SecTools

Network scanning for hosts responding to ping.

a program for running Nmap scans and storing the results in a PBNJ 2.0 database.

a program to query a PBNJ 2.0 database.

PBNJ is a suite of tools to monitor changes on a network over time. It does this by checking for changes on the target machine(s), which includes the details about the services running on them as well as the service state. PBNJ parses the data from a scan and stores it in a database. PBNJ […]

Unicornscan is a new information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient.

Umit is Another Nmap frontend.

SinFP is a new approach to OS fingerprinting, which bypasses limitations that nmap has. This approach brings the era of OS fingerprinting on a per-TCP port basis, not on a per-host basis.

P0f is a versatile passive OS fingerprinting tool.

Protos is a IP protocol scanner. It goes through all possible IP protocols and uses a negative scan to sort out unsupported protocols which should be reported by the target using ICMP protocol unreachable messages.

psk-crack attempts to crack IKE Aggressive Mode pre-shared keys that have
been previously gathered using ike-scan with the –pskcrack option.

psk-crack can operate in two different modes:

1) Dictionary cracking mode: this is the default mode in which psk-crack tries
each candidate word from the dictionary file in turn until it finds a match, or
all the […]

NmapFE is a GUI X11 front end for nmap.

Nmap (”Network Mapper”) is an open source tool for network exploration and security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are […]

IKEProbe - ike scanning tool

Netdiscover is an active/passive address reconnaissance tool, mainly developed for those wireless networks without dhcp server, when you are wardriving. It can be also used on hub/switched networks.

ike-scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPsec VPN servers.

Fping is a ping(1) like program which uses the Internet Control Message Protocol (ICMP) echo request to determine if a host is up. fping is different from ping in that you can specify any number of hosts on the command line, or specify a file containing the lists of hosts to ping. Instead of trying […]

AutoScan is an application designed to explore and to manage your network. Entire subnets can be scanned simultaneously without human intervention.

ASS is a Autonomous System Scanner. Because routing protocols use autonomous systems to distinguish between various routing “domains” and various ways to communicate, you need something which works like a TCP port scanner but knows more than one protocol.