Pen Testing .

L.Jenkins

I was wondering, what are the best applications to run on a server and pen test against? I have no issue setting up web and sql servers and php on my machine. I was also wondering what are the best tools to use to find vulnerabilities, crack them as a proof of concept then patch any holes?

At the moment I'm using simple browser extensions in fire fox such as xss me, sql injection me and hackbar to name but a few. I also use wireshark, nmap and kismet for network testing and sniffing.

Kinet1c

Check out Kali Linux, tools galore

L.Jenkins

Grabbing a copy of the distro now.

harney

Using Kali you could save yourself configuring servers and point your self at the following VM's:

Metasploitable
http://www.offensive-security.com/metasploit-unleashed/Main_Page

Web Goat
https://code.google.com/p/webgoat/

They are designed vulnerable to test yourself.

Blowfish

harney wrote: »

Using Kali you could save yourself configuring servers and point your self at the following VM's:

Metasploitable
http://www.offensive-security.com/metasploit-unleashed/Main_Page

Web Goat
https://code.google.com/p/webgoat/

They are designed vulnerable to test yourself.

there's also vulnhub for a whole load more intentionally vulnerable VM's to play around with.

Stuxnet

+1 for Kali & Metasploitable, lots of YT vids on both.

BrianDug

De-ICE VM's are also worth keeping in mind
http://hackingdojo.com/pentest-media/

tolosenc

You probably want an intercepting proxy for web/app testing. We use Burp Pro in work, but the free version and also ZAP are very good too.

Khannie

tolosenc wrote: »

You probably want an intercepting proxy for web/app testing. We use Burp Pro in work, but the free version and also ZAP are very good too.

I prefer ZAP myself (but have both). I'm not slagging Burp, just prefer ZAP and analysis that we did with both when running through our acceptance test suite indicated that they were about as good as each other.

syklops

Khannie wrote: »

I prefer ZAP myself (but have both). I'm not slagging Burp, just prefer ZAP and analysis that we did with both when running through our acceptance test suite indicated that they were about as good as each other.

I chain Burp and Zap together and sometimes, Zap finds stuff burp didnt.

Been playing a lot with w3af recently and really like it. It may become my new go-to attack tool. Its written in python so extending it becomes very easy, compared to the other 2 which are Java based.

Khannie

syklops wrote: »

Zap finds stuff burp didnt

Yeah, I found that too. It's good to have both.