Let's document: pen-testing tools

[mfrw]

A tracking issue for penetration testing tools.

Information Gathering:

• [ ] ace-voip
• [ ] amap → #9201
• [ ] APT2
• [x] arp-scan → #1699
• [ ] asnmap
• [ ] Automater
• [ ] bing-ip2hosts
• [x] braa
• [ ] CaseFile
• [ ] cdncheck
• [ ] CDPSnarf
• [ ] cisco-torch
• [ ] cloudlist
• [ ] copy-router-config
• [ ] DMitry
• [ ] dnmap
• [ ] dnsenum → #9195
• [x] dnsmap → #8706
• [ ] DNSRecon
• [x] dnstracer → #8707
• [ ] dnswalk
• [ ] dnsx → #12618
• [ ] DotDotPwn
• [ ] enum4linux
• [ ] enumIAX
• [ ] EyeWitness
• [ ] Faraday
• [ ] Fierce
• [ ] Firewalk
• [ ] fragroute
• [ ] fragrouter
• [ ] Ghost Phisher
• [ ] GoLismero
• [ ] goofile
• [x] hping3 → #7147
• [x] httpx → #12279
• [ ] ident-user-enum
• [ ] InSpy
• [ ] InTrace
• [ ] iSMTP
• [ ] lbd
• [ ] Maltego Teeth
• [x] masscan → #6986
• [ ] Metagoofil
• [ ] Miranda
• [x] naabu → #12206
• [ ] nbtscan-unixwiz
• [ ] Nikto
• [x] Nmap #66
• [ ] ntop
• [ ] OSRFramework
• [ ] p0f
• [ ] Parsero
• [ ] Recon-ng
• [ ] SET
• [ ] shuffledns
• [x] SMBMap → #7053
• [ ] smtp-user-enum
• [ ] snmp-check
• [ ] SPARTA
• [ ] sslcaudit
• [ ] SSLsplit
• [ ] sslstrip
• [ ] SSLyze
• [x] subfinder
• [x] Sublist3r
• [ ] THC-IPV6
• [x] theHarvester
• [ ] TLSSLed
• [ ] twofi
• [ ] Unicornscan
• [ ] URLCrazy
• [x] tcpdump → #138
• [x] tshark (wireshark) → #2758
• [ ] WOL-E
• [ ] Xplico

Vulnerability Analysis:

• [ ] BBQSQL
• [ ] BED
• [ ] cisco-auditing-tool
• [ ] cisco-global-exploiter
• [ ] cisco-ocs
• [ ] cisco-torch
• [ ] copy-router-config
• [ ] Doona
• [ ] DotDotPwn
• [ ] HexorBase
• [ ] jSQL Injection
• [ ] Lynis
• [x] Nmap → #66
• [x] nuclei → #12252
• [ ] ohrwurm
• [ ] openvas
• [ ] Oscanner
• [ ] Powerfuzzer
• [ ] sfuzz
• [ ] SidGuesser
• [ ] SIPArmyKnife
• [x] sqlmap → #2412
• [ ] Sqlninja
• [ ] sqlsus
• [ ] THC-IPV6
• [ ] tnscmd10g
• [ ] unix-privesc-check
• [ ] Yersinia

