Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [tools]

Tools used by security professionals

Filter by
Sorted by
Tagged with
0 votes
1 answer
75 views

How can the Beef Tool be used? [closed]

Can the hijacked browser's history and saved information be viewed? Is it possible to create a backdoor in the browser? In other words, can it be secretly redirected to any site or downloaded and ...
lkk4325's user avatar
0 votes
0 answers
67 views

What are the top visualization tools out there for threat investigation?

cybersecurity professionals! I'm a researcher at a large danish university, and I've been fortunate to secure funding for a project aimed at enhancing the visualization of threat investigations in ...
Lars's user avatar
  • 1
0 votes
1 answer
123 views

Looking at internal ports through netstat command [closed]

I have a connection to another machine and was looking at which ports are open internally and which ports are open on all interfaces, I ran the following netstat command to achieve this netstat -ano ...
Just.a.tech's user avatar
1 vote
1 answer
126 views

How do you de-duplicate security risk findings obtained from various different tools?

You potentially use a variety of scanners and processes (e.g. Threat Modelling) which produces a set of overlapping outputs. How do you avoid repeated findings which are duplicated across toolsets?
transcend3nt's user avatar
0 votes
2 answers
1k views

What exactly is Application.Hacktool.AMZ?

I have been using Windows Product Key Viewer for ages to read current Windows' serial number. I had never any hack- or virus-related issue about this application. A few days ago I have installed ...
trejder's user avatar
  • 3,639
-3 votes
1 answer
512 views

Getting started with sn1per scanning [closed]

I just pulled down the repository for an elite penetration testing tool call sn1per I want to use this tool to scan a list of websites. My goal is to automate the steps of a manual penetration test. ...
Evan Gertis's user avatar
0 votes
1 answer
104 views

Do popular pentest tools leave any digital fingerprints?

Do pentesting tools leave behind any information in order to identify the attacker?
user62771's user avatar
-2 votes
1 answer
688 views

Online service to download file from URL directly as zip [closed]

Is there an online service which allows to download a file from a URL directly zipped? I want to analyze a potential malicious JavaScript file with some automatic anti virus engines but I don't want ...
winklerrr's user avatar
  • 125
1 vote
0 answers
397 views

Looking for origin/ verification of malicious domain names [closed]

My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
Kbowser's user avatar
  • 11
1 vote
0 answers
126 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
leon's user avatar
  • 11
0 votes
1 answer
280 views

How does a hacker reach a back-end file to exploit it?

I read this post: How does hacking work? and I saw that Chris Dale answered the question with some PHP exploit instructions. However, how does a hacker can read a PHP file (or another back-end file), ...
Cronos's user avatar
  • 233
3 votes
1 answer
3k views

Where to find complete Kali image for docker with all the tools? [closed]

As of now, I am using Windows 10 & I want to run kali Linux on Docker. For that, I took the copy from the kali official site Here But after running I found it's just a base OS it doesn't contain ...
Nitin Rastogi's user avatar
1 vote
0 answers
242 views

Collaboration tools [closed]

Is there any good alternatives to the lair-framework. I think that was an awesome platform, and unfortunately its not maintained anymore and no more updates to it. But i have tried all other kinds of ...
Stanl l's user avatar
  • 11
0 votes
0 answers
120 views

Hacking Attempt Requests Not showing Up on Webserver Logs But Google Analytics Shows it

Which hacking tool makes a request and does not show up on web-server logs? /en/latest/ has been requested over 116, we don't have this URL on the website at all! The request to that URL does not show ...
wangolo joel's user avatar
0 votes
1 answer
266 views

How to pentest RMI

I have a Swing client that communicates through T3 protocol (RMI) with a Server. Now I want to capture the requests and modify them (like HTTP in Burp or OWASP ZAP). Is there any attack proxy for RMI/...
ItFreak's user avatar
  • 129
4 votes
3 answers
13k views

How to check if USB device isn't malicious?

Let's say I've got a generic, cheap mouse. It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device? (on ...
R S's user avatar
  • 225
-1 votes
4 answers
724 views

Do black hat hackers or even hacktivists use penetration testing tools?

I was reading digital forensics as part of my curriculum and came across some tools used for hacking (ethical hacking aka pentration testing). There is a bunch of tools out there. I was wondering if ...
sweetpoision10's user avatar
1 vote
0 answers
3k views

Why does Volatility fail on windows 10 dumps and what other tools can I use? [closed]

So I am trying to extract data from a full memory dump (Made with either dumpit or a BSOD). WinDBG manages to extract some information from it, but Volatility is silent: PS F:\> C:\Python27\python....
Adalcar's user avatar
  • 111
1 vote
0 answers
120 views

For creating tools, Bash, Perl or Python? Which should I invest my time in to? [closed]

Having trouble choosing between the three, I would of course love to learn all three in the future, but right now I'm curious as to which language would be the most beneficial to me. Also, I'm aware ...
s h a a n's user avatar
  • 325
0 votes
1 answer
11k views

Recon-ng v5 - How to add domains?

I just started with recon-ng today, I was following tutorials but every tutorial is outdated with most of them describing the functions of v4. I was able to update myself with simple additions like ...
s h a a n's user avatar
  • 325
2 votes
1 answer
5k views

Tools to produce an MD5 collision?

I'd like to learn a bit more about MD5 collisions. So let's assume I have a message m: m = somesecretmessage And I hash that message: z = md5(m) The only know information is z. I do not know m. ...
Kyu96's user avatar
  • 185
0 votes
1 answer
193 views

Security test within a staging environment. Is SOAPUI sufficient as a test tool?

Currently I am working on a project in which I am supposed to define the following aspects as a test manager: Conception of a penetration test for a test staging environment Planning security ...
Mornon's user avatar
  • 131
-2 votes
2 answers
599 views

Why use tools such as BurpSuite, nmap or SQLmap?

