mfrw commented 3 years ago

A tracking issue for penetration testing tools.

Information Gathering:

[ ] ace-voip
[ ] amap → #9201
[ ] APT2
[x] arp-scan → #1699
[ ] asnmap
[ ] Automater
[ ] bing-ip2hosts
[x] braa → https://github.com/tldr-pages/tldr/pull/9041
[ ] CaseFile
[ ] cdncheck
[ ] CDPSnarf
[ ] cisco-torch
[ ] cloudlist
[ ] copy-router-config
[ ] DMitry
[ ] dnmap
[ ] dnsenum → #9195
[x] dnsmap → #8706
[ ] DNSRecon
[x] dnstracer → #8707
[ ] dnswalk
[ ] dnsx → #12618
[ ] DotDotPwn
[ ] enum4linux
[ ] enumIAX
[ ] EyeWitness
[ ] Faraday
[ ] Fierce
[ ] Firewalk
[ ] fragroute
[ ] fragrouter
[ ] Ghost Phisher
[ ] GoLismero
[ ] goofile
[ ] gophish
[x] hping3 → #7147
[x] httpx → #12279
[ ] ident-user-enum
[ ] ike-scan
[ ] InSpy
[ ] InTrace
[ ] iSMTP
[ ] king phisher
[ ] lbd
[ ] Maltego Teeth
[x] masscan → #6986
[ ] Metagoofil
[ ] Miranda
[x] naabu → #12206
[ ] nbtscan-unixwiz
[ ] netdiscover
[ ] Nikto
[x] Nmap #66
[ ] ntop
[ ] OSRFramework
[ ] p0f
[ ] Parsero
[ ] Recon-ng
[ ] SET
[ ] shuffledns
[x] SMBMap → #7053
[ ] smtp-user-enum
[ ] snmp-check
[ ] SPARTA
[ ] sslcaudit
[ ] SSLsplit
[ ] sslstrip
[ ] SSLyze
[x] subfinder → https://github.com/tldr-pages/tldr/pull/2178
[x] Sublist3r → https://github.com/tldr-pages/tldr/pull/4912
[ ] THC-IPV6
[x] theHarvester → https://github.com/tldr-pages/tldr/pull/4912
[ ] TLSSLed
[ ] twofi
[ ] Unicornscan
[ ] URLCrazy
[x] tcpdump → #138
[x] tshark (wireshark) → #2758
[ ] WOL-E
[ ] Xplico
[ ] zenmap
[ ] zmap

Vulnerability Analysis:

[ ] BBQSQL
[ ] BED
[ ] beef-xss
[ ] cisco-auditing-tool
[ ] cisco-global-exploiter
[ ] cisco-ocs
[ ] cisco-torch
[ ] copy-router-config
[ ] Doona
[ ] DotDotPwn
[ ] HexorBase
[ ] jSQL Injection
[x] Lynis → https://github.com/tldr-pages/tldr/pull/3034
[ ] mdb-sql
[ ] msfpc
[x] msfconsole → https://github.com/tldr-pages/tldr/pull/13285
[ ] nessus
[x] Nmap → #66
[x] nuclei → #12252
[ ] ohrwurm
[ ] openvas
[ ] Oscanner
[ ] Powerfuzzer
[ ] sfuzz
[ ] setoolkit
[x] searchsploit → https://github.com/tldr-pages/tldr/pull/6826
[ ] SidGuesser
[ ] SIPArmyKnife
[ ] sqlitebrowser
[x] sqlmap → #2412
[ ] Sqlninja
[ ] sqlsus
[ ] THC-IPV6
[ ] tnscmd10g
[ ] unix-privesc-check
[ ] vuls
[ ] Yersinia

