Categories π°οΈ Reconnaissance22 π OSINT17 π§ͺ Vulnerability Scanning13 π Web Security25 π₯ Exploitation6 π Password Cracking7 π’ Active Directory19 πΈοΈ Network Security20 πΆ Wireless8 βοΈ Cloud Security17 π¦ Container & Kubernetes14 π± Mobile Security8 π§© Reverse Engineering18 π¦ Malware Analysis16 π¬ Digital Forensics & DFIR16 π SIEM & Log Analytics10 π‘οΈ Detection Engineering8 πΊ Threat Hunting6 π§ Threat Intelligence10 π‘ Command & Control8 π― Adversary Emulation7 π§Ώ AI Security11 π Frameworks & Knowledge16
π’ Active Directory OfficialBloodHound Graph AD attack paths to find the shortest route to Domain Admin.
Intermediate Open Source Linux Windows macOS
π’ Active Directory OfficialImpacket Python classes for network protocols - the AD attacker's swiss army knife.
Advanced Open Source Linux Windows macOS
π’ Active Directory OfficialMimikatz Extract plaintext creds, hashes and tickets from Windows memory.
Advanced Open Source Windows
π’ Active Directory OfficialCrackMapExec / NetExec Swiss-army knife for pentesting Windows/AD networks at scale.
Intermediate Open Source Linux Windows macOS
π’ Active Directory OfficialResponder LLMNR/NBT-NS/mDNS poisoner to capture NetNTLM hashes.
Intermediate Open Source Linux
π’ Active Directory OfficialCertipy Enumerate and abuse Active Directory Certificate Services (AD CS).
Advanced Open Source Linux Windows macOS
π’ Active Directory OfficialPingCastle Audit Active Directory security posture and produce risk reports.
Beginner Freemium Windows
π’ Active Directory OfficialRubeus Toolset for raw Kerberos interaction and abuse.
Advanced Open Source Windows
π’ Active Directory OfficialPowerSploit PowerShell post-exploitation modules (incl. PowerView).
Advanced Open Source Windows
π’ Active Directory Officialenum4linux-ng Enumerate information from Windows and Samba systems.
Beginner Open Source Linux
π’ Active Directory Officialldapdomaindump Dump AD info over LDAP into readable HTML/JSON.
Intermediate Open Source Linux Windows macOS
π’ Active Directory OfficialCoercer Coerce Windows authentication via multiple RPC methods.
Advanced Open Source Linux
π’ Active Directory OfficialWhisker Abuse shadow credentials (msDS-KeyCredentialLink) for takeover.
Advanced Open Source Windows
π’ Active Directory Officialwindapsearch Enumerate AD users, groups and computers via LDAP.
Beginner Open Source Linux
π’ Active Directory Officialpywerview A Python port of PowerView for AD reconnaissance.
Intermediate Open Source Linux
π’ Active Directory OfficialGroup3r Find vulnerabilities in AD Group Policy.
Intermediate Open Source Windows
π’ Active Directory Officialadidnsdump Dump Active Directory-integrated DNS records via LDAP.
Intermediate Open Source Linux
π’ Active Directory Officialkrbrelayx Kerberos relaying and unconstrained-delegation abuse toolkit.
Advanced Open Source Linux
π’ Active Directory OfficialgMSADumper Read Group Managed Service Account passwords you're entitled to.
Intermediate Open Source Linux
Official sources only. Every link goes straight to the vendor's official website, documentation or GitHub releases. We never mirror or host binaries. Use these tools only on systems you own or are authorized to test.