Difference between revisions of "Ubuntu Pentest Edition"

From OnnoWiki
Jump to navigation Jump to search
Line 38: Line 38:
 
* subdomainer
 
* subdomainer
 
* urlcrazy
 
* urlcrazy
* Dradis
+
 
 +
===Dradis===
  
 
* dradis client
 
* dradis client
Line 97: Line 98:
 
==Web Analysis & Attack==
 
==Web Analysis & Attack==
 
===Web===
 
===Web===
* --Httprint
+
 
 +
====--Httprint====
 
* --httprint
 
* --httprint
 
* --httprint GUI
 
* --httprint GUI
* --W3af
+
 
 +
====--W3af====
 
* --w3af
 
* --w3af
 
* --w3af console
 
* --w3af console
 +
 
* asp-audit
 
* asp-audit
 
* BurpSuite
 
* BurpSuite
Line 115: Line 119:
 
* ProxyStrike
 
* ProxyStrike
 
* ratproxy
 
* ratproxy
 
+
* Short to Real URL
===Short to Real URL===
 
 
* skipfish
 
* skipfish
 
+
* Social Engineering Toolkit
 
 
===Social Engineering Toolkit===
 
 
* SpikeProxy
 
* SpikeProxy
 
* wapiti
 
* wapiti
Line 128: Line 129:
 
===Cisco===
 
===Cisco===
  
Cisco Auditing Tool
+
* Cisco Auditing Tool
cisco global exploiter
+
* cisco global exploiter
cisco-torch
+
* cisco-torch
copy-router-config
+
* copy-router-config
OCS
+
* OCS
  
 
===Database===
 
===Database===
  
MS-SQL
+
* MS-SQL
metacoretex
+
* metacoretex
MS-SQLscan
+
* MS-SQLscan
sqlinjector
+
* sqlinjector
SQLiX
+
* SQLiX
sqlmap
+
* sqlmap
sqlninja
+
* sqlninja
SQLScan
+
* SQLScan
mysql
+
 
 +
===mysql===
 +
 
 +
* metacoretex
 +
* sqlinjector
 +
* sqlmap
 +
* sqlus
 +
* SQLiX
 +
 
 +
===Oracle DB===
  
metacoretex
+
====--Oracle Auditing Tools====
sqlinjector
+
* --Oracle Password Guesser
sqlmap
+
* --OracleQuery
sqlus
+
* --Oracle Sam Dump
SQLiX
+
* --OracleSysExec
Oracle DB
+
* --Oracle TNS Control
--Oracle Auditing Tools
 
  
--Oracle Password Guesser
+
* DBPwAudit
--OracleQuery
+
* sqlinjector
--Oracle Sam Dump
+
* SQLiX
--OracleSysExec
+
* sqlmap
--Oracle TNS Control
 
  
DBPwAudit
+
===Fuzzing===
sqlinjector
 
SQLiX
 
sqlmap
 
Fuzzing
 
  
Fuzzgrind
+
* Fuzzgrind
fuzzgrind
+
* fuzzgrind
Fuzzgrind GUI
+
* Fuzzgrind GUI
bed
+
* bed
bunny
+
* bunny
file format fuzzing framework
+
* file format fuzzing framework
Genereal Purpose Fuzzer
+
* Genereal Purpose Fuzzer
jbrofuzz
+
* jbrofuzz
SMB Analysis
 
  
samrdump
+
===SMB Analysis===
Smb4K
+
 
smbclient
+
* samrdump
 +
* Smb4K
 +
* smbclient
  
 
===SNMP Analysis===
 
===SNMP Analysis===
Line 190: Line 195:
 
* snmpenum
 
* snmpenum
 
* snmp-fuzz
 
* snmp-fuzz
* OpenVAS
 
  
openVAS add user
+
===OpenVAS===
openVAS client
+
 
openVAS makecert
+
* openVAS add user
openVAS remove user
+
* openVAS client
openVAS server
+
* openVAS makecert
 +
* openVAS remove user
 +
* openVAS server
 
   
 
