‫Here we have some scripts which are very helpful in penetration tests.
‫The scripts that end with brute perform, brute force password guessing against the name services.
‫The scripts ending with info gets the information about the named services.
‫DNS recursion checks of a DNS server allows queries for third party names, DNS zone transfer request,
‫zone transfer access FR from a DNS server.
‫If the query is successful, all domains and domain types are returned, along with common type specific
‫data as a way, Amex and SPDR or a HTP slow loris check test, a web server for vulnerability to the
‫slow Loris DDoS attack without actually launching a DDoS attack.
‫Ms SQL Info attempts to determine configuration and version information for Microsoft SQL Server instances.
‫Ms.
‫SQL dump hashes dumps the password hashes from an MySQL server in a format suitable for cracking bi
‫tools such as John the River and Beast that attempts to retrieve the target's net bios, names and Mac
‫address.
‫By default, the script displays the name of their computer and the logged in user.
‫If the verbosity is turned up, it displays all the names the system thinks it owns.
‫SMB Enum users attempts to enumerate the users on a remote Windows system with as much information as
‫possible.
‫The goal of this script is to discover all user accounts that exist on a remote system.
‫This can be helpful for administration by seeing who has an account on a server or for penetration testing
‫or network foot printing by determining which accounts exist on a system.
‫SMB Inam shares attempts to list shares finding open shares is useful to a penetration tester because
‫there may be private files shared or if it's readable.
‫It could be a good place to drop a Trojan or who, in fact, a file that's already there.
‫Knowing where the share is could make those kinds of tests more useful, except the determining where
‫the share is requires administrative privileges already.
‫And a penetration test, you should try the pass the hash method to compromise systems.
‫And the last three scripts will be very helpful for your pass the hash attacks.
‫Here you see some useful brute force or dictionary attack scripts for FTP databases such as my sequel
‫Oracle or MSI Equal S&P.
‫Telnet, cetera.