Wireless Attacks

[ ] Airbase-ng
[x] Aircrack-ng → #9913
[x] Airdecap-ng → #9974
[ ] Airdecloak-ng
[x] Aireplay-ng → #9333
[ ] airgeddon
[ ] airgraph-ng
[x] Airmon-ng → #4974
[x] Airodump-ng → #9114
[ ] airodump-ng-oui-update
[ ] Airolib-ng
[ ] Airserv-ng
[ ] Airtun-ng
[ ] Asleap
[ ] Besside-ng
[ ] Bluelog
[ ] BlueMaho
[ ] Bluepot
[ ] BlueRanger
[ ] Bluesnarfer
[x] Bully → #9561
[ ] chirpw
[ ] coWPAtty
[x] crackle → #13425
[ ] cutycapt
[ ] eapmd5pass
[ ] Easside-ng
[ ] Fern Wifi Cracker
[ ] FreeRADIUS-WPE
[ ] Ghost Phisher
[ ] GISKismet
[ ] Gqrx
[ ] gr-scan
[ ] hostapd-wpe
[ ] ivstools
[ ] kalibrate-rtl
[ ] keepnote
[ ] KillerBee
[x] Kismet → https://github.com/tldr-pages/tldr/pull/10606
[ ] makeivs-ng
[ ] mdk3
[ ] mdk4
[ ] mfcuk
[ ] mfoc
[ ] mfterm
[ ] Multimon-NG
[ ] Packetforge-ng
[ ] phishx
[ ] PixieWPS
[x] Pyrit → #9230
[ ] Reaver
[ ] redfang
[ ] recordmydesktop
[ ] RTLSDR Scanner
[ ] Spooftooph
[ ] Tkiptun-ng
[ ] Wesside-ng
[ ] Wifi Honey
[ ] wifiphisher
[ ] wifi pumpkin
[ ] Wifitap
[ ] Wifite
[ ] wpaclean

Web Applications

[ ] apache-users
[ ] Arachni
[ ] BBQSQL
[ ] BlindElephant
[x] Burp Suite → #9104
[ ] CutyCapt
[ ] DAVTest
[ ] deblaze
[x] DIRB → #6960
[ ] DirBuster
[X] ffuf → #6183
[ ] fimap
[ ] FunkLoad
[x] Gobuster → #5188
[ ] Grabber
[ ] hURL
[ ] httrack
[ ] jboss-autopwn
[ ] joomscan
[ ] jSQL Injection
[x] katana → #12619
[ ] Maltego Teeth
[x] Nikto → https://github.com/tldr-pages/tldr/commit/e2393a32f0b0a4bc1c0e7661b7e11ebbf544e731
[ ] OWASP ZAP
[ ] PadBuster
[ ] Paros
[ ] Parsero
[ ] plecost
[ ] Powerfuzzer
[ ] ProxyStrike
[ ] Recon-ng
[ ] Skipfish
[x] sqlmap → #2412
[ ] Sqlninja
[ ] sqlsus
[ ] ua-tester
[ ] Uniscan
[ ] w3af
[ ] WebScarab
[ ] Webshag
[ ] WebSlayer
[ ] WebSploit
[x] Wfuzz → #9896
[ ] WhatWeb
[ ] WPScan
[ ] XSSer
[ ] zaproxy

Forensics Tools

[ ] autopsy
[x] Binwalk → #3943
[ ] bulk-extractor
[ ] Capstone
[ ] chkrootkit
[ ] chntpw
[ ] Cuckoo
[ ] dc3dd
[ ] ddrescue
[ ] DFF
[ ] diStorm3
[ ] Dumpzilla → #7303
[ ] extundelete
[ ] Foremost
[ ] Galleta
[ ] Guymager
[ ] iPhone Backup Analyzer
[x] mat2 → #3207
[ ] p0f
[ ] pdf-parser
[ ] pdfid
[ ] pdgmail
[ ] peepdf
[ ] RegRipper
[ ] Volatility
[ ] Xplico

Stress Testing

[ ] DHCPig
[ ] FunkLoad
[ ] iaxflood
[ ] Inundator
[ ] inviteflood
[ ] ipv6-toolkit
[ ] mdk4
[ ] Reaver
[ ] rtpflood
[ ] SlowHTTPTest
[ ] t50
[ ] Termineter
[ ] THC-IPV6
[ ] THC-SSL-DOS

Sniffing & Spoofing

[ ] arpspoof
[ ] bettercap
[ ] Burp Suite
[ ] DNSChef
[ ] driftnet
[ ] dsniff
[ ] fiked
[ ] hamster-sidejack
[ ] HexInject
[ ] ettercap
[ ] iaxflood
[ ] inviteflood
[ ] iSMTP
[ ] isr-evilgrade
[x] macchanger → https://github.com/tldr-pages/tldr/pull/4087
[x] mitmproxy → https://github.com/tldr-pages/tldr/commit/9a819adb6f0b494d527b49f6643a355262573df8
[ ] netcat
[ ] netsniff-ng
[ ] ohrwurm
[ ] protos-sip
[ ] rebind
[ ] responder
[ ] rtpbreak
[ ] rtpinsertsound
[ ] rtpmixsound
[ ] scapy
[ ] sctpscan
[ ] SIPArmyKnife
[ ] SIPp
[ ] SIPVicious
[ ] SniffJoke
[ ] SSLsplit
[x] sslstrip
[ ] THC-IPV6
[ ] VoIPHopper
[ ] WebScarab
[ ] Wifi Honey
[ ] Wireshark
[ ] xspy
[ ] Yersinia
[ ] zaproxy

