Information

Every package of the BlackArch Linux repository is listed in the following table. If you don't find your needed tool in this list simply open an issue or better do a pull request for the tool you want to be in our repository. We are fast at packaging and releasing tools.


Tool count: 2920

BlackArch Linux Complete Tools List
Name Version Description Category Website
0d1n 263.2d723ae Web security tool to make fuzzing at HTTP inputs, made in C with libCurl. blackarch-webapp
0trace 1.5 A hop enumeration tool. blackarch-scanner
3proxy 0.9.4 Tiny free proxy server. blackarch-proxy
3proxy-win32 0.8.13 Tiny free proxy server. blackarch-windows
42zip 42 Recursive Zip archive bomb. blackarch-dos
a2sv 140.cb24c4e Auto Scanning to SSL Vulnerability. blackarch-scanner
abcd 4.2738809 ActionScript ByteCode Disassembler. blackarch-disassembler
abuse-ssl-bypass-waf 7.c28f98e Bypassing WAF by abusing SSL/TLS Ciphers. blackarch-webapp
acccheck 0.2.1 A password dictionary attack tool that targets windows authentication via the SMB protocol. blackarch-cracker
ace 1.10 Automated Corporate Enumerator. A simple yet powerful VoIP Corporate Directory enumeration tool that mimics the behavior of an IP Phone in order to download the name and extension entries that a given phone can display on its screen interface blackarch-voip
aclpwn 4.81480cc Active Directory ACL exploitation with BloodHound. blackarch-exploitation
activedirectoryenum 0.5.0 Enumerate AD through LDAP. blackarch-recon
ad-ldap-enum 88.60bc5bb An LDAP based Active Directory user and group enumeration tool. blackarch-recon
ad-miner v1.6.1.r0.ge0ea12c Active Directory audit tool that extract data from Bloodhound to uncover security weaknesses and generate an HTML report blackarch-recon
adape-script 43.4d0b9ff Active Directory Assessment and Privilege Escalation Script. blackarch-windows
adassault 0.0.3.r5.g78d6db0 An Active Directory environments pentest tool complementary to existing ones like NetExec. blackarch-networking
adenum 36.fbbe14d A pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos. blackarch-exploitation
adfind v1.0.3.r0.g3a6a055 Simple admin panel finder for php,js,cgi,asp and aspx admin panels. blackarch-webapp
adfspray 6.3d7745d Python3 tool to perform password spraying against Microsoft Online service using various methods. blackarch-cracker
adidnsdump 25.8bbb4b0 Active Directory Integrated DNS dumping by any authenticated user. blackarch-recon
admid-pack 0.1 ADM DNS spoofing tools - Uses a variety of active and passive methods to spoof DNS packets. Very powerful. blackarch-spoof
adminpagefinder 0.1 This python script looks for a large amount of possible administrative interfaces on a given site. blackarch-webapp
admsnmp 0.1 ADM SNMP audit scanner. blackarch-scanner
aesfix 1.0.1 A tool to find AES key in RAM. blackarch-cracker
aeskeyfind 1.0 A tool to find AES key in RAM. blackarch-cracker
aespipe 2.4f Reads data from stdin and outputs encrypted or decrypted results to stdout. blackarch-crypto
aesshell 0.7 A backconnect shell for Windows and Unix written in python and uses AES in CBC mode in conjunction with HMAC-SHA256 for secure transport. blackarch-backdoor
afflib 3.7.19 An extensible open format for the storage of disk images and related forensic information. blackarch-forensic
afl++ 4.21c instrumentation-driven fuzzer for binary format blackarch-fuzzer
afpfs-ng 0.8.2 A client for the Apple Filing Protocol (AFP) blackarch-networking
agafi 1.1 A gadget finder and a ROP-Chainer tool for x86 platforms. blackarch-windows
against 0.2 A very fast ssh attacking script which includes a multithreaded port scanning module (tcp connect) for discovering possible targets and a multithreaded brute-forcing module which attacks parallel all discovered hosts or given ip addresses from a list. blackarch-cracker
aggroargs 51.c032446 Bruteforce commandline buffer overflows, linux, aggressive arguments. blackarch-exploitation
aiengine 2.0.1 A packet inspection engine with capabilities of learning without any human intervention. blackarch-networking
aimage 3.2.5 A program to create aff-images. blackarch-forensic
aiodnsbrute 38.e773a4c Python 3 DNS asynchronous brute force utility. blackarch-recon
air 2.0.0 A GUI front-end to dd/dc3dd designed for easily creating forensic images. blackarch-forensic
aircrack-ng 1.7 Key cracker for the 802.11 WEP and WPA-PSK protocols blackarch-wireless
airflood 0.1 A modification of aireplay that allows for a DoS of the AP. This program fills the table of clients of the AP with random MACs doing impossible new connections. [Tool in Spanish] blackarch-wireless
airgeddon v11.31.r0.g7335109 Multi-use bash script for Linux systems to audit wireless networks. blackarch-wireless
airopy 5.b83f11d Get (wireless) clients and access points. blackarch-wireless
airoscript 45.0a122ee A script to simplify the use of aircrack-ng tools. blackarch-wireless
airpwn 1.4 A tool for generic packet injection on an 802.11 network. blackarch-wireless
ajpfuzzer 0.6 A command-line fuzzer for the Apache JServ Protocol (ajp13). blackarch-fuzzer
albatar 34.4e63f22 A SQLi exploitation framework in Python. blackarch-webapp
allthevhosts 1.0 A vhost discovery tool that scrapes various web applications. blackarch-scanner
altdns 76.8c1de0f Generates permutations, alterations and mutations of subdomains and then resolves them. blackarch-recon
amass 2143.5f1f7176 In-depth subdomain enumeration written in Go. blackarch-scanner
amber 256.f6eb2dc Reflective PE packer. blackarch-binary
amoco v2.9.11.r2.gf1182a5 Yet another tool for analysing binaries. blackarch-binary
analyzemft 133.b6ed04f Parse the MFT file from an NTFS filesystem. blackarch-forensic
analyzepesig 0.0.0.5 Analyze digital signature of PE file. blackarch-windows
androbugs 1.7fd3a2c An efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. blackarch-mobile
androguard 3.3.5 Reverse engineering, Malware and goodware analysis of Android applications and more. blackarch-binary
androick 8.522cfb4 A python tool to help in forensics analysis on android. blackarch-mobile
android-apktool 2.7.0 A tool for reverse engineering Android apk files. blackarch-reversing
android-ndk r27 Android C/C++ developer kit blackarch-mobile
android-sdk 26.1.1 Google Android SDK blackarch-mobile
android-udev-rules 534.26575a4 Android udev rules. blackarch-mobile
androidpincrack 2.ddaf307 Bruteforce the Android Passcode given the hash and salt. blackarch-mobile
androidsniffer 0.1 A perl script that lets you search for 3rd party passwords, dump the call log, dump contacts, dump wireless configuration, and more. blackarch-mobile
androwarn 135.626c02d Yet another static code analyzer for malicious Android applications. blackarch-mobile
angr 9.1.11752 The next-generation binary analysis platform from UC Santa Barbaras Seclab. blackarch-binary
angr-management 9.1.11752 This is the GUI for angr. blackarch-binary
angr-py2 7.8.9.26 The next-generation binary analysis platform from UC Santa Barbaras Seclab. blackarch-binary
angrop 408.15616aa A rop gadget finder and chain builder. blackarch-exploitation
anontwi 1.1b A free software python client designed to navigate anonymously on social networks. It supports Identi.ca and Twitter.com. blackarch-social
anti-xss 166.2725dc9 A XSS vulnerability scanner. blackarch-webapp
antiransom 5 A tool capable of detect and stop attacks of Ransomware using honeypots. blackarch-windows
anubis 1.1.3.r0.g9ea89fa Subdomain enumeration and information gathering tool. blackarch-scanner
apache-users 2.1 This perl script will enumerate the usernames on a unix system that use the apache module UserDir. blackarch-scanner
apachetomcatscanner 3.2 Apache Tomcat vulnerability scanner. blackarch-scanner
apacket 374.16e7036 Sniffer syn and backscatter packets. blackarch-networking
aphopper 0.3 A program that automatically hops between access points of different wireless networks. blackarch-wireless
apkid 2.1.4 Android Application Identifier for Packers, Protectors, Obfuscators and Oddities. blackarch-mobile
apkleaks v2.6.2.r3.g3202df9 Scanning APK file for URIs, endpoints & secrets. blackarch-mobile
apkstat 18.81cdad3 Automated Information Retrieval From APKs For Initial Analysis. blackarch-mobile
apkstudio 100.9e114ca An IDE for decompiling/editing & then recompiling of android application binaries. blackarch-reversing
apkurlgrep 8.a188a98 Extract endpoints from APK files. blackarch-mobile
apnbf 0.1 A small python script designed for enumerating valid APNs (Access Point Name) on a GTP-C speaking device. blackarch-wireless
appmon 177.f753c4d A runtime security testing & profiling framework for native apps on macOS, iOS & android and it is built using Frida. blackarch-mobile
apt2 183.8075cdc Automated penetration toolkit. blackarch-automation
aquatone 151.f4eed57 A Tool for Domain Flyovers. blackarch-recon
arachni 1.6.1.3.1.g8e5c5d0a9 A feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. blackarch-webapp
aranea 6.469b9ee A fast and clean dns spoofing tool. blackarch-spoof
arcane 2.750cb9f Backdoor iOS packages and create the necessary resources for APT repositories. blackarch-mobile
archivebox 903.59da482 The open source self-hosted web archive. Takes browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more. blackarch-misc
ares v0.10.0.r72.gff0af1c Automated decoding of encrypted text without knowing the key or ciphers used. blackarch-cracker
argon2 20190702 A password-hashing function (reference C implementation) blackarch-crypto
argus 3.0.8.2 Network monitoring tool with flow control. blackarch-networking
argus-clients 3.0.8.2 Network monitoring client for Argus. blackarch-networking
arjun 236.53afa55 HTTP parameter discovery suite. blackarch-webapp
armitage 150813 A graphical cyber attack management tool for Metasploit. blackarch-exploitation
armor 5.bae27a6 A simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners. blackarch-exploitation
armscgen 98.c51b7d6 ARM Shellcode Generator (Mostly Thumb Mode). blackarch-exploitation
arp-scan 1.10.0 A tool that uses ARP to discover and fingerprint IP hosts on the local network blackarch-networking
arpalert 2.0.12 Monitor ARP changes in ethernet networks. blackarch-networking
arping-th 2.25 ARP Ping from Thomas Habets (aka Debian arping). blackarch-networking
arpoison 0.7 The UNIX arp cache update utility blackarch-exploitation
arpon 2.7 A portable handler daemon that make ARP protocol secure in order to avoid the Man In The Middle (MITM) attack through ARP Spoofing, ARP Cache Poisoning or ARP Poison Routing (APR) attacks. blackarch-defensive
arpstraw 27.ab40e13 Arp spoof detection tool. blackarch-defensive
arptools 13.41cdb23 A simple tool about ARP broadcast, ARP attack, and data transmission. blackarch-networking
arpwner 26.f300fdf GUI-based python tool for arp poisoning and dns poisoning attacks. blackarch-networking
artillery 357.805a5d8 A combination of a honeypot, file-system monitoring, system hardening, and overall health of a server to create a comprehensive way to secure a system. blackarch-defensive
artlas 154.e5fdd8d Apache Real Time Logs Analyzer System. blackarch-defensive
arybo 65.89d9a42 Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions. blackarch-misc
asleap 2.2 Actively recover LEAP/PPTP passwords. blackarch-cracker
asnmap v1.1.1.r0.g9eed841 Map organization network ranges using ASN information. blackarch-networking
asp-audit 2BETA An ASP fingerprinting tool and vulnerability scanner. blackarch-fingerprint
assassingo 173.2dd8650 Web pentest framework for information gathering and vulnerability scanning. blackarch-scanner
assetfinder 19.4e95d87 Find domains and subdomains potentially related to a given domain. blackarch-scanner
astra 489.092804a Automated Security Testing For REST API's. blackarch-webapp
atear 139.245ec8d Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration. blackarch-wireless
atftp 0.8.0 Client/server implementation of the TFTP protocol that implements RFCs 1350, 2090, 2347, 2348, and 2349 blackarch-networking
athena-ssl-scanner 0.6.2 A SSL cipher scanner that checks all cipher codes. It can identify about 150 different ciphers. blackarch-scanner
atlas 7.77bd6c8 Open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS. blackarch-webapp
atscan 2461.06521a9 Server, Site and Dork Scanner. blackarch-scanner
atstaketools 0.1 This is an archive of various @Stake tools that help perform vulnerability scanning and analysis, information gathering, password auditing, and forensics. blackarch-windows
attacksurfacemapper 47.8a402ed Tool that aims to automate the reconnaissance process. blackarch-recon
attk 2.0.1023 Trend Micro Anti-Threat Toolkit. blackarch-scanner
aurebeshjs 77.75a8fc6 Translate JavaScript to Other Alphabets. blackarch-misc
auto-eap 18.ee36d37 Automated Brute-Force Login Attacks Against EAP Networks. blackarch-wireless
auto-xor-decryptor 7.2eb176d Automatic XOR decryptor tool. blackarch-crypto
automato 33.0561b59 Should help with automating some of the user-focused enumeration tasks during an internal penetration test. blackarch-automation
autonessus 24.7933022 This script communicates with the Nessus API in an attempt to help with automating scans. blackarch-automation
autonse 25.7c87f4c Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner. blackarch-automation
autopsy 4.21.0 The forensic browser. A GUI for the Sleuth Kit. blackarch-forensic
autopwn 190.fc80cef Specify targets and run sets of tools against them. blackarch-automation
autorecon 282.19cc46b A multi-threaded network reconnaissance tool which performs automated enumeration of services. blackarch-automation
autosint 236.25d292c Tool to automate common osint tasks. blackarch-recon
autosploit 281.9a6a5ef Automate the exploitation of remote hosts. blackarch-exploitation
autovpn 18.28b1a87 Easily connect to a VPN in a country of your choice. blackarch-networking
avaloniailspy v7.2.rc.r10.gbc00df4 .NET Decompiler (port of ILSpy) blackarch-decompiler
avet 133.2f1d882 AntiVirus Evasion Tool blackarch-binary
avml v0.6.1.r11.g155f084 A portable volatile memory acquisition tool for Linux. blackarch-misc
aws-extender-cli 17.a351154 Script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues. blackarch-scanner
aws-iam-privesc 11.2983efd AWS IAM policy scanner that helps determine where privilege escalation can be achieved. blackarch-scanner
aws-inventory 19.9a2fa8e Discover resources created in an AWS account. blackarch-recon
awsbucketdump 82.4684670 A tool to quickly enumerate AWS S3 buckets to look for loot. blackarch-automation
azazel 15.a41fbb5 A userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. blackarch-backdoor
aztarna 1.2.1 A footprinting tool for ROS and SROS systems. blackarch-recon
backcookie 51.6dabc38 Small backdoor using cookie. blackarch-backdoor
backdoor-apk 141.2710126 Shell script that simplifies the process of adding a backdoor to any Android APK file blackarch-mobile
backdoor-factory 210.0c53045 Patch win32/64 binaries with shellcode. blackarch-backdoor
backdoorme 308.f9755ca A powerful utility capable of backdooring Unix machines with a slew of backdoors. blackarch-backdoor
backdoorppt 88.d0e7f91 Transform your payload.exe into one fake word doc (.ppt). blackarch-backdoor
backfuzz 1.b0648de A network protocol fuzzing toolkit. blackarch-fuzzer
backhack 39.561ec86 Tool to perform Android app analysis by backing up and extracting apps, allowing you to analyze and modify file system contents for apps. blackarch-mobile
backoori 55.988e507 Tool aided persistence via Windows URI schemes abuse. blackarch-exploitation
backorifice 1.0 A remote administration system which allows a user to control a computer across a tcpip connection using a simple console or GUI application. blackarch-windows
bad-pdf 61.a8149ee Steal NTLM Hashes with Bad-PDF. blackarch-exploitation
badkarma 85.2c46334 Advanced network reconnaissance toolkit. blackarch-recon
badministration 16.69e4ec2 A tool which interfaces with management or administration applications from an offensive standpoint. blackarch-webapp
bagbak 313.79ca483 Yet another frida based App decryptor. blackarch-mobile
balbuzard 67.d6349ef1bc55 A package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). blackarch-malware
bamf-framework 35.30d2b4b A modular framework designed to be a platform to launch attacks against botnets. blackarch-malware
bandicoot 0.6.0 A toolbox to analyze mobile phone metadata. blackarch-mobile
bandit 1.7.10 Python security linter from OpenStack Security blackarch-code-audit
barf 923.9547ef8 A multiplatform open source Binary Analysis and Reverse engineering Framework. blackarch-binary
barmie 1.01 Java RMI enumeration and attack tool. blackarch-scanner
barq 35.6f1a68c An AWS Cloud Post Exploitation framework. blackarch-exploitation
base64dump 0.0.14 Extract and decode base64 strings from files. blackarch-misc
basedomainname 0.1 Tool that can extract TLD (Top Level Domain), domain extensions (Second Level Domain + TLD), domain name, and hostname from fully qualified domain names. blackarch-recon
bashfuscator 338.7487348 Fully configurable and extendable Bash obfuscation framework. blackarch-automation
bashscan 94.80c066c A port scanner built to utilize /dev/tcp for network and service discovery. blackarch-scanner
batctl 2023.1 B.A.T.M.A.N. advanced control and management tool blackarch-wireless
batman-adv 2019.2 Batman kernel module, (included upstream since .38) blackarch-wireless
batman-alfred 2024.2 Almighty Lightweight Fact Remote Exchange Daemon. blackarch-wireless
bbqsql 261.b9859d2 SQL injection exploit tool. blackarch-webapp
bbscan 52.6731879 A tiny Batch web vulnerability Scanner. blackarch-webapp
bdfproxy 107.276c367 Patch Binaries via MITM: BackdoorFactory + mitmProxy blackarch-proxy
bdlogparser 2 This is a utility to parse a Bit Defender log file, in order to sort them into a malware archive for easier maintenance of your malware collection. blackarch-malware
bed 0.5 Collection of scripts to test for buffer overflows, format string vulnerabilities. blackarch-exploitation
beebug 25.cddb375 A tool for checking exploitability. blackarch-decompiler
beef 4480.7cb0a39b The Browser Exploitation Framework that focuses on the web browser. blackarch-exploitation
