Supported Tools OS X 08-14-2014, 06:18 AM
#1
List of programs I have found to be helpful, although I did not compile this list I stand by these programs.
Some programs require X11 which was dropped by apple in 10.5 but you can download the open source alternative here.
Networking:
Nmap: Most commonly used port/service scanning tool. It works on any common platform.
Wire Shark: Another common tool used for logging network traffic.
Ettercap: Used for man in the middle attacks(arp poisoning). Useful when used in conjunction with Wire Shark.
SSL Strip: allows attacker to hijack ssl encrypted sessions while performing a man in the middle attack(ettercap). "Not actually sure if it'll work on mac, I use it on BackTrack"
THC Hydra: Network authentication cracker which supports many different services (http, ssh, etc..).
FireSheep: A Firefox extension for HTTP session hijacking on a local network.
Nikto: Free Web analytic tool for fining exploitable weaknesses in a web page. You can find the command-line version Here
Local/Exploit tools:
Metasploit: penetration testing framework for creating and deploying exploits.
John The Ripper: local tool for brute force and word list attacks against many hashing algorithms.
Kismac: Wireless scanning tool for finding networks and cracking WEP/WPA.
Miscellaneous:
Back Track: Linux distro designed purely for penetration testing. has most of the above tools (plus more) already installed and configured.
More tools can be found here.
Some programs require X11 which was dropped by apple in 10.5 but you can download the open source alternative here.
Networking:
Nmap: Most commonly used port/service scanning tool. It works on any common platform.
Wire Shark: Another common tool used for logging network traffic.
Ettercap: Used for man in the middle attacks(arp poisoning). Useful when used in conjunction with Wire Shark.
SSL Strip: allows attacker to hijack ssl encrypted sessions while performing a man in the middle attack(ettercap). "Not actually sure if it'll work on mac, I use it on BackTrack"
THC Hydra: Network authentication cracker which supports many different services (http, ssh, etc..).
FireSheep: A Firefox extension for HTTP session hijacking on a local network.
Nikto: Free Web analytic tool for fining exploitable weaknesses in a web page. You can find the command-line version Here
Local/Exploit tools:
Metasploit: penetration testing framework for creating and deploying exploits.
John The Ripper: local tool for brute force and word list attacks against many hashing algorithms.
Kismac: Wireless scanning tool for finding networks and cracking WEP/WPA.
Miscellaneous:
Back Track: Linux distro designed purely for penetration testing. has most of the above tools (plus more) already installed and configured.
More tools can be found here.
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
