators

Bạn đang xem bản rút gọn của tài liệu. Xem và tải ngay bản đầy đủ của tài liệu tại đây (530.91 KB, 9 trang )

Trang 1<div class="page_container" data-page="1">

100 Free Security Tools For ethical hackers and forensic investigators

INSIDE CLOUD

</div>Trang 2<div class="page_container" data-page="2">

1. Autopsy - Open source digital forensics platform to analyze hard drives and smart phones

17. Ghiro - Web site screenshots and analysis for forensic investigations Scalpel - File carver which recovers files based on headers and footers

19. HxD - Hex editor useful for analyzing raw disk and memory dumps TestDisk - Data recovery tool, useful when file systems get corrupted

21. PhotoRec - Recovery tool specifically focused on photos and media files

22. CAINE - Italian GNU/Linux live distribution with many forensics tools

23. Axiom Cyber - Commercial digital forensics and incident response platform

27. Kali Linux - Penetration testing Linux distribution with many useful security tools

28. DEFT - Linux distribution configured specifically for computer forensics

29. Volatility Framework - Advanced memory forensics framework with plugins and APIs

30. PyFlag - Legacy Australian forensic and log analysis GUI platform

100 Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 3<div class="page_container" data-page="3">

31. Plaso (log2timeline) - Extract timestamps from various logs and aggregate timeline

34. Snort - Open source intrusion detection and network monitoring system

35. Tcpdump - Capture and analyze network traffic on Unix-like systems

36. Ngrep - Search within network traffic payloads like grep for text streams dcfldd - Disk cloning and forensics tool, version of dd with hashing Wireshark - Network traffic analyzer useful for network forensics

39. SIFT (SANS) - Ubuntu-based distribution for forensic analysis Paladin - USB image mounted as virtual drive with write-protection

41. CAINE Live - Self-contained bootable forensic environment XRY (XAMN) - Commercial mobile forensic software to analyze phones BlackLight - Powerful Windows-based forensics analysis platform

47. Raptor - Validation tool to verify integrity of forensic copies EnCase Imager - Disk imaging tool from Guidance Software Guymager - Open source disk cloning and imaging tool for Linux

50. Scalpel - File carver recovering files based on header/footer signatures

51. Extundelete - Used to recover deleted files from mountable images Xplico - Network forensics tool that rebuilds sessions from traffic Foremost - File carving utility to recover files using header/footer definitions

54. Hunchback - High speed packet capture and transmission tool Autopsy Tools - Plugins and tools used alongside Autopsy forensics GUI

60. Live View - Volatile memory analysis tool for Windows systems LRR - Tool for viewing Windows artifacts including LNK files

100 Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 4<div class="page_container" data-page="4">

65. Amcache Parser - Recovers data from Windows 10 Amcache.hve artifact file

66. The Hive - Web interface offering querying capabilities for hive files

67. GRR Rapid Response - Incident response framework focused on remote live forensics

71. KAPE - Target acquisition tool focused on enterprise lines of business USB Write Blocker - Hardware ensuring write protection when imaging USB devices

73. AIL - Network and host monitoring system for identification of intrusions Rifiuti2 - Analyzes Windows Recycle Bin INFO2 files and recovers filenames

75. VolDiff - Compares memory images and highlights differences for analysis WinAudit - Scans Windows systems and reports changes from baseline hfind - Carves unallocated space and extracts hidden/deleted data into files

78. Yara - Pattern matching tool aimed at malware researchers

79. Checkm8 - Jailbreaking tool extracting data from passcode locked iOS devices o/

80. Olefile - Python package for parsing OLE and Office documents Pyew - Python tool for malware analysis static and dynamic E01 Examiner - Software utility for mounting EnCase evidence file formats USBDeview - Handy Windows tool listing all USB devices ever connected

89. Speedit - Detection and analysis of spyware, keyloggers, trojans etc SniffPass - Sniffs passwords and other sensitive information from a network

91. Nmap - Network scanning and host discovery tool helpful for reconnaissance OSINT Framework - Gathering publicly available online data regarding targets Recon-ng - Web based open source reconnaissance framework OSINT-SPY - Performs extensive reconnaissance using 300+ OSINT data sources

95. Shodan - Search engine for Internet connected devices

96. Maltego - Link analysis and data mining for gathering information SpiderFoot - OSINT automation tool gathering threat intelligence data Metagoofil - Extract metadata of public documents from a target website

100 Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 5<div class="page_container" data-page="5">

Here are those same 100 resources, grouped by function.

Digital Forensics Frameworks:

1. Autopsy - Open source digital forensics platform to analyze hard drives and smart phones

42. XRY (XAMN) - Commercial mobile forensic software to analyze phones BlackLight - Powerful Windows-based forensics analysis platform

49. Guymager - Open source disk cloning and imaging tool for Linux

100 Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 6<div class="page_container" data-page="6">

60. Live View - Volatile memory analysis tool for Windows systems Rekall - Advanced forensic memory analysis framework powered by Python

34. Snort - Open source intrusion detection and network monitoring system

35. Tcpdump - Capture and analyze network traffic on Unix-like systems

36. Ngrep - Search within network traffic payloads like grep for text streams Wireshark - Network traffic analyzer useful for network forensics

54. Hunchback - High speed packet capture and transmission tool AIL - Network and host monitoring system for identification of intrusions Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 7<div class="page_container" data-page="7">

Windows Artifact Analysis:

15. RegRipper - Tool to parse Windows registry files and dig for useful data

66. The Hive - Web interface offering querying capabilities for hive files

74. Rifiuti2 - Analyzes Windows Recycle Bin INFO2 files and recovers filenames

76. WinAudit - Scans Windows systems and reports changes from baseline USBDeview - Handy Windows tool listing all USB devices ever connected

19. HxD - Hex editor useful for analyzing raw disk and memory dumps WinHex - Hex editor, particularly helpful for low-level analyzing raw data Extraction Tools:

8. Cellebrite UFED - Commercial mobile forensic software to extract data from phones and tablets

37. dcfldd - Disk cloning and forensics tool, version of dd with hashing Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 8<div class="page_container" data-page="8">

Data Extraction Tools (continued):

40. Paladin - USB image mounted as virtual drive with write-protection

79. Checkm8 - Jailbreaking tool extracting data from passcode locked iOS devices o/

80. Olefile - Python package for parsing OLE and Office documents Autopsy - iPhone - Autopsy module adds iOS analysis functionality

Data Recovery Tools:

20. TestDisk - Data recovery tool, useful when file systems get corrupted

21. PhotoRec - Recovery tool specifically focused on photos and media files

Specialized Tools:

17. Ghiro - Web site screenshots and analysis for forensic investigations Pyew - Python tool for malware analysis static and dynamic E01 Examiner - Software utility for mounting EnCase evidence file formats X-Ways Imager - Disc imaging tool to create forensic images, integrated into X-Ways Forensics

91. Nmap - Network scanning and host discovery tool helpful for reconnaissance OSINT Framework - Gathering publicly available online data regarding targets

95. Shodan - Search engine for Internet connected devices

100 Free Security Tools

For ethical hackers and forensic investigators

</div>Trang 9<div class="page_container" data-page="9">

OSINT Tools (continued):

91. Nmap - Network scanning and host discovery tool helpful for reconnaissance OSINT Framework - Gathering publicly available online data regarding targets