Sybex - Tools Flashcards by David Therriault

Q

WHOIS

A

OSINT: gather info from public records about domain ownership

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Nslookup

A

OSINT: Help identify IP address associated with an organization

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

theHarvester

A

OSINT: Scours search engines and other sources to find email addresses, employee names, and infrastructure details about an org

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Recon-ng

A

OSINT: Modular web reconnaissance framework that organizes and manages OSINT work. (Need more info on this)

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Censys

A

OSINT: web-based tool that probes IP addresses across the internet then provides pen testers with access to that info through a search engine

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

FOCA

A

OSINT: Fingerprinting Organizations with Collective Archives; Find Metadata in Office Documents, PDFs, and other common file formats

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Shodan

A

OSINT: Specialized Search Engine for discovery of vulnerable IoT devices from public sources

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Maltego

A

OSINT: commercial product that assists with visualization of data gathered via OSINT

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

NMAP

A

OSINT: Port Scanning and Network Mapping tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Nessus

A

VulnScan: commercial tool used to scan wide variety of devices

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

OpenVAS

A

VulnScan: OSS network vuln scanner

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

SqlMap

A

VulnScan: automate Sql injection attacks against web apps with database back ends

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Nikto, Wapiti, W3AF

A

VulnScan: OSS Web Application vuln scanners

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

WPScan

A

VulnScan: Web app testing tool designed to work with websites running WordPress

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

SCAP

A

VulnScan: (Security Content Automation Protocol) Set of tools designed to help orgs manage compliance and security standards

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

SET

A

SocialEngineer: (Social Engineering Toolkit) Framework for automating the social engineering process; sending spearphishing emails, hosting fake websites, collecting credentials

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

BeEF

A

SocialEngineer: (Browser Exploitation Framework) automated toolkit for using social engineering to take over a victim’s web browser

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Hashcat

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

John the Ripper

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Hydra

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Medusa

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Patator

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Cain

A

CredentialTest: password cracking and reverse-engineer hashed password tool

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

CeWL

A

CredentialTest: custom wordlist generator that searched websites for keywords that may be used in password-guessing attacks

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Mimikatz

A

CredentialTest: Retrieve creds from memory on Windows machines

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

DirBuster

A

CredentialTest: brute-forcing tool to enumerate files and directories on web server

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

Immunity Debugger

A

Debugger/SoftwareTest: supports pentesting and reverse engineering malware

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

GDB

A

Debugger/SoftwareTest: OSS debugger for Linux for use with many programming languages

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

Q

OllyDbg

A

Debugger/SoftwareTest:Windows debugger that works on binary code at the assembly language level

Q

WinDbg

A

Debugger/SoftwareTest:Windows Specific debug tool created by Microsoft

Q

IDA

A

Debugger/SoftwareTest:commercial debugging tool for use on Windows/Mac/Linux

Q

Brakeman

A

Debugger/SoftwareTest:static software analysis tool for scanning Ruby on Rails apps

Q

Covenant

A

Debugger/SoftwareTest:software security testing tool for testing .NET apps

Q

TruffleHog

A

Debugger/SoftwareTest: scans through code repos for accidentally published secrets

Q

Wireshark

A

Network Testing: protocol analyzer, eavesdrop on network traffic

Q

Hping

A

Network Testing: command line tool to artificially generate network traffic

Q

Aircrack-ng

A

Network Testing: wireless network security testing tool

Q

WiFite

A

Network Testing: wireless network security testing tool

Q

mdk4

A

Network Testing: wireless network security testing tool

Q

Fern

A

Network Testing: wireless network security testing toolK

Q

Kismet

A

Network Testing: wireless network security testing tool

Q

Rogue Wireless Access points

A

Network Testing: used to attract connections from people

Q

EAPHammer

A

Network Testing: used to conduct evil twin attacks against WPA2-Enterprise wireless networks

Q

Reaver

A

Network Testing: conduct attacks against networks that support WPS

Q

Spooftooph

A

Network Testing: bluetooth attacks

Q

Wireless Geographic Logging Engine (WiGLE)

A

Network Testing: open database of wireless network info collected by community and published for open access

Q

Online SSL Checkers

A

Network Testing: determine if websites are susceptible to TLS/SSL vulnerabilities

Q

SSH

A

Remote Access: secure encrypted communication

Q

Ncat and Netcat

A

Remote Access: easy way to read and write data over network connections

Q

ProxyChains

A

Remote Access: allows testers to force connections through a proxy server where they may be inspected and altered before being passed onto final destination

Q

Metasploit

A

Exploitations: most popular exploitation framework that supports thousands of plug-ins

Q

SearchSploit

A

Exploitations: command-line tool to search through db of known exploits

Q

PowerSploit

A

Windows-centric sets of Powershell Scripts to automate penetration testing tasksWindows-centric sets of Powershell Scripts to automate penetration testing tasks

Q

Empire

A

Exploitations:Windows-centric sets of Powershell Scripts to automate penetration testing tasks

Q

Responder

A

Exploitations: toolkit used to answer NetBIOS queries from Windows Systems

Q

Impacket

A

Exploitations: set of network tools that provide low-level access to network protocols

Q

Mitm6

A

Exploitations: tool used to conduct attacks against IPv6 networks

Q

CrackMapExec

A

Exploitations: set of tools to evaluate AD environment after gaining network access

Q

OpenSteg

A

Steganography: general purpose tool to hide text within images and other binary files

Q

Steghide

A

Steganography: general purpose tool to hide text within images and other binary files

Q

Coagula

A

Steganography: used to embed text within audio files

Q

Sonic Visualizer

A

Steganography: audio analysis tool to detect alterations that may have been made by steganography tools

Q

Snow

A

Steganography: Uses white space and tabs in a document to hide information

Q

TinEye

A

Steganography: reverse image search tool that allows researchers to identify the original image when they suspect steg is being used

Q

Metagoofil

A

Steganography: extract metadata from a large variety of file types

Q

ScoutSuite

A

CloudTools: Cloud Security and Auditing tool

Q

CloudBrute

A

CloudTools: scanner used to identify cloud components used by organizations

Q

Pacu

A

CloudTools: cloud exploitation framework used specifically for AWS environments

Q

Cloud Custodian

A

CloudTools: rule enforcement engine to ensure consistent application of security rules across environments

Q

ExifTool

A

OSINT: easily see metadata on a file