Tools

Accepted tools archive from previous editions

[2014] [2015] [2016]

Rooted Warfare 2016

FruityWiFi
FruityWifi is an open source tool for auditing wireless networks.

It allows you to quickly and easily deploy advanced attacks using the web interface or sending messages.

Initially the application was created for use with a Raspberry-Pi, but can be installed on any Debian-based system.

FruityWifi is composed of modules to give you more flexibility.

Kung-fu-malware
Current malware employs a number of techniques to avoid being detected when run in scanning environments.

The tool simulates the conditions of a malware analysis lab for any process that starts on a computer

ATROPOS Drone Control
A WiFi based protocol to avoid drone hijacking

Owade Reborn
OwadeReborn is a forensic tool for extract offline data from a Windows 7 and 8.1 NTFS disc image. OwadeReborn extract information and crack passwords of Windows Files avoiding the virtualization of the evidence.

Rooted Warfare 2015

R2DR2
r2dr2 is a UDP amplification attack tool for committing DRDoS denial of service attacks.

Raspot 2.0
Allows to protect any sort of network using forensic analysis techniques, modifying the rules of a firewall depending on the level of attacks suffered in that network.

Can be used as a support tool for forensic analysts allowing them to examine the level of attacks on any sort of network.

Line. Android e IOS
Extraccion de bbdd para LINE sobre Android/iOS

Cassle
Advanced Architecture to Validate TLS Certificates in Internet to avoid MITM Attacks

RaspWifi Pi
RaspWifi-Pi is a free software focused on the big wifi world. It’s written in PHP and Bash scripting with some code in python and C to be hosted at Linux and focused on its use within a Raspberry Pi.

The principal goal of this software is the improvement of the security and programming skills of his author; if you are looking for a very smart tool without errors and really stable RaspWifi-Pi isn’t for you.

Free Access Cloud
Development of infrastructure for the secure distribution of documents in cloud free access

OWASP ZAP
The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

Parsero
Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries.

AAP
Automated Analysis of Source Code Patches using Machine Learning Algorithms

Rooted Warfare 2014

DRADIS FRAMEWORK
Dradis is an open-source framework to enable you to work efficiently by gathering information from different tools and presenting it in a variety of formats.

We currently support Burp Scanner, Nessus, NeXpose, Nikto, Nmap, OpenVAS, OSVDB, Retina, SureCheck, VulnDB HQ, w3af, wXf and Zed Attack Proxy but with what you’ll learn in this workshop you’ll be able to connect Dradis to any other tool and present the information in any way you need.

FAVII
Favii is a multi-user platform for the acquisition, representation and knowledge management following the KISS principle. A Knowledge Management with Semantic Web technologies, integrates Favii mandatory policies, role-based (RBAC / MAC) for access and handling of the safety knowledge, and a powerful search engine.

Both security policies, as queries for searches are treated as any other knowledge, by the user can be manipulated. In parallel, we have developed several ontologies for knowledge acquisition in the field of computer security: software, hardware, IP addresses, ports, administrators machines … all of which is managed by Favii.

FRUITWIFI
FruityWifi is an open source tool for auditing wireless networks. It let you quickly and easily deploy advanced attacks using the web interface or by sending messages. Initially the application was created for use with a Raspberry -Pi , but can be installed on any Debian based system. FruityWifi include modules for added flexibility. These modules can be installed to add new functionality. Some of the modules available are urlsnarf , dnsspoof , Kismet, MDK3 , ngrep , nmap , and sslstrip squid3 ( with functionality to inject code ) , Captive Portal , and more. The show will focus on how to use the FruityWifi to audit wireless networks , deploying advanced attacks , how to use and create modules, how to combine them with each other and with other devices.

We show how to use the tool in different settings and situations , how to control it remotely via the web panel or sending messages for example, using Twitter. If FruityWifi is accepted for Rooted Warfare , will be shown exclusively launch the new WSDL + client panel with LCD and Keypad for RaspberryPi .

