Tools for Performing Specialized System Attacks

Scapy

? can be used to craft and send malformed packets to a target device.

tcprelay

? is a suite of open-source utilities that can be used to edit and replay captured network traffic.

Wireshark/tcpdump

?  are both packet capturing programs. Wireshark is a powerful open-source protocol analysis tool that has the ability to decrypt many of the protocols used to conceal data, such as IPsec, Kerberos, and SSL/TLS. ? is often used to capture packets and ? is used to analyze the captured packets.

Mobile Security Framework (MobSF)

The ? can provide an automated evaluation of code and malware analysis using both static and dynamic analysis. The framework conducts a thorough assessment to determine parameters such as OS reputation, whether it has been rooted or jail broken, and app security.

Frida

? is an open-source tool that can work with a wide range of operating systems. It includes custom developer tools that help the pentester during application pentesting, as it can examine the plaintext data that is being passed.

Drozer

? is open-source software used for testing for vulnerabilities on Android devices. ? is an attack framework that helps find security flaws in apps and devices.

Android Debug Bridge (ADB)

? is a command-line tool that allows a user to communicate with an Android device to access certain features and debug the device.

Bluestrike

Bluetooth pentesting tool that targets the frequency hopping mechanism of Bluetooth and can disrupt the communication channel of targeted Bluetooth devices.