Skip to content

Tools Used During Class

Wolfgang Richter edited this page Aug 8, 2013 · 11 revisions

This is a list of major tools used during the class and sub-projects. It is definitely incomplete, as all the commands used in Linux are not documented, nor are other minor utilities. Overtime the list might expand to be more exhaustive. Feel free to contribute back changes :-)

Breaking, Entering, and Cracking

Ophcrack - Used to crack Windows XP passwords

Hashcat - Used to crack LinkedIn leaked password dataset

Sub7 - Used to infect and hack into Windows XP (Trojan + Backdoor)

Network Attacks

nmap - Used to port scan network hosts and discover servers they are running (available for Windows, Mac OS X, and Linux)

Wireshark - Used to sniff network packets and reconstruct objects transferred over the network (available for Windows, Mac OS X, and Linux)

Cookie Cadger - Used to steal session cookies and assume someone else's identity to a Web app like Facebook (available for Windows, Mac OS X, and Linux)

ettercap - Used to perform active network attacks like ARP poisoning and SSL man-in-the-middle

Cryptography and Steganography

/dev/urandom - Used to provide randomness for keys

GNU Privacy Guard (gpg) - Used to implement and apply public-key cryptography and create a web of trust in class

steghide - Used to hide a text file within an image using steganographic techniques

Network Tools

ping - Used to detect live systems (versions exist for Windows, Mac OS X, and Linux)

traceroute - Used to observe all intermediate links between two hosts on the network (versions exist for Windows, Mac OS X, and Linux)

Network and Local System Defenses

Uncomplicated Firewall - A firewall used to protect against network attacks on Ubuntu

ClamAV - An anti-virus program designed to find and prevent the execution of bad binaries like trojan horses and backdoors etc. (available for Windows, Mac OS X, and Linux)

Tripwire - Used to detect file changes on disk to localize rootkits and backdoors and suspicious behavior

tail -f - Used to watch log files as they are appended to

strace - Used to observe input and output between a userspace process and the Linux kernel

Programming and Environment

Windows XP - We used Windows XP within a Virtual Machine as both a victim and controller operating system

Virtual Machine Manager - Used to create and control Virtual Machines

Ubuntu 12.04 LTS - Used as a host to program and hack from

KVM - Used as the Virtual Machine Monitor on Ubuntu for Windows XP guests

QEMU - Used to implement virtualized devices along with KVM

Fish Shell - Used as our Linux command-line shell (available for Mac OS X)

Python Programming Language - Used as our main programming language to implement all the sub-projects (available for Mac OS X and Windows)

git - Distributed version control system used to version all of our produced code (available for Mac OS X and Windows)

GitHub - Online mirror of all code produced during the project by hosting our git repositories (clients for Mac OS X and Windows; command-line for Linux)

gedit - Used as the main text editor for coding and other tasks