hacker-roadmap/README.md

# Hacker Roadmap

This repository is a summary of hacking tools to practice ethical hacking, pen testing and web security. Most of these tools are UNIX compatible and MIT licensed.

## Tools by category

#### :male_detective: Information Gathering

Information Gathering tools allows you to collect host metadata about services and users. Check informations about a domain, IP address, phone number or an email address.

- [Th3inspector](https://github.com/Moham3dRiahi/Th3inspector) **Perl** | `Linux/Windows/MacOS` | All in one tool for Information Gathering written in Perl.
- [Crips](https://github.com/Manisso/Crips) **Python** | `Linux/Android` | IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

#### :lock: Password Attacks

Crack passwords and create wordlists.

...

#### :globe_with_meridians: Wireless Testing

Used for intrusion detection and wifi attacks.

- [Aircrack](https://github.com/aircrack-ng/aircrack-ng) **C** | `Linux/Windows/MacOS` | WiFi security auditing tools suite.

#### :wrench: Exploitation Tools

Acesss systems and data with service-oriented exploits.

- [SQLmap](https://github.com/sqlmapproject/sqlmap) **Python** | `Linux/Windows/MacOS` | Automatic SQL injection and database takeover tool.
- [XSStrike](https://github.com/UltimateHackers/XSStrike) **Python** | `Linux/Windows/MacOS` | Advanced XSS detection and exploitation suite.

#### :busts_in_silhouette: Sniffing & Spoofing

Listen to network traffic or fake a network entity.

...

#### :rocket: Web Hacking

Exploit popular CMSs that are hosted online.

- [WPScan](https://github.com/wpscanteam/wpscan) **Ruby** | `Linux/Windows/MacOS` | WPScan is a black box WordPress vulnerability scanner.
- [Droopescan](https://github.com/droope/droopescan) **Python** | `Linux/Windows/MacOS` | A plugin-based scanner to identify issues with several CMSs, mainly Drupal & Silverstripe.
- [Joomscan](https://github.com/rezasp/joomscan) **Perl** | `Linux/Windows/MacOS` | Joomla Vulnerability Scanner.

#### :zap: Private Web Hacking

Access files and databases.

...

#### :tada: Post Exploitation

Exploits for after you have already gained access.

...

#### :package: Frameworks

Frameworks are packs of pen testing tools with custom shell navigation and documentation.

- [Metasploit](https://github.com/rapid7/metasploit-framework) **Ruby** | `Linux/Windows/MacOS` | A penetration testing framework for ethical hackers.
- [fsociety](https://github.com/Manisso/fsociety) **Python** | `Linux/Windows/MacOS` | fsociety Hacking Tools Pack – A Penetration Testing Framework.
- [cSploit](https://github.com/cSploit/android) **Java** | `Android` | The most complete and advanced IT security professional toolkit on Android.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
+								# Hacker Roadmap
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								This repository is a summary of hacking tools to practice ethical hacking, pen testing and web security. Most of these tools are UNIX compatible and MIT licensed.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								## Tools by category
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :male_detective: Information Gathering
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Information Gathering tools allows you to collect host metadata about services and users. Check informations about a domain, IP address, phone number or an email address.
-												XSStrike exploitation tool

											
										
										
											2018-04-02 13:37:46 +00:00
+								- [Th3inspector](https://github.com/Moham3dRiahi/Th3inspector) **Perl** | `Linux/Windows/MacOS` | All in one tool for Information Gathering written in Perl.
 								- [Crips](https://github.com/Manisso/Crips) **Python** | `Linux/Android` | IP Tools To quickly get information about IP Address's, Web Pages and DNS records.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :lock: Password Attacks
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Crack passwords and create wordlists.
 								...
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :globe_with_meridians: Wireless Testing
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Used for intrusion detection and wifi attacks.
-												Aircrack WiFi hacking tool
											
										
										
											2018-04-02 14:13:56 +00:00
+								- [Aircrack](https://github.com/aircrack-ng/aircrack-ng) **C** | `Linux/Windows/MacOS` | WiFi security auditing tools suite.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :wrench: Exploitation Tools
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Acesss systems and data with service-oriented exploits.
-												SQLmap exploitation tool
											
										
										
											2018-04-02 13:40:18 +00:00
+								- [SQLmap](https://github.com/sqlmapproject/sqlmap) **Python** | `Linux/Windows/MacOS` | Automatic SQL injection and database takeover tool.
-												XSStrike exploitation tool

											
										
										
											2018-04-02 13:37:46 +00:00
+								- [XSStrike](https://github.com/UltimateHackers/XSStrike) **Python** | `Linux/Windows/MacOS` | Advanced XSS detection and exploitation suite.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :busts_in_silhouette: Sniffing & Spoofing
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Listen to network traffic or fake a network entity.
 								...
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :rocket: Web Hacking
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Exploit popular CMSs that are hosted online.
-												WPScan tool
											
										
										
											2018-04-02 14:15:27 +00:00
+								- [WPScan](https://github.com/wpscanteam/wpscan) **Ruby** | `Linux/Windows/MacOS` | WPScan is a black box WordPress vulnerability scanner.
-												Droopescan & Joomscan tools
											
										
										
											2018-04-02 14:20:34 +00:00
+								- [Droopescan](https://github.com/droope/droopescan) **Python** | `Linux/Windows/MacOS` | A plugin-based scanner to identify issues with several CMSs, mainly Drupal & Silverstripe.
 								- [Joomscan](https://github.com/rezasp/joomscan) **Perl** | `Linux/Windows/MacOS` | Joomla Vulnerability Scanner.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :zap: Private Web Hacking
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Access files and databases.
 								...
-												:sparkles: Adding emoji to summary
											
										
										
											2018-04-02 12:29:48 +00:00
+								#### :tada: Post Exploitation
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
 								Exploits for after you have already gained access.
 								...
-												Frameworks category
											
										
										
											2018-04-02 13:05:39 +00:00
+								#### :package: Frameworks
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												Framework category
											
										
										
											2018-04-02 12:31:00 +00:00
+								Frameworks are packs of pen testing tools with custom shell navigation and documentation.
-												Initial commit

											
										
										
											2018-04-02 12:22:02 +00:00
-												Github pages Documentation

											
										
										
											2018-04-02 14:05:12 +00:00
+								- [Metasploit](https://github.com/rapid7/metasploit-framework) **Ruby** | `Linux/Windows/MacOS` | A penetration testing framework for ethical hackers.
-												fsociety tool compatible OSs
											
										
										
											2018-04-02 14:30:11 +00:00
+								- [fsociety](https://github.com/Manisso/fsociety) **Python** | `Linux/Windows/MacOS` | fsociety Hacking Tools Pack – A Penetration Testing Framework.
-												Aircrack WiFi hacking tool
											
										
										
											2018-04-02 14:13:56 +00:00
+								- [cSploit](https://github.com/cSploit/android) **Java** | `Android` | The most complete and advanced IT security professional toolkit on Android.