2022 Developer Survey is open! Take survey.

Questions tagged [tools]

Tools used by security professionals

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

What is the meaning of 'rw' in SiLK commands?

SiLK, the analysis tool for processing flow records, offers multiple tools which begin with the letters "rw", e.g. rwfilter, rwcut, rwuniq, etc. I would like to know where they got those two ...
user avatar
  • 390
0 votes
1 answer
50 views

Do popular pentest tools leave any digital fingerprints?

Do pentesting tools leave behind any information in order to identify the attacker?
user avatar
0 votes
0 answers
47 views

Security Reporting Tool - Centralising Office 365 Security across Multiple Tenants

So let me paint the picture prior to asking the question: I'm part of an MSP who service a lot of clients managing 50+ Microsoft Office 365 Tenants. We have baseline security policies and structures ...
user avatar
-2 votes
1 answer
108 views

Online service to download file from URL directly as zip [closed]

Is there an online service which allows to download a file from a URL directly zipped? I want to analyze a potential malicious JavaScript file with some automatic anti virus engines but I don't want ...
user avatar
  • 125
1 vote
0 answers
279 views

Looking for origin/ verification of malicious domain names [closed]

My network sniffer for websites has discovered a number of hosting domains in the report which I can not correctly assign to categories. I don't know if there are providers behind these domains that ...
user avatar
  • 11
1 vote
0 answers
87 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
user avatar
  • 11
0 votes
1 answer
145 views

How does a hacker reach a back-end file to exploit it?

I read this post: How does hacking work? and I saw that Chris Dale answered the question with some PHP exploit instructions. However, how does a hacker can read a PHP file (or another back-end file), ...
user avatar
  • 233
2 votes
1 answer
1k views

Where to find complete Kali image for docker with all the tools? [closed]

As of now, I am using Windows 10 & I want to run kali Linux on Docker. For that, I took the copy from the kali official site Here But after running I found it's just a base OS it doesn't contain ...
user avatar
1 vote
0 answers
183 views

Collaboration tools [closed]

Is there any good alternatives to the lair-framework. I think that was an awesome platform, and unfortunately its not maintained anymore and no more updates to it. But i have tried all other kinds of ...
user avatar
  • 11
0 votes
0 answers
89 views

Hacking Attempt Requests Not showing Up on Webserver Logs But Google Analytics Shows it

Which hacking tool makes a request and does not show up on web-server logs? /en/latest/ has been requested over 116, we don't have this URL on the website at all! The request to that URL does not show ...
user avatar
0 votes
0 answers
1k views

Force third party app to trust Charles Root Certificate

I downloaded two different third-party apps (running on Windows) in order to figure what HTTP calls does it make to an external server on the internet. Both apps are calling the same server as far ...
user avatar
0 votes
1 answer
155 views

How to pentest RMI

I have a Swing client that communicates through T3 protocol (RMI) with a Server. Now I want to capture the requests and modify them (like HTTP in Burp or OWASP ZAP). Is there any attack proxy for RMI/...
user avatar
  • 139
4 votes
3 answers
3k views

How to check if USB device isn't malicious?

Let's say I've got a generic, cheap mouse. It's a USB-device. Any USB-device may contain memory, so how to know if the manufacturer didn't embed any memory with malware software in a device? (on ...
user avatar
  • 245
-1 votes
4 answers
367 views

Do black hat hackers or even hacktivists use penetration testing tools?

I was reading digital forensics as part of my curriculum and came across some tools used for hacking (ethical hacking aka pentration testing). There is a bunch of tools out there. I was wondering if ...
user avatar
1 vote
0 answers
2k views

Why does Volatility fail on windows 10 dumps and what other tools can I use? [closed]

So I am trying to extract data from a full memory dump (Made with either dumpit or a BSOD). WinDBG manages to extract some information from it, but Volatility is silent: PS F:\> C:\Python27\python....
user avatar
  • 111
1 vote
0 answers
91 views

For creating tools, Bash, Perl or Python? Which should I invest my time in to? [closed]

Having trouble choosing between the three, I would of course love to learn all three in the future, but right now I'm curious as to which language would be the most beneficial to me. Also, I'm aware ...
user avatar
  • 337
0 votes
1 answer
8k views

Recon-ng v5 - How to add domains?

