pentestmonkey

php-reverse-shell. PHP

windows-privesc-check. Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

unix-privesc-check. Automatically exported from code.google.com/p/unix-privesc-check

pysecdump. Python-based tool to dump security information from Windows systems

gateway-finder. Tool to identify routers on the local LAN and paths to the Internet

smtp-user-enum. Username guessing tool primarily for use against the default Solaris SMTP service. Can use either EXPN, VRFY or RCPT TO.

timing-attack-checker. Tool to help identify timing attacks

yaptest. Automatically exported from code.google.com/p/yaptest

finger-user-enum. Username guessing tool primarily for use against the default Solaris finger service. Also supports relaying of queries through another finger server.

perl-reverse-shell. Perl

ident-user-enum. ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system.

unix-security-file-parser. Automatically exported from code.google.com/p/unix-security-file-parser

exploit-suggester. This tool reads the output of “showrev -p” on Solaris machines and outputs a list of exploits that you might want to try. It currently focusses on local exploitation of Solaris 8 on SPARC, but other version of Solaris are partially supported.

ftp-user-enum. Username guessing tool for use against the default Solaris ftp service and GNU inetutils ftpd.

dns-grind. Tool for performing lots of DNS queries quickly

php-findsock-shell. C

rsh-grind. Basically tries lots of combinations of local and remote usernames to execute commands via RSH

yapscan. Automatically exported from code.google.com/p/yapscan

yaptestfe. Automatically exported from code.google.com/p/yaptestfe

linux-bootparamd-client. Bootparamd Client for Linux

on. Rexd Client For Linux