Active Recon / footprinting

Recon Tools

GitHub - laramies/theHarvester: E-mails, subdomains and names Harvester - OSINTGitHub

dmitry | Kali Linux ToolsKali Linux

Recon (DNS)

How to use BIND’s Domain Information Groper (dig) ToolDyn Help Center

GitHub - fwaeytens/dnsenum: dnsenum is a perl script that enumerates DNS informationGitHub

GitHub - alsotang/nslookupGitHub

dnsrecon | Kali Linux ToolsKali Linux

Active Recon

nmap

nping

metasploit nmap

unicornscan

netcat

rustscan

netdiscover

dmitry

hping3

massscan

enum4linux

------------SNMP------------

onsixtyone

snmpwalk

NULL SESSIONs

rpcclient

net use

SMB---------------------------------------

nbtscan

smbclient

nmblookup

CISCO -----------------------------------

CGE

CISCO-TORCH

WEB--------------------------------------

WFUZZ

DIRB

Gobuster

metasploit

dirsearch

wpscan

recon-ng

lynis

skipfish

oscanner

sidguess (oracle)

nikto

golismero

WIFI-------------------------------

Pyrit

reaver

cowpatty

airmon

kismet

GitHub - Porchetta-Industries/CrackMapExec: A swiss army knife for pentesting networksGitHub

GitHub - jpillora/chisel: A fast TCP/UDP tunnel over HTTPGitHub

GitHub - cddmp/enum4linux-ng: A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.GitHub

GitHub - ffuf/ffuf: Fast web fuzzer written in GoGitHub

GitHub - rebootuser/LinEnum: Scripted Local Linux Enumeration & Privilege Escalation ChecksGitHub

GitHub - carlospolop/PEASS-ng: PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)GitHub