ToolWar | Information Security (InfoSec) Tools: Information Gathering

DnsWalk (DNS Debugger) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggh9ptz7RMcUIN0S7vYdjFGEiIuggl4BgFl57Di5eVBDYTyViNa6nJQfw_rsg7al9rQASDXRcO-Fw6jIL1y3JE9pMLwQBuoahSa__orjcZ-KvqaYvTHKo53VnEUuahL4usjaC9DG0-VSQm/s1600/dnswalk+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnswalk screenshot" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggh9ptz7RMcUIN0S7vYdjFGEiIuggl4BgFl57Di5eVBDYTyViNa6nJQfw_rsg7al9rQASDXRcO-Fw6jIL1y3JE9pMLwQBuoahSa__orjcZ-KvqaYvTHKo53VnEUuahL4usjaC9DG0-VSQm/s1600/dnswalk+screenshot.png" title="dnswalk screenshot" /></a></div>
<div style="text-align: justify;">
<b>Dnswalk</b> is a <b>DNS debugger</b>. It performs zone transfers of  specifieddomains, and checks the database in numerous ways for  internalconsistency, as well as accuracy.  <b>dnswalk</b> is not for the faint  of heart.  It should NOT be used without a firm knowledge of the DNS  RFC's.  The warnings and errors must be interpreted within the context they are being used.  Something  may be flagged as a warning, but in reality it is a really bad error. Conversely dnswalk will flag things as warnings and possibly even  errors, but they may actually be perfectly "legal" or normal in your specific situation.  <b>dnswalk </b>is not an AI engine.  It just provides  useful information which you need to interpret. If you use this tool for  cracking or otherwise evil purposes, the author hereby considers you a  slime-ball.</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/i-KMGQvDOUc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here :: </b><a href="http://sourceforge.net/projects/dnswalk/files/latest/download" target="_blank">Dnswalk 2.0.2 (for Linux)</a><b>
</b>
<b> </b><br />
<b>Source ::</b> http://sourceforge.net/projects/dnswalk/</div>

DnsWalk (DNS Debugger) :: Tools

Dnswalk is a DNS debugger . It performs zone transfers of specifieddomains, and checks the database in numerous ways for internalcons...

DNSTracer (DNS Route) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijwi4woQmAhYPT0HfRIFqdXQpeOUXfuxlKLRCrcPaokynz71x66BXbyCIF6IAC2GsPaQEd1flhUoUmSSzx7TQommBkqteEQLjJBNIeQZ9s_hzczl3cyyIFOlmx7SeuBcVXWwDKLgN4QBdV/s1600/dnstracer+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnstracer screenshot" border="0" height="202" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijwi4woQmAhYPT0HfRIFqdXQpeOUXfuxlKLRCrcPaokynz71x66BXbyCIF6IAC2GsPaQEd1flhUoUmSSzx7TQommBkqteEQLjJBNIeQZ9s_hzczl3cyyIFOlmx7SeuBcVXWwDKLgN4QBdV/s400/dnstracer+screenshot.jpg" title="dnstracer screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>dnstracer</b> determines where a given <i>Domain Name Server (DNS) gets its information</i> from, and follows the chain of DNS servers back to the servers which know the data.</div>
<br />
Example :-<br />
<pre class="screenshot">[~] edwin@k7><b>dnstracer www.mavetju.org</b>
Tracing to www.mavetju.org via 127.0.0.1, timeout 15 seconds
127.0.0.1 (127.0.0.1)
 |\___ B.ROOT-SERVERS.NET [.] (128.9.0.107)
 |     |\___ M.GTLD-SERVERS.NET [org] (202.153.114.101)
 |     |     |\___ NS2.SECONDARY.COM [mavetju.org] (198.133.199.4) Got authoritative answer
 |     |      \___ NS1.SECONDARY.COM [mavetju.org] (198.133.199.3) Got authoritative answer
 |     |\___ E.GTLD-SERVERS.NET [org] (192.12.94.30)
 |     |     |\___ NS2.SECONDARY.COM [mavetju.org] (198.133.199.4) (cached)
 |     |      \___ NS1.SECONDARY.COM [mavetju.org] (198.133.199.3) (cached)
 |     |\___ K.GTLD-SERVERS.NET [org] (213.177.194.5)
 |     |     |\___ NS2.SECONDARY.COM [mavetju.org] (198.133.199.4) (cached)
 |     |      \___ NS1.SECONDARY.COM [mavetju.org] (198.133.199.3) (cached)
[...]
 |      \___ A.GTLD-SERVERS.NET [org] (192.5.6.30)
 |           |\___ NS2.SECONDARY.COM [mavetju.org] (198.133.199.4) (cached)
 |            \___ NS1.SECONDARY.COM [mavetju.org] (198.133.199.3) (cached)
 |\___ F.ROOT-SERVERS.NET [.] (192.5.5.241)
 |     |\___ M.GTLD-SERVERS.NET [org] (202.153.114.101) (cached)
 |     |\___ E.GTLD-SERVERS.NET [org] (192.12.94.30) (cached)
 |     |\___ K.GTLD-SERVERS.NET [org] (213.177.194.5) (cached)
 |     |\___ J.GTLD-SERVERS.NET [org] (210.132.100.101) (cached)
 |     |\___ F.GTLD-SERVERS.NET [org] (192.35.51.30) (cached)
[...]
 |      \___ A.GTLD-SERVERS.NET [org] (192.5.6.30) (cached)
 |\___ G.ROOT-SERVERS.NET [.] (192.112.36.4)
 |     |\___ M.GTLD-SERVERS.NET [org] (202.153.114.101) (cached)
[...]</pre>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ibBUa6u9R6Y?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<b>Download Here ::</b> <a href="http://freecode.com/urls/90291af9c8922e02e73b8299afb0f868" target="_blank">dnstracer (for Linux)</a><br />
<b>Source ::</b> http://www.mavetju.org/unix/dnstracer.php</div>

