What kind of penetration testing tool do you use? And prefer?

Tag: penetration, testing, Tools

Penetration testing is used to test an infrastructure. With the help of a penetration test you can see what kind of vulnerabilities you have in your infrastructure. Once your infrastructure has been tested, the penetration tester will give you advice on what to do with your infrastructure vulnerabilities.


A list with top security tools.

 

1. Nmap –  Get Nmap Here - nmap -v -sS -A xxx.xxx.xxx.xxx

2. Nessus Remote Security Scanner - Get Nessus Here

3. John the Ripper - Yes, JTR 1.7 was recently releasedYou can get JTR Here

4. Nikto - Get Nikto Here

5. SuperScan - Get SuperScan Here

6. p0f - Get p0f Here

7. Wireshark (Formely Ethereal) - Get Wireshark Here

8. Yersinia - Get Yersinia Here

9. Eraser - Get Eraser Here.

10. PuTTY - Get PuTTY Here.

11. LCP - Get LCP Here

12. Cain and Abel - Get Cain and Abel Here

13. Kismet - Get Kismet Here

14. NetStumbler - Get NetStumbler Here

15. hping - Get hping Here

0.1 Metasploit – Backtrack – Paros – Proxy – Toufeeq – Pedro – BO2k – Optix – Beast – NetCat – LCP – Immunity Debbuger - 

The list is from UsCyberLabs.com

 

 

My question: What kind of penetration testing tool ( s ) do you use and which one do you prefer?

 


Who's new

  • ciberprov
  • michael.nguyen
  • mornjinfeng
  • aniketdaptardar
  • hadriker
  • Alanw

Security vids #1

Team Cymru Research NFP is a specialized Internet security research firm and 501(c)3 non-profit dedicated to making the Internet more secure. Team Cymru helps organizations identify and eradicate problems in their networks, providing insight that improves lives.

Team Cymru the video series 1 to 10
Team Cymru the video series 11 to 20
Team Cymru the video series 21 to 30
Team Cymru the video series 31 to 40
Team Cymru the video series 41 to 50
Team Cymru the video series 51 to 60

CWZ Books

Who's online

There are currently 0 users and 16 guests online.

Security vids #2

The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world’s leading centers for research and education in areas of information security that are crucial to the protection of critical computing and communication infrastructure.

CERIAS is unique among such national centers in its multidisciplinary approach to the problems, ranging from purely technical issues (e.g., intrusion detection, network security, etc) to ethical, legal, educational, communicational, linguistic, and economic issues, and the subtle interactions and dependencies among them.

CERIAS Security: Attribute-Based Access Control
CERIAS Security: Information Flow Analysis in Security Enhanced Linux
CERIAS Security: Towards Mining Syslog Data
Weapons of Mass Disruption Gallery Launch: Reitinger Remarks
Weapons of Mass Disruption: Mike McConnell on The Nightmare Scenario



#Cyberwar