Awesome Pentest Tools and Resources

A list of awesome penetration testing tools and resources.

Contents

• Antivirus Evasion Tools
• AWS
• File Viewers and Pretty Printers
• Hardware Security
  • CAN Bus
  • Logic Analyzers
  • Misc Hardware Tools
• Hash Cracking Tools
• Hex Editors
• Lab Setup
• Mobile Security
  • Android
  • iOS
  • Misc
  • Vulnerable Apps
• Network Tools
• OSINT
  • Metadata Tools
• Privilege Escalation Tools
• Reverse Engineering Tools
• Static Application Security Testing (SAST)
• Web Tools
  • Burp Suite Plugins
  • GraphQL
• Wordlists

Antivirus Evasion Tools

• Anti-Virus-Evading-Payloads - Guide to generating AV evading payloads.

AWS

• AWSBucketDump - Security Tool to Look For Interesting Files in S3 Buckets.
• enumerate-iam - Enumerate the permissions associated with AWS credential set.
• lazys3 - A Ruby script to bruteforce for AWS s3 buckets using different permutations.
• s3-inspector - Tool to check AWS S3 bucket permissions.
• S3Scanner - Scan for open S3 buckets and dump the contents.
• slurp - A blazing fast & feature rich Amazon S3 bucket enumerator.

File Viewers and Pretty Printers

• gron - gron transforms JSON into discrete assignments to make it easier to grep for what you want and see the absolute 'path' to it. It eases the exploration of APIs that return large blobs of JSON but have terrible documentation.
• jless - jless is a command-line JSON viewer designed for reading, exploring, and searching through JSON data.

Hardware Security

• Binwalk - Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
• chipsec - CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware (BIOS/UEFI), and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities.

CAN Bus

• Korlan USB2CAN - With USB2CAN you can monitor a CAN network, write a CAN program and communicate with industrial, medical, automotive or another type of CAN bus network devices.

Logic Analyzers

• DSLogic - DSLogic is a series of USB-based logic analyzer, with max sample rate up to 1GHz, and max sample depth up to 16G.
• Saleae - Saleae logic analyzers are used by electrical engineers, firmware developers, enthusiasts, and engineering students to record, measure, visualize, and decode the signals in their electrical circuits.

Misc Hardware Tools

• Bus Pirate - The Bus Pirate is an open source hacker multi-tool that talks to electronic stuff.
• ChipWhisperer - The complete open-source toolchain for side-channel power analysis and glitching attacks.
• HydraBus - The HydraBus (hardware) with HydraFW (firmware) are used as an open source multi-tool for anyone interested in learning/developping/debugging/hacking/Penetration Testing for basic or advanced embedded hardware.

Hash Cracking Tools

• haiti - A CLI tool (and library) to identify hash types (hash type identifier).
• Hashview - A web front-end for password cracking and analytics.
• hate_crack - A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

Hex Editors

• ImHex - A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Lab Setup

• AutomatedLab - AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts.
• BadBlood - BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.

Mobile Security

Android

• Apktool - A tool for reverse engineering 3rd party, closed, binary Android apps.
• dex2jar - Tools to work with android .dex and java .class files.
• rootAVD - root your Android Studio Virtual Device (AVD), with Magisk (Stable, Canary or Alpha).
• Simplify - Android virtual machine and deobfuscator.

iOS

• iHide - A utility for hiding jailbreak from iOS applications.
• iOS App Signer - iOS App Signer can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.
• Keychain-Dumper - A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken.
• MGSpoof - Hook MGCopyAnswer + custom helper so user can spoof some keys.
• plistsubtractor - Read a plist file, write out any embedded plist files.
• plistsubtractor_py3- plistsubtractor updated for Python3.
• Shadow - A jailbreak detection bypass for modern iOS jailbreaks.
• Sideloadly - Sideloadly is a Cydia impactor alternative that allows you to install IPA for your iPhone or iPad.
• sigh - sigh can create, renew, download and repair provisioning profiles (with one command). It supports App Store, Ad Hoc, Development and Enterprise profiles and supports nice features, like auto-adding all test devices.
• Swift Demangler - Demangles mangled names.