TOOLS
11
FIELD KIT
Pentesting tools directory
A curated catalog of pentesting tools. Content stays in the language you pick; nothing falls back in silence.
Free
9
PHASE
5
root@itspentest — tty0 · authorized session
# engagement console · authorized scope only itspentest.sh kit loaded · 11 binaries root@itspentest:~# whoami operator root@itspentest:~# ls recon enumeration exploitation post-exploitation reporting
Amass
Attack-surface mapping and discovery of domains, ASNs, and infrastructure.
- Recon
- Network
- Web
- Apache-2.0
- Free
BloodHound
Active Directory graphs for abuse paths and privilege relationships.
- Post-exploitation
- Enumeration
- Active Directory
- Apache-2.0
- Free
Burp Suite
Intercepting proxy and web lab; Community is free, Professional is paid.
- Enumeration
- Exploitation
- Web
- Commercial
- Freemium
Dradis
Platform for centralizing evidence and assembling the engagement report.
- Reporting
- Web
- Network
- Active Directory
- GPL-2.0
- Freemium
frida
Dynamic code instrumentation toolkit for Android, iOS, and Linux x86/ARM/MIPS.
- Exploitation
- Mobile
- Apache-2.0
- Free
Gobuster
Directory, DNS, and vhost brute-forcing against web targets.
- Enumeration
- Web
- Apache-2.0
- Free
Nmap
Network scanner for discovering hosts, ports, and services in scope.
- Recon
- Enumeration
- Network
- NPSL
- Free
Nuclei
Template-based scanner for known findings across HTTP and other protocols.
- Enumeration
- Exploitation
- Web
- Network
- MIT
- Free
Prowler
Prowler is a security tool for AWS, Azure, and GCP.
- Enumeration
- Cloud
- Apache-2.0
- Free
sqlmap
Automated SQL injection detection and exploitation, with controlled dumps.
- Exploitation
- Web
- GPL-2.0
- Free
Trivy
Trivy is a security tool for containers, Kubernetes, and more.
- Enumeration
- Cloud
- Apache-2.0
- Free
No tools match this filter.