Security Tools Part 2 (Network Tools)

Question 1

What command line tool is used to transfer data to or from a server using many different protocols?

Answer 1

curl

Note: HTTP, FTP, IMAP, POP3, SCP, SFTP, SMTP, TFTP, TELNET, LDAP, FILE)

Question 2

What python script is used to gather emails, subdomains, hosts, employee names, open ports, and banners from different public sources?

Answer 2

the harvester

Note: This is a recon tool used by pen testers or analysts who want to identify possible weaknesses

Question 3

What automated scanner can be used during a penetration test to enumerate and scan for vulnerabilities on a network?

Answer 3

sn1per

Question 4

What utility is used to create an exploitation website that can perform open port scans in a stealthy manner?

Answer 4

scanless

Question 5

What utility is used for DNS enumeration to locate all the DNS servers/entries for a given organization?

Answer 5

dnsenum

Note: This is an easier, automated process of doing nslookup/dig. It’s used by hackers/pen testers

Question 6

What proprietary vulnerability scanner can remotely scan a computer or network for vulnerabilites?

Answer 6

Nessus

Note: This is an infrastructure scanner; routers, switches, hosts, servers

Question 7

What open source software automates analysis of suspicious files?

Answer 7

Cuckoo

Note: This is sandbox environment used to see how a suspicious file will behave