tldr-pages/tldr

Let's document: pen-testing tools

Open

#6,863 opened on Oct 7, 2021

View on GitHub
 (14 comments) (6 reactions) (0 assignees)Shell (2,507 forks)batch import
good first issuehelp wantedlet's document

Repository metrics

Stars
 (30,937 stars)
PR merge metrics
 (Avg merge 7d 5h) (321 merged PRs in 30d)

Description

A tracking issue for penetration testing tools.

Information Gathering:

  • ace-voip
  • amap → #9201
  • APT2
  • arp-scan → #1699
  • asnmap → #16475
  • Automater
  • bing-ip2hosts
  • braa → #9041
  • CaseFile
  • cdncheck
  • CDPSnarf
  • cisco-torch
  • cloudlist
  • copy-router-config
  • DMitry
  • dnmap
  • dnsenum → #9195
  • dnsmap → #8706
  • DNSRecon
  • dnstracer → #8707
  • dnswalk
  • dnsx → #12618
  • DotDotPwn
  • enum4linux
  • enumIAX
  • EyeWitness
  • Faraday
  • Fierce
  • Firewalk
  • fragroute
  • fragrouter
  • Ghost Phisher
  • GoLismero
  • goofile
  • gophish
  • hping3 → #7147
  • httpx → #12279
  • ident-user-enum
  • ike-scan
  • InSpy
  • InTrace
  • iSMTP
  • king phisher
  • lbd
  • Maltego Teeth
  • masscan → #6986
  • Metagoofil
  • Miranda
  • naabu → #12206
  • nbtscan-unixwiz
  • netdiscover
  • Nikto → #1793
  • Nmap #66
  • ntop
  • OSRFramework
  • p0f
  • Parsero
  • Recon-ng → #16121
  • SET
  • shuffledns
  • SMBMap → #7053
  • smtp-user-enum
  • snmp-check
  • SPARTA
  • sslcaudit
  • SSLsplit
  • sslstrip
  • SSLyze
  • subfinder → #2178
  • Sublist3r → #4912
  • THC-IPV6
  • theHarvester → #4912
  • TLSSLed
  • twofi
  • Unicornscan
  • URLCrazy
  • tcpdump → #138
  • tshark (wireshark) → #2758
  • WOL-E
  • Xplico
  • zenmap GUI (Nmap) → #66
  • zmap → #16056

Vulnerability Analysis:

  • BBQSQL
  • BED
  • beef-xss
  • cisco-auditing-tool
  • cisco-global-exploiter
  • cisco-ocs
  • cisco-torch
  • copy-router-config
  • Doona
  • DotDotPwn
  • HexorBase
  • jSQL Injection GUI
  • Lynis → #3034
  • mdb-sql
  • msfpc
  • msfconsole → #13285
  • nessus GUI
  • Nmap → #66
  • nuclei → #12252
  • ohrwurm
  • openvas
  • Oscanner
  • Powerfuzzer
  • sfuzz
  • setoolkit
  • searchsploit → #6826
  • SidGuesser
  • SIPArmyKnife
  • sqlitebrowser
  • sqlmap → #2412
  • Sqlninja
  • sqlsus
  • THC-IPV6
  • tnscmd10g
  • unix-privesc-check
  • vuls
  • Yersinia

Wireless Attacks

  • Airbase-ng
  • Aircrack-ng → #9913
  • Airdecap-ng → #9974
  • Airdecloak-ng
  • Aireplay-ng → #9333
  • airgeddon
  • airgraph-ng
  • Airmon-ng → #4974
  • Airodump-ng → #9114
  • airodump-ng-oui-update
  • Airolib-ng
  • Airserv-ng
  • Airtun-ng
  • Asleap
  • Besside-ng
  • Bluelog
  • BlueMaho
  • Bluepot
  • BlueRanger
  • Bluesnarfer
  • Bully → #9561
  • chirpw
  • coWPAtty
  • crackle → #13425
  • cutycapt
  • eapmd5pass
  • Easside-ng
  • Fern Wifi Cracker
  • FreeRADIUS-WPE
  • Ghost Phisher
  • GISKismet
  • Gqrx
  • gr-scan
  • hostapd-wpe
  • ivstools
  • kalibrate-rtl
  • keepnote
  • KillerBee
  • Kismet → #10606
  • makeivs-ng
  • mdk3
  • mdk4 → #16688
  • mfcuk
  • mfoc
  • mfterm
  • Multimon-NG
  • Packetforge-ng
  • phishx
  • PixieWPS
  • Pyrit → #9230
  • Reaver
  • redfang
  • recordmydesktop
  • RTLSDR Scanner
  • Spooftooph
  • Tkiptun-ng
  • Wesside-ng
  • Wifi Honey
  • wifiphisher
  • wifi pumpkin
  • Wifitap
  • Wifite
  • wpaclean