GOLISMERO
GoLismero is an open source framework designed to perform security audits . Its main features are the ability to call external tools (such as nmap , OpenVAS , sqlmap , XSSer , Wfuzz , dnsrecon , Shodan , Punkspider , Theharvester , Spiderfoot , sslscan … ) regardless of the results , unify , mix and detect vulnerablidades repeated (found by different tools). In addition , it also has numerous tests.

GoLismero is intended not only for the pen -tester , but also designed to meet the cycles and needs an audit to a real customer , as it has well-defined and configurable scopes , you can define the level of intrusiveness of the tests, whole process of audit and testing shall be logged in a database with timestamps , and any audit made golismero is reproducible. It supports many formats to show results. Currently in which more work has been done is the portable HTML (no dependencies of any kind, or pictures . All information is embedded in a single HTML file). In future versions it will incorporate word and pdf.

HTTPAUTHCRACK
HttpAuthCrack is a tool developed in Python to test credentials on sites and devices using HTTP Basic authentication type.

To indicate the sites and devices to test, you can pass a list of IP addresses in a file, or you can use the result of a search Shodan having a “shodan dork” as an argument.

K0SAP
an installation package for Mac OS X systems to compile and install all those programs that are necessary for security audits and ethical hacking. They are organised into categories and there’s no need to recompile any software.

This way, we can have a large number of Kali tools installed at the same time.

OSUETA
OSUETA stands for OpenSSH User Enumeration Timing Attack and is a small script written in Python to exploit a bug present in versions 5 . * and 6. * of OpenSSH . In these versions during the authentication process , you may obtain a list of users in the system discriminated by the time it takes the system to evaluate an arbitrarily long password.

If the user is present, the time it takes the server to respond is larger. For example , to allow users found present in a system , this tool can be useful in penetration testing to shorten in brute force. The script also has the ability to establish a Denial of Service attack in the ssh service.

PARAMETERFUZZ
ParameterFuzz web is an audit tool, intended for testing by a dictionary, the existence of parameters in the pages, where the HTML code of the same does not contain all of them.

After the collection of parameters, it can exploit vulnerabilities of various types to easily identify security flaws.

PEEPDF
peepdf is a Python tool to explore PDF files in order to find out if the file can be harmful or not. The aim of this tool is to provide all the necessary components that a security researcher could need in a PDF analysis without using 3 or 4 tools to make all the tasks.

With peepdf it’s possible to see all the objects in the document showing the suspicious elements, supports all the most used filters and encodings, it can parse different versions of a file, object streams and encrypted files. With the installation of PyV8 and Pylibemu it provides Javascript and shellcode analysis wrappers too. Apart of this it’s able to create new PDF files and to modify/obfuscate existent ones.

ROBOTS RIDER
Robots Rider is a command line tool that unifies multiple external tools, in order to identify an interesting attack surface to start a pentest on a domain or a public list of URLs

It uses ‘theHarvester’ to get the full list of domains related to the domain that we want to attack.

SINFONIER
“Sinfonier: Storm Builder for Security Intelligence” is a web service created by Telefonica Digital which streamlines integration of open source data to deduct intelligence metadata. Telefonica Digital’s Sinfonier provides a human cloud of analysts with a secure and open environment, to graphically build high-level Apache Storm topologies, and execute and share them for a definable period of time

Apache Storm is a free and open source, distributed, real-time computation system. Storm use three abstractions: “spouts”, “bolts” and “topologies”. Sinfonier includes one more abstraction: “Drains”. Thus, a topology is not only a network of spouts and bolts, but also of drains. Spouts are a source of streams. Bolts process input streams and produce new output streams. Drains send input streams to both storage and other services. By means of these drains, analysts can connect specific modules allowing them to create their own intelligence methodology in an easy-to-use and intuitive manner. Once complete, these new abstractions can be shared privately or publicly, culminating in a crowd-sourced intelligence system.

ZAP
ZAP Proxy is a free and open source tool in continuous improvement. A very interesting aspect of ZAP is the API, that allows you to manipulate the tool with our own scripts.

Besides showing the newest capabilities ZAP Proxy, we developed getzapdata.py. It uses ZAP API to extract all entry points (parameter GET, POST, Cookie and Headers) and puts them be in a CSV file for further analysis.