Termux Pentesting tool that works from your mobile phone: REDHAWK tutorial

Currently there are multiple varieties of tools for pentesting work, mainly for scanning the target system. This time, pentesting experts from the International Institute of Cyber Security (IICS) will show you how to use REDHAWK from your smartphone, as this scanning tool will give us all kinds of information about the target, including the type of lens, weaknesses and settings in general using the Termux emulator.

360 Mobile Vision - 360mobilevision.com North & South Carolina Security products and Systems Installations for Commercial and Residential - $55 Hourly Rate. ACCESS CONTROL, INTRUSION ALARM, ACCESS CONTROLLED GATES, INTERCOMS AND CCTV INSTALL OR REPAIR 360 Mobile Vision - 360mobilevision.com is committed to excellence in every aspect of our business. We uphold a standard of integrity bound by fairness, honesty and personal responsibility. Our distinction is the quality of service we bring to our customers. Accurate knowledge of our trade combined with ability is what makes us true professionals. Above all, we are watchful of our customers interests, and make their concerns the basis of our business.

Remember that this material was made for entirely academic purposes, so IICS is not responsible for any misuse that may be given to the tool.

DOWNLOAD AND INSTALLATION

To get started, as usual, we’ll update Termux and its contents with the following commands:

apt update && apt upgrade

Download from Github:

 apt install git

Download PHP:

apt install php

Download the script:

git clone https://github.com/Tuhinshubhra/RED_HAWK

Next we will run the following command:

cd RED_HAWK
php rhawk.php 

Termux Pentesting tool that works from your mobile phone: REDHAWK tutorial

After launching the tool, we enter the target URL (without HTTP/HTTPS) and select http/ https as the following item:

Next, we need to select the check type.

As pentesting experts show us, REDHAWK has multiple target website verification options:

  • BASIC SCAN:
    • Website name
    • IP address
    • Web server discovery
    • CMS discovery
    • Cloudflare discovery
    • robots.txt scanner
    • Whois search
    • Search by geo-IP
    • Banner analysis
    • DNS lookup
    • Subnet calculator
    • Nmap port scan
  • SUBDOMAIN SCANNER:
    • Subdomain
    • IP address
  • REVERSE IP SEARCH AND CMS DISCOVERY:
    • Host name
    • IP address
    • CMS
    • Scanner based on SQLi errors
  • BLOGGERS VIEW:
    • HTTP response code
    • Site name
    • Alexa ranking
    • Domain authority
    • Authority of the page
    • Extractor of links to social media
    • Link extraction
  • WORDPRESS TRACKING:
    • Scan confidential files
    • Version detection
    • Vulnerability Scanner Version
    • Crawler
    • MX search
  • SCAN ALL

For example, by choosing basic scanning, pentesting experts may discover that Cloudflare is installed on the site, allowing you to learn how to bypass this feature in a possible attack.

And that’s it. It seems very simple, but this tool will allow you to learn countless qualities of a specific platform before deploying a pentesting process. To learn more about information security risks, malware variants, vulnerabilities and information technologies, feel free to access the International Institute of Cyber Security (IICS) website.

The post Termux Pentesting tool that works from your mobile phone: REDHAWK tutorial appeared first on Cyber Security News | Exploit One | Hacking News.

By admin