Nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security. - GitHub - samratashok/nishang: Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Fping

fping is a program to send ICMP echo probes to network hosts, similar to ping, but much better performing when pinging multiple hosts.

Angry IP Scanner

The original IP scanner for Windows, Max and Linux. Fast, friendly, extensible, free and open-source. Scans addresses and ports in any range and exports results in many formats.

Masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. - robertdavidgraham/masscan

OllyDbg

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. - danielmiessler/SecLists

Crunch

Download crunch - wordlist generator for free. Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. crunch can generate all possible combinations and permutations.

Cewl

CeWL is a Custom Word List Generator. Contribute to digininja/CeWL development by creating an account on GitHub.

Hash-identifier

Software to identify the different types of hashes used to encrypt data and especially passwords - blackploit/hash-identifier

Hashcat

World's fastest and most advanced password recovery utility

Medusa

Medusa is a speedy, parallel, and modular, login brute-forcer. - GitHub - jmk-foofus/medusa: Medusa is a speedy, parallel, and modular, login brute-forcer.

Google Hacking Database

The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers.

Wayback Machine

crt.sh

whois

dig

BIND is an open source DNS software system including an authoritative server, a recursive resolver and related utilities.

PwnDB

Search for leaked credentials. Contribute to davidtavarez/pwndb development by creating an account on GitHub.

Scavenger

Crawler (Bot) searching for credential leaks on paste sites. - rndinfosecguy/Scavenger

LeakLooker

Find open databases - Powered by Binaryedge.io. Contribute to woj-ciech/LeakLooker development by creating an account on GitHub.

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email - khast3x/h8mail

Aquatone

A Tool for Domain Flyovers. Contribute to michenriksen/aquatone development by creating an account on GitHub.

Assetfinder

Find domains and subdomains related to a given domain - tomnomnom/assetfinder

Sublist3r

Fast subdomains enumeration tool for penetration testers - aboul3la/Sublist3r

Amass

In-depth attack surface mapping and asset discovery - owasp-amass/amass