Walpapers | Pictures | Fun Maza | Poetry And All About Fun: auditing

Natural Beauty Girl

Natural Beauty Girl

Top 15 Security/Hacking Tools & Utilities

<ins style="border: medium none; display: inline-table; height: 60px; margin: 0pt; padding: 0pt; position: relative; visibility: visible; width: 468px;"></ins><img alt="" class="alignleft" height="181" src="http://www.paulspoerry.com/wp-content/uploads/thrivesolution.net/aewichita/images/stories/security-icon-big.gif" title="Security" width="179" />Darknet <a href="http://www.darknet.org.uk/2006/04/top-15-securityhacking-tools-utilities/" target="_blank">has released</a>  it’s list for the Top 15 Security/Hacking Tools and Utilities. Many of  these I’ve seen before and should be familiar to a lot of people, but  there may be a few nuggets you haven’t seen before. Topic include network scanning, wireless security, password cracking, etc. It’s really a great list so check’em out.<br /><span id="more-521"></span><br /><strong>1. Nmap</strong><br />I think everyone has heard of this one, recently evolved into the 4.x series.<br />Nmap (â€Network Mapperâ€) is a free open source utility for network  exploration or security auditing. It was designed to rapidly scan large  networks, although it works fine against single hosts. Nmap uses raw IP  packets in novel ways to determine what hosts are available on the  network, what services (application name and version) those hosts are  offering, what operating systems (and OS versions) they are running,  what type of packet filters/firewalls are in use, and dozens of other  characteristics. Nmap runs on most types of computers and both console  and graphical versions are available. Nmap is free and open source.<br />Can be used by beginners (-sT) or by pros alike (â€“packet_trace). A very versatile tool, once you fully understand the results.<br /><a href="http://www.insecure.org/nmap/download.html" target="_blank">Get Nmap Here</a><br /><div> <ins style="border: medium none; display: inline-table; margin: 0pt; padding: 0pt; position: relative; visibility: visible;"><ins id="google_ads_frame2_anchor" style="border: medium none; display: block; margin: 0pt; padding: 0pt; position: relative; visibility: visible;"></ins></ins></div><strong>2. Nessus Remote Security Scanner</strong><br />Recently went closed source, but is still essentially free. Works with a client-server framework.<br />Nessus is the worldâ€™s most popular vulnerability scanner used in  over 75,000 organizations world-wide. Many of the worldâ€™s largest  organizations are realizing significant cost savings by using Nessus to  audit business-critical enterprise devices and applications.<br /><a href="http://www.nessus.org/download/" target="_blank">Get Nessus Here</a><br /><strong>3. John the Ripper</strong><br />Yes, <a href="http://www.darknet.org.uk/2006/03/jtr-password-cracking-john-the-ripper-17-released-finally/" target="_blank">JTR 1.7 was recently released</a>!<br />John the Ripper is a fast password cracker, currently available for  many flavors of Unix (11 are officially supported, not counting  different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary  purpose is to detect weak Unix passwords. Besides several crypt(3)  password hash types most commonly found on various Unix flavors,  supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM  hashes, plus several more with contributed patches.<br /><a href="http://www.openwall.com/john/" target="_blank">You can get JTR Here</a><br /><strong>4. Nikto</strong><br />Nikto is an Open Source (GPL) web server scanner which performs  comprehensive tests against web servers for multiple items, including  over 3200 potentially dangerous files/CGIs, versions on over 625  servers, and version specific problems on over 230 servers. Scan items  and plugins are frequently updated and can be automatically updated (if  desired).<br />Nikto is a good CGI scanner, there are some other tools that go well  with Nikto (focus on http fingerprinting or Google hacking/info  gathering etc, another article for just those).<br /><a href="http://www.cirt.net/code/nikto.shtml" target="_blank">Get Nikto Here</a><br /><strong>5. SuperScan</strong><br />Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update  of the highly popular Windows port scanning tool, SuperScan.<br />If you need an alternative for nmap on Windows with a decent interface, I suggest you check this out, itâ€™s pretty nice.<br /><a href="http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/superscan4.htm" target="_blank">Get SuperScan Here</a><br /><strong>6. p0f</strong><br />P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the operating system on:<br />- machines that connect to your box (SYN mode),<br />– machines you connect to (SYN+ACK mode),<br />– machine you cannot connect to (RST+ mode),<br />– machines whose communications you can observe.<br />Basically it can fingerprint anything, just by listening, it doesnâ€™t make <strong>ANY</strong> active connections to the target machine.<br /><a href="http://lcamtuf.coredump.cx/p0f/p0f.shtml" target="_blank">Get p0f Here</a><br /><strong>7. Wireshark (Formely Ethereal)</strong><br />Wireshark is a GTK+-based network protocol analyzer, or sniffer, that  lets you capture and interactively browse the contents of network  frames. The goal of the project is to create a commercial-quality  analyzer for Unix and to give Wireshark features that are missing from  closed-source sniffers.