Hacking Tools Directory - Haxf4rall

Category

(Click to Jump)

Hacking Tools Directory

(New Tools added daily)

Kalitorify – Transparent Proxy through TOR

Top 4 Linux Operating Systems for Privacy & Anonymity – 2019

How to Fully Anonymize Your System with Tor using Nipe

GlobaLeaks – Opensource Whistleblowing Framework

Lockdoor – All in One Penetration Testing Framework

Rebel Framework – Advanced and easy to use Penetration Testing Framework

APTSimulator – Toolset to Simulate APT Attack

FudgeC2 – A Collaborative C2 Framework for Purple-Teaming

SecurityNotFound – 404 Page Not Found Webshell

Koadic – C3 COM Command & Control – JScript RAT

TrevorC2 – Command and Control via Legitimate Behavior over HTTP

Androspy – Backdoor Crypter & Creator With Automatic IP Poisener

DECAF – Dynamic Executable Code Analysis Framework

dnSpy v5.0 releases: .NET assembly editor, decompiler, and debugger

Manticore – Dynamic Binary Analysis Tool

Pharos – Static Binary Analysis Framework

Aura Botnet – A Portable Botnet Framework with a Django-based C2 server

UBoat – A POC HTTP Botnet Project

BYOB – Build your own Botnet

Ares – Python Botnet and Backdoor

Brute_Force – BruteForce Gmail, Hotmail, Twitter, Facebook & Netflix

Patator – Multi-Purpose Brute-Forcer with a Modular Design and a Flexible Usage

GoBuster v3.0 – Directory/File, DNS and VHost busting tool written in Go

HashCK – Automated Hashcracking Tool

pyvit: Python Vehicle Interface Toolkit

CANalyzat0r – Security Analysis Toolkit for Proprietary Car Protocols

The Bicho – An Advanced Car Backdoor Maker

CANToolz aka YACHT (Yet Another Car Hacking Tool)

Xssizer – The Best Tool To Find And Prove XSS Flaws

XSpear: Powerfull XSS Scanning and Parameter Analysis tool

XSS Chef: Generating Custom XSS payloads

JSShell – An interactive multi-user web JS shell

Cryptoforge – Encryption and Privacy Software

Cryptr – Shell Utility for Encrypting and Decrypting Files using OpenSSL

GhostSquadHackers – Encrypt/Encode Your Javascript Payloads

CyberChef – A web App For Encryption, Encoding, Compression & Data Analysis

UFONet – Toolkit Designed to launch DDoS and DoS attacks.

DHCP Starvation: DoS Attacks to the DHCP Server

Xerxes – DoS Tool Enhanced

WarChild – Denial Of Service Testing Suite Made For Analyzing

Sub.Sh – Online Subdomain Detect Script

Lightbulb – Framework for Auditing Web Applications Firewalls

Scoutsuite – Multi-Cloud Security Auditing Tool

IVRE – Network Recon Framework

Invisi-Shell: Bypass all Powershell security features

Graffiti – A Tool To Generate Obfuscated One Liners To Aid In Penetration Testing

Bypass Firewalls By DNS History

RedELK – Red Team’s SIEM

Faction – C2 Framework

TheTick – A simple embedded Linux backdoor

ConPtyShell – Fully Interactive Reverse Shell for Windows

Watson – Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Whids – Open Source Endpoint Detection System for Windows

