Awesome Pentest

Overview

Awesome Pentest provides a comprehensive collection of penetration testing resources, tools, and offensive security materials for ethical hackers and security professionals.

Network Tools

Reconnaissance

• Nmap - Network discovery and security auditing
• Masscan - Fast TCP port scanner
• Shodan - Search engine for Internet-connected devices
• theHarvester - Email and subdomain gathering

Vulnerability Scanning

• Nessus - Vulnerability scanner
• OpenVAS - Open source vulnerability scanner
• Nikto - Web server scanner

Web Application Testing

Proxies & Testing Tools

• Burp Suite - Web vulnerability scanner
• OWASP ZAP - Web app security scanner
• SQLMap - Automatic SQL injection tool
• XSStrike - Advanced XSS detection suite

Web Frameworks

• W3af - Web application attack framework
• Arachni - Web application security scanner

Exploitation Frameworks

• Metasploit - Penetration testing framework
• Empire - PowerShell post-exploitation
• Cobalt Strike - Threat emulation software
• Social-Engineer Toolkit - Social engineering attacks

Wireless Testing

• Aircrack-ng - WiFi security auditing
• Kismet - Wireless network detector
• Reaver - WPS attack tool
• Wifite - Automated wireless auditor

Password Tools

• John the Ripper - Password cracker
• Hashcat - Advanced password recovery
• Hydra - Network login cracker
• CeWL - Custom wordlist generator

Forensics

• Autopsy - Digital forensics platform
• Volatility - Memory forensics framework
• Sleuth Kit - Collection of forensic tools
• Wireshark - Network protocol analyzer

CTF & Learning

Platforms

• HackTheBox - Penetration testing labs
• TryHackMe - Learn cybersecurity
• PicoCTF - Beginner CTF
• OverTheWire - Wargames for learning

Vulnerable Applications

• DVWA - Damn Vulnerable Web Application
• WebGoat - OWASP vulnerable application
• bWAPP - Buggy web application
• Metasploitable - Vulnerable Linux distribution

Mobile Security

• MobSF - Mobile Security Framework
• Frida - Dynamic instrumentation toolkit
• Drozer - Android security assessment
• objection - Runtime mobile exploration

Books & Resources

• The Web Application Hacker's Handbook
• Penetration Testing: A Hands-On Introduction
• OWASP Testing Guide
• PTES Technical Guidelines

Features

• Comprehensive tool collection
• Network and application testing
• Exploitation frameworks
• Forensics capabilities
• Learning resources
• CTF platforms

Use Cases

• Penetration testing engagements
• Security audits and assessments
• Bug bounty hunting
• Red team operations
• Security training and education
• CTF competitions

Pricing

Most tools are free and open source. Commercial tools:

• Burp Suite Pro: $449/year
• Nessus Professional: $4,000+/year
• Cobalt Strike: $3,500/user/year