
An information security audit is an audit on the level of information security in an organization. Within the broad scope of auditing information security there are multiple types of audits, multiple objectives for different audits, etc. Most commonly the controls being audited can be categorized to technical, physical and administrative. Auditing information security covers topics from auditing the physical security of data centers to auditing the logical security of databases and highlights key components to look for and different methods for auditing these areas.
When centered on the Information technology (IT) aspects of information security, it can be seen as a part of an information technology audit. It is often then referred to as an information technology security audit or a computer security audit. However, information security encompasses much more than IT.
| S.No. |
|
Tools |
Opensource/Licensed |
| 1 |
Acunetix |
|
Licensed |
| 2 |
Nessus |
|
Licensed |
| 3 |
SE-SMSer |
|
Opensource |
| 4 |
acccheck |
|
opensource |
|
|
|
|
| 5 |
ace-voip |
|
opensource |
|
|
|
|
| 6 |
Amap |
|
opensource |
|
|
|
|
| 7 |
arp-scan |
|
opensource |
|
|
|
|
| 8 |
Automater |
|
opensource |
|
|
|
|
| 9 |
bing-ip2hosts |
|
opensource |
|
|
|
|
| 10 |
braa |
|
opensource |
|
|
|
|
| 11 |
CaseFile |
|
opensource |
|
|
|
|
| 12 |
CDPSnarf |
|
opensource |
|
|
|
|
| 13 |
cisco-torch |
opensource |
|
|
|
| 14 |
Cookie Cadger |
opensource |
|
|
|
| 15 |
copy-router-config |
opensource |
|
|
|
| 16 |
DMitry |
opensource |
|
|
|
| 17 |
dnmap |
opensource |
|
|
|
| 18 |
dnsenum |
opensource |
|
|
|
| 19 |
dnsmap |
opensource |
|
|
|
| 20 |
DNSRecon |
opensource |
|
|
|
| 21 |
dnstracer |
opensource |
|
|
|
| 22 |
dnswalk |
opensource |
|
|
|
| 23 |
DotDotPwn |
opensource |
|
|
|
| 24 |
enum4linux |
opensource |
|
|
|
| 25 |
enumIAX |
opensource |
|
|
|
| 26 |
EyeWitness |
opensource |
|
|
|
| 27 |
Faraday |
opensource |
|
|
|
| 28 |
Fierce |
opensource |
|
|
|
| 29 |
Firewalk |
opensource |
|
|
|
| 30 |
fragroute |
opensource |
|
|
|
| 31 |
fragrouter |
opensource |
|
|
|
| 32 |
Ghost Phisher |
opensource |
|
|
|
| 33 |
GoLismero |
opensource |
|
|
|
| 34 |
goofile |
opensource |
|
|
|
| 35 |
hping3 |
opensource |
|
|
|
| 36 |
ident-user-enum |
opensource |
|
|
|
| 37 |
InSpy |
opensource |
|
|
|
| 38 |
InTrace |
opensource |
|
|
|
| 39 |
iSMTP |
opensource |
|
|
|
| 40 |
lbd |
opensource |
|
|
|
| 41 |
Maltego Teeth |
opensource |
|
|
|
| 42 |
masscan |
opensource |
|
|
|
| 43 |
Metagoofil |
opensource |
|
|
|
| 44 |
Miranda |
opensource |
|
|
|
| 45 |
nbtscan-unixwiz |
opensource |
|
|
|
| 46 |
Nmap |
opensource |
|
|
|
| 47 |
ntop |
opensource |
|
|
|
| 48 |
OSRFramework |
opensource |
|
|
|
| 49 |
p0f |
opensource |
|
|
|
| 50 |
Parsero |
opensource |
|
|
|
| 51 |
Recon-ng |
opensource |
|
|
|
| 52 |
SET |
opensource |
|
|
|
| 53 |
