Wiki: Tools (Hacking)

WARNING: Wiki content is an archive, no promise about quality!

Useful tools

This is my attempt to maintain a list of tools. I might eventually sort it by OS or purpose or whatever, but eh? Note that I'm not including wireless tools in this list. So, in no particular order, ...

General (uncategorized)

• nmap
• nessus
• metasploit
• hping3
• netcat
• wireshark (ethereal)
• putty
• pstools
• RegMon/FileMon/procmon (from sysinternals)
• unix-privesc-check
• amap
• xprobe2
• ettercap
• BiLE.pl
• LfT
• Wireshark SSL cracker
• gsecdump
• p0f
• nbtscan

Enumeration/Passwords

• user2sid/sid2user
• enum
• fgdump
• pwdump
• cain&able
• rcrack (+tables)
• john
• hydra
  • libssh2 0.11 (http://0xbadc0de.be/libssh/libssh-0.11.tgz)
• pshtoolkit (pass-the-hash toolkit)
• samba (w/ hash passing)
  • Slackware source: http://slackware.mirrors.tds.net/pub/slackware/slackware-12.1/source/n/samba/
  • Patch: http://www.foofus.net/jmk/passhash.html
• SQLHack (to crack MySQL old_password entries)

Web

• DirBuster (http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project)
• nikto.pl
• paros
• Malzilla (http://malzilla.sourceforge.net/)

Stuff to investigate

• SMBProxy (http://www.cqure.net/wp/11/)

Useful Non-metasploit Exploits

• vmsplice (http://www.milw0rm.com/exploits/5093)
  • Works well against Fedora Core 8

Firefox Addons

I don't actually use all these on a regular basis, but I found some on another site.

• Add & Edit Cookies
• Firebug
• Foxy Proxy
• Noscript
• Server Spy
• Tamper Data
• User Agent Switcher
• Web Developer
• SSL Blacklist
• Firebug
• Hackbar
• Header Monitor
• Poster
• SQL Inject Me

This is cool enough that I had to link it from somewhere

• Security Bookmarklets (http://ha.ckers.org/bookmarklets.html)

Wireless tools

TODO: learn to hack wireless. :)

Stuff I wrote

• See My Projects

Tools used by an unnamed organization

• Achilles Proxy
• ActivePerl
• Air Magnet
• AirSnort
• Algosec
• amap
• Appscan
• ArCrack
• Auditor
• AutoIT
• Brutus
• Burp Proxy
• Burp Suite
• Cadaver
• Cai & Abel
• CAL9000
• Canvas Framework
• CIS RAT
• ClearSight
• Core Impact
• cURL
• Cygwin
• DAVexplorer
• DiG
• Dmitry
• Dsniff
• Enum
• Ettercap
• Fortify
• Fping
• Hping2, Hping3
• Hunt
• Hydra
• ikescan
• Iptraf
• Jad
• JADE Proxy
• JODE
• John the Ripper
• kismet
• LdapMiner
• MBSA
• Metasploit
• Nbtscan
• Nemesis
• Nessus
• Netcat
• Net-SNMP
• NetStumbler
• Nikto
• Nmap
• N-Stealth
• OAT
• OpenLDAP
• OpenVAS
• OpenVPN
• Ophcrack
• Paros
• Pwdump
• Python
• Retina
• Sandstorm
• Scapy
• ScreamingCSS
• Sing
• SiVuS
• SmartProxy
• Sniffit
• Snmpscan
• Solar Winds
• Stunnel
• SuperScan
• Tcpdump
• Telesweep
• TSEnum
• WebCracker
• Webinspect
• Wget
• Wireshark