Skip to content
hackingtools.ai

Offensive Security & Pentesting

Tools for actively testing systems you are authorized to test: exploitation and adversary-simulation frameworks, network and infrastructure testing, password auditing and wireless testing. Listed for authorized security work and education only.

Filters
Pricing
Platform
Open source

75 tools

  • Strix

    Strix

    Open-source AI penetration-testing agents for apps and APIs, validating findings with PoCs plus an optional managed cloud.

    Offensive Security & PentestingFreemiumOpen source
    2
  • Hydra

    Hydra

    THC Hydra is a free, multi-protocol online login brute-forcing tool for authorized password audits across many network services.

    Offensive Security & PentestingFreeOpen source
    1
  • Hashcat

    Hashcat

    Free, open-source password recovery utility that cracks many hash types on CPU and GPU hardware for authorized audits and penetration tests.

    Offensive Security & PentestingFreeOpen source
    1
  • Parrot OS

    Parrot OS

    Debian-based open-source security OS from Parrot Security CIC, with Security, Home, HTB and related editions for authorized testing and privacy work.

    Offensive Security & PentestingFreeOpen source
    1
  • Kali Linux

    Kali Linux

    Open-source Debian-based penetration testing distribution from OffSec for authorized assessments, research, forensics and reverse engineering.

    Offensive Security & PentestingFreeOpen source
    1
  • sqlmap

    sqlmap

    Open-source tool that automates detection and exploitation of SQL injection flaws and related database takeover techniques for authorized testing.

    Offensive Security & PentestingFreeOpen source
    1
  • Nmap

    Nmap

    Open-source network scanner for host discovery, port and service mapping, and OS detection, with NSE scripting and companion tools in the suite.

    Offensive Security & PentestingFreeOpen source
    1
  • OpenAI Daybreak Red Team

    OpenAI Daybreak Red Team

    Daybreak Red Team is a paid early-access platform used to pentest web applications with a coordinated team of agents for authorized security teams.

    Offensive Security & PentestingPaid
    0
  • Hacktron AI

    Hacktron AI

    Hacktron is an AI offensive security platform for continuous red teaming, white-box pentests with source code, and security review of every pull request.

    Offensive Security & PentestingPaid
    0

  • Sapper

    Sapper is an open-source multi-agent pentest orchestrator where an AI commander directs worker agents that use Kali tools in authorized labs and CTFs.

    Offensive Security & PentestingFreeOpen source
    0

  • Cariddi

    Cariddi is a free, open-source Go crawler that takes a list of domains and scans the pages it finds for endpoints, secrets, API keys, tokens and file types.

    Offensive Security & PentestingFreeOpen source
    0
  • Shannon

    Shannon

    Shannon is a freemium AI pentester used to read web app source code and run real exploits that prove its findings for AppSec and pentest teams.

    Offensive Security & PentestingFreemiumOpen source
    0
  • Interactsh

    Interactsh

    Interactsh is a free out-of-band interaction server used to catch DNS and HTTP callbacks during vulnerability tests for pentesters on authorized targets.

    Offensive Security & PentestingFreeOpen source
    0
  • Commix

    Commix

    Commix is a free command-injection exploitation tool used to detect and exploit OS command injection flaws in web apps for pentesters on authorized targets.

    Application SecurityFreeOpen source
    0
  • CloudFox

    CloudFox

    CloudFox is a free cloud situational-awareness tool used to map attack paths in AWS, Azure, and GCP for pentesters on authorized cloud assessments.

    Cloud SecurityFreeOpen source
    0

  • dirsearch

    dirsearch is a free web path scanner used to discover hidden directories and files on web servers for pentesters assessing authorized targets.

    Application SecurityFreeOpen source
    0

  • Chisel

    Chisel is a free TCP/UDP tunnel over HTTP used to reach internal networks through firewalls for pentesters and red teams on authorized targets.

    Offensive Security & PentestingFreeOpen source
    0
  • Masscan

    Masscan

    Masscan is a free high-speed port scanner used to scan the internet or large address ranges for open TCP ports for pentesters on authorized targets.

    Offensive Security & PentestingFreeOpen source
    0

  • Dalfox

    Dalfox is a free XSS scanner used to find and verify cross-site scripting flaws in web parameters for pentesters and bug bounty hunters on authorized targets.

    Application SecurityFreeOpen source
    0
  • Naabu (ProjectDiscovery)

    Naabu (ProjectDiscovery)

    Naabu by ProjectDiscovery is a free port scanner used to quickly find open TCP and UDP ports on many hosts for pentesters and recon teams on authorized targets.

