ToolWar | Information Security (InfoSec) Tools: Information Gathering

BlindElephant (Web Application Fingerprinting) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt-PGEQbszCnUumUvyuXZt9TWyLVMKHh4zJ6Nms53hyphenhyphenEdN-vLqt0RuDiSAnxFXphRcokFnxoZolzQ5zf4XZL-iQlMn-HMKs3twBbf5TdM_E1hO169ojrWt8AAj2r1IrStX8rDokXXSae8/s1600/BlindElephant+logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="287" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt-PGEQbszCnUumUvyuXZt9TWyLVMKHh4zJ6Nms53hyphenhyphenEdN-vLqt0RuDiSAnxFXphRcokFnxoZolzQ5zf4XZL-iQlMn-HMKs3twBbf5TdM_E1hO169ojrWt8AAj2r1IrStX8rDokXXSae8/s1600/BlindElephant+logo.png" width="320" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The <b>BlindElephant</b> is a <b>Web Application Fingerprinter</b> attempts to discover the 
version of a (known) <a href="http://www.toolwar.com/search/label/Web" target="_blank">web application</a> by comparing static files at known 
locations against precomputed <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hashes</a> for versions of those files in all 
all available releases. The technique is fast, low-bandwidth, 
non-invasive, generic, and highly automatize. </div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Discussion and Forum :: </b><a href="http://www.qualys.com/blindelephant" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Installation ::</b></div>
<div style="text-align: justify;">
Installation is only required if you plan to use BlindElephant as a 
library. Make sure that your <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> installation has distutils, and then
 do: </div>
<div style="text-align: justify;">
<span style="font-size: large;"><span style="font-family: "Courier New",Courier,monospace;"><code>cd blindelephant/src</code><code>sudo python setup.py install</code></span></span></div>
<br />
<b>Example Usage (Command Line) :: </b><br />

setup.py will have placed BlindElephant.py in your /usr/local/bin dir. 
<br />
<pre style="border-left: 5px solid #ddd; padding: 10px;"><span style="font-family: "Courier New",Courier,monospace;">$ BlindElephant.py 
Usage: BlindElephant.py [options] url appName

Options:
  -h, --help            show this help message and exit
  -p PLUGINNAME, --pluginName=PLUGINNAME
                        Fingerprint version of plugin (should apply to web app
                        given in appname)
  -s, --skip            Skip fingerprinting webpp, just fingerprint plugin
  -n NUMPROBES, --numProbes=NUMPROBES
                        Number of files to fetch (more may increase accuracy).
                        Default: 15
  -w, --winnow          If more than one version are returned, use winnowing
                        to attempt to narrow it down (up to numProbes
                        additional requests).
  -l, --list            List supported webapps and plugins

Use "guess" as app or plugin name to attempt to attempt to
discover which supported apps/plugins are installed.

$ python BlindElephant.py http://laws.qualys.com movabletype
Loaded /usr/local/lib/python2.6/dist-packages/blindelephant/dbs/movabletype.pkl with 96 versions, 2229 differentiating paths, and 209 version groups.
Starting BlindElephant fingerprint for version of movabletype at http://laws.qualys.com

Fingerprinting resulted in:
4.22-en
4.22-en-COM
4.23-en
4.23-en-COM

Best Guess: 4.23-en-COM</span>
</pre>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<span style="font-size: large;"><span style="font-family: "Courier New",Courier,monospace;"><code><span style="font-family: "Helvetica Neue",Arial,Helvetica,sans-serif;"><span style="font-size: small;"><b>More Help :: </b><a href="http://sourceforge.net/p/blindelephant/code/HEAD/tree/trunk/" target="_blank">Click Here</a></span></span> </code></span></span></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: left;">
<b>Linux Command  :: </b><code>svn co https://blindelephant.svn.sourceforge.net/svnroot/blindelephant/trunk blindelephant</code></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://blindelephant.sourceforge.net/">http://blindelephant.sourceforge.net/</a></div>

BlindElephant (Web Application Fingerprinting) :: Tools

The BlindElephant is a Web Application Fingerprinter attempts to discover the version of a (known) web application by comparing sta...

FruityWiFi (Wireless Auditing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="FruityWiFi Screenshot" border="0" height="311" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1JHrHssrXvjVxrIiXhQ2a_6Nw0cQ6Io_oxLac-3nYxXA0ztQBVccfe8XxahD3MDwUa0nN_AyCnTwyNYqRew1esXzke6jIE0oEZJ9-UqWX7VbnNqecm1eywx_ksuFf4SRuUs0ISrTb68ij/s320/FruityWiFi+Screenshot.JPG" title="FruityWiFi Screenshot" width="320" /></div>
<div style="text-align: justify;">
<b>FruityWifi</b> is a <i>wireless network auditing tool</i> based in the <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">wifi</a> 
Pineapple. The application can be installed in any Debian based system 
adding the extra packages. Tested in Debian, <a href="http://www.toolwar.com/2013/09/kali-linux-toolwar.html" target="_blank">Kali Linux</a>, Kali Linux ARM 
(Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi).</div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b> Wiki :: </b><a href="https://github.com/xtr4nge/FruityWifi/wiki" target="_blank">Click Here</a></div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://github.com/xtr4nge/FruityWifi/archive/master.zip" target="_blank">FruityWiFi</a></div>

FruityWiFi (Wireless Auditing) :: Tools

FruityWifi is a wireless network auditing tool based in the wifi Pineapple. The application can be installed in any Debian based syst...

Revealer Toolkit (Forensics) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="Computer Forensics" border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8e3p7c82cxcOtvuuFyaZfuwteN-5PuOGb4hjr_eqQM0XsdOx3B6JtMf0p2-3aV7hm2q1UkbKhCdPSeBde9jJsffYi7TsG-AJJ7pmNgOPo-OkvXlubRiq52JKd9tI0FQb1R6NnbPKhXF-V/s400/computer-forensics.jpg" title="Computer Forensics" width="400" /></div>
<div style="text-align: justify;">
<strong>Revealer Toolkit</strong> is a <a href="http://www.toolwar.com/search/label/Frameworks" target="_blank">framework</a> and simple 
scripts for <b>computer forensics</b>. It uses Brian Carrier's <a href="http://www.toolwar.com/2014/01/the-sleuth-kit-tsk-forensics-framework.html" target="_blank">The Sleuth Kit</a> 
as the backbone, as well as other <a href="http://www.toolwar.com/search/label/Free" target="_blank">free tools</a>. </div>
<div style="text-align: justify;">
The aim of the <b>
Revealer Toolkit</b> is to automate rutinary tasks and to manage sources and
 results from another perspective than the usual forensic frameworks. It
 will be specially useful in cases with several computers and digitals 
forensic sources.  </div>
<div style="text-align: justify;">
RVT is developed and actively tested by computer <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic</a> investigators working at EVIDENTIA  and INCIDE, spanish companies sited at the beautiful city of Barcelona.</div>
<h3 style="text-align: justify;">
Introduction to version 0.2.1</h3>
<div style="text-align: justify;">
The current state of the project can be described as a <i>proof of concept</i>,
 that is, RVT version 0.2 proofs that the objectives we are looking for 
are reachable, but further work is necessary in order to have a stable 
version. </div>
<div style="text-align: justify;">
Therefore, RVT v0.2 can be used to automate computer 
forensic tasks on a group of several digital forensic images, but the 
code is still buggy, some tasks have to be run manually, and the 
interface has to be improved.</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>Wiki :: </b><a href="http://code.google.com/p/revealertoolkit/w/list" target="_blank">Click Here </a><b><br /></b></div>
<div style="text-align: justify;">
<b>Revealer User Guide ::</b> <a href="http://revealertoolkit.googlecode.com/files/RVT-userGuide.pdf" target="_blank">Click Here</a> (.pdf)</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows ::</b> <a href="http://revealertoolkit.googlecode.com/files/RVT_v0.2.1.zip" target="_blank">Revealer Toolkit 0.2.1 </a></div>
<div style="text-align: justify;">
<b>Source Website ::</b> <a href="http://code.google.com/p/revealertoolkit/" target="_blank">http://code.google.com/p/revealertoolkit/</a></div>

Revealer Toolkit (Forensics) :: Framework

Revealer Toolkit is a framework and simple scripts for computer forensics . It uses Brian Carrier's The Sleuth Kit as the backbo...