   
Exploiting
+
==Exploiting==
FastTrack
 
  
fast-track
+
===FastTrack===
fast-track GUI
 
Inguma
 
  
inguma
+
* fast-track
Metasploit Framework
+
* fast-track GUI
  
msfcli
+
===Inguma===
msfconsole
+
 
msfgui
+
* inguma
msfpayload
+
 
msfweb
+
===Metasploit Framework===
 +
 
 +
* msfcli
 +
* msfconsole
 +
* msfgui
 +
* msfpayload
 +
* msfweb
 
   
 
   
Password Lists
+
==Password Lists==
  
Password Lists
+
* Password Lists
Password Lists Web
+
* Password Lists Web
 
   
 
   
Privilege Escalation
+
==Privilege Escalation==
Password Attacks
+
 
--File Attack
+
===Password Attacks===
 +
 
 +
====--File Attack====
 +
* --fcrackzip
 +
* --pdfcrack
 +
* --rarcrack
 +
* --wyd
 +
 
 +
====Offline Attack====
 +
 
 +
=====--Rainbowcrack=====
 +
* --rainbowcrack
 +
* --rainbowcrack GUI
 +
* --rtgen
 +
* --rtsort
  
--fcrackzip
+
* chntpw
--pdfcrack
+
* crunch
--rarcrack
+
* john
--wyd
+
* ophcrack
Offline Attack
+
* pw-inspector
--Rainbowcrack
+
* samdump2
 +
* wyd
  
--rainbowcrack
+
===Online Attack===
--rainbowcrack GUI
 
--rtgen
 
--rtsort
 
  
chntpw
+
* hydra
crunch
+
* lodowep
john
+
* medusa
ophcrack
+
* SSHatter
pw-inspector
+
* tftp-bruteforce
samdump2
 
wyd
 
Online Attack
 
  
hydra
+
===Sniffers===
lodowep
 
medusa
 
SSHatter
 
tftp-bruteforce
 
Sniffers
 
  
arpalert
+
* arpalert
Driftnet
+
* Driftnet
dsniff
+
* dsniff
EtherApe (as root)
+
* EtherApe (as root)
ettercap
+
* ettercap
fimap
+
* fimap
ssldump
+
* ssldump
sslscan
+
* sslscan
sslstrip
+
* sslstrip
tcpick
+
* tcpick
Wireshark
+
* Wireshark
Spoofing
+
 
 +
===Spoofing===
  
EtherApe (as root)
+
* EtherApe (as root)
ettercap
+
* ettercap
icmpush
+
* icmpush
netenum
+
* netenum
PackETH
+
* PackETH
packit
+
* packit
scapy
+
* scapy
ssldump
+
* ssldump
sslstrip
+
* sslstrip
tcpreplay
+
* tcpreplay
 
   
 
   
Connect & Access
+
==Connect & Access==
  
3proxy
+
* 3proxy
cryptcat
+
* cryptcat
dns2tcp
+
* dns2tcp
miredo
+
* miredo
miredo-server
+
* miredo-server
nstx
+
* nstx
proxychains
+
* proxychains
ptunnel
+
* ptunnel
socat
+
* socat
stunnel4
+
* stunnel4
tinyproxy
+
* tinyproxy
udptunnel
+
* udptunnel
 +
 
 +
==Anonymity==
 +
 
 +
* Tor Browser
 
   
 
   
Anonymity
 
  
Tor Browser
+
==Wireless & Bluetooth==
+
 
Wireless & Bluetooth
+
===802.11===
802.11
+
 
Analysing
+
====Analysing====
 +
 
 +
* Kismet
 +
* weplab
 +
* WiFi Radar
  
Kismet
+
====Cracking====
weplab
 
WiFi Radar
 
Cracking
 
 
aircrack-ng suite
 
aircrack-ng suite
  
Line 411: Line 429:
 
ollydbg
 
ollydbg
 
   
 
   
Digital Forensic
+
==Digital Forensic==
Anti-forensic
+
 
 +
===Anti-forensic===
  
 
KGpg
 
KGpg
 
TrueCrypt
 
TrueCrypt
Analysis
+
 
 +
===Analysis===
  
 
autopsy
 
autopsy
Line 424: Line 444:
 
vinetto
 
vinetto
 
Xplico
 
Xplico
File Carving
+
 
 +
===File Carving===
  
 
foremost
 
foremost
 
magicrescue
 
magicrescue
Image Aquiring
+
 
--Advanced Forensic Format
+
===Image Aquiring===
 +
 
 +
====--Advanced Forensic Format====
  
 
--afcat
 
--afcat
Line 443: Line 466:
 