I just started with recon-ng today, I was following tutorials but every tutorial is outdated with most of them describing the functions of v4. I was able to update myself with simple additions like ...
user avatar
  • 337
1 vote
1 answer
1k views

Tools to produce an MD5 collision?

I'd like to learn a bit more about MD5 collisions. So let's assume I have a message m: m = somesecretmessage And I hash that message: z = md5(m) The only know information is z. I do not know m. ...
user avatar
  • 165
0 votes
1 answer
164 views

Security test within a staging environment. Is SOAPUI sufficient as a test tool?

Currently I am working on a project in which I am supposed to define the following aspects as a test manager: Conception of a penetration test for a test staging environment Planning security ...
user avatar
  • 131
-2 votes
2 answers
396 views

Why use tools such as BurpSuite, nmap or SQLmap?

I mean why are tools needed for pen-testing? I've hacked websites using plain XSS and SQL injections. I didn't require any tools such as the ones I listed above. Now that I want to progress further ...
user avatar
1 vote
2 answers
342 views

OpenSource API Security Testing Automation?

I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
user avatar
-1 votes
2 answers
432 views

ZAP: Evaluate / Show response in browser

Let's say I've edited a request and successfully found a XSS vulnerability. Now, I want to validate that in the browser. However, since the payload was sent with POST, I can't just use "Open URL in ...
user avatar
  • 101
1 vote
1 answer
142 views

Multicore hacker tools?

Have a school project coming up in multicore programming. I'm interested in/have used hacking tools alot before, and was wondering if there were any good tools out there that could benefit from being ...
user avatar
40 votes
5 answers
7k views

How should source code security be checked?

How to check whether the source code of an open-source project contains no malicious content? For example, in a set of source code files with altogether 30,000 lines, there might be 1-2 lines ...
user avatar
  • 2,247
0 votes
1 answer
977 views

Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank

I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
user avatar
1 vote
1 answer
1k views

Malware Execution Delay

I am new to malware analysis and am currently using Cuckoo to understand some of the basics. I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
user avatar
0 votes
1 answer
128 views

How to restrict plugins/tools like Netcraft and Builtwith to detect server side technologies?

My organization wants to restrict all the plugins/tools like Netcraft and Builtwith to detect all the server side technologies for security reason like platform, operating system name and version, web ...
user avatar
0 votes
1 answer
7k views

Kali Linux and Cell Phone Security

Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
user avatar
-2 votes
2 answers
515 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
user avatar
1 vote
1 answer
288 views

Yara rules not working in debian [closed]

Yara rules are working on Windows 7 perfectly. I am able to scan and detect malicious commands in .exe malware files but when I run the same program in debian v8.6, it can't detect malicious commands ...
user avatar
0 votes
1 answer
1k views

Intercepting with Burp does not work - alternative ways

When doing bug bounty, there are some sites, which prohibit for good reasons to intercept the requests and responses (with SSL) to the site with Burp and other proxies. So I have the problem to get ...
user avatar
  • 201
0 votes
1 answer
310 views

How to automate Nikto output?

When I run Nikto, its output details all the tests it ran, but I just want the bits where it found problems. How can I set it to only show errors? JohnFF
user avatar
  • 144
25 votes
4 answers
5k views

Reduce Noise when Penetration Testing

Recently I participated in a capture the flag competition which was attached with SOC analysis teams monitoring our traffic. There we were told that many tools were very noisy. Eg Sqlmap which has ...
user avatar
  • 465
2 votes
1 answer
538 views

Is information gathering usually authorized? [closed]

Is it usually authorized to run systematic information gathering tools ? I'm talking about tools like nmap, knock, dirb and so on. I'm obviously talking about running them on public websites without ...
user avatar
  • 121
2 votes
1 answer
720 views

URL query string guessing [closed]

