List of free and open source tools for Information security practices

Here is the huge list of tool for information security that are freely available and open source.

Open Source/Free Tools:

1. OllyDbg - Reverse Engineering
2. Ntop - Network Probing
3. MBSA - Vulnerability assessment
4. OSSIM - Complete InfoSec Product
5. Medusa - Password Cracking
6. OpenSSL - SSL and TLS
7. fgdump/pwdump - Password Cracking
8. Tor - Proxy
9. OpenVPN - VPN
10. SET - Social Engineering
11. Yersinia - Protocoal attack
12. sslstrip - HTTP/HTTPS convert
13. EtherApe - Network activity
14. AngryIPScanner - Ping Sweep
15. Superscan - Scanning
16. sqlninja - SQL Injection
17. BeFF - web and browser based exploitaion
18. Wikto - web vulnerability assessment
19. P0f - OS Scan
20. NoScript - script blocking
21. Samurai Web Testing Framework  - web vulnerability assessment
22. Tamper Data - HTTP interceptor
23. Firebug - Web developer tools
24. inSSIDer - Wireless scanning
25. KisMAC - Wireless security
26. ike-scan - tests IPSec VPN
27. Websecurify - web vulnerability assessment
28. Knoppix - Live linux OS
29. Amap - Scanning
30. RainbowCrack - Password cracking
31. Grendel-Scan
32. Wfuzz
33. Unicornscan
34. Brutus - Password cracking
35. WebGoat - Web Security
36. HijakThis
37. Wireshark- Sniffing
38. Metasploit - Pentesting
39. OpenVAS- Pentesting
40. Aircrack - Wireless Testing
41. nmap - Scanning
42. nslookup - Network Tool
43. Snort - IDS
44. Cain and Abel - Password cracking, Sniffing
45. Backtrack - Live OS for VAPT
46. Netcat
47. tcpdump
48. John The Ripper - Password cracking
49. Kismet
50. OpenSSH/Putty/SSh
51. Burpsuite Free - Web Security Testing
52. Nikto - Web Security Testing
53. Hping - Scanning
54. w3af - web Pentesting
55. Ettercap - Sniffing
56. Sysinternals
57. Scapy
58. THC Hydra - Password Cracking
59. Paros proxy - Web Security Testing
60. NetStumbler - Wireless Scanning
61. Ghacks - Google Hacking
62. sqlmap - SQL injection
63. Truecrypt - Cryptography
64. dsniff - Sniffing
65. ophcrack - Password Cracking
66. Netfilter
67. skipfish - Web Security Testing
68. BRO-IDS
69. IceSword
70. FTester
71. GMER - Malwares
72. FG-Injector
73. RKhunter
74. sqlbrute - SQL injection
75. Gamja
76. Technitium MAC Address Changer
77. Samspade - Network Tools
78. Xprobe2 - OS scan
79. usbwatcher
80. Autoruns - Malwares
81. txdns
82. voiphopper - VOIP testing
83. firewalk
84. metagoofil - Information gathering
85. theHarvester - Information gathering
86. chkrootkit
87. XSS-Me - Web Security Testing
88. SQL Inject-Me - SQL injection
89. OSSEC

Open Source Black Box Testing tools by OWASP:

1. OWASP WebScarab - Local Proxy
2. OWASP CAL9000 - Web Security Assessment
3. OWASP Pantera Web Assessment Studio Project
4. OWASP Zed Attack Proxy Project - Web Security Assessment
5. OWASP Mantra - Security Framework
6. OWASP WSFuzzer
7. OWASP Sprajax Project
8. OWASP SQLiX
9. OWASP Orizon
10. OWASP LAPSE
11. OWASP O2 Platform