--myrescue
 
--myrescue
 
   
 
   
Tools not listed in the pentest menu
+
==Tools not listed in the pentest menu==
 
 
dnstop
 
dnswalk
 
fprobe
 
fprobe-ng
 
icmpinfo
 
icmptx
 
tcpd
 
tcpdump
 
tcpreen
 
tcpslice
 
 
 
  
 +
* dnstop
 +
* dnswalk
 +
* fprobe
 +
* fprobe-ng
 +
* icmpinfo
 +
* icmptx
 +
* tcpd
 +
* tcpdump
 +
* tcpreen
 +
* tcpslice
  
 
==Referensi==
 
==Referensi==

Revision as of 14:27, 1 October 2010

This is a list of tools installed in Ubuntu Pentest Edition and listed in the pentest menu. To see more details about the tools and usage visit: http://tools.securitytube.net . Not all the tools are in the pentest menu, and the list of tools which are not included in the menu is at the bottom of the page.


Enumeration

Archive

  • metagoofil
  • seat

DNS

  • dnsenum
  • dnsmap
  • dnspredict
  • dnstracer
  • fierce
  • host

Route

  • 0trace
  • Ass
  • intrace
  • netenum
  • netmask
  • nmbscan
  • protos
  • tcptraceroute
  • tctrace

SMTP

  • pirana
  • relayscanner

Searchengine

  • bing-ip2hosts
  • gggooglescan
  • gooscan
  • metagoofil
  • pygoogle
  • subdomainer
  • urlcrazy

Dradis

  • dradis client
  • dradis server
  • Maltego v2.0.2CE

Network

Identify Live Hosts

  • Angry IP Scanner
  • fping
  • genlist
  • hping3
  • netcat
  • netdiscover
  • nmap
  • onesixtyone
  • outputpbnj
  • scanpbnj
  • sslscan
  • tcptraceroute
  • unicornscan
  • Zenmap

OS Fingerprinting

  • nmap
  • p0f
  • protos
  • sslscan
  • unicornscan
  • Xprobe2
  • Zenmap

Port Scan

  • genlist
  • netcat
  • nmap
  • outputpbnj
  • scanpbnj
  • sslscan
  • unicornscan
  • Zenmap

Service Fingerprinting

  • complemento
  • httsquash
  • letdown
  • reverserider
  • amap
  • httprint
  • httprint GUI

Virtual Private Network

  • ikeprobe
  • ike-scan
  • PSK-Crack

Web Analysis & Attack

Web

--Httprint

  • --httprint
  • --httprint GUI

--W3af

  • --w3af
  • --w3af console
  • asp-audit
  • BurpSuite
  • curl
  • DirBuster
  • GrendelScan
  • lynx
  • nessus
  • nikto
  • openAcunetix
  • Paros Proxy
  • ProxyStrike
  • ratproxy
  • Short to Real URL
  • skipfish
  • Social Engineering Toolkit
  • SpikeProxy
  • wapiti
  • Webscarab
  • wfuzz

Cisco

  • Cisco Auditing Tool
  • cisco global exploiter
  • cisco-torch
  • copy-router-config
  • OCS

Database

  • MS-SQL
  • metacoretex
  • MS-SQLscan
  • sqlinjector
  • SQLiX
  • sqlmap
  • sqlninja
  • SQLScan

mysql

  • metacoretex
  • sqlinjector
  • sqlmap
  • sqlus
  • SQLiX

Oracle DB

--Oracle Auditing Tools

  • --Oracle Password Guesser
  • --OracleQuery
  • --Oracle Sam Dump
  • --OracleSysExec
  • --Oracle TNS Control
  • DBPwAudit
  • sqlinjector
  • SQLiX
  • sqlmap

Fuzzing

  • Fuzzgrind
  • fuzzgrind
  • Fuzzgrind GUI
  • bed
  • bunny
  • file format fuzzing framework
  • Genereal Purpose Fuzzer
  • jbrofuzz

