tldr-pages/tldr

Let's document: pen-testing tools

Open

#6.863 geöffnet am 7. Okt. 2021

Auf GitHub ansehen
 (14 Kommentare) (6 Reaktionen) (0 zugewiesene Personen)Shell (2.507 Forks)batch import
good first issuehelp wantedlet's document

Repository-Metriken

Stars
 (30.937 Stars)
PR-Merge-Metriken
 (Durchschn. Merge 7T 5h) (321 gemergte PRs in 30 T)

Beschreibung

A tracking issue for penetration testing tools.

Information Gathering:

  • ace-voip
  • amap → #9201
  • APT2
  • arp-scan → #1699
  • asnmap → #16475
  • Automater
  • bing-ip2hosts
  • braa → #9041
  • CaseFile
  • cdncheck
  • CDPSnarf
  • cisco-torch
  • cloudlist
  • copy-router-config
  • DMitry
  • dnmap
  • dnsenum → #9195
  • dnsmap → #8706
  • DNSRecon
  • dnstracer → #8707
  • dnswalk
  • dnsx → #12618
  • DotDotPwn
  • enum4linux
  • enumIAX
  • EyeWitness
  • Faraday
  • Fierce
  • Firewalk
  • fragroute
  • fragrouter
  • Ghost Phisher
  • GoLismero
  • goofile
  • gophish
  • hping3 → #7147
  • httpx → #12279
  • ident-user-enum
  • ike-scan
  • InSpy
  • InTrace
  • iSMTP
  • king phisher
  • lbd
  • Maltego Teeth
  • masscan → #6986
  • Metagoofil
  • Miranda
  • naabu → #12206
  • nbtscan-unixwiz
  • netdiscover
  • Nikto → #1793
  • Nmap #66
  • ntop
  • OSRFramework
  • p0f
  • Parsero
  • Recon-ng → #16121
  • SET
  • shuffledns
  • SMBMap → #7053
  • smtp-user-enum
  • snmp-check
  • SPARTA
  • sslcaudit
  • SSLsplit
  • sslstrip
  • SSLyze
  • subfinder → #2178
  • Sublist3r → #4912
  • THC-IPV6
  • theHarvester → #4912
  • TLSSLed
  • twofi
  • Unicornscan
  • URLCrazy
  • tcpdump → #138
  • tshark (wireshark) → #2758
  • WOL-E
  • Xplico
  • zenmap GUI (Nmap) → #66
  • zmap → #16056

Vulnerability Analysis:

  • BBQSQL
  • BED
  • beef-xss
  • cisco-auditing-tool
  • cisco-global-exploiter
  • cisco-ocs
  • cisco-torch
  • copy-router-config
  • Doona
  • DotDotPwn
  • HexorBase
  • jSQL Injection GUI
  • Lynis → #3034
  • mdb-sql
  • msfpc
  • msfconsole → #13285
  • nessus GUI
  • Nmap → #66
  • nuclei → #12252
  • ohrwurm
  • openvas
  • Oscanner
  • Powerfuzzer
  • sfuzz
  • setoolkit
  • searchsploit → #6826
  • SidGuesser
  • SIPArmyKnife
  • sqlitebrowser
  • sqlmap → #2412
  • Sqlninja
  • sqlsus
  • THC-IPV6
  • tnscmd10g
  • unix-privesc-check
  • vuls
  • Yersinia

Wireless Attacks

  • Airbase-ng
  • Aircrack-ng → #9913
  • Airdecap-ng → #9974
  • Airdecloak-ng
  • Aireplay-ng → #9333
  • airgeddon
  • airgraph-ng
  • Airmon-ng → #4974
  • Airodump-ng → #9114
  • airodump-ng-oui-update
  • Airolib-ng
  • Airserv-ng
  • Airtun-ng
  • Asleap
  • Besside-ng
  • Bluelog
  • BlueMaho
  • Bluepot
  • BlueRanger
  • Bluesnarfer
  • Bully → #9561
  • chirpw
  • coWPAtty
  • crackle → #13425
  • cutycapt
  • eapmd5pass
  • Easside-ng
  • Fern Wifi Cracker
  • FreeRADIUS-WPE
  • Ghost Phisher
  • GISKismet
  • Gqrx
  • gr-scan
  • hostapd-wpe
  • ivstools
  • kalibrate-rtl
  • keepnote
  • KillerBee
  • Kismet → #10606
  • makeivs-ng
  • mdk3
  • mdk4 → #16688
  • mfcuk
  • mfoc
  • mfterm
  • Multimon-NG
  • Packetforge-ng
  • phishx
  • PixieWPS
  • Pyrit → #9230
  • Reaver
  • redfang
  • recordmydesktop
  • RTLSDR Scanner
  • Spooftooph
  • Tkiptun-ng
  • Wesside-ng
  • Wifi Honey
  • wifiphisher
  • wifi pumpkin
  • Wifitap
  • Wifite
  • wpaclean