    Offensive Security & PentestingFreeOpen source
    0

  • NodeZero

    NodeZero is a paid autonomous pentesting platform from Horizon3.ai used to find and safely exploit attack paths inside and outside a network for security teams.

    Offensive Security & PentestingPaid
    0
  • XBOW

    XBOW

    XBOW is a paid autonomous offensive security platform used to pentest apps and APIs and prove findings with working exploits for security teams.

    Offensive Security & PentestingPaid
    0

  • Armadin

    Armadin is a paid AI offensive security platform used to find and validate real attack paths across an enterprise with autonomous agents for security teams.

    Offensive Security & PentestingPaid
    0

  • hcxtools

    hcxtools is a free open-source suite of Linux tools used to convert Wi-Fi capture files into hashes for password recovery tools for wireless testers.

    Wireless SecurityFreeOpen source
    0
  • pwntools

    pwntools

    pwntools is a free open-source Python framework used to build and test exploits for binary CTF challenges and lab targets for CTF players and researchers.

    Offensive Security & PentestingFreeOpen source
    0

  • enum4linux-ng

    enum4linux-ng is a free open-source Python enumeration tool used to gather users, shares, and policy data from Windows and Samba hosts for pentesters.

    Offensive Security & PentestingFreeOpen source
    0
  • Hadrian

    Hadrian

    Hadrian is a paid offensive security platform used to find and validate exploitable external exposures and run AI pentests for enterprise security teams.

    Offensive Security & PentestingPaid
    0
  • Pacu

    Pacu

    Pacu is a free open-source AWS exploitation framework used to test Amazon Web Services accounts for cloud penetration testers working with authorization.

    Cloud SecurityFreeOpen source
    0
  • Sliver

    Sliver

    Sliver is a free open-source command and control framework used to run adversary emulation and red team operations for authorized security testers.

    Offensive Security & PentestingFreeOpen source
    0

  • Caldera

    Caldera is a free automated adversary emulation platform used to run ATT&CK-based security tests for red teams and defenders validating their controls.

    Offensive Security & PentestingFreeOpen source
    0
  • drozer

    drozer

    drozer is a free dynamic analysis framework used to probe Android app IPC and attack surface for mobile security testers assessing devices they own.

    Mobile SecurityFreeOpen source
    0
  • Bettercap

    Bettercap

    Bettercap is a free open-source network attack framework used to run recon and MITM tests on Wi-Fi, BLE, and IP networks for authorized security testers.

    Offensive Security & PentestingFreeOpen source
    0

  • Aircrack-ng

    Aircrack-ng is a free open-source Wi-Fi security suite used to capture traffic and test WEP and WPA keys for authorized testers auditing wireless networks.

    Wireless SecurityFreeOpen source
    0
  • PyRIT

    PyRIT

    PyRIT is a free open-source AI red-teaming framework used to identify risks in generative AI systems for security professionals and engineers.

    AI & LLM SecurityFreeOpen source
    0

  • garak

    garak is a free open-source LLM vulnerability scanner used to probe language models for security weaknesses during authorized red-team tests.

    AI & LLM SecurityFreeOpen source
    0
  • Verno Labs

    Verno Labs

    Verno Labs is a paid AI agent security platform used to red-team and monitor AI agents you are authorized to test, built for enterprise security teams.

    AI & LLM SecurityPaid
    0
  • Gobuster

    Gobuster

    Fast open-source Go tool for directory, DNS, virtual-host and cloud-bucket brute-forcing during authorized web and infrastructure assessments.

    Offensive Security & PentestingFreeOpen source
    0
  • Mimikatz

    Mimikatz

    Mimikatz is a free Windows research tool for authorized Active Directory and lab credential assessments, widely taught in HTB Academy.

    Offensive Security & PentestingFreeOpen source
    0
  • ffuf

    ffuf

    Fast open-source web fuzzer written in Go for directory, virtual-host and parameter discovery during authorized web assessments.

    Offensive Security & PentestingFreeOpen source
    0
  • John the Ripper

    John the Ripper

    Openwall John the Ripper is a free password cracker for offline hash auditing and recovery across many platforms and formats.

    Offensive Security & PentestingFreeOpen source
    0
  • Rubeus

    Rubeus

    Rubeus is a free open-source C# Kerberos toolkit from GhostPack for authorized Active Directory assessments and lab abuse-path exercises.

