🛠️ Kostenlose Tools
Sicherheitstools für Bildung und autorisierte Tests
⚠️ Rechtlicher Hinweis
Die auf dieser Website bereitgestellten Tools dienen ausschliesslich zu Bildungszwecken und autorisierten Sicherheitstests in kontrollierten Lab-Umgebungen. Mit dem Herunterladen oder der Nutzung eines Tools bestätigen Sie, dass Sie eine ausdrückliche schriftliche Genehmigung zum Testen des Zielsystems besitzen. Die unbefugte Nutzung ist illegal und kann strafrechtliche Konsequenzen haben. Der Autor übernimmt keine Verantwortung.
No tools found matching your search.
🔧 Interne Tools
Cognix Any Converter
Utility
My IP Checker
Network
Random Password Generator Pro
Security
Advanced Infrastructure Scanner
Pentest
Web Application Scanner
Pentest
Get System and All Privs
PowerShell
Web Method Inspector
Web
Yara Pro Rule Generator
DFIR
Wifi Password Viewer
Network
BMI Calculator
Utility
Webpage Link Parser
Web
Cipher Decode
Crypto
🌐 Externe Tools
🔺 Enumeration & Privilege Escalation
WinPEAS ↗
Automated Windows privilege escalation enumeration script
LinPEAS ↗
Automated Linux privilege escalation enumeration script
Seatbelt ↗
Windows host enumeration and security checks for post-exploitation
PowerUp ↗
PowerShell script for Windows privilege escalation checks
SharpUp ↗
C# port of PowerUp for Windows privilege escalation enumeration
JAWS ↗
PowerShell script for Windows enumeration and privilege escalation
PrivescCheck ↗
PowerShell script to enumerate common Windows privesc vectors
Watson ↗
Enumerate missing patches for local privilege escalation vulnerabilities
WES-NG ↗
Windows Exploit Suggester Next Generation — identifies missing patches
Sherlock ↗
PowerShell script to find missing patches for privilege escalation
Windows Exploit Suggester ↗
Identifies missing patches and suggests exploits based on systeminfo
EnableAllTokenPrivs ↗
PowerShell script to enable all available token privileges
psgetsys (GetSystem) ↗
PowerShell parent process spoofing for SYSTEM shell via SeDebugPrivilege
accesschk ↗
Sysinternals tool to check object permissions — services, files, registry
🥔 Potato Attacks — SeImpersonate
GodPotato ↗
Universal SeImpersonate privilege escalation via DCOM/RPC
PrintSpoofer ↗
SeImpersonate exploit abusing the Print Spooler service
JuicyPotato ↗
SeImpersonate/SeAssignPrimaryToken exploit via DCOM (pre-1809)
RoguePotato ↗
SeImpersonate privilege escalation for Windows Server 2019+
SweetPotato ↗
Collection of Potato exploits bundled into one tool
incognito ↗
Token impersonation and manipulation for privilege escalation
🔐 Credential Dumping & Password Recovery
Mimikatz ↗
Credential dumping tool for Windows authentication secrets
pypykatz ↗
Python implementation of Mimikatz for offline LSASS dump parsing
LaZagne ↗
Password recovery tool for locally stored credentials
SessionGopher ↗
Extracts saved session credentials from WinSCP, PuTTY, RDP and more
lsassy ↗
Remote LSASS dump and credential extraction via various methods
nanodump ↗
Stealthy LSASS minidump with AV/EDR evasion techniques
secretsdump ↗
Impacket tool to dump SAM, LSA secrets and NTDS.dit remotely
HiveNightmare ↗
CVE-2021-36934 — read SAM/SYSTEM/SECURITY hives as low-priv user
Hashcat ↗
Advanced GPU-based password hash cracking tool
John the Ripper ↗
Classic CPU-based password hash cracking tool
Responder ↗
LLMNR/NBT-NS poisoner for credential capture on local networks
Inveigh ↗
PowerShell LLMNR/SMB credential capture and relay tool
🏛️ Active Directory
BloodHound ↗
Active Directory attack path visualization and analysis
SharpHound ↗
BloodHound data collector — enumerates AD objects and relationships
PowerView ↗
PowerShell-based AD enumeration and situational awareness tool
Snaffler ↗
Finds credentials and sensitive files on Windows file shares
ldapdomaindump ↗
Dumps AD information via LDAP into readable HTML/JSON/CSV files
windapsearch ↗
Python script for AD enumeration via unauthenticated LDAP queries
ADRecon ↗
PowerShell AD reconnaissance tool with Excel report output
PingCastle ↗
AD security assessment and risk scoring tool
mssqlclient (Impacket) ↗
Python toolkit for network protocols including MSSQL client
PowerUpSQL ↗
PowerShell toolkit for MSSQL server enumeration and privilege escalation
🎫 Kerberos Attacks
Rubeus ↗
C# Kerberos toolset — AS-REP roasting, Kerberoasting, ticket manipulation
kerbrute ↗
Fast Kerberos username enumeration and password spraying tool
