> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/hacking-tools.md). # Hacking Tools Central catalog of offensive security tools organized by category: web application testing, discovery and enumeration, exploitation and research, OSINT, credentials, Windows tooling, and Linux tooling This section is the main tool catalog for authorized security testing. Everything is organized by category so the sidebar stays clean and tools do not appear as loose, duplicated links. Use it as a map: start from the type of task, open the matching category, and keep methodology or exploitation steps in the dedicated technical pages. ## Main Areas ## Workflow 1. Start with discovery: DNS, web profiling, service enumeration, OSINT, and vulnerability scanning. 2. Move into validation: Burp Suite, SQLMap, protocol-specific tools, exploit research, and manual checks. 3. Use exploitation frameworks only when they match a verified issue and the expected impact is clear. 4. Keep credentials, payloads, privilege escalation helpers, and research references in their dedicated categories. 5. Record exact versions, commands, screenshots, payloads, and evidence so findings can be reproduced later. ## Navigation Guide * Use [Calculators](/hacking-tools/calculators.md) for subnetting, Linux permissions, and cron expression lookup calculators. * Use [Web Application Testing Tools](/hacking-tools/web.md) for Burp Suite, SQLMap, WMAP, fuzzing, profiling, payload references, and WAF material. * Use [Discovery and Enumeration Tools](/hacking-tools/enumeration.md) for Nessus, DNS, Git-Dumper, network services, subdomains, and attack surface mapping. * Use [Exploitation and Research Tools](/hacking-tools/exploitation.md) for Metasploit, Searchsploit, exploit references, vulnerability databases, and research workflows. * Use [Credential and Identity Tools](/hacking-tools/credentials.md) for breach checks, hash lookup, cracking support, default credentials, wordlists, and username resources. * Use [OSINT and Research Tools](/hacking-tools/osint.md) for public-source research, people lookup, breaches, infrastructure, maps, images, social platforms, and moved OSINT methodology. * Use [Windows Tools](/hacking-tools/windows.md) and [Linux Tools](/hacking-tools/linux.md) for local enumeration and privilege escalation support.

:calculator:

Calculators

Practical searchable calculators for subnetting, Linux permission conversion, and cron expression lookup.Calculators

:bug:

Web Application Testing Tools

Web application testing tools and resources for proxy workflows, SQL injection automation, web vulnerability scanning, fuzzing, profiling, payload research, and WAF bypass support.Web Application Testing Tools

:magnifying-glass:

Discovery and Enumeration Tools

Discovery and enumeration tools for DNS, service assessment, vulnerability scanning, exposed Git repositories, subdomains, web profiling, and attack surface mapping.Discovery and Enumeration Tools

:rocket:

Exploitation and Research Tools

Exploitation and research tools for Metasploit, Searchsploit, exploit references, vulnerability databases, bug bounty writeups, and module-driven validation workflows.Exploitation and Research Tools

:key:

Credential and Identity Tools

Credential and identity tooling references for breach checks, password strength review, hash lookup, password cracking, default credentials, wordlists, and username resources.Credential and Identity Tools

:compass:

OSINT and Research Tools

Curated OSINT and research tools for maps, imagery, social platforms, people lookup, breach intelligence, websites, infrastructure monitoring, and OSINT methodology.OSINT and Research Tools

:windows:

Windows Tools

Windows offensive security tooling notes for local enumeration, privilege checks, Active Directory attack path mapping, BloodHound, SharpHound, WinPEAS, PrivescCheck, LOLBAS, PowerUp, Invoke-Obfuscation, Shellter, and post-exploitation validation.Windows Tools

:linux:

Linux Tools

Linux offensive tooling catalog for local enumeration, privilege escalation checks, GTFOBins validation, LinPEAS, LinEnum, Smart Enumeration, kernel CVE research, SUID and sudo review, capabilities, cron jobs, and post-exploitation evidence collection.Linux Tools
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/hacking-tools.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.