Three years later, Fyodor again conducted the survey, and expanded the list to include the Top 75 Security Tools. Another three years have gone by and another survey has been done. With 3,243 readers responding, Fyodor has compiled the Top 100 Security Tools from his 2006 survey and they are now posted on the Insecure.org web site.
There are a total of 42 new tools on the list. That means that 42 out of 100 tools on the Top 100 Security Tools list did not appear on the 2003 Top 75. Thirteen of the new tools even made the top 50. Had the list been maintained at the Top 75, the length of the list in 2003, 27 of the tools (almost half) would be new to the list.
For the complete, detailed listing of all 100 tools, complete with links to download them, you should visit the Top 100 Security Tools listing on Insecure.org. I will summarize here the top 10, as well as providing a list of the new tools on the list.
Top 10 Tools
- Nessus (vulnerability scanners)
- Wireshark (packet sniffers- previously known as Ethereal)
- Snort (IDS - intrusion detection system)
- Netcat (Netcat)
- Metasploit Framework (vulnerability exploitation tools)
- HPing2 (packet crafting tools)
- Kismet (wireless tools or packet sniffers)
- TCPDump {packet sniffers)
- Cain and Abel (password crackers or packet sniffers)
- John The Ripper (password crackers)
New Tools In The Top 100
- Metasploit Framework
- Paros Proxy
- Aircrack
- Sysinternals
- Scapy
- BackTrack
- P0f
- WebScarab
- WebInspect
- Core Impact
- IDA Pro
- Rainbow Crack
- AngryIP Scanner
- RKHunter
- Ike-scan
- KisMAC
- OSSEC HIDS
- Tor
- Knoppix
- chrootkit
- Yersinia
- Nagios
- X-scan
- Socat
- QualysGuard
- ClamAV
- BurpSuite
- Unicornscan
- BASE
- Argus
- Wikto
- SGuil
- IP Filter
- Canvas
- VMware
- OpenVPN
- OllyDbg
- Helix
- Acunetix Web Vulnerability Scanner
- TrueCrypt
- Watchfire AppScan