Tools for red team

Offensive simulation against a target organization.

160 tools indexed

fscan

—

Intranet comprehensive scanner.

ScanExploitNetworksActive Directory

GoMIT

github-dorks

—

Find leaked secrets via GitHub search.

ReconSource codeWeb apps

PythonMIT

hashcat

—

GPU-accelerated password recovery.

CrackEndpointsActive Directory

CMIT

holehe

—

Check which sites an email address is registered on

ReconWeb apps

PythonGPL-3.0

httpx

—

Fast HTTP toolkit.

ReconScanWeb apps

GoMIT

ldapdomaindump

—

AD information dumper via LDAP.

ReconActive Directory

PythonMIT

linuxprivchecker

—

Linux privesc enumeration script.

ReconScanEndpoints

PythonCustom

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mkPIVM

—

Turn x86/x64 shellcode into polymorphic position-independent VMs.

ExploitAutomateBinariesEndpoints

C++MIT

ntlm_theft

—

Generate NTLMv2 hash theft files.

InterceptExploitActive DirectoryEndpoints

PythonMIT

pypykatz

—

Mimikatz in pure Python.

AnalyzeCrackActive DirectoryEndpoints

PythonMIT

reGeorg

—

SOCKS proxy through a web shell.

InterceptExploitWeb appsNetworks

PythonMIT

sn0int

—

Semi-automatic OSINT framework.

ReconAutomateWeb appsNetworks

RustGPL-3.0

theHarvester

—

E-mail and subdomain harvester.

ReconWeb appsNetworks

PythonGPL-2.0

waybackurls

—

Historical URLs from the Wayback Machine.

ReconWeb apps

GoMIT

wifipumpkin3

—

Rogue access point framework for Wi-Fi MITM attacks

InterceptWireless

PythonApache-2.0