VASTO - Virtualization ASsessment TOolkit

O VASTO é um conjunto de módulos para o Metasploit que tem por objetivo "testar" a segurança de ambientes virtualizados.

Baixe o VASTO:
wget http://vasto.nibblesec.org/VASTO.0.4.zip

Descompacte-o:
unzip VASTO.0.4.zip

Copie os módulos para seu diretório correspondente do Metasploit:
cp -r VERSION0.4/* metasploit-4.2.0/msf3/modules/auxiliary/

Veja as opções dos módulos e boa sorte.

- abiquo_guest_stealer.rb
Exploits a path traversal in Abiquo up to version 1.5

- abiquo_guest_stealer.rb
Exploits a path traversal in Abiquo up to version 1.5

- abiquo_poison.rb
Serves evil VM if a MITM is performed.

- eucalyptus_bouncer.rb
Turn Eucalyptus systems in proxy servers.

- eucalyptus_poison.rb
Serves evil VM if a MITM is performed.

- vmware_guest_stealer.rb
Exploits a path traversal in VMware products.

- vmware_login.rb
Brute forcing for VMware

- vmware_session_rider.rb
Local proxy to ride stolen SOAPID sessions with VI Client

- vmware_sfcbd_exec.rb
Command exec (authenticated) on Studio and Data Protection

- vmware_studio_upload.rb
Arbitrary file upload on Studio 2.0 beta

- vmware_updatemanager_traversal.rb
Jetty path traversal

- vmware_version.rb
Fingerprints VMware products

- vmware_vilurker.rb
MITM code execution against VI Client

- vmware_webaccess_portscan.rb
Turn VMware WebAccess into a portscanner (or a proxy)

- vmware_autopwn
Automatizes exploiting the updatemanager traversal to ride a session

- xen_login.rb
Brute forcer for XEN server


Fonte:
http://vasto.nibblesec.org/

Fierce Domain Scan

wget http://ha.ckers.org/fierce/fierce.pl
wget http://ha.ckers.org/fierce/hosts.txt
perl -MCPAN -e 'install Net::DNS'
perl -MCPAN -e 'install Net::hostent'
perl fierce.pl -dns exemplo.com hosts.txt

Fonte:
http://ha.ckers.org/fierce/