This command line-based network scanning and mapping tool finds accessible ports on remote devices. Many security experts consider Nmap to be one of the most important and effective tools – it is particularly essential in the area of penetration testing.
Nmap’s scripting engine then automatically detects additional vulnerabilities and exploits them. Nmap supports dozens of advanced techniques to map networks with IP filters, firewalls, routers and other obstacles. This also includes numerous mechanisms to scan TCP and UDP ports, detect operating systems and versions, and ping sweeps.
Preis: for free
This tool – the de facto standard for network tunneling – allows security professionals to send proxy commands from their attacking Linux machine across various compromised machines to cross network boundaries and firewalls while avoiding detection.
ProxyChains routes penetration testers’ TCP traffic through the following proxies: TOR, SOCKS and HTTP. ProxyChains is compatible with TCP reconnaissance tools such as NMAP and uses the TOR network by default. Security experts also use ProxyChains in IDS/IPS detection.
Preis: for free
Responder is an NBT-NS (NetBIOS Name Service), LLMNR (Link-Local Multicast Name Resolution) and mDNS (Multicast DNS) poisoner. Penetration testers use the tool to simulate attacks aimed at stealing credentials and other data during the name resolution process when the DNS server cannot find an entry. Starting with version 3.1.1.0, Responder offers full IPv6 support by default.
Preis: for free
The open source tool sqlmap is also aimed at penetration testers and automates the process of detecting SQL injection errors that could compromise database servers. The tool has a powerful detection engine and offers numerous features, including database fingerprinting and operating system-level command execution over out-of-band connections.
Sqlmap supports a wide range of database servers including:
-
MySQL,
-
Oracle,
-
PostgreSQL,
-
Microsoft SQL Server,
-
Microsoft Access,
-
IBM DB2,
-
SQLite,
-
Firebird,
-
Sybase,
-
SAP MaxDB and
-
HSQLDB.
Preis: for free
The network protocol analysis tool Wireshark is also often referred to as a network interface sniffer. Wireshark allows security professionals to observe a device’s network behavior to see what other devices it is communicating with and why.
According to security experts, Wireshark is great for finding out where DNS servers and other services are located that can further compromise a network. Wireshark not only runs on Linux, but also works with all major operating systems, including Windows, MacOS and Unix.
Preis: for free
(fm)
This article originally appeared at our sister publication Networkworld.com.
