903 lines
52 KiB
Markdown
903 lines
52 KiB
Markdown
---
|
||
title: "Hacking"
|
||
date:
|
||
draft: false
|
||
---
|
||
|
||
</br>
|
||
|
||
|
||
|
||
</br>
|
||
|
||
|
||
*"The truth is revealed by removing things that stand in its light, an art not unlike sculpture, in which the artist creates, not by building, but by hacking away." - Alan Watts*
|
||
|
||
Welcome to the Hacking section of Liberty tools! Hacking should be used to increase your knowledge and harden your defenses. Please use these tools responsibly.
|
||
|
||
---
|
||
|
||
### **Anonymity**
|
||
|
||
- [**BinGoo**](https://github.com/Hood3dRob1n/BinGoo) - GNU/Linux bash based Bing and Google Dorking Tool.
|
||
|
||
- [**Censys**](https://www.censys.io/) - Collects data on hosts and websites through daily ZMap and ZGrab scans.
|
||
|
||
- [**creepy**](https://github.com/ilektrojohn/creepy) - Geolocation OSINT tool.
|
||
|
||
- [**dork-cli**](https://github.com/jgor/dork-cli) - Command line Google dork tool.
|
||
|
||
- [**Fast-recon**](https://github.com/DanMcInerney/fast-recon) - Perform Google dorks against a domain.
|
||
|
||
- [**GooDork**](https://github.com/k3170makan/GooDork) - Command line Google dorking tool.
|
||
|
||
- [**Google Hacking Database**](https://www.exploit-db.com/google-hacking-database) - Database of Google dorks; can be used for recon.
|
||
|
||
- [**Google-dorks**](https://github.com/JohnTroony/Google-dorks) - Common Google dorks and others you probably don’t know.
|
||
|
||
- [**I2P**](https://geti2p.net/) - The Invisible Internet Project.
|
||
|
||
- [**Maltego**](http://www.paterva.com/web7/) - One of the Hacking Tools and Proprietary software for open source intelligence and forensics, from Paterva.
|
||
|
||
- [**metagoofil**](https://github.com/laramies/metagoofil) - Metadata harvester.
|
||
|
||
- [**Nipe**](https://github.com/GouveaHeitor/nipe) - Script to redirect all traffic from the machine to the Tor network.
|
||
|
||
- [**OnionScan**](https://onionscan.org/) - One of the Hacking Tools for investigating the Dark Web by finding operational security issues introduced by Tor hidden service operators.
|
||
|
||
- [**recon-ng**](https://github.com/lanmaster53/recon-ng) - One of the Hacking Tools Full-featured Web Reconnaissance framework written in Python.
|
||
|
||
- [**snitch**](https://github.com/Smaash/snitch) - Information gathering via dorks.
|
||
|
||
- [**Spiderfoot**](http://www.spiderfoot.net/) - Multi-source OSINT automation tool with a Web UI and report visualizations.
|
||
|
||
- [**theHarvester**](https://github.com/laramies/theHarvester) - E-mail, subdomain and people names harvester.
|
||
|
||
- [**Tor**](https://www.torproject.org/) - Free software and onion routed overlay network that helps you defend against traffic analysis.
|
||
|
||
- [**Virus Total**](https://www.virustotal.com/) - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware.
|
||
|
||
- [**What Every Browser Knows About You**](http://webkay.robinlinus.com/) - Comprehensive detection page to test your own Web browser’s configuration for privacy and identity leaks.
|
||
|
||
- [**ZoomEye**](https://www.zoomeye.org/) - Search engine for cyberspace that lets the user find specific network components.
|
||
|
||
---
|
||
|
||
### Bug Bounty Platforms
|
||
|
||
- [**Bugcrowd List**](https://www.bugcrowd.com/bug-bounty-list/) - List of many companies that provide bug bounties.
|
||
|
||
---
|
||
|
||
### **CTF(Capture the flag)**
|
||
|
||
- [**Ctf-tools**](https://github.com/zardus/ctf-tools) - Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.
|
||
|
||
- [**Pwntools**](https://github.com/Gallopsled/pwntools) - Rapid exploit development framework built for use in CTFs.
|
||
|
||
- [**RsaCtfTool**](https://github.com/sourcekris/RsaCtfTool) - Decrypt data enciphered using weak RSA keys, and recover private keys from public keys using a variety of automated attacks.
|
||
|
||
---
|
||
|
||
### **DDoS**
|
||
|
||
- [**HOIC**](https://sourceforge.net/projects/high-orbit-ion-cannon/) - Updated version of Low Orbit Ion Cannon, has ‘boosters’ to get around common counter measures.
|
||
|
||
- [**JS LOIC**](http://metacortexsecurity.com/tools/anon/LOIC/LOICv1.html) - JavaScript in-browser version of LOIC.
|
||
|
||
- [**LOIC**](https://github.com/NewEraCracker/LOIC/) - Open source network stress tool for Windows.
|
||
|
||
- [**SlowLoris**](https://github.com/gkbrk/slowloris) - DoS tool that uses low bandwidth on the attacking side.
|
||
|
||
- [**T50**](https://sourceforge.net/projects/t50/) - Faster network stress tool.
|
||
|
||
- [**UFONet**](https://github.com/epsylon/ufonet) - Abuses OSI layer 7 HTTP to create/manage ‘zombies’ and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.
|
||
|
||
---
|
||
|
||
### **Defense Evasion**
|
||
|
||
- [**AntiVirus Evasion Tool (AVET)**](https://github.com/govolution/avet) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.
|
||
|
||
- [**Hyperion**](http://nullsecurity.net/tools/binary.html) - Runtime encryptor for 32-bit portable executables (“PE .exes”).
|
||
|
||
- [**PeCloak.py**](https://www.securitysift.com/pecloak-py-an-experiment-in-av-evasion/) - Automates the process of hiding a malicious Windows executable from antivirus (AV) detection.
|
||
|
||
- [**PeCloakCapstone**](https://github.com/v-p-b/peCloakCapstone) - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.
|
||
|
||
- [**UniByAv**](https://github.com/Exploit-install/UniByAv) - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.
|
||
|
||
- [**Veil**](https://github.com/Veil-Framework/Veil) - Generate metasploit payloads that bypass common anti-virus solutions.
|
||
|
||
---
|
||
|
||
### **Defcon Suggested Reading**
|
||
|
||
- [**Defcon Suggested Reading**](https://www.defcon.org/html/links/book-list.html)
|
||
|
||
---
|
||
|
||
### Email Spoofing
|
||
|
||
- [**SpoofBox**](https://www.spoofbox.com) - Offers email, SMS, Phone spoofing and lots of other tools. Not a free service. Can also be used to look up phone numbers.
|
||
|
||
---
|
||
|
||
### **Exploit Development**
|
||
|
||
- [**Exploit Writing Tutorials**](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/) - Tutorials on how to develop exploits.
|
||
|
||
- [**Shellcode Examples**](http://shell-storm.org/shellcode/) - Shellcodes database.
|
||
|
||
- [**Shellcode Tutorial**](http://www.vividmachines.com/shellcode/shellcode.html) - Tutorial on how to write shellcode.
|
||
|
||
---
|
||
|
||
### **File Format Analysis**
|
||
|
||
- [**Hachoir**](http://hachoir3.readthedocs.io/) - Python library to view and edit a binary stream as tree of fields and tools for metadata extraction.
