Current Tool List

From OWASP Live CD 2008

Current Tool Modules List

Table of contents

Contents 1 OWASP WebScarab 2 OWASP WebGoat 3 OWASP CAL9000 4 OWASP JBroFuzz 5 Paros Proxy 6 nmap & Zenmap 7 Wireshark 8 tcpdump 9 Firefox 3 10 Burp Suite 11 Grenedel-Scan 12 OWASP DirBuster 13 OWASP SQLiX 14 OWASP WSFuzzer 15 Metasploit 3 16 w3af & GTK GUI for w3af 17 Netcats collection 18 OWASP Wapiti 19 Nikto 20 Fierce Domain Scaner 21 Maltego CE 22 Httprint 23 SQLBrute 24 Spike Proxy 25 Rat Proxy 26 Webshag 27 The next module

Note: Some tools are included in SLAX itself. See the SLAX tools page.

Tools are as of the OWASP Live CD 2008 Portugal release.

OWASP WebScarab Web Site Version: 20090122 License: GPL / LGPL OWASP Tool: Yes In OWASP Guide: Yes. V2 page(s) 129, 134, 162, 243, 257, 291, 293, 298, 300 & Appendix A (p. 331) Module Name: webscarab-20090122.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Source Code Making WebScarab module

OWASP WebGoat Web Site Version: 5.2 License: GPL v2 OWASP Tool: Yes In OWASP Guide: Yes. V2 page(s) 129, 257 Module Name: webgoat-5.2.lzm - (download) Module dependencies: firefox-3.0.1.lzm (download) Module Source: Source Code (from 5.2, 5.1 and 5.0) Making WebGoat module

OWASP CAL9000 Web Site Version: 2.0 License: GPL v2 OWASP Tool: Yes In OWASP Guide: Yes. V2 page(s) 187 & Appendix A (p. 331) Module Name: webscarab-20070504.lzm (download) Module Source: Source Code Making CAL9000 module

OWASP JBroFuzz Web Site Version: 1.2 License: GPL OWASP Tool: Yes In OWASP Guide: No Module Name: jbrofuzz-1.2.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Source Code Making JBroFuzz module

Paros Proxy Web Site Version: 3.2.13 License: Artistic License OWASP Tool: No In OWASP Guide: Yes. V2 page(s) 134, 243, 275 & Appendix A (p. 331) Module Name: paros-3.2.13.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Source Code Making Paros Proxy module

nmap & Zenmap Web Site Version: 4.76 License: GPL v2 with clarifications/exceptions noted here OWASP Tool: No In OWASP Guide: Yes V2 page(s) 57, 62, 84 Module Name: nmap_Zenmap-4.76.lzm (download) Module Source: source Making nmap module

Wireshark Web Site Version: 1.0.5 License: GPL v2 OWASP Tool: No In OWASP Guide: Yes. V2 page(s) 300 Module Name: wireshark-1.0.5.lzm (download) Module Source: Source Code Making Wireshark module

tcpdump Web Site Version: 4.0.0 License: BSD License OWASP Tool: No In OWASP Guide: No Module Name: tcpdump-4.0.0.lzm (download) Module Source: source Making tcpdump module

Firefox 3 Web Site Version: 3.0.5 License: MPL OWASP Tool: No In OWASP Guide: No Module Name: firefox-3.0.5.lzm & firefox-3.0.5-no_addons.lzm (download) Module Source: Binary download from Mozilla.com Making Firefox 3 module and Firefox Add-ons included

Burp Suite Web Site Version: 1.2 License: Other see also OWASP Tool: No In OWASP Guide: Yes. 66, 134, 243, 275, A-332 Module Name: burpsuite-1.2.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Java Jar Making Burp Suite module

Grenedel-Scan Web Site Version: 1.0 License: GPL v3 OWASP Tool: No In OWASP Guide: No Module Name: grendel-scan-1.0.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Java Jar Making Grendel-Scan module

OWASP DirBuster Web Site Version: 0.12 License: LGPL OWASP Tool: Yes In OWASP Guide: No Module Name: dirbuster-0.12.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Java Jar Making DirBuster module

OWASP SQLiX Web Site Version: 1.0 License: FOSS OWASP Tool: Yes In OWASP Guide: Yes. 200, A-331 Module Name: sqlix-1.0.lzm (download) Module Source: Perl source Making OWASP SQLiX module

