Infogathering | Penetration Testing Tools

DMitry

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon

DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU)Linux Command Line Application coded in C. DMitry has the ability to gather as much information as possible about a host. Base functionality is able to gather possible subdomains, email addresses, uptime information, tcp port scan, whois lookups, and more.

dnsenum

February 18, 2014portsInformation Gatheringdns, infogathering, recon

Multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks.

dnsmap

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnsmap was originally released back in 2006 and was inspired by the fictional story “The Thief No One Saw” by Paul Craig, which can be found in the book “Stealing the Network – How to 0wn the Box”.

DNSRecon

February 18, 2014portsInformation Gatheringdns, infogathering, recon

A powerful DNS enumeration script

dnstracer

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnstracer determines where a given Domain Name Server (DNS) gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer.

dnswalk

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnswalk is a DNS debugger. It performs zone transfers of specified domains, and checks the database in numerous ways for internal consistency, as well as accuracy.

enum4linux

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, smb

A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

enumIAX

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, voip

enumIAX is an Inter Asterisk Exchange protocol username brute-force enumerator. enumIAX may operate in two distinct modes; Sequential Username Guessing or Dictionary Attack.

Fierce

February 18, 2014portsInformation Gatheringdns, infogathering, portscanning, recon

First what Fierce is not. Fierce is not an IP scanner, it is not a DDoS tool, it is not designed to scan the whole Internet or perform any un-targeted attacks. It is meant specifically to locate likely targets both inside and outside a corporate network.

Firewalk

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon

Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. Firewalk works by sending out TCP or UDP packets with a TTL one greater than the targeted gateway.

Tag: infogathering