FREE THOUGHT · FREE SOFTWARE · FREE WORLD

Home  »  Security  »  Pen-testing Security Tools

by 1 comment

[hide]

While testing the exploitability of your target and mapping out vulnerabilities it is important to gain access inside the targets defenses so that you can establish an internal foothold like a owned box or switch. This is so you can use a tool to discover the packet-filtering being used, and literally map out the firewall/IDS rules. Needless to say that really provides you with a lot more complete vulnerability assessment to help discover more weak spots in the system.


  • Socat
    Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (terminal or modem, etc.), socket (Unix, IP4, IP6 - raw, UDP, TCP), SSL, a client for SOCKS4, or proxy CONNECT. It supports broadcasts and multicasts, abstract Unix sockets, Linux tun/tap, GNU readline, and PTYs. It provides forking, logging, and dumping and different modes for interprocess communication. Many options are available for tuning socat and its channels. Socat can be used, for example, as a TCP relay (one-shot or daemon), as a daemon-based socksifier, as a shell interface to Unix sockets, as an IP6 relay, or for redirecting TCP-oriented programs to a serial line.
  • Samplicator
    UDP Samplicator receives UDP datagrams on a given port and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets.
ftester - for master pentesters only--get the lowdown on your packetfilteringrwhois - really great addition to using whois. Get additional info not on whois, query rwhois servers.lft - useful alternative method of tracerouteing. opplemanpackit - define (spoof) nearly all TCP, UDP, ICMP, IP, ARP, RARP, and Ethernet header optionsetherape - really cool graphical program that displays connections and protocols similar to cheops.amap - fingerprintingxprobe2 - fingerprintingp0f2 - really exceptional fingerprinting. can be passively run in the BG.firewalk - good packetfiltering enumeratorBGPview - bgp anyone?icmpenum - icmp fingerprintingdnstracer - awesome and creative graphical output of dnsssldump - not really that useful but impressive in a reportmtr - alternative tracerouteMRTG - favorite tool of ISPs, many uses herehost - don't forget this oneike-scan - scan for vpnsupnpscan - scan for upnp devicesftp-spider - get info on ftp servertraceproto - very nice alternative to traceroute/firewalk

Also see: Vulnerability Scanner Review


  • sing
  • netleak
  • dmitry
  • isic
  • dnsa
  • nemesis
  • sara
  • zodiacdns
  • fragroute
  • sentry 2.0
  • Caecus
  • C-Parse
  • pchar
  • nmbscan
  • nbtscan
  • admsmb

November 2nd, 2007

Comments Welcome

  • sudhakararao

    this is exellent. This is very usefull to pentesters

My Online Tools
My Picks
Twitter

  • : Love that Tesla Model S
  • : Ratpoison, a lean mean WM for Linux (urvxt), I love it
  • : You understand, what I need to know is exactly what happens to the passengers in an elevator when it falls into emptiness - Einstein
  • : It's not process, its content. That's what makes good products. -jobs


Related Articles
Newest Posts

WordPress Development
Hacking and Hackers

The use of "hacker" to mean "security breaker" is a confusion on the part of the mass media. We hackers refuse to recognize that meaning, and continue using the word to mean someone who loves to program, someone who enjoys playful cleverness, or the combination of the two. See my article, On Hacking.
-- Richard M. Stallman






It's very simple - you read the protocol and write the code. -Bill Joy

Except where otherwise noted, content on this site is licensed under a Creative Commons Attribution 3.0 License, just credit with a link.
This site is not supported or endorsed by The Apache Software Foundation (ASF). All software and documentation produced by The ASF is licensed. "Apache" is a trademark of The ASF. NCSA HTTPd.
UNIX ® is a registered Trademark of The Open Group. POSIX ® is a registered Trademark of The IEEE.

| Google+

Site Map | Contact Webmaster | License and Disclaimer | Terms of Service

↑ TOPMain