RegistryDecoder (Windows Registry Forensics) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="registrydecoder icon" border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMIhBRUMLX-a4LG7hoynF82A7nZ5ngAu4onGUOBohjYbLn-IK4dmej-52Gm9WbEUW3G_GW8-L8FWNEUG7vINlaxS0WNP8AiLqL_PFc5P8OfHcpf-3A5H4yMIdRnaZIx6-GlK3wDOKDOHhm/s1600/registrydecoder.png" title="registrydecoder icon" width="400" /></div>
<span itemprop="description" style="font-size: small;"><b>RegistryDecoder</b> is a automated <i>Acquisition, Analysis, and Reporting of Registry</i> Contents</span><span style="font-size: small;">. <b>Registry Decoder</b> provides a single tool in which to perform <i>browsing,
 searching, <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analysis</a>, and reporting of <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> hive</i> contents. All 
functionality is exposed through an intuitive <a href="http://www.toolwar.com/search/label/GUI" target="_blank">GUI</a> interface and 
accommodates even novice investigators. <b>Registry Decoder</b> also acts as a great resource for new research and experimenting within the registry.</span><br />
<div style="text-align: justify;">
<span style="font-size: small;"><b>Digital <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a></b> deals with the analysis of artifacts on all types of 
digital devices. One of the most prevalent analysis techniques performed
 is that of the registry hives contained in Microsoft <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> operating 
systems. <b> Registry Decoder</b> was developed with the purpose of providing a
 single <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> for the acquisition, analysis, and reporting of registry 
contents.</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;"><b>Registry
 Decoder</b> consists of two components, the first of which is a tool for 
<a href="http://www.toolwar.com/search/label/Online" target="_blank">online</a> acquisition of registry files from a running machine.
 To safely acquire files from a running machine, we ‘freeze’ a copy of 
the current registry files using the System Restore Facility. This 
places the files into a read-only location and ensures that the 
operating system will not have the files opened (which would prevent 
them from being copied to external storage).</span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;">Beyond
 the current set of registry files, the acquisition component can also 
acquire historical files from the running system. These historical files
 are acquired from XP machines through the <a href="http://www.toolwar.com/search/label/System" target="_blank">System </a>Restore Point facility
 and through the Volume Shadow Service on Vista and Windows 7 machines.</span></div>
<div style="text-align: justify;">
<span style="font-size: small;"><br /></span></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="font-family: "Times New Roman","serif"; font-size: small; line-height: 115%;">The
 analysis section of the offline component contains a number of powerful
 features. The first feature is Search, which allows for powerful 
searching across <a href="http://www.toolwar.com/search/label/Registry" target="_blank">registry</a> hives. The searching abilities include:</span></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<ul style="text-align: justify;">
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Filtering by hive keys, name, and data</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Filtering by the last write time of keys</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Searching individual terms or with a newline delimited search term file</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Exact or wildcard based search</span><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Viewing of search results</span></li>
<li><span style="font-family: Symbol; font-size: 12pt; line-height: 115%;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: "Times New Roman","serif"; font-size: 12pt; line-height: 115%;">Automated reporting of search contents to HTML, PDF, or XLS</span></li>
</ul>
<br />
<h3>
Tutorials ::</h3>
<b>Text Tutorial (PDF) :: </b><a href="http://registrydecoder.googlecode.com/files/RegistryDecoder-Offline-Analysis-Instructions-v1.1.pdf" target="_blank">Click Here </a><br />
<b>FAQ ::</b> <a href="http://code.google.com/p/registrydecoder/wiki/FAQ" target="_blank">Click Here </a><br />
<br />
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://registrydecoder.googlecode.com/files/regedcoderR103.zip" target="_blank">RegistryDecoder (.zip)</a><b><br /></b><br />
<b>Official Website :: </b><a href="http://www.registrydecoder.com/">http://www.registrydecoder.com/</a><b><br /></b>

RegistryDecoder (Windows Registry Forensics) :: Tools

RegistryDecoder is a automated Acquisition, Analysis, and Reporting of Registry Contents . Registry Decoder provides a single tool in w...

PDFMiner (PDF Parser and Analyzer) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="PDF Analyzer Logo" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMCjJJbO6cbhxU25HoYQQ8ON_84A1pWFiyQLa-JFIozC6ngptY0JwR3i0kmDfGHn30rDY8c8i1AKJlt85WCyQGkQ1xtKs733iaogmoBtlkajjWUsAMFPoLlIFMdiiDWpacJze0pKS8trfk/s320/PDF+Analyzer+logo.png" title="PDF Analyzer Logo" width="320" /></div>
<div style="text-align: justify;">
<b>PDFMiner </b>is a tool for <i>extracting information from PDF documents.</i>
Unlike other <b>PDF-</b>related tools, it focuses entirely on getting 
and<i> <a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyzing</a> text data</i>. <b>PDFMiner </b>allows one to obtain
the exact location of text in a page, as well as 
other information such as fonts or lines.
It includes a PDF converter that can transform <a href="http://www.toolwar.com/search/label/PDF" target="_blank">PDF</a> files
into other text formats (such as HTML). It has an extensible
PDF parser that can be used for other purposes than text analysis.

</div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Features</h3>
<ul style="text-align: justify;">
<li> Written entirely in Python. (for version 2.4 or newer)
</li>
<li> Parse, analyze, and convert PDF documents.
</li>
<li> PDF-1.7 specification support. (well, almost)
</li>
<li> CJK <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a> and vertical writing scripts support.
</li>
<li> Various font types (Type1, TrueType, Type3, and CID) support.
</li>
<li> Basic encryption (RC4) support.
</li>
<li> PDF to HTML conversion (with a sample converter web app).
</li>
<li> Outline (TOC) extraction.
</li>
<li> Tagged contents extraction.
</li>
<li> Reconstruct the original layout by grouping text chunks.
</li>
</ul>
<div style="text-align: justify;">
<b>PDFMiner</b> is about 20 times slower than 
other C/C++-based counterparts such as XPdf. </div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<h4>
How to Install</h4>
<ol>
<li> Install <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> 2.4 or newer.
     (<b>Python 3 is not supported.</b>)
</li>
<li> Download the PDFMiner source.
</li>
<li> Unpack it.
</li>
<li> Run <code>setup.py</code> to install:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;"># <b>python setup.py install</b></span>
</pre>
</blockquote>
</li>
<li> Do the following test:<br />
<blockquote>
<pre><span style="font-family: "Courier New",Courier,monospace;">$ <b>pdf2txt.py samples/simple1.pdf</b>
Hello
World
Hello
World
H e l l o
W o r l d
H e l l o
W o r l d</span>
</pre>
</blockquote>
</li>
<li> Done!
</li>
</ol>
<div style="text-align: justify;">
For more tutorials visit official website.</div>
<h3 style="text-align: justify;">
<b>Download ::</b></h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="https://pypi.python.org/packages/source/p/pdfminer/pdfminer-20131113.tar.gz" target="_blank">PDFMiner-20131113.tar.gz</a><b> </b></div>
<div style="text-align: justify;">
<b>Official Website :: </b> <a href="http://www.unixuser.org/~euske/python/pdfminer/index.html">http://www.unixuser.org/~euske/python/pdfminer/index.html</a></div>

PDFMiner (PDF Parser and Analyzer) :: Tools

PDFMiner is a tool for extracting information from PDF documents. Unlike other PDF- related tools, it focuses entirely on getting and ...

