TechTrick

Sunday, May 12, 2019

Best Information Gathering Tool/Vulnerability Scanner - RED HAWK V2

RED HAWK - Best Information Gathering Tool On Kali Linux 2017.1 | All In One Tool in Kali Linux Tools RED HAWK - All In One Tool For Information Gathering, SQL Vulnerability Scannig and Crawling.

It is the most crucial part for any hacker or pentester to perform a hack or simulate a hack.Information gathering mainly consist of

Network architecture
Connected devices
Open ports
Running services
Known vulnerabilities
Password profiling, etc……

To know more about information gathering visit this page Information Gathering

There are many information gathering tools available over GitHub and over the internet out of that many ones is RED HAWK

Features Of The Tool :

Server detection
CloudFlare detector
Robots scanner
CMS Detector
WordPress
Joomla
Drupal
Magento
GEO-IP Scan
NMAP Port Scan
DNS Lookup
SubNet Calculator
Subdomain Finder
Reverse IP Scanner
CMS detection For Sites On the same server
Parameter Finder
Error based SQLi Detector
Crawler

Scans That You Can Perform Using RED HAWK :

Basic Scan
Site Title NEW
IP Address
Web Server Detection IMPROVED
Grab Banners IMPROVED
Subnet Calculator
IP Address
Hostname
Bloggers View NEW
HTTP Response Code
Site Title
Alexa Ranking
Domain Authority
Page Authority
Social Links Extractor
Link Grabber
Sensitive Files Crawling
Version Detection
Version Vulnerability Scanner

Lets Start With Best Information Gathering Tool/Vulnerability Scanner

Step 1 :- You need to download RED_HAWK tool by executing this command in terminal window of kali linux

git clone https://github.com/Tuhinshubhra/RED_HAWK.git

Best Information Gathering Tool/Vulnerability Scanner - RED HAWK V2

Step 2 :-Now downloading of RedHAWK tool will start and after that you can see a RedHAWK file , so you need to wait for downloading it completely . and Now again go to terminal window of kali linux and execute this command cd Red_HAWK

Now to install this tool in kali linux, to install this tool first we have to give chmod permision. Type the command for this chmod +x rhawk.php and press enter button.

Now you can run this tool easily, that give this command php rhawk.php and press enter button.

Step 3 :- Enter the website name you want to scan and type its protocol option.

How To Install PentBox Tools On Kali Linux | Penetration Tool

The Pentbox is a safety kit containing various tools for streamlining PenTest conducting a job easily. It is programmed in Ruby and oriented to GNU / Linux, with support for Windows, MacOS and every systems where Ruby is installed.

New features :-

Command execution in gets (STDIN) implemented. (!command)
Honeypot now shows attacker’s IP and port (thx Shyish)
Included log options.
Wordlist is bigger now.
Included "back" option on menus.

New tools :-

Included new area, Web tools.
Included new module MAC address geolocation (samy.pl).
Included new module HTTP directory bruteforce .
Included new module HTTP common files bruteforce.
Included exploits for DoS.

Main Features :-

Cryptography tools
Base64 Encoder & Decoder
Multi-Digest (MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD-160)
Hash Password Cracker (MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD-160)
Secure Password Generator

Network tools :-

Net DoS Tester
TCP port scanner
Honeypot
Fuzzer
DNS and host gathering
MAC address geolocation

Lets Start With Install PentBox Tools | Penetration Tool

Step 1. got to the github.

How To Install PentBox Tools On Kali Linux | Penetration Tool

Step 2. You need to download PentBox tool by executing this command in terminal window of kali linux

git clone https://github.com/whitehatpanda/pentbox-1.8.git

Step 3. Now downloading of PentBox tool will start and after that you can see a PentBox file , so you need to wait for downloading it completely . and Now again go to terminal window of kali linux and execute this command cd PentBox

Now to install this tool in kali linux, to install this tool first we have to give chmod permision. Type the command for this chmod +x pentbox.rb and press enter button.

Now you can run this tool easily, that give this command ./pentbox.rb and press enter button.

How To Send Mass Email on Kali Linux || Mass Mailer - Trity

Trity is an advanced pentesting framework dedicated to everything from vulnerability testing to cryptography.

Dependencies:-

Python latest version
Sendmaiil, build-essential & git
Linux OS. Kali linux, LTS, Debian-Jessie, Ubuntu and other.

Installation & Usage :-

In order to install this program, it is crucial that you are on a Linux-based distro, preferably Kali-Linux or BackBox.

Lets Start With How To Send Mass Email on Kali Linux || Mass Mailer

Step 1 :-You need to download Trity tool by executing this command in terminal window of kali linux

git clone https://github.com/toxic-ig/Trity.git

How To Send Mass Email on Kali Linux || Mass Mailer - Trity

Step 2 :- Now downloading of Trity tool will start and after that you can see a Trity file , so you need to wait for downloading it completely . and Now again go to terminal window of kali linux and execute this command cd Trity

Now to install this tool in kali linux, to install this tool first we have to give chmod permision. Type the command for this chmod +x install.py and press enter button.

Now you can run this tool easily, that give this command sudo python install.sh and press enter button.

