Hack Tools

This repository contains a collection of 200+ tools and resources that can be useful for red teaming activities.

Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context.

Warning

The materials in this repository are for informational and educational purposes only. They are not intended for use in any illegal activities.

Note

Hide Tool List headings with the arrow.

Click 🔙 to get back to the list.

Command to clone

git submodule update --init --recursive

Add new project

git submodule add https://github.com/example.git

docs: https://git-scm.com/book/en/v2/Git-Tools-Submodules

Tool List

Red Team Tips $\textcolor{gray}{\text{13 tips}}$

• Hiding the local admin account @Alh4zr3d
• Cripple windows defender by deleting signatures @Alh4zr3d
• Enable multiple RDP sessions per user @Alh4zr3d
• Sysinternals PsExec.exe local alternative @GuhnooPlusLinux
• Live off the land port scanner @Alh4zr3d
• Proxy aware PowerShell DownloadString @Alh4zr3d
• Looking for internal endpoints in browser bookmarks @Alh4zr3d
• Query DNS records for enumeration @Alh4zr3d
• Unquoted service paths without PowerUp @Alh4zr3d
• Bypass a disabled command prompt with /k Martin Sohn Christensen
• Stop windows defender deleting mimikatz.exe @GuhnooPlusLinux
• Check if you are in a virtual machine @dmcxblue
• Enumerate AppLocker rules @Alh4zr3d

Reconnaissance $\textcolor{gray}{\text{20 tools}}$

• crt.sh -> httprobe -> EyeWitness Automated domain screenshotting
• jsendpoints Extract page DOM links
• nuclei Vulnerability scanner
• certSniff Certificate transparency log keyword sniffer
• gobuster Website path brute force
• feroxbuster Fast content discovery tool written in Rust
• CloudBrute Cloud infrastructure brute force
• dnsrecon Enumerate DNS records
• Shodan.io Public facing system knowledge base
• AORT (All in One Recon Tool) Subdomain enumeration
• spoofcheck SPF/DMARC record checker
• AWSBucketDump S3 bucket enumeration
• GitHarvester GitHub credential searcher
• truffleHog GitHub credential scanner
• Dismap Asset discovery/identification
• enum4linux Windows/samba enumeration
• skanuvaty Dangerously fast dns/network/port scanner
• Metabigor OSINT tool without API
• Gitrob GitHub sensitive information scanner
• gowitness Web screenshot utility using Chrome Headless

Resource Development $\textcolor{gray}{\text{8 tools}}$

• Chimera PowerShell obfuscation
• msfvenom Payload creation
• Shellter Dynamic shellcode injection tool
• Freeze Payload creation (circumventing EDR)
• WordSteal Steal NTML hashes with Microsoft Word
• WSH Wsh payload
• HTA Hta payload
• VBA Vba payload

Initial Access $\textcolor{gray}{\text{6 tools}}$

• Bash Bunny USB attack tool
• EvilGoPhish Phishing campaign framework
• The Social-Engineer Toolkit Phishing campaign framework
• Hydra Brute force tool
• SquarePhish OAuth/QR code phishing framework
• King Phisher Phishing campaign framework