|
||
|
||
- [**Kaitai Struct**](http://kaitai.io/) - File formats and network protocols dissection language and web IDE, generating parsers in C++, C#, Java, JavaScript, Perl, PHP, Python, Ruby.
|
||
|
||
- [**Veles**](https://codisec.com/veles/) - Binary data visualization and analysis tool.
|
||
|
||
---
|
||
|
||
### Forensics
|
||
|
||
- [**Autopsy**](https://www.autopsy.com/) - Full suite of open source forensics tools.
|
||
|
||
- [**CAINE**](https://forensictools.dev/listing/caine/) - CAINE is Linux Live CD that contains a wealth of digital forensic tools. Features include a user-friendly GUI, semi-automated report creation and tools for Mobile Forensics, Network Forensics, Data Recovery and more.
|
||
|
||
- [**FTK Imager**](https://www.exterro.com/ftk-imager) - Open Source Disk imaging tool.
|
||
|
||
- [**Paladin Forensic Suite**](https://sumuri.com/product-category/brands/paladin/) - Live Ubuntu distro with lots of tools. Open source with free and paid versions.
|
||
|
||
- [**SIFT Workstation**](https://www.sans.org/tools/sift-workstation/) - The SIFT Workstation is a collection of free and open-source incident response and forensic tools designed to perform detailed digital forensic examinations in a variety of settings, all built inside an Ubuntu VM.
|
||
|
||
- [**SMART**](https://smart-forensic.com/) - Open source sampling of many proprietary forensics tools.
|
||
|
||
---
|
||
|
||
### **GNU/Linux Utilities**
|
||
|
||
- [**Linux Exploit Suggester**](https://github.com/PenturaLabs/Linux_Exploit_Suggester) - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.
|
||
|
||
---
|
||
|
||
### **Hacking Focused OSINT**
|
||
|
||
- [**AQUATONE**](https://github.com/michenriksen/aquatone) - Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.
|
||
|
||
- [**BinGoo**](https://github.com/Hood3dRob1n/BinGoo) - GNU/Linux bash based Bing and Google Dorking Tool.
|
||
|
||
- [**Censys**](https://www.censys.io/) - Collects data on hosts and websites through daily ZMap and ZGrab scans.
|
||
|
||
- [**creepy**](https://github.com/ilektrojohn/creepy) - Geolocation OSINT tool.
|
||
|
||
- [**DataSploit**](https://github.com/upgoingstar/datasploit) - OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes.
|
||
|
||
- [**dork-cli**](https://github.com/jgor/dork-cli) - Command line Google dork tool.
|
||
|
||
- [**Fast-recon**](https://github.com/DanMcInerney/fast-recon) - Perform Google dorks against a domain.
|
||
|
||
- [**GooDork**](https://github.com/k3170makan/GooDork) - Command line Google dorking tool.
|
||
|
||
- [**Google Hacking Database**](https://www.exploit-db.com/google-hacking-database) - Database of Google dorks; can be used for recon.
|
||
|
||
- [**Google-dorks**](https://github.com/JohnTroony/Google-dorks) - Common Google dorks and others you probably don’t know.
|
||
|
||
- [**github-dorks**](https://github.com/techgaun/github-dorks) - CLI tool to scan Github repos/organizations for potential sensitive information leak.
|
||
|
||
- [**Intrigue**](http://intrigue.io/) - Automated OSINT & Attack Surface discovery framework with powerful API, UI and CLI.
|
||
|
||
- [**Maltego**](http://www.paterva.com/web7/) - One of the Hacking Tools and Proprietary software for open source intelligence and forensics, from Paterva.
|
||
|
||
- [**metagoofil**](https://github.com/laramies/metagoofil) - Metadata harvester.
|
||
|
||
- [**recon-ng**](https://github.com/lanmaster53/recon-ng) - One of the Hacking Tools Full-featured Web Reconnaissance framework written in Python.
|
||
|
||
- [**Shodan**](https://www.shodan.io/) - World’s first search engine for Internet-connected devices.
|
||
|
||
- [**snitch**](https://github.com/Smaash/snitch) - Information gathering via dorks.
|
||
|
||
- [**Sn1per**](https://github.com/1N3/Sn1per) - One of the Hacking Tools for Automated Pentest Recon Scanner.
|
||
|
||
- [**Spiderfoot**](http://www.spiderfoot.net/) - Multi-source OSINT automation tool with a Web UI and report visualizations.
|
||
|
||
- [**Threat Crowd**](http://ci-www.threatcrowd.org/) - Search engine for threats.
|
||
|
||
- [**theHarvester**](https://github.com/laramies/theHarvester) - E-mail, subdomain and people names harvester.
|
||
|
||
- [**vcsmap**](https://github.com/melvinsh/vcsmap) - Plugin-based tool to scan public version control systems for sensitive information.
|
||
|
||
- [**Virus Total**](https://www.virustotal.com/) - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware.
|
||
|
||
- [**What Every Browser Knows About You**](http://webkay.robinlinus.com/) - Comprehensive detection page to test your own Web browser’s configuration for privacy and identity leaks.
|
||
|
||
- [**ZoomEye**](https://www.zoomeye.org/) - Search engine for cyberspace that lets the user find specific network components.
|
||
|
||
---
|
||
|
||
### Hacking Conventions
|
||
|
||
- [**44Con**](https://44con.com/) - Annual Security Conference held in London.
|
||
|
||
- [**AppSecUSA**](https://globalappsec.org/) - Annual conference organized by OWASP.
|
||
|
||
- [**BalCCon**](https://www.balccon.org/) - Balkan Computer Congress, annually held in Novi Sad, Serbia.
|
||
|
||
- [**Black Hat**](http://www.blackhat.com/) - Annual security conference in Las Vegas.
|
||
|
||
- [**BruCON**](http://brucon.org/) - Annual security conference in Belgium.
|
||
|
||
- [**CarolinaCon**](http://www.carolinacon.org/) - Infosec conference, held annually in North Carolina.
|
||
|
||
- [**CCC**](https://events.ccc.de/congress/) - Annual meeting of the international hacker scene in Germany.
|
||
|
||
- [**CHCon**](https://2016.chcon.nz/) - Christchurch Hacker Con, Only South Island of New Zealand hacker con.
|
||
|
||
- [**DeepSec**](https://deepsec.net/) - Security Conference in Vienna, Austria.
|
||
|
||
- [**DefCamp**](http://def.camp/) - Largest Security Conference in Eastern Europe, held annually in Bucharest, Romania.
|
||
|
||
- [**DEF CON**](https://www.defcon.org/) - Annual hacker convention in Las Vegas. Known for having a left wing bias.
|
||
|
||
- [**Ekoparty**](http://www.ekoparty.org/) - Largest Security Conference in Latin America, held annually in Buenos Aires, Argentina.
|
||
|
||
- [**FSec**](http://fsec.foi.hr/) - FSec - Croatian Information Security Gathering in Varaždin, Croatia.
|
||
|
||
- [**Hack3rCon**](http://hack3rcon.org/) - Annual US hacker conference.
|
||
|
||
- [**Hack.lu**](https://2016.hack.lu/) - Annual conference held in Luxembourg.
|
||
|
||
- [**Hackfest**](https://hackfest.ca/) - Largest hacking conference in Canada.
