Questions tagged [tools]

Tools used by security professionals

Filter by
Sorted by
Tagged with
1
vote
1answer
69 views

Tools to produce an MD5 collision?

I'd like to learn a bit more about MD5 collisions. So let's assume I have a message m: m = somesecretmessage And I hash that message: z = md5(m) The only know information is z. I do not know m. ...
0
votes
1answer
73 views

How do professional pentesters use Kali? [on hold]

I'm an aspiring Hacker/Pentester/Red-teamer. I'm somewhat familiar with Linux, currently using Windows, Ubuntu and Kali. I've know that many professional pentesters use Kali for their job. There are ...
0
votes
1answer
52 views

Security test within a staging environment. Is SOAPUI sufficient as a test tool?

Currently I am working on a project in which I am supposed to define the following aspects as a test manager: Conception of a penetration test for a test staging environment Planning security ...
-2
votes
2answers
182 views

Why use tools such as BurpSuite, nmap or SQLmap?

I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
1
vote
2answers
128 views

OpenSource API Security Testing Automation?

I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
-1
votes
2answers
93 views

ZAP: Evaluate / Show response in browser

Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser. However, since the payload was sent with POST, I can't just use "Open URL in ...
1
vote
1answer
82 views

Multicore hacker tools?

Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
40
votes
5answers
6k views

How should source code security be checked?

How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
0
votes
1answer
307 views

Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank

I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
1
vote
1answer
535 views

Malware Execution Delay

I am new to malware analysis and am currently using Cuckoo to understand some of the basics. I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
0
votes
1answer
46 views

How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?

My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
0
votes
1answer
3k views

Kali Linux and Cell Phone Security

Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
-2
votes
2answers
250 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
1
vote
1answer
154 views

Yara rules not working in debian [closed]

Yara rules are working on Windows 7 perfectly. I am able to scan and detect malicious commands in .exe malware files but when I run the same program in debian v8.6, it can't detect malicious commands ...
0
votes
1answer
674 views

Intercepting with Burp does not work - alternative ways

When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
0
votes
1answer
140 views

How to automate Nikto output?

When I run Nikto, its output details all the tests it ran, but I just want the bits where it found problems. How can I set it to only show errors? JohnFF
25
votes
4answers
3k views

Reduce Noise when Penetration Testing

Recently I participated in a capture the flag competition which was attached with SOC analysis teams monitoring our traffic. There we were told that many tools were very noisy. Eg Sqlmap which has ...
2
votes
1answer
265 views

Is information gathering usually authorized? [closed]

Is it usually authorized to run systematic information gathering tools ? I'm talking about tools like nmap, knock, dirb and so on. I'm obviously talking about running them on public websites without ...
2
votes
1answer
297 views

URL query string guessing [closed]

I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g. http://domain.com/controller.php?guessed_param=18 ...
1
vote
2answers
70 views

Generating partical Eliptic Curve Diffie-Hellman keys [closed]

I want to generate a pair of ECDH keys (64 bytes each), where the first 12 bytes of the public key will suit my format. For example, if I have a unique sequence "13456789ABC" I'd like to use it as ...
1
vote
0answers
43 views

How can I perform DAST on protocols other than HTTP/HTTPS

How can I perform DAST on protocols other than HTTP/HTTPS in case of a web application which does not have an URL but communicates with many other systems to pull or push data.
1
vote
2answers
219 views

Are there tracking methods for targeted ads from regular cell phone use, and how can one monitor that?

There are many stories of individuals exchanging information near a cell phone, then finding targeted ads closely related to that information, with those same individuals claiming they did not search ...
1
vote
0answers
394 views

Cancel OpenSSL RSA key generation via command line

I'm running macOS 10.12.1 with OpenSSL 0.9.8zh 14 Jan 2016 When generating an RSA key with the OpenSSL cli you are prompted to enter your passphrase. With most command-line interfaces pressing C-d ...
4
votes
1answer
214 views

Can I detect a firmware toolkit like NightSkies on my iPhone?

This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
0
votes
1answer
496 views

Nogotofail usage android pentesting

I was looking at the google tool: Nogotofail https://github.com/google/nogotofail I used their examples to set it up and this works for the examples with proxychains. But now I want to use it with ...
4
votes
2answers
1k views

How deauth attack works in mkd3

I watched a video on YouTube about it, and the guy did not explain well how mdk3 and its deauth attack works. Can someone please explain me this? P.s: the guy used the tool aircrack-ng; This tool is ...
1
vote
1answer
212 views

sbd uses “default phrase to use for encryption”

I've been using sbd to compare it with Ncat. Ncat offers SSL with or without certificates. sbd offers AES-CBC-128, with an option to override the "default phrase to use for encryption". sbd -h ... -...
4
votes
1answer
1k views

Generate wordlist using non-default rules (John The Ripper)

