Usr6 Posted January 27, 2012 Report Posted January 27, 2012 What it can do ? :Most of the part of HconSTF is semi-automated but you still need your brain to work it out.It can be use in all kind of security testing stages, it has tools for conducting tasks like,1. Information gathering2. Enumeration & Reconnaissance3. Vulnerability assessment4. Exploitation5. Privilege escalation6. Reportingalso can be used for web debuggingIs it useful for me ? :HconSTF is very flexible and good enough for any1. IT Security Professionals2. Web Developers3. IT studentsor any one interested in IT securitySome Highlight Features :Categorized and comprehensive toolsetContains hundreds of tools and features and script for different tasks like SQLi,XSS,Dorks,OSINT to name a fewHconSTF webUI with online tools (same as the Aqua base version of HconSTF)Each and every option is configured for penetration testing and Vulnerability assessmentsSpecially configured and enhanced for gaining easy & solid anonymityWorks for web app testing assessments specially for owasp top 10 Easy to use & collaborative Operating System like interfaceLight on Hardware ResourcesPortable - no need to install, can work from any USB storage deviceMulti-Language support (feature in heavy development translators needed)Works side-by-side with your normal web browser without any conflict issuesWorks on both architectures x86 & x64 on windows XP, Vista, 7 (works with ubuntu linux using wine)Netbook compatible - User interface is designed for using framework on small screen sizesFree & Open source and always will beCategories of tools :Information gathering / AnalysisEditors / DebuggersExploitation / AuditingAnonymityPasswordsCryptographyDatabaseScripting / AutomationNetwork UtilitiesReportingdownload: Downloads -poze: Hcon Security Testing Framework (HconSTF) [Fire base] - Quote