OWASP WSFuzzer Web Site Version: 1.9.4 License: LGPL OWASP Tool: Yes In OWASP Guide: Yes Module Name: wsfuzzer-1.9.4.lzm (download) Module dependencies: python-2.5.2-i486-1.lzm (download) Module Source: Python source Making OWASP WSFuzzer module

Metasploit 3 Web Site Version: Subversion Trunk on 2008-09-06 License: Metasploit Framework License see here OWASP Tool: No In OWASP Guide: Yes. 261, 266, 275, 293, A-332 Module Name: metasploit3-svn-2008-09-06.lzm (download) Module dependencies: subversion-client-1.5.2.lzm, ruby-1.8.6-p111.lzm, xosd-2.2.12.lzm, firefox-3.0.1.lzm (download) Module Source: Subversion checkout on 2008-09-06 Making Metasploit 3 module

w3af & GTK GUI for w3af Web Site Version: r2161 License: GPL v2 OWASP Tool: Yes In OWASP Guide: No Module Name: w3af-r2161.lzm (download) Module dependencies: python-2.5.2-i486-1.lzm, sqlite-3.6.4.lzm, graphviz-2.30.3.lzm, subversion-client-1.5.2.lzm (for updating w3af) (download) Module Source: source from Subversion Making the w3af module

Netcats collection Netcat (the original) & GNU re-write of Netcat Version: Netcat 1.10-38 (original from Hobbit) & O.7.1 (GNU version) License: Public Domain see here & GPL v2 OWASP Tool: No In OWASP Guide: Yes. 46, 104, A-332 (original not GNU version) Module Name: netcats.lzm (download) Module Source: Source code. Original from here or here GNU from here Making Netcat module

OWASP Wapiti Web Site Version: 2.0.0-beta License: GPL v2 OWASP Tool: Yes In OWASP Guide: No Module Name: wapiti-2.0.0-beta.lzm (download) Module dependencies: python-2.5.2-i486-1.lzm (download) Module Source: source Making the OWASP Wapiti module

Nikto web site Version: 2.03 License: GPL OWASP Tool: No In OWASP Guide: Yes. 99, 106 Module Name: nikto-2.03.lzm (download) Module Source: source Making Nikto module

Fierce Domain Scaner web site Version: 1.0.3 License: Public Domain / FOSS (AKA "The license is use it, or else." - from the author) OWASP Tool: No In OWASP Guide: No Module Name: fierce-1.0.3.lzm (download) Module Source: source Making Fierce Domain Scanner module

Maltego CE web site Version: 2-210 CE License: Community Edition of commercial software (AKA semi-criple-ware) OWASP Tool: No In OWASP Guide: No Module Name: maltego-CE-2-210.lzm (download) Module Source: Binary Making Maltego CE module

Httprint web site Version: 301 License: Binary freeware see also OWASP Tool: No In OWASP Guide: Yes, 52 Module Name: httprint-301.lzm (download) Module Source: Binary Making Httprint module

SQLBrute web site Version: 1.0 License: Public Domain / FOSS OWASP Tool: No In OWASP Guide: No Module Name: sqlbrute-1.0.lzm (download) Module Source: source Making SQLBrute module

Spike Proxy web site Version: 1.4.8-4 License: GPL v2 OWASP Tool: No In OWASP Guide: Yes, 160 Module Name: spikeproxy-1.4.8-4.lzm (download) Module Source: source (modified and taken from here) Making Spike Proxy module

Rat Proxy web site Version: 1.53-beta License: Apache 2.0 OWASP Tool: No In OWASP Guide: No Module Name: ratproxy-1.53-beta.lzm (download) Module Source: source Making Rat Proxy module

The tools which have modules but are not yet in an ISO image. Get those modules here (Unless I happen to be making it as you're looking at this...)

Webshag web site (English translation) Version: 1.00 License: GPL v3 OWASP Tool: No In OWASP Guide: No Module Name: webshag-1.00.lzm (download) Module Source: source Making Webshag module

The next module Web Site Version: 1.0 License: GPL OWASP Tool: No In OWASP Guide: Yes. 66, 134, 243, 275, A-332 Module Name: next-tool-1.0.lzm (download) Module dependencies: jre-6u6-586-3.lzm (download) Module Source: Java Jar Making the next module