Exploração
Arsenal de ferramentas para hacking ético e pentesting
Reverse Shell Generator
ExploraçãoOnline reverse shell generator for dozens of languages, with listeners and encoding.
SQLMap
ExploraçãoAutomatic SQL injection detection and exploitation tool. Essential for web audits.
Exploit-DB
ExploraçãoArchive of public exploits and vulnerable software. Maintained by Offensive Security.
BeEF
ExploraçãoBrowser Exploitation Framework. Focuses on web browser vulnerabilities.
XSStrike
ExploraçãoAdvanced XSS detection suite equipped with multiple parsers and payloads.
Metasploit Framework
ExploraçãoThe worlds most respected exploitation framework. Ideal for manual and automated pentesting.
Pwntools
ExploraçãoCTF framework and exploit development library. Ideal for binary exploitation.
Responder
ExploraçãoLLMNR, NBT-NS and MDNS poisoner. Captures credentials in Windows networks.
Kerbrute
ExploraçãoActive Directory user enumeration and password spraying via Kerberos pre-auth.
Ghauri
ExploraçãoAdvanced SQL injection detection and exploitation tool, a modern sqlmap alternative.
One-Lin3r
ExploraçãoLightweight framework with ready-to-use one-liner payloads for pentesting.
SearchSploit
ExploraçãoCommand-line tool for searching Exploit-DB offline.
Dalfox
ExploraçãoXSS scanner and parameter analyzer. Fast and powerful written in Go.
Commix
ExploraçãoAutomated tool to detect and exploit command injection vulnerabilities.
Ropper
ExploraçãoTool to find ROP gadgets in binaries. Essential for bypassing protections.