Self-hosted blind XSS hunter via Docker. Deploy xsshunter‑express in five minutes to capture stealthy XSS payloads with screenshots, DOM dumps, and full context.
Hacking Tools
Hacking Tools are pieces of software or programs created to help you with hacking or that users can utilise for hacking purposes.
Examples include Wep0ff – Wifi Cracking Tool, Brutus Password Cracker, wwwhack Web Hacking, THC-Hydra Network Login Hacking and pwdump/fgdump Windows Password Dumping Tools.
You can find the latest and best hacking tools below and more on Wikipedia.
Script Kiddie Hacking Tools
There are various tools that are classified as too easy to use, or too automated and these fall into the category of Script Kiddie Tools. These are people who just follow instructions from a manual or tutorial without really understanding the technology or process happening.
Examples of these tools would mainly be password cracking tools like Cain and Abel Password Cracker, Brutus Password Cracker and John the Ripper for Password Cracking.
BrainDamage – Payload Generator and Encrypted Shell Stager for Red Teams
Generate and stage encrypted payloads with BrainDamage, a flexible toolkit for red teamers focused on stealth, staging, and remote command delivery.
Argus – Ultimate Reconnaissance Toolkit for Offensive Recon Operations
Argus reconnaissance toolkit simplifies offensive recon with modular OSINT, DNS, port scan, SSL, and leak detection in one tool.
evilreplay – Real-Time Browser Session Hijack Without Cookie Theft
evilreplay enables real‑time browser session hijack via XSS without cookie theft, empowering red teamers with interactive post‑exploitation control
PsMapExec – PowerShell Command Mapping for Lateral Movement
PsMapExec is a new PowerShell-based enumeration and lateral movement tool for red teams. Ideal for WinRM and SMB ops during internal engagements.
Force Push Scanner – Hunt GitHub Dangling Commits for Leaked Secrets
Force Push Scanner hunts leaked secrets in GitHub force‑push events, enabling red teams to find exposed credentials in ephemeral commits.
Caracal – Rust eBPF Rootkit for Stealthy Post-Exploitation
Caracal is a Rust-based eBPF rootkit that hides BPF programs, maps, and processes, ideal for stealthy post-exploitation and red team operations.
OnionC2 – Tor Powered Rust Command and Control Framework
OnionC2 is a Tor-powered C2 framework with a Rust agent and Go server, designed for secure, anonymized red team operations with Windows persistence and stealth.
Sububy – A Modular Ruby Suite for Subdomain Enumeration
Sububy is a modular Ruby-based subdomain enumeration tool for OSINT, red teaming, and bug bounty reconnaissance. Includes cert, brute, API, and screenshot modules.
Bantam – Advanced PHP Backdoor Management Tool For Post Exploitation
Bantam is a lightweight post-exploitation utility written in C# that includes advanced payload generation and obfuscation