Join Free CTF
Get Kali
Blog
Documentation
Documentation Pages
Tools Documentation
Frequently Asked Questions
Known Issues
Community
Community Support
Forums
Discord
Join Newsletter
Mirror Location
Get Involved
Courses
Developers
Git Repositories
Packages
Auto Package Test
Bug Tracker
Kali NetHunter Stats
About
Kali Linux Overview
Press Pack
Wallpapers
Kali Swag Store
Meet The Kali Team
Partnerships
Contact Us
Kali Tools
Tool Documentation
LIGHT
DARK
Didn't find the tool?
Check requested tools
Submit new tool
Categories
Top 100
All tools
:: Source |
:: Package | $ :: Command
Reconnaissance
Host Information
metagoofil
spiderfoot
spiderfoot-cli
Identity Information
email2phonenumber
emailharvester
instaloader
linkedin2username
photon
sherlock
tookie-osint
Network Information
amass
autorecon
dmitry
legion
nmap
zenmap
theHarvester
unicornscan
Network Information: DNS
dnsmap
dnsrecon
dnsenum
massdns
dnstracer
dnswalk
Web Scanning
assetfinder
arjun
dirb
dirbuster
dirsearch
feroxbuster
ffuf
finalrecon
findomain
gobuster
gospider
lbd
parsero
recon-ng
subfinder
sublist3r
uniscan-gui
urlcrazy
uro
wfuzz
wpprobe
Vulnerability Scanning
nmap
zenmap
CAT
gvm-start
heartleech
owasp-mantra-ff
Web Vulnerability Scanning
burpsuite
caido
caido-cli
crlfuzz
davtest
joomscan
nikto
nuclei
paros
skipfish
sstimap
subjack
tinja
wapiti
watobo
wcvs
webscarab
whatweb
wpscan
zaproxy
Bluetooth
bettercap
bluelog
bluesnarfer
btscanner
blueranger
fang
spooftooph
ubertooth-util
WiFi
asleap
bettercap
kismet
sparrow-wifi
wash
Radio Frequency
hackrf_info
gnuradio
gqrx
chirp
rfcat
photon
bettercap
burpsuite
caido
dirb
dirbuster
ffuf
gobuster
legion
maltego
maltego
nmap
recon-ng
zenmap
Resource Development
code-oss
donut
sickle-pdk
wixl
wmic
wmis
pyinstaller
olevba
olefile
afl-fuzz
bed
generic_chunked
generic_listen_tcp
generic_send_tcp
generic_send_udp
sfuzz
msf-nasm_shell
msfvenom
msfpc
shellnoob
clang
clang++
edb
ollydbg
gef
gdb
cstool
ghidra
radare2
rizin
cutter
recstudio
recstudio-cli
apktool
bytecode-viewer
jadx-gui
javasnoop
jd-gui
d2j-dex2jar
pompem
searchsploit
exploitdb-papers
Initial Access
dns-rebind
gophish-start
setoolkit
metasploit-framework
sqlmap
sqlninja
sqlsus
jsql
commix
jboss-linux
jboss-win
Execution
armitage
metasploit-framework
evilgrade
beef-xss-start
xsser
nishang
powersploit
Persistence
laudanum
phpggc
seclists
webacoo
webshells
weevely
backdoor-factory
cymothoa
Privilege Escalation
lynis
metasploit-framework
peass
linpeas
winpeas
unix-privesc-check
bloodyad
Defense Evasion
Pass-the-Hash
crackmapexec
evil-winrm
evil-winrm-py
impacket-scripts
mimikatz
netexec
passing-the-hash
rubeus
smbmap
xfreerdp3
sniffjoke
ftest
fragrouter
macchanger
outguess
steghide
stegosuite
stegsnow
donut
exe2hex
msfvenom
shellter
veil
ccrypt
padbuster
Credential Access
OS Credential Dumping
chntpw
creddump7
mimikatz
rubeus
samdump2
Hash Identification
hashid
hash-identifier
Password Profiling & Wordlists
bopscrk
cewl
crunch
maskgen
policygen
rsmangler
seclists
statsgen
twofi
wordlists
Brute Force
CAT
crackmapexec
crowbar
hydra
hydra-gtk
legba
medusa
ncrack
netexec
patator
sqldict
thc-pptp-bruter
Password Cracking
cmospwd
crackle
fcrackzip
hashcat
john
johnny
ophcrack
ophcrack-cli
rcrack
rcracki_mt
sipcrack
sucrack
truecrack
Unsecured Credentials
gitxray
trufflehog
WiFi Credential Access
aircrack-ng
airgeddon
bully
cowpatty
eapmd5pass
fern-wifi-cracker
freeradius
pixiewps
reaver
wifi-honey
wifiphisher
wifite
Keylogger
xspy
VoIP Credential Access
svcrack
enumiax
NFC
mfcuk
mfoc
mfterm
mifare-classic-format
nfc-list
nfc-mfclassic
Kerberoasting
kerberoast
krbrelayx
responder
cewl
crunch
hashcat
hydra
hydra-gtk
john
medusa
ncrack
ophcrack
wordlists
netexec
Discovery
Network Service Discovery
amass
autorecon
masscan
nmap
zenmap
sctpscan
unicornscan
ike-scan
SSL / TLS
sslscan
sslyze
tlssled
SNMP
snmp-check
braa
onesixtyone
Network Sniffing
above
arpspoof
darkstat
