Infogathering | Penetration Testing Tools

fragroute

February 18, 2014portsInformation Gatheringevasion, infogathering

fragroute intercepts, modifies, and rewrites egress traffic destined for a specified host, implementing most of the attacks described in the Secure Networks “Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection” paper of January 1998.

Ghost Phisher

February 18, 2014portsInformation Gathering, Wireless Attacksgui, infogathering, spoofing, wireless

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy.

GISKismet

February 18, 2014portsWireless Attacksenumeration, infogathering, wireless

GISKismet is a wireless recon visualization tool to represent data gathered using Kismet in a flexible manner. GISKismet stores the information in a database so that the user can generate graphs using SQL. GISKismet currently uses SQLite for the database and GoogleEarth / KML files for graphing.

GoLismero

February 18, 2014portsInformation Gatheringinfogathering, recon, webapps

GoLismero is an open source framework for security testing. It’s currently geared towards web security, but it can easily be expanded to other kinds of scans.

goofile

February 18, 2014portsInformation Gatheringinfogathering, recon

Use this tool to search for a specific file type in a given domain.

hping3

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon, spoofing

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

Inguma

February 18, 2014portsVulnerability Analysisenumeration, fuzzing, infogathering, passwords, portscanning, vulnanalysis

Inguma is a penetration testing toolkit entirely written in python. The framework includes modules to discover hosts, gather information about, fuzz targets, brute force user names and passwords and, of course, exploits.

InTrace

February 18, 2014portsInformation Gatheringevasion, infogathering, recon

InTrace is a traceroute-like application that enables users to enumerate IP hops exploiting existing TCP connections, both initiated from local network (local system) or from remote hosts. It could be useful for network reconnaissance and firewall bypassing.

iSMTP

February 18, 2014portsInformation Gathering, Sniffing/Spoofinginfogathering, recon, smtp, sniffing, spoofing

Test for SMTP user enumeration (RCPT TO and VRFY), internal spoofing, and relay.

lbd

February 18, 2014portsInformation Gatheringinfogathering, recon, webapps

lbd (load balancing detector) detects if a given domain uses DNS and/or HTTP Load-Balancing (via Server: and Date: header and diffs between server answers).

Tag: infogathering