beeswarm 1183.db51ea0 Honeypot deployment made easy http://www.beeswarm-ids.org/ blackarch-honeypot
beholder 0.8.10 A wireless intrusion detection tool that looks for anomalies in a wifi environment. blackarch-wireless
belati 72.49577a1 The Traditional Swiss Army Knife for OSINT. blackarch-scanner
beleth 36.0963699 A Multi-threaded Dictionary based SSH cracker. blackarch-cracker
beroot 1.0.1.r109.g4c0b648 A post exploitation tool to check common misconfigurations to find a way to escalate our privilege. blackarch-exploitation
bettercap 2.33.0 Swiss army knife for network attacks and monitoring blackarch-sniffer
bettercap-ui 1.3.0 Official Bettercap's Web UI. blackarch-misc
bfac 53.18fb0b5 An automated tool that checks for backup artifacts that may disclose the web-application's source code. blackarch-recon
bfbtester 2.0.1 Performs checks of single and multiple argument command line overflows and environment variable overflows blackarch-exploitation
bfuzz 60.fdaefc0 Input based fuzzer tool for browsers. blackarch-fuzzer
bgp-md5crack 0.1 RFC2385 password cracker blackarch-cracker
bgrep 24.28029c9 Binary grep. blackarch-binary
billcipher 32.97fba59 Information Gathering tool for a Website or IP address. blackarch-recon
binaryninja-demo 4.1.5902 A new kind of reversing platform (demo version). blackarch-reversing
binaryninja-python 13.83f59f7 Binary Ninja prototype written in Python. blackarch-binary
bind 9.20.2 A complete, highly portable implementation of the DNS protocol blackarch-networking
bindead 4504.67019b97b A static analysis tool for binaries blackarch-binary
bindiff 6.0.0 A comparison tool for binary files, that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code. blackarch-binary
binex 1.0 Format String exploit building tool. blackarch-exploitation
binflow 5.7fb02a9 POSIX function tracing. Much better and faster than ftrace. blackarch-binary
bing-ip2hosts 1.0.5 Enumerates all hostnames which Bing has indexed for a specific IP address. blackarch-recon
bing-lfi-rfi 0.1 Python script for searching Bing for sites that may have local and remote file inclusion vulnerabilities. blackarch-webapp
bingoo 3.698132f A Linux bash based Bing and Google Dorking Tool. blackarch-scanner
binnavi 6.1.0 A binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code. blackarch-disassembler
binproxy 8.d02fce9 A proxy for arbitrary TCP connections. blackarch-proxy
binwalk 2.4.2 Tool for searching a given binary image for embedded files blackarch-disassembler
binwally 4.0aabd8b Binary and Directory tree comparison tool using the Fuzzy Hashing concept (ssdeep). blackarch-binary
bios_memimage 1.2 A tool to dump RAM contents to disk (aka cold boot attack). blackarch-cracker
birp 65.b2e108a A tool that will assist in the security assessment of mainframe applications served over TN3270. blackarch-scanner
bitdump 34.6a5cbd8 A tool to extract database data from a blind SQL injection vulnerability. blackarch-exploitation
bittwist 2.0 A simple yet powerful libpcap-based Ethernet packet generator. It is designed to complement tcpdump, which by itself has done a great job at capturing network traffic. blackarch-sniffer
bkcrack v1.7.0.r6.g7b4ea52 Crack legacy zip encryption with Biham and Kocher known plaintext attack. blackarch-cracker
bkhive 1.1.1 Program for dumping the syskey bootkey from a Windows NT/2K/XP system hive. blackarch-cracker
blackbox-scanner 1.7a25220 Dork scanner & bruteforcing & hash cracker with blackbox framework. blackarch-scanner
blackeye v2.0.r0.g27a3f04 Ultimate phishing tool with ngrok and serveo. blackarch-social
blackhash 0.2 Creates a filter from system hashes. blackarch-cracker
blacknurse 9.d2a2b23 A low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls. blackarch-dos
bleah 53.6a2fd3a A BLE scanner for "smart" devices hacking. blackarch-scanner
bless 0.6.3 High-quality, full-featured hex editor blackarch-misc
bletchley 0.0.1 A collection of practical application cryptanalysis tools. blackarch-crypto
blind-sql-bitshifting 54.5bbc183 A blind SQL injection module that uses bitshfting to calculate characters. blackarch-exploitation
blindelephant 7 A web application fingerprinter. Attempts to discover the version of a (known) web application by comparing static files at known locations blackarch-fingerprint
blindsql 1.0 Set of bash scripts for blind SQL injection attacks. blackarch-database
blindy 12.59de8f2 Simple script to automate brutforcing blind sql injection vulnerabilities. blackarch-scanner
blisqy 20.e9995fc Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB). blackarch-webapp
bloodhound v4.3.1.r41.g0d36459 Six Degrees of Domain Admin blackarch-recon
bloodhound-python v1.0.1.r151.ge8b0b7a Bloodhound python data collector blackarch-recon
bloodyad 196.1913e10 An Active Directory Privilege Escalation Framework. blackarch-exploitation
blue-hydra 710.1c2372d A Bluetooth device discovery service built on top of the bluez library. blackarch-bluetooth
bluebox-ng 1.1.0 A GPL VoIP/UC vulnerability scanner. blackarch-voip
bluebugger 0.1 An implementation of the bluebug technique which was discovered by Martin Herfurt. blackarch-bluetooth
bluediving 0.9 A Bluetooth penetration testing suite. blackarch-bluetooth
bluefog 0.0.4 A tool that can generate an essentially unlimited number of phantom Bluetooth devices. blackarch-bluetooth
bluelog 1.1.2 A Bluetooth scanner and sniffer written to do a single task, log devices that are in discoverable mode. blackarch-bluetooth
bluepot 0.2 A Bluetooth Honeypot written in Java, it runs on Linux. blackarch-bluetooth
blueprint 0.1_3 A perl tool to identify Bluetooth devices. blackarch-bluetooth
blueranger 1.0 A simple Bash script which uses Link Quality to locate Bluetooth device radios. blackarch-automation
bluescan 1.0.6 A Bluetooth Device Scanner. blackarch-bluetooth
bluesnarfer 0.1 A bluetooth attacking tool. blackarch-bluetooth
bluffy 47.180ed5b Convert shellcode into different formats. blackarch-exploitation
bluphish 9.a7200bd Bluetooth device and service discovery tool that can be used for security assessment and penetration testing. blackarch-bluetooth
bluto 142.25cad7a Recon, Subdomain Bruting, Zone Transfers. blackarch-scanner
bmap-tools 3.7 Tool for copying largely sparse files using information from a block map file. blackarch-forensic
bmc-tools 25.c66a657 RDP Bitmap Cache parser. blackarch-forensic
bob-the-butcher 0.7.1 A distributed password cracker package. blackarch-cracker
bof-detector 19.e08367d A simple detector of BOF vulnerabilities by source-code-level check. blackarch-code-audit
bonesi 12.733c9e9 The DDoS Botnet Simulator. blackarch-dos
boofuzz v0.4.2.r19.g5552d0c blackarch-fuzzer
boopsuite 170.16c902f A Suite of Tools written in Python for wireless auditing and security testing. blackarch-wireless
bopscrk v2.4.7.r2.g7eede16 Tool to generate smart wordlists, eg. based on lyrics. blackarch-automation
botb 69.6d33aae A container analysis and exploitation tool for pentesters and engineers. blackarch-exploitation
bowcaster 230.17d69c1 A framework intended to aid those developing exploits. blackarch-exploitation
box-js 679.4d09755 A tool for studying JavaScript malware. blackarch-malware
bqm v1.5.1.r5.ge287280 Download BloudHound query lists, deduplicate entries and merge them in one file. blackarch-misc
braa 0.82 A mass snmp scanner blackarch-scanner
braces 0.4 A Bluetooth Tracking Utility. blackarch-bluetooth
brakeman v6.2.1.1.r6.ge4f49f64d A static analysis security vulnerability scanner for Ruby on Rails applications. blackarch-code-audit
bridgekeeper 57.55c390c Scrape employee names from search engine LinkedIn profiles. Convert employee names to a specified username format. blackarch-recon
brosec 278.c51164f An interactive reference tool to help security professionals utilize useful payloads and commands. blackarch-exploitation
browselist 1.4 Retrieves the browse list ; the output list contains computer names, and the roles they play in the network. blackarch-windows
browser-fuzzer 3 Browser Fuzzer 3 blackarch-fuzzer
brute-force 52.78d1d8e Brute-Force attack tool for Gmail Hotmail Twitter Facebook Netflix. blackarch-cracker
brute12 1 A tool designed for auditing the cryptography container security in PKCS12 format. blackarch-windows
bruteforce-luks 54.788d637 Try to find the password of a LUKS encrypted volume. blackarch-cracker
bruteforce-salted-openssl 64.30b272e Try to find the password of a file that was encrypted with the 'openssl' command. blackarch-cracker
bruteforce-wallet 43.648d7d7 Try to find the password of an encrypted Peercoin (or Bitcoin,Litecoin, etc...) wallet file. blackarch-cracker
brutemap 65.da4b303 Penetration testing tool that automates testing accounts to the site's login page. blackarch-webapp
brutespray 407.947d7b5 Brute-Forcing from Nmap output - Automatically attempts default creds on found services. blackarch-automation
brutessh 0.6 A simple sshd password bruteforcer using a wordlist, it's very fast for internal networks. It's multithreads. blackarch-cracker
brutex 114.eacd084 Automatically brute force all services running on a target. blackarch-automation
brutexss 54.ba753df Cross-Site Scripting Bruteforcer. blackarch-webapp
brutus 2 One of the fastest, most flexible remote password crackers you can get your hands on. blackarch-windows
bsdiff 4.3 Tools for building and applying patches to binary files. blackarch-binary
bsqlbf 2.7 Blind SQL Injection Brute Forcer. blackarch-webapp
bsqlinjector 13.027184f Blind SQL injection exploitation tool written in ruby. blackarch-webapp
bss 0.8 Bluetooth stack smasher / fuzzer. blackarch-bluetooth
bt_audit 0.1.1 Bluetooth audit blackarch-bluetooth
btcrack 1.1 The world's first Bluetooth Pass phrase (PIN) bruteforce tool. Bruteforces the Passkey and the Link key from captured Pairing exchanges. blackarch-bluetooth
btlejack 88.c487859 Bluetooth Low Energy Swiss-army knife. blackarch-bluetooth
btproxy-mitm 71.cd1c906 Man in the Middle analysis tool for Bluetooth. blackarch-bluetooth
btscanner 2.1 Bluetooth device scanner. blackarch-bluetooth
bulk-extractor 1562.1c67a75 Bulk Email and URL extraction tool. blackarch-forensic
bully 1.4.00 Retrieve WPA/WPA2 passphrase from a WPS enabled access point blackarch-wireless
bunny 0.93 A closed loop, high-performance, general purpose protocol-blind fuzzer for C programs. blackarch-fuzzer
burpsuite 2024.9 An integrated platform for attacking web applications (community edition) + SHELLING plugin. blackarch-webapp
buster 92.131437e Find emails of a person and return info associated with them. blackarch-social
buttinsky 138.1a2a1b2 Provide an open source framework for automated botnet monitoring. blackarch-networking
bvi 1.4.2 A display-oriented editor for binary files operate like "vi" editor. blackarch-binary
byepass 213.8cbfd9b Automates password cracking tasks using optimized dictionaries and mangling rules. blackarch-automation
bypass-firewall-dns-history 33.c55b7ce Firewall bypass script based on DNS history records. blackarch-networking
bytecode-viewer 2.12 A Java 8/Android APK Reverse Engineering Suite. blackarch-binary
c5scan 30.be8845c Vulnerability scanner and information gatherer for the Concrete5 CMS. blackarch-webapp
c7decrypt 0.3.3 Cisco password type encryptor and decryptor. blackarch-crypto
cachedump 1.1 A tool that demonstrates how to recover cache entry information: username and hashed password (called MSCASH). blackarch-windows
cadaver 0.24 Command-line WebDAV client for Unix blackarch-networking
cafebabe 0.1.2 Java bytecode editor & decompiler. blackarch-decompiler
cameradar 195.1b91e54 Hacks its way into RTSP videosurveillance cameras. blackarch-scanner
camover 94.483befd A camera exploitation tool that allows to disclosure network camera admin password. blackarch-exploitation
camscan 1.0057215 A tool which will analyze the CAM table of Cisco switches to look for anamolies. blackarch-scanner
can-utils 1124.d05810f Linux-CAN / SocketCAN user space applications. blackarch-automobile
canalyzat0r 41.6bc251e Security analysis toolkit for proprietary car protocols. blackarch-automobile
canari 3.3.10 Maltego rapid transform development and execution framework. blackarch-forensic
cangibrina 123.6de0165 Dashboard Finder. blackarch-scanner
cansina 59.67c6301 A python-based Web Content Discovery Tool. blackarch-webapp
cantoolz 425.82d330b Framework for black-box CAN network analysis. blackarch-automobile
capfuzz 34.97ac312 Capture, fuzz and intercept web traffic. blackarch-sniffer
capstone 5.0.3 Lightweight multi-platform, multi-architecture disassembly framework blackarch-reversing
captipper 74.3fb2836 Malicious HTTP traffic explorer tool. blackarch-forensic
cardpwn 32.166abf9 OSINT Tool to find Breached Credit Cards Information. blackarch-social
cariddi v1.3.5.r0.g9e5c233 Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, token. blackarch-webap
carwhisperer 0.2 Intends to sensibilise manufacturers of carkits and other Bluetooth appliances without display and keyboard for the possible security threat evolving from the use of standard passkeys. blackarch-bluetooth
casefile 1.0.1 The little brother to Maltego without transforms, but combines graph and link analysis to examine links between manually added data to mind map your information blackarch-forensic
catana 31.9ea1f0d Filter your wordlist according to the specified password policy. blackarch-misc
catnthecanary 7.e9184fe An application to query the canary.pw data set for leaked data. blackarch-recon
catphish 44.768d213 For phishing and corporate espionage. blackarch-social
ccrawldns 6.92525b6 Retrieves from the CommonCrawl data set unique subdomains for a given domain name. blackarch-recon
cdpsnarf 0.1.6 Cisco discovery protocol sniffer. blackarch-sniffer
cecster 5.15544cb A tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols. blackarch-scanner
cent v1.3.4.r2.g481700c Community edition nuclei templates. blackarch-webapp
centry 72.6de2868 Cold boot & DMA protection blackarch-misc
cero v1.3.0.r19.gb73125b Scrape domain names from SSL certificates of arbitrary hosts. blackarch-scanner
certgraph 172.465bddc Crawl the graph of certificate Alternate Names. blackarch-recon
certipy 4.8.2.r0.g2780d53 Active Directory Certificate Services enumeration and abuse. blackarch-windows
certsync 0.1.4 Dump NTDS remotely without DRSUAPI: using golden certificate and UnPAC the hash. blackarch-exploitation
cewl 189.447ccc1 A custom word list generator. blackarch-automation
cflow 1.7 A C program flow analyzer. blackarch-code-audit
cfr 0.152 Another Java decompiler blackarch-decompiler
chainsaw v2.7.3.r6.g5d908fd A powerful ‘first-response’ capability to quickly identify threats within Windows event logs. blackarch-defensive
chameleon 27.a2f0cf1 A tool for evading Proxy categorisation. blackarch-networking
chameleonmini 613.ad0eece Official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. blackarch-social
changeme 266.89f59d4 A default credential scanner. blackarch-scanner
chankro 21.7b6e844 Tool that generates a PHP capable of run a custom binary (like a meterpreter) or a bash script (p.e. reverse shell) bypassing disable_functions & open_basedir). blackarch-webapp
chaos-client 283.17a19d7 Go client to communicate with Chaos dataset API. blackarch-recon
chaosmap 1.3 An information gathering tool and dns / whois / web server scanner blackarch-forensic
chaosreader 0.94 A freeware tool to trace tcp, udp etc. sessions and fetch application data from snoop or tcpdump logs. blackarch-networking
chapcrack 17.ae2827f A tool for parsing and decrypting MS-CHAPv2 network handshakes. blackarch-cracker
cheat-sh 6 The only cheat sheet you need. blackarch-automation
check-weak-dh-ssh 0.1 Debian OpenSSL weak client Diffie-Hellman Exchange checker. blackarch-scanner
checkiban 0.2 Checks the validity of an International Bank Account Number (IBAN). blackarch-misc
checkov 3.2.257.r0.g681707c13 Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages. blackarch-code-audit
checksec 2.7.1 Tool designed to test which standard Linux OS and PaX security features are being used blackarch-automation
chiasm-shell 33.e20ed9f Python-based interactive assembler/disassembler CLI, powered byKeystone/Capstone. blackarch-disassembler
chipsec 2206.28d9c90b Platform Security Assessment Framework. blackarch-hardware
chiron 48.524abe1 An all-in-one IPv6 Penetration Testing Framework. blackarch-scanner
chisel 239.ab8f06a A fast TCP tunnel over HTTP. blackarch-tunnel
chkrootkit 0.58b Checks for rootkits on a system. blackarch-defensive
chntpw 140201 Offline NT Password Editor - reset passwords in a Windows NT SAM user database file blackarch-forensic
chopshop 444.8bdd393 Protocol Analysis/Decoder Framework. blackarch-networking
choronzon 4.d702c31 An evolutionary knowledge-based fuzzer. blackarch-fuzzer
chownat 0.08b Allows two peers behind two separate NATs with no port forwarding and no DMZ setup on their routers to directly communicate with each other blackarch-tunnel
chrome-decode 0.1 Chrome web browser decoder tool that demonstrates recovering passwords. blackarch-windows
chromefreak 24.12745b1 A Cross-Platform Forensic Framework for Google Chrome blackarch-forensic
chromensics 1.0 A Google chrome forensics tool. blackarch-windows
chw00t 39.1fd1016 Unices chroot breaking tool. blackarch-exploitation
cidr2range 1.0 Script for listing the IP addresses contained in a CIDR netblock. blackarch-networking
cintruder 14.f8a3f12 An automatic pentesting tool to bypass captchas. blackarch-cracker
cipherscan 421.5866911 A very simple way to find out which SSL ciphersuites are supported by a target. blackarch-scanner
ciphertest 22.e33eb4a A better SSL cipher checker using gnutls. blackarch-crypto
ciphr 127.5da7137 A CLI tool for encoding, decoding, encryption, decryption, and hashing streams of data. blackarch-crypto
cirt-fuzzer 1.0 A simple TCP/UDP protocol fuzzer. blackarch-fuzzer
cisco-auditing-tool 1 Perl script which scans cisco routers for common vulnerabilities. Checks for default passwords, easily guessable community names, and the IOS history bug. Includes support for plugins and scanning multiple hosts. blackarch-cracker
