Anonymity Tools

• OnionScan - Tool for investigating the Dark Web by finding operational security issues introduced by Tor hidden service operators.
• Tor - Free software and onion routed overlay network that helps you defend against traffic analysis.
• Nipe - Script to redirect all traffic from the machine to the Tor network.
• kalitorify - Transparent proxy through Tor for Kali Linux OS.
• What Every Browser Knows About You - Comprehensive detection page to test your own Web browser's configuration for privacy and identity leaks.
• I2P - The Invisible Internet Project.
• dos-over-tor - Proof of concept denial of service over Tor stress test tool.

Anti-virus Evasion Tools

• AntiVirus Evasion Tool (AVET) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.
• UniByAv - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.
• Veil - Generate metasploit payloads that bypass common anti-virus solutions.
• peCloak.py - Automates the process of hiding a malicious Windows executable from antivirus (AV) detection.
• peCloakCapstone - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.
• Shellter - Dynamic shellcode injection tool, and the first truly dynamic PE infector ever created.
• shellsploit - Generates custom shellcode, backdoors, injectors, optionally obfuscates every byte via encoders.

Books

Defensive Programming Books

• Holistic Info-Sec for Web Developers (Fascicle 0)
• Holistic Info-Sec for Web Developers (Fascicle 1)

Hacker's Handbook Series Books

• Android Hacker's Handbook by Joshua J. Drake et al., 2014
• The Browser Hacker's Handbook by Wade Alcorn et al., 2014
• The Database Hacker's Handbook, David Litchfield et al., 2005
• The Mac Hacker's Handbook by Charlie Miller & Dino Dai Zovi, 2009
• The Mobile Application Hacker's Handbook by Dominic Chell et al., 2015
• The Shellcoder's Handbook by Chris Anley et al., 2007
• The Web Application Hacker's Handbook by D. Stuttard, M. Pinto, 2011
• iOS Hacker's Handbook by Charlie Miller et al., 2012

Malware Analysis Books

• Malware Analyst's Cookbook and DVD by Michael Hale Ligh et al., 2010
• The Art of Memory Forensics by Michael Hale Ligh et al., 2014

Network Analysis Books

• Nmap Network Scanning by Gordon Fyodor Lyon, 2009
• Wireshark Network Analysis by by Laura Chappell & Gerald Combs, 2012
• Network Forensics: Tracking Hackers through Cyberspace by Sherri Davidoff & Jonathan Ham, 2012

Penetration Testing Books

• Btfm: Blue Team Field Manual by Alan J White & Ben Clark, 2017
• Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton et al., 2007
• Advanced Penetration Testing by Wil Allsopp, 2017
• Advanced Persistent Threat Hacking: The Art and Science of Hacking Any Organization by Tyler Wrightson, 2014
• Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014
• Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp, 2010
• Penetration Testing: Procedures & Methodologies by EC-Council, 2010
• Rtfm: Red Team Field Manual by Ben Clark, 2014
• The Hacker Playbook by Peter Kim, 2014
• Advanced Penetration Testing for Highly-Secured Environments by Lee Allen, 2012

Reverse Engineering Books

• Hacking the Xbox by Andrew Huang, 2003
• Practical Reverse Engineering by Bruce Dang et al., 2014
• Gray Hat Hacking The Ethical Hacker's Handbook by Daniel Regalado et al., 2015
• Reverse Engineering for Beginners by Dennis Yurichev

Social Engineering Books

• Social Engineering in IT Security: Tools, Tactics, and Techniques by Sharon Conheady, 2014
• The Art of Deception by Kevin D. Mitnick & William L. Simon, 2002
• The Art of Intrusion by Kevin D. Mitnick & William L. Simon, 2005
• Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014

Windows Books

• Windows Internals by Mark Russinovich et al., 2012
• Troubleshooting with the Windows Sysinternals Tools by Mark Russinovich & Aaron Margosis, 2016

• DEF CON Suggested Reading

Collaboration Tools

Windows Books

• RedELK - Track and alarm about Blue Team activities while providing better usability in long term offensive operations.