SMBMap |
opensource |
|
|
|
| 54 |
smtp-user-enum |
opensource |
|
|
|
| 55 |
snmp-check |
opensource |
|
|
|
| 56 |
SPARTA |
opensource |
|
|
|
| 57 |
sslcaudit |
opensource |
|
|
|
| 58 |
SSLsplit |
opensource |
|
|
|
| 59 |
sslstrip |
opensource |
|
|
|
| 60 |
SSLyze |
opensource |
|
|
|
| 61 |
Sublist3r |
opensource |
|
|
|
| 62 |
THC-IPV6 |
opensource |
|
|
|
| 63 |
theHarvester |
opensource |
|
|
|
| 64 |
TLSSLed |
opensource |
|
|
|
| 65 |
twofi |
opensource |
|
|
|
| 66 |
URLCrazy |
opensource |
|
|
|
| 67 |
Wireshark |
opensource |
|
|
|
| 68 |
WOL-E |
opensource |
|
|
|
| 69 |
Xplico |
opensource |
|
|
|
| 70 |
BBQSQL |
opensource |
|
|
|
| 71 |
BED |
opensource |
|
|
|
| 72 |
cisco-auditing-tool |
opensource |
|
|
|
| 73 |
cisco-global-exploiter |
opensource |
|
|
|
| 74 |
cisco-ocs |
opensource |
|
|
|
| 75 |
cisco-torch |
opensource |
|
|
|
| 76 |
copy-router-config |
opensource |
|
|
|
| 77 |
DBPwAudit |
opensource |
|
|
|
| 78 |
Doona |
opensource |
|
|
|
| 79 |
DotDotPwn |
opensource |
|
|
|
| 80 |
HexorBase |
opensource |
|
|
|
| 81 |
Inguma |
opensource |
|
|
|
| 82 |
jSQL |
opensource |
|
|
|
| 83 |
Lynis |
opensource |
|
|
|
| 84 |
Nmap |
opensource |
|
|
|
| 85 |
ohrwurm |
opensource |
|
|
|
| 86 |
openvas |
opensource |
|
|
|
| 87 |
Oscanner |
opensource |
|
|
|
| 88 |
Powerfuzzer |
opensource |
|
|
|
| 89 |
sfuzz |
opensource |
|
|
|
| 90 |
SidGuesser |
opensource |
|
|
|
| 91 |
SIPArmyKnife |
opensource |
|
|
|
| 92 |
sqlmap |
opensource |
|
|
|
| 93 |
Sqlninja |
opensource |
|
|
|
| 94 |
sqlsus |
opensource |
|
|
|
| 95 |
tnscmd10g |
opensource |
|
|
|
| 96 |
unix-privesc-check |
opensource |
|
|
|
| 97 |
Yersinia |
opensource |
|
|
|
| 98 |
Armitage |
opensource |
|
|
|
| 99 |
Backdoor Factory |
opensource |
|
|
|
| 100 |
BeEF |
opensource |
|
|
|
| 101 |
Commix |
opensource |
|
|
|
| 102 |
crackle |
opensource |
|
|
|
| 103 |
exploitdb |
opensource |
|
|
|
| 104 |
jboss-autopwn |
opensource |
|
|
|
| 105 |
Linux Exploit Suggester |
opensource |
|
|
|
| 106 |
Maltego Teeth |
opensource |
|
|
|
| 107 |
Metasploit Framework |
opensource |
|
|
|
| 108 |
MSFPC |
opensource |
|
|
|
| 109 |
RouterSploit |
opensource |
|
|
|
| 110 |
Airbase-ng |
opensource |
|
|
|
| 111 |
Aircrack-ng |
opensource |
|
|
|
| 112 |
Airdecap-ng and Airdecloak-ng |
opensource |
|
|
|
| 113 |
Aireplay-ng |
opensource |
|
|
|
| 114 |
Airmon-ng |
opensource |
|
|
|
| 115 |
Airodump-ng |
opensource |
|
|
|
| 116 |
airodump-ng-oui-update |
opensource |
|
|
|
| 117 |
Airolib-ng |
opensource |
|
|
|
| 118 |
Airserv-ng |
opensource |
|
|
|
| 119 |
Airtun-ng |
opensource |
|
|
|
| 120 |
Asleap |
opensource |
|
|
|
| 121 |
Besside-ng |
opensource |
|
|
|
| 122 |
Bluelog |
opensource |
|
|
|
| 123 |
BlueMaho |
opensource |
|
|
|
| 124 |
Bluepot |
opensource |
|
|
|
| 125 |
BlueRanger |
opensource |
|
|
|
| 126 |
Bluesnarfer |
opensource |
