# Penetration Testing: Tools and Resources

gophish - Open-Source Phishing Toolkit
AdvPhishing - This is Advance Phishing Tool! OTP PHISHING
SocialFish - Educational Phishing Tool & Information Collector
Zphisher *An automated phishing tool with 30+ templates. This Tool is made for educational purposes only! The author will not be responsible for any misuse of this toolkit.
Nexphisher *Advanced Phishing tool for Linux & Termux### Vulnerability Analysis

httpX *httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Struts-Scan *Struts2 vulnerability detection and utilization tools
Nikto *Nikto is an Open Source (GPL) web server scanner that performs comprehensive tests against web servers for multiple items
W3af *Web application attack and audit framework, the open source web vulnerability scanner
Openvas *The world's most advanced Open Source vulnerability scanner and manager
Openvas Docker
Archery - Open Source Vulnerability Assessment and Management helps developers and pentesters perform scans and manage vulnerabilities
Taipan - Web application vulnerability scanner
Arachni - Web Application Security Scanner Framework
Nuclei - Fast and customizable vulnerability scanner based on simple YAML-based DSL.
Xray - A passive-vulnerability-scanner Tool.
Super-Xray - Web Vulnerability Scanner XRAY GUI Starter
SiteScan - All-in-One Website Information Gathering Tools for pentest.
Banli - High-risk asset identification and high-risk vulnerability scanner.
vscan - Open Source Vulnerability Scanner.
Wapiti - Web vulnerability scanner written in Python3.
Scaninfo - Fast scan for red tools.
osv-scanner - Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Afrog - A Vulnerability Scanning Tools For Penetration Testing
OpalOPC - A vulnerability and misconfiguration scanner for OPC UA applications

Clever malvertising attack uses Punycode to look like KeePass's official website - Clever malvertising attack uses Punycode to look like KeePass's official website

10 Cybersecurity Startups To Watch From Black Hat 2023 - 10 Cybersecurity Startups To Watch From Black Hat 2023

# Penetration Testing: Resources

PTF - Pentest Tools Framework - A framework for penetration testing tools.

Vulscan - Advanced Vulnerability Scanning with Nmap NSE - A tool for advanced vulnerability scanning using Nmap NSE.

Network Share Permissions PowerHuntShares - Information about network share permissions and PowerHuntShares.

Offensive Security - Macro Weaponization - Resources related to macro weaponization in penetration testing.

OpenCTI - Cyber Threat Intelligence Platform - Information about the OpenCTI Cyber Threat Intelligence Platform.

P&CT - Securing OT Systems Against Cyber Attacks - Information about securing OT systems against cyber attacks.

US-CERT CISA - ICS Advisories - ICS advisories from US-CERT CISA.

Overlord - Red Teaming Tool - An article on the Overlord tool for red teaming.