Penetration Testing mailing list archives
Re: The Ultimate Toolkit...
From: Max <reply.to.newsgroup () mozilla org>
Date: Fri, 07 May 2004 09:23:14 +0200
My toolkit consists of the following and a few other tools I use less frequently. Most of these tools can be run without an actual install (make install) and I believe a lot of them can be found on the Knoppix CD (it's been a while since I played with Knoppix).
Cheers, -- M@x On Linux: ========= + openssl 0.9.7d SSL implementation + openssh 3.8.1p1 SSH client and server + ssldump 0.9b3 SSL/TLS Protocol analyser + net-snmp 5.1.1 SNMP Library and tools--- Discovery --- ---------------------------------------------------------------
+ nmap 3.51-test3 Port Scanner + nessus 2.0.10a Vulnerability Scanner + cheops-ng 0.1.12 Network Discovery + hping2 2.0.0 Network Tracer + firewalk 5.0 Network Tracer to determine Firewall rules+ isnprober 1.02 TCP Sequence number gatherer to determine if same machine or not
+ ike-scan 1.6 IKE Discovery---- Sniffer ---- ---------------------------------------------------------------
+ tcpdump 3.8.3 Network Sniffer + ethereal 0.10.3 Network Sniffer (GUI) + ettercap 0.6.b Network Sniffer - Does switched LAN---- Cracking --- ---------------------------------------------------------------
+ hydra 4.0 Network Services Password cracker + john 1.6.37 Password Cracker---- Network ---- ---------------------------------------------------------------
+ ngrep 1.41 Network packet filter + sing 1.1 ICMP tool + gobbler 2.0 DHCP Audit tool + braa 0.8 SNMP Tool----- Attack ---- ---------------------------------------------------------------
+ mutate 2.0 Anti-NIDS/Firewall Proxy - Mutates packets + netw[ib-ox-ag] Network Tools & Testing + packETH 1.2 Ethernet Packet Generator + packit 0.7.1 Packet Analysis and Injection Tool On Windows: =========== + Cain & Abel + Sniphere + Dameware NT Utilities + Paros - Much better proxy than Achilles + VisualRoute + Sam Spade + PuTTY Mark Melonson wrote:
Hi all, I'm researching tools, and would like input on, what would be your ultimate toolkit be. I'm attempting to put together some resources! Be as specific as possible. I'm looking for tools that are somewhat portable i.e.: can be put on a CD and used w/o an install. For all platforms... My list: (OS Independant): -- Knoppix-STD (Windows): -- ntchpw [bootdisk] - NetCat (duh!) - RegAgeR (Automated enumeration and exploitation against weak Registries) - Scanline - Fpipe - Fport - Achilles
------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html -------------------------------------------------------------------------------
Current thread:
- The Ultimate Toolkit... Mark Melonson (May 06)
- Re: The Ultimate Toolkit... Max (May 07)
- Re: The Ultimate Toolkit... a arse (May 07)
- Re: The Ultimate Toolkit... Andrew Simmons (May 07)
- Re: The Ultimate Toolkit... easternerd (May 07)
- RE: The Ultimate Toolkit... Pete Herzog (May 07)
- Re: The Ultimate Toolkit... Clint Bodungen (May 07)
- Re: The Ultimate Toolkit... Konstantin Gavrilenko (May 10)
- Message not available
- Re: The Ultimate Toolkit... Konstantin Gavrilenko (May 11)
- enumeration of SQL column names failed when a column is of type "bit" Chan Fook Sheng (May 12)
- Re: enumeration of SQL column names failed when a column is of type "bit" Thor (May 12)
- Message not available