Recon | Penetration Testing Tools

dnswalk

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnswalk is a DNS debugger. It performs zone transfers of specified domains, and checks the database in numerous ways for internal consistency, as well as accuracy.

DotDotPwn

February 18, 2014portsInformation Gathering, Vulnerability Analysisexploitation, http, recon

It’s a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc.

enum4linux

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, smb

A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

enumIAX

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, voip

enumIAX is an Inter Asterisk Exchange protocol username brute-force enumerator. enumIAX may operate in two distinct modes; Sequential Username Guessing or Dictionary Attack.

Fierce

February 18, 2014portsInformation Gatheringdns, infogathering, portscanning, recon

First what Fierce is not. Fierce is not an IP scanner, it is not a DDoS tool, it is not designed to scan the whole Internet or perform any un-targeted attacks. It is meant specifically to locate likely targets both inside and outside a corporate network.

Firewalk

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon

Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. Firewalk works by sending out TCP or UDP packets with a TTL one greater than the targeted gateway.

fragrouter

February 18, 2014portsInformation Gatheringevasion, recon

Fragrouter is a network intrusion detection evasion toolkit. It implements most of the attacks described in the Secure Networks “Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection” paper of January 1998.

GoLismero

February 18, 2014portsInformation Gatheringinfogathering, recon, webapps

GoLismero is an open source framework for security testing. It’s currently geared towards web security, but it can easily be expanded to other kinds of scans.

goofile

February 18, 2014portsInformation Gatheringinfogathering, recon

Use this tool to search for a specific file type in a given domain.

hping3

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon, spoofing

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

Tag: recon