Full disclosure: I work for Rapid7.

Check out Metasploit Community Edition here:
http://www.rapid7.com/products/metasploit-community.jsp

There is a Community version of Nexpose (vulnerability management) too:
http://www.rapid7.com/products/nexpose-community-edition.jsp

Sheldon Malm

Looking to connect with other information security professionals? Join the Rapid7 Community: engage in discussions, watch videos, and interact with the security community at https://community.rapid7.com

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Rajiv D
Sent: Monday, June 11, 2012 12:05 PM
To: Alonso Caballero Quezada / ReYDeS; listbounce (at) securityfocus (dot) com [email concealed]; security-basics (at) securityfocus (dot) com [email concealed]
Subject: Re: Free Penetration testing toolset

Hi ,

I have worked on all these tools but these are specialised tools designed for specific purpopses. But what I need is automated toolset. For which I need not provide the parameters everytime.
-- Rajiv

-----Original Message-----
From: "Alonso Caballero Quezada / ReYDeS" <reydes (at) gmail (dot) com [email concealed]>
Sender: listbounce (at) securityfocus (dot) com [email concealed]
Date: Mon, 11 Jun 2012 10:23:19
To: <security-basics (at) securityfocus (dot) com [email concealed]>
Subject: Re: Free Penetration testing toolset

Saludos:

> Hi Friends,
>
> I wanted to know if there are some free automated toolsets comparable to core impact and others.
>

I don' know free tools as core impact, but there are good tools as Metasploit Framework, Nexpose, w3af.

Did you evaluate this tools?

Atte:

--
Alonso Eduardo Caballero Quezada aka ReYDeS - ReYDeS (at) gmail (dot) com [email concealed] Brainbench Certified Network Security & Computer Forensics (US) www.npros.com.pe  -  www.ReYDeS.com  -  www.noticiastrujillo.pe

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

This electronic message contains information which may be confidential or privileged. The information is intended for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by e-mail at (postmaster (at) rapid7 (dot) com [email concealed]) immediately.

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]