王孙小蛮的自留地

The tool is designed as a password dictionary attack tool that targets windows authentication via the SMB protocol. It is really a wrapper script around the ‘smbclient’ binary, and as a result is depen

DBPwAudit is a Java tool that allows you to perform online audits of password quality for several database engines. The application design allows for easy adding of additional database drivers by simpl

BED is a program which is designed to check daemons for potential buffer overflows, format strings et. al.‘一个缓冲区溢出检测工具，归属与系统漏洞挖掘工具库，溢出漏洞挖掘工具集Tools included in the bed packagebed – A network protocol fu

CaseFile is the little brother to Maltego. It targets a unique market of ‘offline’ analysts whose primary sources of information are not gained from the open-source intelligence side or can be programm

dnsmap Package Descriptiondnsmap was originally released back in 2006 and was inspired by the fictional story “The Thief No One Saw” by Paul Craig, which can be found in the book “Stealing the Network

dnstracer Package Descriptiondnstracer determines where a given Domain Name Server (DNS) gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative a

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don’t you have to write something custom. This is time-consuming and tedious. BBQSQL can help y

DNSRecon Package DescriptionDNSRecon provides the ability to perform:Check all NS Records for Zone Transfers Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT) Perfo

dnmap Package Descriptiondnmap is a framework to distribute nmap scans among several clients. It reads an already created file with nmap commands and send those commands to each client connected to it.

DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU)Linux Command Line Application coded in C. DMitry has the ability to gather as much information as possible about a host. Base functionality

Copies configuration files from Cisco devices running SNMP.额，说白了就是一个TFT服务转发工具，在这里推荐下lcx,目前这款工具我已经编译成windos,linux,嵌入式设备都可用的端口转发工具，在我的下载里面就有哦，非常好用Tools included in the copy-router-config packagecopy-rout

Cookie Cadger helps identify information leakage from applications that utilize insecure HTTP GET requests.Web providers have started stepping up to the plate since Firesheep was released in 2010. Toda

Cisco Torch mass scanning, fingerprinting, and exploitation tool was written while working on the next edition of the “Hacking Exposed Cisco Networks”, since the tools available on the market could not

is a network sniffer exclusively written to extract information from CDP packets. It provides all the information a “show cdp neighbors detail” command would return on a Cisco router and even more思科CD

Braa is a mass snmp scanner. The intended usage of such a tool is of course making SNMP queries – but unlike snmpget or snmpwalk from net-snmp, it is able to query dozens or hundreds of hosts simultane

Automater is a URL/Domain, IP Address, and Md5 Hash OSINT tool aimed at making the analysis process easier for intrusion Analysts. Given a target (URL, IP, or HASH) or a file full of targets Automater

Amap was the first next-generation scanning tool for pentesters. It attempts to identify applications even if they are running on a different port than normal. It also identifies non-ascii based appli

目测为一款网络电话攻击工具，由于中国相关环境，网络电话并没有出现在公众视野，但是企业内部可能会出现，所以该工具在企业内部渗透中可能会用到Tools included in the ace-voip packageace – A simple VoIP corporate directory enumeration toolroot@kali:~# ace ACE v1.10: Automated

dnsenum Package DescriptionMultithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks.一款子域名爆破工具和之前介绍的bing-ip2hosts功能差不多，在此归类与域名信息搜集工具Tools included in t