Tools
Curated tools for security practitioners.
Nmap is a network scanning tool used to discover hosts and services across networks.
Recon WebsiteBurp Suite is a web proxy and security testing platform for web application assessments.
Web WebsiteMetasploit Framework helps develop, test, and execute exploits and payloads against targets.
Exploit WebsiteWireshark is the world’s foremost and widely-used network protocol analyzer.
Analysis WebsiteJohn the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, and OpenVMS.
Cracking WebsiteComplete suite of tools to assess WiFi network security.
Wireless WebsiteA software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate.
Reverse Engineering WebsiteAutomatic SQL injection and database takeover tool.
Web WebsiteA very fast network logon cracker which supports many different services.
Cracking Website The world’s most widely used web app scanner. Free and open source.
Web WebsiteWidely used vulnerability scanner.
Scanner WebsiteWorld's fastest password recovery tool.
Cracking WebsiteDirectory/File, DNS and VHost busting tool written in Go.
Recon WebsiteWeb server scanner which performs comprehensive tests against web servers.
Web WebsiteFast web fuzzer written in Go.
Web WebsiteThe Swiss army knife of networking.
Networking WebsiteMultipurpose relay (SOcket CAT).
Networking WebsiteCommand line search tool for Exploit-DB.
Exploit WebsiteA tool to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory.
Post-Exploitation WebsiteLLMNR, NBT-NS and MDNS poisoner.
Post-Exploitation WebsiteActive Directory trust relationship visualization.
Post-Exploitation WebsiteSwiss army knife for pentesting networks.
Post-Exploitation WebsiteCollection of Python classes for working with network protocols.
Networking WebsiteAutomated all-in-one OS command injection and exploitation tool.
Web WebsiteWordPress vulnerability scanner.
Web WebsiteIn-depth attack surface mapping and asset discovery.
Recon WebsiteFast subdomains enumeration tool.
Recon WebsiteGraphical link analysis tool for OSINT.
Recon WebsiteSearch engine for Internet-connected devices.
Recon WebsiteThe Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis.
Analysis Website