Armourbird – Container Security Framework

PingCastle – Active Directory Security Assessment Tool

FalconGate – A Smart Gateway to Stop Hackers and Malware Attacks

PlainSight – Open Source Digital Forensics

Redline – Digital Forensics and Incident Response Framework

ODIN – Open Source Disk Imager

Rifiuti2 – Windows Recycle Bin analyser

Sandcat -The Pen Tester’s Web Browser

SSRFmap – Automatic SSRF Fuzzer And Exploitation Tool

sandsifter – The x86 Processor Fuzzer

Delta – SDN Security Evaluation & Penetration Testing Framework

Tortuga – An SMS Spamming tool for Andriod, Linux and Windows

SS7 Hack Attack and Counter Measures

SigintOS – Signal Intelligence Linux Distribution

Gpredict – Satellite Tracking Application

DorkMe – Google Dork Finder

Latest Google Dorks List 2018 For Ethical Hacking and Penetration Testing

Snitch – Information Gathering via Dorks

Zeus Scanner – Advanced Dork Searching Utility

HoneyBOT – Windows Medium Interaction Honeypot

CanaryTokens – Implant Honeypots in your Network

Kippo – SSH Honeypot

T-Pot Linux – Multi Honeypot Platform

DeTTecT – Detect Tactics, Techniques & Combat Threats

DumpsterFire Toolset – Security Incidents In A Box!

SysmonX – An Augmented Drop-In Replacement of Sysmon

ADRecon – Active Directory Recon

Expl-iot – Internet of Things Exploitation Framework

OWASP SecureTea Tool Project

ASTo – IoT Network Security Analysis Tool

IoTivity – Open-Source IoT Framework

Keytap – Acoustic Keyboard Eavesdropping

Spykeyboard – Keylogger Which Sends Data to Gmail

Ghostpress – Free Anti Keylogger

BeeLogger – Generate Email Keyloggers

Master of Puppets – Advanced Malware Tracking Framework

theZoo – A Live Malware Repository

BT3 – Blue Team Training Toolkit

AMIRA – Automated Malware Incident Response & Analysis

Dolos Cloak – Automated 802.1X Bypass

InveighZero – Windows C# LLMNR/mDNS/NBNS/DNS Spoofer/MITM Tool

Tabi – BGP Hijack Detection Tool

Seth – Perform a MitM Attack and Extract clear text Credentials from RDP

Objection – Runtime Mobile Exploration

Andrill – Vulnerable Mobile Application with Various Levels

Yaazhini – Free Android APK & API Vulnerability Scanner

ANDRAX v3 – The First And Unique Penetration Testing Platform For Android Smartphones

Reconnoitre – Multithreaded Recon and Enumeration Tool

Buster – Advanced Tool for Email Reconnaissance

BlackWidow – OSINT Web Application Scanner

sn0int – Semi-automatic OSINT Framework

Ostinato – Network Traffic Generator

Scapy – Interactive Packet Manipulation Tool

PA Toolkit – Wireshark Extensions for Penetration Testers

Nemesis – A Command Line Network Packet Crafting & Injecting Utility

GitGraber – Monitor GitHub to search and find sensitive data in real time

Emagnet – Tool to Find Leaked Databases with 97.1% Accuracy to Grab Email and Password

MimiPenguin – Tool to Dump Linux Login Password

PasteHunter – Scanning Pastebin With Yara Rules

Ispy – Eternalblue (MS17-010) / Bluekeep (CVE-2019-0708) Scanner And Exploit

HRShell – An Advanced HTTPS/HTTP Reverse Shell Built With Flask

GodOfWar – Malicious Java WAR builder with built-in payloads

O365 Attack Toolkit – A Toolkit to Attack Office365

CATPHISH – Phishing and Corporate Espionage

Phishing Simulation – Phishing Assessment Tool

FiercePhish – Full-fledged Phishing Framework

Hidden Eye – Modern Phishing Tool With Advanced Functionality

TikiTorch – Process Injection Tool

Postenum – Basic/Advanced Privilege Escalation Techniques

TROMMEL – Search Files For Potential Vulnerable Indicators

PivotSuite – A Network Pivoting Toolkit

nodeCrypto – Ransomware Written In NodeJs

A new project called “ShieldFS” can stop Ransomware attacks

Anatomy of a Crypto-Ransomware attack

Locky Ransomware – Latest global Cyber Security incident

AsyncRAT – Open-Source Remote Administration Tool For Windows

Slackor – A Golang implant that uses Slack as a CC2 Server

Loki – Remote Access Tool / Botnet

ToRat: Remote Administation Tool using Tor as a Transport Mechanism

Sh00t – Platform for Manual Security Testers & Bug Hunters

AttackForge – Penetration Testing Platform

VulnWhisperer – Create Actions from Vulnerability Data

ActivityWatch – Time-Tracking Application with a Focus on Extensibility and Privacy