cisco-global-exploiter 1.3 A perl script that targets multiple vulnerabilities in the Cisco Internetwork Operating System (IOS) and Catalyst products. blackarch-exploitation
cisco-ocs 0.2 Cisco Router Default Password Scanner. blackarch-cracker
cisco-router-config 1.1 Tools to copy and merge Cisco Routers Configuration. blackarch-misc
cisco-scanner 0.2 Multithreaded Cisco HTTP vulnerability scanner. Tested on Linux, OpenBSD and Solaris. blackarch-cracker
cisco-snmp-enumeration 10.ad06f57 Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking. blackarch-automation
cisco-snmp-slap 5.daf0589 IP address spoofing tool in order to bypass an ACL protecting an SNMP service on Cisco IOS devices. blackarch-spoof
cisco-torch 0.4b Cisco Torch mass scanning, fingerprinting, and exploitation tool. blackarch-exploitation
cisco5crack 2.c4b228c Crypt and decrypt the cisco enable 5 passwords. blackarch-cracker
cisco7crack 2.f1c21dd Crypt and decrypt the cisco enable 7 passwords. blackarch-cracker
ciscos 1.3 Scans class A, B, and C networks for cisco routers which have telnet open and have not changed the default password from cisco. blackarch-scanner
citadel 95.3b1adbc A library of OSINT tools. blackarch-recon
cjexploiter 6.72b08d8 Drag and Drop ClickJacking exploit development assistance tool. blackarch-webapp
clair 1985.94113d95 Vulnerability Static Analysis for Containers. blackarch-scanner
clairvoyance 2.5.2 Obtain GraphQL API Schema even if the introspection is not enabled. blackarch-webapp
clamscanlogparser 1 This is a utility to parse a Clam Anti Virus log file, in order to sort them into a malware archive for easier maintanence of your malware collection. blackarch-malware
clash 1.18.0 A rule based proxy in Go blackarch-tunnel
climber 30.5530a78 Check UNIX/Linux systems for privilege escalation. blackarch-scanner
cloakify 117.f45c3b3 Data Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Evade AV Detection. blackarch-misc
cloud-buster 194.b55e4a1 A tool that checks Cloudflare enabled sites for origin IP leaks. blackarch-recon
cloudfail 79.7982c7d Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network. blackarch-recon
cloudflare-enum 10.412387f Cloudflare DNS Enumeration Tool for Pentesters. blackarch-scanner
cloudget 64.cba10b1 Python script to bypass cloudflare from command line. Built upon cfscrape module. blackarch-webapp
cloudlist 701.058f1e1 A tool for listing Assets from multiple Cloud Providers. blackarch-recon
cloudmare 108.9c5a39f A simple tool to find origin servers of websites protected by CloudFlare with a misconfiguration DNS. blackarch-recon
cloudsploit 6524.90cff06ef AWS security scanning checks. blackarch-scanner
cloudunflare 14.b91a8a7 Reconnaissance Real IP address for Cloudflare Bypass. blackarch-recon
clusterd 143.d190b2c Automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. blackarch-automation
cminer 25.d766f7e A tool for enumerating the code caves in PE files. blackarch-binary
cmospwd 5.1 Decrypts password stored in CMOS used to access BIOS setup. blackarch-cracker
cms-explorer 15.23b58cd Designed to reveal the specific modules, plugins, components and themes that various cms driven websites are running. blackarch-fingerprint
cms-few 0.1 Joomla, Mambo, PHP-Nuke, and XOOPS CMS SQL injection vulnerability scanning tool written in Python. blackarch-webapp
cmseek 382.20f9780 CMS (Content Management Systems) Detection and Exploitation suite. blackarch-webapp
cmsfuzz 5.6be5a98 Fuzzer for wordpress, cold fusion, drupal, joomla, and phpnuke. blackarch-webapp
cmsmap 8.59dd0e2 A python open source Content Management System scanner that automates the process of detecting security flaws of the most popular CMSs. blackarch-scanner
cmsscan 43.f060b4b CMS scanner to identify and find vulnerabilities for Wordpress, Drupal, Joomla, vBulletin. blackarch-webapp
cmsscanner 0.13.8.63.g864c47f CMS Scanner Framework. blackarch-webapp
cnamulator 5.4667c68 A phone CNAM lookup utility using the OpenCNAM API. blackarch-mobile
cntlm 4.b35d55c An NTLM, NTLM2SR, and NTLMv2 authenticating HTTP proxy. blackarch-proxy
codeql 2.8.1 The CLI tool for GitHub CodeQL blackarch-automation
codetective 45.52b91f1 A tool to determine the crypto/encoding algorithm used according to traces of its representation. blackarch-crypto
coercer 2.4.3 Coerce a Windows server to authenticate on an arbitrary machine through 15 methods. blackarch-exploitation
comission 203.67b890e WhiteBox CMS analysis. blackarch-webapp
commentor 20.4582674 Extract all comments from the specified URL resource. blackarch-webapp
commix 2179.a319b99b Automated All-in-One OS Command Injection and Exploitation Tool. blackarch-webapp
commonspeak 36.f0aad23 Leverages publicly available datasets from Google BigQuery to generate wordlists. blackarch-automation
complemento 0.7.6 A collection of tools for pentester: LetDown is a powerful tcp flooder ReverseRaider is a domain scanner that use wordlist scanning or reverse resolution scanning Httsquash is an http server scanner, banner grabber and data retriever blackarch-fingerprint
compp 1.0.5 Company Passwords Profiler helps making a bruteforce wordlist for a targeted company. blackarch-cracker
configpush 0.8.5 This is a tool to span /8-sized networks quickly sending snmpset requests with default or otherwise specified community string to Cisco devices. blackarch-scanner
conpass 0.1.1 Password spraying in AD environment avoing account locking. blackarch-windows
conpot 0.6.0 ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. blackarch-honeypot
conscan 1.2 A blackbox vulnerability scanner for the Concre5 CMS. blackarch-fuzzer
cook v2.2.1.r13.gbabf5ba Easily create word's permutation and combination to generate complex wordlists and passwords. blackarch-automation
cookie-cadger 1.08 An auditing tool for Wi-Fi or wired Ethernet connections. blackarch-fuzzer
corkscrew 2.0 A tool for tunneling SSH through HTTP proxies blackarch-tunnel
corscanner 99.593043f Fast CORS misconfiguration vulnerabilities scanner. blackarch-webapp
corstest 10.beffd0b A simple CORS misconfigurations checker. blackarch-scanner
corsy 69.2985ae2 CORS Misconfiguration Scanner. blackarch-webapp
cottontail 93.b7f5222 Capture all RabbitMQ messages being sent through a broker. blackarch-sniffer
cowpatty 4.8 Wireless WPA/WPA2 PSK handshake cracking utility blackarch-wireless
cpfinder 0.1 Simple script that looks for administrative web interfaces. blackarch-scanner
cpp2il 2022.0.7.r17.g20ccab2 A tool to reverse unity's IL2PP toolchain blackarch-binary
cppcheck 2.15.0 A tool for static C/C++ code analysis blackarch-code-audit
cpptest 2.0.0 A portable and powerful, yet simple, unit testing framework for handling automated tests in C++. blackarch-code-audit
cr3dov3r 46.99a1660 Search for public leaks for email addresses + check creds against 16 websites. blackarch-recon
crabstick 47.bb7827f Automatic remote/local file inclusion vulnerability analysis and exploit tool. blackarch-webapp
cracken v1.0.1.r0.g7a325ff A ast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust. blackarch-misc
crackhor 2.ae7d83f A Password cracking utility. blackarch-cracker
crackle 111.d83b4b6 Crack and decrypt BLE encryption. blackarch-cracker
crackmapexec v6.0.1.r198.gda472cb A swiss army knife for pentesting Windows/Active Directory environments. blackarch-scanner
crackmapexec-pingcastle 9.16340d2 NetExec & CrackMapExec module that execute PingCastle on a remote machine. blackarch-windows
crackpkcs12 0.2.10.11.c7dedb1 A multithreaded program to crack PKCS#12 files (p12 and pfx extensions). blackarch-cracker
crackq 48.89b7318 Hashcrack.org GPU-accelerated password cracker. blackarch-cracker
crackql 1.0.r53.gac26a44 GraphQL password brute-force and fuzzing utility blackarch-webapp
crackserver 33.e5763ab An XMLRPC server for password cracking. blackarch-cracker
crawlic 51.739fe2b Web recon tool (find temporary files, parse robots.txt, search folders, google dorks and search domains hosted on same server). blackarch-webapp
creak 41.a6c011f Poison, reset, spoof, redirect MITM script. blackarch-networking
create_ap 265.462c09f A shell script to create a NATed/Bridged Software Access Point. blackarch-wireless
creddump 3.ed95e1a A python tool to extract various credentials and secrets from Windows registry hives. blackarch-cracker
credmap 116.d862247 The Credential mapper - Tool that was created to bring awareness to the dangers of credential reuse. blackarch-misc
credmaster 205.b3c2a5b Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling. blackarch-cracker
creds 17.1ec8297 Harvest FTP/POP/IMAP/HTTP/IRC credentials along with interesting data from each of the protocols. blackarch-sniffer
credsniper 21.f52461b Phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens. blackarch-social
creepy 137.9f60449 A geolocation information gatherer. Offers geolocation information gathering through social networking platforms. blackarch-scanner
cribdrag 5.2d27dbf An interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys. blackarch-crypto
crlf-injector 9.bd6db06 A python script for testing CRLF injecting issues. blackarch-fuzzer
crlfuzz 62.7a442bb A fast tool to scan CRLF vulnerability written in Go. blackarch-webapp
crosslinked 47.9c0069d LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. blackarch-social
crosstool-ng 1.26.0 A versatile (cross-)toolchain generator blackarch-misc
crowbar 111.4b563dc A brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools. blackarch-cracker
crozono 5.6a51669 A modular framework designed to automate the penetration testing of wireless networks from drones and such unconventional devices. blackarch-drone
crunch 3.6 A wordlist generator for all combinations/permutations of a given character set. blackarch-automation
crypthook 18.690dcae TCP/UDP symmetric encryption tunnel wrapper. blackarch-crypto
cryptohazemultiforcer 1.31a High performance multihash brute forcer with CUDA support. blackarch-cracker
cryptonark 0.5.7 SSL security checker. blackarch-crypto
csrftester 1.0 The OWASP CSRFTester Project attempts to give developers the ability to test their applications for CSRF flaws. blackarch-webapp
ct-exposer 24.71252ac An OSINT tool that discovers sub-domains by searching Certificate Transparency logs. blackarch-scanner
ctf-party v3.0.0.r39.gb0c58df A CLI tool & library to enhance and speed up script/exploit writing for CTF players. blackarch-misc
ctunnel 0.7 Tunnel and/or proxy TCP or UDP connections via a cryptographic tunnel. blackarch-tunnel
ctypes-sh 158.b79e401 Allows you to call routines in shared libraries from within bash. blackarch-reversing
cubicsdr 0.2.7 Cross-Platform Software-Defined Radio Application. blackarch-radio
cuckoo 2.0.7 Automated malware analysis system. blackarch-malware
cudahashcat 2.01 Worlds fastest WPA cracker with dictionary mutation engine. blackarch-cracker
cupp 77.56547fd Common User Password Profiler blackarch-cracker
cutycapt 10 A Qt and WebKit based command-line utility that captures WebKit's rendering of a web page. blackarch-recon
cve-api 170.8e9c247 Unofficial api for cve.mitre.org. blackarch-misc
cve-search v5.1.0.r4.g471ccfb A tool to perform local searches for known vulnerabilities. blackarch-exploitation
cvechecker 4.0 The goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database. blackarch-scanner
cvemap v0.0.7.r131.ga45c9a7 CLI tool designed to provide a structured and easily navigable interface to various vulnerability databases. blackarch-exploitation
cybercrowl 111.f7cac52 A Python Web path scanner tool. blackarch-webapp
cyberscan 75.ca85794 A Network Pentesting Tool blackarch-networking
cymothoa 1 A stealth backdooring tool, that inject backdoor's shellcode into an existing process. blackarch-backdoor
d-tect 13.9555c25 Pentesting the Modern Web. blackarch-scanner
dagon 244.f065d7b Advanced Hash Manipulation. blackarch-crypto
dalfox 1464.f3262c7 Parameter Analysis and XSS Scanning tool. blackarch-webapp
damm 32.60e7ec7 Differential Analysis of Malware in Memory. blackarch-malware
daredevil 42.81cb57f A tool to perform (higher-order) correlation power analysis attacks (CPA). blackarch-crypto
dark-dork-searcher 1.0 Dark-Dork Searcher. blackarch-windows
darkarmour 4.f10228a Store and execute an encrypted windows binary from inside memory, without a single bit touching disk. blackarch-windows
darkbing 0.1 A tool written in python that leverages bing for mining data on systems that may be susceptible to SQL injection. blackarch-scanner
darkd0rk3r 1.0 Python script that performs dork searching and searches for local file inclusion and SQL injection errors. blackarch-exploitation
darkdump 54.b71776b Search The Deep Web Straight From Your Terminal. blackarch-webapp
darkjumper 5.8 This tool will try to find every website that host at the same server at your target. blackarch-webapp
darkmysqli 1.6 Multi-Purpose MySQL Injection Tool blackarch-exploitation
darkscrape 68.2ca0e37 OSINT Tool For Scraping Dark Websites. blackarch-webapp
darkspiritz 6.4d23e94 A penetration testing framework for Linux, MacOS, and Windows systems. blackarch-exploitation
darkstat 3.0.721 Network statistics gatherer (packet sniffer) blackarch-sniffer
datajackproxy 42.f75f3a3 A proxy which allows you to intercept TLS traffic in native x86 applications across platform. blackarch-proxy
datasploit 367.a270d50 Performs automated OSINT and more. blackarch-recon
davoset 1.3.7 A tool for using Abuse of Functionality and XML External Entities vulnerabilities on some websites to attack other websites. blackarch-dos
davscan 30.701f967 Fingerprints servers, finds exploits, scans WebDAV. blackarch-webapp
davtest 3.a282c58 Tests WebDAV enabled servers by uploading test executable files, and then (optionally) uploading files which allow for command execution or other actions directly on the target. blackarch-scanner
dawnscanner v2.2.0.r15.g0d647fc A static analysis security scanner for ruby written web applications. blackarch-webapp
dbd 61.8cf5350 A Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. blackarch-misc
dbpwaudit 0.8 A Java tool that allows you to perform online audits of password quality for several database engines. blackarch-cracker
dbusmap 16.6bb2831 Simple utility for enumerating D-Bus endpoints, an nmap for D-Bus. blackarch-scanner
dc3dd 7.2.646 A patched version of dd that includes a number of features useful for computer forensics. blackarch-forensic
dcdetector 0.0.1.r52.g2e69244 Spot all domain controllers in a Microsoft Active Directory environment. Find computer name, FQDN, and IP address(es) of all DCs. blackarch-networking
dcfldd 1.7.1 DCFL (DoD Computer Forensics Lab) dd replacement with hashing. blackarch-forensic
dcrawl 7.3273c35 Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. blackarch-scanner
ddosify v1.7.2.r2.g1639885 High-performance load testing tool, written in Golang. blackarch-dos
ddrescue 1.28 GNU data recovery tool blackarch-forensic
de4dot 3.1.41592 .NET deobfuscator and unpacker. blackarch-windows
deathstar 60.d7bcbfd Automate getting Domain Admin using Empire. blackarch-automation
debinject 43.d884309 Inject malicious code into *.debs. blackarch-backdoor
deblaze 1.0608dc3 Performs method enumeration and interrogation against flash remoting end points. blackarch-scanner
decodify 50.76a0801 Tool that can detect and decode encoded strings, recursively. blackarch-crypto
deen 601.fd9aebe Generic data encoding/decoding application built with PyQt5. blackarch-crypto
deepce 119.c1bb2ca Docker Enumeration, Escalation of Privileges and Container Escapes. blackarch-exploitation
delldrac 0.1a DellDRAC and Dell Chassis Discovery and Brute Forcer. blackarch-scanner
delorean 16.0291151 NTP Main-in-the-Middle tool. blackarch-exploitation
demiguise 11.58d5681 HTA encryption tool for RedTeams. blackarch-crypto
densityscout 45 Calculates density for files of any file-system-path to finally output an accordingly descending ordered list. blackarch-misc
depant 0.3a Check network for services with default passwords. blackarch-cracker
depdep 2.0 A merciless sentinel which will seek sensitive files containing critical info leaking through your network. blackarch-networking
dependency-check 10.0.2 A tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. blackarch-code-audit
depix 38.f7d1850 A tool for recovering passwords from pixelized screenshots. blackarch-misc
der-ascii 93.de4197e A reversible DER and BER pretty-printer. blackarch-misc
det 31.417cbce (extensible) Data Exfiltration Toolkit. blackarch-networking
detect-it-easy 3.09 A program for determining types of files. blackarch-binary
detect-secrets v1.5.0.r30.g6cdb79b An enterprise friendly way of detecting and preventing secrets in code. blackarch-code-audit
detect-sniffer 159.a359262 Tool that detects sniffers in the network. blackarch-defensive
detectem 276.bc5f073 Detect software and its version on websites. blackarch-fingerprint
devaudit 803.ca0a68e An open-source, cross-platform, multi-purpose security auditing tool targeted at developers and teams. blackarch-code-audit
device-pharmer 40.b06a460 Opens 1K+ IPs or Shodan search results and attempts to login. blackarch-cracker
dex2jar 2.1 A tool for converting Android's .dex format to Java's .class format blackarch-hardware
dexpatcher 1.7.0 Modify Android DEX/APK files at source-level using Java. blackarch-mobile
dff-scanner 1.1 Tool for finding path of predictable resource locations. blackarch-webapp
dfir-ntfs 1.1.18 An NTFS parser for digital forensics & incident response. blackarch-forensic
dftimewolf 725.5637f40e Framework for orchestrating forensic collection, processing and data export. blackarch-forensic
dga-detection 78.0a3186e DGA Domain Detection using Bigram Frequency Analysis. blackarch-recon
dharma 98.6b1e511 Generation-based, context-free grammar fuzzer. blackarch-fuzzer
dhcdrop 0.5 Remove illegal dhcp servers with IP-pool underflow. blackarch-misc
dhcpf 3.a770b20 Passive DHCP fingerprinting implementation. blackarch-fingerprint
dhcpig 110.f037788 Enhanced DHCPv4 and DHCPv6 exhaustion and fuzzing script written in python using scapy network library. blackarch-scanner
dhcpoptinj 123.58a12c6 DHCP option injector. blackarch-networking
didier-stevens-suite 399.0d1d4cb Didier Stevens Suite.