Password Attacks

[ ] BruteSpray
[ ] Burp Suite
[x] CeWL → #3945
[ ] chntpw
[ ] cisco-auditing-tool
[ ] CmosPwd
[ ] creddump
[ ] crowbar
[x] crunch → #4719
[ ] fcrackzip
[ ] findmyhash
[ ] gpp-decrypt
[ ] hash-identifier
[x] Hashcat
[ ] hashdeep
[ ] HexorBase
[ ] THC-Hydra → #3468
[x] John the Ripper → #3964
[ ] Johnny
[ ] keimpx
[ ] Maltego Teeth
[ ] Maskprocessor
[x] medusa → https://github.com/tldr-pages/tldr/pull/3899
[ ] multiforcer
[ ] Ncrack
[ ] oclgausscrack
[ ] ophcrack
[ ] PACK
[ ] patator
[ ] phrasendrescher
[ ] polenum
[ ] RainbowCrack
[ ] rcracki-mt
[ ] RSMangler
[x] ~SecLists~ (a collection of wordlists, no executable)
[ ] SQLdict
[ ] Statsprocessor
[ ] THC-pptp-bruter
[ ] TrueCrack
[ ] WebScarab
[ ] wordlists
[ ] zaproxy

Maintaing Access

[ ] beroot
[ ] bloodhound
[x] CryptCat → #7226
[ ] Cymothoa
[ ] dbd
[ ] dns2tcp
[ ] dnscat2
[ ] empire
[ ] HTTPTunnel
[ ] Intersect
[ ] koadic
[ ] meterpreter
[ ] mimikatz
[ ] Nishang
[ ] polenum
[ ] PowerSploit
[ ] pupy
[ ] pwnat
[ ] pwncat
[ ] RidEnum
[ ] sbd
[ ] shellter
[ ] U3-Pwn
[ ] Webshells
[ ] Weevely
[ ] Winexe

Reverse Engineering

[ ] angr
[x] apktool → https://github.com/tldr-pages/tldr/pull/4053
[ ] dex2jar
[ ] diStorm3
[ ] edb-debugger
[ ] ghidra
[ ] jad
[ ] javasnoop
[ ] JD-GUI
[ ] radare2
[ ] OllyDbg
[ ] smali
[x] Valgrind → #1407
[ ] YARA

Hardware Hacking

[ ] androguard
[ ] android-sdk
[ ] android tamer
[x] apktool → #4053
[ ] Arduino
[ ] dex2jar
[ ] frida
[ ] mastg
[ ] mobsf
[ ] nethunter
[ ] quark engine
[ ] Sakis3G
[ ] smali

Reporting Tools

[ ] CaseFile
[ ] cherrytree
[ ] CutyCapt
[ ] defectdojo
[x] dos2unix → #4024
[ ] Dradis
[ ] Lair-framework
[ ] MagicTree
[ ] Metagoofil
[ ] Nipper-ng
[ ] pipal
[ ] RDPY
[ ] serpico

Exploit Development

[ ] armitage
[ ] commix
[ ] exploit-db
[ ] exploit pack
[ ] metasploit
[x] msfvenom #3476
[ ] ptf
[x] pwntools #12352
[ ] ropper
[ ] routersploit
[ ] shellnoob
[ ] ysoserial

ciph3rz commented 3 years ago

Happy to contribute to this effort! Some of the tools however are GUI only with no commandline options. Any chance we can update the list of TODOs as some of the tools are already in TLDR.

marchersimon commented 3 years ago

@ciph3rz sure. If you could tell us which commands we already have and which ones are GUI-only, we'll update the list.

AkechiShiro commented 2 years ago

@marchersimon jd-gui is GUI only, burp suite too I believe, zaproxy too

Gareck-OG commented 1 year ago

As far as im aware Gobuster already got added ages ago and it didnt get marked as done in the list above

kbdharun commented 1 year ago

As far as im aware Gobuster already got added ages ago and it didnt get marked as done in the list above

Will mark it as done, thanks.

AkechiShiro commented 1 year ago

@kbdharun how can you edit the comment of the user ? Is it because you're a member of the tldr-pages GitHub org ?