84 lines
4.5 KiB
Markdown
84 lines
4.5 KiB
Markdown
# Awesome Hacking Tools
|
||
|
||
**A collection of awesome lists for hackers, pentesters & security researchers.**
|
||
|
||
A curated list of awesome Hacking Tools. Your contributions are always welcome !
|
||
|
||
### Awesome Repositories
|
||
Repository | Description
|
||
---- | ----
|
||
[fuzzdb](https://github.com/fuzzdb-project/fuzzdb) | Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
|
||
[HUNT Proxy Extension](https://github.com/bugcrowd/HUNT) | Identify common parameters vulnerable to certain vulnerability classes (HUNT Scanner, availible for Burp Suite PRO and ZAProxy). Organize testing methodologies (currently avalible only inside of Burp Suite).
|
||
[SecLists](https://github.com/danielmiessler/SecLists) | It is a collection of multiple types of lists used during security assessments
|
||
[Xerosploit](https://github.com/LionSec/xerosploit) | Efficient and advanced man in the middle framework
|
||
[ctf-tools](https://github.com/zardus/ctf-tools) | Some setup scripts for security research tools.
|
||
|
||
### Awesome custom projects / Scripts
|
||
Name | Description
|
||
---- | ----
|
||
[mimikatz](https://github.com/gentilkiwi/mimikatz) | A useful tool to play with Windows security including extracting plaintext passwords, kerberos tickets, etc.
|
||
|
||
### Exploitation tools
|
||
Name | Description
|
||
---- | ----
|
||
[BeEF](http://beefproject.com/) | Browser Exploitation Framework (Beef)
|
||
[Core Impact](https://www.coresecurity.com/core-impact) | Core Impact provides vulnerability assessment and penetration security testing throughout your organization.
|
||
[Metasploit](https://www.metasploit.com/) | The world’s most used penetration testing framework
|
||
|
||
### Linux Security Tools
|
||
Name | Description
|
||
---- | ----
|
||
[DefenseMatrix](https://github.com/K4YT3X/DefenseMatrix) | Full security solution for Linux Servers
|
||
|
||
### Exploit Databases
|
||
Name | Description
|
||
---- | ----
|
||
[0day](http://0day.today/) | Inj3ct0r is the ultimate database of exploits and vulnerabilities and a great resource for vulnerability researchers and security professionals.
|
||
[cxsecurity](http://cxsecurity.com/exploit) | Exploit Database
|
||
[exploit-db](https://www.exploit-db.com/) | Exploits Database by Offensive Security
|
||
[iedb](http://iedb.ir/) | Iranian Exploit DataBase
|
||
[rapid7](https://rapid7.com/db) | Vulnerability & Exploit Database - Rapid7
|
||
|
||
### MITM tools
|
||
Name | Description
|
||
---- | ----
|
||
[BetterCAP](https://www.bettercap.org/) | MITM attacks against a network, manipulate HTTP, HTTPS and TCP traffic in realtime, sniff for credentials and much more.
|
||
[Burp Suite](https://portswigger.net/burp) | GUI based tool for testing Web application security.
|
||
[Ettercap](https://ettercap.github.io/ettercap/) | Ettercap is a comprehensive suite for man in the middle attacks
|
||
[mitmproxy](https://mitmproxy.org/) | An interactive console program that allows traffic flows to be intercepted, inspected, modified and replayed
|
||
|
||
### SQL Injection
|
||
Name | Description
|
||
---- | ----
|
||
[SQLmap](http://sqlmap.org/) | Automatic SQL injection and database takeover tool
|
||
[SQLninja](http://sqlninja.sourceforge.net/) | SQL Server injection & takeover tool
|
||
|
||
### Search Engine for Penetration Tester
|
||
Name | Description
|
||
---- | ----
|
||
[Censys](https://www.censys.io/) | Censys continually monitors every reachable server and device on the Internet, so you can search for and analyze them in real time
|
||
[Shodan](http://shodan.io/) | Shodan is the world's first search engine for Internet-connected devices.
|
||
[Zoomeye](https://www.zoomeye.org/) | search engine for cyberspace that lets the user find specific network components(ip, services, etc.)
|
||
### Security Information and Event Management (SIEM)
|
||
Name | Description
|
||
---- | ----
|
||
[OSSIM](https://www.alienvault.com/products/ossim) | AlienVault’s Open Source Security Information and Event Management (SIEM) product
|
||
|
||
### Source Code Analysis Tools
|
||
Name | Description
|
||
---- | ----
|
||
[pyup](https://pyup.io/) | Automated Security and Dependency Updates
|
||
[RIPS](https://www.ripstech.com/) | PHP Security Analysis
|
||
[Retire.js](http://retirejs.github.io/retire.js/) | detecting the use of JavaScript libraries with known vulnerabilities
|
||
[Snyk](https://snyk.io/) | find & fix vulnerabilities in dependencies, supports various languages
|
||
|
||
### Binary Analysis Tools
|
||
Name | Description
|
||
---- | ----
|
||
[BinNavi](https://github.com/google/binnavi) | BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code
|
||
|
||
### Collaboration tools
|
||
Name | Description
|
||
---- | ----
|
||
[Dradis](https://dradisframework.com/ce/) | Open-source reporting and collaboration tool for InfoSec professionals
|