Wireless Attacks

• [ ] Airbase-ng
• [x] Aircrack-ng → #9913
• [x] Airdecap-ng → #9974
• [ ] Airdecloak-ng
• [x] Aireplay-ng → #9333
• [ ] airgraph-ng
• [x] Airmon-ng → #4974
• [x] Airodump-ng → #9114
• [ ] airodump-ng-oui-update
• [ ] Airolib-ng
• [ ] Airserv-ng
• [ ] Airtun-ng
• [ ] Asleap
• [ ] Besside-ng
• [ ] Bluelog
• [ ] BlueMaho
• [ ] Bluepot
• [ ] BlueRanger
• [ ] Bluesnarfer
• [x] Bully → #9561
• [ ] coWPAtty
• [ ] crackle
• [ ] eapmd5pass
• [ ] Easside-ng
• [ ] Fern Wifi Cracker
• [ ] FreeRADIUS-WPE
• [ ] Ghost Phisher
• [ ] GISKismet
• [ ] Gqrx
• [ ] gr-scan
• [ ] hostapd-wpe
• [ ] ivstools
• [ ] kalibrate-rtl
• [ ] KillerBee
• [ ] Kismet
• [ ] makeivs-ng
• [ ] mdk3
• [ ] mdk4
• [ ] mfcuk
• [ ] mfoc
• [ ] mfterm
• [ ] Multimon-NG
• [ ] Packetforge-ng
• [ ] PixieWPS
• [x] Pyrit → #9230
• [ ] Reaver
• [ ] redfang
• [ ] RTLSDR Scanner
• [ ] Spooftooph
• [ ] Tkiptun-ng
• [ ] Wesside-ng
• [ ] Wifi Honey
• [ ] wifiphisher
• [ ] Wifitap
• [ ] Wifite
• [ ] wpaclean

Web Applications

• [ ] apache-users
• [ ] Arachni
• [ ] BBQSQL
• [ ] BlindElephant
• [x] Burp Suite → #9104
• [ ] CutyCapt
• [ ] DAVTest
• [ ] deblaze
• [x] DIRB → #6960
• [ ] DirBuster
• [X] ffuf → #6183
• [ ] fimap
• [ ] FunkLoad
• [x] Gobuster → #5188
• [ ] Grabber
• [ ] hURL
• [ ] jboss-autopwn
• [ ] joomscan
• [ ] jSQL Injection
• [ ] katana → #12619
• [ ] Maltego Teeth
• [ ] Nikto
• [ ] PadBuster
• [ ] Paros
• [ ] Parsero
• [ ] plecost
• [ ] Powerfuzzer
• [ ] ProxyStrike
• [ ] Recon-ng
• [ ] Skipfish
• [x] sqlmap → #2412
• [ ] Sqlninja
• [ ] sqlsus
• [ ] ua-tester
• [ ] Uniscan
• [ ] w3af
• [ ] WebScarab
• [ ] Webshag
• [ ] WebSlayer
• [ ] WebSploit
• [x] Wfuzz → #9896
• [ ] WhatWeb
• [ ] WPScan
• [ ] XSSer
• [ ] zaproxy

Forensics Tools

• [x] Binwalk → #3943
• [ ] bulk-extractor
• [ ] Capstone
• [ ] chntpw
• [ ] Cuckoo
• [ ] dc3dd
• [ ] ddrescue
• [ ] DFF
• [ ] diStorm3
• [ ] Dumpzilla → #7303
• [ ] extundelete
• [ ] Foremost
• [ ] Galleta
• [ ] Guymager
• [ ] iPhone Backup Analyzer
• [x] mat2 → #3207
• [ ] p0f
• [ ] pdf-parser
• [ ] pdfid
• [ ] pdgmail
• [ ] peepdf
• [ ] RegRipper
• [ ] Volatility
• [ ] Xplico

Stress Testing

• [ ] DHCPig
• [ ] FunkLoad
• [ ] iaxflood
• [ ] Inundator
• [ ] inviteflood
• [ ] ipv6-toolkit
• [ ] mdk4
• [ ] Reaver
• [ ] rtpflood
• [ ] SlowHTTPTest
• [ ] t50
• [ ] Termineter
• [ ] THC-IPV6
• [ ] THC-SSL-DOS

Sniffing & Spoofing

• [ ] bettercap
• [ ] Burp Suite
• [ ] DNSChef
• [ ] fiked
• [ ] hamster-sidejack
• [ ] HexInject
• [ ] iaxflood
• [ ] inviteflood
• [ ] iSMTP
• [ ] isr-evilgrade
• [ ] mitmproxy
• [ ] ohrwurm
• [ ] protos-sip
• [ ] rebind
• [ ] responder
• [ ] rtpbreak
• [ ] rtpinsertsound
• [ ] rtpmixsound
• [ ] sctpscan
• [ ] SIPArmyKnife
• [ ] SIPp
• [ ] SIPVicious
• [ ] SniffJoke
• [ ] SSLsplit
• [x] sslstrip
• [ ] THC-IPV6
• [ ] VoIPHopper
• [ ] WebScarab
• [ ] Wifi Honey
• [ ] Wireshark
• [ ] xspy
• [ ] Yersinia
• [ ] zaproxy

