Security tools Flashcards
Nmap
A port mapper.
Probes devices for:
Host discovery (network discovery)
Port scanning
Service Version Detection
OS fingerprinting
(Scripting and automation)
Wireshark
An open source protocol analyzer (or sniffer).
Only listen to what is in your link
Will tell you:
Which applications are running
Data from non-encrypted channels
OS of the target system (different OS send diff packets)
Ettercap
Ettercap is a comprehensive suite for man-in-the-middle attacks. It features sniffing of live connections, content filtering on the fly and includes many features for network and host analysis.
Man-in-the-middle attacks
DNS spoofing
Credentials capture
DoS attack
Burp Suite
Burp Suite is a proxy program that enables us to track, examine, and alter requests made by our browsers before they are forwarded to a distant server.
John the Ripper
Is a password sniffer/cracker (in unix).
Modes of operation
1. Wordlist
Test passphrases provided by
a wordlist
Mind the password length
2. Single crack
User information is added
A large set of mangling rules
3. Incremental
The brute-force option
(Tries every possible option)
4. External