dinouml 0.9.5 A network simulation tool, based on UML (User Mode Linux) that can simulate big Linux networks on a single PC blackarch-networking
dirb 2.22 A web content scanner, brute forceing for hidden files. blackarch-scanner
dirble 1.4.2 Fast directory scanning and scraping tool. blackarch-webapp
dirbuster 1.0_RC1 An application designed to brute force directories and files names on web/application servers blackarch-scanner
dirbuster-ng 9.0c34920 C CLI implementation of the Java dirbuster tool. blackarch-webapp
directorytraversalscan 1.0.1.0 Detect directory traversal vulnerabilities in HTTP servers and web applications. blackarch-windows
dirhunt 329.a5ea20d Find web directories without bruteforce. blackarch-webapp
dirscanner 0.1 This is a python script that scans webservers looking for administrative directories, php shells, and more. blackarch-scanner
dirscraper 16.e752450 OSINT Scanning tool which discovers and maps directories found in javascript files hosted on a website. blackarch-webapp
dirsearch 2393.31ed8f8 HTTP(S) directory/file brute forcer. blackarch-webapp
dirstalk 1.3.3 Modern alternative to dirbuster/dirb. blackarch-scanner
disitool 0.4 Tool to work with Windows executables digital signatures. blackarch-forensic
dislocker 580.3e7aea1 Read BitLocker encrypted volumes under Linux. blackarch-crypto
dissector 1 This code dissects the internal data structures in ELF files. It supports x86 and x86_64 archs and runs under Linux. blackarch-binary
distorm 3.5.2.b Powerful disassembler library for x86/AMD64 blackarch-disassembler
dive 0.12.0 A tool for exploring layers in a docker image blackarch-scanner
dizzy 2.0 A Python based fuzzing framework with many features. blackarch-fuzzer
dkmc 56.3c238f0 Dont kill my cat - Malicious payload evasion tool. blackarch-exploitation
dmde 3.8.0.790 Disk Editor and Data Recovery Software. blackarch-forensic
dmg2img 1.6.7 A CLI tool to uncompress Apple's compressed DMG files to the HFS+ IMG format. blackarch-forensic
dmitry 1.3a Deepmagic Information Gathering Tool. blackarch-scanner
dnmap 0.6 The distributed nmap framework. blackarch-scanner
dns-parallel-prober 68.422db61 PoC for an adaptive parallelised DNS prober. blackarch-recon
dns-reverse-proxy 39.bd33162 A reverse DNS proxy written in Go. blackarch-proxy
dns-spoof 13.81ba29f Yet another DNS spoof utility. blackarch-spoof
dns2geoip 0.1 A simple python script that brute forces DNS and subsequently geolocates the found subdomains. blackarch-scanner
dns2tcp 0.5.2 A tool for relaying TCP connections over DNS. blackarch-tunnel
dnsa 0.6 A dns security swiss army knife. blackarch-scanner
dnsbf 0.3 Search for available domain names in an IP range. blackarch-scanner
dnsbrute 2.b1dc84a Multi-theaded DNS bruteforcing, average speed 80 lookups/second with 40 threads. blackarch-recon
dnscan 208.2e23323 A python wordlist-based DNS subdomain scanner. blackarch-scanner
dnschef 17.a395411 A highly configurable DNS proxy for pentesters. blackarch-proxy
dnscobra 1.0 DNS subdomain bruteforcing tool with Tor support through torsocks. blackarch-recon
dnsdiag 325.4c7384c DNS Diagnostics and Performance Measurement Tools. blackarch-networking
dnsdrdos 0.1 Proof of concept code for distributed DNS reflection DoS. blackarch-dos
dnsenum 1.2.4.2 Script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results. blackarch-recon
dnsfilexfer 24.126edcd File transfer via DNS. blackarch-networking
dnsgoblin 0.1 Nasty creature constantly searching for DNS servers. It uses standard dns querys and waits for the replies. blackarch-scanner
dnsgrep 14.3f4fa7c A utility for quickly searching presorted DNS names. blackarch-recon
dnsmap 0.30 Passive DNS network mapper blackarch-fingerprint
dnsobserver 5.f331482 A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. blackarch-networking
dnspredict 0.0.2 DNS prediction. blackarch-scanner
dnsprobe 56.7120008 Allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. blackarch-recon
dnspy 6.1.8 .NET debugger and assembly editor. blackarch-windows
dnsrecon 1.2.0 Python script for enumeration of hosts, subdomains and emails from a given domain using google. blackarch-recon
dnssearch 20.e4ea439 A subdomain enumeration tool. blackarch-recon
dnsspider 1.4 A fast multithreaded bruteforcer of subdomains that leverages a wordlist and/or character permutation. blackarch-recon
dnsteal 28.1b09d21 DNS Exfiltration tool for stealthily sending files over DNS requests.. blackarch-networking
dnstracer 1.10 Determines where a given DNS server gets its information from, and follows the chain of DNS servers blackarch-recon
dnstwist 638.b497e05 Domain name permutation engine for detecting typo squatting, phishing and corporate espionage. blackarch-scanner
dnsvalidator 82.146c9b0 Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses. blackarch-networking
dnswalk 2.0.2 A DNS debugger and zone-transfer utility. blackarch-recon
dnsx 983.c790eba Fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers. blackarch-recon
docem 21.59db436 Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids). blackarch-webapp
dockerscan 59.590a844 Docker security analysis & hacking tools. blackarch-scanner
domain-analyzer 0.8.1 Finds all the security information for a given domain name. blackarch-recon
domain-stats 169.759c52c A web API to deliver domain information from whois and alexa. blackarch-recon
domained 80.d9d079c Multi Tool Subdomain Enumeration. blackarch-recon
domainhunter 51.38cb7ef Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names. blackarch-recon
domato 127.053714b DOM fuzzer. blackarch-fuzzer
domi-owned 41.583d0a5 A tool used for compromising IBM/Lotus Domino servers. blackarch-webapp
domlink 37.1cabd5d A tool to link a domain with registered organisation names and emails, to other domains. blackarch-misc
donpapi V1.2.0.r10.g51767fc Dumping revelant information on compromised targets without AV detection with DPAPI. blackarch-windows
dontgo403 1.0.1.r11.ga47e83b Tool to bypass 40X response codes.. blackarch-webapp
donut 501.61af8cc Generates x86, x64 or AMD64+x86 P.I. shellcode loading .NET Assemblies from memory. blackarch-backdoor
doona 145.7a4796c A fork of the Bruteforce Exploit Detector Tool (BED). blackarch-fuzzer
doork 6.90c7260 Passive Vulnerability Auditor. blackarch-webapp
doozer 9.5cfc8f8 A Password cracking utility. blackarch-cracker
dorkbot 212.c91c4b9 Command-line tool to scan Google search results for vulnerabilities. blackarch-scanner
dorkme 57.0a7017a Tool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities. blackarch-scanner
dorknet 58.419d6a2 Selenium powered Python script to automate searching for vulnerable web apps. blackarch-webapp
dorkscout 1.0.r13.gdd87daf Golang tool to automate google dork scan against the entire internet or specific targets. blackarch-automation
dotdotpwn 3.0.2 The Transversal Directory Fuzzer. blackarch-exploitation
dotpeek 2021.3.3 Free .NET Decompiler and Assembly Browser. blackarch-windows
dpeparser beta002 Default password enumeration project blackarch-cracker
dpscan 0.1 Drupal Vulnerability Scanner. blackarch-scanner
dr-checker 140.ea63c0f A Soundy Vulnerability Detection Tool for Linux Kernel Drivers. blackarch-exploitation
dr0p1t-framework 44.db9bc2d A framework that creates a dropper that bypass most AVs, some sandboxes and have some tricks. blackarch-backdoor
dracnmap 69.09d3945 Tool to exploit the network and gathering information with nmap help. blackarch-automation
dradis-ce 5575.ed72071c An open source framework to enable effective information sharing. blackarch-recon
dragon-backdoor 7.c7416b7 A sniffing, non binding, reverse down/exec, portknocking service Based on cd00r.c. blackarch-backdoor
driftnet v1.3.0.r13.ge492335 Listens to network traffic and picks out images from TCP streams it observes. blackarch-scanner
drinkme 19.acf1a14 A shellcode testing harness. blackarch-exploitation
dripcap 0.6.15 Caffeinated Packet Analyzer. blackarch-networking
dripper v1.r1.gc9bb0c9 A fast, asynchronous DNS scanner; it can be used for enumerating subdomains and enumerating boxes via reverse DNS. blackarch-scanner
droopescan 1.45.1 A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe. blackarch-webapp
drozer 2.4.4 A security testing framework for Android - Precompiled binary from official repository. blackarch-mobile
drupal-module-enum 11.525543c Enumerate on drupal modules. blackarch-webapp
drupalscan 0.5.2 Simple non-intrusive Drupal scanner. blackarch-webapp
drupwn 59.8186732 Drupal enumeration & exploitation tool. blackarch-webapp
dscanner 0.15.2 Swiss-army knife for D source code blackarch-code-audit
dsd 91.7ee04e5 Digital Speech Decoder blackarch-misc
dsfs 36.8e9f8e9 A fully functional File inclusion vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code. blackarch-webapp
dshell 142.695c891 A network forensic analysis framework. blackarch-forensic
dsjs 32.26287d0 A fully functional JavaScript library vulnerability scanner written in under 100 lines of code. blackarch-webapp
dsniff 2.4b1 Collection of tools for network auditing and penetration testing blackarch-sniffer
dsss 123.84ddd33 A fully functional SQL injection vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code. blackarch-webapp
dsstore-crawler 7.efa51f5 A parser + crawler for .DS_Store files exposed publically. blackarch-webapp
dsxs 130.3e628b6 A fully functional Cross-site scripting vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code. blackarch-webapp
dtp-spoof 5.3ae05fc Python script/security tool to test Dynamic Trunking Protocol configuration on a switch. blackarch-networking
dublin-traceroute 344.f9b1853 NAT-aware multipath tracerouting tool. blackarch-networking
ducktoolkit 37.42da733 Encoding Tools for Rubber Ducky. blackarch-exploitation
dumb0 19.1493e74 A simple tool to dump users in popular forums and CMS. blackarch-automation
dump1090 386.bff92c4 A simple Mode S decoder for RTLSDR devices. blackarch-networking
dumpacl 0.1 Dumps NTs ACLs and audit settings. blackarch-windows
dumpsmbshare 21.9fd4d5b A script to dump files and folders remotely from a Windows SMB share. blackarch-misc
dumpusers 1.0 Dumps account names and information even though RestrictAnonymous has been set to 1. blackarch-windows
dumpzilla 03152013 A forensic tool for firefox. blackarch-forensic
duplicut 2.2 Remove duplicates from massive wordlist, without sorting it (for dictionnary-based password cracking). blackarch-misc
dutas 10.37fa3ab Analysis PE file or Shellcode. blackarch-binary
dvcs-ripper 54.2c1bbc6 Rip web accessible (distributed) version control systems: SVN/GIT/BZR/CVS/HG. blackarch-scanner
dwarf 1084.fd859ae Full featured multi arch/os debugger built on top of PyQt5 and frida. blackarch-binary
dynamorio 9.0.19046 A dynamic binary instrumentation framework. blackarch-binary
eapeak 130.9550d1c Analysis Suite For EAP Enabled Wireless Networks. blackarch-wireless
eaphammer v1.14.1.r0.g91e8956 Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks. blackarch-wireless
eapmd5pass 3.3d5551f An implementation of an offline dictionary attack against the EAP-MD5 protocol. blackarch-cracker
easy-creds 45.bf9f00c A bash script that leverages ettercap and other tools to obtain credentials. blackarch-automation
easyda 7.0867f9b Easy Windows Domain Access Script. blackarch-automation
easyfuzzer 3.6 A flexible fuzzer, not only for web, has a CSV output for efficient output analysis (platform independent). blackarch-fuzzer
eazy 0.1 This is a small python tool that scans websites to look for PHP shells, backups, admin panels, and more. blackarch-scanner
ecfs 305.1758063 Extended core file snapshot format. blackarch-binary
edb 3255.64fca61f A cross platform AArch32/x86/x86 debugger. blackarch-debugger
eggshell 157.eaeeea7 iOS/macOS/Linux Remote Administration Tool. blackarch-backdoor
eigrp-tools 0.1 This is a custom EIGRP packet generator and sniffer developed to test the security and overall operation quality of this brilliant Cisco routing protocol. blackarch-sniffer
eindeutig 20050628_1 Examine the contents of Outlook Express DBX email repository files (forensic purposes) blackarch-forensic
electric-fence 2.2.5 A malloc(3) debugger that uses virtual memory hardware to detect illegal memory accesses. blackarch-debugger
elettra 1.0 Encryption utility by Julia Identity blackarch-misc
elettra-gui 1.0 Gui for the elettra crypto application. blackarch-misc
elevate 27.1272d51 Horizontal domain discovery tool you can use to discover other domains owned by a given company. blackarch-recon
elfkickers 3.2 Collection of ELF utilities (includes sstrip) blackarch-binary
elfparser 7.39d21ca Cross Platform ELF analysis. blackarch-binary
elfutils 0.191 Handle ELF object files and DWARF debugging information (utilities) blackarch-binary
elidecode 48.38fa5ba A tool to decode obfuscated shellcodes using the unicorn-engine for the emulation and the capstone-engine to print the asm code. blackarch-reversing
elite-proxy-finder 51.1ced3be Finds public elite anonymity proxies and concurrently tests them. blackarch-proxy
email2phonenumber 29.9df9dbe A OSINT tool to obtain a target's phone number just by having his email address. blackarch-social
emldump 0.0.11 Analyze MIME files. blackarch-forensic
emp3r0r v1.37.4.r1.g03e7788 Linux post-exploitation framework made by linux user. blackarch-automation
empire 3443.ee6526b1 A PowerShell and Python post-exploitation agent. blackarch-automation
enabler 1 Attempts to find the enable password on a cisco system via brute force. blackarch-cracker
encodeshellcode 0.1b This is an encoding tool for 32-bit x86 shellcode that assists a researcher when dealing with character filter or byte restrictions in a buffer overflow vulnerability or some kind of IDS/IPS/AV blocking your code. blackarch-exploitation
ent 1.0 Pseudorandom number sequence test. blackarch-misc
enteletaor 68.a975b5c Message Queue & Broker Injection tool that implements attacks to Redis, RabbitMQ and ZeroMQ. blackarch-exploitation
entropy 702.13aac50 A set of tools to exploit Netwave and GoAhead IP Webcams. blackarch-exploitation
enum-shares 7.97cba5a Tool that enumerates shared folders across the network and under a custom user account. blackarch-scanner
enum4linux 0.9.1 A tool for enumerating information from Windows and Samba systems. blackarch-recon
enum4linux-ng 422.70c6ea1 A next generation version of enum4linux. blackarch-recon
enumerate-iam 14.4529114 Enumerate the permissions associated with an AWS credential set. blackarch-recon
enumerid 36.d3e7265 Enumerate RIDs using pure Python. blackarch-recon
enumiax 1.0 An IAX enumerator. blackarch-scanner
enyelkm 1.2 Rootkit for Linux x86 kernels v2.6. blackarch-backdoor
eos 14.0127319 Enemies Of Symfony - Debug mode Symfony looter. blackarch-webapp
epicwebhoneypot 2.0a Tool which aims to lure attackers using various types of web vulnerability scanners by tricking them into believing that they have found a vulnerability on a host. blackarch-webapp
erase-registrations 1.0 An IAX flooder. blackarch-voip
eraser 6.2.0.2992 Windows tool which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. blackarch-windows
eresi 1291.4769c175 The ERESI Reverse Engineering Software Interface. blackarch-binary
erl-matter 53.ab793cd Tool to exploit epmd related services such as rabbitmq, ejabberd and couchdb by bruteforcing the cookie and gaining RCE afterwards. blackarch-exploitation
espionage 48.2d57edd A Network Packet and Traffic Interceptor For Linux. Sniff All Data Sent Through a Network. blackarch-sniffer
eternal-scanner 101.3979b0f An internet scanner for exploit CVE-0144 (Eternal Blue). blackarch-scanner
etherape 0.9.20 Graphical network monitor for various OSI layers and protocols blackarch-networking
etherchange 1.1 Can change the Ethernet address of the network adapters in Windows. blackarch-windows
etherflood 1.1 Floods a switched network with Ethernet frames with random hardware addresses. blackarch-windows
ettercap 0.8.3.1 Network sniffer/interceptor/logger for ethernet LANs - console blackarch-sniffer
evil-ssdp 96.0d41a11 Spoof SSDP replies to phish for NetNTLM challenge/response on a network. blackarch-spoof
evil-winrm v3.6.r0.g71ca144 The ultimate WinRM shell for hacking/pentesting. blackarch-exploitation
evilclippy 62.fa610c6 A cross-platform assistant for creating malicious MS Office documents. blackarch-exploitation
evilginx 3.3.0 Man-in-the-middle attack framework used for phishing login credentials blackarch-social
evilgrade 2.0.9 Modular framework that takes advantage of poor upgrade implementations by injecting fake updates. blackarch-misc
evilize 0.2 Tool to create MD5 colliding binaries. blackarch-cracker