TamoGraph Site Survey (Wireless site survey) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="tamograph logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhf9PT_SSVfHD_K9wUBzLvVaeC3T3HU0lxshTZu6s_jhgnsMSqKMrn4U75ySHPHDnhaODmeTaNACxvIhYp_htUmKQY7Jf1JNt4jvNPXWcJjSOvPMJVKDdnAPh6OaQuzJRC9qnidD8Tb_Km7/s1600/Tamograph+tutorial.png" title="tamograph logo" /></div>
<b>TamoGraph</b> is a powerful and user-friendly <b>wireless site survey software tool</b> for <b>collecting</b>, <b>visualizing</b>, and <b>analyzing 802.11 a/b/g/n/ac Wi-Fi data</b>.  Wireless network deployment and maintenance requires the use of a  professional RF site survey tool that facilitates otherwise  time-consuming and very complex tasks, such as ongoing analysis and  reporting of <b>signal strength</b>, <b>noise</b> and <b>interference</b>, <b>channel allocation</b>, <b>data rates</b>, etc.</div>
<div style="text-align: justify;">
<a href="http://www.tamos.com/products/wifi-site-survey/tour.php" title=""></a>By using TamoGraph, businesses can dramatically <b>reduce the time and costs</b> that are involved in deploying and maintaining Wi-Fi networks and <b>improve network performance</b> and coverage in all kinds of environments: office buildings, airports, cafes, malls, or open space areas.</div>
<div style="clear: left; text-align: justify;">
</div>
<h3 style="text-align: justify;">
Key Features</h3>
<ul style="text-align: justify;">
<li>Simple and fast data collection</li>
<li>Passive, active, and predictive surveys</li>
<li>Spectrum analysis</li>
<li>Comprehensive WLAN analysis with easy-to-understand visualization of  signal level, interference, access point coverage areas, data rates,  network issues, etc.</li>
<li>Automatic access point location</li>
<li>Detailed information about every access point: channel, maximum data rate, vendor, encryption type, etc.</li>
<li>Full support of 802.11ac, as well as 802.11a, 802.11b, 802.11g, and 802.11n networks</li>
<li>GPS-assisted outdoor surveys</li>
<li>Detailed reporting in PDF and HTML formats</li>
<li>Attractive, competitive pricing</li>
</ul>
<h3 style="text-align: justify;">
Why to Perform a Site Survey</h3>
<div style="text-align: justify;">
<img align="left" alt="Click for more screen shots" border="0" height="210" hspace="0" src="http://www.tamos.com/i/tg_shot_new.png" style="margin-right: 10px;" title="Click for more screen shots" vspace="0" width="250" />In  a word, wireless site surveys are necessary because radio wave  propagation is difficult to predict, especially in non-open space  environments. It is virtually impossible to consider all the variables  that might affect the health and performance of your WLAN. Changing  conditions, even something as seemingly minor as a notebook equipped  with a legacy 802.11g adapter that your new employee connected to the  office wireless network, might seriously impact the WLAN performance. In  addition, considering the wide proliferation of wireless  infrastructure, factors such as interference from nearby WLANs play a  very important role. This is why regular site surveys that are conducted  with a professional tool are important.</div>
<h3 style="clear: both; text-align: justify;">
When to Perform a Site Survey</h3>
<div style="text-align: justify;">
<b>Pre-deployment surveys</b>: At this stage, a site survey is  necessary in order to verify that the network plan works well in a  real-world environment. Placement of temporary access points and a quick  survey of the resulting WLAN characteristics allow an engineer to  fine-tune AP and antennae placement, determine the optimal number and  types of APs and antennae, and avoid poor coverage zones.</div>
<div style="text-align: justify;">
<b>Post-deployment surveys</b>: Once a WLAN has been deployed, a  complete verification site survey is necessary to ensure that the WLAN  performance and coverage meet the design requirements. At this stage,  the Wi-Fi equipment placement is finalized and a site survey report  should be generated so that the historical records can be accessed at  any time in the future.</div>
<div style="text-align: justify;">
<b>Regular, ongoing surveys</b>: Maintaining high performance and  coverage requires regular "check-up" surveys.  New users, new equipment,  site expansion, neighboring WLANs, and other factors can adversely  affect your WLAN. It should be monitored on a regular basis.</div>
<h3 style="text-align: justify;">
Who Needs TamoGraph</h3>
<ul style="text-align: justify;">
<li>WLAN and IT administrators</li>
<li>Wireless service providers</li>
<li>Wi-Fi equipment vendors</li>
<li>Consultants</li>
</ul>
<h3 style="text-align: justify;">
System Requirements</h3>
<div style="text-align: justify;">
TamoGraph runs on Microsoft Windows XP, Windows Vista, Windows 7,  Windows 8, Windows Server 2003, Windows Server 2008, and Windows Server  2012. Both 32- and 64-bit versions are supported. You can also perform Wi-Fi site surveys using MacBooks.  TamoGraph requires a compatible wireless network adapter. To view the  list of the adapters that have been tested and are compatible with  TamoGraph, click on the link below:<br />
<br />
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/j0yhPM6cNgo?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
<h3>
Download ::</h3>
<b>Windows :: </b><a href="http://www.tamos.com/bitrix/redirect.php?event1=download&event2=tamograph&event3=&goto=/files/tg4.zip" target="_blank">TamoGraph (Evaluation Version)</a><br />
<b>Official Site :: </b><a href="http://www.tamos.com/" target="_blank">http://www.tamos.com/ </a><b>
</b></div>

TamoGraph Site Survey (Wireless site survey) :: Tools

TamoGraph is a powerful and user-friendly wireless site survey software tool for collecting , visualizing , and analyzing 802.11 a/b/g/...

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s1600/wifinger.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WiFinger" border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVDj7Y0NDoDy9HMBWONTX8N5TJRzUxRigF40NKMtb4g3YHnm7mFFbvSgmvtBBe0RA6HYGodlx5K4_auWXunr9miihTF44zDK4JEAuO4hp0yGplgNBxyMJvjlbZYIKoCfAjIHxGUxmFgyYx/s320/wifinger.jpg" title="WiFinger" width="320" /></a></div>
<div style="text-align: justify;">
<b>WiFinger </b>was planed to become the ﬁrst available <i>wireless</i> <i>LAN<a href="http://www.toolwar.com/search/label/Spoofer" target="_blank"> spooﬁng</a> detection tool</i>. <b>WiFinger</b> is a passively identifies wireless access points based on matching the
 Information Elements in their <b>beacon packets </b>against a fingerprint 
database. It is written in <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> and uses Scapy, and has been tested in
 <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>.
</div>
<div style="text-align: justify;">
Currently we only have a handful of signatures, so if you want to contribute to this tool, here’s what you can do:</div>
<ol style="text-align: justify;">
<li>Get your access point and enable WPA and WPS (if supported).</li>
<li>Capture the beacon frames that your access point is broadcasting and save them to a pcap file.</li>
<li>Send us the pcap file along with as much information about the 
access point as you can (make, model, <a href="http://firmware/" target="_blank">firmware</a> version, hardware 
revision, ESSID and BSSID).</li>
</ol>
<h3>
 </h3>
<h3>
Download ::</h3>
<b>Linux :: </b><a href="http://www.sourcesec.com/Lab/wifinger.tar.gz" target="_blank">WiFinger.tar.gz</a> <br />
<b>Official Website :: </b><a href="http://wifinger.sourceforge.net/">http://wifinger.sourceforge.net/</a>

WiFinger (Wireless LAN Detection Spoofing Detection) :: Tools

WiFinger was planed to become the ﬁrst available wireless LAN spooﬁng detection tool . WiFinger is a passively identifies wireless ac...

