List of Information Security Audit Tools

An information security audit is an audit on the level of information security in an organization. Within the broad scope of auditing information security there are multiple types of audits, multiple objectives for different audits, etc. Most commonly the controls being audited can be categorized to technical, physical and administrative. Auditing information security covers topics from auditing the physical security of data centers to auditing the logical security of databases and highlights key components to look for and different methods for auditing these areas.
When centered on the Information technology (IT) aspects of information security, it can be seen as a part of an information technology audit. It is often then referred to as an information technology security audit or a computer security audit. However, information security encompasses much more than IT.
| S.No. |
|
Tools |
Opensource/Licensed |
| 1 |
Acunetix |
|
Licensed |
| 2 |
Nessus |
|
Licensed |
| 3 |
SE-SMSer |
|
Opensource |
| 4 |
acccheck |
|
opensource |
|
|
|
|
| 5 |
ace-voip |
|
opensource |
|
|
|
|
| 6 |
Amap |
|
opensource |
|
|
|
|
| 7 |
arp-scan |
|
opensource |
|
|
|
|
| 8 |
Automater |
|
opensource |
|
|
|
|
| 9 |
bing-ip2hosts |
|
opensource |
|
|
|
|
| 10 |
braa |
|
opensource |
|
|
|
|
| 11 |
CaseFile |
|
opensource |
|
|
|
|
| 12 |
CDPSnarf |
|
opensource |
|
|
|
|
| 13 |
cisco-torch |
opensource |
|
|
|
| 14 |
Cookie Cadger |
opensource |
|
|
|
| 15 |
copy-router-config |
opensource |
|
|
|
| 16 |
DMitry |
opensource |
|
|
|
| 17 |
dnmap |
opensource |
|
|
|
| 18 |
dnsenum |
opensource |
|
|
|
| 19 |
dnsmap |
opensource |
|
|
|
| 20 |
DNSRecon |
opensource |
|
|
|
| 21 |
dnstracer |
opensource |
|
|
|
| 22 |
dnswalk |
opensource |
|
|
|
| 23 |
DotDotPwn |
opensource |
|
|
|
| 24 |
enum4linux |
opensource |
|
|
|
| 25 |
enumIAX |
opensource |
|
|
|
| 26 |
EyeWitness |
opensource |
|
|
|
| 27 |
Faraday |
opensource |
|
|
|
| 28 |
Fierce |
opensource |
|
|
|
| 29 |
Firewalk |
opensource |
|
|
|
| 30 |
fragroute |
opensource |
|
|
|
| 31 |
fragrouter |
opensource |
|
|
|
| 32 |
Ghost Phisher |
opensource |
|
|
|
| 33 |
GoLismero |
opensource |
|
|
|
| 34 |
goofile |
opensource |
|
|
|
| 35 |
hping3 |
opensource |
|
|
|
| 36 |
ident-user-enum |
opensource |
|
|
|
| 37 |
InSpy |
opensource |
|
|
|
| 38 |
InTrace |
opensource |
|
|
|
| 39 |
iSMTP |
opensource |
|
|
|
| 40 |
lbd |
opensource |
|
|
|
| 41 |
Maltego Teeth |
opensource |
|
|
|
| 42 |
masscan |
opensource |
|
|
|
| 43 |
Metagoofil |
opensource |
|
|
|
| 44 |
Miranda |
opensource |
|
|
|
| 45 |
nbtscan-unixwiz |
opensource |
|
|
|
| 46 |
Nmap |
opensource |
|
|
|
| 47 |
ntop |
opensource |
|
|
|
| 48 |
OSRFramework |
opensource |
|
|
|
| 49 |
p0f |
opensource |
|
|
|
| 50 |
Parsero |
opensource |
