Useful URLs for Pentesting

[Man]

Anonymously Hiding Tools
Anonmously Surf (https://github.com/Und3rf10w/kali-anonsurf)
Multitor (https://github.com/trimstray/multitor)

Information gathering tools
Network Map (nmap) (https://github.com/nmap/nmap)
Dracnmap (https://github.com/Screetsec/Dracnmap)
headersfire_ru (https://github.com/Kelll31/headersfire_ru)

Port scanning
Host to IP
Xerosploit (https://github.com/LionSec/xerosploit)
RED HAWK (All In One Scanning) (https://github.com/Tuhinshubhra/RED_HAWK)
ReconSpider(For All Scanning) (https://github.com/bhavsec/reconspider)
IsItDown (Check Website Down/Up) (https://www.isitdownrightnow.com/)
Infoga - Email OSINT (https://github.com/m4ll0k/Infoga)
ReconDog (https://github.com/s0md3v/ReconDog)
Striker (https://github.com/s0md3v/Striker)
SecretFinder (like API & etc) (https://github.com/m4ll0k/SecretFinder)
Find Info Using Shodan (https://www.shodan.io/)
Port Scanner - rang3r (Python 2.7) (https://github.com/floriankunushevci/rang3r)
Port Scanner - Ranger Reloaded (Python 3+) (https://github.com/joeyagreco/ranger-reloaded)
Port-scaner - threader3000 (python 3+) (https://github.com/dievus/threader3000) <- мой выбор
Breacher (https://github.com/s0md3v/Breacher)

Wordlist Generator
Cupp (https://github.com/Mebus/cupp.git)
WordlistCreator (https://github.com/Z4nzu/wlcreator)
Goblin WordGenerator (https://github.com/UndeadSec/GoblinWordGenerator.git)
Password list (1.4 Billion Clear Text Password) (https://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got)
Weakpass (https://www.weakpass.com/)

SQL Injection Tools
Sqlmap tool (https://github.com/sqlmapproject/sqlmap)
NoSqlMap (https://github.com/codingo/NoSQLMap)
Damn Small SQLi Scanner (https://github.com/stamparm/DSSS)
Explo (https://github.com/dtag-dev-sec/explo)
Blisqy - Exploit Time-based blind-SQL injection (https://github.com/JohnTroony/Blisqy)
Leviathan - Wide Range Mass Audit Toolkit (https://github.com/leviathan-framework/leviathan)
SQLScan (https://github.com/Cvar1984/sqlscan)

Phishing attack tools
Setoolkit (https://github.com/trustedsec/social-engineer-toolkit)
SocialFish (https://github.com/UndeadSec/SocialFish)
Evilginx2 (https://github.com/kgretzky/evilginx2)
I-See_You(Get Location using phishing attack) (https://github.com/Viralmaniar/I-See-You)
SayCheese (Grab target's Webcam Shots) (https://github.com/hangetzzu/saycheese)
QR Code Jacking (https://github.com/cryptedwolf/ohmyqr)
BlackPhish (https://github.com/iinc0gnit0/BlackPhish)

Web Attack tools
Web2Attack (https://github.com/santatic/web2attack)
Skipfish (https://github.com/spinkham/skipfish)
SubScanPy (https://github.com/Kelll31/SubScanPy)
CheckURL (https://github.com/UndeadSec/checkURL)
Blazy(Also Find ClickJacking) (https://github.com/UltimateHackers/Blazy)
Dirb (https://gitlab.com/kalilinux/packages/dirb)

Post exploitation tools
Vegile - Ghost In The Shell (https://github.com/Screetsec/Vegile)
Chrome Keylogger (https://github.com/UndeadSec/HeraKeylogger)

Forensic tools
Autopsy (https://github.com/sleuthkit/autopsy)
Wireshark (https://github.com/search?q=wireshark+&type=repositories)
Bulk extractor (https://github.com/simsong/bulk_extractor)
Disk Clone and ISO Image Acquire (https://guymager.sourceforge.io/)
Toolsley (https://www.toolsley.com/)