Step 3 :-Finished Installing ! Run trity to run program.

Penetration Testing Tools & Application Installing - KaaisV3

KAAIS is written in BASH Language, which makes it usable on almost any Linux platform, however, it was designed to work under Kali Linux only, and we do not offer support for any other distro or platform.

You can use KAAIS to install many applications (text image and sound editors, browsers, ftp applications, and more..), to update some applications that come with Kali by default ( WPScan, JoomScan, and more..), to update your ‘sources.list to a custom one made by our team (this will also create a backup of your existing sources), and much more..

Lets Start With Penetration Testing Tools & Application Installing

Step 1 :-Get the github link for download the Kaaisv3.

Penetration Testing Tools & Application Installing - KaaisV3

Step 2 :-You need to download Kaaisv3 tool by executing this command in terminal window of kali linux

git clone https://github.com/ZephrFish/CyberPrep.git

Step 3 :-Now downloading of KaaisV3 tool will start and after that you can see a CyberPrep file , so you need to wait for downloading it completely . and Now again go to terminal window of kali linux and execute this command cd CyberPrep

Now to install this tool in kali linux, to install this tool first we have to give chmod permision. Type the command for thischmod +x Kaaisv3.sh and press enter button.

Now you can run this tool easily, that give this command ./Kaaisv3.sh and press enter button.

Generate Undetectable Payload, Backdoor with MsfVenom - FatRat

An easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

Bypassing the Anti-Virus or Security Software will allow for a Metasploit session between the attacker and the target without Anti-Virus detecting the malicious payload and flagging a warning back to the user.

Features of TheFatRat :

It can create backdoors for Windows, Mac, Linux, Android.
Bypass Antivirus Software Protection.
Multiple meterpreter listeners can be started using it.
Also can create autorun script.
The generated backdoors can be bound with MS word, PDF, RAR file etc.

Automating Metasploit Functions :

Create backdoor for windows , linux , mac and android
bypass antivirus backdoor
Checks for metasploit service and starts if not present
Checks for metasploit service and starts if not present
Start multiple meterpreter reverse_tcp listners
Fast Search in searchsploit
Bypass AV
File pumper
Create backdoor with another techniq
Auto run script for listeners ( easy to use )
Drop into Msfconsole

Requirements :

Linux Distrubtion of you choice.
TheFatRat
Metasploit

Lets Start With Generate Undetectable Payload, Backdoor with MsfVenom

Step 1.Type 1 for create a backdoor with msfvenom

Step 2.Type 2 for Windows

Step 3.Set LHOST and LPORT.

Create Payload Windows,Android,Linux and MAC - Ezsploit

Ezsploit – Linux bash script automation for metasploit, which is use to create payload for multiple platform (Windows, Linux, Android, Mac). as well as we can start multiple listeners at a same time.

Command line script for automating metasploit functions

Checks for metasploit service and starts if not present
Easily craft meterpreter reverse_tcp payloads for Windows, Linux, Android and Mac
Start multiple meterpreter reverse_tcp listners
Assistance with building basic persistence options and scripts

Lets Start With Create Payload Windows,Android,Linux and MAC

Step 1 :-You need to download ezsploit tool by executing this command in terminal window of kali linux

git clone https://github.com/rand0m1ze/ezsploit.git

Create Payload Windows,Android,Linux and MAC - Ezsploit

Step 2 :-Now downloading of ezsploit tool will start and after that you can see a ezsploit file , so you need to wait for downloading it completely . and Now again go to terminal window of kali linux and execute this command cd ezsploit

Now to install this tool in kali linux, to install this tool first we have to give chmod permision. Type the command for this chmod +x ezsploit.sh and press enter button.

Now you can run this tool easily, that give this command ./ezsploit.sh and press enter button.

Step 3 :-Now a screen will come having many option like payload, listen,exploit,persistence and many more option you will see there.

Step 4 :- Now here you need to first choose you are going to create the payload for type 1 .

Step 5 :- Now here you need to first choose you are going to create the payload for which operating system , i mean windows, linux or android .Now i assume that you are going to create the payload for android device the execute the associated number like 1 (Window is on fourth position among the rest option).

How To Install Vulnerability assessment tool - NetZapper

Net-Zapper is a vulnerability assessment and brute force password cracking tool written in python v2.7.

It requires various libraries to be downloaded for python and are listed below:

Scapy
itertools
paramiko
colorama

All above mentioned libraries are installed by default in Kali Linux. For other OS libraries should be downloaded and installed using pip install and easy_install.

Net-Zapper can be used for host discovery,ports scanning , os detection and brute force ,password cracking including passwords dictionary creation based on custom character set. Default character set for passwords dictionary is set to chars [a-z] .

Lets Start With Install Vulnerability assessment tool

Step 1 :- Download or a clone from Github.

git clone https://gith*ub.com/NetZapper/NetZapper.git

How To Install Vulnerability assessment tool - NetZapper

Step 2 :-Give a Execution writes ,permissions and Install it.

chmod +x Net_Zapper_1.py

./Net_Zapper_1.py

Step 3 :-Eneter Choice 1 for Hosts Discovery