Recon | Penetration Testing Tools

InTrace

February 18, 2014portsInformation Gatheringevasion, infogathering, recon

InTrace is a traceroute-like application that enables users to enumerate IP hops exploiting existing TCP connections, both initiated from local network (local system) or from remote hosts. It could be useful for network reconnaissance and firewall bypassing.

iSMTP

February 18, 2014portsInformation Gathering, Sniffing/Spoofinginfogathering, recon, smtp, sniffing, spoofing

Test for SMTP user enumeration (RCPT TO and VRFY), internal spoofing, and relay.

lbd

February 18, 2014portsInformation Gatheringinfogathering, recon, webapps

lbd (load balancing detector) detects if a given domain uses DNS and/or HTTP Load-Balancing (via Server: and Date: header and diffs between server answers).

masscan

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon

This is the fastest Internet port scanner. It can scan the entire Internet in under 6 minutes, transmitting 10 million packets per second.

Metagoofil

February 18, 2014portsInformation Gathering, Reporting Toolsenumeration, infogathering, osint, recon, reporting

Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,docx,pptx,xlsx) belonging to a target company.

Metasploit Framework

February 18, 2014dookieExploitation Toolsdatabase, dns, enumeration, exploitation, infogathering, mssql, mysql, passwords, portscanning, postexploitation, recon, smb, smtp, snmp, socialengineering

Metasploit is a penetration testing platform that enables you to find, exploit, and validate vulnerabilities.

Miranda

February 18, 2014portsInformation Gatheringinfogathering, recon, upnp

Miranda is a Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices, particularly Internet Gateway Devices (aka, routers). It can be used to audit UPNP-enabled devices on a network for possible vulnerabilities.

p0f

February 18, 2014portsForensics, Information Gatheringenumeration, infogathering, recon

P0f is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way.

smtp-user-enum

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, smtp

smtp-user-enum is a tool for enumerating OS-level user accounts on Solaris via the SMTP service (sendmail). Enumeration is performed by inspecting the responses to VRFY, EXPN and RCPT TO commands. It could be adapted to work against other vulnerable SMTP daemons, but this hasn’t been done as of v1.0.

snmp-check

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, snmp

Like to snmpwalk, snmpcheck allows you to enumerate the SNMP devices and places the output in a very human readable friendly format. It could be useful for penetration testing or systems monitoring. Distributed under GPL license and based on “Athena-2k” script by jshaw.

Tag: recon