good first issuehelp wantedlet's document
Repository metrics
- Stars
- (30,937 stars)
- PR merge metrics
- (Avg merge 7d 5h) (321 merged PRs in 30d)
Description
A tracking issue for penetration testing tools.
Information Gathering:
- ace-voip
- amap → #9201
- APT2
- arp-scan → #1699
- asnmap → #16475
- Automater
- bing-ip2hosts
- braa → #9041
- CaseFile
- cdncheck
- CDPSnarf
- cisco-torch
- cloudlist
- copy-router-config
- DMitry
- dnmap
- dnsenum → #9195
- dnsmap → #8706
- DNSRecon
- dnstracer → #8707
- dnswalk
- dnsx → #12618
- DotDotPwn
- enum4linux
- enumIAX
- EyeWitness
- Faraday
- Fierce
- Firewalk
- fragroute
- fragrouter
- Ghost Phisher
- GoLismero
- goofile
- gophish
- hping3 → #7147
- httpx → #12279
- ident-user-enum
- ike-scan
- InSpy
- InTrace
- iSMTP
- king phisher
- lbd
- Maltego Teeth
- masscan → #6986
- Metagoofil
- Miranda
- naabu → #12206
- nbtscan-unixwiz
- netdiscover
- Nikto → #1793
- Nmap #66
- ntop
- OSRFramework
- p0f
- Parsero
- Recon-ng → #16121
- SET
- shuffledns
- SMBMap → #7053
- smtp-user-enum
- snmp-check
- SPARTA
- sslcaudit
- SSLsplit
- sslstrip
- SSLyze
- subfinder → #2178
- Sublist3r → #4912
- THC-IPV6
- theHarvester → #4912
- TLSSLed
- twofi
- Unicornscan
- URLCrazy
- tcpdump → #138
- tshark (wireshark) → #2758
- WOL-E
- Xplico
-
zenmapGUI (Nmap) → #66 - zmap → #16056
Vulnerability Analysis:
- BBQSQL
- BED
- beef-xss
- cisco-auditing-tool
- cisco-global-exploiter
- cisco-ocs
- cisco-torch
- copy-router-config
- Doona
- DotDotPwn
- HexorBase
-
jSQL InjectionGUI - Lynis → #3034
- mdb-sql
- msfpc
- msfconsole → #13285
-
nessusGUI - Nmap → #66
- nuclei → #12252
- ohrwurm
- openvas
- Oscanner
- Powerfuzzer
- sfuzz
- setoolkit
- searchsploit → #6826
- SidGuesser
- SIPArmyKnife
- sqlitebrowser
- sqlmap → #2412
- Sqlninja
- sqlsus
- THC-IPV6
- tnscmd10g
- unix-privesc-check
- vuls
- Yersinia
Wireless Attacks
- Airbase-ng
- Aircrack-ng → #9913
- Airdecap-ng → #9974
- Airdecloak-ng
- Aireplay-ng → #9333
- airgeddon
- airgraph-ng
- Airmon-ng → #4974
- Airodump-ng → #9114
- airodump-ng-oui-update
- Airolib-ng
- Airserv-ng
- Airtun-ng
- Asleap
- Besside-ng
- Bluelog
- BlueMaho
- Bluepot
- BlueRanger
- Bluesnarfer
- Bully → #9561
- chirpw
- coWPAtty
- crackle → #13425
- cutycapt
- eapmd5pass
- Easside-ng
- Fern Wifi Cracker
- FreeRADIUS-WPE
- Ghost Phisher
- GISKismet
- Gqrx
- gr-scan
- hostapd-wpe
- ivstools
- kalibrate-rtl
- keepnote
- KillerBee
- Kismet → #10606
- makeivs-ng
- mdk3
- mdk4 → #16688
- mfcuk
- mfoc
- mfterm
- Multimon-NG
- Packetforge-ng
- phishx
- PixieWPS
- Pyrit → #9230
- Reaver
- redfang
- recordmydesktop
- RTLSDR Scanner
- Spooftooph
- Tkiptun-ng
- Wesside-ng
- Wifi Honey
- wifiphisher
- wifi pumpkin
- Wifitap
- Wifite
- wpaclean
Web Applications
- apache-users
- Arachni
- BBQSQL
- BlindElephant
- Burp Suite → #9104
- CutyCapt
- DAVTest
- deblaze
- DIRB → #6960
- DirBuster
- ffuf → #6183
- fimap
- FunkLoad
- Gobuster → #5188
- Grabber
- hURL
- httrack
- jboss-autopwn
- joomscan
-
jSQL InjectionGUI - katana → #12619
- Maltego Teeth
- Nikto → #1793
- OWASP ZAP
- PadBuster
- Paros
- Parsero
- plecost
