My Life as Info. Sec. Eng. Chapter 1 : Tools

Hi folks, here I am going to share the tools list what I am using in my daily life cycle.

NMAP

Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing.

Basically, I will use to discover the open ports and closed ports in were I done Port Mapping in firewalls.

We can use this in the local network as well as in the WAN network.

Also with help of NSE script, we do multiple things like vulnerability check, exploitation, etc.,

Ref: http://www.piratesshield.com/2017/11/nmap-network-mapper-securtiy-scanner.html

CURL and WGET

curl is a tool to transfer data from or to a server, using one of the supported protocols (HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, DICT, TELNET, LDAP or FILE). Normally using this tool to analyze the website headers when my web security device blocking some dynamic content websites and to create the Application signature in IPS.

Wget using to download files directly instead of opening and surfing the browser.

AXEL

One of my favorite tool in the world, when I feel my download is very slow that time I using AXEL to grab all the bandwidth of my office to download the large size file in some minutes.

APACHE GUACAMOLE

Apache-guacamole is an open source Remote Desktop software.

very much helpful to take multiple RDP, SSH, VNC session at a time from my browser page.

Where we can perform multitask without increasing CPU usage with a single app.

Ref: https://guacamole.apache.org/

PEN-TEST TOOLS

The website called https://pentest-tools.com using to scan port, directory traversal, Sub-domain, and other information gathering and footprinting activities for my bug bounty programs.

It is a very easy tool where we can perform penetration testing from Online.

IP SCANNERS

In internet multiple IP scanners available but I am always using tools are Advanced IP Scanner and NMAP. I am using these tools when the time of cyber attacks like DDoS, Protocol-based attacks like EternalBlue. Very easy to find the Victim PC.

Other than I am using Metasploit, Ngrok, Nessus, Wireshark, VM-player, Fiddler OpenVAS in my day to day life as Information Security Engineer for a different purpose.

Are you using any different tools, let me share will discuss make some noise.

Comments

My Life as Information security engineer Chapter 1: Tools

Hi folks, here I am going to share the tools list that I am using in my daily life cycle. NMAP Nmap (“Network Mapper”) is a free and open-source (license) utility for network discovery and security auditing. Basically, I will use it to discover the open ports and closed ports where I did Port Mapping in firewalls. We can use this in the local network as well as in the WAN network. Also with help of the NSE script, we do multiple things like vulnerability check, exploitation, etc., Ref: http://www.piratesshield.com/2017/11/nmap-network-mapper-securtiy-scanner.html CURL and WGET curl is a tool to transfer data from or to a server, using one of the supported protocols (HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, DICT, TELNET, LDAP or FILE). Normally using this tool to analyze the website headers when my web security device blocking some dynamic content websites and to create the Application signature in IPS. Wget using to download files directly instead of opening and surfing the brow

AquaSec Container Security Solution ( DevSecOps ) - A quickView

What is AquaSec? The Aqua Platform is the leading Cloud Native Application Protection Platform (CNAPP) and provides prevention, detection, and response automation across the entire application lifecycle to secure the supply chain, secure cloud infrastructure, and secure running workloads wherever they are deployed. Solutions : Cloud Native Security Platform CSPM Cloud Security Container Security Kubernetes Security Serverless Security Cloud VM Security Dynamic Threat Analysis (DTA) Container Vulnerability Scanning Aquasec offers a 14days trial to learn the container security / Automated DevSecOps. Use this link to get free trail Sign In | Aqua (aquasec.com) How to start with AquaSec? Once login into the portal click the nine dots in the left-side top > Aqua Hub Then click the "Integrations" The Integration page has a lot of options to connect your container Platform Choosing your platform provides the required key to integrate. (follow the OEM documents ) The

What is IP Obfuscation ? How it's working ? how to use Cuteit tool ?

What is IP Obfuscation? Which is a method to hide or convert a doted format IP address (e.g. 192.168.192.2) into an Integer or Hexadecimal value or Octal form by using some mathematical formula. It’s a kind of method to spoof the human eyes and web security services. dot format to Decimal Conversion piratesshield.com 👉 [172.67.129.3] to translate (172 x256 3 )+(67×256 2 )+(129×256 1 )+(3×256 0 ) = 2890105091 Now you can use https://2890105091 to access piratesshield.com This is one of the ways to do IP Obfuscation. The tool ‘ Cuteit ‘ is A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command-line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. HOW TO USE CUTEIT ? Download & Install Cuteit from the below link git : git clone https://github.com/D4Vinci/Cuteit.git Direct link: https://github.com/D4Vinci/Cuteit/archive/master.zip usage: Cu

PIRATESSHIELD

Search This Blog