Web Applications

  • apache-users
  • Arachni
  • BBQSQL
  • BlindElephant
  • Burp Suite → #9104
  • CutyCapt
  • DAVTest
  • deblaze
  • DIRB → #6960
  • DirBuster
  • ffuf → #6183
  • fimap
  • FunkLoad
  • Gobuster → #5188
  • Grabber
  • hURL
  • httrack
  • jboss-autopwn
  • joomscan
  • jSQL Injection GUI
  • katana → #12619
  • Maltego Teeth
  • Nikto → #1793
  • OWASP ZAP
  • PadBuster
  • Paros
  • Parsero
  • plecost
  • Powerfuzzer
  • ProxyStrike
  • Skipfish
  • sqlmap → #2412
  • Sqlninja
  • sqlsus
  • ua-tester
  • Uniscan
  • w3af
  • WebScarab
  • Webshag
  • WebSlayer
  • WebSploit
  • Wfuzz → #9896
  • WhatWeb
  • WPScan
  • XSSer
  • zaproxy

Forensics Tools

  • autopsy GUI tool. It's backend is The Sleuth Kit
  • The Sleuth Kit
  • Binwalk → #3943
  • bulk-extractor
  • Capstone
  • chkrootkit
  • chntpw
  • Cuckoo
  • dc3dd
  • ddrescue
  • DFF
  • diStorm3
  • Dumpzilla → #7303
  • extundelete
  • Foremost
  • Galleta Has not been updated in 15 years and is used only for a deprecated browser
  • Guymager GUI tool
  • iPhone Backup Analyzer
  • mat2 → #3207
  • p0f
  • pdf-parser
  • pdfid
  • pdgmail
  • peepdf
  • RegRipper
  • Volatility
  • Xplico

Stress Testing

  • DHCPig
  • FunkLoad
  • iaxflood
  • Inundator
  • inviteflood
  • ipv6-toolkit
  • Reaver
  • rtpflood
  • SlowHTTPTest
  • t50
  • Termineter
  • THC-IPV6
  • THC-SSL-DOS

Sniffing & Spoofing

  • arpspoof
  • bettercap
  • Burp Suite → #9104
  • DNSChef
  • driftnet
  • dsniff
  • fiked
  • hamster-sidejack
  • HexInject
  • ettercap
  • iaxflood
  • inviteflood
  • iSMTP
  • isr-evilgrade
  • macchanger → #4087
  • mitmproxy → #743
  • netcat → #145
  • netsniff-ng
  • ohrwurm
  • protos-sip
  • rebind
  • responder
  • rtpbreak
  • rtpinsertsound
  • rtpmixsound
  • scapy
  • sctpscan
  • SIPArmyKnife
  • SIPp
  • SIPVicious
  • SniffJoke
  • SSLsplit
  • sslstrip → #12681
  • THC-IPV6
  • VoIPHopper
  • WebScarab
  • Wifi Honey
  • Wireshark GUI tool, terminal equivalent is tshark
  • xspy
  • Yersinia
  • zaproxy

Password Attacks

  • BruteSpray
  • Burp Suite → #9104
  • CeWL → #3945
  • chntpw
  • cisco-auditing-tool
  • CmosPwd
  • creddump
  • crowbar
  • crunch → #4719
  • fcrackzip
  • findmyhash
  • gpp-decrypt
  • hash-identifier
  • Hashcat → #5900
  • hashdeep
  • HexorBase
  • THC-Hydra → #3969
  • John the Ripper → #3964
  • Johnny
  • keimpx
  • Maltego Teeth
  • Maskprocessor
  • medusa → #3899
  • multiforcer
  • Ncrack
  • oclgausscrack
  • ophcrack
  • PACK
  • patator → #16054
  • phrasendrescher
  • polenum
  • RainbowCrack
  • rcracki-mt
  • RSMangler
  • SecLists (a collection of wordlists, no executable)
  • SQLdict
  • Statsprocessor
  • THC-pptp-bruter
  • TrueCrack
  • WebScarab
  • wordlists
  • zaproxy

Maintaing Access

  • beroot
  • bloodhound GUI Visualize data collected from SharpHound
  • SharpHound
  • CryptCat → #7226
  • Cymothoa
  • dbd
  • dns2tcp
  • dnscat2
  • empire
  • HTTPTunnel
  • Intersect
  • koadic
  • meterpreter
  • mimikatz
  • Nishang
  • polenum
  • PowerSploit
  • pupy
  • pwnat
  • pwncat
  • RidEnum
  • sbd
  • shellter
  • U3-Pwn
  • Webshells
  • Weevely
  • Winexe

Reverse Engineering

  • angr
  • apktool → #4053
  • dex2jar
  • diStorm3
  • edb-debugger
  • ghidra
  • jad
  • javasnoop
  • JD-GUI (Java Decompiler GUI)
  • radare2
  • OllyDbg
  • smali
  • Valgrind → #1407
  • YARA → #20716

Hardware Hacking

  • androguard
  • android-sdk
  • android tamer
  • apktool → #4053
  • Arduino
  • dex2jar
  • frida
  • mastg
  • mobsf
  • nethunter
  • quark engine
  • Sakis3G
  • smali

Reporting Tools

  • CaseFile
  • cherrytree
  • CutyCapt
  • defectdojo
  • dos2unix → #4024
  • Dradis
  • Lair-framework
  • MagicTree
  • Metagoofil
  • Nipper-ng
  • pipal
  • RDPY
  • serpico

Exploit Development

  • armitage
  • commix
  • exploit pack
  • metasploit
  • msfvenom #3476
  • ptf
  • pwntools #12352
  • ropper
  • routersploit
  • shellnoob
  • ysoserial

Contributor guide