sniffing | Penetration Testing Tools

Wireshark

February 19, 2014portsInformation Gathering, Sniffing/Spoofinganalysis, gui, networking, sniffing

Wireshark is the world’s foremost network protocol analyzer. It lets you see what’s happening on your network at a microscopic level. It is the de facto (and often de jure) standard across many industries and educational institutions. Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998.

ntop

February 19, 2014portsInformation Gatheringanalysis, networking, sniffing

ntop is a tool that shows the network usage, similar to what the popular top Unix command does. ntop is based on pcapture (ftp://ftp.ee.lbl.gov/pcapture.tar.Z) and it has been written in a portable way in order to virtually run on every Unix platform.

DNSChef

February 18, 2014portsSniffing/Spoofingdns, proxy, sniffing, spoofing

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka “Fake DNS”) is a tool used for application network traffic analysis among other uses.

hamster-sidejack

February 18, 2014portsSniffing/Spoofingsniffing, spoofing

Hamster is a tool or “sidejacking”. It acts as a proxy server that replaces your cookies with session cookies stolen from somebody else, allowing you to hijack their sessions. Cookies are sniffed using the Ferret program. You need a copy of that as well.

HexInject

February 18, 2014portsSniffing/Spoofingsniffing, spoofing

HexInject is a very versatile packet injector and sniffer, that provide a command-line framework for raw network access.

iSMTP

February 18, 2014portsInformation Gathering, Sniffing/Spoofinginfogathering, recon, smtp, sniffing, spoofing

Test for SMTP user enumeration (RCPT TO and VRFY), internal spoofing, and relay.

mitmproxy

February 18, 2014portsSniffing/Spoofinghttp, https, proxy, sniffing, spoofing

mitmproxy is an SSL-capable man-in-the-middle HTTP proxy. It provides a console interface that allows traffic flows to be inspected and edited on the fly. Also shipped is mitmdump, the command-line version of mitmproxy, with the same functionality but without the frills.

ohrwurm

February 18, 2014portsSniffing/Spoofing, Vulnerability Analysisfuzzing, rtp, sniffing, spoofing, voip, vulnanalysis

ohrwurm is a small and simple RTP fuzzer that has been successfully tested on a small number of SIP phones.

Paros

February 18, 2014portsWeb Applicationsgui, http, https, infogathering, proxy, sniffing, webapps

A Java based HTTP/HTTPS proxy for assessing web application vulnerability. It supports editing/viewing HTTP messages on-the-fly. Other featuers include spiders, client certificate, proxy-chaining, intelligent scanning for XSS and SQL injections etc.

protos-sip

February 18, 2014portsSniffing/Spoofingsniffing, spoofing, voip

The purpose of this test-suite is to evaluate implementation level security and robustness of Session Initiation Protocol (SIP) implementations.

Tag: sniffing