dnschef
driftnet
dsniff
hexinject
netsniff-ng
wireshark
scapy
tcpdump
tcpflow
Remote System Discovery
arping
arpwatch
atk6-thcping6
fierce
fping
hping3
iputils-arping
p0f
Account Discovery
apache-users
smtp-user-enum
Network Share Discovery
crackmapexec
enum4linux
enum4linux-ng
nbtscan
netexec
smbclient
smbmap
Process Discovery
pspy
pspy-binaries
System Network Configuration Discovery
0trace.sh
ass
cdp
intrace
netdiscover
netmask
sara
yersinia
Network Security Appliances
firewalk
tcpreplay
wafw00f
Databases
impacket-mssqlclient
mdb-sql
mysql
oscanner
sidguess
sqlitebrowser
tnscmd10g
SMTP
mxcheck
smtp-user-enum
swaks
Cisco Tools
cge.pl
cisco-ocs
cisco-torch
copy-router-config.pl
merge-router-config.pl
Active Directory
azurehound
bloodhound
bloodhound-python
bloodhound-ce-python
ldeep
sharphound
VoIP
protos-sip
rtpbreak
rtpinsertsound
rtpmixsound
siparmyknife
sipp
sippts
sipsak
svcrash
svmap
svreport
svwar
voiphopper
ohrwurm
amass
bloodhound
masscan
nmap
zenmap
wireshark
tcpdump
hping3
arping
fierce
enum4linux
netdiscover
Lateral Movement
Pass-the-Hash
crackmapexec
evil-winrm
evil-winrm-py
impacket-scripts
mimikatz
netexec
passing-the-hash
rubeus
smbmap
xfreerdp3
crackmapexec
evil-winrm
impacket-smbexec
impacket-psexec
netexec
xfreerdp3
rdesktop
Collection
httrack
ettercap-text-only
ettercap
evilginx2
fiked
fluxion
mitmproxy
mitm6
ssldump
sslsplit
sslsniff
wifipumpkin3
ferret-sidejack
hamster-sidejack
copy-router-config.pl
merge-router-config.pl
Command and Control
Application Layer Protocol
cadaver
crackmapexec
evil-winrm
impacket-scripts
minicom
netexec
smbclient
xfreerdp3
Non-Application Layer Protocol
dbd
ncat
netcat
penelope
powercat
sbd
socat
termineter
Protocol Tunneling
chisel
chisel-common-binaries
dns2tcpc
dns2tcpd
dnscat
iodine-client-start
ligolo-agent
ligolo-proxy
ligolo-mp
ligolo-mp-client
ligolo-ng-common-binaries
miredo
proxychains4
proxytunnel
ptunnel
pwnat
sshuttle
sslh
stunnel4
udptunnel
adaptixclient
adaptixserver
armitage
havoc
hoaxshell
koadic
metasploit-framework
powershell-empire
starkiller-start
villain
Exfiltration
netcat
impacket-smbserver
goshs
raven
Impact
dhcpig
goldeneye
iaxflood
inviteflood
mdk3
rtpflood
siege
slowhttptest
t50
thc-ssl-dos
scapy
Forensics
Digital Forensics
dc3dd
dcfldd
hexwalk
missidentify
readpst
reglookup
regripper
undbx
vinetto
Forensic Carving Tools
ext3grep
ext4magic
extundelete
foremost
magicrescue
myrescue
pasco
photorec
readpe
recoverdm
recoverjpeg
rifiuti
rifiuti2
safecopy
scalpel
scrounge-ntfs
testdisk
Forensic Imaging Tools
affcat
dc3dd
dcfldd
dd_rescue
ewfacquire
guymager
PDF Forensics Tools
pdfid
pdf-parser
Sleuth Kit Suite
autopsy
blkcalc
blkcat
blkls
blkstat
ffind
fls
fsstat
grokevt-addlog
grokevt-builddb
grokevt-findlogs
grokevt-parselog
grokevt-ripdll
hfind
icat
ifind
ils
img_cat
img_stat
istat
jcat
jls
mactime
mmcat
mmls
mmstat
sigfind
sorter
srch_strings
tsk_comparedir
tsk_gettimes
tsk_loaddb
tsk_recover
autopsy
binwalk
binwalk3
bulk_extractor
chkrootkit
foremost
galleta
hashdeep
rkhunter
ssdeep
unhide
xplico-webui-start
yara
Services and Other Tools
Reporting Tools
cherrytree
dradis-start
faraday-start
maltego
obsidian
pipal
recordmydesktop
redeye-start
cutycapt
eyewitness
witnessme
Laboratories
juice-shop-start
dvwa-start
System Services
beef-xss-start
beef-xss-stop
defectdojo-start
defectdojo-stop
dradis-start
dradis-stop
dvwa-start
dvwa-stop
faraday-start
faraday-stop
gophish-start
gophish-stop
gvm-check-setup
gvm-setup
gvm-start
gvm-stop
juice-shop-start
juice-shop-stop
portspoof-start
portspoof-stop
redeye-start
redeye-stop
starkiller-start
starkiller-stop
thehive-start
thehive-stop
xplico-webui-start
xplico-webui-stop
Kali & OffSec Links
exploit-database
kali-bugs
kali-docs
kali-forums
kali-nethunter
kali-tools
kali-www
offsec-training
vulnhub
arsenal-ng
code-oss
gemini-cli
hexstrike_server
kali-tweaks
pwsh
root-terminal
snapper-gui
shell-gpt
tailscale