sectool – Security Audit Tool & IDS

Use Netsparker


sectool is a security tool that can be used both as a security audit as well as a part of an intrusion detection system. It consists of set of tests, library and textual/graphical frontend. Tests are sorted into groups and security levels. Administrators can run selected tests, groups or whole security levels.

Security Levels

  1. Naive – pretty basic and short set of tests
  2. Desktop – set of tests prepared to run on box not connected to internet
  3. Network – standard client machine connected to internet
  4. Server – network server
  5. Paranoid – bunch of tests for paranoid admins

The tests print several type of messages during their execution. “Warning” and “Error” messages are used to inform about discovered security risks.

  • warning – something that admin should know about
  • error – issues that should be fixed

Then there are another two messages: “Hint” and “Info”. These two are not print by default, so they need to be turned on.

  • hint – helps to find a way how to resolve discovered issue
  • info – provides information what does the test do at the moment

Test Results

Every test run is finished with one of these results:

  • PASS – Everything went OK, no security risks were discovered
  • WARNING – only warning messages were print
  • ERROR – at least one security issue was discovered
  • FAIL – internal test problem appears, test can’t be run

You can download sectool here:

sectool-0.9.4.tar.bz2

Or read more here.

Posted in: Countermeasures, Security Software

, , , ,


Latest Posts:


BDFProxy - Patch Binaries via MITM - BackdoorFactory + mitmProxy BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads
Domained - Multi Tool Subdomain Enumeration Domained – Multi Tool Subdomain Enumeration
Domained is a multi tool subdomain enumeration tool that uses several subdomain enumeration tools and wordlists to create a unique list of subdomains.
Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.


Comments are closed.