Nip, Nip, Nipper! Hey guys, today I'm gonna share with you all one of the good pentesting apps Nipper for Android using which you can do a pretty much of information gathering. Well, you shouldn't expect it to work similar to the Kali tools, because as you know there are some restrictions while we use a third party app like these. So, without taking a lot of time, lets move on!
Well, its quite simple to use!
I make it clear before that your device must be rooted & make sure you have BusyBox binaries installed for the app to work as you expect. For non-rooted devices, some features won't work!
Download Nipper from here & install it.
Open the app. You will be greeted by a screen with a blank space at the center. Now, here's where you need to enter a URL to scan the target for.
After putting the URL, hit the small yellow-filled circle containing arrow. Here we go!
As you see guys, their I have the details for the target URL.
Now, lets know a bit about every single section here.
The first you see, is the target site itself, followed by the resolved IP of the domain! As we see, its 216.58.199.161
Now what you see is the name of server that is hosting this site. So, right there we see GSE, that's Google Servlet Engine. As this site is hosted by Blogger (owned by Google), we see the server name GSE.
So, knowing the server name is a first task for a pentester & here Nipper has helped us achieve it very easily!
Now friends, you can go further for DNS lookup also. So, a DNS Lookup will reveal the domain name servers for you, which are responsible to resolve the domain name into its associated IP. I hope you got an idea what I am talking about!
So, here we have the DNS lookup results with us!
You can do an nmap scan too, for checking the open ports. You can see this option right next to the DNS Lookup.
So, that was all guys about this cute little app Nipper! :) Hope you enjoyed reading this tutorial.