Sr No 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48

Security Audit Tools Absinthe : SQL Injection Achilles Acunetix : Web Vulnerability Scanner Aerodump Aircrack Airmon Airplay AirSnort : Wireless Network security Auditor Pro Backtrack 3 Backtrack4 Brutus : Password cracking Burp Proxy CAIN & Able : Traffic sniffing and Password cracking DumpSec : Windows security assessment Easy : Data Recovery Ethereal : Network traffic sniffing and analysis Fiddler Helix Hping JohntheRipper : Password cracking MBSA : Windows security assessment Metasploit Nessus : Network Vulnerability Assessmen Netcat : Backdoor Nikto : Web Applications security Nipper NMAP : Port scanner N-Stealth : Security Sca Ophcrack Paros Phonesweep : War dialing Rainbow : Password Crack RAT : Router and firewall benchmarking RIP query : Router security assessment SATAN SiteDigger : Google Hacking SNMP Scanner : Router and network management SNMPWalk : Router and network management Snort SoapUI Solar Winds SQL Scan : Database security assessment Stellar : Data Recovery Super Scan W Scanner Webscarab Websphinx

Free/Paid F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F

49 50 51

Wikto Winhex X-Scan

F F F

1 2 3 4 5 6 7 8 9 10 11

ACL: Audit command La Appscan : Web Systems & Applications security Core Impact Core Impact : Penetration Testing eEye Retina GFI LAN Guard ISS : Vulnerability Scanner Languard : Vulnerability Scanner Retina : Vulnerability Scanner Shadow : Security Scanner SolarWinds : Network security

P P P P P P P P P P P

Description

A tool designed for testing the security of web applications

Security-Audit - Methods 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 BS25999 BS7799 COBIT COSO ESAS ESBM ISACA ISACA/ITAF ISO 25999 ISO 27001 / 27002 ITIL NIST OCTAVE OSSTM OWASP Own SANS

5 6 7 8 9 10 11

Applications -Audited Web Servers IIS Apache Application Servers ASP.Net PHP Tomcat ASP DataBase MySQL Oracle SQL server 2005 Web Applications JBoss Websphare WebLogic ERP SAP Proprietary Security Client-Server Office Applications Software Development Tools Testing Tools

Security Audit (Technocal Skills / Certifications) 1 2 3 4 5 6 7 8 9 10 11 CISSP BS7799 ISO27001 LA CISA CISM DISA ISA ECSA LPT CEH CCNA

Domain 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 Banking Biomedical Research BPO Defense Educational Financial Services Government Health Care Healthcare Insurance IT/ITES KPO Mail & Messaging Manufacturing Manufacturing Networking PSU Retail SaaS Email Archiving Telecom