Tools for pentest

Scoped offensive engagements and assessments.

204 tools indexed

enumerate-iam

—

Enumerate AWS IAM permissions.

ReconCloud

PythonBSD-3-Clause

feroxbuster

—

Fast recursive content discovery in Rust.

FuzzReconWeb apps

RustMIT

ffuf

—

Fast web fuzzer written in Go.

FuzzScanWeb apps

GoMIT

fscan

—

Intranet comprehensive scanner.

ScanExploitNetworksActive Directory

GoMIT

gori

—

Terminal HTTP intercepting proxy and web pentest toolkit.

InterceptFuzzWeb apps

CrystalApache-2.0

hashcat

—

GPU-accelerated password recovery.

CrackEndpointsActive Directory

CMIT

house

—

Frida-powered mobile analysis GUI.

AnalyzeInterceptMobile apps

PythonGPL-2.0

hping3

—

TCP/IP packet crafter and analyzer.

ScanInterceptNetworks

CGPL-2.0

httpx

—

Fast HTTP toolkit.

ReconScanWeb apps

GoMIT

jwt_tool

—

Test and exploit JWT vulnerabilities.

ExploitAnalyzeWeb apps

PythonCC-BY-SA-3.0

kube-hunter

—

Hunt for vulnerabilities in Kubernetes.

ScanCloud

PythonApache-2.0

ldapdomaindump

—

AD information dumper via LDAP.

ReconActive Directory

PythonMIT

linuxprivchecker

—

Linux privesc enumeration script.

ReconScanEndpoints

PythonCustom

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mitmproxy

—

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks

PythonMIT

noxen

—

Frida-based Android intent interception for security research

InterceptAnalyzeMobile apps

PythonGPL-3.0

ntlm_theft

—

Generate NTLMv2 hash theft files.

InterceptExploitActive DirectoryEndpoints

PythonMIT

pspy

—

Spy on Linux processes without root.

MonitorReconEndpoints

GoMIT

ptai

—

AI pentest tool that re-runs every exploit to verify it.

AutomateScanWeb apps

PythonMIT

pypykatz

—

Mimikatz in pure Python.

AnalyzeCrackActive DirectoryEndpoints

PythonMIT

r2frida

—

Radare2 plug-in for Frida.

AnalyzeInterceptMobile appsBinaries

CMIT

reGeorg

—

SOCKS proxy through a web shell.

InterceptExploitWeb appsNetworks

PythonMIT

reNgine

—

Automated reconnaissance framework for web applications

ReconScanWeb appsNetworks

PythonGPL-3.0

reburp

—

Burp Suite extension exposing the Montoya API as a local REST API.

AutomateScanWeb apps

KotlinMIT