SPARTA - Network scanning and Penetration Testing Tool

SPARTA is a python GUI application that simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access to their toolkit and by displaying all tool output in a convenient way. If less time is spent setting up commands and tools, more time can be spent focusing on analysing results.

Features

– Run nmap from SPARTA or import nmap XML output.
– Transparent staged nmap: get results quickly and achieve thorough coverage.
– Configurable context menu for each service. You can configure what to run on discovered services. Any tool that can be run from a terminal, can be run from SPARTA.
– You can run any script or tool on a service across all the hosts in scope, just with a click of the mouse.
– Define automated tasks for services (ie. Run nikto on every HTTP service, or sslscan on every ssl service).
– Default credentials check for most common services. Of course, this can also be configured to run automatically.
– Identify password reuse on the tested infrastructure. If any usernames/passwords are found by Hydra they are stored in internal wordlists which can then be used on other targets in the same network (breaking news: sysadmins reuse passwords).
– Ability to mark hosts that you have already worked on so that you don’t waste time looking at them again.
– Website screenshot taker so that you don’t waste time on less interesting web servers.

Sparta integrates these tools to a get more effective and useful recon results

• Nmap
  
• Hydra
  
• Nikto
  
• CutyCapt
  
• Mysql-default
  
• Snmp-enum
  
• Smtp-enum-vrfy
  
• Snmp-default
  
• Snmp-check
  
• Netcat
  

Sparta is inbuilt on latest Kali versions. If sparta is not present on your kali just install it by typing

# apt install sparta

How to Use

1. Start Kali. Go to Applications >> Information Gathering >> Sparta

Or you can simply enter sparta on terminal

2. Click on add hosts to add the ip or ip range we want to scan ( Before scanning make sure that you are authorized to do any tests on that network or ip)

3. Analyzing the results.

The results will be like this

the reaults shows there is an apache server running on the system. As the port 80 is open the Nikto scan will automatically start. It will check for kind of webserver is present in the given ip address.

Sparta will automatically take a screenshot of the indexpage of the webserver.

Sparta will show the list of tools used in a specific scan. For seeing the list of tools used for a specific scan click on the tools tab

We can do a brute force attack on the preferred ip if needed for that click on the brute tab. There we can assign the password list and information needed and start the attack.