Tools for pentest

Scoped offensive engagements and assessments.

204 tools indexed

reconFTW

—

Automated recon and web vulnerability-scanning framework.

ReconScanWeb appsNetworks

ShellMIT

smali / baksmali

—

Android Dalvik assembler / disassembler.

AnalyzeMobile appsBinaries

JavaBSD-3-Clause

snowpick

—

Scan ServiceNow instances for unauthenticated data exposure

ScanReconWeb appsCloud

GoMIT

sqlmap

—

Automatic SQL injection and database takeover.

ExploitScanWeb apps

PythonGPL-2.0

ssh-audit

—

SSH server and client config auditor.

ScanHardenNetworksEndpoints

PythonMIT

tcpdump

—

Command-line packet capture.

InterceptAnalyzeNetworks

CBSD-3-Clause

testssl.sh

—

Test TLS/SSL on any port.

ScanAnalyzeWeb appsNetworks

ShellGPL-2.0

theHarvester

—

E-mail and subdomain harvester.

ReconWeb appsNetworks

PythonGPL-2.0

w3af

—

Web application attack and audit framework.

ScanExploitWeb apps

PythonGPL-2.0

wafw00f

—

WAF fingerprinting.

ReconScanWeb apps

PythonBSD-3-Clause

wifipumpkin3

—

Rogue access point framework for Wi-Fi MITM attacks

InterceptWireless

PythonApache-2.0

ysoserial

—

Java deserialization payload generator.

ExploitWeb appsBinaries

JavaMIT