Pentesting Tools Flashcards
Command to delete or clear all the entries from bash history
history -c
A part of PowerShell used for monitoring Remote Window devices
WMI (Window Management Instrumentation)
Utility provides a complete security auditing and attack framework designed exclusively for mobile devices running the Android operating system
Drozer
hping flag for sending SYN traffic
-S
Two tools used for performing fuzzing on an application
AFL and Peach
- Used to conduct brute-force password attacks
- Can be used to compromise a variety of network services, such as FTP, SNMP, and SSH servers
Patator
Python wrapper that can extract Java source code directly from an Android APK executable
Android APK Decompilation for the Lazy (APKX)
Tool that can be used to perform static application security testing (SAST) or dynamic application security testing (DAST) as part of software assurance.
Findsecbugs
nmap flag used to send scans from a spoofed IP address
-D
nmap flag used to scan a specified number of random hosts
-iR
nmap flag used to scan a host (or an entire subnet) without actually discovering hosts
-Pn
nmap flag used to discover hosts, but not actually scan any of their ports.
-sn
nmap flag used to scan the specified range of IP addresses for hosts. It then lists targets to scan
-sL