Web Applications

  • apache-users
  • Arachni
  • BBQSQL
  • BlindElephant
  • Burp Suite → #9104
  • CutyCapt
  • DAVTest
  • deblaze
  • DIRB → #6960
  • DirBuster
  • ffuf → #6183
  • fimap
  • FunkLoad
  • Gobuster → #5188
  • Grabber
  • hURL
  • httrack
  • jboss-autopwn
  • joomscan
  • jSQL Injection GUI
  • katana → #12619
  • Maltego Teeth
  • Nikto → #1793
  • OWASP ZAP
  • PadBuster
  • Paros
  • Parsero
  • plecost
  • Powerfuzzer
  • ProxyStrike
  • Skipfish
  • sqlmap → #2412
  • Sqlninja
  • sqlsus
  • ua-tester
  • Uniscan
  • w3af
  • WebScarab
  • Webshag
  • WebSlayer
  • WebSploit
  • Wfuzz → #9896
  • WhatWeb
  • WPScan
  • XSSer
  • zaproxy

Forensics Tools

  • autopsy GUI tool. It's backend is The Sleuth Kit
  • The Sleuth Kit
  • Binwalk → #3943
  • bulk-extractor
  • Capstone
  • chkrootkit
  • chntpw
  • Cuckoo
  • dc3dd
  • ddrescue
  • DFF
  • diStorm3
  • Dumpzilla → #7303
  • extundelete
  • Foremost
  • Galleta Has not been updated in 15 years and is used only for a deprecated browser
  • Guymager GUI tool
  • iPhone Backup Analyzer
  • mat2 → #3207
  • p0f
  • pdf-parser
  • pdfid
  • pdgmail
  • peepdf
  • RegRipper
  • Volatility
  • Xplico

Stress Testing

  • DHCPig
  • FunkLoad
  • iaxflood
  • Inundator
  • inviteflood
  • ipv6-toolkit
  • Reaver
  • rtpflood
  • SlowHTTPTest
  • t50
  • Termineter
  • THC-IPV6
  • THC-SSL-DOS

Sniffing & Spoofing

  • arpspoof
  • bettercap
  • Burp Suite → #9104
  • DNSChef
  • driftnet
  • dsniff
  • fiked
  • hamster-sidejack
  • HexInject
  • ettercap
  • iaxflood
  • inviteflood
  • iSMTP
  • isr-evilgrade
  • macchanger → #4087
  • mitmproxy → #743
  • netcat → #145
  • netsniff-ng
  • ohrwurm
  • protos-sip
  • rebind
  • responder
  • rtpbreak
  • rtpinsertsound
  • rtpmixsound
  • scapy
  • sctpscan
  • SIPArmyKnife
  • SIPp
  • SIPVicious
  • SniffJoke
  • SSLsplit
  • sslstrip → #12681
  • THC-IPV6
  • VoIPHopper
  • WebScarab
  • Wifi Honey
  • Wireshark GUI tool, terminal equivalent is tshark
  • xspy
  • Yersinia
  • zaproxy

Password Attacks

  • BruteSpray
  • Burp Suite → #9104
  • CeWL → #3945
  • chntpw
  • cisco-auditing-tool
  • CmosPwd
  • creddump
  • crowbar
  • crunch → #4719
  • fcrackzip
  • findmyhash
  • gpp-decrypt
  • hash-identifier
  • Hashcat → #5900
  • hashdeep
  • HexorBase
  • THC-Hydra → #3969
  • John the Ripper → #3964
  • Johnny
  • keimpx
  • Maltego Teeth
  • Maskprocessor
  • medusa → #3899
  • multiforcer
  • Ncrack
  • oclgausscrack
  • ophcrack
  • PACK
  • patator → #16054
  • phrasendrescher
  • polenum
  • RainbowCrack
  • rcracki-mt
  • RSMangler
  • SecLists (a collection of wordlists, no executable)
  • SQLdict
  • Statsprocessor
  • THC-pptp-bruter
  • TrueCrack
  • WebScarab
  • wordlists
  • zaproxy

Maintaing Access

  • beroot
  • bloodhound GUI Visualize data collected from SharpHound
  • SharpHound
  • CryptCat → #7226
  • Cymothoa
  • dbd
  • dns2tcp
  • dnscat2
  • empire
  • HTTPTunnel
  • Intersect
  • koadic
  • meterpreter
  • mimikatz
  • Nishang
  • polenum
  • PowerSploit
  • pupy
  • pwnat
  • pwncat
  • RidEnum
  • sbd
  • shellter
  • U3-Pwn
  • Webshells
  • Weevely
  • Winexe

Reverse Engineering

  • angr
  • apktool → #4053
  • dex2jar
  • diStorm3
  • edb-debugger
  • ghidra
  • jad
  • javasnoop
  • JD-GUI (Java Decompiler GUI)
  • radare2
  • OllyDbg
  • smali
  • Valgrind → #1407
  • YARA → #20716

Hardware Hacking

  • androguard
  • android-sdk
  • android tamer
  • apktool → #4053
  • Arduino
  • dex2jar
  • frida
  • mastg
  • mobsf
  • nethunter
  • quark engine
  • Sakis3G
  • smali

Reporting Tools

  • CaseFile
  • cherrytree
  • CutyCapt
  • defectdojo
  • dos2unix → #4024
  • Dradis
  • Lair-framework
  • MagicTree
  • Metagoofil
  • Nipper-ng
  • pipal
  • RDPY
  • serpico

Exploit Development

  • armitage
  • commix
  • exploit pack
  • metasploit
  • msfvenom #3476
  • ptf
  • pwntools #12352
  • ropper
  • routersploit
  • shellnoob
  • ysoserial

Contributor Guide