- Powerfuzzer
- ProxyStrike
- Skipfish
- sqlmap → #2412
- Sqlninja
- sqlsus
- ua-tester
- Uniscan
- w3af
- WebScarab
- Webshag
- WebSlayer
- WebSploit
- Wfuzz → #9896
- WhatWeb
- WPScan
- XSSer
- zaproxy
Forensics Tools
-
autopsyGUI tool. It's backend is The Sleuth Kit - The Sleuth Kit
- Binwalk → #3943
- bulk-extractor
- Capstone
- chkrootkit
- chntpw
- Cuckoo
- dc3dd
- ddrescue
- DFF
- diStorm3
- Dumpzilla → #7303
- extundelete
- Foremost
-
GalletaHas not been updated in 15 years and is used only for a deprecated browser -
GuymagerGUI tool - iPhone Backup Analyzer
- mat2 → #3207
- p0f
- pdf-parser
- pdfid
- pdgmail
- peepdf
- RegRipper
- Volatility
- Xplico
Stress Testing
- DHCPig
- FunkLoad
- iaxflood
- Inundator
- inviteflood
- ipv6-toolkit
- Reaver
- rtpflood
- SlowHTTPTest
- t50
- Termineter
- THC-IPV6
- THC-SSL-DOS
Sniffing & Spoofing
- arpspoof
- bettercap
- Burp Suite → #9104
- DNSChef
- driftnet
- dsniff
- fiked
- hamster-sidejack
- HexInject
- ettercap
- iaxflood
- inviteflood
- iSMTP
- isr-evilgrade
- macchanger → #4087
- mitmproxy → #743
- netcat → #145
- netsniff-ng
- ohrwurm
- protos-sip
- rebind
- responder
- rtpbreak
- rtpinsertsound
- rtpmixsound
- scapy
- sctpscan
- SIPArmyKnife
- SIPp
- SIPVicious
- SniffJoke
- SSLsplit
- sslstrip → #12681
- THC-IPV6
- VoIPHopper
- WebScarab
- Wifi Honey
-
WiresharkGUI tool, terminal equivalent is tshark - xspy
- Yersinia
- zaproxy
Password Attacks
- BruteSpray
- Burp Suite → #9104
- CeWL → #3945
- chntpw
- cisco-auditing-tool
- CmosPwd
- creddump
- crowbar
- crunch → #4719
- fcrackzip
- findmyhash
- gpp-decrypt
- hash-identifier
- Hashcat → #5900
- hashdeep
- HexorBase
- THC-Hydra → #3969
- John the Ripper → #3964
- Johnny
- keimpx
- Maltego Teeth
- Maskprocessor
- medusa → #3899
- multiforcer
- Ncrack
- oclgausscrack
- ophcrack
- PACK
- patator → #16054
- phrasendrescher
- polenum
- RainbowCrack
- rcracki-mt
- RSMangler
-
SecLists(a collection of wordlists, no executable) - SQLdict
- Statsprocessor
- THC-pptp-bruter
- TrueCrack
- WebScarab
- wordlists
- zaproxy
Maintaing Access
- beroot
-
bloodhoundGUI Visualize data collected from SharpHound - SharpHound
- CryptCat → #7226
- Cymothoa
- dbd
- dns2tcp
- dnscat2
- empire
- HTTPTunnel
- Intersect
- koadic
- meterpreter
- mimikatz
- Nishang
- polenum
- PowerSploit
- pupy
- pwnat
- pwncat
- RidEnum
- sbd
- shellter
- U3-Pwn
- Webshells
- Weevely
- Winexe
Reverse Engineering
- angr
- apktool → #4053
- dex2jar
- diStorm3
- edb-debugger
- ghidra
- jad
- javasnoop
-
JD-GUI(Java Decompiler GUI) - radare2
- OllyDbg
- smali
- Valgrind → #1407
- YARA → #20716
Hardware Hacking
- androguard
- android-sdk
- android tamer
- apktool → #4053
- Arduino
- dex2jar
- frida
- mastg
- mobsf
- nethunter
- quark engine
- Sakis3G
- smali
Reporting Tools
- CaseFile
- cherrytree
- CutyCapt
- defectdojo
- dos2unix → #4024
- Dradis
- Lair-framework
- MagicTree
- Metagoofil
- Nipper-ng
- pipal
- RDPY
- serpico
Exploit Development
- armitage
- commix
- exploit pack
- metasploit
- msfvenom #3476
- ptf
- pwntools #12352
- ropper
- routersploit
- shellnoob
- ysoserial