‫Here we have some scripts which are very helpful in penetration tests.
‫The scripts that end with bruta perform brute force password guessing against the name services.
‫The scripts ending with info gets the information about the name services.
‫DNS recursion checks of a DNS server allows queries for third party names, DNS, Zohn transfer request
‫asone transfer a zaffar from a DNS server.
‫If the query is successful, all domains and domain types are returned along with common type specific
‫data as a way Amex and aspart or a HTP slow loris check test a web server for vulnerability to the slow
‫loris dos attack without actually launching a Dossi attack.
‫MMS as QOL info attempts to determine configuration and version information for Microsoft SQL Server
‫instances.
‫Ms.
‫Eskild dump hashes dump's the password hashes from an MSC Ewalt Server in a format suitable for cracking
‫bi tools such as John the Ripper and Bistrot attempts to retrieve the target's net bios, names and
‫Mac address by default.
‫The script displays the name of the computer and the logged in user.
‫If the verbosity is turned up, it displays all the names the system thinks it owns.
‫SMB Enum Users attempts to enumerate the users on a remote window system with as much information as
‫possible.
‫The goal of this script is to discover all user accounts that exist on a remote system, this can be
‫helpful for administration by seeing who has an account on a server or for penetration testing or network
‫footprinting by determining which accounts exist on a system.
‫SMB enum shares attempts to list shares, finding open shares is useful to a penetration tester because
‫there may be private files shared or if it's writable, it could be a good place to drop a Trojan or
‫to infect a file that's already there.
‫Knowing where the share is could make those kinds of test more useful, except that determining where
‫the share is requires administrative privileges already.
‫In a penetration test, you should try to pass the hash method to compromise systems, and the last
‫three scripts will be very helpful for your pass the hash attacks here you see some useful brute force
‫or dictionary attack scripts for FTP databases such as MySQL, Oracle or Msika SMP.
‫Telnet, etc..