InSkillSecArsenal

Arsenal

62 Werkzeuge, die die eigentliche Arbeit erledigen, geordnet nach der Phase, in der man sie braucht. Jeder Eintrag erklärt den Zweck und verlinkt den passenden Kurs. Zum Kurskatalog

Aufklärung

Das Ziel kartieren, ohne es zu berühren: Domains, Personen, exponierte Assets.

8 Werkzeuge

Amass

Deep subdomain enumeration from dozens of passive sources at once.

Gelehrt in OSINT Automation

Subfinder

Fast passive subdomain discovery, built for large scopes.

Gelehrt in OSINT Automation

theHarvester

Collects e-mails, names and hosts from public search engines.

Gelehrt in OSINT Automation

Recon-ng

Modular OSINT framework that stores findings in a workspace database.

Gelehrt in OSINT Automation

Maltego

Graphs relationships between people, domains and infrastructure.

Gelehrt in OSINT Automation

Shodan

Search engine for exposed devices, banners and forgotten services.

Gelehrt in OSINT Automation

SpiderFoot

Automates 200+ OSINT modules against a single target.

Gelehrt in OSINT Automation

Social-Engineer Toolkit

Builds phishing pages and pretexts for authorised awareness tests.

Gelehrt in Social Engineering

Scanning und Enumeration

Finden, was lauscht, in welcher Version, und wo es nachgibt.

7 Werkzeuge

Nmap

The reference port scanner, with a scripting engine for enumeration.

Gelehrt in Nmap Advanced

Masscan

Sweeps an entire /8 in minutes when Nmap would take days.

Gelehrt in Nmap Advanced

RustScan

Finds open ports fast, then hands them to Nmap for the details.

Gelehrt in Nmap Advanced

Nuclei

Template-driven scanner for known exposures across many hosts.

Gelehrt in Advanced Web Attacks

Nessus

Commercial vulnerability scanner, the baseline in most audit reports.

Gelehrt in Advanced Penetration Testing

OpenVAS

Open-source vulnerability scanner with its own feed of checks.

Gelehrt in Advanced Penetration Testing

enum4linux-ng

Pulls shares, users and policies out of SMB and LDAP services.

Gelehrt in Active Directory Attacks

Exploitation

Aus einem Fund einen authentifizierten Zugang machen.

9 Werkzeuge

Metasploit Framework

Exploits, payloads and post modules in one console.

Gelehrt in Metasploit Pro

sqlmap

Automates SQL injection detection all the way to shell access.

Gelehrt in Web Hacking

Hydra

Online password attacks against dozens of network protocols.

Gelehrt in Cryptography Attacks

Hashcat

GPU-accelerated hash cracking with rules and masks.

Gelehrt in Cryptography Attacks

John the Ripper

Cracks a very wide range of hash formats, CPU-first.

Gelehrt in Cryptography Attacks

Impacket

Python implementations of SMB, Kerberos and MSRPC you can script.

Gelehrt in Active Directory Attacks

NetExec

Sprays credentials and commands across a Windows network at scale.

Gelehrt in Active Directory Attacks

Responder

Poisons LLMNR and NBT-NS to capture and relay authentication.

Gelehrt in Active Directory Attacks

msfvenom

Generates and encodes payloads for every target platform.

Gelehrt in Advanced Payload Development

Post-Exploitation

Rechte ausweiten, Zugangsdaten ernten, weiterspringen, Stellung halten.

9 Werkzeuge

Mimikatz

Extracts credentials, tickets and secrets from Windows memory.

Gelehrt in Active Directory Attacks

BloodHound

Graphs Active Directory to reveal the shortest path to Domain Admin.

Gelehrt in Active Directory Attacks

Rubeus

Kerberos abuse toolkit: roasting, delegation, ticket forging.

Gelehrt in Active Directory Attacks

linPEAS

Enumerates every local privilege-escalation path on Linux.

Gelehrt in Linux Exploitation

winPEAS

Same idea on Windows: services, tokens, unquoted paths, secrets.

Gelehrt in Windows Exploitation

Chisel

Tunnels TCP over HTTP to reach segmented internal networks.

Gelehrt in Network Pivoting

Ligolo-ng

Builds a real network interface into the target subnet, no SOCKS pain.

Gelehrt in Network Pivoting

Sliver

Modern open-source command-and-control with mTLS implants.

