Nmap
The Nmap project tries to defy the stereotype of some open source software being poorly documented by providing a comprehensive set of documentation for installing and using Nmap. This page links to official Insecure.Org documentation and generous contributions from other parties. Nmap Network Scanning is the official guide to the Nmap Security Scanner, a free and open-source utility used by millions of people for network discovery, administration, and security auditing. From explaining port scanning basics for novices to detailing low-level packet crafting methods used by advanced hackers, this book suits all levels of security and networking professionals. A 42-page reference guide documents every Nmap feature and option, while the rest of the book demonstrates how to apply those features to quickly solve real-world tasks. Examples and diagrams show actual communication on the wire.
Learn more
Crashtest Security
Crashtest Security is a SaaS-based security vulnerability scanner allowing agile development teams to ensure continuous security before even hitting Production.
Our state-of-the-art dynamic application security testing (DAST) solution integrates seamlessly with your dev environment and protects multi-page and JavaScript apps, as well as microservices and APIs.
Set up Crashtest Security Suite in minutes, get advanced crawling options, and automate your security. Whether you want to see vulnerabilities within the OWASP Top 10 or you want to go for deep scans, Crashtest Security is here to help you stay on top of your security and protect your code and customers.
Learn more
Saner CVEM
SecPod Saner CVEM is a continuous vulnerability and exposure management platform designed to help organizations discover, prioritize, and remediate risks before attackers can exploit them. The platform unifies asset discovery, vulnerability detection, compliance management, endpoint management, posture anomaly detection, patch management, exposure visibility, and risk prioritization in one workflow. Saner CVEM uses AI-powered asset visibility, machine-learning anomaly detection, and intelligent prioritization to identify both known vulnerabilities and exposure gaps that traditional scanners may miss. It evaluates risk using factors such as EPSS, CISA KEV status, SSVC, asset criticality, business context, MITRE ATT&CK mapping, and CWE mapping. The platform also supports integrated patch deployment, posture improvement, compliance automation, and continuous scanning across Windows, Linux, macOS, AIX, servers, endpoints, and third-party applications.
Learn more
Scapy
Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more. It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks, or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, tshark, p0f, etc.). It also performs very well at a lot of other specific tasks that most other tools can’t handle, like sending invalid frames, injecting your own 802.11 frames, combining technics (VLAN hopping+ARP cache poisoning, VOIP decoding on WEP encrypted channel), etc. Scapy runs natively on Linux, Windows, OSX, and on most Unixes with libpcap. The same code base now runs natively on both Python 2 and Python 3. Scapy development uses the Git version control system. Scapy reference repository is hosted on GitHub.
Learn more