<br />Works great on both Linux and Windows (with a GUI), easy to use and  can reconstruct TCP/IP Streams! Will do a tutorial on Wireshark later.<br /><a href="http://www.wireshark.org/" target="_blank">Get Wireshark Here</a><br /><strong>8. Yersinia</strong><br />Yersinia is a network tool designed to take advantage of some  weakeness in different Layer 2 protocols. It pretends to be a solid  framework for analyzing and testing the deployed networks and systems.  Currently, the following network protocols are implemented: Spanning  Tree Protocol (STP), Cisco Discovery Protocol (CDP), Dynamic Trunking  Protocol (DTP), Dynamic Host Configuration Protocol (DHCP), Hot Standby  Router Protocol (HSRP), IEEE 802.1q, Inter-Switch Link Protocol (ISL),  VLAN Trunking Protocol (VTP).<br />The best Layer 2 kit there is.<br /><a href="http://yersinia.sourceforge.net/" target="_blank">Get Yersinia Here</a><br /><strong>9. Eraser</strong><br />Eraser is an advanced security tool (for <em>Windows</em>), which  allows you to completely remove sensitive data from your hard drive by  overwriting it several times with carefully selected patterns. Works  with Windows 95, 98, ME, NT, 2000, XP and DOS. Eraser is Free software  and its source code is released under GNU General Public License.<br />An excellent tool for keeping your data really safe, if youâ€™ve  deleted it..make sure itâ€™s really gone, you donâ€™t want it hanging  around to bite you in the ass.<br /><a href="http://www.heidi.ie/eraser/download.php" target="_blank">Get Eraser Here.</a><br /><div> <ins style="border: medium none; display: inline-table; margin: 0pt; padding: 0pt; position: relative; visibility: visible;"><ins id="google_ads_frame3_anchor" style="border: medium none; display: block; margin: 0pt; padding: 0pt; position: relative; visibility: visible;"></ins></ins></div><strong>10. PuTTY</strong><br />PuTTY is a free implementation of Telnet and SSH for Win32 and Unix  platforms, along with an xterm terminal emulator. A must have for any  h4Ã—0r wanting to telnet or SSH from Windows without having to use the  crappy default MS command line clients.<br /><a href="http://www.chiark.greenend.org.uk/%7Esgtatham/putty/" target="_blank">Get PuTTY Here</a>.<br /><strong>11. LCP</strong><br />Main purpose of LCP program is user account passwords auditing and  recovery in Windows NT/2000/XP/2003. Accounts information import,  Passwords recovery, Brute force session distribution, Hashes computing.<br />A good free alternative to L0phtcrack.<br />LCP was briefly mentioned in our well read <a href="http://www.darknet.org.uk/2006/02/password-cracking-with-rainbowcrack-and-rainbow-tables/" target="_blank">Rainbow Tables and RainbowCrack</a> article.<br /><a href="http://www.lcpsoft.com/english/download.htm" target="_blank">Get LCP Here</a><br /><strong>12. Cain and Abel</strong><br />My personal favourite for password cracking of any kind.<br />Cain & Abel is a password recovery tool for Microsoft Operating  Systems. It allows easy recovery of various kind of passwords by  sniffing the network, cracking encrypted passwords using Dictionary,  Brute-Force and Cryptanalysis attacks, recording VoIP conversations,  decoding scrambled passwords, revealing password boxes, uncovering  cached passwords and analyzing routing protocols. The program does not  exploit any software vulnerabilities or bugs that could not be fixed  with little effort.<br /><a href="http://www.oxid.it/cain.html" target="_blank">Get Cain and Abel Here</a><br /><strong>13. Kismet</strong><br />Kismet is an 802.11 layer2 wireless network detector, sniffer, and  intrusion detection system. Kismet will work with any wireless card  which supports raw monitoring (rfmon) mode, and can sniff 802.11b,  802.11a, and 802.11g traffic.<br />A good wireless tool as long as your card supports rfmon (look for an orinocco gold).<br /><a href="http://www.kismetwireless.net/download.shtml" target="_blank">Get Kismet Here</a><br /><strong>14. NetStumbler</strong><br />Yes a decent wireless tool for Windows! Sadly not as powerful as  itâ€™s Linux counterparts, but itâ€™s easy to use and has a nice  interface, good for the basics of war-driving.<br />NetStumbler is a tool for Windows that allows you to detect Wireless  Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has  many uses:<br /><ul><li>Verify that your network is set up the way you intended.</li><li>Find locations with poor coverage in your WLAN.</li><li>Detect other networks that may be causing interference on your network.</li><li>Detect unauthorized â€œrogueâ€ access points in your workplace.</li><li>Help aim directional antennas for long-haul WLAN links.</li><li>Use it recreationally for WarDriving.</li></ul><a href="http://www.stumbler.net/" target="_blank">Get NetStumbler Here</a><br /><strong>15. hping</strong><br />To finish off, something a little more advanced if you want to test your TCP/IP packet monkey skills.<br />hping is a command-line oriented TCP/IP packet assembler/analyzer.  The interface is inspired to the ping unix command, but hping isnâ€™t  only able to send ICMP echo requests. It supports TCP, UDP, ICMP and  RAW-IP protocols, has a traceroute mode, the ability to send files  between a covered channel, and many other features.

Top 15 Security/Hacking Tools & Utilities

Darknet has released it’s list for the Top 15 Security/Hacking Tools and Utilities. Many of these I’ve seen before and should be familiar...

Natural Beauty Girl

Top 15 Security/Hacking Tools & Utilities

Popular Posts

Labels

Blog Archive