Aller au contenu

Outils

Cette page recense l'ensemble des outils en ligne de commande référencés dans la méthodologie Enum2Root. Chaque outil est accompagné d'un lien vers sa source officielle (dépôt GitHub canonique, documentation de l'éditeur ou page Kali Tools), regroupé par catégorie et trié par ordre alphabétique.

Reconnaissance & scan

Outil Référence
curl curl.se
jq jqlang.org
nmap nmap.org
ntpdate github.com/ntp-project/ntp
searchsploit (Exploit-DB) kali.org/tools/exploitdb
subfinder github.com/projectdiscovery/subfinder
whatweb github.com/urbanadventurer/WhatWeb
whois kali.org/tools/whois

Énumération de services

Outil Référence
dig (BIND) isc.org/bind
enum4linux-ng github.com/cddmp/enum4linux-ng
evil-winrm github.com/Hackplayers/evil-winrm
ftp (tnftp) kali.org/tools/tnftp
gobuster github.com/OJ/gobuster
hydra github.com/vanhauser-thc/thc-hydra
Impacket (mssqlclient, rpcdump…) github.com/fortra/impacket
kerbrute github.com/ropnop/kerbrute
ldapdomaindump github.com/dirkjanm/ldapdomaindump
ldapsearch (OpenLDAP) openldap.org
lftp github.com/lavv17/lftp
mongosh mongodb.com/docs/mongodb-shell
msfvenom (Metasploit) kali.org/tools/metasploit-framework
mysql mysql.com
nc (netcat) kali.org/tools/netcat
netexec (nxc) github.com/Pennyw0rth/NetExec
odat github.com/quentinhardy/odat
onesixtyone github.com/trailofbits/onesixtyone
psql (PostgreSQL) postgresql.org/docs
redis-cli redis.io/docs
rpcclient (Samba) samba.org
rsync rsync.samba.org
showmount (NFS) linux.die.net
smbclient (Samba) samba.org
smtp-user-enum github.com/pentestmonkey/smtp-user-enum
snmp-check kali.org/tools/snmpcheck
snmpwalk (Net-SNMP) sourceforge.net/projects/net-snmp
ssh (OpenSSH) kali.org/tools/openssh
tnscmd10g kali.org/tools/tnscmd10g
vncviewer (TigerVNC) github.com/TigerVNC/tigervnc
wget gnu.org/software/wget
xfreerdp (FreeRDP) github.com/FreeRDP/FreeRDP

Web

Outil Référence
dalfox github.com/hahwul/dalfox
dirsearch github.com/maurosoria/dirsearch
feroxbuster github.com/epi052/feroxbuster
ffuf github.com/ffuf/ffuf
nikto github.com/sullo/nikto
nuclei github.com/projectdiscovery/nuclei
sqlmap github.com/sqlmapproject/sqlmap
wafw00f github.com/EnableSecurity/wafw00f
wfuzz github.com/xmendez/wfuzz
wpscan github.com/wpscanteam/wpscan

Active Directory

Outil Référence
bloodhound-python github.com/dirkjanm/BloodHound.py
BloodHound github.com/SpecterOps/BloodHound
bloodyAD github.com/CravateRouge/bloodyAD
certipy github.com/ly4k/Certipy
Coercer github.com/p0dalirius/Coercer
Impacket (GetNPUsers, GetUserSPNs, secretsdump, ntlmrelayx, rbcd, ticketer…) github.com/fortra/impacket
PetitPotam github.com/topotam/PetitPotam
Responder github.com/lgandx/Responder
targetedKerberoast github.com/ShutdownRepo/targetedKerberoast

Post-exploitation & privesc

Outil Référence
GodPotato github.com/BeichenDream/GodPotato
linpeas / winpeas (PEASS-ng) github.com/peass-ng/PEASS-ng
mimikatz github.com/gentilkiwi/mimikatz
PrintSpoofer github.com/itm4n/PrintSpoofer

Shells, transfert & pivot

Outil Référence
certutil learn.microsoft.com
chisel github.com/jpillora/chisel
ligolo-ng github.com/nicocha30/ligolo-ng
rlwrap github.com/hanslub42/rlwrap

Cassage de hash

Outil Référence
hashcat hashcat.net/hashcat
hashid github.com/blackploit/hash-identifier
john (John the Ripper) github.com/openwall/john
name-that-hash github.com/HashPals/Name-That-Hash