0trace Information Gathering Tools

0trace.sh is a shell script written by Michal Zalewski. It is a reconnaissance / firewall bypassing tool that enables hop enumeration ("traceroute") within an established TCP connection, such as a HTTP or SMTP session. This is opposed to sending stray packets, as traceroute-type tools usually do. In case of a successful scan, 0trace provides useful additional servers for the penetration tester.

0trace can help us to map internal topography of network

Syntax

Otrace iface target_ip [ target_port ]

Example

0trace.sh wlan0 66.211.181.161
0trace v0.01
[+] Waiting for traffic from target on wlan0...
[+] Traffic acquired, waiting for a gap...
[+] Target acquired: 192.168.2.2:52678 -> 66.211.181.161:80 (3672291202/932643334).
[+] Setting up a sniffer...
[+] Sending probes...

TRACE RESULTS
————-
1 192.168.1.1
2 x.x.x.x
4 x.x.x.x
5 180.87.38.5
6 80.231.217.17
7 80.231.217.2
8 80.231.200.6
9 80.231.91.26
10 80.231.139.2
11 80.231.138.18
12 66.198.70.2
13 66.198.111.98
14 192.205.35.13
15 12.122.86.6
16 12.122.1.2
17 12.122.2.53
18 12.122.31.85
19 12.123.38.141
20 12.90.113.6
Target reached.