FREE Tools Collection
Welcome to our collection of Free Tools for you to use. Some of these were developed by Infosec Island as simple checks for common security problems, others have been graciously donated by our Tradwinds © Partners, and others are just so cool we want you to have them!
Island Tools
A collection of free, web-based tools for checking on some basic security issues. Some of these tools are useful in identifying vulnerabilities within your network infrastructure as a result of 3rd party vendors.
Domain Hostname Enumerator
This tool first checks a domain's DNS servers for Anonymous Zone Transfer (AXFR), then scours the Internet looking for cached hostnames that may belong to the queried domain. Complete with WHOIS lookups on all discovered hostnames.
Email Address Enumerator
This tool scours the Internet searching for email addresses associated with the queried domain name. Attackers can leverage known email addresses for your domain to craft brute-force attacks and social engineering scams.
DNS Server Configuration Checker
This tool provides a basic check against a given domain name to determine if the DNS servers are vulnerable to Anonymous Zone Transfer (AXFR) or Recursion -- both of which have been shown to present security risks.
Partner Tools
Webserver SSL Server Configuration Check
This free tool from Qualys (formerly Ivan Ristic's SSL Labs) allows you to test the SSL configuration of any public web server.
Netsparker Community Edition
This free tool from Mavituna Security is one of the best free Web Application Security scanners we've seen in...well EVER!. Try out the Community Edition and get hooked.
Some Upcoming Tools:
- Web Server Fingerprinter
- Web Application Fingerprinter
- Port Scanner
- Passive Data Leakage Tool
Please feel free to suggest new tool ideas, or recommend existing tools that we can integrate into the site!
Comments
Post a Comment