|
||
|
||
- [**HITB**](https://conference.hitb.org/) - Deep-knowledge security conference held in Malaysia and The Netherlands.
|
||
|
||
- [**Hacking In The Box**](https://conference.hitb.org/) - Deep-knowledge security conference held in Malaysia and The Netherlands.
|
||
|
||
- [**Infosecurity Europe**](http://www.infosecurityeurope.com/) - Europe’s number one information security event, held in London, UK.
|
||
|
||
- [**LayerOne**](http://www.layerone.org/) - Annual US security conference held every spring in Los Angeles.
|
||
|
||
- [**Nullcon**](http://nullcon.net/website/) - Annual conference in Delhi and Goa, India.
|
||
|
||
- [**PhreakNIC**](http://phreaknic.info/) - Technology conference held annually in middle Tennessee.
|
||
|
||
- [**RSA Conference USA**](https://www.rsaconference.com/) - Annual security conference in San Francisco, California, USA.
|
||
|
||
- [**ShmooCon**](http://shmoocon.org/) - Annual US East coast hacker convention.
|
||
|
||
- [**SkyDogCon**](http://www.skydogcon.com/) - Technology conference in Nashville.
|
||
|
||
- [**SummerCon**](http://www.summercon.org/) - One of the oldest hacker conventions, held during Summer.
|
||
|
||
- [**Swiss Cyber Storm**](https://www.swisscyberstorm.com/) - Annual security conference in Lucerne, Switzerland.
|
||
|
||
- [**ThotCon**](http://thotcon.org/) - Annual US hacker conference held in Chicago.
|
||
|
||
- [**Troopers**](https://www.troopers.de/) - Annual international IT Security event with workshops held in Heidelberg, Germany.
|
||
|
||
- [**Virus Bulletin Conference**](https://www.virusbulletin.com/conference/index) - Annual conference going to be held in Denver, USA for 2016.
|
||
|
||
---
|
||
|
||
### **Hash Cracking**
|
||
|
||
- [**BruteForce Wallet**](https://github.com/glv2/bruteforce-wallet) - Find the password of an encrypted wallet file (i.e. wallet.dat).
|
||
|
||
- [**CeWL**](https://digi.ninja/projects/cewl.php) - Generates custom wordlists by spidering a target’s website and collecting unique words.
|
||
|
||
- [**Hashcat**](http://hashcat.net/hashcat/) - Another One of the Hacking Tools The more fast hash cracker.
|
||
|
||
- [**John the Ripper**](http://www.openwall.com/john/) - One of the best Hacking Tools for Fast password cracker.
|
||
|
||
- [**JWT Cracker**](https://github.com/lmammino/jwt-cracker) - Simple HS256 JWT token brute force cracker.
|
||
|
||
- [**Rar Crack**](http://rarcrack.sourceforge.net/) - RAR bruteforce cracker.
|
||
|
||
|
||
### **Hex Editors**
|
||
|
||
- [**0xED**](https://web.archive.org/web/20140106172311if_/http://www.suavetech.com:80/0xed/0xed.html) – Native macOS hex editor that supports plug-ins to display custom data types.
|
||
|
||
- [**Frhed**](http://frhed.sourceforge.net/) – Binary file editor for Windows.
|
||
|
||
- [**HexEdit.js**](https://hexed.it/) – Browser-based hex editing.
|
||
|
||
- [**Hexinator**](https://hexinator.com/) – World’s finest (proprietary, commercial) Hex Editor.
|
||
|
||
---
|
||
|
||
### **Information Security Magazines**
|
||
|
||
- [**2600: The Hacker Quarterly**](https://www.2600.com/Magazine/DigitalEditions) – American publication about technology and computer “underground.”
|
||
|
||
- [**Phrack Magazine**](http://www.phrack.org/) – By far the longest running hacker zine.
|
||
|
||
- [**Unredacted Magazine**](https://unredactedmagazine.com/) - The official magazine from Michael Bazzell author of Extreme Privacy.
|
||
|
||
---
|
||
|
||
### **Lock Picking Resources**
|
||
|
||
- [**Awesome Lockpicking**](https://github.com/meitar/awesome-lockpicking) – Awesome guides, tools, and other resources about the security and compromise of locks, safes, and keys.
|
||
|
||
- [**Bosnianbill**](https://www.youtube.com/user/bosnianbill) – More lockpicking videos.
|
||
|
||
- [**Schuyler Towne channel**](https://www.youtube.com/user/SchuylerTowne/) – Lockpicking videos and security talks.
|
||
|
||
- [**/r/lockpicking**](https://www.reddit.com/r/lockpicking) – Resources for learning lockpicking, equipment recommendations.
|
||
|
||
---
|
||
|
||
### **macOS Utilities**
|
||
|
||
- [Bella](https://github.com/00xkhaled/Bella) – Pure Python post-exploitation data mining and remote administration tool for macOS.
|
||
|
||
---
|
||
|
||
### **Multi-paradigm Frameworks**
|
||
|
||
- [**Armitage**](https://github.com/blackhatethicalhacking/armitage) – Java-based GUI front-end for the Metasploit Framework.
|
||
|
||
- [**ExploitPack**](https://juansacco.gitbooks.io/exploitpack/content/) – Graphical tool for automating penetration tests that ships with many pre-packaged exploits.
|
||
|
||
- [**Faraday**](https://github.com/infobyte/faraday) – Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
|
||
|
||
- [**Metasploit**](https://www.metasploit.com/) – Post exploitation Hacking Tools for offensive security teams to help verify vulnerabilities and manage security assessments.
|
||
|
||
- [**Pupy**](https://github.com/n1nj4sec/pupy) – Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.
|
||
|
||
---
|
||
|
||
### **Network Tools**
|
||
|
||
- [**BetterCAP**](https://www.bettercap.org/) – Modular, portable and easily extensible MITM framework.
|
||
|
||
- [**CloudFail**](https://github.com/m0rtem/CloudFail) – Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
|
||
|
||
- [**CrackMapExec**](https://github.com/byt3bl33d3r/CrackMapExec) – A swiss army knife for pentesting networks.
|
||
|
||
- [**Debookee**](http://www.iwaxx.com/debookee/) – Simple and powerful network traffic analyzer for macOS.
|
||
|
||
- [**DET**](https://github.com/sensepost/DET) – Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.
|
||
|
||
- [**Dgcd**](http://tgcd.sourceforge.net/) – Simple Unix network utility to extend the accessibility of TCP/IP based network services beyond firewalls.
|
||
|
||
- [**Dnsmap**](https://github.com/makefu/dnsmap/) – One of the Hacking Tools for Passive DNS network mapper.
|
||
|
||
- [**Dnsrecon**](https://github.com/darkoperator/dnsrecon/) – One of the Hacking Tools for DNS enumeration script.
|
||
|
||
- [**Dnschef**](https://github.com/iphelix/dnschef) – Highly configurable DNS proxy for pentesters.
|
||
|
||
- [**Dnsenum**](https://github.com/fwaeytens/dnsenum/) – Perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.
|
||
|
||
- [**Dnstracer**](http://www.mavetju.org/unix/dnstracer.php) – Determines where a given DNS server gets its information from, and follows the chain of DNS servers.
|
||
|
||
- [**DNSDumpster**](https://dnsdumpster.com/) – One of the Hacking Tools for Online DNS recon and search service.
|
||
|
||
- [**Dshell**](https://github.com/USArmyResearchLab/Dshell) – Network forensic analysis framework.