evillimiter 36.46d2033 Tool that limits bandwidth of devices on the same network without access. blackarch-networking
evilmaid 1.01 TrueCrypt loader backdoor to sniff volume password blackarch-cracker
evilpdf 5.43696a8 Embedding executable files in PDF Documents. blackarch-backdoor
evine 42.46051de Interactive CLI Web Crawler. blackarch-webapp
evtkit 8.af06db3 Fix acquired .evt - Windows Event Log files (Forensics). blackarch-forensic
exabgp 5239.76050379 The BGP swiss army knife of networking. blackarch-networking
exe2hex 1.5.1.r6.ge563b35 Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell). blackarch-disassembler
exe2image 1.1 A simple utility to convert EXE files to JPEG images and vice versa. blackarch-backdoor
exescan 1.ad993e3 A tool to detect anomalies in PE (Portable Executable) files. blackarch-binary
exiflooter 39.0c9535f Find geolocation on all image urls and directories also integrates with OpenStreetMap. blackarch-forensic
exitmap 373.8155029 A fast and modular scanner for Tor exit relays. blackarch-recon
expimp-lookup 4.79a96c7 Looks for all export and import names that contain a specified string in all Portable Executable in a directory tree. blackarch-binary
exploit-db 1.6 The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software - A collection of hacks blackarch-exploitation
exploitdb 20240829 Offensive Security’s Exploit Database Archive blackarch-exploitation
exploitpack 139.e565c47 Exploit Pack - The next generation exploit framework. blackarch-exploitation
expose 1110.30264af A Dynamic Symbolic Execution (DSE) engine for JavaScript blackarch-binary
exrex 148.1c22c70 Irregular methods on regular expressions. blackarch-misc
extended-ssrf-search 28.680f815 Smart ssrf scanner using different methods like parameter brute forcing in post and get. blackarch-webapp
extracthosts 17.8fdff9e Extracts hosts (IP/Hostnames) from files. blackarch-misc
extractusnjrnl 7.362d4290 Tool to extract the $UsnJrnl from an NTFS volume. blackarch-forensic
eyeballer 143.5299227 Convolutional neural network for analyzing pentest screenshots. blackarch-misc
eyepwn 1.0 Exploit for Eye-Fi Helper directory traversal vulnerability blackarch-exploitation
eyewitness 1145.cb09a84 Designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. blackarch-webapp
f-scrack 19.9a00357 A single file bruteforcer supports multi-protocol. blackarch-cracker
facebash 17.95c3c25 Facebook Brute Forcer in shellscript using TOR. blackarch-social
facebookosint 21.656a04a OSINT tool to replace facebook graph search. blackarch-social
facebot 23.57f6025 A facebook profile and reconnaissance system. blackarch-recon
facebrok 33.0f6fe8d Social Engineering Tool Oriented to facebook. blackarch-social
facebrute 7.ece355b This script tries to guess passwords for a given facebook account using a list of passwords (dictionary). blackarch-cracker
factordb-pycli 1.3.0 CLI for factordb and Python API Client. blackarch-crypto
fakeap 0.3.2 Black Alchemy's Fake AP generates thousands of counterfeit 802.11b access points. Hide in plain sight amongst Fake AP's cacophony of beacon frames. blackarch-honeypot
fakedns 118.39609da A regular-expression based python MITM DNS server with correct DNS request passthrough and "Not Found" responses. blackarch-proxy
fakemail 1.0 Fake mail server that captures e-mails as files for acceptance testing. blackarch-misc
fakenet-ng 304.2e3e99e Next Generation Dynamic Network Analysis Tool. blackarch-malware
fakenetbios 7.b83701e A family of tools designed to simulate Windows hosts (NetBIOS) on a LAN. blackarch-spoof
fang 22.4f94552 A multi service threaded MD5 cracker. blackarch-cracker
faradaysec 12621.1cee4eb20 Collaborative Penetration Test and Vulnerability Management Platform. blackarch-scanner
fastnetmon v1.1.4.r62.g780aff3 High performance DoS/DDoS load analyzer built on top of multiple packet capture engines. blackarch-defensive
fav-up 54.089aa11 IP lookup by favicon using Shodan. blackarch-recon
favfreak 27.8acea5e Weaponizing favicon.ico for BugBounties , OSINT and what not. blackarch-recon
fbht 70.d75ae93 A Facebook Hacking Tool blackarch-webapp
fbi 28.0f94e99 An accurate facebook account information gathering. blackarch-social
fbid 16.1b35eb9 Show info about the author by facebook photo url. blackarch-recon
fcrackzip 1.0 Zip file password cracker blackarch-cracker
fdsploit 26.4522f53 A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. blackarch-webapp
featherduster 191.9229158 An automated, modular cryptanalysis tool. blackarch-crypto
fern-wifi-cracker 301.eff2eb7 WEP, WPA wifi cracker for wireless penetration testing. blackarch-wireless
fernflower 668.15c64a5 An analytical decompiler for Java. blackarch-decompiler
fernmelder 8.030212e Asynchronous mass DNS scanner. blackarch-scanner
feroxbuster v2.11.0.r1.g3b0e530 A fast, simple, recursive content discovery tool written in Rust. blackarch-webapp
ffm 129.6337eaf A hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. blackarch-exploitation
ffuf v2.1.0.r3.gde9ac86 Fast web fuzzer written in Go. blackarch-webapp
ffuf-scripts 1.2192bf7 Scripts and snippets for ffuf payloads. blackarch-misc
fgscanner 11.893372c An advanced, opensource URL scanner. blackarch-scanner
fhttp 1.3 This is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more. blackarch-webapp
fi6s 195.1380b86 IPv6 network scanner designed to be fast. blackarch-scanner
fierce 135.f32f639 A DNS reconnaissance tool for locating non-contiguous IP space. blackarch-recon
fiked 0.0.5 Fake IDE daemon blackarch-honeypot
filebuster 95.f2b04c7 An extremely fast and flexible web fuzzer. blackarch-webapp
filefuzz 1.0 A binary file fuzzer for Windows with several options. blackarch-windows
filegps 90.03cbc75 A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it. blackarch-webapp
fileintel 33.a0bff38 A modular Python application to pull intelligence about malicious files. blackarch-malware
filibuster 167.c54ac80 A Egress filter mapping application with additional functionality. blackarch-networking
fimap 1.00 A little tool for local and remote file inclusion auditing and exploitation blackarch-exploitation
finalrecon 189.08c781c OSINT Tool for All-In-One Web Reconnaissance. blackarch-recon
find-dns 0.1 A tool that scans networks looking for DNS servers. blackarch-scanner
find3 604.5964026 High-precision indoor positioning framework. blackarch-misc
findmyhash 1.1.2 Crack different types of hashes using free online services. blackarch-crypto
findmyiphone 19.aef3ac8 Locates all devices associated with an iCloud account blackarch-mobile
findomain 9.0.4 The fastest and cross-platform subdomain enumerator, do not waste your time blackarch-recon
findsploit 87.3e61d8d Find exploits in local and online databases instantly. blackarch-automation
fingerprinter 480.105ab04 CMS/LMS/Library etc Versions Fingerprinter. blackarch-webapp
firecat 6.b5205c8 A penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network. blackarch-networking
firefox-decrypt 1.1.1.r3.g2a163fa Extract passwords from Mozilla Firefox, Waterfox, Thunderbird, SeaMonkey profiles. blackarch-forensic
firefox-security-toolkit 16.31dacf0 A tool that transforms Firefox browsers into a penetration testing suite. blackarch-misc
firewalk 5.0 An active reconnaissance network security tool. blackarch-fuzzer
firmwalker 101.23ff299 Script for searching the extracted firmware file system for goodies. blackarch-firmware
firmware-mod-kit 149.8403a17 Modify firmware images without recompiling. blackarch-firmware
firstexecution 6.a275793 A Collection of different ways to execute code outside of the expected entry points. blackarch-exploitation
firstorder 8.107eb6a A traffic analyzer to evade Empire communication from Anomaly-Based IDS. blackarch-sniffer
fl0p 0.1 A passive L7 flow fingerprinter that examines TCP/UDP/ICMP packet sequences, can peek into cryptographic tunnels, can tell human beings and robots apart, and performs a couple of other infosec-related tricks. blackarch-fingerprint
flare 0.6 Flare processes an SWF and extracts all scripts from it. blackarch-misc
flare-floss v3.1.1.r10.g986fa2c Obfuscated String Solver - Automatically extract obfuscated strings from malware. blackarch-malware
flashlight 109.90d1dc5 Automated Information Gathering Tool for Penetration Testers. blackarch-recon
flashscanner 11.6815b02 Flash XSS Scanner. blackarch-scanner
flashsploit 23.c465a6d Exploitation Framework for ATtiny85 Based HID Attacks. blackarch-exploitation
flask-session-cookie-manager2 v1.2.1.1.r12.ga2b1b57 Decode and encode Flask session cookie. blackarch-webapp
flask-session-cookie-manager3 v1.2.1.1.r12.ga2b1b57 Decode and encode Flask session cookie. blackarch-webapp
flask-unsign 1.2.0 Decode, encode and brute-force Flask session cookie. blackarch-webapp
flasm 1.62 Disassembler tool for SWF bytecode blackarch-reversing
flawfinder 2.0.19 Searches through source code for potential security flaws blackarch-code-audit
flowinspect 97.34759ed A network traffic inspection tool. blackarch-networking
flunym0us 2.0 A Vulnerability Scanner for Wordpress and Moodle. blackarch-scanner
fluxion 1571.4f461a4 A security auditing and social-engineering research tool. blackarch-social
flyr 76.4926ecc Block-based software vulnerability fuzzing framework. blackarch-fuzzer
fockcache 10.3e7efa9 Tool to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. blackarch-webapp
forager 115.7439b0a Multithreaded threat Intelligence gathering utilizing. blackarch-recon
foremost 1.5.7 A console program to recover files based on their headers, footers, and internal data structures blackarch-forensic
foresight 57.6f48984 A tool for predicting the output of random number generators. blackarch-crypto
forkingportscanner 1 Simple and fast forking port scanner written in perl. Can only scan on host at a time, the forking is done on the specified port range. Or on the default range of 1. Has the ability to scan UDP or TCP, defaults to tcp. blackarch-scanner
formatstringexploiter 107.2810293 Helper script for working with format string bugs. blackarch-exploitation
fortiscan 0.7.r7.gd54faa0 A high performance FortiGate SSL-VPN vulnerability scanning and exploitation tool. blackarch-scanner
fpdns 109.655bfa7 Program that remotely determines DNS server versions. blackarch-fingerprint
fping 5.2 Utility to ping multiple hosts at once blackarch-networking
fport 2.0 Identify unknown open ports and their associated applications. blackarch-windows
fprotlogparser 1 This is a utility to parse a F-Prot Anti Virus log file, in order to sort them into a malware archive for easier maintanence of your collection. blackarch-malware
fraud-bridge 10.775c563 ICMP and DNS tunneling via IPv4 and IPv6. blackarch-tunnel
fred 0.1.1 Cross-platform M$ registry hive editor. blackarch-windows
freeipmi 1.6.14 IPMI remote console and system management software blackarch-networking
freeradius 3.2.6 The premier open source RADIUS server blackarch-wireless
freewifi 30.1cb752b How to get free wifi. blackarch-wireless
frida 12.6.8 Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. blackarch-reversing
frida-extract 13.abb3f14 Frida.re based RunPE (and MapViewOfSection) extraction tool. blackarch-reversing
frida-ios-dump 53.56e99b2 Pull decrypted ipa from jailbreak device. blackarch-mobile
fridump 23.3e64ee0 A universal memory dumper using Frida. blackarch-forensic
frisbeelite 1.2 A GUI-based USB device fuzzer. blackarch-fuzzer
fs-exploit 3.28bb9bb Format string exploit generation. blackarch-exploitation
fs-nyarl 1.0 A network takeover & forensic analysis tool - useful to advanced PenTest tasks & for fun and profit. blackarch-scanner
fscan 1.8.4.r4.gd01df95 A Security Auditing Tool. blackarch-scanner
fsnoop 3.4 A tool to monitor file operations on GNU/Linux systems by using the Inotify mechanism. Its primary purpose is to help detecting file race condition vulnerabilities and since version 3, to exploit them with loadable DSO modules (also called "payload modules" or "paymods"). blackarch-scanner
fssb 73.51d2ac2 A low-level filesystem sandbox for Linux using syscall intercepts. blackarch-defensive
fstealer 0.1 Automates file system mirroring through remote file disclosure vulnerabilities on Linux machines. blackarch-automation
ftester 1.0 A tool designed for testing firewall filtering policies and Intrusion Detection System (IDS) capabilities. blackarch-fuzzer
ftp-fuzz 1337 The master of all master fuzzing scripts specifically targeted towards FTP server software. blackarch-fuzzer
ftp-scanner 0.2.5 Multithreaded ftp scanner/brute forcer. Tested on Linux, OpenBSD and Solaris. blackarch-cracker
ftp-spider 1.0 FTP investigation tool - Scans ftp server for the following: reveal entire directory tree structures, detect anonymous access, detect directories with write permissions, find user specified data within repository. blackarch-scanner
ftpmap 52.cbeabbe Scans remote FTP servers to identify what software and what versions they are running. blackarch-fingerprint
ftpscout 12.cf1dff1 Scans ftps for anonymous access. blackarch-scanner
fuddly 569.fd2c4d0 Fuzzing and Data Manipulation Framework (for GNU/Linux). blackarch-fuzzer
fusil 1.5 A Python library used to write fuzzing programs. blackarch-fuzzer
fuxploider 140.ec8742b Tool that automates the process of detecting and exploiting file upload forms flaws. blackarch-webapp
fuzzap 17.057002b A python script for obfuscating wireless networks. blackarch-wireless
fuzzball2 0.7 A little fuzzer for TCP and IP options. It sends a bunch of more or less bogus packets to the host of your choice. blackarch-fuzzer
fuzzbunch 32.2b76c22 NSA Exploit framework blackarch-exploitation
fuzzdb 475.5656ab2 Attack and Discovery Pattern Dictionary for Application Fault Injection Testing. blackarch-fuzzer
fuzzdiff 1.0 A simple tool designed to help out with crash analysis during fuzz testing. It selectively 'un-fuzzes' portions of a fuzzed file that is known to cause a crash, re-launches the targeted application, and sees if it still crashes. blackarch-fuzzer
fuzzowski 41.e39f665 A Network Protocol Fuzzer made by NCCGroup based on Sulley and BooFuzz. blackarch-fuzzer
fuzztalk 1.0.0.0 An XML driven fuzz testing framework that emphasizes easy extensibility and reusability. blackarch-windows
g72x++ 1 Decoder for the g72x++ codec. blackarch-wireless
gadgetinspector 6.ac7832d A byte code analyzer for finding deserialization gadget chains in Java applications. blackarch-decompiler
gadgettojscript 20.005cb8b .NET serialized gadgets that can trigger .NET assembly from JS/VBS/VBA based scripts. blackarch-exploitation
galleta 20040505_1 Examine the contents of the IE's cookie files for forensic purposes blackarch-forensic
gasmask 172.2527371 All in one Information gathering tool - OSINT. blackarch-recon
gatecrasher 2.3ad5225 Network auditing and analysis tool developed in Python. blackarch-recon
gau 161.046a59f Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl. blackarch-webapp
gcat 29.39b266c A fully featured backdoor that uses Gmail as a C&C server. blackarch-malware
gcpbucketbrute 17.6866bd2 A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. blackarch-scanner
gcrypt 32.d3f9f06 Simple, secure and performance file encryption tool written in C blackarch-crypto
gdb 15.2 The GNU Debugger blackarch-debugger
gdb-common 15.2 The GNU Debugger blackarch-debugger
gdbgui 437.be95217 Browser-based gdb frontend using Flask and JavaScript to visually debug C, C++, Go, or Rust. blackarch-debugger
gene 78.faf8cc0 Signature Engine for Windows Event Logs. blackarch-windows
genisys 53.d53bb0c Powerful Telegram Members Scraping and Adding Toolkit. blackarch-social
genlist 0.1 Generates lists of IP addresses. blackarch-misc
geoedge 0.2 This little tools is designed to get geolocalization information of a host, it get the information from two sources (maxmind and geoiptool). blackarch-recon
geoip 1.6.12 Non-DNS IP-to-country resolver C library & utils blackarch-networking
geoipgen 0.4 GeoIPgen is a country to IP addresses generator. blackarch-misc
gerix-wifi-cracker 1.1c3cd73 A graphical user interface for aircrack-ng and pyrit. blackarch-wireless
gethsploit 3.144778b Finding Ethereum nodes which are vulnerable to RPC-attacks. blackarch-scanner
getsids 0.0.1 Getsids tries to enumerate Oracle Sids by sending the services command to the Oracle TNS listener. Like doing ‘lsnrctl service’. blackarch-database
getsploit 37.bcab2ee Command line utility for searching and downloading exploits. blackarch-exploitation
gf 39.dcd4c36 A wrapper around grep, to help you grep for things. blackarch-misc
gg-images 35.b2dd863 The application was created to allow anyone to easily download profile pictures from GG. blackarch-social
