Security Tools

Yaptest is another nice penetration testing framework that makes penetration testing job a fun. Yaptest aims to make it easy for a penetration tester to automate the testing process. If the network is too large, this tool works good.

Below are some examples of tasks which would be easy to automate using yaptest:

1. Run nikto on anything nmap thinks is an HTTP service
2. Run hydra on every host with TCP port 21 open
3. Attempt upload a file to any TFTP servers found
4. Run onesixtyone on all hosts that are up
5. Try metasploit's solaris_kcms_readfile exploit against any hosts running kcmsd

Yaptest is the glue between your favourite tools and the knowledge base gathered during your pentest. It handles all the mundane stuff that can easily be automated and leaves you free to get on with owning boxes demonstrating risk using techniques that yaptest doesn't know about yet.

Download and Read More