|
|
|
| 51 |
Recon-ng |
opensource |
|
|
|
| 52 |
SET |
opensource |
|
|
|
| 53 |
SMBMap |
opensource |
|
|
|
| 54 |
smtp-user-enum |
opensource |
|
|
|
| 55 |
snmp-check |
opensource |
|
|
|
| 56 |
SPARTA |
opensource |
|
|
|
| 57 |
sslcaudit |
opensource |
|
|
|
| 58 |
SSLsplit |
opensource |
|
|
|
| 59 |
sslstrip |
opensource |
|
|
|
| 60 |
SSLyze |
opensource |
|
|
|
| 61 |
Sublist3r |
opensource |
|
|
|
| 62 |
THC-IPV6 |
opensource |
|
|
|
| 63 |
theHarvester |
opensource |
|
|
|
| 64 |
TLSSLed |
opensource |
|
|
|
| 65 |
twofi |
opensource |
|
|
|
| 66 |
URLCrazy |
opensource |
|
|
|
| 67 |
Wireshark |
opensource |
|
|
|
| 68 |
WOL-E |
opensource |
|
|
|
| 69 |
Xplico |
opensource |
|
|
|
| 70 |
BBQSQL |
opensource |
|
|
|
| 71 |
BED |
opensource |
|
|
|
| 72 |
cisco-auditing-tool |
opensource |
|
|
|
| 73 |
cisco-global-exploiter |
opensource |
|
|
|
| 74 |
cisco-ocs |
opensource |
|
|
|
| 75 |
cisco-torch |
opensource |
|
|
|
| 76 |
copy-router-config |
opensource |
|
|
|
| 77 |
DBPwAudit |
opensource |
|
|
|
| 78 |
Doona |
opensource |
|
|
|
| 79 |
DotDotPwn |
opensource |
|
|
|
| 80 |
HexorBase |
opensource |
|
|
|
| 81 |
Inguma |
opensource |
|
|
|
| 82 |
jSQL |
opensource |
|
|
|
| 83 |
Lynis |
opensource |
|
|
|
| 84 |
Nmap |
opensource |
|
|
|
| 85 |
ohrwurm |
opensource |
|
|
|
| 86 |
openvas |
opensource |
|
|
|
| 87 |
Oscanner |
opensource |
|
|
|
| 88 |
Powerfuzzer |
opensource |
|
|
|
| 89 |
sfuzz |
opensource |
|
|
|
| 90 |
SidGuesser |
opensource |
|
|
|
| 91 |
SIPArmyKnife |
opensource |
|
|
|
| 92 |
sqlmap |
opensource |
|
|
|
| 93 |
Sqlninja |
opensource |
|
|
|
| 94 |
sqlsus |
opensource |
|
|
|
| 95 |
tnscmd10g |
opensource |
|
|
|
| 96 |
unix-privesc-check |
opensource |
|
|
|
| 97 |
Yersinia |
opensource |
|
|
|
| 98 |
Armitage |
opensource |
|
|
|
| 99 |
Backdoor Factory |
opensource |
|
|
|
| 100 |
BeEF |
opensource |
|
|
|
| 101 |
Commix |
opensource |
|
|
|
| 102 |
crackle |
opensource |
|
|
|
| 103 |
exploitdb |
opensource |
|
|
|
| 104 |
jboss-autopwn |
opensource |
|
|
|
| 105 |
Linux Exploit Suggester |
opensource |
|
|
|
| 106 |
Maltego Teeth |
opensource |
|
|
|
| 107 |
Metasploit Framework |
opensource |
|
|
|
| 108 |
MSFPC |
opensource |
|
|
|
| 109 |
RouterSploit |
opensource |
|
|
|
| 110 |
Airbase-ng |
opensource |
|
|
|
| 111 |
Aircrack-ng |
opensource |
|
|
|
| 112 |
Airdecap-ng and Airdecloak-ng |
opensource |
|
|
|
| 113 |
Aireplay-ng |
opensource |
|
|
|
| 114 |
Airmon-ng |
opensource |
|
|
|
| 115 |
Airodump-ng |
opensource |
|
|
|
| 116 |
airodump-ng-oui-update |
opensource |
|
|
|
| 117 |
Airolib-ng |
opensource |
|
|
|
| 118 |
Airserv-ng |
opensource |
|
|
|
| 119 |
Airtun-ng |
opensource |
|
|
|
| 120 |
Asleap |
opensource |
|
|
|
| 121 |
Besside-ng |
opensource |
|
|
|
| 122 |
Bluelog |
opensource |
|
|
|
| 123 |