gggooglescan 0.4 A Google scraper which performs automated searches and returns results of search queries in the form of URLs or hostnames. blackarch-scanner
gh-dork 3.799f86f Github dorking tool. blackarch-recon
ghauri 1.3.8.r3.g24cacde An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. blackarch-webapp
ghettotooth 1.0 Ghettodriving for bluetooth. blackarch-bluetooth
ghidra 11.0.3 Software reverse engineering framework blackarch-reversing
ghost-phisher 1.62 GUI suite for phishing and penetration attacks blackarch-scanner
ghost-py 2.0.0 Webkit based webclient (relies on PyQT). blackarch-webapp
ghostdelivery 32.a23ed5a Python script to generate obfuscated .vbs script that delivers payload (payload dropper) with persistence and windows antivirus disabling functions. blackarch-exploitation
ghostpack 122.ccd6802 Compiled Binaries for Ghostpack (.NET Framework v4.7.2). blackarch-windows
gibberish-detector v0.1.1.r2.gecac969 Train a model and detect gibberish strings with it. blackarch-misc
girsh v0.41.r0.gfc5b44e Automatically spawn a reverse shell fully interactive for Linux or Windows victim. blackarch-networking
giskismet 20110805 A program to visually represent the Kismet data in a flexible manner. blackarch-wireless
git-dump 7.4c9a2a9 Dump the contents of a remote git repository without directory listing enabled. blackarch-scanner
git-dumper 1.0.6.r14.g2d6fa4f A tool to dump a git repository from a website. blackarch-scanner
git-hound 174.1d20536 Pinpoints exposed API keys on GitHub. A batch-catching, pattern-matching, patch-attacking secret snatcher. blackarch-recon
git-wild-hunt 16.6495672 A tool to hunt for credentials in github wild AKA git*hunt. blackarch-recon
gitdorker 113.8199375 Python program to scrape secrets from GitHub through usage of a large repository of dorks. blackarch-recon
gitdump 1.682fa37 A pentesting tool that dumps the source code from .git even when the directory traversal is disabled. blackarch-webapp
gitem 104.d40a1c9 A Github organization reconnaissance tool. blackarch-recon
gitgraber 82.aab4839 Monitor GitHub to search and find sensitive data in real time for different online services. blackarch-recon
githack 16.a3d70b1 A `.git` folder disclosure exploit. blackarch-recon
githound v1.7.1.r15.g1d20536 Find secret information in git repositories. blackarch-code-audit
github-dorks 82.d50a677 Collection of github dorks and helper tool to automate the process of checking dorks. blackarch-recon
githubcloner 35.2bcb9c2 A script that clones Github repositories of users and organizations automatically. blackarch-misc
gitleaks 8.20.0 Audit Git repos for secrets and keys blackarch-recon
gitmails 71.8aa8411 An information gathering tool to collect git commit emails in version control host services. blackarch-recon
gitminer 54.16ada58 Tool for advanced mining for content on Github. blackarch-recon
gitrecon 30.6467e78 OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits. blackarch-recon
gitrob 7.7be4c53 Reconnaissance tool for GitHub organizations. blackarch-scanner
gittools 70.7cac63a A repository with 3 tools for pwn'ing websites with .git repositories available'. blackarch-webapp
gloom 93.cd6e927 Linux Penetration Testing Framework. blackarch-scanner
glue 380.8703380 A framework for running a series of tools. blackarch-automation
gmsadumper 18.e03187c A tool that Reads any gMSA password blobs the user can access and parses the values. blackarch-misc
gnuradio 3.10.11.0 Signal processing runtime and signal processing software development toolkit blackarch-wireless
gnutls2 2.12.23 A library which provides a secure layer over a reliable transport layer (Version 2) blackarch-crypto
go-windapsearch v0.3.0.r22.ged05587 Utility to enumerate users, groups and computers from a Windows domain through LDAP queries. blackarch-recon
gobd 82.3bbd17c A Golang covert backdoor. blackarch-backdoor
gobuster 367.308cf9f Directory/file & DNS busting tool written in Go. blackarch-webapp
gocabrito 4.33ac59a Super organized and flexible script for sending phishing campaigns. blackarch-social
goddi 1.2 Dumps Active Directory domain information. blackarch-recon
goldeneye 28.792862f A HTTP DoS test tool. Attack Vector exploited: HTTP Keep Alive + NoCache. blackarch-dos
golismero 73.7d605b9 Opensource web security testing framework. blackarch-webapp
gomapenum v1.1.0.r110.g8b344df User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin. blackarch-cracker
goodork 2.2 A python script designed to allow you to leverage the power of google dorking straight from the comfort of your command line. blackarch-recon
goofile 1.5 Command line filetype search blackarch-recon
goofuzz 1.2.5.r2.g6ba4cc5 A Bash script that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. blackarch-fuzzer
goog-mail 1.0 Enumerate domain emails from google. blackarch-recon
google-explorer 140.0b21b57 Google mass exploit robot - Make a google search, and parse the results for a especific exploit you define. blackarch-automation
googlesub 14.a7a3cc7 A python script to find domains by using google dorks. blackarch-recon
goohak 31.815a31e Automatically Launch Google Hacking Queries Against A Target Domain. blackarch-recon
goop 12.39b34eb Perform google searches without being blocked by the CAPTCHA or hitting any rate limits. blackarch-recon
goop-dump 71.3c15d60 Tool to dump a git repository from a website, focused on as-complete-as-possible dumps and handling weird edge-cases. blackarch-webapp
gooscan 1.0.9 A tool that automates queries against Google search appliances, but with a twist. blackarch-automation
gopherus 33.90a2fd5 Tool generates gopher link for exploiting SSRF and gaining RCE in various servers. blackarch-webapp
gophish 815.95618469 Open-Source Phishing Framework. blackarch-social
goshs 0.3.8 A SimpleHTTPServer written in Go, enhanced with features and with a nice design. blackarch-misc
gosint 196.9c86ed2 OSINT framework in Go. blackarch-recon
gospider 108.f6cc9a7 Fast web spider written in Go. blackarch-webapp
gostringsr2 1.1.2 Extract strings from a Go binary using radare2. blackarch-reversing
gowitness 434.1824997 A golang, web screenshot utility using Chrome Headless. blackarch-webapp
gplist 1.0 Lists information about the applied Group Policies. blackarch-windows
gpocrack 3.cf63c86 Active Directory Group Policy Preferences cpassword cracker/decrypter. blackarch-cracker
gpredict 1647.91a4a3f A real-time satellite tracking and orbit prediction application. blackarch-radio
gps-sdr-sim 220.c31d157 Software-Defined GPS Signal Simulator. blackarch-radio
gqrx 2.17.5 Software defined radio receiver powered by GNU Radio and Qt. blackarch-radio
gr-air-modes 396.0b6c383 Gnuradio tools for receiving Mode S transponder signals, including ADS-B. blackarch-radio
gr-gsm 1194.a77cf59 Gnuradio blocks and tools for receiving GSM transmissions. blackarch-radio
gr-paint 50.3806b20 An OFDM Spectrum Painter for GNU Radio. blackarch-radio
grabbb 0.0.7 Clean, functional, and fast banner scanner. blackarch-scanner
grabber 0.1 A web application scanner. Basically it detects some kind of vulnerabilities in your website. blackarch-webapp
grabing 11.9c1aa6c Counts all the hostnames for an IP adress blackarch-recon
grabitall 1.1 Performs traffic redirection by sending spoofed ARP replies. blackarch-windows
graffiti 24.4af61b4 A tool to generate obfuscated one liners to aid in penetration testing. blackarch-misc
grammarinator 352.122dfbb A random test generator / fuzzer that creates test cases according to an input ANTLR v4 grammar. blackarch-fuzzer
graphinder 1.11.6 GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. blackarch-recon
graphql-cop 1.12.r21.ga08f757 GraphQL vulnerability scanner. blackarch-scanner
graphql-path-enum 23.5450280 Tool that lists the different ways of reaching a given type in a GraphQL schema. blackarch-webapp
graphqlmap 63.59305d7 Scripting engine to interact with a graphql endpoint for pentesting purposes. blackarch-webapp
graphw00f 1.1.18.r4.gc29656d GraphQL endpoint detection and engine fingerprinting. blackarch-webapp
graudit 629.132db32 Grep rough source code auditing tool. blackarch-code-audit
grepforrfi 0.1 Simple script for parsing web logs for RFIs and Webshells v1.2 blackarch-scanner
grokevt 0.5.0 A collection of scripts built for reading Windows® NT/2K/XP/2K eventlog files. blackarch-forensic
grr 17.791ed5a High-throughput fuzzer and emulator of DECREE binaries. blackarch-fuzzer
grype 0.33.1 A vulnerability scanner for container images and filesystems. blackarch-scanner
gsd 1.1 Gives you the Discretionary Access Control List of any Windows NT service you specify as a command line option. blackarch-windows
gsocket 1.4.43 Global Socket moving data from here to there securely, fast and trough NAT/Firewalls blackarch-networking
gspoof 3.2 A simple GTK/command line TCP/IP packet generator. blackarch-networking
gtalk-decode 0.1 Google Talk decoder tool that demonstrates recovering passwords from accounts. blackarch-windows
gtfo 17.873d862 Search gtfobins and lolbas files from your terminal. blackarch-misc
gtfoblookup 69.cc50e6e Offline command line lookup utility for GTFOBins and LOLBAS. blackarch-misc
gtp-scan 0.7 A small python script that scans for GTP (GPRS tunneling protocol) speaking hosts. blackarch-scanner
guymager 0.8.13 A forensic imager for media acquisition. blackarch-forensic
gwcheck 0.1 A simple program that checks if a host in an ethernet network is a gateway to Internet. blackarch-networking
gwtenum 7.f27a5aa Enumeration of GWT-RCP method calls. blackarch-recon
h2buster 79.6c4dd1c A threaded, recursive, web directory brute-force scanner over HTTP/2. blackarch-scanner
h2csmuggler 7.7ea573a HTTP Request Smuggling over HTTP/2 Cleartext (h2c). blackarch-webapp
h2spec 2.6.0 A conformance testing tool for HTTP/2 implementation. blackarch-misc
h2t 36.9183a30 Scans a website and suggests security headers to apply. blackarch-webapp
h8mail 344.ee31c8f Email OSINT and password breach hunting. blackarch-recon
habu 359.8326936 Python Network Hacking Toolkit. blackarch-scanner
hackersh 0.2.0 A shell for with Pythonect-like syntax, including wrappers for commonly used security tools. blackarch-automation
hackredis 3.fbae1bc A simple tool to scan and exploit redis servers. blackarch-exploitation
hackrf 2024.02.1 Driver for HackRF, allowing general purpose software defined radio (SDR). blackarch-radio
haiti v2.1.0.r47.g962a11b Hash type identifier (CLI & lib). blackarch-crypto
haka 0.2.2 A collection of tool that allows capturing TCP/IP packets and filtering them based on Lua policy files. blackarch-networking
hakku 384.bbb434d Simple framework that has been made for penetration testing tools. blackarch-scanner
hakrawler 234.14e240b Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application. blackarch-webapp
hakrevdns 47.3001d16 Small, fast tool for performing reverse DNS lookups en masse. blackarch-recon
halberd 0.2.4 Halberd discovers HTTP load balancers. It is useful for web application security auditing and for load balancer configuration testing. blackarch-scanner
halcyon 0.1 A repository crawler that runs checksums for static files found within a given git repository. blackarch-recon
halcyon-ide 2.0.2 First IDE for Nmap Script (NSE) Development. blackarch-misc
hamster 2.0.0 Tool for HTTP session sidejacking. blackarch-exploitation
handle 0.1 An small application designed to analyze your system searching for global objects related to running process and display information for every found object, like tokens, semaphores, ports, files,.. blackarch-windows
harness 19.ed2a6aa Interactive remote PowerShell Payload. blackarch-backdoor
harpoon 383.8021994 CLI tool for open source and threat intelligence. blackarch-automation
hasere 1.0 Discover the vhosts using google and bing. blackarch-recon
hash-buster 49.0d6ebb4 A python script which scraps online hash crackers to find cleartext of a hash. blackarch-crypto
hash-extender 157.1f29520 A hash length extension attack tool. blackarch-crypto
hash-identifier 6.0e08a97 Software to identify the different types of hashes used to encrypt data and especially passwords. blackarch-crypto
hashcat 6.2.6 Multithreaded advanced password recovery utility blackarch-cracker
hashcat-utils 1.9 Set of small utilities that are useful in advanced password cracking blackarch-misc
hashcatch 52.8145660 Capture handshakes of nearby WiFi networks automatically. blackarch-wireless
hashcheck 2.72b0c6e Search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. blackarch-crypto
hashdb 1089.1da1b9f A block hash toolkit. blackarch-crypto
hashdeep 4.4 Cross-platform tools to message digests for any number of files. blackarch-crypto
hasher 48.40173c5 A tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. blackarch-cracker
hashfind 8.e9a9a14 A tool to search files for matching password hash types and other interesting data. blackarch-crypto
hashid 397.7e8473a Software to identify the different types of hashes used to encrypt data. blackarch-crypto
hashpump 49.314268e A tool to exploit the hash length extension attack in various hashing algorithms. blackarch-crypto
hashrat 1.15 Hashing tool supporting MD5, SHA1, SHA256, SHA512, Whirlpool, JH and their HMAC. blackarch-crypto
hashtag 0.41 A python script written to parse and identify password hashes. blackarch-cracker
hatcloud 33.3012ad6 Bypass CloudFlare with Ruby. blackarch-recon
hate-crack 212.b000477 A tool for automating cracking methodologies through Hashcat. blackarch-automation
haystack 1823.c178b5a A Python framework for finding C structures from process memory - heap analysis - Memory structures forensics. blackarch-binary
hbad 1.0 This tool allows you to test clients on the heartbleed bug. blackarch-scanner
hcraft 1.0.0 HTTP Vuln Request Crafter blackarch-exploitation
hcxdumptool 6.3.4 Small tool to capture packets from wlan devices blackarch-wireless
hcxkeys 6.2.1 Set of tools to generate plainmasterkeys (rainbowtables) and hashes for hashcat and John the Ripper blackarch-crypto
hcxtools 6.3.4 Portable solution for capturing wlan traffic and conversion to hashcat and John the Ripper formats blackarch-wireless
hdcp-genkey 18.e8d342d Generate HDCP source and sink keys from the leaked master key. blackarch-crypto
hdmi-sniff 5.f7fbc0e HDMI DDC (I2C) inspection tool. It is designed to demonstrate just how easy it is to recover HDCP crypto keys from HDMI devices. blackarch-hardware
heaptrace 2.2.8.2.r20.g06f43fc Helps visualize heap operations for pwn and debugging. blackarch-debugger
heartbleed-honeypot 0.1 Script that listens on TCP port 443 and responds with completely bogus SSL heartbeat responses, unless it detects the start of a byte pattern similar to that used in Jared Stafford's blackarch-honeypot
heartleech 116.3ab1d60 Scans for systems vulnerable to the heartbleed bug, and then download them. blackarch-exploitation
hekatomb 107.bdd53cf Extract and decrypt all credentials from all domain computers using DPAPI. blackarch-windows
hellraiser 279.bea43e2 Vulnerability Scanner. blackarch-scanner
hemingway 8.9c70a13 A simple and easy to use spear phishing helper. blackarch-social
hercules-payload 222.2607a3a A special payload generator that can bypass all antivirus software. blackarch-binary
hetty 134.f60202e HTTP toolkit for security research. Aims to become an open source alternative to commercial software like Burp Suite Pro. blackarch-webapp
hex2bin 2.5 Converts Motorola and Intel hex files to binary. blackarch-binary
hexinject 1.6 A very versatile packet injector and sniffer that provides a command-line framework for raw network access. blackarch-sniffer
hexorbase 6 A database application designed for administering and auditing multiple database servers simultaneously from a centralized location. It is capable of performing SQL queries and bruteforce attacks against common database servers (MySQL, SQLite, Microsoft SQL Server, Oracle, PostgreSQL). blackarch-fuzzer
hexyl 0.14.0 Colored command-line hex viewer blackarch-misc
hharp 1beta This tool can perform man-in-the-middle and switch flooding attacks. It has 4 major functions, 3 of which attempt to man-in-the-middle one or more computers on a network with a passive method or flood type method. blackarch-networking
hidattack 0.1 HID Attack (attacking HID host implementations) blackarch-bluetooth
hiddeneye 1228.7a3deaf Modern phishing tool with advanced functionality. blackarch-social
hiddeneye-legacy RC1.r226.g7a3deaf Modern Phishing Tool With Advanced Functionality. blackarch-social
hikpwn 8.5a7d69c A simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. blackarch-scanner
hlextend 17.be21920 Pure Python hash length extension module. blackarch-crypto
