Tools, freely shipped.

Overview

• Performs 30 checks. Overview image.
• Works on https, pop3s, imaps, smtps, rdp, ldaps.
• Flexible input: IP/host, IP range, file with IP/host list, NMap XML.
• Integrates multiple tools to gather information.

Advantages

• Cipher issues: SSLv2 support, weak ciphers.
• Certificate issues: self-signed, wildcard, expiration, weak cryptography.
• Configuration: CRIME, BEAST, renegotiation, resumption.
• Web server: HSTS & security headers, Heartbleed, banners, cache settings.
• Validity-only mode for scanning huge ranges quickly.
• Internal timer adapts to server response, professional reporting with mitigations.

Sample Reports

• Sample audit report
• Sample validity report

Overview

• Generates reports for various issues using a curated repository.
• Standardised reports across multiple projects / scans.
• View, add, modify, delete issues; search by title or full text.
• Select specific issues and generate a focused report.
• Multi-platform (C++).
• Imports from Nessus, Burp, OWASP ZAP, Nipper, Surecheck, NMap.
• Imports XML/database files into the current issue DB.
• Offline library: CVE, CWE, OWASP, RFC, CAPEC, SANS (in development).
• Exports to HTML, TXT, XML, PDF, ODT/ODS.
• Filtering on import & export.

Overview

• Automates various NMap scans and analyses all NMap results in a directory.
• Merges results to generate a report of open ports identified across scans.
• Multi-platform (C++).
• Flexible scope import — manual, file/list or range.
• Analysis & report generation for previous/past scans.
• HTML (with tables) and CSV output.

Overview

• Multi-platform.
• Graphical interface with almost all options exposed.
• Checks for incompatible options.
• Surfaces most possibilities for every available option.
• Options from the latest development build.
• References for studying SQL injection & mitigation.
• Can generate the sqlmap command for use elsewhere (SSH/CLI).

Acknowledgements

• Many thanks to David Wood & Daniele Costa @ NCC for valuable feedback.
• Special thanks to Bernardo Damele for his detailed review.

More screenshots

• Tab 1 — Target
• Tab 2 — Scan Settings
• Tab 3 — Enumeration
• Tab 4 — Output
• Tab 5 — Settings

Advantages

• Execute a command on multiple entities at the same time — saves time.
• Preset commands for various tasks (see documentation).
• Optional sequential execution.
• All output saved as text files in a folder; unique names prevent overwrite.
• One-click navigation between entity outputs via HTML index.

Roadmap

• More pre-built commands.
• Multiple-command selection (v3.0).
• Command-line version for scripting (cmdconcute).
• Scheduled execution.

More screenshots

• Concute2 main interface
• Sample pre-built commands