BlueBugger (Information Gathering) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRWT68-7tScmEGFEeFKiWmc_SNYITCODD2zGkNWWOzAUPw4hq4hChN30UixXPrJSG3j39xnPJgcKk33X8rIq0wkbX4rR672Zv0AJIL98ExNJdQWelFIit93JhVGj1YnzgXt1zo8PwXMYdq/s1600/bluebugger.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="bluebugger" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRWT68-7tScmEGFEeFKiWmc_SNYITCODD2zGkNWWOzAUPw4hq4hChN30UixXPrJSG3j39xnPJgcKk33X8rIq0wkbX4rR672Zv0AJIL98ExNJdQWelFIit93JhVGj1YnzgXt1zo8PwXMYdq/s1600/bluebugger.jpg" title="bluebugger " /></a></div>
<div style="text-align: justify;">
<b>BlueBugger </b>is a tool for bluetooth devices. You can get all informations, phonebook entries and messages with a simply run. <b>Bluebugger</b> is an implementation of the <b>bluebug</b> technique which was discovered by Martin Herfurt.</div>
<h3>
Uses ::</h3>
<span style="font-size: x-small;"><span style="font-weight: normal;"><span style="font-family: "Courier New",Courier,monospace;">bluebugger 0.1 (cant post urls :D)<br />
-----------------------------------------<br />
<br />
Usage: bluebugger [OPTIONS] -a <addr> [MODE]<br />
<br />
       -a <addr>     = Bluetooth address of target<br />
<br />
       Options:<br />
       --------<br />
       -m <name>     = Name to use when connecting (default: '')<br />
       -d <device>   = Device to use (default: '/dev/rfcomm')<br />
       -c <channel>  = Channelto use (default: 17)<br />
       -n            = No device name lookup<br />
       -t <timeout>  = Timeout in seconds for name lookup (default: 5)<br />
       -o <file>     = Write output to <file><br />
<br />
       Mode:<br />
       -----<br />
       info                   = Read Phone Info   (default)<br />
       phonebook              = Read Phonebook    (default)<br />
       messages               = Read SMS Messages (default)<br />
       dial <num>             = Dial number<br />
       ATCMD                  = Custom Command (e.g. '+GMI')<br />
<br />
       Note: Modes can be combined, e.g. 'info phonebook +GMI' </span></span></span><br />
<br />
Tutorial ::<br />
<b>Text :: </b><a href="https://github.com/pwnieexpress/pwn_plug_sources/tree/master/src/bluetooth/bluebugger" target="_blank">Click Here </a><br />
<h3>
Download ::</h3>
<b>Linux :: </b><a href="https://github.com/pwnieexpress/pwn_plug_sources/tree/master/src/bluetooth/bluebugger/source" target="_blank">BlueBugger Source </a><br />
<br />

BlueBugger (Information Gathering) :: Tools

BlueBugger is a tool for bluetooth devices. You can get all informations, phonebook entries and messages with a simply run. Bluebugger i...

Btscanner (Bluetooth Scanner) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjm0aKcbxbyWNe5Vn3_8vIVLYiu5DStLoy9ob-P-O1T2a2ChcS3NEDdMKVlUbBlv2wdqPdotzFW5gmg5V3MUErCDYF5jVTNQog18aXx5VAadxStWCjLGM2jMXUKtgaGBXc-i3tZTFJhurzw/s1600/Btscanner+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="btscanner screenshot" border="0" height="221" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjm0aKcbxbyWNe5Vn3_8vIVLYiu5DStLoy9ob-P-O1T2a2ChcS3NEDdMKVlUbBlv2wdqPdotzFW5gmg5V3MUErCDYF5jVTNQog18aXx5VAadxStWCjLGM2jMXUKtgaGBXc-i3tZTFJhurzw/s400/Btscanner+screenshot.jpg" title="btscanner screenshot" width="400" /></a></div>
<br />
<b>Btscanner </b>is a<b> </b><i>Bluetooth scanner and Information Gathering tool</i><b>.</b> <b>Btscanner</b> is a <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> that extracts as much information as possible  from a <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">Bluetooth </a>device without the requirement to pair. A detailed  information screen extracts HCI and SDP information, and maintains an  open connection to monitor the RSSI and link quality.<b> btscanner</b> is based  on the BlueZ Bluetooth stack, which is included with recent Linux  kernels, and the BlueZ toolset. Using the information gathered from  these sources, it is possible to make educated guesses as to the host  device type. </div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Vl0TIhBFQ18?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows XP:: </b><a href="http://www.pentest.co.uk/src/btscanner_1_0_0.zip" target="_blank">Btscanner v1.0.0</a></div>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="http://www.pentest.co.uk/src/btscanner-2.1.tar.bz2" target="_blank">Btscanner v2.1</a></div>
<div style="text-align: justify;">
</div>

Btscanner (Bluetooth Scanner) :: Tools

Btscanner is a Bluetooth scanner and Information Gathering tool . Btscanner is a tool that extracts as much information as possible ...

WirelessKeyView :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyV5EWKOwKmNohnyM0701TKfO3xMiN7vo2oN2Yhrn8k18Lh0an26ieaSm3VJZr9AZPp-QzR9eaEtbFjvSDwgzimLAhTuQCMdmpXofoYgbSRFIm29-Yi7qtT9dB54w3lR31k1titAhxVvcu/s1600/wirelesskeyview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wirelesskeyview screenshot" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyV5EWKOwKmNohnyM0701TKfO3xMiN7vo2oN2Yhrn8k18Lh0an26ieaSm3VJZr9AZPp-QzR9eaEtbFjvSDwgzimLAhTuQCMdmpXofoYgbSRFIm29-Yi7qtT9dB54w3lR31k1titAhxVvcu/s1600/wirelesskeyview.gif" title="wirelesskeyview screenshot" /></a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>WirelessKeyView</b> <i>recovers all wireless network security keys/passwords 
(WEP/WPA)</i> stored in your computer by the 
'<b>Wireless Zero Configuration</b>' service of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows </a>XP or by the <b>'WLAN 
AutoConfig</b>' service of Windows Vista, Windows 7, Windows 8, and Windows 
Server 2008.
It allows you to easily save all keys to text/html/xml file, or copy a 
single key to the clipboard.
You can also export your wireless keys into a file and import these keys
 into another computer. </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirement</h3>
<ul style="text-align: justify;">
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP with SP1 or greater.
</li>
<li>You must login to windows with admin user.
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Using WirelessKeyView</h3>
<div style="text-align: justify;">
<b>WirelessKeyView</b> doesn't require any installation process or additional DLL files.
Just copy the executable file (WirelessKeyView.exe) to any folder you like, and run it.
<br />
After you run it, the main window should displayed all <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">WEP/WPA keys</a> 
stored in your computer by Windows '<b>Wireless Zero Configuration</b>' 
service.
For WEP keys, the key is also displayed in Ascii form.
Be aware that this utility can only reveal the network keys stored by 
Windows operating system. 
It cannot recover network keys stored by any other third-party software.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Notice About WPA-PSK Keys</h3>
<div style="text-align: justify;">
When you type a WPA-PSK key in Windows XP, the characters that you type 
are automatically converted into a
new binary key that contains 32 bytes (64 Hexadecimal digits). This 
binary key cannot instantly be converted back to the 
original key that you typed, but you can still use it for connecting the
 wireless network exactly like the original key.
In this case,<b> WirelessKeyView</b> displays this binary key in the Hex key 
column, but it doesn't display the original key that you typed.
<br />
As opposed to Windows XP, Windows Vista doesn't convert the WPA-PSK Key that you type into a new binary key, 
but it simply keep the original key that you type. So under Windows Vista, the original WPA-PSK key that you typed is 
displayed in the Ascii key column.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Registry/File Location of The Stored Keys</h3>
<div style="text-align: justify;">
Windows XP and Windows Vista stores the wireless keys in completely different locations:
</div>
<ul style="text-align: justify;">
<li>Windows XP: The wireless keys are stored in the Registry under 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\[Interface
 Guid].
</li>
<li>Windows Vista: The wireless keys are stored in the file system,
 under c:\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\[Interface 
Guid]. 
The encrypted keys are stored in .xml file.
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Deleting Wireless Keys Of Old Network Adapters</h3>
<div style="text-align: justify;">
Starting from version 1.15 of <b>WirelessKeyView, </b>you can delete wireless keys/passwords of old network adapters that are 
no longer plugged to your computer, by using the 'Delete Selected Items' option.
<br />
Be aware that this delete option only works for network adapters that are not active anymore.
If your network adapter is active, use the standard user interface of Windows to delete the unwanted keys.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Export And Import Wireless Keys</h3>
<div style="text-align: justify;">
Starting from version 1.50, you can select one or more wireless keys, export them into a text file by using the 
'Export Selected Items' under the File menu, and then import these keys into another computer by using the
'Import Keys From Export File' option.
</div>
<div style="text-align: justify;">
Before you start using this feature, you should be aware that there are some problems/limitations:
</div>
<ul style="text-align: justify;">
<li>The import feature only works on Windows XP with Service Pack 3 or 
later, including Windows 7, Windows 2008, and Windows Vista.
You cannot use the import feature on Windows XP with Service Pack 1 or 
Service Pack 2.
As opposed to the import feature, the export feature works on any 
system, including Windows XP with Service Pack 1 or Service Pack 2.
</li>
<li>The import feature on Windows XP/SP3 is very slow, and WirelessKeyView may temporary hang during the import process.
</li>
<li>The wireless keys stored inside the export file are not 
encrypted, so if you're concerned about the security of your network,
you should keep this file in a place where unauthorized users cannot 
read it, or simply delete it after the import process is finished.
</li>
<li>The import feature only works with a text file created with the 'Export Selected Items' option.
You cannot use the import feature with the files created by the 'Save Selected Items' option.
</li>
<li>Your wireless network adapter must be active when using the import feature. If you have a USB wireless adapter,
you must plug it before you start the import process.
</li>
<li>If you have multiple wireless network adapters, a separated key entry will be added for each adapter.
</li>
</ul>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/wirelesskeyview.zip" target="_blank">WirelessKeyView 1.68</a></div>
<div style="text-align: justify;">
<b>Official Website :</b>: <a href="http://www.nirsoft.net/utils/wireless_key.html" target="_blank">http://www.nirsoft.net/utils/wireless_key.html</a></div>

