Pentesting Tools: Networking - Paiet/SEC-335 GitHub Wiki

  • Networking tools
    • Wireshark
      • GUI
        • Capturing data
          • Filters
            • ip.addr == 10.0.0.165
            • icmp
            • http and http.request
            • telnet
      • TShark
        • tshark -D Display all interfaces
        • tshark -i eth0 Capture packets from device eth0
      • Dumpcap
        • dumpcap -f "ip host 10.0.0.129"
    • Hping
      • Packet crafting
      • man hping3
        • Look at description
      • Ping util: hping3 -1 10.0.0.165
      • Port scan: hping3 -V -S -c 5 -p 80 10.0.0.165 -s 8888
        • Add a plus sign to the dest port and port number will increase by 1 for every reply
      • DDoS attk:
        • hping3 -V -c 1000000 -d 120 -S -w 64 -p 80 -s 8888 --flood --rand-source IP
          • -d 120 : Data size
          • -w 64 : Window size
          • --flood : Send as fast as possible
          • --rand-source : Uses random source addresses