hodor 1.01be107 A general-use fuzzer that can be configured to use known-good input and delimiters in order to fuzz specific locations. blackarch-fuzzer
holehe 434.14da70f A tool for Efficiently finding registered accounts from emails. blackarch-social
hollows-hunter 0.3.9 Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches). blackarch-windows
homepwn 31.0803981 Swiss Army Knife for Pentesting of IoT Devices. blackarch-scanner
honeycreds 26.eaeb401 Network credential injection to detect responder and other network poisoners. blackarch-defensive
honeyd 337.a0f3d64 A small daemon that creates virtual hosts on a network. blackarch-honeypot
honeypy 600.6ca3d6e A low interaction Honeypot. blackarch-honeypot
honggfuzz 4109.b4f72b42 A general-purpose fuzzer with simple, command-line interface. blackarch-fuzzer
honssh 204.821ce87 A high-interaction Honey Pot solution designed to log all SSH communications between a client and server. blackarch-honeypot
hookanalyser 3.4 A hook tool which can be potentially helpful in reversing applications and analyzing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer. blackarch-windows
hookshot 205.df30b85 Integrated web scraper and email account data breach comparison tool. blackarch-webapp
hoover 4.9bda860 Wireless Probe Requests Sniffer. blackarch-wireless
hoper 15.8d5dbd9 Trace URL's jumps across the rel links to obtain the last URL. blackarch-recon
hopper 5.17.2 Reverse engineering tool that lets you disassemble, decompile and debug your applications. blackarch-reversing
hoppy 1.8.1 A python script which tests http methods for configuration issues leaking information or just to see if they are enabled. blackarch-scanner
horusec v2.9.0.beta.2.r1.g873d4104 Static code analysis to identify security flaws for many languages. blackarch-code-audit
host-extract 8.0134ad7 Ruby script tries to extract all IP/Host patterns in page response of a given URL and JavaScript/CSS files of that URL. blackarch-scanner
hostapd-wpe 2.9.1 Modified hostapd to facilitate AP impersonation attacks. blackarch-wireless
hostbox-ssh 0.1.1 A ssh password/account scanner. blackarch-cracker
hosthunter 158.553f1c7 A recon tool for discovering hostnames using OSINT techniques. blackarch-recon
hotpatch 90.fd2baf1 Hot patches executables on Linux using .so file injection. blackarch-backdoor
hotspotter 0.4 Hotspotter passively monitors the network for probe request frames to identify the preferred networks of Windows XP clients, and will compare it to a supplied list of common hotspot network names. blackarch-wireless
howmanypeoplearearound 123.b05e06a Count the number of people around you by monitoring wifi signals. blackarch-recon
hpfeeds 414.34bf4d4 Honeynet Project generic authenticated datafeed protocol. blackarch-honeypot
hping 3.0.0 A command-line oriented TCP/IP packet assembler/analyzer. blackarch-networking
hqlmap 38.bb6ab46 A tool to exploit HQL Injections. blackarch-exploitation
hsecscan 66.7b8fa71 A security scanner for HTTP response headers. blackarch-scanner
htcap 155.a59c592 A web application analysis tool for detecting communications between javascript and the server. blackarch-webapp
htexploit 0.77 A Python script that exploits a weakness in the way that .htaccess files can be configured to protect a web directory with an authentication process blackarch-exploitation
htpwdscan 23.e995d6f A python HTTP weak pass scanner. blackarch-cracker
htrosbif 134.9dc3f86 Active HTTP server fingerprinting and recon tool. blackarch-fingerprint
htshells 89.3216523 Self contained web shells and other attacks via .htaccess files. blackarch-exploitation
http-enum 0.4 A tool to enumerate the enabled HTTP methods supported on a webserver. blackarch-scanner
http-fuzz 0.1 A simple http fuzzer. blackarch-fuzzer
http-put 1.0 Simple http put perl script. blackarch-misc
http-traceroute 0.5 This is a python script that uses the Max-Forwards header in HTTP and SIP to perform a traceroute-like scanning functionality. blackarch-networking
http2smugl 36.78abc09 Http2Smugl - Tool to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion. blackarch-webapp
httpbog 1.0.0.0 A slow HTTP denial-of-service tool that works similarly to other attacks, but rather than leveraging request headers or POST data Bog consumes sockets by slowly reading responses. blackarch-windows
httpforge 11.02.01 A set of shell tools that let you manipulate, send, receive, and analyze HTTP messages. These tools can be used to test, discover, and assert the security of Web servers, apps, and sites. An accompanying Python library is available for extensions. blackarch-webapp
httpgrep 2.4 A python tool which scans for HTTP servers and finds given strings in HTTP body and HTTP response headers. blackarch-webapp
httping 3.6 A ping-like tool for HTTP requests blackarch-networking
httppwnly 47.528a664 "Repeater" style XSS post-exploitation tool for mass browser control. blackarch-webapp
httprecon 7.3 Tool for web server fingerprinting, also known as http fingerprinting. blackarch-windows
httprint 301 A web server fingerprinting tool. blackarch-fingerprint
httprint-win32 301 A web server fingerprinting tool (Windows binaries). blackarch-windows
httprobe 22.5555984 Take a list of domains and probe for working HTTP and HTTPS servers blackarch-scanner
httpry 0.1.8 A specialized packet sniffer designed for displaying and logging HTTP traffic. blackarch-sniffer
httpscreenshot 70.f081c69 A tool for grabbing screenshots and HTML of large numbers of websites. blackarch-misc
httpsniff 0.4 Tool to sniff HTTP responses from TCP/IP based networks and save contained files locally for later review. blackarch-sniffer
httpsscanner 1.2 A tool to test the strength of a SSL web server. blackarch-scanner
httptunnel 3.3 Creates a bidirectional virtual data connection tunnelled in HTTP requests blackarch-tunnel
httpx 2151.d58ad9d A fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library. blackarch-webapp
httrack 3.49.5 An easy-to-use offline browser utility blackarch-misc
hubbit-sniffer 74.460ecf8 Simple application that listens for WIFI-frames and records the mac-address of the sender and posts them to a REST-api. blackarch-sniffer
hulk 27.ed2b11c A webserver DoS tool (Http Unbearable Load King) ported to Go with some additional features. blackarch-dos
hungry-interceptor 391.1aea7f3 Intercepts data, does something with it, stores it. blackarch-sniffer
hurl-encoder 20.afca9c5 Hexadecimal & URL (en/de)coder. blackarch-misc
hwk 0.4 Collection of packet crafting and wireless network flooding tools blackarch-dos
hxd 2.5.0.0 Freeware Hex Editor and Disk Editor. blackarch-misc
hyde 11.ec09462 Just another tool in C to do DDoS (with spoofing). blackarch-networking
hydra 9.5 Very fast network logon cracker which support many different services blackarch-cracker
hyenae 0.36_1 Flexible platform independent packet generator. blackarch-networking
hyperfox 121.1a8c26f A security tool for proxying and recording HTTP and HTTPs traffic. blackarch-networking
hyperion-crypter 2.3.1 A runtime encrypter for 32-bit and 64-bit portable executables. blackarch-windows
i2pd 2.53.1 A full-featured C++ implementation of the I2P router blackarch-networking
iaito 5.9.4 Qt and C++ GUI for radare2 reverse engineering framework blackarch-reversing
iaxflood 0.1 IAX flooder. blackarch-dos
iaxscan 0.02 A Python based scanner for detecting live IAX/2 hosts and then enumerating (by bruteforce) users on those hosts. blackarch-scanner
ibrute 12.3a6a11e An AppleID password bruteforce tool. It uses Find My Iphone service API, where bruteforce protection was not implemented. blackarch-cracker
icloudbrutter 15.1f64f19 Tool for AppleID Bruteforce. blackarch-cracker
icmpquery 1.0 Send and receive ICMP queries for address mask and current time. blackarch-scanner
icmpsh 12.82caf34 Simple reverse ICMP shell. blackarch-backdoor
icmptx 17.52df90f IP over ICMP tunnel. blackarch-tunnel
id-entify 34.dd064a5 Search for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records. blackarch-recon
ida-free 8.4 Freeware version of the world's smartest and most feature-full disassembler. blackarch-reversing
idb 2.10.3 A tool to simplify some common tasks for iOS pentesting and research. blackarch-mobile
identywaf 207.ae7e44a Blind WAF identification tool. blackarch-webapp
idswakeup 1.0 A collection of tools that allows to test network intrusion detection systems. blackarch-recon
ifchk 1.1.2 A network interface promiscuous mode detection tool. blackarch-defensive
ifuzz 1.0 A binary file fuzzer with several options. blackarch-fuzzer
iheartxor 0.01 A tool for bruteforcing encoded strings within a boundary defined by a regular expression. It will bruteforce the key value range of 0x1 through 0x255. blackarch-cracker
iis-shortname-scanner 5.4ad4937 An IIS shortname Scanner. blackarch-scanner
iisbruteforcer 15 HTTP authentication cracker. It's a tool that launchs an online dictionary attack to test for weak or simple passwords against protected areas on an IIS Web server. blackarch-cracker
ike-scan 1.9.5 A tool that uses IKE protocol to discover, fingerprint and test IPSec VPN servers. blackarch-scanner
ikecrack 1.00 An IKE/IPSec crack tool designed to perform Pre-Shared-Key analysis of RFC compliant aggressive mode authentication blackarch-cracker
ikeforce 30.575af15 A command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities. blackarch-cracker
ikeprobe 0.1 Determine vulnerabilities in the PSK implementation of the VPN server. blackarch-windows
ikeprober 1.12 Tool crafting IKE initiator packets and allowing many options to be manually set. Useful to find overflows, error conditions and identifiyng vendors blackarch-fuzzer
ilo4-toolbox 47.672a5d6 Toolbox for HPE iLO4 analysis. blackarch-scanner
ilty 1.0 An interception phone system for VoIP network. blackarch-voip
imagegrep 8.1f14af2 Grep word in pdf or image based on OCR. blackarch-misc
imagejs 56.a442f94 Small tool to package javascript into a valid image file. blackarch-binary
imagemounter 413.383b30b Command line utility and Python package to ease the (un)mounting of forensic disk images. blackarch-forensic
imhex 1.35.0.r157.g101c7a36f A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM. blackarch-misc
impacket-ba 0.11.0 Collection of classes for working with network protocols. blackarch-exploitation
impulse 77.6939ea2 Modern Denial-of-service ToolKit. blackarch-dos
inception 454.4df3231 A FireWire physical memory manipulation and hacking tool exploiting IEEE 1394 SBP DMA. blackarch-exploitation
indx2csv 17.129a411e An advanced parser for INDX records. blackarch-forensic
indxcarver 5.dee36608 Carve INDX records from a chunk of data. blackarch-forensic
indxparse 198.a977192 A Tool suite for inspecting NTFS artifacts. blackarch-forensic
inetsim 1.3.2 A software suite for simulating common internet services in a lab environment, e.g. for analyzing the network behaviour of unknown malware samples. blackarch-defensive
infection-monkey v2.2.0.r3559.g2b5a9390c Automated security testing tool for networks. blackarch-networking
infip 0.1 A python script that checks output from netstat against RBLs from Spamhaus. blackarch-scanner
infoga 33.79a1c03 Tool for gathering e-mail accounts information from different public sources (search engines, pgp key servers). blackarch-recon
inguma 0.1.1 A free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler. blackarch-cracker
injectus 12.3c01fa0 CRLF and open redirect fuzzer. blackarch-webapp
innounp 0.50 Inno Setup Unpacker. blackarch-reversing
inquisitor 28.12a9ec1 OSINT Gathering Tool for Companies and Organizations. blackarch-recon
insanity 117.cf51ff3 Generate Payloads and Control Remote Machines . blackarch-exploitation
instagramosint 21.30b5735 An Instagram Open Source Intelligence Tool. blackarch-social
instashell 56.49b6b4f Multi-threaded Instagram Brute Forcer without password limit. blackarch-cracker
intelmq 3.3.1.r5.gd5e3e4117 A tool for collecting and processing security feeds using a message queuing protocol. blackarch-misc
intelplot 12.4dd9fc0 OSINT Tool to Mark Points on Offline Map. blackarch-recon
intensio-obfuscator 280.f66a22b Obfuscate a python code 2 and 3. blackarch-misc
interactsh-client v1.2.2.r0.g5630c1c Open-Source Solution for Out of band Data Extraction. blackarch-webapp
intercepter-ng 1.0 A next generation sniffer including a lot of features: capturing passwords/hashes, sniffing chat messages, performing man-in-the-middle attacks, etc. blackarch-windows
interlace 354.79b8949 Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. blackarch-networking
interrogate 5.eb5f071 A proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage. blackarch-forensic
intersect 2.5 Post-exploitation framework. blackarch-automation
intrace 1.5 Traceroute-like application piggybacking on existing TCP connections blackarch-recon
inundator 0.5 An ids evasion tool, used to anonymously inundate intrusion detection logs with false positives in order to obfuscate a real attack. blackarch-misc
inurlbr 34.dbf9773 Advanced search in the search engines - Inurl scanner, dorker, exploiter. blackarch-scanner
inviteflood 2.0 Flood a device with INVITE requests blackarch-dos
invoke-cradlecrafter 19.3ff8bac PowerShell Remote Download Cradle Generator & Obfuscator. blackarch-automation
invoke-dosfuscation 7.6260f5b Cmd.exe Command Obfuscation Generator & Detection Test Harness. blackarch-automation
invoke-obfuscation 45.f20e7f8 PowerShell Obfuscator. blackarch-automation
inzider 1.2 This is a tool that lists processes in your Windows system and the ports each one listen on. blackarch-windows
iodine 0.8.0 Tunnel IPv4 data through a DNS server blackarch-tunnel
iosforensic 1.0 iOS forensic tool https://www.owasp.org/index.php/Projects/OWASP_iOSForensic blackarch-forensic
ip-https-tools 7.170691f Tools for the IP over HTTPS (IP-HTTPS) Tunneling Protocol. blackarch-tunnel
ip-tracer 92.6b9c454 Track and retrieve any ip address information. blackarch-recon
ip2clue 0.0.95 A small memory/CPU footprint daemon to lookup country (and other info) based on IP (v4 and v6). blackarch-recon
ipaudit 1.1 Monitors network activity on a network. blackarch-networking
ipba2 95.c03bd85 IOS Backup Analyzer. blackarch-forensic
ipcountry 1.2 Fetches IPv4 ranges of given country in host and cidr format. blackarch-misc
ipdecap 96.45d2a7d Can decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, and can also remove IEEE 802.1Q (virtual lan) header. blackarch-networking
iphoneanalyzer 2.1.0 Allows you to forensically examine or recover date from in iOS device. blackarch-forensic
ipmipwn 6.74a08a8 IPMI cipher 0 attack tool. blackarch-cracker
ipmitool 1.8.19 Command-line interface to IPMI-enabled devices blackarch-networking
ipobfuscator 27.f005262 A simple tool to convert the IP to a DWORD IP. blackarch-misc
ipscan 3.9.1 A very fast IP address and port scanner. blackarch-scanner
ipsourcebypass 1.2.r15.g7befb82 This Python script can be used to bypass IP source restrictions using HTTP headers. blackarch-webapp
iptodomain 18.f1afcd7 This tool extract domains from IP address based in the information saved in virustotal. blackarch-recon
iptv 138.ae6457b Search and brute force illegal iptv server. blackarch-scanner
iputils 20240905 Network monitoring tools, including ping blackarch-networking
ipv4bypass 24.f54072b Using IPv6 to Bypass Security. blackarch-networking
ipv666 182.ad45ae8 Golang IPv6 address enumeration. blackarch-recon
ipv6toolkit 819.367bbe6 SI6 Networks' IPv6 Toolkit. blackarch-scanner
ircsnapshot 94.cb02a85 Tool to gather information from IRC servers. blackarch-recon
irpas 0.10 Internetwork Routing Protocol Attack Suite. blackarch-exploitation
isf 68.5228865 An exploitation framework based on Python. blackarch-exploitation
isip 2.fad1f10 Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. blackarch-voip
isme 0.12 Scans a VOIP environment, adapts to enterprise VOIP, and exploits the possibilities of being connected directly to an IP Phone VLAN. blackarch-voip
isr-form 1.0 Simple html parsing tool that extracts all form related information and generates reports of the data. Allows for quick analyzing of data. blackarch-recon
issniff 294.79c6c2a Internet Session Sniffer. blackarch-sniffer
ivre 0.9.21.dev4 Network recon framework based on Nmap, Masscan, Zeek (Bro), Argus, Netflow,... blackarch-recon
ivre-docs 0.9.21.dev4 Network recon framework based on Nmap, Masscan, Zeek (Bro), Argus, Netflow,... (documentation) blackarch-recon
ivre-web 0.9.21.dev4 Network recon framework based on Nmap, Masscan, Zeek (Bro), Argus, Netflow,... (web application) blackarch-recon
ja3 117.cb29184 Standard for creating SSL client fingerprints in an easy to produce and shareable way. blackarch-crypto