I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
Asker999's user avatar
1 vote
2 answers
402 views

OpenSource API Security Testing Automation?

I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
Shritam Bhowmick's user avatar
-1 votes
2 answers
749 views

ZAP: Evaluate / Show response in browser

Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser. However, since the payload was sent with POST, I can't just use "Open URL in ...
Shmuel H.'s user avatar
  • 101
1 vote
1 answer
185 views

Multicore hacker tools?

Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
user199042's user avatar
39 votes
5 answers
8k views

How should source code security be checked?

How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
tonychow0929's user avatar
  • 2,257
0 votes
1 answer
2k views

Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank

I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
Hashim Aziz's user avatar
1 vote
1 answer
2k views

Malware Execution Delay

I am new to malware analysis and am currently using Cuckoo to understand some of the basics. I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
cosmicrao's user avatar
0 votes
1 answer
170 views

How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?

My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
Pawan Patil's user avatar
0 votes
1 answer
9k views

Kali Linux and Cell Phone Security

Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
Cody Rutscher's user avatar
-2 votes
2 answers
730 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
Simonhawk's user avatar
1 vote
1 answer
414 views

Yara rules not working in debian [closed]

Yara rules are working on Windows 7 perfectly. I am able to scan and detect malicious commands in .exe malware files but when I run the same program in debian v8.6, it can't detect malicious commands ...
Arun Pratap Singh's user avatar
0 votes
1 answer
1k views

Intercepting with Burp does not work - alternative ways

When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
devopsfun's user avatar
  • 211
0 votes
1 answer
392 views

How to automate Nikto output?

When I run Nikto, its output details all the tests it ran, but I just want the bits where it found problems. How can I set it to only show errors? JohnFF
JohnFF's user avatar
  • 144
24 votes
4 answers
6k views

Reduce Noise when Penetration Testing

Recently I participated in a capture the flag competition which was attached with SOC analysis teams monitoring our traffic. There we were told that many tools were very noisy. Eg Sqlmap which has ...
Khopcha's user avatar
  • 455
2 votes
1 answer
601 views

Is information gathering usually authorized? [closed]

Is it usually authorized to run systematic information gathering tools ? I'm talking about tools like nmap, knock, dirb and so on. I'm obviously talking about running them on public websites without ...
Hedam's user avatar
  • 121
2 votes
1 answer
911 views

URL query string guessing [closed]

I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g. http://domain.com/controller.php?guessed_param=18 ...
Dennis1818's user avatar
1 vote
2 answers
144 views

Generating partical Eliptic Curve Diffie-Hellman keys [closed]

I want to generate a pair of ECDH keys (64 bytes each), where the first 12 bytes of the public key will suit my format. For example, if I have a unique sequence "13456789ABC" I'd like to use it as ...
RunoTheDog's user avatar
1 vote
0 answers
108 views

How can I perform DAST on protocols other than HTTP/HTTPS

How can I perform DAST on protocols other than HTTP/HTTPS in case of a web application which does not have an URL but communicates with many other systems to pull or push data.
CrocoC's user avatar
  • 19
1 vote
2 answers
390 views

Are there tracking methods for targeted ads from regular cell phone use, and how can one monitor that?

There are many stories of individuals exchanging information near a cell phone, then finding targeted ads closely related to that information, with those same individuals claiming they did not search ...
cr0's user avatar
  • 373
1 vote
0 answers
644 views

Cancel OpenSSL RSA key generation via command line

I'm running macOS 10.12.1 with OpenSSL 0.9.8zh 14 Jan 2016 When generating an RSA key with the OpenSSL cli you are prompted to enter your passphrase. With most command-line interfaces pressing C-d ...
mbigras's user avatar
  • 173
4 votes
1 answer
305 views

Can I detect a firmware toolkit like NightSkies on my iPhone?

This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
Tracy Cramer's user avatar
0 votes
1 answer
1k views

Nogotofail usage android pentesting

I was looking at the google tool: Nogotofail https://github.com/google/nogotofail I used their examples to set it up and this works for the examples with proxychains. But now I want to use it with ...
Wealot's user avatar
  • 899
4 votes
2 answers
3k views

How deauth attack works in mkd3

I watched a video on YouTube about it, and the guy did not explain well how mdk3 and its deauth attack works. Can someone please explain me this? P.s: the guy used the tool aircrack-ng; This tool is ...
d. fritoti's user avatar
1 vote
1 answer
388 views

sbd uses "default phrase to use for encryption"

I've been using sbd to compare it with Ncat. Ncat offers SSL with or without certificates. sbd offers AES-CBC-128, with an option to override the "default phrase to use for encryption". sbd -h ... -...
user avatar
4 votes
1 answer
4k views

Generate wordlist using non-default rules (John The Ripper)

If I want to create a wordlist, using JTR to mangle a source list by applying its default rules to them I can do this like so: # john -rules --stdout --wordlist=/usr/share/wordlists/rockyou.txt | ...
SilverlightFox's user avatar
4 votes
1 answer
217 views

Automated Malware Analysis Tools as a standalone

I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
Nikos H.'s user avatar
2 votes
1 answer
3k views

import list of domains into recon-ng

Is there a way to add domains into recon-ng from a text file (newline delimited)? I've tried comma delimiting entries but reco-ng takes the comma as part of the domain. At the moment I am doing: for ...
user1330734's user avatar
1 vote
1 answer
114 views

Is there any tools out there to attack an unloaded system (on disk)

I was wondering : is there any tools related to unloaded system hacking ? I am asking this question because it seems to me that in a lot of case, people have access to random computer physical and ...
Omen's user avatar
  • 11

1
2 3 4 5