BlueMaho |
opensource |
|
|
|
| 124 |
Bluepot |
opensource |
|
|
|
| 125 |
BlueRanger |
opensource |
|
|
|
| 126 |
Bluesnarfer |
opensource |
|
|
|
| 127 |
Bully |
opensource |
|
|
|
| 128 |
coWPAtty |
opensource |
|
|
|
| 129 |
crackle |
opensource |
|
|
|
| 130 |
eapmd5pass |
opensource |
|
|
|
| 131 |
Easside-ng |
opensource |
|
|
|
| 132 |
Fern Wifi Cracker |
opensource |
|
|
|
| 133 |
FreeRADIUS-WPE |
opensource |
|
|
|
| 134 |
Ghost Phisher |
opensource |
|
|
|
| 135 |
GISKismet |
opensource |
|
|
|
| 136 |
Gqrx |
opensource |
|
|
|
| 137 |
gr-scan |
opensource |
|
|
|
| 138 |
hostapd-wpe |
opensource |
|
|
|
| 139 |
ivstools |
opensource |
|
|
|
| 140 |
kalibrate-rtl |
opensource |
|
|
|
| 141 |
KillerBee |
opensource |
|
|
|
| 142 |
Kismet |
opensource |
|
|
|
| 143 |
makeivs-ng |
opensource |
|
|
|
| 144 |
mdk3 |
opensource |
|
|
|
| 145 |
mfcuk |
opensource |
|
|
|
| 146 |
mfoc |
opensource |
|
|
|
| 147 |
mfterm |
opensource |
|
|
|
| 148 |
Multimon-NG |
opensource |
|
|
|
| 149 |
Packetforge-ng |
opensource |
|
|
|
| 150 |
PixieWPS |
opensource |
|
|
|
| 151 |
Pyrit |
opensource |
|
|
|
| 152 |
Reaver |
opensource |
|
|
|
| 153 |
redfang |
opensource |
|
|
|
| 154 |
RTLSDR Scanner |
opensource |
|
|
|
| 155 |
Spooftooph |
opensource |
|
|
|
| 156 |
Tkiptun-ng |
opensource |
|
|
|
| 157 |
Wesside-ng |
opensource |
|
|
|
| 158 |
Wifi Honey |
opensource |
|
|
|
| 159 |
wifiphisher |
opensource |
|
|
|
| 160 |
Wifitap |
opensource |
|
|
|
| 161 |
Wifite |
opensource |
|
|
|
| 162 |
wpaclean |
opensource |
|
|
|
| 163 |
apache-users |
opensource |
|
|
|
| 164 |
Arachni |
opensource |
|
|
|
| 165 |
BBQSQL |
opensource |
|
|
|
| 166 |
BlindElephant |
opensource |
|
|
|
| 167 |
CutyCapt |
opensource |
|
|
|
| 168 |
DAVTest |
opensource |
|
|
|
| 169 |
deblaze |
opensource |
|
|
|
| 170 |
DIRB |
opensource |
|
|
|
| 171 |
DirBuster |
opensource |
|
|
|
| 172 |
fimap |
opensource |
|
|
|
| 173 |
FunkLoad |
opensource |
|
|
|
| 174 |
Gobuster |
opensource |
|
|
|
| 175 |
Grabber |
opensource |
|
|
|
| 176 |
hURL |
opensource |
|
|
|
| 177 |
jboss-autopwn |
opensource |
|
|
|
| 178 |
joomscan |
opensource |
|
|
|
| 179 |
jSQL |
opensource |
|
|
|
| 180 |
Maltego Teeth |
opensource |
|
|
|
| 181 |
PadBuster |
opensource |
|
|
|
| 182 |
Paros |
opensource |
|
|
|
| 183 |
Parsero |
opensource |
|
|
|
| 184 |
plecost |
opensource |
|
|
|
| 185 |
Powerfuzzer |
opensource |
|
|
|
| 186 |
ProxyStrike |
opensource |
|
|
|
| 187 |
Recon-ng |
opensource |
|
|
|
| 188 |
Skipfish |
opensource |
|
|
|
| 189 |
sqlmap |
opensource |
|
|
|
| 190 |
Sqlninja |
opensource |
|
|
|
| 191 |
sqlsus |
opensource |
|
|
|
| 192 |
ua-tester |
opensource |
|
|
|
| 193 |
Uniscan |
opensource |
|
|
|
| 194 |
Vega |
opensource |
|
|
|
| 195 |
w3af |
opensource |
|
|
|
| 196 |
WebScarab |
opensource |
|
|
|
