01 ^: 204 tags
By tag
active-directory135adcs76privilege-escalation50kerberos48pentest-workflow38cpts37htb34enumeration33hashing32credential-access30ntlm20lateral-movement18web18htb-attack-flow17persistence14pivoting13relay13delegation11sql-injection11tools11post-exploitation9windows9credentials7linux7smb6tunneling6workflow6xss6attacking-common5cpts-prep5linux-it5ad4dfir4exploitation4git4ldap4methodology4mssql4network4port-scanning4rdp4tunneling-pivoting4academy3activedirectory3attack-flow3brute-force3certificates3cracking3cryptography3dns3forensics3ftp3injection3mysql3password-attacks3postexploitation3privesc3smtp3wordpress3acl-abuse2applications2cheatsheet2cli2command-reference2cpts-exam2evil-winrm2flags2git-workflow2gitlab2hashes2htb-academy-attacking-enterprise-networks2htb-attack-flow-foothold2imap2inlanefreight2jenkins2osint2penetration-testing2pop32port-forwarding2powershell2productivity2recon2scanning2services2shares2shells2shellshock2splunk2spraying2terminal2tomcat2tooling2version-control2ads1alternate-data-streams1attacking-enterprise-networks1binary1bloodhound1branching1buffer-overflow1c21coercion1coldfusion1command-injection1commands1credential-reuse1defense1dotnet1dotnetnuke1drupal1efspotato1encryption1esc1file-inclusion1file-transfer1file-transfers1fileupload1filter-bypass1framework1fuzzing1godpotato1graph1htb-academy-8-shells-and-payloads1htb-attack-flow-appendix1htb-attack-flow-reference1htb-attack-flow-stage-001htb-attack-flow-stage-011htb-attack-flow-stage-021htb-attack-flow-stage-031htb-attack-flow-stage-041htb-attack-flow-stage-051htb-attack-flow-stage-061htb-attack-flow-stage-071htb-attack-flow-stage-081htb-attack-flow-stage-091htb-attack-flow-stage-101htb-attack-flow-stage-111htb-attack-flow-trusts1htb-category-offensive1htb-tier-tier-iii1http1identification1iis1incident-response1internal1jj1joomla1juicypotatong1jujutsu1kerberoasting1kill-chain1lfi1ligolo-ng1loot1macos1malware1mark-of-the-web1memory-forensics1network-forensics1network-services1networking1nfs1ntfs1offensive1osticket1pass-the-hash1password-spraying1pcap1permissions1pgp1phishing1potato1powerup1powerview1printspoofer1prtg1pty1recovery1recursion1red-team1registry1responder1restricted-shell1rfi1roguepotato1runas1screenshots1search1seimpersonate1service-enumeration1session-hijacking1ssh1subdomain-takeover1sweetpotato1thick-client1tickets1tls1token-impersonation1tty1undo1vulnerabilities1websecurity1webshell1winrm1
02 ^: 219 tools
By tool
Impacket85PowerShell73Certipy55NetExec55Mimikatz47Rubeus45BloodHound39Evil-WinRM23Nmap19OpenSSL19ldapsearch16Hashcat14Metasploit13Certify12Meterpreter8nmap7faketime6ffuf6msfvenom6Responder6evil-winrm5John5Kerbrute5PowerView5Snaffler5socat5Chisel4curl4Gitleaks4hashcat4Ligolo-ng4SharpHound4bloodyAD3BloodyAD3Burp Suite3chisel / ligolo-ng3CrackMapExec3git3Gobuster3LaZagne3ligolo-ng3mimikatz3mysql / sqsh / sqlcmd3Nuclei3smbclient / smbmap / rpcclient / enum4linux-ng3TruffleHog3BloodHound CE2bloodhound-ce-python2certipy2certutil2chisel2cmd2curl / searchsploit2dig2dig / fierce / subfinder2enum4linux-ng2find2FreeRDP2gobuster / feroxbuster / ffuf2GPG2GTFOBins2iis_shortname_scanner2impacket2John the Ripper2LinPEAS2metasploit2netexec2nxc2openssl2PowerUp2PrintSpoofer2proxychains2pspy2rustscan2RustScan2Shodan2smbclient2smbmap2SQLMap2SSH2tcpdump2TShark2wget2WinPEAS2xfreerdp2xfreerdp / rdesktop2accesschk / PipeList (Sysinternals)1Antak (Nishang)1autobloody1Autopsy1bloodhound-python1burp suite1chmod1chown1Cobalt Strike1Coercer1ConPtyShell1crt.sh1deepce1defaults1dig / host / fierce1dnSpy / de4dot / x64dbg / gdb-peda1dnSpy / JD-GUI / ghidra / gdb-peda1donut1DotNetNuke (DNN)1droopescan1EfsPotato1enum4linux1ettercap / bettercap1EyeWitness1eyewitness / aquatone / httpx1feroxbuster1Feroxbuster1fscan1gcc1GhostPack1GnuPG1GodPotato1grep1hash-identifier1hashid1Hydra1hydra / medusa / crowbar / o365spray1Immunity Debugger1impacket (psexec/smbexec/atexec/ntlmrelayx/mssqlclient/smbserver)1impacket (psexec/smbexec/ntlmrelayx/mssqlclient/smbserver)1impacket-secretsdump / diskshadow / robocopy1Inveigh1jar (WAR packaging)1jj1JuicyPotato1JuicyPotato / PrintSpoofer / GodPotato1JuicyPotatoNG1Kerberos1kerbrute / impacket-GetNPUsers1kubeletctl / kubectl1Laudanum1LaZagne / SessionGopher / SharpChrome1linPEAS1LinPEAS (linpeas.sh / linpeas_linux_amd64) / lse.sh / LinEnum1linux-exploit-suggester1Markdown1Medusa1medusa / hydra / crowbar1Medusa / Hydra / Crowbar1Metasploit (multi/handler, autoroute, ping_sweep)1mona.py1msfconsole1MSSQL sqlcmd / xp_cmdshell1Multiple1MySQL client1nc1Neo4j1netcat1Netcat1netexec (nxc)1netexec (nxc) / crackmapexec1Nikto1nishang1nmap / eyewitness / aquatone / httpx1ntlmrelayx1nxc / crackmapexec1Obsidian1OpenSSH1pktmon1plaso1plink1PowerView / SharpHound / BloodHound1procdump / mimikatz1pspy (pspy64 / pspy32)1pwncat-cs1pyftpdlib1python pty / script / stty1RECmd1Registry Explorer1responder1RoguePotato1rp-shell family (aspx/php/asp/jsp)1rpcclient1rubeus1RustHound-CE1scp1Seatbelt1secretsdump.py1setspn1SharpSploit1showmount / mount1showmount / nfs-common1Sleuth Kit1SMBMap1smbserver1smtp-user-enum / swaks / o365spray1snmpwalk / onesixtyone1socat / netcat / rlwrap1sqlmap1ssh1streams.exe1swaks / smtp-user-enum1swaks / smtp-user-enum / o365spray1SweetPotato1tmux1tshark1umask1updog1urlscan1VirusTotal1Volatility 31weevely1WES-NG / Watson1winPEAS1winPEAS / PowerUp / SharpUp / Seatbelt1winPEAS / PrintSpoofer / linpeas / pspy1Wireshark1wpscan1WPScan1wpscan / droopescan / joomscan1wshx / revx (x-family)1xp_cmdshell1zsh1