|
||
|
||
- [**Dsniff**](https://www.kali.org/tools/dsniff/) – Collection of tools for network auditing and pentesting.
|
||
|
||
- [**Dripcap**](https://github.com/orinocoz/dripcap) – Caffeinated packet analyzer.
|
||
|
||
- [**Evilgrade**](https://github.com/infobyte/evilgrade) – Modular framework to take advantage of poor upgrade implementations by injecting fake updates.
|
||
|
||
- [**Ettercap**](http://www.ettercap-project.org/) – Comprehensive, mature suite for machine-in-the-middle attacks.
|
||
|
||
- [**Impacket**](https://github.com/CoreSecurity/impacket) – A collection of Python classes for working with network protocols.
|
||
|
||
- [**Intercepter-NG**](http://sniff.su/) – Multifunctional network toolkit.
|
||
|
||
- [**Mass Scan**](https://github.com/robertdavidgraham/masscan) – Best Hacking Tools for TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
|
||
|
||
- [**Mallory**](https://github.com/justmao945/mallory) – HTTP/HTTPS proxy over SSH.
|
||
|
||
- [**Mitmproxy**](https://github.com/mitmproxy/mitmproxy) – Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
|
||
|
||
- [**Morpheus**](https://github.com/r00t-3xp10it/morpheus) – Automated ettercap TCP/IP Hacking Tools.
|
||
|
||
- [**Netsniff-ng**](https://github.com/netsniff-ng/netsniff-ng) – Swiss army knife for network sniffing.
|
||
|
||
- [**Network-Tools.com**](http://network-tools.com/) – Website offering an interface to numerous basic network utilities like ping, traceroute, whois, and more.
|
||
|
||
- [**Nmap**](https://nmap.org/) – Free security scanner for network exploration & security audits.
|
||
|
||
- [**Passivedns**](https://github.com/gamelinux/passivedns) – Network sniffer that logs all DNS server replies for use in a passive DNS setup.
|
||
|
||
- [**Passivedns-client**](https://github.com/chrislee35/passivedns-client) – Library and query tool for querying several passive DNS providers.
|
||
|
||
- [**Pig**](https://github.com/rafael-santiago/pig) – One of the Hacking Tools for GNU/Linux packet crafting.
|
||
|
||
- [**Pwnat**](https://github.com/samyk/pwnat) – Punches holes in firewalls and NATs.
|
||
|
||
- [**Praeda**](http://h.foofus.net/?page_id=218) – Automated multi-function printer data harvester for gathering usable data during security assessments.
|
||
|
||
- [**Printer Exploitation Toolkit (PRET)**](https://github.com/RUB-NDS/PRET) – Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.
|
||
|
||
- [**Routersploit**](https://github.com/reverse-shell/routersploit) – Open source exploitation framework similar to Metasploit but dedicated to embedded devices.
|
||
|
||
- [**Scanless**](https://github.com/vesche/scanless) – Utility for using websites to perform port scans on your behalf so as not to reveal your own IP.
|
||
|
||
- [**Scapy**](https://github.com/secdev/scapy) – Python-based interactive packet manipulation program & library.
|
||
|
||
- [**SPARTA**](https://sparta.secforce.com/) – Graphical interface offering scriptable, configurable access to existing network infrastructure scanning and enumeration tools.
|
||
|
||
- [**SSH MITM**](https://github.com/jtesta/ssh-mitm) – Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.
|
||
|
||
- [**Tcpdump/libpcap**](http://www.tcpdump.org/) – Common packet analyzer that runs under the command line.
|
||
|
||
- [**Wireshark**](https://www.wireshark.org/) – Widely-used graphical, cross-platform network protocol analyzer.
|
||
|
||
- [**XRay**](https://github.com/evilsocket/xray) – Network (sub)domain discovery and reconnaissance automation tool.
|
||
|
||
- [**Zarp**](https://github.com/hatRiot/zarp) – Network attack tool centered around the exploitation of local networks.
|
||
|
||
- [**Zmap**](https://zmap.io/) – Open source network scanner that enables researchers to easily perform Internet-wide network studies.
|
||
|
||
---
|
||
|
||
### **Operating Systems**
|
||
|
||
- [**Best Linux Penetration Testing Distributions @ CyberPunk**](https://n0where.net/best-linux-penetration-testing-distributions/) – Description of main penetration testing distributions.
|
||
|
||
- [**Cuckoo**](https://github.com/cuckoosandbox/cuckoo) – Open source automated malware analysis system.
|
||
|
||
- [**Computer Aided Investigative Environment (CAINE)**](http://www.caine-live.net/) – Italian GNU/Linux live distribution created as a digital forensics project.
|
||
|
||
- [**CSILinux**](https://csilinux.com/) - CSI's mission is to equip you with the most advanced tools in digital forensics, OSINT, and incident response.
|
||
|
||
- [**Digital Evidence & Forensics Toolkit (DEFT)**](https://archiveos.org/deft/) – Live CD for forensic analysis runnable without tampering or corrupting connected devices where the boot process takes place.
|
||
|
||
- [**Security related Operating Systems @ Rawsec**](https://github.com/tyki6/rawsec_cli) – Penetration testing tools & Hacking Tools list Related Complete list of security operating systems.
|
||
|
||
- [**Security @ Distrowatch**](http://distrowatch.com/search.php?category=Security) – Website dedicated to talking about, reviewing, and keeping up to date with open source operating systems.
|
||
|
||
- [**Tails**](https://tails.boum.org/) – Live OS aimed at preserving privacy and anonymity.
|
||
|
||
---
|
||
|
||
### Physical Hacking Tools
|
||
|
||
- [**Anof-cyber/APTRS**](https://github.com/Anof-cyber/APTRS) - APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities.
|
||
|
||
- [**Canarytokens.org**](https://canarytokens.org/generate) - Canarytokens are a free, quick, painless way to help defenders discover they've been breached by having attackers announce themselves. These are digital honeypots you can configure on your own network.
|
||
|
||
- [**Flipperzero.one**](https://flipperzero.one/) - Flipper Zero is a portable multi-tool for pentesters and geeks in a toy-like body. It loves hacking digital stuff, such as radio protocols, access control systems, hardware and more. It's fully open-source and customizable, so you can extend it in whatever way you like. Check out more firmware options [**here**](https://flipper-xtre.me/asset-packs/)
|
||
|
||
- [**Hak5.org**](https://shop.hak5.org/) - Sells many hacking for wifi pentesting, hotplug attacks, implants, remote access field kits and more. [**Breakdown of multiple tools**](https://www.youtube.com/watch?v=6F7EHO4niCw)
|
||
|
||
- [**LAN Turtle**](https://lanturtle.com/) – Covert “USB Ethernet Adapter” that provides remote access, network intelligence gathering, and MITM capabilities when installed in a local network.
|
||
|
||
- [**Poisontap**](https://samy.pl/poisontap/) – Siphons cookies, exposes internal (LAN-side) router and installs web backdoor on locked computers.
|
||
|
||
- [**USB Rubber Ducky**](http://usbrubberducky.com/) – Customizable keystroke injection attack platform masquerading as a USB thumbdrive.
|
||
|
||
- [**WiFi Pineapple**](https://www.wifipineapple.com/) – Wireless auditing and penetration testing platform.
