Kali Linux - Vulnerability Analyses Tools (Educational Purposes Only)

-

In this chapter, we will learn how to use some of the tools that help us exploit devices or applications in order to gain access.

Cisco Tools

Kali has some tools that can be used to exploit Cisco router. One such tool is Cisco-torch which is used for mass scanning, fingerprinting, and exploitation.

Let’s open the Terminal console by clicking the left pane.

Terminal Left Panel

Then, type “cisco-torch –parameter IP of host” and if there is nothing found to exploit, then the following result will be shown.

Cisco Torch

To see what are the parameters that can be used, type “cisco-torch ?”

Cisco Parameter

Cisco Auditing Tool

It is a PERL script, which scans Cisco routers for common vulnerabilities. To use it, again open the terminal on the left pane as shown in the previous section and type “CAT –h hostname or IP”.

You can add the port parameter “-p” as shown in the following screenshot, which in this case is 23 to brute-force it.

Port Parameter

Cisco Global Exploiter

Cisco Global Exploiter (CGE) is an advanced, simple, and fast security testing tool. With these tools, you can perform several types of attacks as shown in the following screenshot. However, be careful while testing in a live environment as some of them can crash the Cisco devise. For example, option Option can stop the services.

Cisco Device

To use this tool, type “cge.pl IPaddress number of vulnerability”

The following screenshot shows the result of the test performed on Cisco router for the vulnerability number 3 from the list above. The result shows the vulnerability was successfully exploited.

Cisco Router

BED

BED is a program designed to check daemons for potential buffer overflows, format strings, et. al.

Check Daemons

In this case, we will test the testing machine with IP 192.168.1.102 and the protocol HTTP.

The command will be “bed –s HTTP –t 192.168.1.102” and testing will continue.

Testing

Comments

Post a Comment

Popular posts from this blog

Kali Linux - Stressing Tools

-
Image
Stressing tools are used to create DoS attacks or to create the stress test for different applications so as take appropriate measures for the future. All the Stress testing tools are found in Applications → 02-Vulnerability Analysis → Stress testing. All Stress testing test will be done on metsploitable machine which has IP of 192.168.1.102 Slowhttptest Slowhttptest is one of the DoS attacking tools. It especially uses HTTP protocol to connect with the server and to keep the resources busy such as CPU and RAM. Let’s see in detail how to use it and explain its functions. To open slowhttptest, first open the terminal and type  “slowhttptest –parameters” . You can type “slowhttptest –h” to see all the paramenters that you need to use. In case you receive an output, ‘Command not found’ you have to first type  “apt-get install slowhttptest” . Then after installation, again type  slowhttptest –h Type the following command − slowhttptest -c 500 -H -g -o outputfile -i 10 -r 200 -t GET –u htt
Read more

Kali Linux - Information Gathering Tools (Educational Purposes Only)

-
Image
In this chapter, we will discuss the information gathering tools of Kali Linux. NMAP and ZenMAP NMAP and ZenMAP are useful tools for the scanning phase of Ethical Hacking in Kali Linux. NMAP and ZenMAP are practically the same tool, however NMAP uses command line while ZenMAP has a GUI. NMAP is a free utility tool for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. NMAP uses raw IP packets in novel ways to determine which hosts are available on the network, what services (application name and version) those hosts are offering, which operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, etc. Now, let’s go step by step and learn how to use NMAP and ZenMAP. Step 1  − To open, go to Applications → 01-Information Gathering → nmap or zenmap. Step 2  − The next step is to detect th
Read more