CEH v11 Tools (2022/2023) Graded A+

CEH v11 Tools (2022/2023) Graded A+ OSRFramework Includes applications related to username checking, DNS lookups, information leaks research, deep web search, and regular expression extraction. theHarvester This tool gathers emails, subdomains, hosts, employee names, open ports, and banners from different public sources such as search engines, PGP key servers, and the SHODAN computer database as well as uses Google, Bing, SHODAN, etc. to extract valuable information from the target domain. Youtube DataViewer video analysis Tool used to gather information from the advanced video search and reverse image search Shodan, Censys, Thingful IoT search engines, used to gather information such as manufacturer details, geographical location, IP address, hostname, open ports, etc. Netcraft, Sublist3r, Pentest-Tools Find Subdomains tools used to identify the domains and sub-domains of any target website. PeekYou, pipl , Intelius, BeenVerified People search services to gather personal information of key employees in the target organization. Tor Browser, ExoneraTor, OnionLand Search engine tools used to perform deep and dark web browsing. Sherlock, Social Searcher, UserRecon Tools used to gather information about a target person over various social networking sites. Followerwonk, Hootsuite, Sysomos to gather additional information related to the target company and its employees from social networking sites. Maltego a program that can be used to determine the relationships and real-world links between people, groups of people, organizations, websites, Internet infrastructure, documents, etc. Recon-ng A web reconnaissance framework with independent modules for database interaction that provides an environment in which open-source web-based reconnaissance can be conducted. FOCA A tool used mainly to find metadata and hidden information in the documents that its scans. A tool included in the OSRFramework package that attackers can use to check for a user profile on up to 290 different platforms. A tool included in the OSRFramework package that attackers can use to check for the existence of a given email. A tool included in the OSRFramework package that attackers can use to perform a query on the platforms in OSRFramework. A tool included in the OSRFramework package that attackers can use to check for the existence of domains. A tool included in the OSRFramework package that attackers can use to check for the existence of a given series of phones. A tool included in the OSRFramework package that attackers can use regular expressions to extract entities. OSINT Framework An open source intelligence gathering framework that helps security professionals in performing automated footprinting and reconnaissance, OSINT research, and intelligence gathering. Recon-Dog An all-in-one tool for all basic information gathering needs. It uses APIs to collect information about the target system. BillCipher An information gathering tool for a website or IP address. Nmap A security scanner for network exploration and hacking. It allows you to discover hosts, ports, and services on a computer network, thus creating a "map" of the network. Hping2/Hping3 A command-line-oriented network scanning and packet crafting tool for the TCP/IP protocol that sends ICMP echo requests and supports TCP, UDP, ICMP, and raw-IP protocols. ICMP Scanning A process of sending an ICMP request or ping to all the hosts on the network to determine the ones that are up. ACK Scanning on Port 80 A scanning technique that can be used to probe the existence of a firewall and its rule sets. Metasploit An open-source project that provides the infrastructure, content, and tools to perform penetration tests and extensive security auditing. NetScanTools Pro An investigation tool that allows you to troubleshoot, monitor, discover, and detect devices on your network. IP Scanner Tool for iOS that scans your local area network to determine the identity of all its active machines and Internet devices. Fing A mobile app for Android and iOS that scans and provides complete network information, such as IP address, MAC address, device vendor, and ISP location. It allows attackers to discover all devices connected to a Wi-Fi network along with their IP and MAC address as well as the name of the vendor/device manufacturer Network Scanner An Android mobile application that allows attackers to identify the active host in the range of possible addresses in a network. It also displays IP addresses, MAC addresses, host names, and vendor details of all the available devices in the network. NetBIOS Enumerator An enumeration tool that shows how to use remote network support and to deal with some other web protocols, such as SMB. PsTools suite Tool that helps in controlling and managing remote systems from the command line. The following are some commands for enumerating user accounts. PsExec A lightweight Telnet replacement that can execute processes on other systems, complete with full interactivity for console applications, without having to install client software manually. PsFile A command-line utility that shows a list of files on a system that opened remotely, and it can close opened files either by name or by a file identifier. PsGetSid translates SIDs to their display name and vice versa. It works on built-in accounts, domain accounts, and local accounts. PsKill A kill utility that can kill processes on remote systems and terminate processes on the local computer. PsInfo A command-line tool that gathers key information about local or remote legacy Windows NT/2000 systems, including the type of installation, kernel build, registered organization and owner, number of processors and their type, amount of physical memory, installation date of the system, and expiration date in the case of a trial version. PsList A command-line tool that displays central processing unit (CPU) and memory information or thread statistics. PsLoggedOn An applet that displays both the locally logged-in users and users logged in via resources for either the local computer or a remote one. PsLogList Utility dumps the contents of an Event Log on a local or remote computer. PsPasswd Can change an account password on local or remote systems, and administrators can create batch files that run PsPasswd on the computers they manage to perform a mass change of the administrator password. PsShutdown Can shut down or reboot a local or remote computer. Net View A command-line utility that displays a list of computers in a specified workgroup or shared resources available on a specified computer. Snmpcheck An open-source tool used to gather information about the target, such as contact, description, write access, devices, domain, hardware and storage information, hostname, Internet Information Services (IIS) statistics, IP forwarding, listening UDP ports, location, mountpoints, network interfaces, network services, routing information, software components, system uptime, TCP connections, total memory, uptime, and user accounts. SoftPerfect Network Scanner tool that discovers shared folders and retrieves practically any information about network devices via WMI, SNMP, HTTP, SSH, and PowerShell Softerra LDAP Administrator Tool that provides various features essential for LDAP development, deployment, and administration of directories. PRTG Network Monitor Tool that monitors all systems, devices, traffic, and applications of IT infrastructure by using various technologies such as SNMP, WMI, and SSH. RPCScan Tool that communicates with RPC services and checks misconfigurations on NFS shares SuperEnum Tool that includes a script that does the basic enumeration of any open port. smtp-user-enum A tool for enumerating OS-level user accounts on Solaris via the SMTP service (sendmail). Sherlock To search a vast number of social networking sites for a target username. This tool helps the attacker to locate the target user on various social networking sites along with the complete URL. BeRoot a post-exploitation tool to check for common misconfigurations which can allow an attacker to escalate their privileges. OpUtils SNMP enumeration protocol that helps to monitor, diagnose and trouble shoot the IT resources. Censys To gather a massive amount of information about an IP address. NS lookup Performs name server lookup Port scan Scans most common TCP ports Detect CMS Can detect 400+ content management systems To check if the target is a honeypot Reverse IP lookup To find domains associated with an IP address To detect 1000+ technologies Netcraft provides Internet security services, including anti-fraud and anti-phishing services, application testing, and PCI scanning. Tracert Tool used to create network maps of the target. NSLookup Tool used to perform DNS queries and zone transfers. Keylogger Programs or hardware devices that monitor each keystroke as the user types on a keyboard, logs onto a file, or transmits them to a remote location. Obfuscator A program that conceals its code and intended purpose via various techniques, and thus, makes it hard for security mechanisms to detect or remove it. Intelius Attackerscan us this online service to search for people belonging to the target organization. Sublist3r A Python script designed to enumerate the subdomains of websites using OSINT. TinEye Tool used to perform a reverse image search. Mention An online reputation tracking tool that helps attackers in monitoring the web, social media, forums, and blogs to learn more about the target brand and industry.