GetUserSPNs (Impacket) ↗
Kerberoasting — requests TGS tickets for SPN accounts
GetNPUsers (Impacket) ↗
AS-REP Roasting — get hashes for accounts without pre-auth
ticketer (Impacket) ↗
Creates Golden and Silver Kerberos tickets for persistence
targetedKerberoast ↗
Targeted Kerberoasting by abusing GenericWrite/GenericAll ACLs
KrbRelay ↗
Kerberos relay attacks for local privilege escalation via DCOM
↔️ Lateral Movement
Evil-WinRM ↗
WinRM shell for pentesting with built-in upload/download and scripts
CrackMapExec ↗
Swiss army knife for SMB/WinRM/LDAP lateral movement and spraying
psexec (Impacket) ↗
Remote code execution via SMB named pipes as SYSTEM
wmiexec (Impacket) ↗
Semi-interactive shell via WMI — no service installation required
smbexec (Impacket) ↗
Remote command execution via SMB service creation
xfreerdp ↗
Cross-platform RDP client for remote desktop connections
🪝 DLL Hijacking
Process Monitor (ProcMon) ↗
Sysinternals — monitor file system, registry and process activity in real time
Robber ↗
Finds executables vulnerable to DLL hijacking via PATH analysis
DLLSpy ↗
CyberArk tool to detect DLL hijacking vulnerabilities in running processes
hollows_hunter ↗
Scans running processes for injected code and hollowed modules
pe-sieve ↗
Scans a process for replaced or injected PE modules
📡 Network Scanning & Discovery
Nmap ↗
Industry-standard network scanner for host discovery and port scanning
Masscan ↗
Fastest TCP port scanner — scans the entire internet in under 6 minutes
RustScan ↗
Modern port scanner — finds open ports in seconds, hands off to Nmap
nbtscan ↗
Scans networks for NetBIOS name information
netdiscover ↗
Active/passive ARP reconnaissance tool for local networks
arp-scan ↗
Send ARP requests to enumerate hosts on local network segments
👻 AV Evasion / OPSEC
amsi.fail ↗
Online generator for AMSI bypass snippets — obfuscated PowerShell
Invoke-Obfuscation ↗
PowerShell script obfuscation framework with multiple techniques
DefenderCheck ↗
Identifies which bytes in a binary trigger Windows Defender
Donut ↗
Converts PE/DLL/.NET to position-independent shellcode for injection
Veil ↗
Payload generator framework for AV-evading executables
ScareCrow ↗
EDR-evading payload framework using side-loading and code signing
Freeze ↗
Payload toolkit for bypassing EDR solutions using suspended processes
🐧 Linux Privilege Escalation
LinPEAS ↗
Automated Linux/Unix privilege escalation enumeration script
LinEnum ↗
Linux enumeration and privilege escalation checks shell script
linux-exploit-suggester ↗
Suggests kernel exploits based on current kernel version
linux-exploit-suggester-2 ↗
Next-generation Linux kernel exploit suggester in Perl
pspy ↗
Monitor Linux processes without root — spot cron jobs and scripts
GTFOBins ↗
Curated list of Unix binaries that can bypass local security restrictions
sudo_killer ↗
Tool to identify and exploit sudo misconfigurations
unix-privesc-check ↗
Shell script to check for misconfigurations on Unix systems
🕹️ Post-Exploitation / C2 Frameworks
Metasploit Framework ↗
The industry-standard exploitation and post-exploitation framework
Sliver ↗
BishopFox open-source C2 framework with mTLS/WireGuard/HTTP transport
Havoc ↗
Modern C2 framework with evasion-focused Windows agent (Demon)
Covenant ↗
.NET-based collaborative C2 framework with web UI
Empire ↗
Post-exploitation framework with PowerShell, Python and C# agents
Mythic ↗
Modular C2 framework with Docker-based agents and web interface
🔬 Forensics & Utilities
Eric Zimmerman's Forensic Tools ↗
Collection of forensic tools for Windows artifact analysis
Sysinternals Suite ↗
Microsoft toolkit for Windows system administration and analysis
HxD Hex Editor ↗
Free hex editor for binary file analysis
MalwareBazaar ↗
Malware sample sharing and threat intelligence platform
YARA Rule Writing ↗
Documentation for writing YARA malware detection rules
SQLite Browser ↗
Visual tool to create and edit SQLite databases
XAMPP ↗
Local Apache, MySQL and PHP development environment
Reverse Shell Generator ↗
Online generator for reverse shell one-liners
MXToolbox ↗
DNS, MX and network diagnostic tools
LastPass Password Generator ↗
Online secure password generator
CyberChef ↗
GCHQ web app for encoding, decoding, encryption and data analysis
VirusTotal ↗
Online file and URL analysis against 70+ AV engines
ANY.RUN ↗
Interactive online malware sandbox for Windows and Linux samples