📌PENTEST DICTIONARY📌
A list of great resources for pentesting and similars. The resources marked with the symbol [+] are installed in Kali and Parrot OS by default
LISTS OF TOOLS
I will keep updated the project with new tools or changes.
⭕ FUZZING:
- wfuzz --> https://github.com/xmendez/wfuzz [+]
- gobuster --> https://github.com/OJ/gobuster [+]
- dirbuster --> (It haven't a repository) [+]
- Amass --> https://github.com/OWASP/Amass [-]
- dirb --> (It haven't a repository) [+]
- feroxbuster --> https://github.com/epi052/feroxbuster [-]
- ffuz --> https://github.com/ffuf/ffuf [-]
- sublist3r --> https://github.com/aboul3la/Sublist3r [-]
- dig --> https://github.com/polarityio/dig [+]
⭕ NETWORK SCANNING:
-
nmap --> https://github.com/nmap/nmap [+]
-
masscan --> https://github.com/robertdavidgraham/masscan [+]
-
smbmap --> https://github.com/ShawnDEvans/smbmap [+]
-
enum4linux --> https://github.com/CiscoCXSecurity/enum4linux [+]
-
rpcenum --> https://github.com/s4vitar/rpcenum [-]
-
rpcclient --> https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html [+]
-
WhatWaf --> https://github.com/Ekultek/WhatWaf [-]
-
whatw00f --> https://github.com/EnableSecurity/wafw00f [-]
⭕ NETWORK EXPLOITATION:
- crackmapexec --> https://github.com/byt3bl33d3r/CrackMapExec [-]
- Rubeus --> https://github.com/GhostPack/Rubeus [-]
- netcat --> (It haven't a repository) [+]
- sqlmap --> https://github.com/sqlmapproject/sqlmap [+]
- nishang --> https://github.com/samratashok/nishang [-]
- snmpwalk --> https://github.com/etingof/snmpclitools [+]
⭕ WEB/CMS SCANNERS:
- WhatWeb --> https://github.com/urbanadventurer/WhatWeb [+]
- Wappalyzer --> (You can find it as a Mozilla extension) [-]
- wpscan --> https://github.com/wpscanteam/wpscan [+]
- WPSeku --> https://github.com/Redshoee/WPSeku [-]
- joomscan --> https://github.com/OWASP/joomscan [-]
⭕ ACTIVE DIRECTORY:
- mimikatz --> https://github.com/gentilkiwi/mimikatz [+]
- kerbrute --> https://github.com/ropnop/kerbrute [-]
- impacket --> https://github.com/SecureAuthCorp/impacket/ [+] (And all the tools such as secretsdump or responder)
- ldapdomaindump --> https://github.com/dirkjanm/ldapdomaindump [+]
- Responder --> https://github.com/lgandx/Responder [+]
- evil-winrm --> https://github.com/Hackplayers/evil-winrm [-]
- BloodHound --> https://github.com/BloodHoundAD/BloodHound [+]
- ldapsearch --> (It haven't a repository) [+]
- neo4j --> https://github.com/neo4j/neo4j [+]
- SharpHound --> https://github.com/BloodHoundAD/BloodHound/tree/master/Collectors [-]
- PowerSploit --> https://github.com/PowerShellMafia/PowerSploit [-]
⭕ WEB HACKING:
- Burp Suite --> https://portswigger.net/burp [+]
- kiterunner --> https://github.com/assetnote/kiterunner [-]
- xsshunter --> https://xsshunter.com/ [-]
⭕ PRIVILEGE ESCALATION:
- PEASS-ng --> https://github.com/carlospolop/PEASS-ng [-]
- Windows-Exploit-Suggester --> https://github.com/AonCyberLabs/Windows-Exploit-Suggester [-]
- CapProcess --> https://github.com/D3Ext/CapProcess [-]
- GTFOBins --> https://gtfobins.github.io/ [-]
- juicy-potato --> https://github.com/ohpe/juicy-potato [-]
- pspy --> https://github.com/DominicBreuker/pspy [-]
- JAWS --> https://github.com/411Hall/JAWS [-]
- BeRoot --> https://github.com/AlessandroZ/BeRoot [-]
⭕ PIVOTING:
- socat --> https://github.com/aledbf/socat-static-binary [+]
- proxychains --> https://github.com/haad/proxychains [+]