DNSTracer (DNS Route) :: Tools

dnstracer determines where a given Domain Name Server (DNS) gets its information from, and follows the chain of DNS servers back to th...

p0f (OS and Application Fingerprinting) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxMdkwqLhu3-pobymZBIO1qkTOxYwuX4bDCm4Q611wMbhHmVJFqDwC9T4Kry2DSL2ce_ZpjZSs3_1aULLvVDqe4vFIpOWUhyphenhyphenEX_EdPrmfz-HG-XmVhf9ArdZ8L37QRcjw75UeZOC30pf8G/s1600/p0f+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="p0f screenshot" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxMdkwqLhu3-pobymZBIO1qkTOxYwuX4bDCm4Q611wMbhHmVJFqDwC9T4Kry2DSL2ce_ZpjZSs3_1aULLvVDqe4vFIpOWUhyphenhyphenEX_EdPrmfz-HG-XmVhf9ArdZ8L37QRcjw75UeZOC30pf8G/s320/p0f+screenshot.jpg" title="p0f screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>p0f</b> is a versatile <i>passive OS and application fingerprinter,</i> and a tool  for <i>detecting NAT/connection sharing</i>.  It is useful for <i>penetration  testing, routine network monitoring, and forensics</i>, and to aid abuse  detection tools such as IDSes, spam filters, or honeypots. <b>P0f</b> is a tool that utilizes an array of sophisticated, purely passive traffic fingerprinting mechanisms to identify the players behind any incidental TCP/IP communications (often as little as a single normal SYN) without interfering in any way. Version 3 is a complete rewrite of the original codebase, incorporating a significant number of improvements to network-level fingerprinting, and introducing the ability to reason about application-level payloads (e.g., HTTP). </div>
<div style="text-align: justify;">
Some of p0f's capabilities include: </div>
<ul style="text-align: justify;">
<li> Highly scalable and extremely fast identification of the operating system      and software on both endpoints of a vanilla TCP connection - especially in      settings where <a href="http://www.nmap.org/">NMap</a> probes are blocked, too slow, unreliable, or would      simply set off alarms.  </li>
<li> Measurement of system uptime and network hookup, distance (including      topology behind NAT or packet filters), user language preferences, and so on.  </li>
<li> Automated detection of connection sharing / NAT, load balancing, and      application-level proxying setups.  </li>
<li> Detection of clients and servers that forge declarative statements      such as <i>X-Mailer</i> or <i>User-Agent</i>.  </li>
</ul>
<div style="text-align: justify;">
<b>p0f</b> can be operated in the foreground or as a daemon, and offers a simple real-time API for third-party components that wish to obtain additional information about the actors they are talking to. </div>
<div style="text-align: justify;">
Common uses for p0f include reconnaissance during penetration tests; routine network monitoring; detection of unauthorized network interconnects in corporate environments; providing signals for abuse-prevention tools; and miscellanous forensics. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/OROE_HoN8mg?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
Download Here :: <a href="http://lcamtuf.coredump.cx/p0f3/releases/p0f-3.06b.tgz" target="_blank">p0f-3.06b.tgz (for Linux)</a></div>
<div style="text-align: justify;">
Official Website :: http://lcamtuf.coredump.cx/p0f3/</div>
</div>

p0f (OS and Application Fingerprinting) :: Tools

p0f is a versatile passive OS and application fingerprinter, and a tool for detecting NAT/connection sharing . It is useful for pene...

