Hacking Tools Detail for Beginners

Shakhawat Hossain - 0xShakhawat
3 min readApr 23, 2022

--

Information Gathering Tools

Network Map (nmap)
https://github.com/nmap/nmap

Dracnmap
https://github.com/Screetsec/Dracnmap

Port Scanning

Host to IP
https://github.com/geocoder-php/host-ip-provider

Xerosploit
https://github.com/LionSec/xerosploit

RED HAWK (All In One Scanning)
https://github.com/Tuhinshubhra/RED_HAWK

ReconSpider(For All Scaning)
https://github.com/bhavsec/reconspider

Infoga — Email OSINT
https://github.com/m4ll0k/Infoga

ReconDog
https://github.com/s0md3v/ReconDog

Striker
https://github.com/s0md3v/Striker

SecretFinder (like API & etc)
https://github.com/m4ll0k/SecretFinder

Find Info Using Shodan
https://github.com/dn9uy3n/Get-Shodan

Port Scanner — rang3r
https://github.com/floriankunushevci/rang3r

Breacher
https://github.com/s0md3v/Breacher

Anonymously Hiding Tools

Anonmously Surf
https://github.com/Und3rf10w/kali-anonsurf

Multitor
https://github.com/trimstray/multitor

Wordlist Generator

Cupp
https://github.com/Mebus/cupp

WordlistCreator
https://github.com/Z4nzu/wlcreator

Goblin WordGenerator
https://github.com/UndeadSec/GoblinWordGenerator

Password list (1.4 Billion Clear Text Password)
https://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got

Wireless Attack Tools

WiFi-Pumpkin
https://github.com/P0cL4bs/wifipumpkin3

pixiewps
https://github.com/wiire-a/pixiewps

Bluetooth Honeypot GUI Framework
https://github.com/andrewmichaelsmith/bluepot

Fluxion
https://github.com/thehackingsage/Fluxion

Wifiphisher
https://github.com/wifiphisher/wifiphisher

Wifite
https://github.com/derv82/wifite2

EvilTwin
https://github.com/Z4nzu/fakeap

Fastssh
https://github.com/Z4nzu/fastssh

SQL Injection Tools

Sqlmap tool
https://github.com/sqlmapproject/sqlmap

NoSqlMap
https://github.com/codingo/NoSQLMap

Damn Small SQLi Scanner
https://github.com/stamparm/DSSS

Explo
https://github.com/telekom-security/explo

Blisqy — Exploit Time-based blind-SQL injection
https://github.com/JohnTroony/Blisqy

Leviathan — Wide Range Mass Audit Toolkit
https://github.com/utkusen/leviathan

SQLScan
https://github.com/Cvar1984/sqlscan

Phishing Attack Tools

Setoolkit
https://github.com/trustedsec/social-engineer-toolkit

SocialFish
https://github.com/UndeadSec/SocialFish

HiddenEye
https://github.com/Morsmalleo/HiddenEye

Evilginx2
https://github.com/kgretzky/evilginx2

I-See_You(Get Location using phishing attack)
https://github.com/Viralmaniar/I-See-You