Ghidra – Free Reverse Engineering Tool Developed by NSA

dnSpy v5.0 releases: .NET assembly editor, decompiler, and debugger

radare2 – Reverse Engineering Framework

Bytecode Viewer – A Java 8 Jar & Android Apk Reverse Engineering Suite

PHPStan – PHP Static Analysis Tool

ShC – Shell Script Compiler

Bandit – Designed to Find Common Security Issues in Python Code

Flawfinder v2.0.7 – Searches through C/C++ source code looking for potential security flaws

Realtime Scrapper: Scrap all pasties,github,reddit..etc in real time

Net Ghost – Fresh Proxy Scraper & Checker

CredSniper – Phishing Framework with 2FA Token Support

Cartero – Social Engineering Framework

SET v7.7 – The Social-Engineer Toolkit “Blackout”

SocialScan – Check Email Address and Username Availability on Online Platforms

Shellphish – Phishing Tool For 18 Social Media Apps

SQLMate – Automated SQLi Using Dorks

List of Best Open Source SQL Injection Tools – 2019

BSQLinjector – Blind SQL Injection Exploitation Tool

SleuthQL – SQL Injection Discovery Tool

Kippo – SSH Honeypot

ThunderDNS – Tool To Forward TCP Traffic Over DNS Protocol

Chisel – Fast TCP tunnel over HTTP

sshLooter – Script To Steal Passwords From SSH

Pixload – Image Payload Creating and Injecting tools

Stegosuite – Open Source Steganography Tool

PacketWhisper Exfiltration Toolset

Invoke-PSImage – Tool to Embed Powershell Scripts in PNG Image Pixels

Terminus – A Terminal for a more Modern Age

WTF – A Personal Information Dashboard For Your Terminal

Creating your own Run Commands

PatrOwl – Smart and Scalable Security Operations Orchestration Platform

Sampler – A Tool For Shell Commands Execution, Visualization And Alerting

ThreatHunting – A Splunk App Mapped To MITRE ATT&CK To Guide Your Threat Hunts

AIL framework – Framework for Analysis of Information Leaks

Tor Router – Script to make TOR your default gateway

TorBot – OSINT tool for Deep and Dark Web

FreshOnions TorScraper – TOR Hidden Service Crawler

Official TOR Browser App released for Android

Is your VPN Legit or Shit?

Most Secure VPN’s used by Hackers

8 Use cases of what you can do with a VPN

Testing your VPN’s Encryption and Privacy – Complete Guide

Syhunt Community 6.7 – Web And Mobile Application Scanner

OpenVAS – Open Vulnerability Assessment System

XSpear: Powerfull XSS Scanning and Parameter Analysis tool

Striker – Offensive vulnerability scanner

Cazador – WebApp Pentest Toolkit

N-Stalker X – Next Generation Web Application Scanner

WAFNinja – Tool to Bypass Web Application Firewalls

Bulletproof Hosting – Web Hosting used by Hackers

HashCatch – Capture Handshakes of nearby WiFi networks automatically

Ehtools – Framework Of Serious Wi-Fi Penetration Tools

WifiBroot – Wifi Cracking Tool for WPA/WPA2

Sparrow-Wifi – Graphical WiFi Analyzer for Linux

Kidux Leecher v1.0.3 – Easily Create Combo Lists for Cracking Accounts

Generate HQ Combo lists with Pastebin Grabber

Ahadu – Password List Generator

L517 – Simple Wordlist Generator