Outils¶
Cette page recense l'ensemble des outils en ligne de commande référencés dans la méthodologie Enum2Root. Chaque outil est accompagné d'un lien vers sa source officielle (dépôt GitHub canonique, documentation de l'éditeur ou page Kali Tools), regroupé par catégorie et trié par ordre alphabétique.
Reconnaissance & scan¶
| Outil | Référence |
|---|---|
| curl | curl.se |
| jq | jqlang.org |
| nmap | nmap.org |
| ntpdate | github.com/ntp-project/ntp |
| searchsploit (Exploit-DB) | kali.org/tools/exploitdb |
| subfinder | github.com/projectdiscovery/subfinder |
| whatweb | github.com/urbanadventurer/WhatWeb |
| whois | kali.org/tools/whois |
Énumération de services¶
Web¶
| Outil | Référence |
|---|---|
| dalfox | github.com/hahwul/dalfox |
| dirsearch | github.com/maurosoria/dirsearch |
| feroxbuster | github.com/epi052/feroxbuster |
| ffuf | github.com/ffuf/ffuf |
| nikto | github.com/sullo/nikto |
| nuclei | github.com/projectdiscovery/nuclei |
| sqlmap | github.com/sqlmapproject/sqlmap |
| wafw00f | github.com/EnableSecurity/wafw00f |
| wfuzz | github.com/xmendez/wfuzz |
| wpscan | github.com/wpscanteam/wpscan |
Active Directory¶
| Outil | Référence |
|---|---|
| bloodhound-python | github.com/dirkjanm/BloodHound.py |
| BloodHound | github.com/SpecterOps/BloodHound |
| bloodyAD | github.com/CravateRouge/bloodyAD |
| certipy | github.com/ly4k/Certipy |
| Coercer | github.com/p0dalirius/Coercer |
| Impacket (GetNPUsers, GetUserSPNs, secretsdump, ntlmrelayx, rbcd, ticketer…) | github.com/fortra/impacket |
| PetitPotam | github.com/topotam/PetitPotam |
| Responder | github.com/lgandx/Responder |
| targetedKerberoast | github.com/ShutdownRepo/targetedKerberoast |
Post-exploitation & privesc¶
| Outil | Référence |
|---|---|
| GodPotato | github.com/BeichenDream/GodPotato |
| linpeas / winpeas (PEASS-ng) | github.com/peass-ng/PEASS-ng |
| mimikatz | github.com/gentilkiwi/mimikatz |
| PrintSpoofer | github.com/itm4n/PrintSpoofer |
Shells, transfert & pivot¶
| Outil | Référence |
|---|---|
| certutil | learn.microsoft.com |
| chisel | github.com/jpillora/chisel |
| ligolo-ng | github.com/nicocha30/ligolo-ng |
| rlwrap | github.com/hanslub42/rlwrap |
Cassage de hash¶
| Outil | Référence |
|---|---|
| hashcat | hashcat.net/hashcat |
| hashid | github.com/blackploit/hash-identifier |
| john (John the Ripper) | github.com/openwall/john |
| name-that-hash | github.com/HashPals/Name-That-Hash |