Fierce (DNS Enumeration) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-d0GilIUG5gDmVrO9tXHE8UJRtwhXIr4VOfgiq6g0SySvlmFZvw7j4UPg3IEW2Ngpv9CxGhO0Cq94iAL9eUmsarmZ8wzwJHgmSM1t3kWG8zfMEfxm7QLPnHMWfkarA-sqsYXQJRJUhROK/s1600/fierce+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="fierce domain" border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-d0GilIUG5gDmVrO9tXHE8UJRtwhXIr4VOfgiq6g0SySvlmFZvw7j4UPg3IEW2Ngpv9CxGhO0Cq94iAL9eUmsarmZ8wzwJHgmSM1t3kWG8zfMEfxm7QLPnHMWfkarA-sqsYXQJRJUhROK/s400/fierce+screenshot.png" title="fierce domain" width="400" /></a></div>
<div style="text-align: justify;">
<b>Fierce </b>is a <i>DNS Enumeration</i> and <b>Fierce</b> is a <i>semi-lightweight scanner that helps locate non-contiguous IP  space and hostnames</i> against specified domains.  It's really meant as a  pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of those  require that you already know what IP space you are looking for.  This  does not perform exploitation and does not scan the whole internet  indiscriminately.  It is meant specifically to locate likely targets  both inside and outside a corporate network.  Because it uses DNS  primarily you will often find mis-configured networks that leak internal  address space. That's especially useful in targeted malware.  <b><br />
</b></div>
<div style="text-align: justify;">
<b>Fierce</b> domain scan was born out of personal frustration after  performing a web application security audit.  It is traditionally very  difficult to discover large swaths of a corporate network that is  non-contiguous.  It's terribly easy to run a scanner against an IP  range, but if the IP ranges are nowhere near one another you can miss  huge chunks of networks.</div>
<div style="text-align: justify;">
First what Fierce is not.  Fierce is not an IP scanner, it is not a  DDoS tool, it is not designed to scan the whole internet or perform any  un-targeted attacks. It is meant specifically to locate likely targets  both inside and outside a corporate network.  Only those targets are  listed (unless the -nopattern switch is used).  No exploitation is  performed (unless you do something intentionally malicious with the  -connect switch).  Fierce is a reconnaissance tool.  Fierce is a PERL  script that quickly scans domains (usually in just a few minutes,  assuming no network lag) using several tactics.</div>
<div style="text-align: justify;">
First it queries your DNS for the DNS servers of the target.  It then  switches to using the target's DNS server (you can use a different one  if you want using the -dnsserver switch but this can cause problems if  the server you use won't tell you information about other people's sites  and of course you won't find much relevant internal address space).   Fierce then attempts to dump the SOA records for the domain in the very  slim hope that the DNS server that your target uses may be  misconfigured.  Once that fails (because it almost always will) it  attempts to "guess" names that are common amongst a lot of different  companies.  Don't ask me where I got the list, it's just a list of names  that id and I have seen all over the place.  I thought about adding a  dictionary to this, but I think that would take a lot longer, and given  that very few of the words are dictionary words I don't think this would  add a lot of value.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/il6Ey1sNc0w?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="http://ha.ckers.org/fierce/fierce.pl" target="_blank">fierce.pl</a></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://ha.ckers.org/fierce/</div>
</div>

Fierce (DNS Enumeration) :: Tools

Fierce is a DNS Enumeration and Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames again...