Gelehrt in C2 Framework Development

Covenant

.NET command-and-control framework with a collaborative interface.

Gelehrt in C2 Framework Development

Web und API

Anwendungen und ihre Endpunkte abfangen, fuzzen und brechen.

8 Werkzeuge

Burp Suite

The proxy every web test runs through: intercept, repeat, fuzz.

Gelehrt in Burp Suite Pro

OWASP ZAP

Free intercepting proxy and scanner, scriptable for CI pipelines.

Gelehrt in OWASP ZAP Pro

ffuf

Fuzzes paths, parameters and hosts at very high request rates.

Gelehrt in Advanced Web Attacks

gobuster

Brute-forces directories, DNS names and virtual hosts.

Gelehrt in Web Hacking

Nikto

Quick sweep for dangerous files, stale software and misconfigurations.

Gelehrt in Web Hacking

Postman

Replays and tampers with REST and GraphQL calls collection by collection.

Gelehrt in REST API Penetration

GraphQL Voyager

Renders an introspected schema so you can see what is reachable.

Gelehrt in GraphQL Security

jwt_tool

Inspects, tampers with and cracks JSON Web Tokens.

Gelehrt in Web Authentication Attacks

Funk und Hardware

Angreifen, was durch die Luft geht und was man in der Hand hält.

7 Werkzeuge

Aircrack-ng

The classic Wi-Fi suite: capture, replay, crack WEP and WPA.

Gelehrt in WiFi Security — From Zero to Pentester

hcxdumptool

Captures PMKID and handshakes straight into a Hashcat-ready file.

Gelehrt in WiFi Security — From Zero to Pentester

Kismet

Passive wireless survey across Wi-Fi, Bluetooth and more.

Gelehrt in WiFi Security — From Zero to Pentester

Bettercap

Swiss army knife for network and wireless man-in-the-middle.

Gelehrt in Bluetooth Hacking

HackRF One

Software-defined radio to listen to and replay 1 MHz-6 GHz signals.

Gelehrt in SDR & Radio Hacking

Proxmark3

Reads, clones and emulates RFID and NFC access badges.

Gelehrt in Hardware Hacking

Bus Pirate

Talks UART, SPI and I2C to the chips on a board you opened.

Gelehrt in Hardware Hacking

Cloud und Container

IAM, Buckets, Cluster und Images prüfen, bevor es andere tun.

6 Werkzeuge

Pacu

AWS exploitation framework: enumerate, escalate, persist.

Gelehrt in AWS Penetration Testing

ScoutSuite

Multi-cloud security audit that reports on IAM, storage and network.

Gelehrt in Cloud Penetration Fundamentals

ROADtools

Explores Entra ID (Azure AD) relationships the way BloodHound does AD.

Gelehrt in Azure Penetration Testing

kube-hunter

Hunts for exposed Kubernetes components and weak defaults.

Gelehrt in Container Escape

Trivy

Scans images, filesystems and IaC for known vulnerabilities.

Gelehrt in Container Escape Advanced

Peirates

Post-exploitation inside a pod: steal tokens, move across the cluster.

Gelehrt in Container Escape

Analyse und Forensik

Verkehr, Binaries und Speicher lesen, um den Vorfall zu verstehen.

8 Werkzeuge

Wireshark

Dissects captured traffic packet by packet, protocol by protocol.

Gelehrt in Wireshark Mastery

tcpdump

Captures on the wire from any shell, no interface needed.

Gelehrt in Wireshark Mastery

Ghidra

Free decompiler that turns machine code back into readable C.

Gelehrt in Reverse Engineering

IDA Free

The industry disassembler, with the graph view everyone learned on.

Gelehrt in Reverse Engineering

radare2

Scriptable reverse-engineering framework that lives in the terminal.

Gelehrt in Reverse Engineering

x64dbg

Windows debugger for watching a binary misbehave in real time.

Gelehrt in Buffer Overflow Advanced

Volatility

Rebuilds processes, connections and secrets from a memory dump.

Gelehrt in Memory Forensics

Autopsy

Disk forensics workbench: timelines, deleted files, artefacts.

Gelehrt in Memory Forensics

Diese Werkzeuge sind für autorisierte Tests und Ausbildung aufgeführt. Der Einsatz gegen Systeme ohne schriftliche Erlaubnis ist in den meisten Ländern strafbar.