- chisel --> https://github.com/jpillora/chisel [-]
- Precompiled-Binaries --> https://github.com/andrew-d/static-binaries/tree/master/binaries [-]
⭕ PAYLOADS/EXPLOITS:
- searchsploit --> https://github.com/offensive-security/exploitdb [-]
- metasploit --> https://www.metasploit.com/ (Not allowed in the OSCP) [+]
- msfvenom --> https://www.offensive-security.com/metasploit-unleashed/msfvenom/ [+]
- Ebowla --> https://github.com/Genetic-Malware/Ebowla [-]
- bin-sploits --> https://github.com/offensive-security/exploitdb-bin-sploits [+]
⭕ COMMON VULNS:
- eternalblue --> https://github.com/worawit/MS17-010 [-]
- heartbleed --> https://github.com/sensepost/heartbleed-poc [-]
- dirtycow --> https://dirtycow.ninja/ [-]
- shellshock --> https://github.com/opsxcq/exploit-CVE-2014-6271 [-]
- printnightmare --> https://github.com/calebstewart/CVE-2021-1675 [-]
- Log4j --> https://github.com/adilsoybali/Log4j-RCE-Scanner [-]
⭕ HASH CRACKING:
- john --> https://github.com/openwall/john [+] --> (And john variants like ssh2john or zip2john...)
- hashcat --> https://github.com/hashcat/hashcat [+]
- hash-identifier --> https://github.com/blackploit/hash-identifier [+]
- HashID --> https://github.com/psypanda/hashID [+]
- Crackstation --> https://crackstation.net/ [-]
⭕ WIFI:
- aircrack-ng --> https://github.com/aircrack-ng/aircrack-ng [+]
- Wireshark --> https://github.com/wireshark/wireshark [+]
- wifite2 --> https://github.com/derv82/wifite2 [+]
- macchanger --> (It havent a repository) [+]
- bettercap --> https://github.com/bettercap/bettercap [+]
- Pyrit --> https://github.com/JPaulMora/Pyrit [-]
- Evil-Trust --> https://github.com/s4vitar/evilTrust [-]
⭕ DEBUGGING/BUFFER OVERFLOW:
- exiftool --> https://github.com/exiftool/exiftool [+]
- brakeman --> https://github.com/presidentbeef/brakeman [-]
- radare2 --> https://github.com/radareorg/radare2 [-]
- gdb --> https://github.com/cs01/gdbgui [+]
- gef --> https://github.com/hugsy/gef [-] (It's a gdb extension))
- peda --> https://github.com/longld/peda [-]
- ghydra --> https://github.com/NationalSecurityAgency/ghidra/ [-]
- ropper --> https://github.com/sashs/Ropper [-]
- InmunityDebugger --> https://www.immunityinc.com/products/debugger/ [-]
- mona --> https://github.com/corelan/mona [-]
⭕ EXTRAS:
- odat --> https://github.com/quentinhardy/odat [-]
- cewl --> https://github.com/digininja/CeWL [+]
- rlwrap --> https://github.com/hanslub42/rlwrap [-]
- ModHeader --> (You can find it as a Mozilla extension) [-]
- enyx --> https://github.com/trickster0/Enyx [-]
- webshell --> https://gist.github.com/joswr1ght/22f40787de19d80d110b37fb79ac3985 [-]
- PRET --> https://github.com/RUB-NDS/PRET [-]
- kbd-audio --> https://github.com/ggerganov/kbd-audio [-]
- swaks --> https://github.com/jetmore/swaks [+]
- wabt --> https://github.com/WebAssembly/wabt [-]
- IOXIDResolver --> https://github.com/mubix/IOXIDResolver [-]
- SprayingToolkit --> https://github.com/byt3bl33d3r/SprayingToolkit [-]
📝 REFERENCES:
- Reverse-Shells
- PayloadsAllTheThings
- Wrappers
- ExploitDB
- HackTricks
- Buffer-Overflow
- Wifi-Cheat-Sheet
- CVE
- AppLockerByPass
- SecLists
- HackingDream
- MalwareSourceCode
- Pivoting-Cheat-Sheet
- HackTheBox-Writeups
- ViewDns
Always try to search in internet for potential vulnerabilities, default credentials and things you don't know about
⚪ Created by D3Ext