SayCheese (Grab target’s Webcam Shots)
https://github.com/hangetzzu/saycheese

QR Code Jacking
https://github.com/cryptedwolf/ohmyqr

ShellPhish
https://github.com/An0nUD4Y/shellphish

BlackPhish
https://github.com/iinc0gnit0/BlackPhish

Web Attack Tools

Web2Attack
https://github.com/santatic/web2attack

Skipfish
https://github.com/spinkham/skipfish

SubDomain Finder
https://github.com/aboul3la/Sublist3r

CheckURL
https://github.com/UndeadSec/checkURL

Blazy(Also Find ClickJacking)
https://github.com/s0md3v/Blazy

Sub-Domain TakeOver
https://github.com/m4ll0k/takeover

Dirb
https://gitlab.com/kalilinux/packages/dirb

Post Exploitation Tools

Vegile — Ghost In The Shell
https://github.com/Screetsec/Vegile

Chrome Keylogger
https://github.com/UndeadSec/HeraKeylogger

Forensic Tools

Autopsy
https://github.com/sleuthkit/autopsy

Wireshark
https://www.wireshark.org/

Bulk extractor
https://github.com/simsong/bulk_extractor

Disk Clone and ISO Image Aquire
https://guymager.sourceforge.io/

Toolsley
https://www.toolsley.com/

Payload Creation Tools

The FatRat
https://github.com/Screetsec/TheFatRat

Brutal
https://github.com/Screetsec/Brutal

Stitch
https://github.com/nathanlopez/Stitch

MSFvenom Payload Creator
https://github.com/g0tmi1k/msfpc

Venom Shellcode Generator
https://github.com/r00t-3xp10it/venom

Spycam
https://github.com/indexnotfound404/spycam

Mob-Droid
https://github.com/kinghacker0/Mob-Droid

Enigma
https://github.com/UndeadSec/Enigma

Exploit Framework

RouterSploit
https://github.com/threat9/routersploit

WebSploit
https://github.com/The404Hacking/websploit

Commix
https://github.com/commixproject/commix

Web2Attack
https://github.com/santatic/web2attack

Reverse Engineering Tools

Androguard
https://github.com/androguard/androguard

Apk2Gold
https://github.com/lxdvs/apk2gold

JadX
https://github.com/skylot/jadx

DDOS Attack Tools

SlowLoris
https://github.com/gkbrk/slowloris
https://github.com/0xc0d/Slow-Loris

Asyncrone | Multifunction SYN Flood DDoS Weapon
https://github.com/fatihsnsy/aSYNcrone

UFOnet
https://github.com/epsylon/ufonet

GoldenEye
https://github.com/jseidl/GoldenEye

Remote Administrator Tools (RAT)

Stitch
https://github.com/nathanlopez/Stitch

Pyshell
https://github.com/knassar702/pyshell

XSS Attack Tools

DalFox(Finder of XSS)
https://github.com/hahwul/dalfox

XSS Payload Generator
https://github.com/capture0x/XSS-LOADER

Extended XSS Searcher and Finder
https://github.com/Damian89/extended-xss-search

XSS-Freak
https://github.com/sepulvedazallalinux/XSS-Freak

XSpear
https://github.com/hahwul/XSpear

XSSCon
https://github.com/menkrep1337/XSSCon

XanXSS
https://github.com/Ekultek/XanXSS

Advanced XSS Detection Suite
https://github.com/s0md3v/XSStrike

RVuln
https://github.com/iinc0gnit0/RVuln

Steganograhy Tools

SteganoHide
https://github.com/devfoo-one/SVS-WS16-SteganoHide

StegoCracker
https://github.com/W1LDN16H7/StegoCracker

SocialMedia Bruteforce

Instagram Attack
https://github.com/chinoogawa/instaBrute

AllinOne SocialMedia Attack
https://github.com/Matrix07ksa/Brute_Force

Facebook Attack
https://github.com/Matrix07ksa/Brute_Force

Application Checker
https://github.com/jakuta-tech/underhanded

Android Hacking Tools

Keydroid
https://github.com/F4dl0/keydroid

MySMS
https://github.com/papusingh2sms/mysms

Lockphish (Grab target LOCK PIN)
https://github.com/JasonJerry/lockphish

DroidCam (Capture Image)
https://github.com/kinghacker0/WishFish

EvilApp (Hijack Session)
https://github.com/Ro9ueAdmin/EvilApp

HatCloud(Bypass CloudFlare for IP)
https://github.com/HatBashBR/HatCloud

IDN Homograph Attack

EvilURL
https://github.com/UndeadSec/EvilURL

Email Verify tools
https://github.com/AfterShip/email-verifier
https://github.com/daveearley/Email-Validation-Tool
https://github.com/EmailVerify/email-verify

Knockmail
https://github.com/4w4k3/KnockMail

Hash Cracking Tools

Hash Buster
https://github.com/s0md3v/Hash-Buster

Wifi Deauthenticate

WifiJammer-NG
https://github.com/MisterBianco/wifijammer-ng

KawaiiDeauther
https://github.com/aryanrtm/KawaiiDeauther

SocialMedia Finder

Find SocialMedia By Facial Recognation System
https://github.com/Greenwolf/social_mapper

Find SocialMedia By UserName
https://github.com/xHak9x/finduser

Sherlock
https://github.com/sherlock-project/sherlock

SocialScan | Username or Email
https://github.com/iojw/socialscan

Payload Injector

Debinject
https://github.com/UndeadSec/Debinject

Pixload
https://github.com/chinarulezzz/pixload

Web crawling

Gospider
https://github.com/jaeles-project/gospider

--

--

Shakhawat Hossain - 0xShakhawat
Shakhawat Hossain - 0xShakhawat

Written by Shakhawat Hossain - 0xShakhawat

Learning Penetration Testing && Cyber Security

No responses yet