ToolWar | Information Security (InfoSec) Tools: Spoofer

FS-NyarL (Pentesting and Forensics) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<img alt="FS-NyarL Logo" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyvqhfIV1vfEKDsDPoTq-IY5y6kdJuGAIfRzvtSPL90-6xtK2hDdppU1kPwgvztn_cudPZFcOqOalRYynOeDEflS5wufjqugLOyzJNrbZhqLjb34aHNnZuPJhRLZ_SInYW0BFppZeFQqDm/s1600/FS-NyarL+Logo.jpg" title="FS-NyarL Logo" width="248" /></div>
<div style="text-align: justify;">
<b>NyarL</b> it's Nyarlathotep, a mitological chaotic deity of the writer HP. Lovecraft's cosmogony.  It's represent Crawling Chaos and <b>FS-NyarL</b> it's The <b>Crawling Chaos of Cyber Security</b>. A <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> takeover & <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic analysis tool</a> - useful to advanced  PenTest tasks & for fun and profit - but use it at your own risk! </div>
<ul style="text-align: justify;">
<li>Interactive Console</li>
<li>Real Time Passwords Found</li>
<li>Real Time Hosts Enumeration</li>
<li>Tuned Injections & Client Side Attacks</li>
<li>ARP Poisoning & SSL Hijacking</li>
<li>Automated HTTP Report Generator</li>
</ul>
<div style="text-align: justify;">
<b>ATTACKS IMPLEMENTED:</b> </div>
<ul style="text-align: justify;">
<li>MITM (Arp Poisoning)</li>
<li>Sniffing (With & Without Arp Poisoning)</li>
<li>SSL Hijacking (Full SSL/TLS Control)</li>
<li>HTTP Session Hijaking (Take & Use Session Cookies)</li>
<li>Client Browser Takeover (with Filter Injection in data stream)</li>
<li>Browser AutoPwn (with Filter Injection in data steam)</li>
<li>Evil Java Applet (with Filter Injection in data stream)</li>
<li>DNS Spoofing</li>
<li>Port Scanning</li>
</ul>
<table class="notableborder" style="margin-left: 0px; margin-right: 0px; text-align: left;"><tbody>
<tr><td colspan="2"><b>POST ATTACKS DATA OBTAINED:</b><br />
<ul>
<li>Passwords extracted from data stream</li>
<li>Pcap file with whole data stream for deep analysis</li>
<li>Session flows extracted from data stream (Xplico & Chaosreader)</li>
<li>Files extracted from data stream</li>
<li>Hosts enumeration (IP,MAC,OS)</li>
<li>URLs extracted from data stream</li>
<li>Cookies extracted from data stream</li>
<li>Images extracted from data stream</li>
<li>List of HTTP files downloaded extracted from URLs</li>
</ul>
</td> </tr>
<tr><td><b>DEPENDENCIES (aka USED TOOLS):</b><br />
<ul>
<li>Chaosreader (already in bin folder)</li>
<li><a href="http://www.toolwar.com/2013/11/xplico-tools.html" target="_blank">Xplico</a></li>
<li><a href="http://www.toolwar.com/2013/09/ettercap-076-tools.html" target="_blank">Ettercap</a></li>
<li>Arpspoof</li>
<li>Arp-scan</li>
<li>Mitmproxy</li>
<li><a href="http://www.toolwar.com/2014/02/nmap-and-zenmap-network-discovery-and.html" target="_blank">Nmap</a></li>
<li><a href="http://www.toolwar.com/2013/09/tcpdump-is-network-sniffer-we-all-used.html" target="_blank">Tcpdump</a></li>
<li><a href="http://www.toolwar.com/2013/09/beef-browser-exploitation-framework.html" target="_blank">Beef</a></li>
</ul>
</td> <td><ul>
<li><a href="http://www.toolwar.com/2013/10/social-engineering-toolkit-set-tools.html" target="_blank">SET</a></li>
<li><a href="http://www.toolwar.com/2013/09/metasploit-framework.html" target="_blank">Metasploit</a></li>
<li><a href="http://www.toolwar.com/2013/09/dsniff-tools.html" target="_blank">Dsniff</a></li>
<li><a href="http://www.toolwar.com/2013/10/technitium-mac-address-changer-v6-tools.html" target="_blank">Macchanger</a></li>
<li>Hamster</li>
<li>Ferret</li>
<li><a href="http://www.toolwar.com/2013/10/p0f-tools.html" target="_blank">P0f</a></li>
<li><a href="http://www.toolwar.com/2013/11/foremost-tools.html" target="_blank">Foremost</a></li>
<li>SSLStrip</li>
<li><a href="http://www.toolwar.com/2014/02/sslsplit-mitm-attack-against-ssltls.html" target="_blank">SSLSplit</a></li>
</ul>
</td></tr>
</tbody></table>
<br />
<table class="notableborder" style="margin-left: 0px; margin-right: 0px; text-align: left;"><tbody>
<tr><td><h3>
Tutorials ::</h3>
<b>Screenshots ::  </b><a href="http://www.fulgursecurity.com/en/content/fs-nyarl" target="_blank">Click Here</a> <br />
<h3>
Download ::</h3>
<b>Linux ::</b> <a href="http://www.fulgursecurity.com/tools/fs-nyarl/FS-NyarL_v1.0-kali.tar.gz" target="_blank">FS-NyarL v1.0</a> (.tar.gz)<br />
<b>Official Website :: </b><a href="http://www.fulgursecurity.com/en/content/fs-nyarl">http://www.fulgursecurity.com/en/content/fs-nyarl</a></td></tr>
</tbody></table>