Conferences and Events

Windows Books

• 44Con - Annual Security Conference held in London.
• CCC - Annual meeting of the international hacker scene in Germany.
• CHCon - Christchurch Hacker Con, Only South Island of New Zealand hacker con.
• CarolinaCon - Infosec conference, held annually in North Carolina.
• DEF CON - Annual hacker convention in Las Vegas.
• DeepSec - Security Conference in Vienna, Austria.
• DefCamp - Largest Security Conference in Eastern Europe, held annually in Bucharest, Romania.
• DerbyCon - Annual hacker conference based in Louisville.
• HITB - Deep-knowledge security conference held in Malaysia and The Netherlands.
• Hack.lu - Annual conference held in Luxembourg.
• PhreakNIC - Technology conference held annually in middle Tennessee.
• RSA Conference USA - Annual security conference in San Francisco, California, USA.
• SECUINSIDE - Security Conference in Seoul.
• ShmooCon - Annual US East coast hacker convention.
• Swiss Cyber Storm - Annual security conference in Lucerne, Switzerland.
• Nullcon - Annual conference in Delhi and Goa, India.
• AppSecUSA - Annual conference organized by OWASP.
• Black Hat - Annual security conference in Las Vegas.
• BalCCon - Balkan Computer Congress, annually held in Novi Sad, Serbia.
• LayerOne - Annual US security conference held every spring in Los Angeles.
• Virus Bulletin Conference - Annual conference going to be held in Denver, USA for 2016.
• BSides - Framework for organising and holding security conferences.
• Hackfest - Largest hacking conference in Canada.

CTF Tools

Windows Books

• Pwntools - Rapid exploit development framework built for use in CTFs.
• RsaCtfTool - Decrypt data enciphered using weak RSA keys, and recover private keys from public keys using a variety of automated attacks.
• ctf-tools - Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.
• shellpop - Easily generate sophisticated reverse or bind shell commands to help you save time during penetration tests.

Docker Containers

Docker Containers of Intentionally Vulnerable Systems

• OWASP NodeGoat - docker-compose build && docker-compose up.
• Vulnerability as a service: Heartbleed - docker pull hmlio/vaas-cve-2014-0160.
• Vulnerability as a service: Shellshock - docker pull hmlio/vaas-cve-2014-6271.

Docker Containers of Penetration Testing Distributions and Tools

• Official OWASP ZAP - docker pull owasp/zap2docker-stable.
• Security Ninjas - docker pull opendns/security-ninjas.

File Format Analysis Tools

Docker Containers of Penetration Testing Distributions and Tools

• Veles - Binary data visualization and analysis tool.

GNU/Linux Utilities

Docker Containers of Penetration Testing Distributions and Tools

• Hwacha - Post-exploitation tool to quickly execute payloads via SSH on one or more Linux systems simultaneously.
• LinEnum - Scripted local Linux enumeration and privilege escalation checker useful for auditing a host and during CTF gaming.
• unix-privesc-check - Shell script to check for simple privilege escalation vectors on UNIX systems.
• Linux Exploit Suggester - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.

Hash Cracking Tools

Docker Containers of Penetration Testing Distributions and Tools

• BruteForce Wallet - Find the password of an encrypted wallet file (i.e. wallet.dat).
• CeWL - Generates custom wordlists by spidering a target's website and collecting unique words.
• JWT Cracker - Simple HS256 JSON Web Token (JWT) token brute force cracker.
• Rar Crack - RAR bruteforce cracker.
• StegCracker - Steganography brute-force utility to uncover hidden data inside files.
• John the Ripper - Fast password cracker.