WirelessKeyView :: Tools

WirelessKeyView recovers all wireless network security keys/passwords (WEP/WPA) stored in your computer by the ' Wireless Zero ...

LSASecretsDump :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrymio5IP8dgRUToTlGLTxYxjBYQI-x19I5HJdDb0URU10aoaS0EX1wObj_kEZnQmsGjN5hEwOw3N94v7Ure1ZdMMizpkKpaw_7VT58x1O1ekM3-6bWgggqQSrIGGD3kUNOV8FKY5EpWXz/s1600/lsasecretsview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="LSAsecretsdump screenshot" border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrymio5IP8dgRUToTlGLTxYxjBYQI-x19I5HJdDb0URU10aoaS0EX1wObj_kEZnQmsGjN5hEwOw3N94v7Ure1ZdMMizpkKpaw_7VT58x1O1ekM3-6bWgggqQSrIGGD3kUNOV8FKY5EpWXz/s400/lsasecretsview.gif" title="LSAsecretsdump screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>LSASecretsDump </b>is a small <i>console application</i> that <i>extract the LSA secrets from the Registry, </i>
decrypt them, and dump them into the console window.
<br />
The LSA secrets key is located under HKEY_LOCAL_MACHINE\Security\Policy\Secrets and may contain your
RAS/VPN passwords, Autologon password, and other system passwords/keys. </div>
<h3 class="utilsubject" style="text-align: justify;">
Using LSASecretsDump</h3>
<div style="text-align: justify;">
<b>LSASecretsDump</b> is a console application, so in order the view the output, you have to run it in 
console (Command-Prompt) window.
<br />
As with any console application, you dump the output into a file, for example:
<br />
LSASecretsDump.exe > c:\temp\lsa.txt </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirement</h3>
<div style="text-align: justify;">
This utility works on Windows 2000/XP/2003/2008/Vista/7. Windows 98/ME is not supported.

</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/lsasecretsdump.zip" target="_blank">LSASecretsDump 1.21</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/utils/lsa_secrets_dump.html" target="_blank">http://www.nirsoft.net/utils/lsa_secrets_dump.html</a></div>

LSASecretsDump :: Tools

LSASecretsDump is a small console application that extract the LSA secrets from the Registry, decrypt them, and dump them into the cons...

WebBrowserPassView :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCSZC7Azmf_Cu7J8oiUk0Q5txbNfNPGepi_KAKICm9Gmn4SOBF9_exVxI9nCvHR1A7oa_zoklqRtbqvAy-63o0udy_PN_2awmSZns8B4NMWLrHSJZJ1IZkB0csY2SDJDVBLyHefnK5WXJK/s1600/webbrowserpassview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WebBrowserPassView Screenshot" border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCSZC7Azmf_Cu7J8oiUk0Q5txbNfNPGepi_KAKICm9Gmn4SOBF9_exVxI9nCvHR1A7oa_zoklqRtbqvAy-63o0udy_PN_2awmSZns8B4NMWLrHSJZJ1IZkB0csY2SDJDVBLyHefnK5WXJK/s400/webbrowserpassview.gif" title="WebBrowserPassView Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WebBrowserPassView </b>is a <b>password recovery tool</b> that reveals the<b> passwords stored by the following <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> <a href="http://www.toolwar.com/search/label/Browser" target="_blank">browsers</a>:
Internet Explorer (Version 4.0 - 10.0), Mozilla Firefox (All Versions), Google Chrome, Safari, and Opera</b>.
This tool can be used to recover your lost/forgotten password of any Website, including popular Web sites, like
Facebook, Yahoo, Google, and GMail, as long as the password is stored by your Web Browser. 
</div>
<div style="text-align: justify;">
After retrieving your lost passwords, you can save them into 
text/html/csv/xml file, by using the 'Save Selected Items' option 
(Ctrl+S). </div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirements And Limitations</h3>
<ul style="text-align: justify;">
<li>This utility works on any version of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> starting from Windows 2000, and up to Windows 8, including 64-bit systems.
Older versions of Windows (Windows 98/ME) are not supported, because this utility is a Unicode application.
</li>
<li>Currently, <b>WebBrowserPassView</b> cannot retrieve the passwords if they are <a href="http://www.toolwar.com/search/label/Encryption" target="_blank">encrypted </a>with a master password.
Support for master password will probably be added in future versions.
</li>
<li>Currently, <b>WebBrowserPassView</b> cannot retrieve passwords from 
external hard-drive. Support for that might be added in future versions.
</li>
<li>On Internet Explorer 7.0-9.0, the passwords are encrypted with 
the URL of the Web site, so <b>WebBrowserPassView</b> uses
the history file of Internet Explorer to decrypt the passwords. If you 
clear the history of Internet Explorer, <b>WebBrowserPassView</b>
won't be able to decrypt the passwords.
</li>
<li>On Google Chrome - passwords originally imported from Internet Explorer 7.0-9.0, cannot be decrypted. </li>
</ul>
<h3 class="utilsubject" style="text-align: justify;">
Using WebBrowserPassView</h3>
<div style="text-align: justify;">
<b>WebBrowserPassView </b>doesn't require any installation process or additional DLL files.
In order to start using it, simply run the executable file - WebBrowserPassView.exe
</div>
<div style="text-align: justify;">
After running it, the main window of <b>WebBrowserPassView </b>displays the list of all Web browser passwords found in your 
system. You can select one or more passwords and then copy the list to the clipboard (Ctrl+C) or export them into
text/xml/html/csv file (Ctrl+S).

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
False Virus/Trojan Warning</h3>
<div style="text-align: justify;">
<b>WebBrowserPassView</b> is a <a href="http://www.toolwar.com/search/label/tools" target="_blank">tool</a> that retrieves secret passwords stored in your system, and thus 
your Antivirus may falsely detect this tool is infected with Trojan/Virus.
<a href="http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/" target="false_positive">Click here</a> to read more about false alerts in Antivirus programs.

</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/webbrowserpassview.zip" target="_blank">WebBrowserPassView 1.45</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/utils/web_browser_password.html" target="_blank">http://www.nirsoft.net/utils/web_browser_password.html</a></div>

WebBrowserPassView :: Tools

WebBrowserPassView is a password recovery tool that reveals the passwords stored by the following Web browsers : Internet Explorer (Ve...