|
||
|
||
---
|
||
|
||
## Penetration Testing Resources
|
||
|
||
### Pentest Tools
|
||
|
||
- [**Metasploit Unleashed**](https://www.offsec.com/metasploit-unleashed/) - Free Offensive Security Metasploit course.
|
||
|
||
- [**MITRE’s Adversarial Tactics, Techniques & Common Knowledge (ATT&CK)**](https://attack.mitre.org/) – Curated knowledge base and model for cyber adversary behavior.
|
||
|
||
- [**Open Source Security Testing Methodology Manual (OSSTMM)**](http://www.isecom.org/mirror/OSSTMM.3.pdf) – Framework for providing test cases that result in verified facts on which to base decisions that impact an organization’s security.
|
||
|
||
- [**Open Web Application Security Project (OWASP)**](https://www.owasp.org/index.php/Main_Page) – Worldwide not-for-profit charitable organization focused on improving the security of especially Web-based and Application-layer software.
|
||
|
||
- [**Penetration Testing Execution Standard (PTES)**](http://www.pentest-standard.org/) – Documentation designed to provide a common language and scope for performing and reporting the results of a penetration test.
|
||
|
||
- [**Penetration Testing Framework (PTF)**](http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html) – Outline for performing penetration tests compiled as a general framework usable by vulnerability analysts and penetration testers alike.
|
||
|
||
- [**PENTEST-WIKI**](https://github.com/nixawk/pentest-wiki) – Free online security knowledge library for pentesters and researchers.
|
||
|
||
- [**Security related Operating Systems @ Rawsec**](https://github.com/tyki6/rawsec_cli) – Penetration testing tools & Hacking Tools list Related Complete list of security operating systems.
|
||
|
||
- [**Shellcode Examples**](http://shell-storm.org/shellcode/) – Shellcodes database.
|
||
|
||
- [**Shellcode Tutorial**](http://www.vividmachines.com/shellcode/shellcode.html) – Tutorial on how to write shellcode.
|
||
|
||
- [**XSS-Payloads**](http://www.xss-payloads.com/) – Ultimate resource for all things cross-site including payloads, tools, games and documentation.
|
||
|
||
### **Penetration Testing Distributions**
|
||
|
||
- [**ArchStrike**](https://archstrike.org/) – Arch GNU/Linux repository for security professionals and enthusiasts.
|
||
|
||
- [**AttifyOS**](https://github.com/adi0x90/attifyos) – GNU/Linux distribution focused on tools useful during Internet of Things (IoT) security assessments.
|
||
|
||
- [**BackBox**](https://backbox.org/) – Ubuntu-based distribution for penetration tests and security assessments.
|
||
|
||
- [**BlackArch**](https://www.blackarch.org/) – Arch GNU/Linux-based distribution with best Hacking Tools for penetration testers and security researchers.
|
||
|
||
- [**Fedora Security Lab**](https://labs.fedoraproject.org/en/security/) – Provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies.
|
||
|
||
- [**Kali**](https://www.kali.org/) – GNU/Linux distribution designed for digital forensics and penetration testing Hacking Tools.
|
||
|
||
- [**Network Security Toolkit (NST)**](http://networksecuritytoolkit.org/) – Fedora-based bootable live operating system designed to provide easy access to best-of-breed open source network security applications.
|
||
|
||
- [**Parrot**](https://www.parrotsec.org/) – Distribution similar to Kali, with multiple architectures with 100 of Hacking Tools.
|
||
|
||
- [**Pentoo**](http://www.pentoo.ch/) – Security-focused live CD based on Gentoo.
|
||
|
||
- [**The Pentesters Framework**](https://github.com/trustedsec/ptf) – Distro organized around the Penetration Testing Execution Standard (PTES), providing a curated collection of utilities that eliminates often unused toolchains.
|
||
|
||
### **Docker for Penetration Testing**
|
||
|
||
- docker pull kalilinux/kali-linux-docker
|
||
- docker pull owasp/zap2docker-stable
|
||
- docker pull wpscanteam/wpscan
|
||
- docker pull citizenstig/dvwa
|
||
- docker pull wpscanteam/vulnerablewordpress
|
||
- docker pull hmlio/vaas-cve-2014-6271
|
||
- docker pull hmlio/vaas-cve-2014-0160
|
||
- docker pull opendns/security-ninjas
|
||
- docker pull diogomonica/docker-bench-security
|
||
- docker pull ismisepaul/securityshepherd
|
||
- docker pull danmx/docker-owasp-webgoat
|
||
- docker-compose build && docker-compose up
|
||
- docker pull citizenstig/nowasp
|
||
- docker pull bkimminich/juice-shop
|
||
- docker pull phocean/msf
|
||
|
||
### **Penetration Testing Report Templates**
|
||
|
||
- [**Pentesting Report Template**](http://lucideus.com/pdf/stw.pdf) – lucideus.com template.
|
||
|
||
- [**Pentesting Report Template**](https://www.pcisecuritystandards.org/documents/Penetration_Testing_Guidance_March_2015.pdf) – pcisecuritystandards.org template.
|
||
|
||
- [**Public Pentesting Reports**](https://github.com/juliocesarfort/public-pentesting-reports) – Curated list of public penetration test reports released by several consulting firms and academic security groups.
|
||
|
||
### Ransomware Recovery
|
||
|
||
- [**Nomoreransom**](https://www.nomoreransom.org/en/index.html) - Help detect what kind of ransomware encryption you’re affected by and free tools to unlock it, in many but not all cases.
|
||
|
||
### **Reverse Engineering Tools**
|
||
|
||
- [**Binwalk**](https://github.com/devttys0/binwalk) – Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
|
||
|
||
- [**Capstone**](http://www.capstone-engine.org/) – Lightweight multi-platform, multi-architecture disassembly framework.
|
||
|
||
- [**dnSpy**](https://github.com/0xd4d/dnSpy) – One of the Hacking Tools to reverse engineer .NET assemblies.
|
||
|
||
- [**Evan’s Debugger**](http://www.codef00.com/projects#debugger) – OllyDbg-like debugger for GNU/Linux.
|
||
|
||
- [**Frida**](https://www.frida.re/) – Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
|
||
|
||
- [**Immunity Debugger**](http://debugger.immunityinc.com/) – Powerful way to write exploits and analyze malware.
|
||
|
||
- [**Interactive Disassembler (IDA Pro)**](https://www.hex-rays.com/products/ida/) – Proprietary multi-processor disassembler and debugger for Windows, GNU/Linux, or macOS; also has a free version, [IDA Free](https://www.hex-rays.com/products/ida/support/download_freeware.shtml).
|
||
|
||
- [**Medusa**](https://github.com/wisk/medusa) – Open source, cross-platform interactive disassembler.
|
||
|
||
- [**OllyDbg**](http://www.ollydbg.de/) – x86 debugger for Windows binaries that emphasizes binary code analysis.
|
||
|
||
- [**Peda**](https://github.com/longld/peda) – Python Exploit Development Assistance for GDB.
|
||
|
||
- [**Plasma**](https://github.com/joelpx/plasma) – Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
|
||
|
||
- [**PyREBox**](https://github.com/Cisco-Talos/pyrebox) – Python scriptable Reverse Engineering sandbox by Cisco-Talos.
|
||
|
||
- [**Radare2**](http://rada.re/r/index.html) – Open source, crossplatform reverse engineering framework.
