Whether you're a student, a CTF player, or a working security professional — this project is designed to help you discover, understand, and organize the landscape of offensive tools effectively.
This repository is NOT a collection of walkthroughs or cheatsheets.Instead, it is a structured catalog that:
- Groups hacking tools by functional categories
- Highlights usage contexts and links to external resources/labs
- Serves as a starting point for learning and using each class of tools
- Helps with training, teaching, and internal knowledge sharing
Each entry is grouped into a functional category of offensive security:
| Tool Category | Description |
|---|---|
| 🔍 Recon Tools | Tools used for gathering information before active engagement (e.g., Nmap, Amass, Subfinder) |
| 📡 Enumeration Tools | Tools for discovering network services, users, shares, etc. (e.g., Enum4linux, SMBMap) |
| 🌐 OSINT Tools | Open-source intelligence tools for footprinting (e.g., theHarvester, Maltego) |
| 🔓 Vulnerability Scanners | Tools to detect known vulnerabilities (e.g., Nuclei, Nikto, OpenVAS) |
| 🛠️ Exploitation Frameworks | Tools for delivering exploits (e.g., Metasploit, ExploitDB, Searchsploit) |
| 🏴 Red Team Frameworks | Offensive infrastructure and attack simulation (e.g., Cobalt Strike, Sliver, Mythic) |
| 🚀 Privilege Escalation | Techniques and automation tools for privesc (e.g., LinPEAS, WinPEAS) |
| 🐚 Post-Exploitation | Credential dumping, pivoting, persistence (e.g., Mimikatz, LaZagne) |
| 👣 Evasion Techniques | Obfuscation, LOLBins, and AV/EDR evasion (e.g., Invoke-Obfuscation, SharpHound) |
| ⚙️ Binary Exploitation | Stack/heap exploitation tools (e.g., GDB, pwndbg, ROPgadget) |
| 🧪 Fuzzers | Vulnerability discovery via fuzzing (e.g., AFL++, libFuzzer, Peach) |
| 🔍 Reverse Engineering | Tools to analyze and reverse binaries (e.g., Ghidra, IDA Pro, radare2) |
| 📶 Wireless Hacking | WiFi and Bluetooth attack tools (e.g., Aircrack-ng, Bettercap) |
| 🛰️ C2 Frameworks | Command-and-Control frameworks (e.g., Covenant, Empire, Merlin) |
| 🧪 Web Exploitation Tools | XSS, SQLi, SSRF tools (e.g., XSStrike, sqlmap, Burp Suite) |
| 🛡️ Active Directory Attacks | Kerberoasting, AS-REP Roasting (e.g., Rubeus, BloodHound) |
| ☁️ Cloud Security Tools | Enumeration & exploitation of AWS, Azure, GCP (e.g., ScoutSuite, Pacu) |
| 🐳 Container & K8s | Docker & Kubernetes attack tools (e.g., kube-hunter, dockerscan) |
| 🔌 IoT & Hardware | UART, JTAG, firmware reverse tools (e.g., JTAGulator, Binwalk) |
| 🤖 ML & AI in Security | Tools for adversarial evasion and malware generation (e.g., ART, SecML) |