Hex Editors

Docker Containers of Penetration Testing Distributions and Tools

• 0xED - Native macOS hex editor that supports plug-ins to display custom data types.
• Bless - High quality, full featured, cross-platform graphical hex editor written in Gtk#.
• Hexinator - World's finest (proprietary, commercial) Hex Editor.
• hexedit - Simple, fast, console-based hex editor.
• wxHexEditor - Free GUI hex editor for GNU/Linux, macOS, and Windows.
• Frhed - Binary file editor for Windows.
• HexEdit.js - Browser-based hex editing.

Industrial Control and SCADA Systems

Docker Containers of Penetration Testing Distributions and Tools

• awesome-industrial-control-system-security
• Industrial Exploitation Framework (ISF) - Metasploit-like exploit framework based on routersploit designed to target Industrial Control Systems (ICS), SCADA devices, PLC firmware, and more.
• s7scan - Scanner for enumerating Siemens S7 PLCs on a TCP/IP or LLC network.

macOS Utilities

Penetration Testing Report Templates

• EvilOSX - Modular RAT that uses numerous evasion and exfiltration techniques out-of-the-box.
• Bella - Pure Python post-exploitation data mining and remote administration tool for macOS.

Multi-paradigm Frameworks

Docker Containers of Penetration Testing Distributions and Tools

• Armitage - Java-based GUI front-end for the Metasploit Framework.
• AutoSploit - Automated mass exploiter, which collects target by employing the Shodan.io API and programmatically chooses Metasploit exploit modules based on the Shodan query.
• Decker - Penetration testing orchestration and automation framework, which allows writing declarative, reusable configurations capable of ingesting variables and using outputs of tools it has run as inputs to others.
• Faraday - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
• Metasploit - Software for offensive security teams to help verify vulnerabilities and manage security assessments.
• Pupy - Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.

Network Tools

DDoS Tools

• Anevicon - Powerful UDP-based load generator, written in Rust.
• HOIC - Updated version of Low Orbit Ion Cannon, has 'boosters' to get around common counter measures.
• Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.
• SlowLoris - DoS tool that uses low bandwidth on the attacking side.
• UFONet - Abuses OSI layer 7 HTTP to create/manage 'zombies' and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.
• JS LOIC - JavaScript in-browser version of LOIC.

Docker Containers of Penetration Testing Distributions and Tools

• CrackMapExec - Swiss army knife for pentesting networks.
• IKEForce - Command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities.
• Intercepter-NG - Multifunctional network toolkit.
• Legion - Graphical semi-automated discovery and reconnaissance framework based on Python 3 and forked from SPARTA.
• Network-Tools.com - Website offering an interface to numerous basic network utilities like ping, traceroute, whois, and more.
• Praeda - Automated multi-function printer data harvester for gathering usable data during security assessments.
• Printer Exploitation Toolkit (PRET) - Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.
• THC Hydra - Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.
• Zarp - Network attack tool centered around the exploitation of local networks.
• dnstwist - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
• dsniff - Collection of tools for network auditing and pentesting.
• hping3 - Network tool able to send custom TCP/IP packets.
• pig - GNU/Linux packet crafting tool.
• routersploit - Open source exploitation framework similar to Metasploit but dedicated to embedded devices.
• rshijack - TCP connection hijacker, Rust rewrite of shijack.
• scapy - Python-based interactive packet manipulation program & library.

Exfiltration Tools

• Cloakify - Textual steganography toolkit that converts any filetype into lists of everyday strings.
• DET - Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.
• Iodine - Tunnel IPv4 data through a DNS server; useful for exfiltration from networks where Internet access is firewalled, but DNS queries are allowed.
• pwnat - Punches holes in firewalls and NATs.
• tgcd - Simple Unix network utility to extend the accessibility of TCP/IP based network services beyond firewalls.

