Tools overview

Sammlung von Pentesting-Tools

Active Directory

🛠️ Tools

Name	Purpose	Link
Rubeus	Interaction with kerberos	https://github.com/GhostPack/Rubeus
kerbrute	Kerberos-Pre-Auth Bruteforcing (User-Enum)/Interaction	https://github.com/ropnop/kerbrute
ldapdomaindump	Dump of LDAP	https://github.com/dirkjanm/ldapdomaindump
Certipy	AD CS Enumeration/Abusing	https://github.com/ly4k/Certipy

📖 Ressources

Name	Purpose	Link
AD-Attack-Defense	AD Attack&Defense Ressources	https://github.com/infosecn1nja/AD-Attack-Defense

Web

Tool	Purpose	Link
SecretOpt1	Sensitive website enumeration	https://github.com/blackhatethicalhacking/SecretOpt1c

SQL Injection

Tool	Purpose	Link
sqlmap	SQL Injection Automation	https://github.com/sqlmapproject/sqlmap

XSS

Tool	Purpose	Link
XSStrike	Advanced XSS Scanner	https://github.com/s0md3v/XSStrike

Passive Enumeration

Tool	Purpose	Link
theHarvester	OSINT (names, emails, IPs, subdomains, and URLs)	https://github.com/laramies/theHarvester

Reverse Engineering

Tool	Purpose	Link
ILSpy	.NET Decompiler	https://github.com/icsharpcode/ILSpy