Kali Linux

Question 1

p0f

Answer 1

passive OS fingerprint utility

Question 2

DNSenum

Answer 2

dns enumerator. gathers general info, NS, MX, bind version

Question 3

snmpwalk, snmpcheck

Answer 3

snmp auditing tool

Question 4

fierce

Answer 4

• DNS enumeration
• can use wordlist to test random names

Question 5

smtp-user-enum

Answer 5

• mail recipient enumerator
  *

Question 6

scapy

Answer 6

• packet manipuation tool
• written in Python by Philippe Biondi
• forge or decode packets
• send them on the wire
• capture them
• match requests and replies
• scanning, tracerouting, probing
• sending invalid frames

Question 7

dmitry

Answer 7

• domain enumeration
  
  • whois
  • netcraft
  • subdomains
    *

Question 8

nping

Answer 8

part of Nmap suite

Question 9

nmap

Answer 9

• written by Fyodor (Gordon Lyon)
• first releasd 1997
• current version 6.x
• typical usage nmap -sS -T5 -O a.b.c.d
  *

Question 10

amap

Answer 10

• application scanner
• www.thc.org/thc-amap
• typical: amap -bq a.b.c.d 200-300
• current version:
  *

Question 11

Maltego/Casefile

Answer 11

• proprietary software for open-source forensics
• discovery and visualization of data from open sources
• www.paterva.com
• community version provides up to 75 transforms
  *

Question 12

Nessus

Answer 12

• comprehensive vulnerability scanner
• developed by Tenable Network Security
• Current Version 5.x
• home feed
  
• professional feed
  *

Question 13

OpenVAS

Answer 13

• fork of the Nessus project
• feeds are completely free
• current version 7.x

Question 14

Armitage

Answer 14

• graphical frontend to metasploitable
  *

Question 15

Ettercap

Answer 15

• MITM toolkit
  *

Question 16

John the Ripper

Answer 16

• password auditing
  *

Question 17

Wifi auditing

Answer 17

• airmon-ng
• WPscan
  *

Question 18

Gerix

Answer 18

• used to spoof an AP/SSID
  *