FS-NyarL (Pentesting and Forensics) :: Framework

NyarL it's Nyarlathotep, a mitological chaotic deity of the writer HP. Lovecraft's cosmogony. It's represent Crawling Chaos and FS-NyarL it's The Crawling Chaos of Cyber Security. A network takeover…

Blue|Smash (Bluetooth Penetration Testing Suite) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAbSu1pJlmWvitiwSQ6VbwDnk9YGXBwiQYxb8jRWOKY83EeuFf8reMEgHAd0wiMs_5B4voq_teB_0YZUKMxghjkcSF1FlCPn0JQTQwdhz0psxua3qc4t1izcLhHPAIIUFma1XcjO6U93xU/s1600/bluesmash+logo.gif" imageanchor="1"><img alt="qBluesmash logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAbSu1pJlmWvitiwSQ6VbwDnk9YGXBwiQYxb8jRWOKY83EeuFf8reMEgHAd0wiMs_5B4voq_teB_0YZUKMxghjkcSF1FlCPn0JQTQwdhz0psxua3qc4t1izcLhHPAIIUFma1XcjO6U93xU/s1600/bluesmash+logo.gif" title="Bluesmash logo" /></a></div>
<div style="text-align: justify;">
<b>Blue|Smash</b> is a free open source <b>Bluetooth Pentest Suite,</b> powered  by <a href="http://www.toolwar.com/search/label/Python" target="_blank">python</a> for <a href="http://www.toolwar.com/search/label/Linux" target="_blank">linux</a>. I built <b>Blue|Smash</b> to aid me in my <a href="http://www.toolwar.com/search/label/Bluetooth" target="_blank">bluetooth</a>  adventures and thought others might benefit from my work . Here is a  list of some of the tools included. </div>
<ul id="main" style="text-align: justify;">
<li>Sorbo's Front-line Bluetooth sniffer.</li>
<li>A brute-force scanner</li>
<li>Mac address spoofer</li>
<li>Load's of exploits</li>
<li>Autopwn vulnerability checker</li>
<li>CSR Firmware Backup/Updater</li>
</ul>
<h3>
Download ::</h3>
<b>Linux :: </b><a class="name" href="http://sourceforge.net/projects/bluesmash/files/bluesmash/Blue-Smash-v1.0e.tar.gz/Blue-Smash-v1.0e.tar.gz/download" title="Click to download Blue-Smash-v1.0e.tar.gz">Blue-Smash-v1.0e.tar.gz</a><br />
<b>Official Website :: </b> <a class="external free" href="http://bluesmash.sourceforge.net/" rel="nofollow">http://bluesmash.sourceforge.net/</a>

Blue|Smash (Bluetooth Penetration Testing Suite) :: Tools

Blue|Smash is a free open source Bluetooth Pentest Suite, powered by python for linux. I built Blue|Smash to aid me in my bluetooth adventures and thought others might benefit from my work . Here i…

Network Spoofer :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="networkspoofer logo" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMN4hwc7eZbm9Dew4yvfHeZ3h_ZmsU3kIYaAkYuXUGfSKq3bsBTwcwY9sxW6EFuo-bASkp58Xm2YHgA_kxBUZbnkDfEaxYb9zy5Txmq38Z0h75buZVzIPnYepDMjmp6myAK8X4JNsRLAhA/s1600/networkspoofer-logo.png" title="networkspoofer logo" /></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Network Spoofer</b> lets you change websites on other people’s computers – from your phone.</div>
<div style="text-align: justify;">
Please note that there is no intention for <b>Network Spoofer</b> to  include any malicious features. This application is a fun demonstration  of how vulnerable home networks are to simple attacks, with permission  of the network owner – DO NOT attempt to use Network Spoofer on any  corporate or other non-residential networks (eg. at school, university).  It becomes very obvious when Network Spoofer is being used on a  Network, and use of Network Spoofer will be considered malicious hacking  by network administrators. You have been warned.</div>
<b> </b> <b> </b><br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/FR9vFmxNLKI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<b>Download Here ::</b>  <a href="http://digitalsquid.co.uk/dl/android-netspoof-0.9.apk" target="_blank">Network Spoofer 0.9</a>
<b>Official Website :: </b>http://digitalsquid.co.uk/netspoof/</div>

