渗透测试套装 - Inguma
发布:wpulog | 发布时间: 2011年9月15日Inguma是一个使用python编写的渗透测试套件。Ingum具有一个模块化的框架,包括的模块有主机发现、信息收集、目标fuzz、暴力破解用户名/密码和exploit。不过目前Inguma的exploit模块能力比较有限。目前Inguma更新至0.4版,新版主要改变如下:
* The GUI has been modified and cleaned in order to give more space to the most active areas like the network map, the RCE interface or the exploits/fuzzing areas.
* Last opened/saved KB are now easily accesible on the toolbar.
* A warning icon appears in the “Logs” tab when new content is available.
* The bottom status bar has gained more functionality showing information regarding KB in use and targets or vulnerabilities discovered.
* We have updated Bokken subproject to the last stable version available, 1.0. It features an interactive mode, better code disassembly and analysis and better integration with Inguma’s GUI. More information about Bokken can be found here.
* A systray allows now to hide the Inguma GUI while it’s working and it will warn you once the running modules have finished.
* A new fuzzing tab has been added to the Exploits workspace with two different fuzzers: Krash and Scapy.
* Krash fuzzer has been part of Inguma project for a while but now it can be used directly from the GUI. Just select the target, the packet to be fuzzed and press start. Read more about Krash fuzzer here.
* The Scapy fuzzer is a GUI wrapper to the scapy’s fuzz function that makes network fuzzing very easy. It’s full drag-and-drop-driven and, in order to start, you just have to compose a packet by dropping layers, select the layers/fields to be fuzzed and select an output directory to save the sent and received packets.
* The CLI interfacehas received some attention again and a few new shortcuts like ‘?’ for help or ‘..’ to go back to the main menu are now available in nearly all the modules.
o Inguma CLI now works better on MacOS with autocompletion and key bindings.
o All the fuzzing modules are now under the fuzzers category and have been fixed.
* Some additional minor changes include:
o A new module to find subdomains is now available.
o The option to automatically audit a new target has been added to the “New target” dialog.
o Lots of code reafctoring and bugs fixed.
工具下载:http://inguma.eu/projects/inguma/files
出自:BugZone - http://www.pulog.org/tools/2233/Inguma/ 转载必须注明!
发表评论
◎欢迎参与讨论,请在这里发表您的看法、交流您的观点。



