This article showcases free, open-source security tools that support your organization’s teams in red teaming, threat hunting, incident response, vulnerability scanning, and cloud security. Autorize: Burp Suite extension for automatic authorization enforcement detection Autorize is an open-source Burp Suite extension that checks if users can access things they shouldn’t. It runs automatic tests to help security testers find authorization problems. BadDNS: Open-source tool checks for subdomain takeovers BadDNS is an open-source Python DNS auditing tool … More →

The post 35 open-source security tools to power your red team, SOC, and cloud security appeared first on Help Net Security.