If I want to create a wordlist, using JTR to mangle a source list by applying its default rules to them I can do this like so: # john -rules --stdout --wordlist=/usr/share/wordlists/rockyou.txt | ...
4
votes
1answer
140 views

Automated Malware Analysis Tools as a standalone

I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
2
votes
1answer
2k views

import list of domains into recon-ng

Is there a way to add domains into recon-ng from a text file (newline delimited)? I've tried comma delimiting entries but reco-ng takes the comma as part of the domain. At the moment I am doing: for ...
1
vote
1answer
52 views

Is there any tools out there to attack an unloaded system (on disk)

I was wondering : is there any tools related to unloaded system hacking ? I am asking this question because it seems to me that in a lot of case, people have access to random computer physical and ...
-1
votes
1answer
39 views

White-box webpage testers [closed]

I wrote a webPage and i want to localy scan all files in search of somes common vulnerabilities. I searched on the internet a lot and i can't find white-box tools as I thought. Instead of this, there ...
5
votes
2answers
324 views

Human vs. Vulnerability Scanners [closed]

When would a human outperform a scripting tool when testing for vulnerabilities? For example, would a human ever find something that SQLmap wouldn't? In what cases would it be preferable/are there any ...
0
votes
0answers
72 views

Difference between update and upgrade in ptf

What is the difference between update and upgrade when using a module in ptf (Penetration Testers Framework) ?
3
votes
1answer
211 views

How to detect the OS running on IoT device?

Is there a tool (or Linux command) that can detect the OS running on IoT devices, such as smartwatches or wearable tracker devices? Or a tool that can list as much information as possible about the ...
3
votes
1answer
368 views

Why can't scanners usually detect stored XSS? Is there a way to automate the detection of stored (persistent) xss,? [closed]

I'm desperately looking for tools, preferably with some guide, also preferably open-source, to detect stored xss vulnerabilities. It is observed that a handful of them doesn't give the expected ...
0
votes
1answer
87 views

Account information gathering on subnet device

I have a cybersecurity test coming up. We have a practice test, but no solutions. One question involves being given a fresh Kali VM and a target IP on our subnet, and having to discover as many ...
0
votes
1answer
3k views

Is there a tool to test whether a server supports any cipher suite?

I would like to test whether a server is using some bad cipher suites. The problem is, many of the bad cipher suites have been removed from openssl 1.x(e.g. suites exposed to FREAK). Therefore, ...
-3
votes
1answer
169 views

How netcat's -e functionality work? [closed]

I want to know how netcat uses -e parameter to serve executable over TCP/IP? I want to write it on Python to understand it deeper, but I don't know how it is doing it? If I am not mistaken, It is ...
2
votes
1answer
517 views

Is it legal to teach about hacking and tools? [closed]

I'am currentliy working on a e-learning content about wireless security. It is an app I want to launch on the AppStore and Google Play. It shows what the problems and dangers are and also what tools ...
2
votes
2answers
115 views

How to deal with administration tools such as ipscanners and PSTools?

In my company (And many others around the world) there is a wide usage by tech teams of tools such as ipscanners, psexec, pskill and other tools. How do you deal or control the usage of such tools in ...
1
vote
0answers
190 views

Simulation vs Formal Analysis of Authentication Protocols

I received a review for my journal paper in which we proposed WOOlim or nspk kind of authentication protocols. We proved the strength of our protocol with rigorous formal methods using CSP and rank ...
1
vote
1answer
93 views

Stronger Password-based File Encryption on OS X [closed]

I am wondering if there are any better alternatives than the zip command on the OS X terminal. My intention is to add a password to a compressed file. I have been using: zip -j -e -pMY_SECRET test....
12
votes
2answers
25k views

How can I detect the remote operating system?

Is it possible to detect the operating system type remotely from another system using any tools like nmap without admin privileges? What are the other alternatives for achieving this?
105
votes
6answers
125k views

How to find out what programming language a website is built in?

I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in. I know that URL extensions, HTTP headers, ...
7
votes
1answer
160 views

Restricting access to “hacking” sites and tools

I tried following a link from a post on this site and discovered that insecure.org is blocked by our internet proxy. What are the potential benefits and risks of allowing access to such sites to ...
1
vote
2answers
892 views

Is there a tool to detect what technologies a website uses? [closed]

I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site. For example that the site is running Apache, using ...
29
votes
8answers
3k views

Best way to administer all my passwords

I am trying to figure out what the best solution is to store different types of passwords: Personal passwords (my personal email, my company's email, all the services I use to buy things like ...
2
votes
1answer
142 views

How is Smurf Toolkit possible? [closed]

We've probably all heard about the Smurf Toolkit by now. It's the GCHQ's way of tapping phones revealed by Edward Snowden. So supposedly they can take over your phone (even power it off/on!) by simply ...
2
votes
0answers
80 views

Does hping support FTP Bounce scanning?

Does hping support FTP Bounce scanning? I googled it, but I couldn't find its command, so I think it didn't support it. I just find command for nmap not hping.