    Offensive Security & PentestingFreeOpen source
    0
  • Nikto

    Nikto

    Nikto is a free open-source web server scanner that checks authorized targets for dangerous files, misconfigurations and outdated software.

    Offensive Security & PentestingFreeOpen source
    0
  • WPScan

    WPScan

    WPScan is a freemium WordPress security scanner with a free CLI for authorized assessments, plus paid API plans for commercial vulnerability intelligence.

    Offensive Security & PentestingFreemium
    0
  • Feroxbuster

    Feroxbuster

    Feroxbuster is a free open-source Rust content-discovery tool for recursive web enumeration in authorized assessments and HTB-style labs.

    Offensive Security & PentestingFreeOpen source
    0
  • Ligolo-ng

    Ligolo-ng

    Ligolo-ng is a free open-source tunneling and pivoting tool for authorized network assessments and HTB-style labs, using an agent and proxy model.

    Offensive Security & PentestingFreeOpen source
    0
  • LinPEAS

    LinPEAS

    LinPEAS is a free open-source Linux privilege-escalation enumerator from PEASS-ng, used in authorized pentests and HTB-style labs.

    Offensive Security & PentestingFreeOpen source
    0
  • Tenzai

    Tenzai

    Commercial agentic AI penetration-testing platform that runs continuous, end-to-end application tests with reproducible exploit evidence for enterprises.

    Offensive Security & PentestingPaid
    0
  • Certipy

    Certipy

    Certipy is a free open-source toolkit for enumerating and assessing Active Directory Certificate Services (AD CS) in authorized pentests and labs.

    Offensive Security & PentestingFreeOpen source
    0
  • Evil-WinRM

    Evil-WinRM

    Evil-WinRM is a free open-source WinRM shell for authorized Windows and Active Directory penetration tests and lab assessments.

    Offensive Security & PentestingFreeOpen source
    0
  • Responder

    Responder

    Responder is a free open-source LLMNR, NBT-NS and MDNS poisoner with rogue auth servers for authorized AD and internal network pentests and labs.

    Offensive Security & PentestingFreeOpen source
    0
  • Nuclei

    Nuclei

    ProjectDiscovery’s template-driven vulnerability scanner for fast, community-powered checks across web apps, APIs, networks and cloud assets.

    Offensive Security & PentestingFreeOpen source
    0
  • NetExec

    NetExec

    Open-source network execution tool (nxc), successor to CrackMapExec, for assessing Windows and Active Directory services in authorized engagements.

    Offensive Security & PentestingFreeOpen source
    0
  • BloodHound

    BloodHound

    SpecterOps graph tool that maps Active Directory and Entra ID attack paths so testers can find and validate identity privilege paths in authorized assessments.

    Offensive Security & PentestingFreeOpen source
    0
  • Amass

    Amass

    OWASP Amass maps external attack surface by discovering domains, addresses and related assets through open-source intelligence and active techniques.

    OSINT & ReconnaissanceFreeOpen source
    0
  • OffSec

    OffSec

    Commercial cybersecurity training and certification platform with hands-on labs, learning paths and industry-recognized exams such as OSCP.

    Training & LabsPaid
    0
  • Impacket

    Impacket

    Python library and example tools for working with Windows and network protocols such as SMB, MSRPC, Kerberos and LDAP in authorized testing.

    Offensive Security & PentestingFreeOpen source
    0
  • Metasploit Framework

    Metasploit Framework

    Open-source penetration testing framework from Rapid7 with exploits, payloads, auxiliaries and post-exploitation modules for authorized assessments.

    Offensive Security & PentestingFreeOpen source
    0
  • TryHackMe

    TryHackMe

    Commercial browser-based cybersecurity training platform with guided rooms and paths, from beginner fundamentals to offensive and defensive roles.

    Training & LabsFreemium
    0
  • Hack The Box

    Hack The Box

    Commercial hands-on cybersecurity training platform with labs, HTB Academy courses and capture-the-flag events for individuals and teams.

    Training & LabsFreemium
    0
  • Shodan

    Shodan

    Commercial search engine for internet-connected devices and services, used to research exposure and monitor an organization’s attack surface.

    OSINT & ReconnaissanceFreemium
    0
  • Cobalt Strike

    Cobalt Strike

    Commercial adversary-simulation platform for red teams, built around the Beacon post-exploitation agent and a shared team server.

    Offensive Security & PentestingPaid
    0
  • Burp Suite

    Burp Suite

    Commercial web application security toolkit centred on an intercepting proxy, with a free Community Edition and paid Professional and DAST editions.

    Application SecurityFreemium
    0