| 197 |
Webshag |
opensource |
|
|
|
| 198 |
WebSlayer |
opensource |
|
|
|
| 199 |
WebSploit |
opensource |
|
|
|
| 200 |
Wfuzz |
opensource |
|
|
|
| 201 |
WPScan |
opensource |
|
|
|
| 202 |
XSSer |
opensource |
|
|
|
| 203 |
zaproxy |
opensource |
|
|
|
(Vulnerability Assessment & Penetration Testing) acccheck ace-voip Acunetix Airbase-ng Aircrack-ng Airdecap-ng and Airdecloak-ng Aireplay-ng Airmon-ng Airodump-ng airodump-ng-oui-update Airolib-ng Airserv-ng Airtun-ng Amap apache-users Application VAPT Arachni Armitage arp-scan Asleap Automater Backdoor Factory BBQSQL BED BeEF Besside-ng Big Data Security Audit & Assessment bing-ip2hosts BlindElephant Bluelog BlueMaho Bluepot BlueRanger Bluesnarfer braa Bully CaseFile CDPSnarf cisco-auditing-tool cisco-global-exploiter cisco-ocs cisco-torch Cloud Applications VAPT Commix Compliance audits (ISO 27001 Cookie Cadger copy-router-config coWPAtty crackle CutyCapt Cyber forensic Analysis Data Center Security Audit & Assessment Database Security Audit & Assessment DAVTest DBPwAudit deblaze Device Security Audit & Assessment DIRB DirBuster DMitry dnmap dnsenum dnsmap DNSRecon dnstracer dnswalk Doona DotDotPwn eapmd5pass Easside-ng Electronic Security Audit enum4linux enumIAX ERP Security Audit & Assessment etc.) exploitdb EyeWitness Faraday Fern Wifi Cracker Fierce fimap Firewalk fragroute fragrouter FreeRADIUS-WPE FunkLoad Ghost Phisher GISKismet Gobuster GoLismero goofile Gqrx gr-scan Grabber HexorBase Host Security Assessments hostapd-wpe hping3 hURL ident-user-enum Infrastructure Security Audit Inguma InSpy InTrace IOT Security Testing iSMTP ivstools jboss-autopwn joomscan jSQL kalibrate-rtl KillerBee Kismet lbd Linux Exploit Suggester Lynis makeivs-ng Maltego Teeth Managed Security Service masscan mdk3 Metagoofil Metasploit Framework mfcuk mfoc mfterm Miranda Mobile Application VAPT MSFPC Multimon-NG nbtscan-unixwiz Nessus Network security audit Network VAPT Nmap ntop ohrwurm openvas Oscanner OSRFramework p0f Packetforge-ng PadBuster Paros Parsero PCI PixieWPS plecost Powerfuzzer ProxyStrike Pyrit Reaver Recon-ng redfang Risk Assessments RouterSploit RTLSDR Scanner SCADA VAPT SE-SMSer Secure Code Review Security Architecture Review SET sfuzz SidGuesser SIPArmyKnife Skipfish SMBMap smtp-user-enum snmp-check SOC - Security Operation Center Audit & Assessment Social Engineering Test SPARTA Spooftooph sqlmap Sqlninja sqlsus sslcaudit SSLsplit sslstrip SSLyze Sublist3r Telecom Security Audit & Assessment THC-IPV6 theHarvester Threat Assessment Tkiptun-ng TLSSLed tnscmd10g twofi ua-tester Uniscan unix-privesc-check URLCrazy Vega w3af Web-application security audit WebScarab Webshag WebSlayer WebSploit Wesside-ng Wfuzz Wifi Honey wifiphisher Wifitap Wifite Wireless security audit Wireshark WOL-E wpaclean WPScan Xplico XSSer Yersinia zaproxy 2019-08-01