ChromePass (Chrome Password Recovery) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxdR7GqGCOXZH9SMeU0viPkwuBEWPpP_1Ll1WPOOEkmXvduPu7LRCmpjmNxQMuo6yA3YJtdoCizXJNXgeSm0ur1fNoaWcNIr3TMEz2nIO8ek4sA9q_kDt7dOSTP_aW6Kt-6FnxHIuVO3u/s1600/chromepass.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="ChromePass Screenshot" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxdR7GqGCOXZH9SMeU0viPkwuBEWPpP_1Ll1WPOOEkmXvduPu7LRCmpjmNxQMuo6yA3YJtdoCizXJNXgeSm0ur1fNoaWcNIr3TMEz2nIO8ek4sA9q_kDt7dOSTP_aW6Kt-6FnxHIuVO3u/s1600/chromepass.gif" title="ChromePass Screenshot" /></a></div>
<div style="text-align: justify;">
<b>ChromePass </b>is a <i>small password recovery tool</i> that allows you to view the
 user names and passwords stored by <b>Google Chrome Web browser.</b>
For each <a href="http://www.toolwar.com/search/label/Password" target="_blank">password</a> entry, the following information is <b>displayed</b>: 
<i>Origin URL, Action URL, User Name Field, Password Field, User Name, 
Password, and Created Time.
</i><br />
You can select one or more items and then save them into text/html/xml file or copy them to the clipboard. </div>
<h3 class="utilsubject" style="text-align: justify;">
Using ChromePass</h3>
<div style="text-align: justify;">
<b>ChromePass</b> doesn't require any installation process or additional DLL files.
In order to start using <b>ChromePass</b>, simply run the executable file - ChromePass.exe
After running it, the main window will display all passwords that are currently stored in your <b>Google Chrome browser.

</b></div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Reading ChromePass passwords from external drive</h3>
<div style="text-align: justify;">
Starting from version 1.05, you can also read the passwords stored by <b>
Chrome Web <a href="http://www.toolwar.com/search/label/Browser" target="_blank">browser</a></b> from an external profile in your current operating 
system or from another external drive (For example:
from a dead system that cannot boot anymore).
In order to use this feature, you must know the last logged-on password 
used for this profile, because the 
passwords are encrypted with the SHA hash of the log-on password, and 
without that hash, the passwords cannot be decrypted.
<br />
You can use this feature from the UI, by selecting the 'Advanced Options' in the File menu, or from command-line, 
by using /external parameter. The user profile path should be something like "C:\Documents and Settings\admin"
in <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> XP/2003 or "C:\users\myuser" in Windows Vista/2008.
</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/chromepass.zip" target="_blank">ChromePass 1.25</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.nirsoft.net/" target="_blank">http://www.nirsoft.net/</a></div>

ChromePass (Chrome Password Recovery) :: Tools

ChromePass is a small password recovery tool that allows you to view the user names and passwords stored by Google Chrome Web browser. ...

PasswordFox (Firefox Password Recovery) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDaw_peIbiVkifF3bsnCEB8D3XdHXRhWGP2blN9bm2-xZpcvJgaWzgb9_i1b5yT5ZIwJd4Sa0NaclhBladS99MwJGkbN4hNI0T9apuxefHNHVDlze_7W5f7biAhLmKiY4QAQz9U-EVRKGC/s1600/passwordfox.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="PasswordFox Screenshot" border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDaw_peIbiVkifF3bsnCEB8D3XdHXRhWGP2blN9bm2-xZpcvJgaWzgb9_i1b5yT5ZIwJd4Sa0NaclhBladS99MwJGkbN4hNI0T9apuxefHNHVDlze_7W5f7biAhLmKiY4QAQz9U-EVRKGC/s400/passwordfox.gif" title="PasswordFox Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>PasswordFox</b> is a small <i>password recovery tool</i> that allows you to view 
the user names and <a href="http://www.toolwar.com/search/label/Password" target="_blank">passwords</a> stored by <b>Mozilla Firefox Web browser</b>.
By default, <b>PasswordFox</b> displays the passwords stored in your current 
profile, but you can easily select to watch the passwords
of any other Firefox profile.
For each password entry, the following information is displayed: 
Record Index, <a href="http://www.toolwar.com/search/label/Web" target="_blank">Web</a> Site, User Name, Password, User Name Field, Password 
Field, and the Signons filename.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
System Requirements</h3>
<div style="text-align: justify;">
This utility works under <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows 7.
Firefox should also be installed on your system in order to use this utility.

</div>
<div style="text-align: justify;">
</div>
<h3 class="utilsubject" style="text-align: justify;">
Known Problems</h3>
<div style="text-align: justify;">
<b>False Alert Problems:</b> Some Antivirus programs detect<b> PasswordFox </b>utility as infected with Trojan/Virus.
<a href="http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/" target="antivirus-companies">Click here</a> to read more about false alerts in Antivirus programs </div>
<div style="text-align: justify;">
<h3 class="utilsubject">
Using PasswordFox</h3>
<b>PasswordFox</b> doesn't require any installation process or additional DLL files.
However, Firefox browser must be installed on your computer in order allow PasswordFox to grab the passwords list.
<br />
In order to start using PasswordFox, simply run the executable file - PasswordFox.exe
<br />
After running it, the main window will display all your passwords list for the last profile that you used.
If PasswordFox chose the wrong profile folder, you can use the 'Select Profile Folder' option to choose the right one.

</div>
<div style="text-align: justify;">
<h3>
Download ::</h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://www.nirsoft.net/utils/passwordfox.zip" target="_blank">PasswordFox 1.36</a> </div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.nirsoft.net/</div>

PasswordFox (Firefox Password Recovery) :: Tools

PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web brow...

Skype Log Viewer :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAflgbadf6ct9bAFvVqWdD_92MW4Nah8u2BN1NGhc5Z19vDLaQonrxXaZ3nksPZJsBtTnT7OJ3omSnkBRTVG3SLqnVSvhAGNqzbZDjqBaDnTnmZBsRqUEFlcbCATZ4k1iRpenoDpRy7QF5/s1600/skypelogview.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Skype Log Viewer screenshot" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAflgbadf6ct9bAFvVqWdD_92MW4Nah8u2BN1NGhc5Z19vDLaQonrxXaZ3nksPZJsBtTnT7OJ3omSnkBRTVG3SLqnVSvhAGNqzbZDjqBaDnTnmZBsRqUEFlcbCATZ4k1iRpenoDpRy7QF5/s1600/skypelogview.gif" title="Skype Log Viewer screenshot" /></a></div>
<div style="text-align: justify;">
<b>SkypeLogView</b> reads the log files created by <b>Skype</b> application, and 
displays the details of incoming/outgoing calls, chat messages, and file
transfers made by the specified Skype account. 
You can select one or more items from the logs list, and then copy them 
to the clipboard, or export them into text/html/csv/xml file.

</div>
<div style="text-align: justify;">
</div>
<h4 class="utilsubject" style="text-align: justify;">
System Requirements</h4>
<div style="text-align: justify;">
This utility works on any version of <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows </a>starting from Windows 2000 and up to Windows 2008.
You don't have to install Skype in order to use this utility. You only need the original log files created by skype, 
even if they are on an external drive. </div>
<div style="text-align: justify;">
<h3>
Download :: </h3>
</div>
<div style="text-align: justify;">
<b>Windows :: </b> <a href="http://www.nirsoft.net/utils/skypelogview.zip" target="_blank">Skype Log Viewer </a></div>

Skype Log Viewer :: Tools

SkypeLogView reads the log files created by Skype application, and displays the details of incoming/outgoing calls, chat messages, and...