|
|
|
| 127 |
Bully |
opensource |
|
|
|
| 128 |
coWPAtty |
opensource |
|
|
|
| 129 |
crackle |
opensource |
|
|
|
| 130 |
eapmd5pass |
opensource |
|
|
|
| 131 |
Easside-ng |
opensource |
|
|
|
| 132 |
Fern Wifi Cracker |
opensource |
|
|
|
| 133 |
FreeRADIUS-WPE |
opensource |
|
|
|
| 134 |
Ghost Phisher |
opensource |
|
|
|
| 135 |
GISKismet |
opensource |
|
|
|
| 136 |
Gqrx |
opensource |
|
|
|
| 137 |
gr-scan |
opensource |
|
|
|
| 138 |
hostapd-wpe |
opensource |
|
|
|
| 139 |
ivstools |
opensource |
|
|
|
| 140 |
kalibrate-rtl |
opensource |
|
|
|
| 141 |
KillerBee |
opensource |
|
|
|
| 142 |
Kismet |
opensource |
|
|
|
| 143 |
makeivs-ng |
opensource |
|
|
|
| 144 |
mdk3 |
opensource |
|
|
|
| 145 |
mfcuk |
opensource |
|
|
|
| 146 |
mfoc |
opensource |
|
|
|
| 147 |
mfterm |
opensource |
|
|
|
| 148 |
Multimon-NG |
opensource |
|
|
|
| 149 |
Packetforge-ng |
opensource |
|
|
|
| 150 |
PixieWPS |
opensource |
|
|
|
| 151 |
Pyrit |
opensource |
|
|
|
| 152 |
Reaver |
opensource |
|
|
|
| 153 |
redfang |
opensource |
|
|
|
| 154 |
RTLSDR Scanner |
opensource |
|
|
|
| 155 |
Spooftooph |
opensource |
|
|
|
| 156 |
Tkiptun-ng |
opensource |
|
|
|
| 157 |
Wesside-ng |
opensource |
|
|
|
| 158 |
Wifi Honey |
opensource |
|
|
|
| 159 |
wifiphisher |
opensource |
|
|
|
| 160 |
Wifitap |
opensource |
|
|
|
| 161 |
Wifite |
opensource |
|
|
|
| 162 |
wpaclean |
opensource |
|
|
|
| 163 |
apache-users |
opensource |
|
|
|
| 164 |
Arachni |
opensource |
|
|
|
| 165 |
BBQSQL |
opensource |
|
|
|
| 166 |
BlindElephant |
opensource |
|
|
|
| 167 |
CutyCapt |
opensource |
|
|
|
| 168 |
DAVTest |
opensource |
|
|
|
| 169 |
deblaze |
opensource |
|
|
|
| 170 |
DIRB |
opensource |
|
|
|
| 171 |
DirBuster |
opensource |
|
|
|
| 172 |
fimap |
opensource |
|
|
|
| 173 |
FunkLoad |
opensource |
|
|
|
| 174 |
Gobuster |
opensource |
|
|
|
| 175 |
Grabber |
opensource |
|
|
|
| 176 |
hURL |
opensource |
|
|
|
| 177 |
jboss-autopwn |
opensource |
|
|
|
| 178 |
joomscan |
opensource |
|
|
|
| 179 |
jSQL |
opensource |
|
|
|
| 180 |
Maltego Teeth |
opensource |
|
|
|
| 181 |
PadBuster |
opensource |
|
|
|
| 182 |
Paros |
opensource |
|
|
|
| 183 |
Parsero |
opensource |
|
|
|
| 184 |
plecost |
opensource |
|
|
|
| 185 |
Powerfuzzer |
opensource |
|
|
|
| 186 |
ProxyStrike |
opensource |
|
|
|
| 187 |
Recon-ng |
opensource |
|
|
|
| 188 |
Skipfish |
opensource |
|
|
|
| 189 |
sqlmap |
opensource |
|
|
|
| 190 |
Sqlninja |
opensource |
|
|
|
| 191 |
sqlsus |
opensource |
|
|
|
| 192 |
ua-tester |
opensource |
|
|
|
| 193 |
Uniscan |
opensource |
|
|
|
| 194 |
Vega |
opensource |
|
|
|
| 195 |
w3af |
opensource |
|
|
|
| 196 |
WebScarab |
opensource |
|
|
|
| 197 |
Webshag |
opensource |
|
|
|
| 198 |
WebSlayer |
opensource |
|
|
|
| 199 |
WebSploit |
opensource |
|
|
|
| 200 |
Wfuzz |
opensource |
|
|
|
| 201 |
WPScan |
opensource |
|
|
|