DNSMap (DNS Network Mapper) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtvLH9JV95_ugTvvdVTHaLKagKNfbMcFZroTS2L0UYmecPvN77x5zOtyG23Q0D_KhBl2itBUHXhGHB3ylnVmZDM_HbwONQVFB1JUPOEW8Ngr9Br57qzs4t-Gihxov75rM8h7TIgRrdf158/s1600/dnsmap.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnsmap screenshot" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtvLH9JV95_ugTvvdVTHaLKagKNfbMcFZroTS2L0UYmecPvN77x5zOtyG23Q0D_KhBl2itBUHXhGHB3ylnVmZDM_HbwONQVFB1JUPOEW8Ngr9Br57qzs4t-Gihxov75rM8h7TIgRrdf158/s400/dnsmap.png" title="dnsmap screenshot" width="400" /></a></div>
</div>
<div style="text-align: justify;">
<b>dnsmap</b> is a <i><span itemprop="description">Passive DNS network mapper a.k.a. subdomains bruteforcer</span></i>. <b>dnsmap</b> is mainly meant to be used by pentesters during the <i> information gathering/enumeration phase</i> of infrastructure security  assessments. During the enumeration stage, the security consultant would  typically discover the target company’s IP netblocks, domain names,  phone numbers, etc. dnsmap was included in Backtrack 2 and 3, although the version included is the now dated version 0.1.  </div>
<div style="text-align: justify;">
Subdomain brute-forcing is another technique that should be used in  the enumeration stage, as it’s especially useful when other domain  enumeration techniques such as zone transfers don’t work (I rarely see  zone transfers being publicly allowed these days by the way).<br />
<br />
obtain all IP addresses (A records) associated to each successfully  bruteforced subdomain, rather than just one IP address per subdomain, abort the bruteforcing process in case the target domain uses wildcards , ability to be able to run the tool without providing a wordlist by using a built-in list of keywords, bruteforcing by using a user-supplied wordlist (as opposed to the built-in wordlist).</div>
<h3 style="text-align: justify;">
New Improvements in Version 0.22 - </h3>
<div style="text-align: justify;">
saving the results in human-readable and CSV format for easy processing,fixed bug that disallowed reading wordlists with DOS CRLF format,improved built-in subdomains wordlist,new bash script (<code>dnsmap-bulk.sh</code>) included which allows  running dnsmap against a list of domains from a , user-supplied file.  i.e.: bruteforcing several domains in a bulk fashion, bypassing of signature-based dnsmap detection by generating a proper pseudo-random subdomain when checking for wildcards</div>
<div style="text-align: left;">
<h3 style="text-align: left;">
<span style="font-size: small;">Usage -</span></h3>
<br />
<pre><code>usage: dnsmap <target-domain> [options]
options:
-w <wordlist-file>
-r <results-path>
</code></pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/55ITD0hceio?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<br />
<h3>
Example on Live Domain</h3>
The following is just an example so you get an idea of how dnsmap  works. Very simple to use as you can see. If you want to save the  results or use your own wordlist, checkout the usage syntax. Question  for those who pay attention to detail: <i>can you spot the potential leaks of internal IP addresses?</i>
<br />
<pre><code><span style="background-color: #ffd966;">
<span style="background-color: white;">$ dnsmap baidu.com
dnsmap 0.22 - DNS Network Mapper by pagvac (gnucitizen.org)

[+] searching (sub)domains for baidu.com using built-in wordlist

accounts.baidu.com
IP address #1: 10.11.252.74

events.baidu.com
IP address #1: 202.108.23.40

finance.baidu.com
IP address #1: 60.28.250.196
IP address #2: 60.28.251.79
IP address #3: 60.28.251.206
IP address #4: 123.129.240.28
IP address #5: 123.129.240.29
IP address #6: 60.28.250.102
IP address #7: 60.28.250.111