SMB Analysis

  • samrdump
  • Smb4K
  • smbclient

SNMP Analysis

  • Mibble::Mib Parser
  • MibbleBrowser
  • net-snmp tools
  • net-snmp tools collection
  • admsnmp
  • scli - SNMP Management tools
  • snmpcheck
  • snmpenum
  • snmp-fuzz

OpenVAS

  • openVAS add user
  • openVAS client
  • openVAS makecert
  • openVAS remove user
  • openVAS server

Exploiting

FastTrack

  • fast-track
  • fast-track GUI

Inguma

  • inguma

Metasploit Framework

  • msfcli
  • msfconsole
  • msfgui
  • msfpayload
  • msfweb

Password Lists

  • Password Lists
  • Password Lists Web

Privilege Escalation

Password Attacks

--File Attack

  • --fcrackzip
  • --pdfcrack
  • --rarcrack
  • --wyd

Offline Attack

--Rainbowcrack
  • --rainbowcrack
  • --rainbowcrack GUI
  • --rtgen
  • --rtsort
  • chntpw
  • crunch
  • john
  • ophcrack
  • pw-inspector
  • samdump2
  • wyd

Online Attack

  • hydra
  • lodowep
  • medusa
  • SSHatter
  • tftp-bruteforce

Sniffers

  • arpalert
  • Driftnet
  • dsniff
  • EtherApe (as root)
  • ettercap
  • fimap
  • ssldump
  • sslscan
  • sslstrip
  • tcpick
  • Wireshark

Spoofing

  • EtherApe (as root)
  • ettercap
  • icmpush
  • netenum
  • PackETH
  • packit
  • scapy
  • ssldump
  • sslstrip
  • tcpreplay

Connect & Access

  • 3proxy
  • cryptcat
  • dns2tcp
  • miredo
  • miredo-server
  • nstx
  • proxychains
  • ptunnel
  • socat
  • stunnel4
  • tinyproxy
  • udptunnel

Anonymity

  • Tor Browser


Wireless & Bluetooth

802.11

Analysing

  • Kismet
  • weplab
  • WiFi Radar

Cracking

aircrack-ng suite

airbase-ng aircrack-ng airdecap-ng airdecloak-ng airdriver-ng aireplay-ng airmon-ng airodump-ng airolib-ng airpwn-ng airserv-ng airtun-ng easside-ng packetforge-ng tkiptun-ng wesside-ng --WifiZoo

--wifizoo --wifizoo webGUI

airsnarf asleap cowpatty evilapcrt genpmk Kismet pyrit Spoofing

aircrack-ng suite airbase-ng aircrack-ng airdecap-ng airdecloak-ng airdriver-ng aireplay-ng airmon-ng airodump-ng airolib-ng airpwn-ng airserv-ng airtun-ng easside-ng packetforge-ng tkiptun-ng wesside-ng wifizoo Misc

macchanger macchanger-gtk Spectrum Tool - WiSpy wavemon Bluetooth

bluebugger blueprint btscanner hcidump minicom obexftp ussp-push Rfid

RFIDIOt suite

Voip Media

ohrwurm redirectpoison rtpbreak rtpflood rtpinsertsound rtpmixsound voipong Signaling --SipVicious suite

--svcrack --svmap --svreport --svwar

add registrations enumiax erase registrations iaxflood inviteflood protos-sip sipcrack sipdump sipsak sipwitch smap vnak voiper voiphopper warwox

Reverse engineering

gdb IDA Pro Free ollydbg

Digital Forensic

Anti-forensic

KGpg TrueCrypt

Analysis

autopsy Digital Forensic Framework MBoxgrep scalpel vinetto Xplico

File Carving

foremost magicrescue

Image Aquiring

--Advanced Forensic Format

--afcat --afcompare --affix --afinfo --afstats --afxml --Aimage --dcfldd --dd_rescue --galleta --myrescue

Tools not listed in the pentest menu

  • dnstop
  • dnswalk
  • fprobe
  • fprobe-ng
  • icmpinfo
  • icmptx
  • tcpd
  • tcpdump
  • tcpreen
  • tcpslice

Referensi

Pranala Menarik