| 202 |
XSSer |
opensource |
|
|
|
| 203 |
zaproxy |
opensource |
|
|
|
Tagged with: (Vulnerability Assessment & Penetration Testing), acccheck, ace-voip, Acunetix, Airbase-ng, Aircrack-ng, Airdecap-ng and Airdecloak-ng, Aireplay-ng, Airmon-ng, Airodump-ng, airodump-ng-oui-update, Airolib-ng, Airserv-ng, Airtun-ng, Amap, apache-users, Application VAPT, Arachni, Armitage, arp-scan, Asleap, Automater, Backdoor Factory, BBQSQL, BED, BeEF, Besside-ng, Big Data Security Audit & Assessment, bing-ip2hosts, BlindElephant, Bluelog, BlueMaho, Bluepot, BlueRanger, Bluesnarfer, braa, Bully, CaseFile, CDPSnarf, cisco-auditing-tool, cisco-global-exploiter, cisco-ocs, cisco-torch, Cloud Applications VAPT, Commix, Compliance audits (ISO 27001, Cookie Cadger, copy-router-config, coWPAtty, crackle, CutyCapt, Cyber forensic Analysis, Data Center Security Audit & Assessment, Database Security Audit & Assessment, DAVTest, DBPwAudit, deblaze, Device Security Audit & Assessment, DIRB, DirBuster, DMitry, dnmap, dnsenum, dnsmap, DNSRecon, dnstracer, dnswalk, Doona, DotDotPwn, eapmd5pass, Easside-ng, Electronic Security Audit, enum4linux, enumIAX, ERP Security Audit & Assessment, etc.), exploitdb, EyeWitness, Faraday, Fern Wifi Cracker, Fierce, fimap, Firewalk, fragroute, fragrouter, FreeRADIUS-WPE, FunkLoad, Ghost Phisher, GISKismet, Gobuster, GoLismero, goofile, Gqrx, gr-scan, Grabber, HexorBase, Host Security Assessments, hostapd-wpe, hping3, hURL, ident-user-enum, Infrastructure Security Audit, Inguma, InSpy, InTrace, IOT Security Testing, iSMTP, ivstools, jboss-autopwn, joomscan, jSQL, kalibrate-rtl, KillerBee, Kismet, lbd, Linux Exploit Suggester, Lynis, makeivs-ng, Maltego Teeth, Managed Security Service, masscan, mdk3, Metagoofil, Metasploit Framework, mfcuk, mfoc, mfterm, Miranda, Mobile Application VAPT, MSFPC, Multimon-NG, nbtscan-unixwiz, Nessus, Network security audit, Network VAPT, Nmap, ntop, ohrwurm, openvas, Oscanner, OSRFramework, p0f, Packetforge-ng, PadBuster, Paros, Parsero, PCI, PixieWPS, plecost, Powerfuzzer, ProxyStrike, Pyrit, Reaver, Recon-ng, redfang, Risk Assessments, RouterSploit, RTLSDR Scanner, SCADA VAPT, SE-SMSer, Secure Code Review, Security Architecture Review, SET, sfuzz, SidGuesser, SIPArmyKnife, Skipfish, SMBMap, smtp-user-enum, snmp-check, SOC - Security Operation Center Audit & Assessment, Social Engineering Test, SPARTA, Spooftooph, sqlmap, Sqlninja, sqlsus, sslcaudit, SSLsplit, sslstrip, SSLyze, Sublist3r, Telecom Security Audit & Assessment, THC-IPV6, theHarvester, Threat Assessment, Tkiptun-ng, TLSSLed, tnscmd10g, twofi, ua-tester, Uniscan, unix-privesc-check, URLCrazy, Vega, w3af, Web-application security audit, WebScarab, Webshag, WebSlayer, WebSploit, Wesside-ng, Wfuzz, Wifi Honey, wifiphisher, Wifitap, Wifite, Wireless security audit, Wireshark, WOL-E, wpaclean, WPScan, Xplico, XSSer, Yersinia, zaproxy