Extracts hosts/subdomains, IP or emails for a specific domain with Google search.

goohost

Scans all reserved TCP ports on the machine

nmap

whois

 Automatic SQL injection and database takeover tool.

sqlmap

 WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. 

wpscan

Brute force directories and files names on web/application servers.

dirbuster

johntheripper

Provides information about security vulnerabilities and aids in penetration testing and IDS signature development

metasploit-framework

Empire is a PowerShell and Python 3.x post-exploitation framework. 

bcsecurity/empire

List services, their current state, and their corresponding ports, run the command.

netstat-services

Watch TCP, UDP open ports in real time with socket summary. 

watch-ports

Generate network addresses/CIDR and so on.

ipcalc

dnsrecon

ZMap is a fast single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable scanning the entire public IPv4 address space in under 45 minutes. With a 10gigE connection and PF_RING, ZMap can scan the IPv4 address space in under 5 minutes.

zmap

Email recon made fast and easy, with a framework to build on

simplyemail

Burp Suite Professional is one of the most popular penetration testing and vulnerability finder tools, and is often used for checking web application security. “Burp,” as it is commonly known, is a proxy-based tool used to evaluate the security of web-based applications and do hands-on testing.

burppro

 Fast and customizable vulnerability scanner based on simple **YAML** based **DSL**. 

PentestReports Tools

Security tools and commands - Home