Question

Principles of Information Security (6th Edition)

Exercise 3:

This chapter lists five tools that can be used by security administrators, network administrators, and attackers alike. Search the Web for three to five other tools that fit the description.

Exercise 4:

Using a Web browser and the names of the tools you found in Exercise 3, find a site that claims to be dedicated to supporting hackers. Do you find any references to other hacker tools? If you do, create a list of the tools along with a short description of what they do and how they work.

Answer 1

Exercise 3

Number of tools which can be used by security administrators, network administrators, and attackers for their good or bad use.

Let us see some of the tools:

1. Absinthe : Security and network administrators use this tool to test vulnerabilities of database, but same can be used by hackers to jail break in the system or network by inserting malicious commands.
2. NetCat : Adminitrators find this tool useful in issuing commands, configuring remote machines and automate control procedures. But this same utility is lethal when used by hackers who can script remote procedures and control remote systems as zombies.
3. AttackAPI: It is PHP and JavaScipt based tool which helps administrators to make routines, protocols, share data between different applications and users. Hackers can guess users, passwords, map network using API client browsers
4. MetaSpoilt Framework: It is an open source penetration testing software which helps administrators in finding exploits. It can be exploited by hackers to break in network or computer system and make server and client attacks.
5. Ettercap : It can sniffs attack, connections and alert administrators. But its scripting abilities are used of hackers to manipulate network traffic .