1. tools
- list of tools that ehm…
HackTricks
book.hacktricks.wiki
Web
| Tool | Details |
|---|---|
| Burp Suite | Web application security testing platform |
| OWASP ZAP | Open-source web app scanner |
| sqlmap | Automatic SQL injection tool |
| ffuf | Fast web fuzzer written in Go |
| gobuster | Directory/file & DNS busting tool |
| wfuzz | Web application fuzzer |
| Postman | API development and testing |
Cryptography
| Tool | Details |
|---|---|
| CyberChef | Cyber Swiss Army Knife for encryption/encoding |
| RsaCtfTool | RSA attack tool for CTF |
| hashcat | Advanced password recovery |
| John the Ripper | Password cracking tool |
| hashes | Identify hash types |
| quipqiup | Fast and automated cryptogram solver |
| cachesleuth | Coordinate conversion, ciphers solvers, and code conversions |
| crackstation | Free password hash cracker |
| dcode.fr | Cipher identifier, and many more things |
| boxentriq | Cipher identifier and analyzer |
| cryptii | Encode and decode ciphers, Morse, … |
| stegcracker | Steganography brute-force utility |
| outguess | Statistical steganographic detection |
Forensics
| Tool | Details |
|---|---|
| Wireshark | Network protocol analyzer |
| Autopsy | Digital forensics platform |
| binwalk | Firmware analysis tool |
| foremost | File carving tool |
| strings | Extract printable strings from files |
| exiftool | Metadata extraction tool |
| steghide | Steganography tool |
| scalpel | Fast file carver that reads a database of headers |
| PhotoRec | File recovery tool that recovers lost files |
| hexdump/xxd | Hex dump utilities for binary analysis |
| file | Determine file type and format |
| mediainfo | Display technical info about video/audio files |
| identify | ImageMagick tool to describe image format/properties |
| pdfinfo | Extract PDF document information |
| 7z/p7zip | Archive extraction and analysis |
| unzip | ZIP archive extraction with forensic options |
| tar | Tape archive manipulation |
Network
| Tool | Details |
|---|---|
| nmap | Network discovery and security auditing |
| netcat | Network utility for reading/writing connections |
| tcpdump | Command-line packet analyzer |
| shodan.io | Search engine for Internet-connected devices |
| whois | Domain registration information |
| dig | DNS lookup tool |
Rev
| Tool | Details |
|---|---|
| dogbolt.org | Decompiler Explorer: Ghidra, Hex-Rays, angr, Binary Ninja, … |
| PyC decompile | Decompile .pyc |
| Java decompiler | Decompile .jar, .class, and apktool |
| disassembler.io | Disassembly in the cloud |
| Compiler Explorer | Compiler C, Assembly, NASM… |
| Hexed | Edit file binary |
Pwn
| Tool | Details |
|---|---|
| Shellcode | Assembly to binary representation |
| x32 ↗ & x64 ↗ | Linux syscall reference (32- and 64-bit) |
| pwntools | CTF framework and exploit development library |
| valgrind | Memory error detector |
| gdb | Something something |
| ltrace | Library call tracer |
| strace | System call tracer |
| objdump | Display object file information |
| readelf | Display ELF file information |
Misc
| Tool | Details |
|---|---|
| photopea | Edit PSD, AI, PDF, … online |
| Stego Tricks | Guide to steganography |
| Barcode Reader | Anything that has to do with a scan |
| Forensically | A glorified magnifying glass |