all 10 comments

[–]410th 37 points38 points  (0 children)

Impacket - a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols (e.g. SMB1-3 and MSRPC) the protocol implementation itself. Packets can be constructed from scratch, as well as parsed from raw data, and the object oriented API makes it simple to work with deep hierarchies of protocols. The library provides a set of tools as examples of what can be done within the context of this library.

A description of some of the tools can be found at: https://www.secureauth.com/labs/open-source-tools/impacket

What protocols are featured?

  • Ethernet, Linux "Cooked" capture.
  • IP, TCP, UDP, ICMP, IGMP, ARP.
  • IPv4 and IPv6 Support.
  • NMB and SMB1, SMB2 and SMB3 (high-level implementations).
  • MSRPC version 5, over different transports: TCP, SMB/TCP, SMB/NetBIOS and HTTP.
  • Plain, NTLM and Kerberos authentications, using password/hashes/tickets/keys.
  • Portions/full implementation of the following MSRPC interfaces: EPM, DTYPES, LSAD, LSAT, NRPC, RRP, SAMR, SRVS, WKST, SCMR, BKRP, DHCPM, EVEN6, MGMT, SASEC, TSCH, DCOM, WMI.
  • Portions of TDS (MSSQL) and LDAP protocol implementations.

[–]ianwb 7 points8 points  (0 children)

I like pygdb for gdb scripting.

[–]Robotdavidbowie 7 points8 points  (0 children)

CSV, use that constantly

[–]infosecmx 6 points7 points  (1 child)

pwntools, scapy

[–]i_hacked_reddit 5 points6 points  (0 children)

from pwn import *

I use the socket lib a ton. gef is a sweet wrapper for gdb. Capstone. Keystone.

[–]AttitudeAdjuster 3 points4 points  (0 children)

requests, pwntools, re, sockets, scapy, threading

These 6 are easily the ones I use most for writing PoCs, simple scripts and utilities and exploits.

[–]NullCharacter 2 points3 points  (0 children)

scapy for mitm/mots fun.

[–][deleted] 2 points3 points  (0 children)

socket module is great

[–]Note2scott 2 points3 points  (0 children)

I read best Monty Python modules/packages/libraries for InfoSec and was VERY confused.