Werkzeuge
Arsenal an Tools für ethisches Hacking und Pentesting
TruffleHog
SchwachstellenanalyseFinds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.
PEASS-ng (LinPEAS / WinPEAS)
Post-ExploitationPrivilege escalation enumeration scripts for Linux, Windows and macOS.
garak
SchwachstellenanalyseNVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.
Caido
SchwachstellenanalyseLightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.
NetExec
Post-ExploitationMaintained successor of CrackMapExec. Swiss army knife for Windows and Active Directory network pentesting.
SecLists
SchwachstellenanalyseThe reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.
Reverse Shell Generator
ExploitationOnline reverse shell generator for dozens of languages, with listeners and encoding.
Dune Analytics
Blockchain-ToolsSQL queries on blockchain data. Community dashboards.
Binwalk
Digitale ForensikTool for analyzing, extracting and reverse engineering firmware.
OpenCTI
Defensive SicherheitCyber threat intelligence management platform.
Etherscan
Blockchain-ToolsEthereum blockchain explorer. Transaction and contract analysis.
Aircrack-ng
Netzwerke & SniffingComplete suite for WiFi audits. Capture, attack and cracking of wireless networks.
Parrot OS
Sichere BetriebssystemeSecurity distribution focused on privacy and development.
Forta
Blockchain-ToolsDecentralized monitoring network for Web3 threat detection.
Chainalysis
Blockchain-ToolsBlockchain analytics platform for investigations and compliance.
Nansen
Blockchain-ToolsOn-chain analytics with wallet labeling. Intelligence for DeFi.
Burp Suite
SchwachstellenanalyseThe standard toolkit for web application security testing. Intercepting proxy and automated scanner.
OWASP ZAP
SchwachstellenanalyseFree and open source web security scanner. Alternative to Burp Suite with CI/CD integration.
Maltego
Aufklärung & OSINTLink analysis and data enrichment tool. Visualizes relationships between people, domains and emails.
Ghidra
Reverse EngineeringNSA reverse engineering suite. Free and powerful decompiler, cross-platform.
Mostrando 1-20 de 175