Network Spoofer :: Tools

Network Spoofer lets you change websites on other people’s computers – from your phone. Please note that there is no intention for Network Spoofer to include any malicious features. This application…

BoNeSi (DDoS Botnet Simulator) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="botnet image" border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb2QJrXDxPXxucvDRBpPq9Z0JXDanBCAptS0_mEXCfxC8HUvUncdsBgLZvtOinpVWo7fsxlPIlk6KnwB9UJQiV-A7VQ-2chiZLnXC9t4T9ZVXVWV9kcB5EqMRnQbHQVE4J7zd60XDXOJHz/s640/botnet.jpg" title="botnet image" width="640" /></div>
<div style="text-align: justify;">
<b>BoNeSi</b>, the <i>DDoS Botnet Simulator</i> is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. <br />
<br />
<b>BoNeSi</b> generates ICMP, UDP and TCP (HTTP) flooding attacks from a defined botnet size (different IP addresses). BoNeSi is highly configurable and rates, data volume, source IP addresses, URLs and other parameters can be configured. <br />
<br />
There are plenty of other tools out there to spoof IP addresses with UDP and ICMP, but for TCP spoofing, there is no solution. BoNeSi is the first tool to simulate HTTP-GET floods from large-scale bot networks. BoNeSi also tries to avoid to generate packets with easy identifiable patterns (which can be filtered out easily). <br />
<br />
We highly recommend to run BoNeSi in a closed testbed environment. However, UDP and ICMP attacks could be run in the internet as well, but you should be carefull. HTTP-Flooding attacks can not be simulated in the internet, because answers from the webserver must be routed back to the host running BoNeSi. <br />
<br />
<b>BoNeSi</b> sniffs for TCP packets on the network interface and responds to all packets in order to establish TCP connections. For this feature, it is necessary, that all traffic from the target webserver is routed back to the host running BoNeSi </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://bonesi.googlecode.com/files/bonesi-0.2.0.tar.gz" target="_blank">BoNeSi 0.2.0.tar.gz</a></div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/bonesi/</div>
</div>

BoNeSi (DDoS Botnet Simulator) :: Tools

BoNeSi, the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. BoNeSi generates ICMP, UDP and TCP (H…

Technitium MAC Address Changer v6 :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ47skucHv9TDKOy230WWlfwDQTF8q0PqYuCCWtvWnfz7nQW8a2bbu5-LhtA4-2tbqphHlj_WUnV8yuHREC_nJk3lMwTYqqALDdDf9lACIyW5jAROKt-Tupy-hsWkfR-91v7vIcgvYIbuJ/s1600/mac-address-changer-screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="mac address changer screenshot" border="0" height="253" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ47skucHv9TDKOy230WWlfwDQTF8q0PqYuCCWtvWnfz7nQW8a2bbu5-LhtA4-2tbqphHlj_WUnV8yuHREC_nJk3lMwTYqqALDdDf9lACIyW5jAROKt-Tupy-hsWkfR-91v7vIcgvYIbuJ/s320/mac-address-changer-screenshot.png" title="mac address changer screenshot" width="320" /></a></div>
<div class="Verdana" style="text-align: justify;">
<span style="font-size: small;">Technitium MAC Address Changer allows          you to change (spoof) Media Access Control (MAC) Address of your Network Interface          Card (NIC) irrespective to your NIC manufacturer or its driver. It has          a very simple user interface and provides ample information regarding          each NIC in the machine. Every NIC has a MAC address hard coded in its          circuit by the manufacturer. This hard coded MAC address is used by windows          drivers to access Ethernet Network (LAN). This tool can set a new MAC          address to your NIC, bypassing the original hard coded MAC address. Technitium          MAC Address Changer is a must tool in every security professionals tool          box.</span></div>
<div style="text-align: justify;">
</div>
<div class="Verdana" style="text-align: justify;">
<span style="font-size: small;">There are some famous, commercial tools          available in the market for USD 39.99 to as much as USD 2499!, but Technitium          MAC Address Changer is available for FREE. We don't charge for just changing          a registry value! Also knowing how this works doesn't require extensive          research as some commercial tool providers claim! Read how it works (below)          for more details.</span></div>
<div class="Verdana" style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/TOBJabKOaaI?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div class="Verdana" style="text-align: justify;">
</div>
<div class="Verdana" style="text-align: justify;">
</div>
<div class="Verdana" style="text-align: justify;">
<br />
<b><span style="font-size: small;">Download Here :: </span></b><span style="font-size: small;"><a href="http://go.technitium.com/fwlink/?id=13" target="_blank">Technitium MAC Address Changer v6</a></span></div>
<div class="Verdana" style="text-align: justify;">
<span style="font-size: small;"><b>Official Website :: </b>http://www.technitium.com </span></div>
</div>

Technitium MAC Address Changer v6 :: Tools

Technitium MAC Address Changer allows you to change (spoof) Media Access Control (MAC) Address of your Network Interface Card (NIC) irrespective to your NIC manufacturer or its driv…

Load more posts

Subscribe to: Posts ( Atom )