PenTest Tools Flashcards
(16 cards)
What is Frida used for?
Mobile devices, dynamic analysis, runtime hooking (injecting scripts, intercepting function calls, and manipulating runtime data)
What is ADB used for?
Command-line tool for communicating with Android devices. Allows app installs, file access, and debugging.
What is Drozer used for?
Android vulnerability assessment.
What are the three C2 frameworks?
Covenant, Empire, Mythic
What is Empire?
A post exploration framework that uses powershell and python. Keylogging, C2.
What is covenant?
A .net based c2 framework designed specifically to leverage the .net framework on multiple platforms.
What is Mythic?
Cross platform CLI-based, open source C2 framework. Very modular. Heavy API support with many payloads.
What is a commonly exploited piece of SOAP Service Oriented Architecture Protocol?
XML. SOAP is frequently used for remote procedure calls (RPC) and typically uses HTTP/SMTP for transport.
What are the steps of NIST SP 800-115?
Planning, Discovery, Analysis/Reporting
What is hping?
An open source packet crafting tool, allows for custom TCP/IP packets.
What is MDK4?
A wi-fi testing tooo. Deauth, stress testing, fuzzing.
What is reaver?
A tool for exploiting WPS.
What is Kismet?
Wi-Fi detection mainly.
What is GLBA?
Financial Institution regulation.
What is Frida used for vs MobSF?
Software debugging and manipulation on mobile devices.
