Penetration Testing mailing list archives

Re: The Ultimate Toolkit...


From: Max <reply.to.newsgroup () mozilla org>
Date: Fri, 07 May 2004 09:23:14 +0200

My toolkit consists of the following and a few other tools I use less frequently. Most of these tools can be run without an actual install (make install) and I believe a lot of them can be found on the Knoppix CD (it's been a while since I played with Knoppix).

Cheers,

--
M@x


On Linux:
=========
+ openssl 0.9.7d      SSL implementation
+ openssh 3.8.1p1     SSH client and server
+ ssldump 0.9b3       SSL/TLS Protocol analyser
+ net-snmp 5.1.1      SNMP Library and tools
--- Discovery --- ---------------------------------------------------------------
+ nmap 3.51-test3     Port Scanner
+ nessus 2.0.10a      Vulnerability Scanner
+ cheops-ng 0.1.12    Network Discovery
+ hping2 2.0.0        Network Tracer
+ firewalk 5.0        Network Tracer to determine Firewall rules
+ isnprober 1.02 TCP Sequence number gatherer to determine if same machine or not
+ ike-scan 1.6        IKE Discovery
---- Sniffer ---- ---------------------------------------------------------------
+ tcpdump 3.8.3       Network Sniffer
+ ethereal 0.10.3     Network Sniffer (GUI)
+ ettercap 0.6.b      Network Sniffer - Does switched LAN
---- Cracking --- ---------------------------------------------------------------
+ hydra 4.0           Network Services Password cracker
+ john 1.6.37         Password Cracker
---- Network ---- ---------------------------------------------------------------
+ ngrep 1.41          Network packet filter
+ sing 1.1            ICMP tool
+ gobbler 2.0         DHCP Audit tool
+ braa 0.8            SNMP Tool
----- Attack ---- ---------------------------------------------------------------
+ mutate 2.0          Anti-NIDS/Firewall Proxy - Mutates packets
+ netw[ib-ox-ag]      Network Tools & Testing
+ packETH 1.2         Ethernet Packet Generator
+ packit 0.7.1        Packet Analysis and Injection Tool


On Windows:
===========
+ Cain & Abel
+ Sniphere
+ Dameware NT Utilities
+ Paros - Much better proxy than Achilles
+ VisualRoute
+ Sam Spade
+ PuTTY



Mark Melonson wrote:

Hi all,

I'm researching tools, and would like input on, what
would be your ultimate toolkit be. I'm attempting to
put together some resources! Be as specific as
possible. I'm looking for tools that are somewhat
portable i.e.: can be put on a CD and used w/o an
install. For all platforms...

My list:

(OS Independant):
-- Knoppix-STD
(Windows):
-- ntchpw [bootdisk]
- NetCat (duh!)
- RegAgeR (Automated enumeration and exploitation
against weak Registries)
- Scanline
- Fpipe
- Fport
- Achilles


------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------


Current thread: