Category

Metasploit

Metasploit is a penetration testing framework that helps security teams verify vulnerabilities, manage assessments, and improve security awareness.

Web External Services

Cloud SecurityInfrastructure SecurityReconnaissance

AzureHound

AzureHound is a BloodHound data collector for Microsoft Azure, enabling security professionals to map attack paths in Azure environments.

Cloud

Infrastructure SecurityRed Team OperationsReporting

Canarytokens

Canarytokens is a free tool to plant traps in your network that notify you when triggered, helping you detect breaches early.

Phishing

Infrastructure Security

Chisel

Chisel: A fast TCP/UDP tunnel over HTTP, secured via SSH. Useful for firewalls, providing secure network endpoints.

Cloud SecurityInfrastructure Security

CloudFox

CloudFox helps penetration testers find exploitable attack paths in cloud infrastructure, currently supporting AWS with more on the way.

Cloud

Cloud SecurityInfrastructure Security

CloudQuery

CloudQuery provides a developer-first cloud governance platform for security, compliance, and cost visibility across multi-cloud environments.

Report Cloud

Infrastructure Security

CrackMapExec

CrackMapExec is a swiss army knife for pentesting Windows networks, automating common tasks for assessing security vulnerabilities.

Infrastructure Security

Evil-WinRM

Evil-WinRM is the ultimate WinRM shell for hacking/pentesting, offering features like in-memory script loading and AMSI bypass.

Infrastructure Security

GTFOBins

GTFOBins is a curated list of Unix binaries to bypass local security restrictions in misconfigured systems, aiding pentesters and researchers.

Application SecurityReconnaissanceInfrastructure Security

Gobuster

Web External Bug Bounty Classification

Gobuster is a tool to brute-force URIs, DNS subdomains, and virtual hostnames, aiding in web application reconnaissance.

Infrastructure Security

Impacket

Impacket is a collection of Python classes for working with network protocols, focused on low-level packet access and protocol implementation.