Network Reconnaissance Tools

• ACLight - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.
• CloudFail - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
• DNSDumpster - Online DNS recon and search service.
• Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
• ScanCannon - Python script to quickly enumerate large networks by calling masscan to quickly identify open ports and then nmap to gain details on the systems/services on those ports.
• XRay - Network (sub)domain discovery and reconnaissance automation tool.
• dnstracer - Determines where a given DNS server gets its information from, and follows the chain of DNS servers.
• fierce - Python3 port of the original fierce.pl DNS reconnaissance tool for locating non-contiguous IP space.
• nmap - Free security scanner for network exploration & security audits.
• passivedns-client - Library and query tool for querying several passive DNS providers.
• passivedns - Network sniffer that logs all DNS server replies for use in a passive DNS setup.
• scanless - Utility for using websites to perform port scans on your behalf so as not to reveal your own IP.
• smbmap - Handy SMB enumeration tool.
• zmap - Open source network scanner that enables researchers to easily perform Internet-wide network studies.
• dnsenum - Perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.
• dnsmap - Passive DNS network mapper.
• dnsrecon - DNS enumeration script.

Protocol Analyzers and Sniffers

• Dripcap - Caffeinated packet analyzer.
• Dshell - Network forensic analysis framework.
• Netzob - Reverse engineering, traffic generation and fuzzing of communication protocols.
• Wireshark - Widely-used graphical, cross-platform network protocol analyzer.
• netsniff-ng - Swiss army knife for for network sniffing.
• sniffglue - Secure multithreaded packet sniffer.
• Debookee - Simple and powerful network traffic analyzer for macOS.

Proxies and Machine-in-the-Middle (MITM) Tools

• BetterCAP - Modular, portable and easily extensible MITM framework.
• Habu - Python utility implementing a variety of network attacks, such as ARP poisoning, DHCP starvation, and more.
• Lambda-Proxy - Utility for testing SQL Injection vulnerabilities on AWS Lambda serverless functions.
• MITMf - Framework for Man-In-The-Middle attacks.
• Morpheus - Automated ettercap TCP/IP Hijacking tool.
• SSH MITM - Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.
• dnschef - Highly configurable DNS proxy for pentesters.
• evilgrade - Modular framework to take advantage of poor upgrade implementations by injecting fake updates.
• mallory - HTTP/HTTPS proxy over SSH.
• mitmproxy - Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
• oregano - Python module that runs as a machine-in-the-middle (MITM) accepting Tor client requests.

Transport Layer Security Tools

• SSLyze - Fast and comprehensive TLS/SSL configuration analyzer to help identify security mis-configurations.
• crackpkcs12 - Multithreaded program to crack PKCS#12 files (.p12 and .pfx extensions), such as TLS/SSL certificates.
• tls_prober - Fingerprint a server's SSL/TLS implementation.

Wireless Network Tools

• Aircrack-ng - Set of tools for auditing wireless networks.
• Airgeddon - Multi-use bash script for Linux systems to audit wireless networks.
• BoopSuite - Suite of tools written in Python for wireless auditing.
• Cowpatty - Brute-force dictionary attack against WPA-PSK.
• Fluxion - Suite of automated social engineering based WPA attacks.
• KRACK Detector - Detect and prevent KRACK attacks in your network.
• Kismet - Wireless network detector, sniffer, and IDS.
• Reaver - Brute force attack against WiFi Protected Setup.
• WiFi-Pumpkin - Framework for rogue Wi-Fi access point attack.
• Wifite - Automated wireless attack tool.
• infernal-twin - Automated wireless hacking tool.
• krackattacks-scripts - WPA2 Krack attack scripts.
• wifi-arsenal - Resources for Wi-Fi Pentesting.

Network Vulnerability Scanners

Web Vulnerability Scanners

• ACSTIS - Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
• JCS - Joomla Vulnerability Component Scanner with automatic database updater from exploitdb and packetstorm.
• Nikto - Noisy but fast black box web server and web application vulnerability scanner.
• SecApps - In-browser web application security testing suite.
• WebReaver - Commercial, graphical web application vulnerability scanner designed for macOS.
• joomscan - Joomla vulnerability scanner.
• w3af - Web application attack and audit framework.
• Wapiti - Black box web application vulnerability scanner with built-in fuzzer.
• Arachni - Scriptable framework for evaluating the security of web applications.