RadioGraPhy (Windows Forensics):: Tools

<h1 style="text-align: justify;">
</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGdfL6aAjuUZfL4cv2ishXKH3b7wm0sBeE4Mv263XGux7kLLjdPx__2bfEER6EfwdbeuHKidz9M_nQnouYZOdT9g4CP8dg9gYZnPyIeR22fWyzdCN8nK9OJwlrCztFqYhjnDtG_ChHcUGu/s1600/radiography+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="RadioGraPhy Screenshot" border="0" height="308" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGdfL6aAjuUZfL4cv2ishXKH3b7wm0sBeE4Mv263XGux7kLLjdPx__2bfEER6EfwdbeuHKidz9M_nQnouYZOdT9g4CP8dg9gYZnPyIeR22fWyzdCN8nK9OJwlrCztFqYhjnDtG_ChHcUGu/s320/radiography+screenshot.jpg" title="RadioGraPhy Screenshot" width="320" /></a></div>
<div style="text-align: justify;">
<b>Radiography</b> is a<i> forensic tool </i>which <i>grabs as much information as possible from a Windows system.</i></div>
<h3 style="text-align: justify;">
Its checks:</h3>
<ul style="text-align: justify;">
<li><b>Registry keys related to startup process</b></li>
<li><b>Registry keys with Internet Explorer settings</b></li>
<li><b>System Accounts and properties</b></li>
<li><b>Startup files</b></li>
<li><b>System services</b></li>
<li><b>Hosts file contents</b></li>
<li><b>TaskScheduler tasks</b></li>
<li><b>Loaded System Drivers</b></li>
<li><b>NetBios Shares</b></li>
<li><b>Hidden Windows</b></li>
<li><b>System processes running (and their location if possible)</b></li>
<li><b>Network information (Open connections, listening ports ...) </b></li>
</ul>
<h3 style="text-align: justify;">
<b>It has also unique features:</b></h3>
<div style="text-align: justify;">
-When it identifies a process (running 
or configured in registry keys, startup directories or task scheduler) 
it checks its hash with Team Cymru's MALWARE HASH REGISTRY<span style="font-size: 14px; line-height: 1.4em;"> service to identify potential threats</span></div>
<div style="text-align: justify;">
-RadioGraPhy does a process integrity test using 'WinUnhide' to catch hidden processes</div>
<div style="text-align: justify;">
-Dump a copy of Eventlog and grab a copy of the process binaries for later review </div>
<div style="text-align: justify;">
RadioGraPhy is <b>OpenSource</b> (GPL License) and come with a <b>CLI version</b> and a <b>graphic frontend</b> (please have a look to Screenshots section)</div>
<h3 style="text-align: justify;">
 </h3>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://sbdtools.googlecode.com/files/RadioGraPhyV2.zip" target="_blank"><b></b>RadioGraPhy 2.0</a><br />
<h3>
Official Website :: </h3>
http://www.security-projects.com/ </div>

RadioGraPhy (Windows Forensics):: Tools

Radiography is a forensic tool which grabs as much information as possible from a Windows system. Its checks: Registry keys relat...

WhatWeb (Identifies Websites) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s1600/whatweb+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="WhatWeb Screenshot" border="0" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Y3Xc5XJJiJAmm6k8YcIZNOrOB7uG7CgdTi3S5kN-OmfZ98jwawq6HH-Ntm-wT192dKf5QrY_p3LgrMXJGEVlT8HbDjmC9PZILfoV_kY9uhM5FewuU0d2gOcSmRjuqbeh80xsr9j3mUSS/s400/whatweb+screenshot.png" title="WhatWeb Screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>WhatWeb </b><i>identifies websites.</i> Its goal is to answer the question, 
“<i>What is that Website?”</i>. <b>WhatWeb</b> recognises <i>web technologie</i>s including 
content management systems (CMS), blogging platforms, 
statistic/analytics packages, JavaScript libraries, web servers, and 
embedded devices. WhatWeb has over 900 plugins, each to recognise 
something different. WhatWeb also identifies version numbers, email 
addresses, account IDs, web framework modules, SQL errors, and more.</div>
<div style="text-align: justify;">
<b>WhatWeb</b> can be stealthy and fast, or thorough but slow. <b>WhatWeb</b> 
supports an aggression level to control the trade off between speed and 
reliability. When you visit a website in your browser, the transaction 
includes many hints of what web technologies are powering that website. 
Sometimes a single webpage visit contains enough information to identify
 a website but when it does not, <b>WhatWeb</b> can interrogate the website 
further. The default level of aggression, called ‘passive’, is the 
fastest and requires only one HTTP request of a website. This is 
suitable for scanning public websites. More aggressive modes were 
developed for in penetration tests.</div>
<div style="text-align: justify;">
Most WhatWeb plugins are thorough and recognise a range of cues from 
subtle to obvious. For example, most WordPress websites can be 
identified by the meta HTML tag, e.g. ‘‘, but a minority of WordPress 
websites remove this identifying tag but this does not thwart WhatWeb. 
The WordPress <b>WhatWeb</b> plugin has over 15 tests, which include checking 
the favicon, default installation files, login pages, and checking for 
“/wp-content/” within relative links.</div>
<h3>
Features:</h3>
<div style="text-align: justify;">
* Over 900 plugins<br />
* Control the trade off between speed/stealth and reliability<br />
* Plugins include example URLs<br />
* Performance tuning. Control how many websites to scan concurrently.<br />
* Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB.<br />
* Recursive web spidering<br />
* Proxy support including TOR<br />
* Custom HTTP headers<br />
* Basic HTTP authentication<br />
* Control over webpage redirection<br />
* Nmap-style IP ranges<br />
* Fuzzy matching<br />
* Result certainty awareness<br />
* Custom plugins defined on the command line</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux :: </b><a href="http://www.morningstarsecurity.com/downloads/whatweb-0.4.7.tar.gz">whatweb-0.4.7.tar.gz</a></div>
<div style="text-align: justify;">
<b>Tutorial :: </b>  <a href="http://www.morningstarsecurity.com/research/whatweb" target="_blank">Click Here </a></div>
<div style="text-align: justify;">
</div>

WhatWeb (Identifies Websites) :: Tools

WhatWeb identifies websites. Its goal is to answer the question, “ What is that Website?” . WhatWeb recognises web technologie s inclu...

IKE Scan (Fingerprinting IPsec VPN Systems) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcR9RJFPXN5Woh63bjnW3K4BL8h78YqmsHhjWw9_sn02RfyPePlHARZxNahjALBnhYKNjFeKswsJ3T1wySPXaFBVwqG2gLt_wYMPhB-PuL_5toZ39tExguNXw4UEOw9NciozR-f1XQkl3l/s1600/ike+scan+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ike-scan-screenshot" border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcR9RJFPXN5Woh63bjnW3K4BL8h78YqmsHhjWw9_sn02RfyPePlHARZxNahjALBnhYKNjFeKswsJ3T1wySPXaFBVwqG2gLt_wYMPhB-PuL_5toZ39tExguNXw4UEOw9NciozR-f1XQkl3l/s400/ike+scan+screenshot.png" title="Ike-scan-screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b><i>IKE Scan</i></b> is a command-line tool for <i>discovering, 
fingerprinting and testing IPsec VPN systems</i>.  It constructs and sends 
IKE Phase-1 packets to the specified hosts, and displays any responses 
that are received.
</div>
<div style="text-align: justify;">
<b><i>ike-scan</i> </b>allows you to:
</div>
<ul>
<li style="text-align: justify;"> Send IKE packets to any number of destination hosts, using a configurable output bandwidth or packet rate.
<dl><dd>This is useful for VPN detection, when you may need to scan large address spaces.
</dd></dl>
</li>
<li style="text-align: justify;"> Construct the outgoing IKE packet in a flexible way.
<dl><dd>This includes IKE packets which do not comply with the RFC requirements.
</dd></dl>
</li>
<li style="text-align: justify;"> Decode and display any returned packets.
</li>
<li><div style="text-align: justify;">
Crack aggressive mode pre-shared keys. You can use ike-scan to obtain the PSK hash data, and then use <i>psk-crack</i> to obtain the key.
</div>
</li>
</ul>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
<b>Download :: </b></h3>
<ul style="text-align: justify;">
<li>for Linux : <span class="wf_file_text"><a class="wf_file" href="http://www.nta-monitor.com/files/ike-scan/ike-scan-1.9.tar.gz"><span class="wf_file_text">ike-scan-1.9.tar.gz</span></a></span></li>
<li><span class="wf_file_text"><span class="wf_file_text">Github: <a href="https://github.com/royhills/ike-scan" title="https://github.com/royhills/ike-scan">https://github.com/royhills/ike-scan</a></span></span></li>
</ul>
<div style="text-align: justify;">
This will compile on Unix and Linux systems as well as Windows 
systems with Cygwin. You will need a C compiler, the "make" utility and 
the appropriate system header files to compile ike-scan. It uses 
autoconf and automake, so compilation and installation is the normal 
./configure; make; make install process.</div>
<ul style="text-align: justify;">
<li>Windows : <a class="wf_file" href="http://www.nta-monitor.com/files/ike-scan/ike-scan-win32-1.9.zip"><span class="wf_file_text">ike-scan-win32-1.9.zip</span></a></li>
</ul>
<div style="text-align: justify;">
This is a zip file containing a Win-32 binary version of ike-scan 
together with the Cygwin DLL which provides posix support. It runs on 
Win-9x, NT, 2000 and XP. The executable was produced by compiling the 
ike-scan source on a Windows system running Cygwin.</div>
<h3 style="text-align: justify;">
Tutorial ::  </h3>
<div style="text-align: justify;">
<b><span style="font-size: small;">IKE-Scan User Guide</span>  ::</b> <a href="http://www.nta-monitor.com/wiki/index.php/Ike-scan_User_Guide" target="_blank">Click Here</a></div>

IKE Scan (Fingerprinting IPsec VPN Systems) :: Tools

IKE Scan is a command-line tool for discovering, fingerprinting and testing IPsec VPN systems . It constructs and sends IKE Phase-1 p...

