smb | Penetration Testing Tools

SPARTA

March 28, 2017dookieInformation Gatheringdns, enumeration, gui, http, https, infogathering, mysql, passwords, portscanning, recon, smb, snmp

sparta Package Description SPARTA is a python GUI application that simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access to their toolkit and by displaying all tool output in a convenient way. If less time is spent…

enum4linux

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, smb

A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

THC-Hydra

February 18, 2014portsPassword Attacksmssql, mysql, oracle, passwords, postgresql, smb, snmp

Hydra is a parallelized login cracker which supports numerous protocols to attack. It is very fast and flexible, and new modules are easy to add. This tool makes it possible for researchers and security consultants to show how easy it would be to gain unauthorized access to a system remotely.

keimpx

February 18, 2014portsPassword Attackspasswords, smb

keimpx is an open source tool, released under a modified version of Apache License 1.1. It can be used to quickly check for valid credentials across a network over SMB.

Metasploit Framework

February 18, 2014dookieExploitation Toolsdatabase, dns, enumeration, exploitation, infogathering, mssql, mysql, passwords, portscanning, postexploitation, recon, smb, smtp, snmp, socialengineering

Metasploit is a penetration testing platform that enables you to find, exploit, and validate vulnerabilities.

Ncrack

February 18, 2014portsPassword Attackshttp, https, passwords, smb

Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients.

patator

February 18, 2014portsPassword Attacksmssql, mysql, oracle, passwords, postgresql, smb, snmp

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

polenum

February 18, 2014portsMaintaining Access, Password Attackspasswords, smb

polenum is a python script which uses the Impacket Library from CORE Security Technologies to extract the password policy information from a windows machine.

responder

February 18, 2014portsSniffing/Spoofingsmb, sniffing, spoofing

This tool is first an LLMNR and NBT-NS responder, it will answer to *specific* NBT-NS (NetBIOS Name Service) queries based on their name suffix (see: http://support.microsoft.com/kb/163409). By default, the tool will only answers to File Server Service request, which is for SMB. The concept behind this, is to target our answers, and be stealthier on the network.

RidEnum

February 18, 2014portsMaintaining Accessenumeration, passwords, smb

Rid Enum is a RID cycling attack that attempts to enumerate user accounts through null sessions and the SID to RID enum. If you specify a password file, it will automatically attempt to brute force the user accounts when its finished enumerating.

Tag: smb