Questions tagged [tools]
Tools used by security professionals
201 questions
0
votes
1
answer
110
views
How can the Beef Tool be used? [closed]
Can the hijacked browser's history and saved information be viewed?
Is it possible to create a backdoor in the browser? In other words, can it be secretly redirected to any site or downloaded and ...
- 1
0
votes
1
answer
202
views
Looking at internal ports through netstat command [closed]
I have a connection to another machine and was looking at which ports are open internally and which ports are open on all interfaces, I ran the following netstat command to achieve this
netstat -ano
...
- 41
1
vote
1
answer
151
views
How do you de-duplicate security risk findings obtained from various different tools?
You potentially use a variety of scanners and processes (e.g. Threat Modelling) which produces a set of overlapping outputs. How do you avoid repeated findings which are duplicated across toolsets?
- 119
0
votes
2
answers
2k
views
What exactly is Application.Hacktool.AMZ?
I have been using Windows Product Key Viewer for ages to read current Windows' serial number. I had never any hack- or virus-related issue about this application.
A few days ago I have installed ...
- 3,689
-3
votes
1
answer
626
views
Getting started with sn1per scanning [closed]
I just pulled down the repository for an elite penetration testing tool call sn1per I want to use this tool to scan a list of websites. My goal is to automate the steps of a manual penetration test.
...
- 95
0
votes
1
answer
115
views
Do popular pentest tools leave any digital fingerprints?
Do pentesting tools leave behind any information in order to identify the attacker?
-2
votes
1
answer
771
views
Online service to download file from URL directly as zip [closed]
Is there an online service which allows to download a file from a URL directly zipped?
I want to analyze a potential malicious JavaScript file with some automatic anti virus engines but I don't want ...
- 125
1
vote
0
answers
406
views
Looking for origin/ verification of malicious domain names [closed]
My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
- 11
1
vote
0
answers
129
views
Shuffle Tool / Software [closed]
I use GPG symmetric, to encrypt text file.
Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions:
...
- 11
0
votes
1
answer
334
views
How does a hacker reach a back-end file to exploit it?
I read this post: How does hacking work? and I saw that Chris Dale answered the question with some PHP exploit instructions. However, how does a hacker can read a PHP file (or another back-end file), ...
- 233
3
votes
1
answer
3k
views
Where to find complete Kali image for docker with all the tools? [closed]
As of now, I am using Windows 10 & I want to run kali Linux on Docker. For that, I took the copy from the kali official site Here
But after running I found it's just a base OS it doesn't contain ...
- 329
1
vote
0
answers
253
views
Collaboration tools [closed]
Is there any good alternatives to the lair-framework. I think that was an awesome platform, and unfortunately its not maintained anymore and no more updates to it. But i have tried all other kinds of ...
- 11
0
votes
0
answers
124
views
Hacking Attempt Requests Not showing Up on Webserver Logs But Google Analytics Shows it
Which hacking tool makes a request and does not show up on web-server logs?
/en/latest/ has been requested over 116, we don't have this URL on the website at all!
The request to that URL does not show ...
- 35
0
votes
1
answer
291
views
How to pentest RMI
I have a Swing client that communicates through T3 protocol (RMI) with a Server. Now I want to capture the requests and modify them (like HTTP in Burp or OWASP ZAP).
Is there any attack proxy for RMI/...
- 129
4
votes
3
answers
16k
views
How to check if USB device isn't malicious?
Let's say I've got a generic, cheap mouse.
It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device?
(on ...
- 225
-1
votes
4
answers
850
views
Do black hat hackers or even hacktivists use penetration testing tools?
I was reading digital forensics as part of my curriculum and came across some tools used for hacking (ethical hacking aka pentration testing). There is a bunch of tools out there. I was wondering if ...
1
vote
0
answers
3k
views
Why does Volatility fail on windows 10 dumps and what other tools can I use? [closed]
So I am trying to extract data from a full memory dump (Made with either dumpit or a BSOD). WinDBG manages to extract some information from it, but Volatility is silent:
PS F:\> C:\Python27\python....
- 111
1
vote
0
answers
127
views
For creating tools, Bash, Perl or Python? Which should I invest my time in to? [closed]
Having trouble choosing between the three, I would of course love to learn all three in the future, but right now I'm curious as to which language would be the most beneficial to me.
Also, I'm aware ...
- 325
0
votes
1
answer
12k
views
Recon-ng v5 - How to add domains?
I just started with recon-ng today, I was following tutorials but every tutorial is outdated with most of them describing the functions of v4.
I was able to update myself with simple additions like ...
- 325
2
votes
1
answer
6k
views
Tools to produce an MD5 collision?
I'd like to learn a bit more about MD5 collisions.
So let's assume I have a message m:
m = somesecretmessage
And I hash that message:
z = md5(m)
The only know information is z. I do not know m.
...
- 185
0
votes
1
answer
198
views
Security test within a staging environment. Is SOAPUI sufficient as a test tool?
Currently I am working on a project in which I am supposed to define the following aspects as a test manager:
Conception of a penetration test for a test staging environment
Planning security ...
- 131
-2
votes
2
answers
672
views
Why use tools such as BurpSuite, nmap or SQLmap?
