Navigation



FireCAT – Firefox Catalog of Auditing Tools

Last updated: September 9, 2015 | 11,252 views

After the web 2.0 hacking with firefox and its plugins article I wrote some months ago, recently I found a new way to transform firefox in the ultimate pen-testing tool… actually it has been lying in my inbox for days…

…new Firefox Framework Map collection of the most useful security oriented extensions. We called the framework FireCAT. It stands for FireFox Catalog of Auditing Toolbox.

It is based upon a paper we wrote some weeks before (Turning firefox to an ethical hacking platform) and downloaded more than 25 000 times. We also thank all folks that encouraged us and sent their suggestions and ideas to make this project a reality.

This initial release is presented as a mindmap and we are open to all your suggestions to make it a really good framework for all the community of security auditors and ethical hackers.

this is the mail I got from the securityfocus pen-testing mailinglist…

download the book at: http://www.security-database.com/

Share
Tweet
Share
Buffer
WhatsApp
Email
0 Shares
Posted in: Hacking Tools, Web Hacking

, , ,


Latest Posts:


zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors
March 31, 2020 - 110 Shares
Memhunter - Automated Memory Resident Malware Detection Memhunter – Automated Memory Resident Malware Detection
Memhunter is an Automated Memory Resident Malware Detection tool for the hunting of memory resident malware at scale, improving threat hunter analysis process.
March 29, 2020 - 206 Shares
Sandcastle - AWS S3 Bucket Enumeration Tool Sandcastle – AWS S3 Bucket Enumeration Tool
Sandcastle is an Amazon AWS S3 Bucket Enumeration Tool, formerly known as bucketCrawler. The script takes a target's name as the stem argument (e.g. shopify).
March 24, 2020 - 114 Shares
Astra - API Automated Security Testing For REST Astra – API Automated Security Testing For REST
Astra is a Python-based tool for API Automated Security Testing, REST API penetration testing is complex due to continuous changes in existing APIs.
February 27, 2020 - 572 Shares
Judas DNS - Nameserver DNS Poisoning Attack Tool Judas DNS – Nameserver DNS Poisoning Attack Tool
Judas DNS is a Nameserver DNS Poisoning Attack Tool which functions as a DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation.
February 19, 2020 - 258 Shares
dsniff Download - Tools for Network Auditing & Password Sniffing dsniff Download – Tools for Network Auditing & Password Sniffing
Dsniff download is a collection of tools for network auditing & penetration testing. Dsniff, filesnarf, mailsnarf, msgsnarf, URLsnarf, and WebSpy passively monitor a network
February 14, 2020 - 307 Shares


3 Responses to FireCAT – Firefox Catalog of Auditing Tools

  1. tech April 7, 2007 at 11:41 pm #

    cool post
    thanks…

  2. therealdonquixote April 23, 2007 at 2:33 pm #

    Wow the updated version that you can open in a mind map app is exhaustively comprehensive. Nice catch.

    Hey, while following the update links I saw that they were distributing FireCAT with a liveDVD pentesting distro from knowledge cave called kcpentrix 2.0 and really only just pushes over the CD limit at around 900mb. Was wondering what you thought of it? Like how does it stack up versus BackTrack 2.0?

    I am downloading it right now so all I can tell is that it is SLAX and it has about 240 or so pen testing tools exploits etc etc. So its behind on the prolific 300+ that BackTrack has. Also, its a really large iso compared to BackTrack 2.0 which was fit on a CD.

    What do you think?

  3. backbone April 27, 2007 at 2:15 pm #

    well i have to tell you that I am not a No. 1 FAN of liveCD/DVD’s…. but if I really have to make a choice then I’m following the crowd… so it’s BackTrack… the preferred liveCD on the pen-testing mailing list at SecurityFocus…