Домой Хакинг Список потрясающих туториалов, инструментов и прочих ресурсов по взлому
Список потрясающих туториалов, инструментов и прочих ресурсов по взлому
Metasploit A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.mimikatz — A little tool to play with Windows security
IDA — IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debuggerOllyDbg — A 32-bit assembler level analysing debugger for Windowsx64dbg — An open-source x64/x32 debugger for Windowsradare2 — A portable reversing frameworkplasma — Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.ScratchABit — Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin APICapstone
JVM-based languages
Krakatau — the best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully.JD-GUI procyon
Luyten — one of the best, though a bit slow, hangs on some binaries and not very well maintained.
JAD — JAD Java Decompiler (closed-source, unmaintained)JADX — a decompiler for Android apps. Not related to JAD..net-based languages
dotPeek — a free-of-charge .NET decompiler from JetBrainsILSpy — an open-source .NET assembly browser and decompilerdnSpy — .NET assembly editor, decompiler, and debugger
native code
de4dot — .NET deobfuscator and unpacker.JS Beautifier JS Nice — a web service guessing JS variables names and types based on the model derived from open source.
nudge4j — Java tool to let the browser talk to the JVMdex2jar — Tools to work with Android .dex and Java .class filesandroguard — Reverse engineering, malware and goodware analysis of Android applicationsantinet — .NET anti-managed debugger and anti-profiler codeUPX — the Ultimate Packer (and unpacker) for eXecutables
Wireshark — A free and open-source packet analyzertcpdump — A powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capturemitmproxy — An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interfaceCharles Proxy — A cross-platform GUI web debugging proxy to view intercepted HTTP and HTTPS/SSL live trafficusbmon — USB capture for Linux.USBPcap — USB capture for Windows.dynStruct — structures recovery via dynamic instrumentation.drltrace — shared library calls tracing.
HxD — A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any sizeWinHex — A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT securitywxHexEditor Synalize It /Hexinator —
Binwalk — Detects signatures, unpacks archives, visualizes entropy.Veles — a visualizer for statistical properties of blobs.Kaitai Struct — a DSL for creating parsers in a variety of programming languages. The Web IDE is particulary useful fir reverse-engineering.Protobuf inspector DarunGrim — executable differ.DBeaver — a DB editor.Dependencies — a FOSS replacement to Dependency Walker.PEview — A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) filesBinText — A small, very fast and powerful text extractor that will be of particular interest to programmers.
sqlmap — Automatic SQL injection and database takeover toolNoSQLMap — Automated NoSQL database enumeration and web application exploitation tool.tools.web-max.ca — base64 base85 md4,5 hash, sha1 hash encoding/decodingVHostScan — A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.SubFinder — SubFinder is a subdomain discovery tool that discovers valid subdomains for any target using passive online sources.badtouch — Scriptable network authentication cracker
Strong node.js — An exhaustive checklist to assist in the source code security analysis of a node.js web service.
NetworkMiner — A Network Forensic Analysis Tool (NFAT)Paros — A Java-based HTTP/HTTPS proxy for assessing web application vulnerabilitypig — A Linux packet crafting toolZAP — The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applicationsmitmsocks4j — Man-in-the-middle SOCKS Proxy for Javassh-mitm — An SSH/SFTP man-in-the-middle tool that logs interactive sessions and passwords.nmap — Nmap (Network Mapper) is a security scannerAircrack-ng — An 802.11 WEP and WPA-PSK keys cracking programNipe — A script to make Tor Network your default gateway.Habu — Python Network Hacking ToolkitWifi Jammer — Free program to jam all wifi clients in rangeFiresheep — Free program for HTTP session hijacking attacks.Scapy — A Python tool and library for low level packet creation and manipulationAmass — In-depth subdomain enumeration tool that performs scraping, recursive brute forcing, crawling of web archives, name altering and reverse DNS sweepingsniffglue — Secure multithreaded packet sniffer
Autopsy — A digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics toolssleuthkit — A library and collection of command-line digital forensics toolsEnCase — The shared technology within a suite of digital investigations products by Guidance Softwaremalzilla — Malware hunting tool
xortool — A tool to analyze multi-byte XOR cipherJohn the Ripper — A fast password crackerAircrack — Aircrack is 802.11 WEP and WPA-PSK keys cracking program.
Reversing.kr — This site tests your ability to Cracking & Reverse Code EngineeringCodeEngn — (Korean)simples.kr — (Korean)Crackmes.de — The world first and largest community website for crackmes and reversemes.
Hack This Site! — a free, safe and legal training ground for hackers to test and expand their hacking skillsHack The Box — a free site to perform pentesting in a variety of different systems.Webhacking.kr 0xf.at — a website without logins or ads where you can solve password-riddles (so called hackits).Gruyere Others
empire — A post exploitation framework for powershell and python.silenttrinity — A post exploitation tool that uses iron python to get past powershell restrictions.
SecTools — Top 125 Network Security Tools