jaadas 0.1 Joint Advanced Defect assEsment for android applications. blackarch-scanner
jackdaw 416.1c3a4c2 Collect all information in your domain, show you graphs on how domain objects interact with each-other and how to exploit these interactions. blackarch-recon
jad 1.5.8e Java decompiler blackarch-reversing
jadx 1.5.0 Command line and GUI tools to produce Java source code from Android Dex and APK files blackarch-decompiler
jaeles 233.243e0b6 The Swiss Army knife for automated Web Application Testing. blackarch-webapp
jaidam 18.15e0fec Penetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well-known open source tools, WPScan and Joomscan. blackarch-webapp
jast 17.361ecde Just Another Screenshot Tool. blackarch-webapp
javasnoop 1.1 A tool that lets you intercept methods, alter data and otherwise hack Java applications running on your computer blackarch-reversing
jbe 0.1.1 Java bytecode editor suitable for viewing and modifying java class files. blackarch-decompiler
jboss-autopwn 1.3bc2d29 A JBoss script for obtaining remote shell access. blackarch-exploitation
jbrofuzz 2.5 Web application protocol fuzzer that emerged from the needs of penetration testing. blackarch-fuzzer
jbrute 0.99 Open Source Security tool to audit hashed passwords. blackarch-cracker
jcrack 0.3.6 A utility to create dictionary files that will crack the default passwords of select wireless gateways blackarch-wireless
jd-cli 1.2.0 Command line Java Decompiler. blackarch-decompiler
jd-gui 1.6.6 A standalone graphical utility that displays Java source codes of .class files. blackarch-decompiler
jdeserialize 31.20635ba A library that interprets Java serialized objects. It also comes with a command-line tool that can generate compilable class declarations, extract block data, and print textual representations of instance values. blackarch-webapp
jeangrey 43.9bf3cf4 A tool to perform differential fault analysis attacks (DFA). blackarch-cracker
jeb-android 3.7.0.201909272058 Android decompiler. blackarch-reversing
jeb-arm 3.7.0.201909272058 Arm decompiler. blackarch-reversing
jeb-intel 3.7.0.201909272058 Intel decompiler. blackarch-reversing
jeb-mips 3.7.0.201909272058 Mips decompiler. blackarch-reversing
jeb-webasm 3.7.0.201909272058 WebAssembly decompiler. blackarch-reversing
jeopardize 5.34f1d07 A low(zero) cost threat intelligence & response tool against phishing domains. blackarch-defensive
jexboss 86.338b531 Jboss verify and Exploitation Tool. blackarch-webapp
jhead 3.08 EXIF JPEG info parser and thumbnail remover blackarch-defensive
jira-scan 7.447d0ec A simple remote scanner for Atlassian Jira blackarch-webapp
jndi-injection-exploit 10.2dc4018 A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability, like Jackson, Fastjson, etc. blackarch-exploitation
jnetmap 0.5.5 A network monitor of sorts. blackarch-networking
john 1.9.0.jumbo1 John the Ripper password cracker blackarch-cracker
johnny 20120424 GUI for John the Ripper. blackarch-cracker
jok3r 447.0761996 Network and Web Pentest Framework. blackarch-webapp
jomplug 0.1 This php script fingerprints a given Joomla system and then uses Packet Storm's archive to check for bugs related to the installed components. blackarch-webapp
jondo 00.20.001 Redirects internet traffic trough a mix of proxy servers to hide the origin of the requests. blackarch-proxy
jooforce 11.43c21ad A Joomla password brute force tester. blackarch-webapp
joomlascan 1.2 Joomla scanner scans for known vulnerable remote file inclusion paths and files. blackarch-webapp
joomlavs 254.eea7500 A black box, Ruby powered, Joomla vulnerability scanner. blackarch-webapp
joomscan 83.2ea8cc7 Detects file inclusion, sql injection, command execution vulnerabilities of a target Joomla! web site. blackarch-webapp
jpegdump 0.0.7 Tool to analyzse JPEG images Reads binary files and parses the JPEG markers inside them. blackarch-binary
jpexs-decompiler 15.1.0 JPEXS Free Flash Decompiler. blackarch-decompiler
jsearch 44.87cf9c1 Simple script that grep infos from javascript files. blackarch-recon
jsfuck 233.fd96902 Write any JavaScript with 6 Characters: []()!+. blackarch-misc
jshell 7.ee3c92d Get a JavaScript shell with XSS. blackarch-webapp
jsonbee 30.c0c87fc A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP). blackarch-webapp
jsparser 31.ccd3ab6 Parse javascript using Tornado and JSBeautifier to discover interesting enpoints. blackarch-webapp
jsql-injection 0.101 A Java application for automatic SQL database injection. blackarch-webapp
jstillery 65.512e9af Advanced JavaScript Deobfuscation via Partial Evaluation. blackarch-webapp
juicy-potato 53.744d321 A sugared version of RottenPotatoNG, with a bit of juice. blackarch-windows
junkie 1365.70a83d6 A modular packet sniffer and analyzer. blackarch-sniffer
justdecompile 22018 The decompilation engine of JustDecompile. blackarch-windows
juumla 106.130565e Python tool created to identify Joomla version, scan for vulnerabilities and search for config files. blackarch-webapp
jwscan 7.874b3a5 Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe. blackarch-reversing
jwt-cracker 23.8130879 JWT brute force cracker written in C. blackarch-cracker
jwt-hack v1.2.0.r0.g32e486b A tool for hacking / security testing to JWT. blackarch-webapp
jwt-key-recovery 11.094df95 Recovers the public key used to sign JWT tokens. blackarch-crypto
jwt-tool 73.e4f380f Toolkit for validating, forging and cracking JWTs (JSON Web Tokens). blackarch-cracker
jwtcat 77.f80f3d9 Script performs offline brute-force attacks against JSON Web Token (JWT) blackarch-cracker
jynx2 2.0 An expansion of the original Jynx LD_PRELOAD rootkit blackarch-backdoor
k55 86.b3c4aa9 Linux x86_64 Process Injection Utility. blackarch-backdoor
kacak 1.0 Tools for penetration testers that can enumerate which users logged on windows system. blackarch-recon
kadimus 183.ac5f438 LFI Scan & Exploit Tool. blackarch-webapp
kalibrate-rtl 69.340003e Fork of http://thre.at/kalibrate/ for use with rtl-sdr devices. blackarch-mobile
kamerka 40.be17620 Build interactive map of cameras from Shodan. blackarch-recon
katana-framework 1.0.0.1 A framework that seekss to unite general auditing tools, which are general pentesting tools (Network,Web,Desktop and others). blackarch-exploitation
katana-pd v1.1.0.r2.g9ba3bb8 Crawling and spidering framework. blackarch-webapp
katsnoop 0.1 Utility that sniffs HTTP Basic Authentication information and prints the base64 decoded form. blackarch-sniffer
kautilya 52.1c9d5b0 Pwnage with Human Interface Devices using Teensy++2.0 and Teensy 3.0 devices. blackarch-hardware
kcptun 20240107 A Secure Tunnel Based On KCP with N:M Multiplexing blackarch-tunnel
keimpx 300.37190f4 Tool to verify the usefulness of credentials across a network over SMB. blackarch-cracker
kekeo 2.2.0_20211214 A little toolbox to play with Microsoft Kerberos in C. blackarch-windows
kerbcrack 1.3d3 Kerberos sniffer and cracker for Windows. blackarch-windows
kerberoast 0.2.0.r9.g82f5bb2 Kerberoast attack -pure python-. blackarch-exploitation
kerbrute 90.9cfb81e A tool to perform Kerberos pre-auth bruteforcing. blackarch-cracker
kernelpop 238.b3467d3 Kernel privilege escalation enumeration and exploitation framework. blackarch-exploitation
keye 29.d44a578 Recon tool detecting changes of websites based on content-length differences. blackarch-recon
kh2hc 0.0.1.r59.g4d84651 Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat. blackarch-crypto
khc 0.2 A small tool designed to recover hashed known_hosts fiels back to their plain-text equivalents. blackarch-cracker
kickthemout 212.861aea2 Kick devices off your network by performing an ARP Spoof attack. blackarch-networking
killcast 30.ee81cfa Manipulate Chromecast Devices in your Network. blackarch-exploitation
killerbee 398.748740d Framework and tools for exploiting ZigBee and IEEE 802.15.4 networks. blackarch-exploitation
kimi 28.e7cafda Script to generate malicious debian packages (debain trojans). blackarch-backdoor
kippo 287.b9eb06a A medium interaction SSH honeypot designed to log brute force attacks and most importantly, the entire shell interaction by the attacker. blackarch-honeypot
kismet 2023_07_R1 802.11 layer2 wireless network detector, sniffer, and intrusion detection system blackarch-wireless
kismet-earth 0.1 Various scripts to convert kismet logs to kml file to be used in Google Earth. blackarch-wireless
kismet2earth 1.0 A set of utilities that convert from Kismet logs to Google Earth .kml format blackarch-wireless
kismon 1.0.3 GUI client for kismet (wireless scanner/sniffer/monitor). blackarch-wireless
kiterunner 19.7d5824c Contextual Content Discovery Tool. blackarch-webapp
kitty-framework 352.cb07609 Fuzzing framework written in python. blackarch-fuzzer
klar 2.4.0 Integration of Clair and Docker Registry. blackarch-exploitation
klee 2.1 A symbolic virtual machine built on top of the LLVM compiler infrastructure. blackarch-binary
klogger 1.0 A keystroke logger for the NT-series of Windows. blackarch-windows
knock 96.0c6ea4f Subdomain scanner. blackarch-scanner
knxmap 252.6f40dd1 KNXnet/IP scanning and auditing tool for KNX home automation installations. blackarch-scanner
koadic 637.ac46c44 A Windows post-exploitation rootkit similar to other penetration testing tools such as Meterpreter and Powershell Empire. blackarch-automation
kolkata 3.0 A web application fingerprinting engine written in Perl that combines cryptography with IDS evasion. blackarch-webapp
konan 23.7b5ac80 Advanced Web Application Dir Scanner. blackarch-webapp
kraken 32.368a837 A project to encrypt A5/1 GSM signaling using a Time/Memory Tradeoff Attack. blackarch-crypto
krbjack 1.2.0 DNS dynamic update abuse in ADIDNS and MitM attack using Kerberos AP-REQ hijacking. blackarch-networking
krbrelayx 49.4eb9c4f Kerberos unconstrained delegation abuse toolkit. blackarch-scanner
kscan v1.85.r55.gcf76af2 Asset mapping tool that can perform port scanning, TCP fingerprinting and banner capture for specified assets. blackarch-scanner
kube-hunter 703.bc47f08 Hunt for security weaknesses in Kubernetes clusters. blackarch-scanner
kubesploit 86.2de2f12 Cross-platform post-exploitation HTTP/2 Command & Control server. blackarch-scanner
kubestriker 39.e1776ea A Blazing fast Security Auditing tool for Kubernetes. blackarch-scanner
kubolt 28.0027239 Utility for scanning public kubernetes clusters. blackarch-webapp
kwetza 26.0e50272 Python script to inject existing Android applications with a Meterpreter payload. blackarch-backdoor
l0l 322.1319ea7 The Exploit Development Kit. blackarch-exploitation
laf 12.7a456b3 Login Area Finder: scans host/s for login panels. blackarch-scanner
lanmap2 127.1197999 Passive network mapping tool. blackarch-recon
lans 148.9f8ef2d A Multithreaded asynchronous packet parsing/injecting arp spoofer. blackarch-spoof
latd 1.31 A LAT terminal daemon for Linux and BSD. blackarch-networking
laudanum 1.0 A collection of injectable files, designed to be used in a pentest when SQL injection flaws are found and are in multiple languages for different environments. blackarch-misc
lazagne 872.3ed06c7 An open source application used to retrieve lots of passwords stored on a local computer. blackarch-forensic
lazydroid 25.0f559ec Tool written as a bash script to facilitate some aspects of an Android Assessment blackarch-mobile
lbd 20130719 Load Balancing detector, blackarch-recon
lbmap 147.2d15ace Proof of concept scripts for advanced web application fingerprinting, presented at OWASP AppSecAsia 2012. blackarch-fingerprint
ld-shatner 4.5c215c4 ld-linux code injector. blackarch-backdoor
ldap-brute 21.acc06e3 A semi fast tool to bruteforce values of LDAP injections over HTTP. blackarch-cracker
ldapdomaindump 0.9.4 Active Directory information dumper via LDAP. blackarch-scanner
ldapenum 0.1 Enumerate domain controllers using LDAP. blackarch-recon
ldapscripts 2.0.8 Simple shell scripts to handle POSIX entries in an LDAP directory. blackarch-automation
ldeep 1.0.54.r0.g72dbd0d In-depth ldap enumeration utility. blackarch-recon
ldsview 47.d8bfcaa Offline search tool for LDAP directory dumps in LDIF format. blackarch-forensic
leaklooker 5.0d2b9fc Find open databases with Shodan. blackarch-scanner
leena 2.5119f56 Symbolic execution engine for JavaScript blackarch-binary
legion 61.ca99853 Automatic Enumeration Tool based in Open Source tools. blackarch-recon
leo 34908.9301ec44b Literate programmer's editor, outliner, and project manager. blackarch-misc
leroy-jenkins 3.bdc3965 A python tool that will allow remote execution of commands on a Jenkins server and its nodes. blackarch-exploitation
lethalhta 2.5602402 Lateral Movement technique using DCOM and HTA. blackarch-windows
letmefuckit-scanner 3.f3be22b Scanner and Exploit Magento. blackarch-scanner
leviathan 35.a1a1d8c A mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. blackarch-scanner
levye 84.5406303 A brute force tool which is support sshkey, vnckey, rdp, openvpn. blackarch-cracker
lfi-autopwn 3.0 A Perl script to try to gain code execution on a remote server via LFI blackarch-exploitation
lfi-exploiter 1.1 This perl script leverages /proc/self/environ to attempt getting code execution out of a local file inclusion vulnerability.. blackarch-webapp
lfi-fuzzploit 1.1 A simple tool to help in the fuzzing for, finding, and exploiting of local file inclusion vulnerabilities in Linux-based PHP applications. blackarch-webapp
lfi-image-helper 0.8 A simple script to infect images with PHP Backdoors for local file inclusion attacks. blackarch-webapp
lfi-scanner 4.0 This is a simple perl script that enumerates local file inclusion attempts when given a specific target. blackarch-scanner
lfi-sploiter 1.0 This tool helps you exploit LFI (Local File Inclusion) vulnerabilities. Post discovery, simply pass the affected URL and vulnerable parameter to this tool. You can also use this tool to scan a URL for LFI vulnerabilities. blackarch-webapp
lfifreak 21.0c6adef A unique automated LFi Exploiter with Bind/Reverse Shells. blackarch-webapp
lfimap 283.5db3000 Local file inclusion discovery and exploitation tool. blackarch-webapp
lfisuite 85.470e01f Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner. blackarch-scanner
lfle 24.f28592c Recover event log entries from an image by heurisitically looking for record structures. blackarch-forensic
lft 3.91 A layer four traceroute implementing numerous other features. blackarch-recon
lhf 40.51568ee A modular recon tool for pentesting. blackarch-recon
libbde 334.59aa40b A library to access the BitLocker Drive Encryption (BDE) format. blackarch-crypto
libc-database 45.69815cd Database of libc offsets to simplify exploitation. blackarch-reversing
libdisasm 0.23 A disassembler library. blackarch-disassembler
libfvde 207.03f12f5 Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes. blackarch-forensic
libosmocore 4248.2d10ff20 Collection of common code used in various sub-projects inside the Osmocom family of projects. blackarch-radio
libparistraceroute 378.6fb8f48 A library written in C dedicated to active network measurements with examples, such as paris-ping and paris-traceroute. blackarch-networking
libpst 0.6.76 Outlook .pst file converter blackarch-misc
libtins 1305.fe22186 High-level, multiplatform C++ network packet sniffing and crafting library. blackarch-networking
lief 0.13.2 Library to Instrument Executable Formats. blackarch-disassembler
liffy 33.89dd4f8 A Local File Inclusion Exploitation tool. blackarch-webapp
lightbulb 88.9e8d6f3 Python framework for auditing web applications firewalls. blackarch-webapp
ligolo-ng v0.7.2.alpha.r0.g4ac377a An advanced, yet simple, tunneling tool that uses a TUN interface. blackarch-tunnel
limeaide 305.ce3c9b7 Remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host. blackarch-forensic
limelighter 17.d119dc7 A tool for generating fake code signing certificates or signing real ones. blackarch-exploitation
linenum 75.c47f9b2 Scripted Local Linux Enumeration & Privilege Escalation Checks blackarch-scanner
linikatz 48.d9cfdbf Tool to attack AD on UNIX. blackarch-automation
linkedin2username 144.8889f30 OSINT Tool: Generate username lists for companies on LinkedIn. blackarch-social
linkfinder 168.1debac5 Discovers endpoint and their parameters in JavaScript files. blackarch-webapp
linset 9.8746b1f Evil Twin Attack Bash script - An automated WPA/WPA2 hacker. blackarch-automation
linux-exploit-suggester 32.9db2f5a A Perl script that tries to suggest exploits based OS version number. blackarch-recon
linux-exploit-suggester.sh 171.2063aeb Linux privilege escalation auditing tool. blackarch-recon
linux-inject 100.268d4e4 Tool for injecting a shared object into a Linux process. blackarch-backdoor
linux-smart-enumeration 299.eb80976