Password Attacks

• [ ] BruteSpray
• [ ] Burp Suite
• [x] CeWL → #3945
• [ ] chntpw
• [ ] cisco-auditing-tool
• [ ] CmosPwd
• [ ] creddump
• [ ] crowbar
• [ ] crunch → #4719
• [ ] findmyhash
• [ ] gpp-decrypt
• [ ] hash-identifier
• [x] Hashcat
• [ ] HexorBase
• [ ] THC-Hydra → #3468
• [x] John the Ripper → #3964
• [ ] Johnny
• [ ] keimpx
• [ ] Maltego Teeth
• [ ] Maskprocessor
• [ ] multiforcer
• [ ] Ncrack
• [ ] oclgausscrack
• [ ] ophcrack
• [ ] PACK
• [ ] patator
• [ ] phrasendrescher
• [ ] polenum
• [ ] RainbowCrack
• [ ] rcracki-mt
• [ ] RSMangler
• [ ] ~SecLists~ (a collection of wordlists, no executable)
• [ ] SQLdict
• [ ] Statsprocessor
• [ ] THC-pptp-bruter
• [ ] TrueCrack
• [ ] WebScarab
• [ ] wordlists
• [ ] zaproxy

Maintaing Access

• [x] CryptCat → #7226
• [ ] Cymothoa
• [ ] dbd
• [ ] dns2tcp
• [ ] HTTPTunnel
• [ ] Intersect
• [ ] Nishang
• [ ] polenum
• [ ] PowerSploit
• [ ] pwnat
• [ ] RidEnum
• [ ] sbd
• [ ] shellter
• [ ] U3-Pwn
• [ ] Webshells
• [ ] Weevely
• [ ] Winexe

Reverse Engineering

• [x] apktool
• [ ] dex2jar
• [ ] diStorm3
• [ ] edb-debugger
• [ ] jad
• [ ] javasnoop
• [ ] JD-GUI
• [ ] OllyDbg
• [ ] smali
• [x] Valgrind → #1407
• [ ] YARA

Hardware Hacking

• [ ] android-sdk
• [x] apktool → #4053
• [ ] Arduino
• [ ] dex2jar
• [ ] Sakis3G
• [ ] smali

Reporting Tools

• [ ] CaseFile
• [ ] cherrytree
• [ ] CutyCapt
• [x] dos2unix → #4024
• [ ] Dradis
• [ ] MagicTree
• [ ] Metagoofil
• [ ] Nipper-ng
• [ ] pipal
• [ ] RDPY

Exploit Development

• [x] pwntools #12352
• [x] msfvenom #3476

[ciph3rz]

Happy to contribute to this effort! Some of the tools however are GUI only with no commandline options. Any chance we can update the list of TODOs as some of the tools are already in TLDR.

[marchersimon]

@ciph3rz sure. If you could tell us which commands we already have and which ones are GUI-only, we'll update the list.

[AkechiShiro]

@marchersimon jd-gui is GUI only, burp suite too I believe, zaproxy too

[Gareck-OG]

As far as im aware Gobuster already got added ages ago and it didnt get marked as done in the list above

[kbdharun]

As far as im aware Gobuster already got added ages ago and it didnt get marked as done in the list above

Will mark it as done, thanks.

[AkechiShiro]

@kbdharun how can you edit the comment of the user ? Is it because you're a member of the tldr-pages GitHub org ?

[kbdharun]

@kbdharun how can you edit the comment of the user ? Is it because you're a member of the tldr-pages GitHub org ?

Yes, you can edit others comments if you/your team in org has commit access to the repository.