Most Popular
plecost v0.1.6 RT Beta - WP finger printer tool
Wordpress finger printer tool search and retrieve information about the plugins versions installed in Wordpress systems.
mssqlfp (ENGR SQL FingerprintT) v1.00.0006 released
This is a tool that performs version fingerprinting on Microsoft SQL Server 2000, 2005 and 2008, using well known techniques based on several public tools that identifies the SQL Version.
dnsmap v0.30 - Passive DNS network mapper
dnsmap (a.k.a. subdomains bruteforcer) was originally released back in 2006 and was inspired by the fictional story "The Thief No One Saw" by Paul Craig, which can be found in the book "Stealing the Network - How to 0wn the Box".
Geoedge v0.2 - IP Location tool
Geoedge, is a little tool to help identify the location of an IP, via services like Maxmind and GeoIpTool.
theHarvester v1.5 released
theHarvester is a tool for gathering e-mail accounts from different public sources (search engines, pgp key servers). Is a really simple tool, but very effective.
SSL/TLS Audit version Alpha
SSL Audit scans web servers for SSL support, unlike other tools it is not limited to ciphers supported by SSL engines such as OpenSSL or NSS and can detect all known cipher suites over all SSL and TLS versions.
Bing Web Server Probe v1.0 released
This is a tool for security researchers. It allows you to search for either an IP address or a DNS name and display all associated domain names known to Bing.
FileInsight v2.1 - Analyzing files in various formats
Secure Computing’s FileInsight helps to inspect and edit
files of various formats. It is specifically designed to aid in analysis of
potentially malicious files.
mssqlfp (Microsoft SQL Server Fingerprint Tool) Beta 4 released
This is a tool that performs version fingerprinting on Microsoft SQL Server 2000, 2005 and 2008, using well known techniques based on several public tools that identifies the SQL Version.
Yasat v1.70a - Yet Another Stupid Audit Tool
YASAT (Yet Another Stupid Audit Tool) is a simple stupid audit tool. Its goal is to be as simple as possible with minimum binary dependencies (only sed, grep and cut).
FindDomains v0.1.1 released - search engine discovery tool
The fastest search engine discovery tool that retrieves domains which are located at specified ip address/hostname.
SpiceWorks v4.5 available
Spiceworks is the complete network management & monitoring, helpdesk, PC inventory & software reporting solution to manage Everything IT in small and medium businesses.
WhatWeb v0.3 - Next generation Web Scanner
Identifying content management systems (CMS), blogging platforms, stats/analytics packages, javascript libraries, servers and more. Licensed under GPLv3.
vmap v0.7 released - identifying remotely daemons
vmap lets you remotely ident the version of a daemon. It currently works for ftp, smtp, pop3, imap and http.
(updated) SHODAN - Computer Search Engine released
SHODAN lets you find servers/ routers/ etc. by using the simple search bar up above. Most of the data in the index covers web servers at the moment, but there is some data on FTP, Telnet and SSH services as well.
Hyena v8.0 32-bit & 64-bit released
Hyena is a tool for day-to-day administration of Windows NT and Windows XP/2000/2003 systems. Now Windows 7 too.
Hyena brings together all of the administrative tools from Windows NT such as User Manager, Server Manager, and File Manager/Explorer, and many of the MMC components from Windows 2000/2003 into a single, easy-to-use, centralized program. Hyena arranges all system objects, such as users, servers, and groups, in a hierarchical tree for easy and logical system administration.
DirSnatch v2.0 - listing directory
This tool allows for export of directory listings of your web root. The essence of the tool is very basic. If you want a nice and neat directory listing in a format ready to request in an automated fashion this is your tool.
VHoster v1.0 - using the API of Live
This tool is to enumerate the online domains that correspond to the same IP.
Binging beta released - Footprinting and Discovery Tool with Bing -
Binging is a simple tool to query Bing search engine. It will use your Bing API key and fetch multiple results. This particular tool can be used for cross domain footprinting for Web 2.0 applications, site discovery, reverse lookup, host enumeration etc.