Tools & Resources

Network scanner for port scanning, service detection, and OS fingerprinting.

In-depth DNS enumeration and attack surface mapping.

Search engine for internet-connected devices and exposed services.

Gather emails, names, subdomains, IPs from public sources.

Full-featured web reconnaissance framework.

The industry standard for web application security testing.

Automatic SQL injection detection and exploitation tool.

Directory and file brute-forcing for web servers.

Web server scanner for dangerous files, outdated software, and misconfigurations.

Advanced XSS detection and exploitation framework.

The world's most used penetration testing framework.

Command-line search tool for Exploit-DB.

Payload generation and encoding tool.

CTF framework and exploit development library for Python.

Fast password cracker supporting many hash types.

Advanced GPU-based password recovery tool.

Network login brute-forcer supporting many protocols.

Suite of tools for WiFi network security assessment.

Network attack and monitoring framework.

Memory forensics framework for incident response.

Digital forensics platform for hard drive investigation.

Network protocol analyzer for deep packet inspection.

Pattern matching tool for malware identification.

NSA's open-source software reverse engineering suite.

Open-source reverse engineering framework.

Dynamic instrumentation toolkit for hooking into running processes.