|
||
|
||
- [**rVMI**](https://github.com/fireeye/rVMI) – Debugger on steroids; inspect userspace processes, kernel drivers, and preboot environments in a single tool.
|
||
|
||
- [**Voltron**](https://github.com/snare/voltron) – Extensible debugger UI toolkit written in Python.
|
||
|
||
- [**WDK/WinDbg**](https://msdn.microsoft.com/en-us/windows/hardware/hh852365.aspx) – Windows Driver Kit and WinDbg.
|
||
|
||
- [**x64dbg**](http://x64dbg.com/) – Open source x64/x32 debugger for windows.
|
||
|
||
### Security Courses
|
||
|
||
- [**ARIZONA CYBER WARFARE RANGE**](http://azcwr.org/) – 24×7 live fire exercises for beginners through real world operations; capability for upward progression into the real world of cyber warfare.
|
||
|
||
- [**Computer Security Student**](http://computersecuritystudent.com/) – Many free tutorials, great for beginners, \$10/mo membership unlocks all content.
|
||
|
||
- [**CTF Field Guide**](https://trailofbits.github.io/ctf/) – Everything you need to win your next CTF competition.
|
||
|
||
- [**Cybrary**](http://cybrary.it/) – Free courses in ethical hacking and advanced penetration testing. Advanced penetration testing courses are based on the book ‘Penetration Testing for Highly-Secured Environments’.
|
||
|
||
- [**European Union Agency for Network and Information Security**](https://www.enisa.europa.eu/topics/trainings-for-cybersecurity-specialists/online-training-material) – ENISA Cyber Security Training material.
|
||
|
||
- [**Offensive Security Training**](https://www.offensive-security.com/information-security-training/) – Training from BackTrack/Kali developers.
|
||
|
||
- [**Open Security Training**](http://opensecuritytraining.info/) – Training material for computer security classes.
|
||
|
||
- [**SANS Security Training**](http://www.sans.org/) – Computer Security Training & Certification.
|
||
|
||
### **Side-channel Tools**
|
||
|
||
- [**ChipWhisperer**](http://chipwhisperer.com/) – Complete open-source toolchain for side-channel power analysis and glitching attacks.
|
||
|
||
### **Social Engineering**
|
||
|
||
- [**Beelogger**](https://github.com/4w4k3/BeeLogger) – Tool for generating keylooger.
|
||
|
||
- [**Catphish**](https://github.com/ring0lab/catphish) – Tool for phishing and corporate espionage written in Ruby.
|
||
|
||
- [**Evilginx**](https://github.com/kgretzky/evilginx) – MITM attack framework used for phishing credentials and session cookies from any Web service.
|
||
|
||
- [**King Phisher**](https://github.com/securestate/king-phisher) – One of the Hacking Tools for Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.
|
||
|
||
- [**Social Engineer Toolkit (SET)**](https://github.com/trustedsec/social-engineer-toolkit) – Open source pentesting framework designed for social engineering featuring a number of custom attack vectors to make believable attacks quickly.
|
||
|
||
- [**Social Engineering Framework**](http://www.social-engineer.org/framework/general-discussion/) – Information resource for social engineers.
|
||
|
||
- [**wifiphisher**](https://github.com/sophron/wifiphisher) – Automated phishing attacks against WiFi networks.
|
||
|
||
### **Static Analyzers**
|
||
|
||
- [**Bandit**](https://pypi.python.org/pypi/bandit/) – Security oriented static analyser for python code.
|
||
|
||
- [**Brakeman**](https://github.com/presidentbeef/brakeman) – Static analysis security vulnerability scanner for Ruby on Rails applications.
|
||
|
||
- [**Cppcheck**](http://cppcheck.sourceforge.net/) – Extensible C/C++ static analyzer focused on finding bugs.
|
||
|
||
- [**FindBugs**](http://findbugs.sourceforge.net/) – Free software static analyzer to look for bugs in Java code.
|
||
|
||
- [**Sobelow**](https://github.com/nccgroup/sobelow) – Security-focused static analysis for the Phoenix Framework.
|
||
|
||
### **Transport Layer Security Tools**
|
||
|
||
- [**SSLyze**](https://github.com/nabla-c0d3/sslyze) – Fast and comprehensive TLS/SSL configuration analyzer to help identify security mis-configurations.
|
||
|
||
- [**TLS Prober**](https://github.com/WestpointLtd/tls_prober) – Fingerprint a server’s SSL/TLS implementation.
|
||
|
||
- [**Testssl.sh**](https://github.com/drwetter/testssl.sh) – Command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws.
|
||
|
||
### **Tools, Lists, Tutorials etc.**
|
||
|
||
- [**AD Exploit guides**](https://scribe.froth.zone/@kuwaitison/active-directory-lateral-movement-and-post-exploitation-cheat-sheet-3170982a7055) - Detailed guide on methods to exploit Active Directory.
|
||
|
||
- [**Android Security**](https://github.com/ashishb/android-security-awesome) – Collection of Android security-related resources.
|
||
|
||
- [**AppSec**](https://github.com/paragonie/awesome-appsec) – Resources for learning about application security.
|
||
|
||
- [**Awesome Awesomness**](https://github.com/bayandin/awesome-awesomeness) – The List of the Lists.
|
||
|
||
- [**C/C++ Programming**](https://github.com/fffaraz/awesome-cpp) – One of the main language for open source security tools.
|
||
|
||
- [**CTFs**](https://github.com/apsdehal/awesome-ctf) – Capture The Flag frameworks, libraries, etc.
|
||
|
||
- [**Exploit Writing Tutorials**](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/) – Tutorials on how to develop exploits.
|
||
|
||
- [**Forensics**](https://github.com/Cugu/awesome-forensics) – Free (mostly open source) forensic analysis tools and resources.
|
||
|
||
- [**GB Hackers Tools List**](https://gbhackers.com/hacking-tools-list/) - Massive list of Tools.
|
||
|
||
- [**Hackerone Tools List**](https://www.hackerone.com/ethical-hacker/100-hacking-tools-and-resources) - Massive list of Tools.
|
||
|
||
- [**Hacking**](https://github.com/carpedm20/awesome-hacking) – Tutorials, tools, and resources.
|
||
|
||
- [**Honeypots**](https://github.com/paralax/awesome-honeypots) – Honeypots, tools, components, and more.
|
||
|
||
- [**InfoSec § Hacking challenges**](https://github.com/AnarchoTechNYC/meta/wiki/InfoSec#hacking-challenges) – Comprehensive directory of CTFs, wargames, hacking challenge websites, Penetration testing tools list practice lab exercises, and more.
|
||
|
||
- [**Infosec**](https://github.com/onlurking/awesome-infosec) – Information security resources for pentesting, forensics, and more.
|
||
|
||
- [**JavaScript Programming**](https://github.com/sorrycc/awesome-javascript) – In-browser development and scripting.
|
||
|
||
- [**Kali Linux Tools**](https://gbhackers.com/kalitutorials/) – List of Hacking tools present in Kali Linux.
|
||
|
||
- [**Malware Analysis**](https://gbhackers.com/malware-analysis-cheat-sheet-and-tools-list/) – Tools and resources for analysts.
|
||
|
||
- [**Node.js Programming**](https://github.com/sindresorhus/awesome-nodejs) – Curated list of delightful Node.js packages and resources.
|
||
|
||
- [**PCAP Tools**](https://github.com/caesar0301/awesome-pcaptools) – Tools for processing network traffic.
