Websites for open source research and pen-testing

[theprez98]

As many of you know, DaKahuna and I have done some research and presented in the past on penetration testing using a web browser (typically Firefox because of the add-on capability). As we continue to move forward with this research, I am interested in finding out what your favorite websites are for open source research and pen-testing.

Here are a few examples that I use:

http://centralops.net/co/
http://www.all-nettools.com/toolbox/
http://www.hackerwhacker.com/

What are your favorite browser-based tools for open source research and penetration testing?

[purehate]

Heres a few of my favorites for you guys.


http://pipl.com/

http://www.yougetsignal.com/tools/visual-tracert/

http://www.iptools.com/

http://www.robtex.com/

http://www.insidepro.com/hashes.php?lang=eng

http://www.virustotal.com/

http://tracksomebody.com/

http://www.shadowserver.org/wiki/

http://nmap-online.com/

http://www.hidemyass.com/

[theprez98]

Heres a few of my favorites for you guys.

Now we're talking...

Keep 'em comin', boys.

[thorin]

http://dnssy.com/
http://member.dnsstuff.com/pages/dnsreport.php (Not as useful as it used to be)
http://centralops.net/co/DomainDossier.aspx
http://news.netcraft.com/

http://dig.menandmice.com/knowledgehub/tools/dig

http://www.xssed.com/

http://www.netdigix.com/servers.html
http://www.traceroute.org

http://www.subnetmask.info/
http://www.insidepro.com/hashes.php?lang=eng

http://www.curreedy.com/stu/nic/

http://browserspy.dk/

Maybe you don't need this but for Firefox checkout Passive Recon Firefox plugin and FireCAT.

[xorred]

here are some of mine:
http://www.robtex.com/dns/abv.bg.html
http://madnet.name/tools/madss/
http://kartoo.com/
http://serversniff.de/content.php?do=subdomains
http://sucuri.net/index.php
http://www.mob.net/~ted/tools/mx.php...uperhosting.bg

Hope you like them boys!

[imported_cybrsnpr]

http://ipindex.homelinux.net/index.p...ion=show_class
http://tatumweb.com/iptools.htm
http://www.ris.ripe.net/bgplay/
http://www.cidr-report.org/as2.0/
http://www.spacereg.com/a.rpl?m=dig
http://www.digitalpoint.com/tools/zone-transfer/
http://www.zonecut.net/
http://www.rexswain.com/httpview.html
http://www.opus1.com/www/traceroute.html
http://www.technicalinfo.net/tools/index.html
http://web-sniffer.net/

Most of these provide similar services as others that have been posted, but I have found that having multiple sites to use is a great benefit. For example, it is less likely a single site will get blocked if you spread the wealth amongst many. When dealing with routing, using sites in different geo-loc, you may discover multiple paths/routes to a target.

[shroomy_bee]

lcamtuf.coredump.cx/p0f-help/ - online fingerprinter

w.fakenamegenerator.com/free-tools.php

w.firewall.cx/modules.php?name=Cisco_Decrypter

w.pcflank.com/about.htm - I haven't actually used this

w.elcomsoft.com/products.html - free trials, might be useful for onsite assessments

w.milw0rm.com/cracker/insert.php

In terms of social-engineering, there's a huge amount of sites with personal details on, esp. for the USA (for UK you tend to have to buy the disks).

[ambreen]

do add my favoirite website for open source software tools and scripts. They offer a collection of free and commercial scripts and softwares. Testing Tools scripts and commercial scripts and software. Do check them at testertools.com