forum.baidu.com
IP address #1: 202.108.250.212

images.baidu.com
IP address #1: 61.135.163.93

mail.baidu.com
IP address #1: 10.23.3.137

mobile.baidu.com
IP address #1: 202.108.23.125

mx.baidu.com
IP address #1: 61.135.163.61

mx1.baidu.com
IP address #1: 61.135.163.61

mx2.baidu.com
IP address #1: 61.135.163.62

mx3.baidu.com
IP address #1: 61.135.162.61

news.baidu.com
IP address #1: 61.135.163.87

ns1.baidu.com
IP address #1: 202.108.22.220

ns2.baidu.com
IP address #1: 61.135.165.235

ns3.baidu.com
IP address #1: 220.181.37.10

oracle.baidu.com
IP address #1: 172.18.0.50

photo.baidu.com
IP address #1: 61.135.163.93

photos.baidu.com
IP address #1: 61.135.163.93

pop.baidu.com
IP address #1: 61.135.166.249

proxy.baidu.com
IP address #1: 202.108.11.30

smtp.baidu.com
IP address #1: 61.135.163.61

vpn.baidu.com
IP address #1: 202.108.250.231

wap.baidu.com
IP address #1: 61.135.163.237

webmail.baidu.com
IP address #1: 61.135.166.249

win.baidu.com
IP address #1: 10.65.19.212

www.baidu.com
IP address #1: 220.181.5.222

www1.baidu.com
IP address #1: 220.181.5.222

www2.baidu.com
IP address #1: 202.108.22.136

www3.baidu.com
IP address #1: 202.108.22.188

[+] 29 (sub)domains and 35 IP address(es) found </span></span>
</code></pre>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://www.gnucitizen.org/static/blog/2009/03/dnsmap-0222tar.gz">dnsmap-0.22.2.tar.gz</a></div>
<div style="text-align: justify;">
<b>Source :: </b>http://code.google.com/p/dnsmap/</div>
</div>

DNSMap (DNS Network Mapper) :: Tools

dnsmap is a Passive DNS network mapper a.k.a. subdomains bruteforcer . dnsmap is mainly meant to be used by pentesters during the ...

FindDomains :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgee-CM00i0zN_fWK2rWP5z3J5lOCUXIO4zpEYE2FbKy8zhiePxOjjDqv_hppFPjVdu4-_SbjsrUH2JgEH2NCUm2tNpbjcNLVMufw_9PARC_kz4-W3gKvVvH1zfs_yb6HwuL-iXKW89c-Q8/s1600/finddomains.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="FindDomains logo" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgee-CM00i0zN_fWK2rWP5z3J5lOCUXIO4zpEYE2FbKy8zhiePxOjjDqv_hppFPjVdu4-_SbjsrUH2JgEH2NCUm2tNpbjcNLVMufw_9PARC_kz4-W3gKvVvH1zfs_yb6HwuL-iXKW89c-Q8/s320/finddomains.png" title="FindDomains logo" width="227" /></a></div>
<div style="text-align: justify;">
<b>FindDomains</b> is a <i>multithreaded search engine discovery tool</i> that will
 be very useful for penetration testers dealing with discovering domain 
names/web sites/virtual hosts which are located on too many IP 
addresses. Provides a console interface so you can easily integrate this
 tool to your pentest automation system. It retrieves domain names/web sites which are located on specified ip address/hostname. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://finddomains.googlecode.com/files/FindDomainsv0.1.1.rar" target="_blank">FindDomainsv0.1.1 (for Windows)</a><b><br /></b></div>
<div style="text-align: justify;">
<b>Source :: </b>http://code.google.com/p/finddomains/</div>
</div>

FindDomains :: Tools

FindDomains is a multithreaded search engine discovery tool that will be very useful for penetration testers dealing with discovering...

DNSenum (DNS Enumeration) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxNRJcNRL-APPaXbHIFD6jfAfGbCGG1E052DaRrexH-nbnr31HFbWFG7KFm57OfZkJDDRj-ivRZTs9nt-w8RzbgB2kyglNN3h1MccRqG7vMob6eWeouWflpga0z9NFdYUmsxje824PEaUU/s1600/dnsenum.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnsenum screenshot" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxNRJcNRL-APPaXbHIFD6jfAfGbCGG1E052DaRrexH-nbnr31HFbWFG7KFm57OfZkJDDRj-ivRZTs9nt-w8RzbgB2kyglNN3h1MccRqG7vMob6eWeouWflpga0z9NFdYUmsxje824PEaUU/s640/dnsenum.png" title="dnsenum screenshot" width="640" /></a></div>
<br />
<span itemprop="description"><b>DNSenum </b>is a <i>pentesting cool created to enumerate DNS info about domains</i></span>. The purpose of <b>Dnsenum</b> is to gather as much information as possible  about a domain. The program currently performs the following operations:  </div>
<div style="text-align: justify;">
1) Get the host's addresse (A record). </div>
<div style="text-align: justify;">
2) Get the namservers  (threaded). </div>
<div style="text-align: justify;">
3) Get the MX record (threaded). </div>
<div style="text-align: justify;">
4) Perform axfr queries on  nameservers and get BIND versions(threaded). </div>
<div style="text-align: justify;">
5) Get extra names and  subdomains via google scraping (google query = "allinurl: -www  site:domain"). </div>
<div style="text-align: justify;">
6) Brute force subdomains from file, can also perform  recursion on subdomain that have NS records (all threaded). </div>
<div style="text-align: justify;">
7) Calculate  C class domain network ranges and perform whois queries on them  (threaded). </div>
<div style="text-align: justify;">
8) Perform reverse lookups on netranges ( C class or/and  whois netranges) (threaded). </div>
<div style="text-align: justify;">
9) Write to domain_ips.txt file ip-blocks.<br />
<h3>
Tutorials ::  </h3>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Sk7NI6LDkJQ?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/h-emEp6n9Fk?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
Download :: </h3>
<b>Linux :: </b><a href="http://dnsenum.googlecode.com/files/dnsenum-1.2.2.tar.gz" target="_blank">DNSenum 1.2.2 (for Linux)</a><b>
</b></div>
<div style="text-align: justify;">
<b>Source :: </b><a href="http://code.google.com/p/dnsenum/">http://code.google.com/p/dnsenum/</a></div>
</div>

