Posts

Xplico

Xplico Package Description The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, H323), FTP, TFTP, and so on. Xplico is not a network protocol analyzer. Source: http://sourceforge.net/projects/xplico/files/Xplico%20versions Xplico Homepage | Kali Xplico Repo Author: Gianluca Costa, Andre de Franceschi License: GPLv2 Tools included in the xplico package xplico – Network Forensic Analysis Tool (NFAT) root@kali:~# xplico -h xplico v1.2.1 Internet Traffic Decoder (NFAT). See http://www.xplico.org for more information. Copyright 2007-2017 Gianluca Costa & Andrea de Franceschi and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. This product includes GeoLit...

WOL-E

WOL-E Package Description WOL-E is a suite of tools for the Wake on LAN feature of network attached computers, this is now enabled by default on many Apple computers. These tools include: Bruteforcing the MAC address to wake up clients Sniffing WOL attempts on the network and saving them to disk Sniffing WOL passwords on the network and saving them to disk Waking up single clients (post sniffing attack) Scanning for Apple devices on the network for WOL enabling Sending bulk WOL requests to all detected Apple clients Source: https://code.google.com/p/wol-e/ WOL-E Homepage | Kali WOL-E Repo Author: Nathaniel Carew License: GPLv3 Tools included in the wol-e package wol-e – Wake on LAN Explorer root@kali:~# wol-e -h [*] WOL-E 1.0 [*] Wake on LAN Explorer - A collection a WOL tools. [*] by Nathaniel Carew     -m         Waking up single computers.         If a password is required use the -k 00...

wireshark

Image
wireshark Package Description Wireshark is the world’s foremost network protocol analyzer. It lets you see what’s happening on your network at a microscopic level. It is the de facto (and often de jure) standard across many industries and educational institutions. Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998. Wireshark has a rich feature set which includes the following: Deep inspection of hundreds of protocols, with more being added all the time Live capture and offline analysis Standard three-pane packet browser Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility The most powerful display filters in the industry Rich VoIP analysis Capture files compressed with gzip can be decompressed on the fly Live data can be read from Eth...

urlcrazy

urlcrazy Package Description Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. Features Generates 15 types of domain variants Knows over 8000 common misspellings Supports cosmic ray induced bit flipping Multiple keyboard layouts (qwerty, azerty, qwertz, dvorak) Checks if a domain variant is valid Test if domain variants are in use Estimate popularity of a domain variant Source: http://www.morningstarsecurity.com/research/urlcrazy URLCrazy Homepage | Kali URLCrazy Repo Author: Andrew Horton License: Non-commercial Tools included in the urlcrazy package urlcrazy – Domain typo generator root@kali:~# urlcrazy -h URLCrazy version 0.5 by Andrew Horton (urbanadventurer) http://www.morningstarsecurity.com/research/urlcrazy Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. Supports the follo...

Unicornscan

Unicornscan Package Description Overview : Unicornscan is a new information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL license. Benefits : Unicornscan is an attempt at a User-land Distributed TCP/IP stack. It is intended to provide a researcher a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network. Although it currently has hundreds of individual features, a main set of abilities include: Asynchronous stateless TCP scanning with all variations of TCP Flags. Asynchronous stateless TCP banner grabbing Asynchronous protocol specific UDP Scanning (sending enough of a signature to elicit a response). Active and Passive remote OS, application, and component identificati...

twofi

twofi Package Description When attempting to crack passwords custom word lists are very useful additions to standard dictionaries. An interesting idea originally released on the “7 Habits of Highly Effective Hackers” blog was to use Twitter to help generate those lists based on searches for keywords related to the list that is being cracked. This idea has been expanded into twofi which will take multiple search terms and return a word list sorted by most common first. Source: https://digi.ninja/projects/twofi.php twofi Homepage | Kali twofi Repo Author: Robin Wood License: Creative Commons Attribution-Share Alike 2.0 Tools included in the twofi package twofi – Twitter words of interest root@kali:~# twofi -h twoif 2.0-beta Robin Wood (robin@digininja.org) (www.digininja.org) twoif - Twitter Words of Interest Usage: twoif [OPTIONS]     --help, -h: show help     --config <file>: config file, default is twofi.yml     --count...

TLSSLed

TLSSLed Package Description TLSSLed is a Linux shell script whose purpose is to evaluate the security of a target SSL/TLS (HTTPS) web server implementation. It is based on sslscan, a thorough SSL/TLS scanner that is based on the openssl library, and on the “openssl s_client” command line tool. The current tests include checking if the target supports the SSLv2 protocol, the NULL cipher, weak ciphers based on their key length (40 or 56 bits), the availability of strong ciphers (like AES), if the digital certificate is MD5 signed, and the current SSL/TLS renegotiation capabilities. Source: http://www.taddong.com/en/lab.html TLSSLed Homepage | Kali TLSSLed Repo Author: Raul Siles, Taddong SL License: GPLv3 Tools included in the tlssled package tlssled – Evaluates the security of a target SSL/TLS (HTTPS) server root@kali:~# tlssled ------------------------------------------------------  TLSSLed - (1.3) based on sslscan and openssl    ...