I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
- 13
1
vote
2
answers
416
views
OpenSource API Security Testing Automation?
I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
- 1,600
-1
votes
2
answers
826
views
ZAP: Evaluate / Show response in browser
Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser.
However, since the payload was sent with POST, I can't just use "Open URL in ...
- 101
1
vote
1
answer
190
views
Multicore hacker tools?
Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
- 11
40
votes
5
answers
8k
views
How should source code security be checked?
How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
- 2,267
0
votes
1
answer
2k
views
Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank
I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
- 979
1
vote
1
answer
2k
views
Malware Execution Delay
I am new to malware analysis and am currently using Cuckoo to understand some of the basics.
I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
- 61
0
votes
1
answer
178
views
How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?
My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
- 397
0
votes
1
answer
10k
views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
-2
votes
2
answers
787
views
Creating portable bash terminal & cmd to USB [closed]
Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
1
vote
1
answer
435
views
Yara rules not working in debian [closed]
Yara rules are working on Windows 7 perfectly. I am able to scan and detect malicious commands in .exe malware files but when I run the same program in debian v8.6, it can't detect malicious commands ...
0
votes
1
answer
2k
views
Intercepting with Burp does not work - alternative ways
When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
- 211
0
votes
1
answer
414
views
How to automate Nikto output?
When I run Nikto, its output details all the tests it ran, but I just want the bits where it found problems. How can I set it to only show errors?
JohnFF
- 144
24
votes
4
answers
6k
views
Reduce Noise when Penetration Testing
Recently I participated in a capture the flag competition which was attached with SOC analysis teams monitoring our traffic.
There we were told that many tools were very noisy. Eg Sqlmap which has ...
- 455
2
votes
1
answer
606
views
Is information gathering usually authorized? [closed]
Is it usually authorized to run systematic information gathering tools ?
I'm talking about tools like nmap, knock, dirb and so on. I'm obviously talking about running them on public websites without ...
- 121
2
votes
1
answer
934
views
URL query string guessing [closed]
I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g.
http://domain.com/controller.php?guessed_param=18
...
- 59
1
vote
2
answers
149
views
Generating partical Eliptic Curve Diffie-Hellman keys [closed]
I want to generate a pair of ECDH keys (64 bytes each), where the first 12 bytes of the public key will suit my format.
For example, if I have a unique sequence "13456789ABC" I'd like to use it as ...
- 177
1
vote
0
answers
117
views
How can I perform DAST on protocols other than HTTP/HTTPS
How can I perform DAST on protocols other than HTTP/HTTPS in case of a web application which does not have an URL but communicates with many other systems to pull or push data.
- 19
1
vote
2
answers
513
views
Are there tracking methods for targeted ads from regular cell phone use, and how can one monitor that?
There are many stories of individuals exchanging information near a cell phone, then finding targeted ads closely related to that information, with those same individuals claiming they did not search ...
- 373
1
vote
0
answers
655
views
Cancel OpenSSL RSA key generation via command line
I'm running macOS 10.12.1 with OpenSSL 0.9.8zh 14 Jan 2016
When generating an RSA key with the OpenSSL cli you are prompted to enter your passphrase.
With most command-line interfaces pressing C-d ...
- 173
4
votes
1
answer
314
views
Can I detect a firmware toolkit like NightSkies on my iPhone?
This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
- 853
0
votes
1
answer
1k
views
Nogotofail usage android pentesting
I was looking at the google tool: Nogotofail https://github.com/google/nogotofail
I used their examples to set it up and this works for the examples with proxychains.
But now I want to use it with ...
- 929
4
votes
2
answers
3k
views
How deauth attack works in mkd3
I watched a video on YouTube about it, and the guy did not explain well how mdk3 and its deauth attack works. Can someone please explain me this?
P.s: the guy used the tool aircrack-ng; This tool is ...
- 63
1
vote
1
answer
396
views
sbd uses "default phrase to use for encryption"
I've been using sbd to compare it with Ncat. Ncat offers SSL with or without certificates. sbd offers AES-CBC-128, with an option to override the "default phrase to use for encryption".
sbd -h
...
-...
user68527
4
votes
1
answer
4k
views
Generate wordlist using non-default rules (John The Ripper)
If I want to create a wordlist, using JTR to mangle a source list by applying its default rules to them I can do this like so:
# john -rules --stdout --wordlist=/usr/share/wordlists/rockyou.txt | ...
- 34.4k
4
votes
1
answer
227
views
Automated Malware Analysis Tools as a standalone
I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
- 86
2
votes
1
answer
3k
views
import list of domains into recon-ng
Is there a way to add domains into recon-ng from a text file (newline delimited)? I've tried comma delimiting entries but reco-ng takes the comma as part of the domain.
At the moment I am doing:
for ...
- 439
1
vote
1
answer
118
views
Is there any tools out there to attack an unloaded system (on disk)
I was wondering : is there any tools related to unloaded system hacking ?
I am asking this question because it seems to me that in a lot of case, people have access to random computer physical and ...
- 11
-1
votes
1
answer
98
views
White-box webpage testers [closed]
I wrote a webPage and i want to localy scan all files in search of somes common vulnerabilities.
I searched on the internet a lot and i can't find white-box tools as I thought.
Instead of this, there ...
- 103