Posts

Showing posts with the label Knock

Knock V.4.1.1 - Subdomain Scan

Image
Knockpy is a python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer together with to endeavor to bypass the wildcard DNS record automatically if it is enabled. Now knockpy supports queries to VirusTotal subdomains, you lot tin setting the API_KEY inside the config.json file. Very simply $ knockpy domain.com Export amount study inwards JSON If you lot desire to relieve amount log like this one precisely type: $ knockpy domain.com --json Install Prerequisites Python 2.7.6 Dependencies Dnspython $ sudo apt-get install python-dnspython Installing $ git clone https://github.com/guelfoweb/knock.git $ cd knock $ nano knockpy/config.json <- prepare your virustotal API_KEY $ sudo python setup.py install Note that it's recommended to purpose Google DNS : 8.8.8.8 together with 8.8.4.4 Knockpy arguments $ knockpy -h usage: knockpy [-h] [-v] [-w WORDLIST] [-r] [-c] [-j] domain...

Fwknop - Unmarried Bundle Say-So & Port Knocking

Image
fwknop implements an authorisation scheme known every bit Single Packet Authorization (SPA) for strong service concealment. SPA requires only a unmarried bundle which is encrypted, non-replayable, as well as authenticated via an HMAC inwards gild to communicate desired access to a service that is hidden behind a firewall inwards a default-drop filtering stance. The principal application of SPA is to utilisation a firewall to drib all attempts to connect to services such every bit SSH inwards gild to brand the exploitation of vulnerabilities (both 0-day as well as unpatched code) to a greater extent than difficult. Because at that topographic point are no opened upwards ports, whatever service that is concealed past times SPA naturally cannot endure scanned for amongst Nmap. The fwknop projection supports 4 unlike firewalls: iptables, firewalld, PF, as well as ipfw across Linux, OpenBSD, FreeBSD, as well as Mac OS X. There is every bit good back upwards for custom scripts so that f...

Bonesi - The Ddos Botnet Simulator

Image
BoNeSi , the DDoS Botnet Simulator is a Tool to copy Botnet Traffic inward a testbed surroundings on the wire. It is designed to report the final result of DDoS attacks. What traffic tin hold out generated? BoNeSi generates ICMP, UDP too TCP (HTTP) flooding attacks from a defined botnet size (different IP addresses). BoNeSi is highly configurable too rates, information volume, source IP addresses, URLs too other parameters tin hold out configured. What makes it dissimilar from other tools? There are enough of other tools out at that spot to spoof IP addresses amongst UDP too ICMP, but for TCP spoofing, at that spot is no solution. BoNeSi is the commencement tool to copy HTTP-GET floods from large-scale bot networks. BoNeSi also tries to avoid to generate packets amongst tardily identifiable patterns (which tin hold out filtered out easily). Where tin I run BoNeSi ? We highly recommend to run BoNeSi inward a unopen testbed environment. However, UDP too ...