Tagged with: (Vulnerability Assessment & Penetration Testing), acccheck, ace-voip, Acunetix, Airbase-ng, Aircrack-ng, Airdecap-ng and Airdecloak-ng, Aireplay-ng, Airmon-ng, Airodump-ng, airodump-ng-oui-update, Airolib-ng, Airserv-ng, Airtun-ng, Amap, apache-users, Application VAPT, Arachni, Armitage, arp-scan, Asleap, Automater, Backdoor Factory, BBQSQL, BED, BeEF, Besside-ng, Big Data Security Audit & Assessment, bing-ip2hosts, BlindElephant, Bluelog, BlueMaho, Bluepot, BlueRanger, Bluesnarfer, braa, Bully, CaseFile, CDPSnarf, cisco-auditing-tool, cisco-global-exploiter, cisco-ocs, cisco-torch, Cloud Applications VAPT, Commix, Compliance audits (ISO 27001, Cookie Cadger, copy-router-config, coWPAtty, crackle, CutyCapt, Cyber forensic Analysis, Data Center Security Audit & Assessment, Database Security Audit & Assessment, DAVTest, DBPwAudit, deblaze, Device Security Audit & Assessment, DIRB, DirBuster, DMitry, dnmap, dnsenum, dnsmap, DNSRecon, dnstracer, dnswalk, Doona, DotDotPwn, eapmd5pass, Easside-ng, Electronic Security Audit, enum4linux, enumIAX, ERP Security Audit & Assessment, etc.), exploitdb, EyeWitness, Faraday, Fern Wifi Cracker, Fierce, fimap, Firewalk, fragroute, fragrouter, FreeRADIUS-WPE, FunkLoad, Ghost Phisher, GISKismet, Gobuster, GoLismero, goofile, Gqrx, gr-scan, Grabber, HexorBase, Host Security Assessments, hostapd-wpe, hping3, hURL, ident-user-enum, Infrastructure Security Audit, Inguma, InSpy, InTrace, IOT Security Testing, iSMTP, ivstools, jboss-autopwn, joomscan, jSQL, kalibrate-rtl, KillerBee, Kismet, lbd, Linux Exploit Suggester, Lynis, makeivs-ng, Maltego Teeth, Managed Security Service, masscan, mdk3, Metagoofil, Metasploit Framework, mfcuk, mfoc, mfterm, Miranda, Mobile Application VAPT, MSFPC, Multimon-NG, nbtscan-unixwiz, Nessus, Network security audit, Network VAPT, Nmap, ntop, ohrwurm, openvas, Oscanner, OSRFramework, p0f, Packetforge-ng, PadBuster, Paros, Parsero, PCI, PixieWPS, plecost, Powerfuzzer, ProxyStrike, Pyrit, Reaver, Recon-ng, redfang, Risk Assessments, RouterSploit, RTLSDR Scanner, SCADA VAPT, SE-SMSer, Secure Code Review, Security Architecture Review, SET, sfuzz, SidGuesser, SIPArmyKnife, Skipfish, SMBMap, smtp-user-enum, snmp-check, SOC - Security Operation Center Audit & Assessment, Social Engineering Test, SPARTA, Spooftooph, sqlmap, Sqlninja, sqlsus, sslcaudit, SSLsplit, sslstrip, SSLyze, Sublist3r, Telecom Security Audit & Assessment, THC-IPV6, theHarvester, Threat Assessment, Tkiptun-ng, TLSSLed, tnscmd10g, twofi, ua-tester, Uniscan, unix-privesc-check, URLCrazy, Vega, w3af, Web-application security audit, WebScarab, Webshag, WebSlayer, WebSploit, Wesside-ng, Wfuzz, Wifi Honey, wifiphisher, Wifitap, Wifite, Wireless security audit, Wireshark, WOL-E, wpaclean, WPScan, Xplico, XSSer, Yersinia, zaproxy