Payload creation tools
The FatRat (https://github.com/Screetsec/TheFatRat)
Brutal (https://github.com/Screetsec/Brutal)
Stitch (https://github.com/nathanlopez/Stitch)
MSFvenom Payload Creator (https://github.com/g0tmi1k/msfpc)
Venom Shellcode Generator (https://github.com/r00t-3xp10it/venom)
Spycam (https://github.com/indexnotfound404/spycam)
Mob-Droid (https://github.com/kinghacker0/Mob-Droid)
Enigma (https://github.com/UndeadSec/Enigma)

Exploit framework
RouterSploit (https://github.com/threat9/routersploit)
WebSploit (https://github.com/The404Hacking/websploit)
Commix (https://github.com/commixproject/commix)
Web2Attack (https://github.com/santatic/web2attack)

Reverse engineering tools
Androguard (https://github.com/androguard/androguard)
Apk2Gold (https://github.com/lxdvs/apk2gold)
JadX (https://github.com/skylot/jadx)
Ghidra (https://github.com/******************************alSecurityAgency/ghidra)

DDOS Attack Tools
SlowLoris (https://github.com/gkbrk/slowloris)
Asyncrone | Multifunction SYN Flood DDoS Weapon (https://github.com/fatihsnsy/aSYNcrone)
UFOnet (https://github.com/epsylon/ufonet)
GoldenEye (https://github.com/jseidl/GoldenEye)
Stitch (https://github.com/nathanlopez/Stitch)
Pyshell (https://github.com/knassar702/pyshell)

XSS Attack Tools
DalFox(Finder of XSS) (https://github.com/hahwul/dalfox)
XSS Payload Generator (https://github.com/capture0x/XSS-LOADER.git)
Extended XSS Searcher and Finder (https://github.com/Damian89/extended-xss-search)
XSpear (https://github.com/hahwul/XSpear)
XSSCon (https://github.com/menkrep1337/XSSCon)
XanXSS (https://github.com/Ekultek/XanXSS)
Advanced XSS Detection Suite (https://github.com/UltimateHackers/XSStrike)
RVuln (https://github.com/iinc0gnit0/RVuln)
Cyclops (https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)

Steganograhy tools
SteganoHide (https://github.com/GH0STH4CKER/SteganoHide)
StegoCracker (https://github.com/W1LDN16H7/StegoCracker)

Other tools
SocialMedia Bruteforce
Instagram Attack (https://github.com/chinoogawa/instaBrute)
AllinOne SocialMedia Attack (https://github.com/Matrix07ksa/Brute_Force)
Facebook Attack (https://github.com/Matrix07ksa/Brute_Force)
Application Checker (https://github.com/jakuta-tech/underhanded)

Android Hacking tools
Keydroid (https://github.com/F4dl0/keydroid)
MySMS (https://github.com/papusingh2sms/mysms)
Lockphish (Grab target LOCK PIN) (https://github.com/JasonJerry/lockphish)
DroidCam (Capture Image) (https://github.com/kinghacker0/WishFish)
EvilApp (Hijack Session) (https://github.com/crypticterminal/EvilApp)
HatCloud(Bypass CloudFlare for IP) (https://github.com/HatBashBR/HatCloud)

IDN Homograph Attack
EvilURL (https://github.com/UndeadSec/EvilURL)

Email Verify tools
Knockmail (https://github.com/4w4k3/KnockMail)

Hash cracking tools
Hash Buster (https://github.com/s0md3v/Hash-Buster)
CyberCheef (https://cyberchef.org/)
Hashes (https://hashes.com/en/decrypt/hash)

SocialMedia Finder
Find SocialMedia By Facial Recognation System (https://github.com/Greenwolf/social_mapper)
Sherlock (https://github.com/sherlock-project/sherlock)
SocialScan | Username or Email (https://github.com/iojw/socialscan)

Payload Injector
Debinject (https://github.com/UndeadSec/Debinject)
Pixload (https://github.com/chinarulezzz/pixload)

Web crawling
Gospider (https://github.com/jaeles-project/gospider)