Enumeration | Penetration Testing Tools

SPARTA

March 28, 2017dookieInformation Gatheringdns, enumeration, gui, http, https, infogathering, mysql, passwords, portscanning, recon, smb, snmp

sparta Package Description SPARTA is a python GUI application that simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access to their toolkit and by displaying all tool output in a convenient way. If less time is spent…

ident-user-enum

March 17, 2017dookieInformation Gatheringenumeration, infogathering, portscanning, recon

ident-user-enum on Kali Linux is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system.

Faraday

March 7, 2017dookieInformation Gatheringenumeration, gui, infogathering, reporting

Faraday introduces a new concept – IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the data generated during a security audit.

nbtscan-unixwiz

February 22, 2017dookieInformation Gatheringenumeration, infogathering, netbios, recon

nbtscan-unixwiz is a command-line tool that scans for open NETBIOS nameservers on a local or remote TCP/IP network, and this is a first step in finding of open shares.

Gobuster

February 6, 2017dookieWeb Applicationsenumeration, http, https, infogathering, webapps

Gobuster is a web content scanner that looks for existing (and/or hidden) web objects. It basically works by launching a dictionary based attack against a web server and analyzing the response.

BlueMaho

February 19, 2014portsWireless Attacksbluetooth, enumeration, gui, wireless

BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices for known vulnerabilities and major thing to do – testing to find unknown vulns.

DIRB

February 18, 2014portsWeb Applicationsenumeration, http, https, infogathering, webapps

DIRB is a Web Content Scanner. It looks for existing (and/or hidden) Web Objects. It basically works by launching a dictionary based attack against a web server and analizing the response.

DirBuster

February 18, 2014portsWeb Applicationsenumeration, gui, http, https, infogathering, webapps

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

enum4linux

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, smb

A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

enumIAX

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, voip

enumIAX is an Inter Asterisk Exchange protocol username brute-force enumerator. enumIAX may operate in two distinct modes; Sequential Username Guessing or Dictionary Attack.

Tag: enumeration