RE: Penetration tool kit

["Yan Bellerose" <yan.bellerose () ubisoft com>]

Hi,

   On a Windows base, you can try with GFI Languard: Network Security Scanner http://www.gfi.com, Very usefull tools to 
find Velnerabilities, network share, active policies, users, application and a lot of stuff. The only problem, it's not 
free, but you can have a test version.
 
Yan

 
-----Original Message-----
From: Huzeyfe Onal [mailto:huzeyfe.onal () gmail com] 
Sent: 16 mars 2006 01:09
To: b1ivrj77
Cc: pen-test () securityfocus com
Subject: Re: Penetration tool kit

Hi,
maybe it's a good idea to start with Backtrack Security CD(www.backtrack.org).
You can use  all useful UNIX/Linux based security tools without no pain to install.

On 3/16/06, b1ivrj77 <philippe.rivest () sympatico ca> wrote:
> I have read over the internet, books, pdf's and talk with a lot of 
> people about security, hacking, cracking and pen-testing. Every time 
> we always talk about the "Personal tool kit" that every one uses, may 
> it be a complete or incomplete tool kit, the best or worst we all have 
> some tools we like to use. Well I don't.
>
> I would'nt say I'm new to security but I can be so bold as to say, I'm 
> good with theorical knowledge but pretty poor with practical ones. I 
> want to start few pen-test on my own machine (to learn stuff up) at 
> home and I'm not afraid of reading or learning things. But finding the 
> right tool for the right job is for me the most difficult task in security.
>
>
> I see two approaches to my problem and I can explain them both with:" 
> Give a man a fish; he is feeded for a day. Teach him how to fish, he 
> is feed for life".
>
> I would like to know where I could find info & tip's on a Pen-tester 
> tool box. And I do favor knowledge over script-kidding,
>
> Here the knowledge tool box I have:
>
> www.insecure.org
> http://www.securityfocus.com/
> http://www.sans.org/
> http://www.isecom.org/
> http://www.networkintrusion.co.uk/hacking.htm
> http://www.iss.net/
> http://www.defcon.org/
> http://www.snort.org/
> http://www.blackhat.com/
> http://www.whitehatsec.com/
>
> For the tool part, i know:
>
> Nessus
> Nmap
> Nc (netcat)
> Ethereal
> Hping2
> Brutus
> Enum+
> AccessDiver (got that one today from a previous email, really happy) 
> Nbtscan
>
> I use a Windows based laptop and my most trusted Mandriva based laptop
> (linux)
>
>
> Any help would be greatly appreciated.
>
>
>
> Philippe Rivest
> A security student (self student)
>
>
> ----------------------------------------------------------------------
> --------
> This List Sponsored by: Cenzic
>
> Concerned about Web Application Security?
> As attacks through web applications continue to rise, you need to 
> proactively protect your applications from hackers. Cenzic has the 
> most comprehensive solutions to meet your application security 
> penetration testing and vulnerability management needs. You have an 
> option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
> Download FREE whitepaper on how a managed service can help you:
> http://www.cenzic.com/news_events/wpappsec.php
> And, now for a limited time we can do a FREE audit for you to confirm 
> your results from other product. Contact us at request () cenzic com
> ----------------------------------------------------------------------
> --------



--
Huzeyfe ÖNAL
---
First Turkish Qmail book is out! Go check it.
Duydunuz mu! Turkiye'nin ilk Qmail kitabi cikti.
http://www.acikakademi.com/catalog/qmail/

------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. 
Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability 
management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). 
Download FREE whitepaper on how a managed service can help you: 
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at 
request () cenzic com
------------------------------------------------------------------------------

------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/forms/ec.php?pubid=10025
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request () cenzic com
------------------------------------------------------------------------------