Today : | at : | Safemode : ON
> Det_Not Hacker | White Hat Aliance | Angkasa Hacker Team | Indonesia | Satu Gertakan Untuk Pertahankan Bumi Pertiwi | Safework of Angkasa Pura database, server MIL.ID | Thanks for all support : BD Green Hat, Nation blood, ID Codding, Jakarta Style cracking, Newbie's HACKER, US ortodox specialist | Learn your skill here with our style.
Title Author Perms Comt Modified Category
Showing posts with label exploit. Show all posts
Showing posts with label exploit. Show all posts

Best Penetration Testing Tools Unknown rwxr-xr-x 0 22:20

Title Best Penetration Testing Tools
Permission rw-r--r--
Author Unknown
Date and Time 22:20
Category
Share
There are many penetration testing tools on the market. They have been selected to cover a range of testing techniques from web based testing to network mapping, but the best penetration testing  tools are not complete because there are different tools to use for specific tests.



Acunetix
Acunetix are web vulnerability scanner is. It can  a variety of different types of web vulnerabilities, such as SQL Injection and XSS exploits. With built in crawlers, http editors and fuzzers, it providers a large set of useful diagnostic tools to help validate and verify flaws. Today it is one of the best website penetration testing tools.

Metasploit
Metasploit Framework is a key penetration testing tool when it comes to exploit development, host vulnerability validation and exploit execution. It is an opensource project that was created by HD Moore in 2003. It comes with over 800 exploits for Windows, Linux and Mac Operating Systems, with a very simple to use modular system for loading the desired payload. Metasploit also provides the option of encoding the payload in a variety of different formats to help bypass intrusion detection systems, prior to execution. This is a very powerful  and one of the most popular penetration testing tool for exploit development and testing with huge community backing.

Nmap
Nmap is one of the most common tools in a penetration testers arsenal. The tool allows fast host discovery, port mapping, service/operating system identification and enumeration to assist in gathering as much potential basic information about the network and alive hosts. It was developed by Fyodor and was originally an open source project for use on Linux/BSD. Now, It is developed to work on platforms such as Windows and Mac. A relatively new GUI version of Nmap, ‘Zenmap’  was released to work in Windows along side the CLI version.

Wireshark
Wireshark is an opensource packet analyser (network sniffer), which will capture and dump network activity sniffed on active wireless or wired LAN cards. You can capture data and save it as a pcap file watch the network traffic in real-time.  It is able to capture through USB showing what a great tool it is when it comes to analysis of data traffic. It is very useful when trying to monitor network resources, worm activity or general network abuse. Now, the penetration testing tool is available on Windows, Mac and Linux platforms.

Cain and Abel
Cain and Abel is a Windows based password recovery / cracking tool. Cain for short – the software is one of the most versatile password recovery tools available, currently supporting Windows password hash recovery, wireless passwords, MSSQL Passwords, Kerberos, Cisco, VNC, Radius and many more. It has been developed to crack passwords using brute force dictionary attacks, cryptanalysis and rainbow tables.

So, you can choose the best penetration testing  tools for your better and faster work now. Have a nice try.

Nmap Basic Tutorial Unknown rwxr-xr-x 0 20:52

Title Nmap Basic Tutorial
Permission rw-r--r--
Author Unknown
Date and Time 20:52
Category
Share
Backtrack has its Nmap installed inside. Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing. Nmap is Flexible, Powerful, Portable, Easy, Free, Well, Supported, Acclaimed, and Popular.

Nmap has some basic options:
-sT : TCP Connect, using method connect(), we can determine wheter the port opened or not, but it is easily to detect by firewall/intrusion detection software.
-sS : SYN stealth scan, using syn to begin connection then sending rst to stop initiation connection, so that no connection will be made. it results in harder detection.
-sF, -sN, -sX : FIN, NULL, Xmass Tree Scan. FIN will send Fin Flag, Null will set no flag and Xmass Tree sets the FIN, URG and PUSH flags. It is used to avoid system detection.
-sP : Ping Scan , scan with ping command to determine whether the target online or not
-sU : UDP Scan , scan port with UDP packet.
-sO : IP Protocol Scan, scan port using ip raw packet.
-sI : Idle Scanning, more advanced scanning mode
-sV : Version Detection,
-sA : ACK Scan,
-sW, -sR, -sL : Window Scan, RPC Scan, List Scan

How to Install VirtualBox on Backtrack 5 Unknown rwxr-xr-x 0 08:30

Title How to Install VirtualBox on Backtrack 5
Permission rw-r--r--
Author Unknown
Date and Time 08:30
Category
Share
VirtualBox is a Virtual Machine software that can run OS under OS without dual boot. In Penetration environment this Virtual Machine very useful because we can learn how to penetration on the other system without make any damage. VirtualBox is an Open Source. This is the tutorial how to install VirtualBox on Backtrack 5.



First download the VirtualBox from http://www.virtualbox.org/wiki/Downloads

Then Install it. You can make new configuration about the OS that you want to Install to it. If you have an Windows XP SP 2 you can install on it and try to exploit it




Happy hacking!


Powered by Blogger.