spoofing | Penetration Testing Tools

wifiphisher

February 22, 2017dookieWireless Attackssocialengineering, spoofing, wireless

Wifiphisher is an effective rogue Access Point tool downloaded by hundreds of Wi-Fi hackers everyday. It is free and open source software currently available for Linux.

DNSChef

February 18, 2014portsSniffing/Spoofingdns, proxy, sniffing, spoofing

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka “Fake DNS”) is a tool used for application network traffic analysis among other uses.

fiked

February 18, 2014portsSniffing/Spoofingspoofing

FakeIKEd, or fiked for short, is a fake IKE daemon supporting just enough of the standards and Cisco extensions to attack commonly found insecure Cisco VPN PSK+XAUTH based IPsec authentication setups in what could be described as a semi MitM attack.

Ghost Phisher

February 18, 2014portsInformation Gathering, Wireless Attacksgui, infogathering, spoofing, wireless

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy.

hamster-sidejack

February 18, 2014portsSniffing/Spoofingsniffing, spoofing

Hamster is a tool or “sidejacking”. It acts as a proxy server that replaces your cookies with session cookies stolen from somebody else, allowing you to hijack their sessions. Cookies are sniffed using the Ferret program. You need a copy of that as well.

HexInject

February 18, 2014portsSniffing/Spoofingsniffing, spoofing

HexInject is a very versatile packet injector and sniffer, that provide a command-line framework for raw network access.

hping3

February 18, 2014portsInformation Gatheringinfogathering, portscanning, recon, spoofing

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

inviteflood

February 18, 2014portsSniffing/Spoofing, Stress Testingspoofing, stresstesting, voip

A tool to perform SIP/SDP INVITE message flooding over UDP/IP.

ipv6-toolkit

February 18, 2014portsStress Testingenumeration, ipv6, spoofing, stresstesting

The SI6 Networks’ IPv6 toolkit is a set of IPv6 security assessment and trouble-shooting tools. It can be leveraged to perform security assessments of IPv6 networks, assess the resiliency of IPv6 devices by performing real-world attacks against them, and to trouble-shoot IPv6 networking problems.

iSMTP

February 18, 2014portsInformation Gathering, Sniffing/Spoofinginfogathering, recon, smtp, sniffing, spoofing

Test for SMTP user enumeration (RCPT TO and VRFY), internal spoofing, and relay.

Tag: spoofing