Skip to content

# Hacking Tools Wiki

Jump to bottom
YogSec edited this page Mar 21, 2025 · 1 revision

Welcome to the Hacking-Tools repository by YogSec. This repository is a curated collection of penetration testing and ethical hacking tools, categorized for ease of access. These tools aid in information gathering, exploitation, vulnerability analysis, and more.

Table of Contents

Introduction

This wiki serves as a documentation hub for ethical hacking and penetration testing tools. Each category contains widely used open-source and commercial tools that help security professionals in their assessments.

Categories

Information Gathering

  • Nmap – Network scanning and mapping.
  • Kismet – Wireless network detector and sniffer.
  • Maltego – OSINT and data mining.
  • theHarvester – Collect emails, subdomains, and more.
  • Recon-ng – Web reconnaissance framework.
  • Amass – Network mapping and asset discovery.
  • Shodan – Search engine for internet-connected devices.
  • WHOIS – Domain registration lookup.
  • OSINT Framework – OSINT tools collection.

Vulnerability Analysis

  • OpenVAS – Open-source vulnerability scanner.
  • Nessus – Commercial vulnerability scanner.
  • Nikto – Web server vulnerability scanner.
  • Wapiti – Web security scanner.
  • SQLmap – Automated SQL injection tool.
  • OWASP ZAP – Web application security scanner.
  • Retire.js – JavaScript vulnerability scanner.
  • Dependency-Check – Analyzes project dependencies for vulnerabilities.

Exploitation Tools

  • Metasploit Framework – Exploit development framework.
  • Armitage – GUI for Metasploit.
  • BeEF – Browser exploitation framework.
  • ExploitDB – Archive of exploits.
  • SearchSploit – Offline exploit search tool.
  • Commix – Automated command injection scanner.
  • RouterSploit – Router and IoT exploit framework.
  • Social Engineering Toolkit (SET) – Phishing and payload-based attacks.
  • Empire – PowerShell post-exploitation framework.

Wireless Attacks

  • Aircrack-ng – WiFi cracking suite.
  • Reaver – WPS attack tool.
  • Fern WiFi Cracker – Wireless auditing tool.
  • Wifite – Automated WiFi attack tool.
  • Wifiphisher – Phishing-based WiFi attacks.
  • Wi-Fi Pineapple – Wireless attack platform.
  • Cowpatty – WPA2 cracking tool.

Forensics Tools

  • Autopsy – Digital forensics platform.
  • Volatility – Memory forensics framework.
  • Binwalk – Firmware analysis.
  • ExifTool – Extract metadata from files.
  • TestDisk – Partition recovery tool.
  • PhotoRec – File recovery tool.
  • YARA – Malware pattern-matching tool.
  • NetworkMiner – Passive network packet analysis.

Stress Testing

  • Slowloris – HTTP DoS tool.
  • LOIC – Low Orbit Ion Cannon.
  • HULK – HTTP flood tool.
  • GoldenEye – Denial-of-service testing tool.
  • Xerxes – Powerful DoS tool.

Sniffing & Spoofing

  • Wireshark – Network packet analyzer.
  • Ettercap – MITM attack framework.
  • Bettercap – Network attack and monitoring tool.
  • Responder – LLMNR, NBT-NS, and MDNS poisoning tool.
  • dsniff – Collection of network monitoring and attack tools.
  • MITMf – Man-in-the-middle attack framework.

Password Attacks

  • John the Ripper – Password cracking tool.
  • Hashcat – Advanced password recovery tool.
  • Hydra – Brute force login cracker.
  • Cain & Abel – Password recovery and cracking tool.
  • CeWL – Custom wordlist generator.
  • RainbowCrack – Hash cracking using rainbow tables.

Web Application Analysis

  • Burp Suite – Web security testing tool.
  • Nikto – Web vulnerability scanner.
  • WPScan – WordPress security scanner.
  • WhatWeb – Web application fingerprinting.
  • CMSmap – CMS vulnerability scanner.
  • Sublist3r – Subdomain enumeration tool.

Reverse Engineering

  • Ghidra – NSA's reverse engineering tool.
  • Radare2 – Open-source reverse engineering framework.
  • OllyDbg – Windows debugger.
  • IDA Pro – Advanced disassembler.
  • Binary Ninja – Reverse engineering platform.
  • Frida – Dynamic instrumentation toolkit.

Reporting Tools

  • Dradis – Information sharing framework.
  • Faraday – Collaborative pen-testing platform.
  • MagicTree – Data analysis and reporting tool.
  • Serpico – Automated reporting tool.

Social Engineering Tools

  • Social Engineering Toolkit (SET) – Phishing, credential harvesting.
  • BeEF – Exploiting browser vulnerabilities.
  • Evilginx2 – Advanced phishing framework.

Miscellaneous

  • TheFatRat – Malware and payload generator.
  • Unicorn – PowerShell payload generator.
  • MSFvenom – Payload generation tool.
  • Mimikatz – Credential dumping tool.

Contributing

Contributions are welcome! If you want to add new tools or improve existing documentation, feel free to submit a pull request or open an issue.

License

This repository is licensed under the MIT License.

Disclaimer

This repository is intended for educational and ethical security testing purposes only. The author and contributors are not responsible for any misuse of these tools.

Clone this wiki locally