Exploração
Arsenal de ferramentas para hacking ético e pentesting
Metasploit Framework
ExploraçãoThe worlds most respected exploitation framework. Ideal for manual and automated pentesting.
SQLMap
ExploraçãoAutomatic SQL injection detection and exploitation tool. Essential for web audits.
Exploit-DB
ExploraçãoArchive of public exploits and vulnerable software. Maintained by Offensive Security.
XSStrike
ExploraçãoAdvanced XSS detection suite equipped with multiple parsers and payloads.
BeEF
ExploraçãoBrowser Exploitation Framework. Focuses on web browser vulnerabilities.
Pwntools
ExploraçãoCTF framework and exploit development library. Ideal for binary exploitation.
Responder
ExploraçãoLLMNR, NBT-NS and MDNS poisoner. Captures credentials in Windows networks.
Ropper
ExploraçãoTool to find ROP gadgets in binaries. Essential for bypassing protections.
SearchSploit
ExploraçãoCommand-line tool for searching Exploit-DB offline.
Commix
ExploraçãoAutomated tool to detect and exploit command injection vulnerabilities.
One-Lin3r
ExploraçãoLightweight framework with ready-to-use one-liner payloads for pentesting.
Dalfox
ExploraçãoXSS scanner and parameter analyzer. Fast and powerful written in Go.