Re: Most Successful Exploits/Tools to use against windows & Linux?

[nnp <version5@gmail.com>]

Free useful tools that I use include metasploit (exploit framework),
nmap (network scanner), nessus (automated vulnerability assessment
type thing) and backtrack (linux live cd, useful if you dont have your
laptop or whatever with you. Contains _lots_ of tools).  There are
loads really for different types of things whether its recon or
exploiting or whatever. The ones i've mentioned are, in their basic
usage, fire-and-forget type tools which seem to be what you're after.

For exploits milw0rm.com is good, most things find their way there
once they become public. Also subscribing to bugtraq and
full-disclosure could help.

I would give you the 'learn how to find vulns yourself...blah.. blah..
blah use your brain... blah blah blah or you'll be a script kiddy
forever' speech but to be honest I don't care :P All I will say is,
your own 0days are far more useful than public stuff.

Later,
nnp

On 5/25/07, Pen Testee <pentestee@mac.com> wrote:
> I am just getting started with Pen Testing and there is soooo much information 
> available.
> I am trying to get the most bang for my time spent in getting up to speed.
> What are the best exploits to start with so that I am likely to have the most 
> success.
> I am looking for suggestions from both within a network and from an external 
> test...please label internal or external when providing your response.
>
> What are the best links that list tools to use against exploits or exploits to 
> try and tool to use.
> A chart would be ideal.
>
> Are there better cmd line?
>
> Thanks!
> On the hunt!
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic
> See HOW Now with our 20/20 program!
>
> http://www.cenzic.com/c/2020
> ------------------------------------------------------------------------

--
http://www.smashthestack.org
http://www.mastersofthewang.com

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------