|
||
|
||
- [**Penetration Testing Cheat Sheets**](https://github.com/coreb1t/awesome-pentest-cheat-sheets) – Awesome Pentest Cheat Sheets.
|
||
|
||
- [**Pivoting and Tunneling Guide**](https://scribe.rip/@kuwaitison/pivoting-and-tunneling-for-oscp-and-beyond-cheat-sheet-3435d1d6022) - Detailed guide on methods to exploit.
|
||
|
||
- [**Python Programming 1**](https://github.com/svaksha/pythonidae) – General Python programming.
|
||
|
||
- [**Python Programming 2**](https://github.com/vinta/awesome-python) – General Python programming.
|
||
|
||
- [**Python tools for penetration testers**](https://github.com/dloss/python-pentest-tools) – Lots of pentesting tools are written in Python.
|
||
|
||
- [**Ruby Programming 1**](https://github.com/dreikanter/ruby-bookmarks) – The de-facto language for writing exploits.
|
||
|
||
- [**Ruby Programming 2**](https://github.com/markets/awesome-ruby) – The de-facto
|
||
---
|
||
|
||
### **Virtual Machines Labs**
|
||
|
||
- [**CFTtime**](https://ctftime.org) - Free capture the flag hacking games.
|
||
|
||
- [**MindMaps**](http://www.amanhardikar.com/mindmaps/Practice.html) - Massive list of smaller sites that provide individual hacking challenges.
|
||
|
||
- [**Pentesterlab**](https://www.pentesterlab.com) - Free and paid Pentesting training with labs.
|
||
|
||
- [**Sadcloud**](https://github.com/nccgroup/sadcloud) - Sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform.
|
||
|
||
- [**Vulnerability Hub**](https://www.vulnhub.com/) - Free Virtual machines to hack, provided by the community.
|
||
|
||
- [**Vulnmachines**](https://vulnmachines.com) - A place to learn and improve penetration testing/ethical hacking skills for FREE. The labs consist of 100+ real world scenarios to practice the latest exploits and cutting edge hacking techniques.
|
||
|
||
---
|
||
|
||
### **Vulnerability Databases**
|
||
|
||
- [**Bugtraq (BID)**](http://www.securityfocus.com/bid/) – Software security bug identification database compiled from submissions to the SecurityFocus mailing list and other sources, operated by Symantec, Inc.
|
||
|
||
- [**Common Vulnerabilities and Exposures (CVE)**](https://cve.mitre.org/) – Dictionary of common names (i.e., CVE Identifiers) for publicly known security vulnerabilities.
|
||
|
||
- [**CXSecurity**](https://cxsecurity.com/) – Archive of published CVE and Bugtraq software vulnerabilities cross-referenced with a Google dork database for discovering the listed vulnerability.
|
||
|
||
- [**Exploit-DB**](https://www.exploit-db.com/) – Non-profit project hosting exploits for software vulnerabilities, provided as a public service by Offensive Security.
|
||
|
||
- [**Full-Disclosure**](http://seclists.org/fulldisclosure/) – Public, vendor-neutral forum for detailed discussion of vulnerabilities, often publishes details before many other sources.
|
||
|
||
- [**Inj3ct0r**](https://www.0day.today/) ([Onion service](http://mvfjfugdwgc5uwho.onion/)) – Exploit marketplace and vulnerability information aggregator.
|
||
|
||
- [**Microsoft Security Advisories**](https://technet.microsoft.com/en-us/security/advisories#APUMA) – Archive of security advisories impacting Microsoft software.
|
||
|
||
- [**Microsoft Security Bulletins**](https://technet.microsoft.com/en-us/security/bulletins#sec_search) – Announcements of security issues discovered in Microsoft software, published by the Microsoft Security Response Center (MSRC).
|
||
|
||
- [**Mozilla Foundation Security Advisories**](https://www.mozilla.org/security/advisories/) – Archive of security advisories impacting Mozilla software, including the Firefox Web Browser.
|
||
|
||
- [**National Vulnerability Database (NVD)**](https://nvd.nist.gov/) – United States government’s National Vulnerability Database provides additional meta-data (CPE, CVSS scoring) of the standard CVE List along with a fine-grained search engine.
|
||
|
||
- [**Packet Storm**](https://packetstormsecurity.com/files/) – Compendium of exploits, advisories, tools, and other security-related resources aggregated from across the industry.
|
||
|
||
- [**SecuriTeam**](http://www.securiteam.com/) – Independent source of software vulnerability information.
|
||
|
||
- [**US-CERT Vulnerability Notes Database**](https://www.kb.cert.org/vuls/) – Summaries, technical details, remediation information, and lists of vendors affected by software vulnerabilities, aggregated by the United States Computer Emergency Response Team (US-CERT).
|
||
|
||
- [**Vulnerability Lab**](https://www.vulnerability-lab.com/) – Open forum for security advisories organized by category of exploit target.
|
||
|
||
- [**Vulners**](https://vulners.com/) – Security database of software vulnerabilities.
|
||
|
||
- [**Zero Day Initiative**](http://zerodayinitiative.com/advisories/published/) – Bug bounty program with the publicly accessible archive of published security advisories, operated by TippingPoint.
|
||
|
||
---
|
||
|
||
### **Vulnerability Scanners**
|
||
|
||
- [**Nexpose**](https://www.rapid7.com/products/nexpose/) – Commercial vulnerability and risk management assessment engine that integrates with Metasploit, sold by Rapid7.
|
||
|
||
- [**Nessus**](https://www.tenable.com/products/nessus-vulnerability-scanner) – Commercial vulnerability management, configuration, and compliance assessment platform, sold by Tenable. Free for under 25 devices.
|
||
|
||
- [**OpenVAS**](http://www.openvas.org/) – Free open source software implementation of the popular Nessus vulnerability assessment system.
|
||
|
||
- [**Vuls**](https://github.com/future-architect/vuls) – Agentless vulnerability scanner for GNU/Linux and FreeBSD, written in Go.
|
||
|
||
---
|
||
|
||
### **Web Exploitation**
|
||
|
||
- [**Autochrome**](https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2017/march/autochrome/) – Easy to install a test browser with all the appropriate setting needed for web application testing with native Burp support, from NCCGroup.
|
||
|
||
- [**BlindElephant**](http://blindelephant.sourceforge.net/) – Web application fingerprinter.
|
||
|
||
- [**Browser Exploitation Framework (BeEF)**](https://github.com/beefproject/beef) – Command and control server for delivering exploits to commandeered Web browsers.
|
||
|
||
- [**Burp Suite**](https://portswigger.net/burp/) – One of the Hacking Tools integrated platform for performing security testing of web applications.
|
||
|
||
- [**Commix**](https://github.com/commixproject/commix) – Automated all-in-one operating system command injection and exploitation tool.
|
||
|
||
- [**DVCS Ripper**](https://github.com/kost/dvcs-ripper) – Rip web accessible (distributed) version control systems: SVN/GIT/HG/BZR.
|
||
|
||
- [**EyeWitness**](https://github.com/ChrisTruncer/EyeWitness) – Tool to take screenshots of websites, provide some server header info, and identify default credentials if possible.
|
||
|
||
- [**Fiddler**](https://www.telerik.com/fiddler) – Free cross-platform web debugging proxy with user-friendly companion tools.
