SecTools

Httprint GUI

Jalal Rohani — Wed, 29 Aug 2007 13:04:35 +0000

httprint is a web server fingerprinting tool. Info: http://net-square.com/httprint

These icons link to social bookmarking sites where readers can share and discover new web pages.

Httprint

Jalal Rohani — Wed, 29 Aug 2007 13:04:13 +0000

httprint is a web server fingerprinting tool. It relies on web server characteristics to accurately identify web servers. Normally by changing server signatures and banner strings or enabling specific plug-ins, various web fingerprinting tools may be confused and provide false positive results. This is not the case with httprint. httprint can also be used to detect web enabled devices which do not have a server banner string, such as: Wireless AP, Routers, Switches, Cable modems, etc. httprint uses text based signature strings to identify targeted web servers. Info: http://net-square.com/httprint/

These icons link to social bookmarking sites where readers can share and discover new web pages.

Halberd

Jalal Rohani — Wed, 29 Aug 2007 13:03:52 +0000

Halberd discovers HTTP load balancers. It is useful for web application security auditing and for load balancer configuration testing. Info: http://halberd.superadditive.com/

These icons link to social bookmarking sites where readers can share and discover new web pages.

HTTP PUT

Jalal Rohani — Wed, 29 Aug 2007 13:03:24 +0000

Usage: /pentest/web/put.pl -h -l

       -h        = host you want to attack
       -r      = remote file name
       -f       = local file name
       -p        = web server port

Other Options:

       -x              = ssl mode
       -v              = verbose

Example:

       /pentest/web/put.pl -h target -r /cmdasp.asp -f cmdasp.asp

These icons link to social bookmarking sites where readers can share and discover new web pages.

GetSids

Jalal Rohani — Wed, 29 Aug 2007 13:02:54 +0000

Getsids tries to enumerate Oracle Sids by sending the services command to the Oracle TNS listener. Like doing ‘lsnrctl service’.

These icons link to social bookmarking sites where readers can share and discover new web pages.

GFI LanGuard 2.0

Jalal Rohani — Wed, 29 Aug 2007 01:19:20 +0000

GFI LANguard Network Security Scanner (N.S.S.) checks your network for all potential methods that a hacker might use to attack it. By analyzing the operating system and the applications running on your network, GFI LANguard N.S.S. identifies possible security holes. In other words, it plays the devil’s advocate and alerts you to weaknesses before a hacker can find them, enabling you to deal with these issues before a hacker can exploit them. Info: http://www.gfi.com/lannetscan/

These icons link to social bookmarking sites where readers can share and discover new web pages.

Fuzzer 1.2

Jalal Rohani — Wed, 29 Aug 2007 01:19:01 +0000

What this tool does: “Fuzzing” is an automated software testing technique that generates and submits random or sequential data to various areas of an application in an attempt to uncover security vulnerabilities. For example, when searching for buffer overflows, a tester can simply generate data of various sizes and send it to one of the application entry points to observe how the application handles it. Info: http://www.securiteam.com/tools/5TP012AHFU.html

These icons link to social bookmarking sites where readers can share and discover new web pages.

Cisco Torch

Jalal Rohani — Wed, 29 Aug 2007 01:17:39 +0000

Cisco Torch mass scanning, application layer fingerprinting, and exploitation tool to discover and attack remote Cisco hosts running Telnet, SSH, Web, TFTP, NTP and SNMP services. Useful in auditing large networks for misconfigured/un-updated Ciscos. Cisco Torch Homepage: http://www.arhont.com/ViewPage7422.html?siteNodeId=3&languageId=1&contentId=-1

These icons link to social bookmarking sites where readers can share and discover new web pages.

Cisco Scanner

Jalal Rohani — Wed, 29 Aug 2007 01:17:21 +0000

Output stored in cisco.txt Usage: ciscos [option] Class A scan: ciscos 127 1 Class B scan: ciscos 127.0 2 Class C scan: ciscos 127.0.0 3 [-C ] maximum threads [-t ] seconds before connection timeout

These icons link to social bookmarking sites where readers can share and discover new web pages.

Cisco OCS Mass Scanner

Jalal Rohani — Wed, 29 Aug 2007 01:17:02 +0000

Cisco Scanning Tool usage: ./ocs xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy xxx.xxx.xxx.xxx = range start IP yyy.yyy.yyy.yyy = range end IP Cisco OCS Mass Scanner Homepage: http://www.hacklab.tk

These icons link to social bookmarking sites where readers can share and discover new web pages.