SecTools

Firewalk

Jalal Rohani — Fri, 23 Jun 2006 19:26:47 +0000

Firewalk : Advanced traceroute
Firewalk employs traceroute-like techniques to analyze IP packet responses to determine gateway ACL filters and map networks. This classic tool was rewritten from scratch in October 2002. Note that much or all of this functionality can also be performed by the Hping2 –traceroute option.

These icons link to social bookmarking sites where readers can share and discover new web pages.

THC Amap

Jalal Rohani — Fri, 23 Jun 2006 16:21:47 +0000

THC Amap : An application fingerprinting scanner Amap is a great tool for determining what application is listening on a given port. Their database isn’t as large as what Nmap uses for its version detection feature, but it is definitely worth trying for a 2nd opinion or if Nmap fails to detect a service. Amap even knows how to parse Nmap output files. This is yet another valuable tool from the great guys at THC.Amap is a next-generation tool for assisting network penetration testing. It performs fast and reliable application protocol detection, independent on the TCP/UDP port they are being bound to.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Hping2

Jalal Rohani — Fri, 23 Jun 2006 13:50:56 +0000

Hping2 : A network probing utility like ping on steroids
This handy little utility assembles and sends custom ICMP, UDP, or TCP packets and then displays any replies. It was inspired by the ping command, but offers far more control over the probes sent. It also has a handy traceroute mode and supports IP fragmentation. This tool is particularly useful when trying to traceroute/ping/probe hosts behind a firewall that blocks attempts using the standard utilities. This often allows you to map out firewall rulesets. It is also great for learning more about TCP/IP and experimenting with IP protocols.

These icons link to social bookmarking sites where readers can share and discover new web pages.