Must-Haves

A curated collection of essential tools and resources for Windows and general pentesting. These tools form the foundation of a well-equipped ethical hacking toolkit.

Windows Pentesting Essentials

PowerShell Empire

Post-Exploitation

Post-exploitation framework for Windows environments with extensive module support.

Mimikatz

Credential Access

Credential extraction tool for Windows authentication mechanisms.

BloodHound

Enumeration

Active Directory attack path visualization and enumeration tool.

Rubeus

Windows

Kerberos abuse toolkit for Windows domain environments.

SharpHound

Enumeration

Data collector for BloodHound, gathers information about Active Directory.

WinPEAS

Privilege Escalation

Windows privilege escalation enumeration script with comprehensive checks.

Linux Tools

LinPEAS

Privilege Escalation

Linux privilege escalation enumeration script with automated checks.

GTFOBins

Reference

Curated list of Unix binaries that can be exploited for privilege escalation.

Linux Exploit Suggester

Privilege Escalation

Tool to identify potential privilege escalation vectors on Linux systems.

pspy

Enumeration

Monitor Linux processes without root permissions for privilege escalation.

Browser Extensions

FoxyProxy

Web Testing

Advanced proxy management tool for browser-based testing workflows.

Wappalyzer

Enumeration

Identify web technologies and frameworks used by target applications.

Cookie Editor

Web Testing

View and modify browser cookies for session manipulation testing.

User-Agent Switcher

Web Testing

Change browser user agent strings for testing different client scenarios.

Useful Cheat Sheets

PayloadsAllTheThings

Reference

Comprehensive collection of payloads and bypass techniques for various vulnerabilities.

HackTricks

Reference

Extensive documentation covering pentesting methodologies and techniques.

OSCP Cheat Sheet

Reference

Quick reference guide for common enumeration and exploitation commands.

Reverse Shell Cheat Sheet

Reference

Collection of reverse shell payloads for various programming languages.