I have recently identified a controller that handles query string parameters that are not obvious, by simply guessing query string parameters. E.g. http://domain.com/controller.php?guessed_param=18 ...
user avatar
1 vote
2 answers
117 views

Generating partical Eliptic Curve Diffie-Hellman keys [closed]

I want to generate a pair of ECDH keys (64 bytes each), where the first 12 bytes of the public key will suit my format. For example, if I have a unique sequence "13456789ABC" I'd like to use it as ...
user avatar
1 vote
0 answers
82 views

How can I perform DAST on protocols other than HTTP/HTTPS

How can I perform DAST on protocols other than HTTP/HTTPS in case of a web application which does not have an URL but communicates with many other systems to pull or push data.
user avatar
  • 19
1 vote
2 answers
276 views

Are there tracking methods for targeted ads from regular cell phone use, and how can one monitor that?

There are many stories of individuals exchanging information near a cell phone, then finding targeted ads closely related to that information, with those same individuals claiming they did not search ...
user avatar
  • 361
1 vote
0 answers
557 views

Cancel OpenSSL RSA key generation via command line

I'm running macOS 10.12.1 with OpenSSL 0.9.8zh 14 Jan 2016 When generating an RSA key with the OpenSSL cli you are prompted to enter your passphrase. With most command-line interfaces pressing C-d ...
user avatar
  • 173
4 votes
1 answer
266 views

Can I detect a firmware toolkit like NightSkies on my iPhone?

This article tells us that the NightSkies tool may have been put on iPhones enroute before distribution. While there have been many iPhones, architectures, and security updates since 2008, is there a ...
user avatar
0 votes
1 answer
930 views

Nogotofail usage android pentesting

I was looking at the google tool: Nogotofail https://github.com/google/nogotofail I used their examples to set it up and this works for the examples with proxychains. But now I want to use it with ...
user avatar
  • 869
4 votes
2 answers
2k views

How deauth attack works in mkd3

I watched a video on YouTube about it, and the guy did not explain well how mdk3 and its deauth attack works. Can someone please explain me this? P.s: the guy used the tool aircrack-ng; This tool is ...
user avatar
1 vote
1 answer
314 views

sbd uses "default phrase to use for encryption"

I've been using sbd to compare it with Ncat. Ncat offers SSL with or without certificates. sbd offers AES-CBC-128, with an option to override the "default phrase to use for encryption". sbd -h ... -...
user avatar
4 votes
1 answer
3k views

Generate wordlist using non-default rules (John The Ripper)

If I want to create a wordlist, using JTR to mangle a source list by applying its default rules to them I can do this like so: # john -rules --stdout --wordlist=/usr/share/wordlists/rockyou.txt | ...
user avatar
4 votes
1 answer
187 views

Automated Malware Analysis Tools as a standalone

I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
user avatar
2 votes
1 answer
3k views

import list of domains into recon-ng

Is there a way to add domains into recon-ng from a text file (newline delimited)? I've tried comma delimiting entries but reco-ng takes the comma as part of the domain. At the moment I am doing: for ...
user avatar
1 vote
1 answer
89 views

Is there any tools out there to attack an unloaded system (on disk)

I was wondering : is there any tools related to unloaded system hacking ? I am asking this question because it seems to me that in a lot of case, people have access to random computer physical and ...
user avatar
  • 11
-1 votes
1 answer
74 views

White-box webpage testers [closed]

I wrote a webPage and i want to localy scan all files in search of somes common vulnerabilities. I searched on the internet a lot and i can't find white-box tools as I thought. Instead of this, there ...
user avatar
5 votes
2 answers
378 views

Human vs. Vulnerability Scanners [closed]

When would a human outperform a scripting tool when testing for vulnerabilities? For example, would a human ever find something that SQLmap wouldn't? In what cases would it be preferable/are there any ...
user avatar
0 votes
0 answers
128 views

Difference between update and upgrade in ptf

What is the difference between update and upgrade when using a module in ptf (Penetration Testers Framework) ?
user avatar
  • 599