Yeti (Network Foot-Printing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s1600/yeti+tool+screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Yeti tool screenshot" border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5p_8uF28TyyEY6WHl18BJAymokj8-VVu3MRWW5Wt7IIrOKw2h-IiduRV_50rPsD9BqFdwAWtpQ9-szzl3mPK2neFFLS6lG6F0wxVLr7SueOJFhRZRFJRSJQia0DgBxQlZnQRUrCAjfAbO/s400/yeti+tool+screenshot.png" title="Yeti tool screenshot" width="400" /></a></div>
<div style="text-align: justify;">
<b>Yeti </b>is a network foot-printing tool and <b>Yeti</b> is a <i>perfect tool to perform the reconnaissance </i>phase before a 
pentest or a security assessment. A nice feature is the use of a <i>GeoIP 
database to look for IP addresses</i> and <i>display your network</i> on a world 
map. <b>Yeti</b> grabs information publicly available on the Internet and does 
not perform any intrusive actions. Big companies may have a huge amount 
of devices and resources online with remote offices in several 
countries, several websites. If you host applications in the cloud, it 
could also discover what are your “neighbours” (who share the same IP 
addresses as you).
</div>
<div style="text-align: justify;">
Yeti is developed in Java and run on all the well-known operating systems flavors. Yeti proposes the following features:
</div>
<ul style="text-align: justify;">
<li> Domain expansion – Based on a domain names list, it gathers 
information for all the available TLD (read from a list). Ex: 
rootshell.be, rootshell.org, rootshell.eu, rootshell.com, etc. Whois 
information is gathered and filters can be applied to search for 
relevant information.
</li>
<li> Forward lookup – Extracts information from domains (MX records, etc)
</li>
<li> Certification extraction – Extracts the SSL certificates from web sites.
</li>
<li> Reverse lookup – Performs reverse IP lookup from IP lists.
</li>
<li> IP/Site scan – Using the Microsoft Bing API, it extracts information based on domain names or IP addresses<b>. </b></li>
</ul>
<b>Tutorial :: </b><a href="http://spyeti.blogspot.in/p/getting-started.html" target="_blank">Click Here</a><b> </b><br />
<b>Download Here :: </b><a href="http://www.sensepost.com/cms/resources/labs/tools/misc/jyeti-dist.tar.bz2" target="_blank">Yeti .tar.bz2 (for Linux)</a><b><br /></b><br />
<b>Official Website ::</b> http://spyeti.blogspot.in/

Yeti (Network Foot-Printing) :: Tools

Yeti is a network foot-printing tool and Yeti is a perfect tool to perform the reconnaissance phase before a pentest or a security asse...

DNSRecon (DNS Information Gathering) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBmBNrk2zjtV5xfWpJ9Ho5Dxa_UwHGMt5XrbrxISfORTwpUgIpmszrDOrbLbsO6loanBsuVWDn27vHVtA4zWOLDGCd-r9_Uf7Bc1W2EBm0TDEkMdxq6dRPqXoKZ8Jj5iD12qE0nBpf7Oz_/s1600/dnsrecon1.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="dnsrecon" border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBmBNrk2zjtV5xfWpJ9Ho5Dxa_UwHGMt5XrbrxISfORTwpUgIpmszrDOrbLbsO6loanBsuVWDn27vHVtA4zWOLDGCd-r9_Uf7Bc1W2EBm0TDEkMdxq6dRPqXoKZ8Jj5iD12qE0nBpf7Oz_/s400/dnsrecon1.jpeg" title="dnsrecon" width="400" /></a></div>
<span class="nodeLabelBox repTarget " role="treeitem"><span class="nodeBracket editable insertBefore "></span><span class="nodeText editable "><span class="  "><b>DNS
 reconnaissance or DNSRecon</b> is part of the <i>information gathering stage</i> on a 
penetration test engagement.When a penetration tester is performing a 
DNS reconnaissance is trying to obtain as much as information as he can 
regarding the DNS servers and their records.The information that can be 
gathered it can disclose the network infrastructure of the company 
without alerting the IDS/IPS.This is due that most of the organizations 
are not monitoring their DNS server traffic and those that do they only 
monitor the zone transfers attempts.</span></span></span><br />
<span class="nodeLabelBox repTarget " role="treeitem"><span class="nodeText editable "><span class="  ">On the web there are a variety of tools available that can gather DNS information effectively but in this article we will focus on the DNSRecon which is a tool that was developed by Carlos Perez and it is designed to perform DNS reconnaissance.This tool is included on backtrack and it is written in python. </span></span></span><br />
<b>DNSrecon</b> is a simple tool writen for target <b>enumeration</b> during  authorized penetration test engaments. This tool provides diferent  methods for enumerating targets thru DNS service. </div>
<ul style="text-align: justify;">
<li>Standard Record Enumeration for a given domain (A, NS, SOA and MX). </li>
<li>Top Leven Domain Expansion for a given domain. </li>
<li>Zone Transfer against all NS records of a given domain. </li>
<li>Reverse Lookup against a given IP Range given a start and end IP. </li>
</ul>
<div style="text-align: justify;">
 Here is an Example of the tool enumerating SRV Record and Standard Record.</div>
<pre style="background-color: #fbfbfb; border: 1px solid #cecece; min-height: 40px; overflow: auto; padding: 5px; width: 650px;"><pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">root@bt:~# ./dnsrecon.rb -t srv -d avaya.com</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">_sip._udp.avaya.com,198.152.17.90,5060</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; margin: 0em; width: 100%;">_sip._tcp.avaya.com,198.152.17.90,5060</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">root@bt:~# ./dnsrecon.rb -t std -d google.com</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">google.com,209.85.171.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">google.com,74.125.67.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">google.com,74.125.45.100,A</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">ns1.google.com,216.239.32.10,SOA</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">ns4.google.com,216.239.38.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">ns1.google.com,216.239.32.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">ns2.google.com,216.239.34.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 17px; margin: 0em; width: 100%;">ns3.google.com,216.239.36.10,NS</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 18px; margin: 0em; width: 100%;">smtp4.google.com,72.14.221.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">smtp1.google.com,209.85.237.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; height: 19px; margin: 0em; width: 100%;">smtp2.google.com,64.233.165.25,MX,10</pre>
<pre style="background-color: #fbfbfb; font-family: consolas,'Courier New',courier,monospace; font-size: 11px; margin: 0em; width: 100%;">smtp3.google.com,209.85.137.25,MX,10</pre>
</pre>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uy9Z6C8vVRw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<br />
<b>Download Here :: </b><a href="https://github.com/darkoperator/dnsrecon/blob/master/dnsrecon.py" target="_blank">dnsrecon.py</a><b>
</b></div>
<div style="text-align: justify;">
<b>Source :: </b><cite>https://github.com/darkoperator/<b>dnsrecon</b></cite></div>
</div>

DNSRecon (DNS Information Gathering) :: Tools

DNS reconnaissance or DNSRecon is part of the information gathering stage on a penetration test engagement.When a penetration tester...

Subscribe to: Posts ( Atom )