DNSenum (DNS Enumeration) :: Tools

DNSenum is a pentesting cool created to enumerate DNS info about domains . The purpose of Dnsenum is to gather as much information as ...

Maltego (Forensics and Data Mining Application) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Maltego Logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1bU3VAvU7XOFmGUH3w25koUcgWfVhwqOz_VfTBInsnK_GZMYYS1Ys3-clr3JFLqQapwXU59Jz9MalBxbcxauORQ5r5EqnnlDZyD2NX46jVx2vtr4fUVvYeEF8V4vKvTEDxC9eF3PrZmWU/s1600/maltegoPanelLogo.png" title="Maltego Logo" /></div>
<div style="text-align: justify;">
<b>Maltego</b> is a <i>forensics and data mining</i> application. It is capable of  querying various public data sources and graphically depicting the  relationships between entities such as people, companies, web sites, and  documents. Maltego is an open source intelligence too, but isn't open source software. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Maltego</b> is a unique platform developed to deliver a clear threat picture  to the environment that an organization owns and operates. Maltego’s  unique advantage is to demonstrate the complexity and severity of single  points of failure as well as trust relationships that exist currently  within the scope of your infrastructure.     <br />
<br />
The unique perspective that Maltego offers to both network  and resource based entities is the aggregation of information posted all  over the internet - whether it’s the current configuration of a router  poised on the edge of your network or the current whereabouts of your  Vice President on his international visits, Maltego can locate,  aggregate and visualize this information.     <br />
<br />
<b>Maltego </b>offers the user with unprecedented information. Information is leverage. Information is power. Information is Maltego. </div>
<ul class="arrowList" style="text-align: justify;">
<li> Maltego is a program that can be used to determine the relationships and real world links between:<br />
<ul class="arrowList">
<li> People     </li>
<li> Groups of people (social networks)     </li>
<li> Companies     </li>
<li> Organizations     </li>
<li> Web sites     </li>
<li> Internet infrastructure such as:     <ul class="arrowList2">
<li> Domains      </li>
<li> DNS names      </li>
<li> Netblocks      </li>
<li> IP addresses       </li>
</ul>
</li>
<li> Phrases     </li>
<li> Affiliations     </li>
<li> Documents and files      </li>
</ul>
</li>
<li> These entities are linked using open source intelligence.     </li>
<li> Maltego is easy and quick to install - it uses Java, so it runs on Windows, Mac and Linux.     </li>
<li> Maltego provides you with a graphical interface that makes  seeing these relationships instant and accurate - making it possible to  see hidden connections.     </li>
<li> Using the graphical user interface (GUI) you can see  relationships easily - even if they are three or four degrees of  separation away.     </li>
<li> Maltego is unique because it uses a powerful, flexible  framework that makes customizing possible. As such, Maltego can be  adapted to your own, unique requirements. </li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/e33NSUkyEg0?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
<b>
</b></div>
<div style="text-align: justify;">
<br />
<b>Download Here ::  </b><a href="http://www.paterva.com/web6/products/download.php">Maltego Latest</a><b>
</b></div>
<div style="text-align: justify;">
<b>Source & Official Website ::</b> http://www.paterva.com/</div>
</div>

Maltego (Forensics and Data Mining Application) :: Tools

Maltego is a forensics and data mining application. It is capable of querying various public data sources and graphically depicting t...

Subscribe to: Posts ( Atom )