|
||
|
||
- [**Fimap**](https://github.com/kurobeats/fimap) – Find, prepare, audit, exploit and even Google automatically for LFI/RFI bugs.
|
||
|
||
- [**FuzzDB**](https://github.com/fuzzdb-project/fuzzdb) – Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
|
||
|
||
- [**GitTools**](https://github.com/internetwache/GitTools) – One of the Hacking Tools that Automatically find and download Web accessible .git repositories.
|
||
|
||
- [**Kadabra**](https://github.com/D35m0nd142/Kadabra) – Automatic LFI exploiter and scanner.
|
||
|
||
- [**Kadimus**](https://github.com/P0cL4bs/Kadimus) – LFI scan and exploit tool.
|
||
|
||
- [**Liffy**](https://github.com/hvqzao/liffy) – LFI exploitation tool.
|
||
|
||
- [**NoSQLmap**](http://nosqlmap.net/) – Automatic NoSQL injection and database takeover tool.
|
||
|
||
- [**Offensive Web Testing Framework (OWTF)**](https://www.owasp.org/index.php/OWASP_OWTF) – Python-based framework for pentesting Web applications based on the OWASP Testing Guide.
|
||
|
||
- [**Sslstrip**](https://www.thoughtcrime.org/software/sslstrip/) – One of the Hacking Tools Demonstration of the HTTPS stripping attacks.
|
||
|
||
- [**Sslstrip2**](https://github.com/LeonardoNve/sslstrip2) – SSLStrip version to defeat HSTS.
|
||
|
||
- [**sqlmap**](http://sqlmap.org/) – Automatic SQL injection and database takeover tool.
|
||
|
||
- [**Tplmap**](https://github.com/epinna/tplmap) – Automatic server-side template injection and Web server takeover Hacking Tools.
|
||
|
||
- [**VHostScan**](https://github.com/codingo/VHostScan) – A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
|
||
|
||
- [**Weevely3**](https://github.com/epinna/weevely3) – Weaponized web shell.
|
||
|
||
- [**Webscreenshot**](https://github.com/maaaaz/webscreenshot) – A simple script to take screenshots of list of websites.
|
||
|
||
- [**WhatWeb**](https://github.com/urbanadventurer/WhatWeb) – Website fingerprinter.
|
||
|
||
- [**Wappalyzer**](https://www.wappalyzer.com/) – Wappalyzer uncovers the technologies used on websites.
|
||
|
||
- [**wafw00f**](https://github.com/EnableSecurity/wafw00f) – Identifies and fingerprints Web Application Firewall (WAF) products.
|
||
|
||
- [**WordPress Exploit Framework**](https://github.com/rastating/wordpress-exploit-framework) – Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.
|
||
|
||
- [**WPSploit**](https://github.com/espreto/wpsploit) – Exploit WordPress-powered websites with Metasploit.
|
||
|
||
---
|
||
|
||
### **Web Scanners**
|
||
|
||
- [**Arachni**](http://www.arachni-scanner.com/) – Scriptable framework for evaluating the security of web applications.
|
||
|
||
- [**Cms-explorer**](https://code.google.com/archive/p/cms-explorer/) – Reveal the specific modules, plugins, components and themes that various websites powered by content management systems are running.
|
||
|
||
- [**Nikto**](https://cirt.net/nikto2) – Noisy but fast black box web server and web application vulnerability scanner.
|
||
|
||
- [**SecApps**](https://secapps.com/) – In-browser web application security testing suite.
|
||
|
||
- [**WebReaver**](https://www.webreaver.com/) – Commercial, graphical web application vulnerability scanner designed for macOS.
|
||
|
||
- [**w3af**](https://github.com/andresriancho/w3af) – Hacking Tools for Web application attack and audit framework.
|
||
|
||
- [**WPScan**](https://wpscan.org/) – Hacking Tools of Black box WordPress vulnerability scanner.
|
||
|
||
- [**Wapiti**](http://wapiti.sourceforge.net/) – Black box web application vulnerability scanner with built-in fuzzer.
|
||
|
||
- [**Joomscan**](https://www.owasp.org/index.php/Category:OWASP_Joomla_Vulnerability_Scanner_Project) – One of the best Hacking Tools for Joomla vulnerability scanner.
|
||
|
||
- [**ACSTIS**](https://github.com/tijme/angularjs-csti-scanner) – Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
|
||
|
||
---
|
||
|
||
### **Windows Utilities**
|
||
|
||
- [**Bloodhound**](https://github.com/adaptivethreat/Bloodhound/wiki) – Graphical Active Directory trust relationship explorer.
|
||
|
||
- [**DeathStar**](https://github.com/byt3bl33d3r/DeathStar) – Python script that uses Empire’s RESTful API to automate gaining Domain Admin rights in Active Directory environments.
|
||
|
||
- [**Empire**](https://www.powershellempire.com/) – Pure PowerShell post-exploitation agent.
|
||
|
||
- [**Fibratus**](https://github.com/rabbitstack/fibratus) – Tool for exploration and tracing of the Windows kernel.
|
||
|
||
- [**Magic Unicorn**](https://github.com/trustedsec/unicorn) – Shellcode generator for numerous attack vectors, including Microsoft Office macros, PowerShell, HTML applications (HTA), or certutil (using fake certificates).
|
||
|
||
- [**Mimikatz**](http://blog.gentilkiwi.com/mimikatz) – Credentials extraction tool for Windows operating system.
|
||
|
||
- [**PowerSploit**](https://github.com/PowerShellMafia/PowerSploit) – PowerShell Post-Exploitation Framework.
|
||
|
||
- [**redsnarf**](https://github.com/nccgroup/redsnarf) – Post-exploitation tool for retrieving password hashes and credentials from Windows workstations, servers, and domain controllers.
|
||
|
||
- [**Responder**](https://github.com/SpiderLabs/Responder) – LLMNR, NBT-NS and MDNS poisoner.
|
||
|
||
- [**Sysinternals Suite**](https://technet.microsoft.com/en-us/sysinternals/bb842062) – The Sysinternals Troubleshooting Utilities.
|
||
|
||
- [**wePWNise**](https://labs.mwrinfosecurity.com/tools/wepwnise/) – Generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
|
||
|
||
- [**Windows Credentials Editor**](http://www.ampliasecurity.com/research/windows-credentials-editor/) – Inspect logon sessions and add, change, list, and delete associated credentials, including Kerberos tickets.
|
||
|
||
- [**Windows Exploit Suggester**](https://github.com/GDSSecurity/Windows-Exploit-Suggester) – Detects potential missing patches on the target.
|
||
|
||
---
|
||
|
||
### **Wireless Network Hacking**
|
||
|
||
- [**Aircrack-ng**](http://www.aircrack-ng.org/) – Set of Penetration testing & Hacking Tools list for auditing wireless networks.
|
||
|
||
- [**Fluxion**](https://github.com/FluxionNetwork/fluxion) – Suite of automated social engineering based WPA attacks.
|
||
|
||
- [**Kismet**](https://kismetwireless.net/) – Wireless network detector, sniffer, and IDS.
|
||
|
||
- [**Reaver**](https://code.google.com/archive/p/reaver-wps) – Brute force attack against WiFi Protected Setup.
|
||
|
||
- [**Wifite**](https://github.com/derv82/wifite) – Automated wireless attack tool.
|
||
|
||
|
||
|
||
|