Pentesting tools

Last updated: Nov 3, 2026

This page lists the tools that the pentesters of Fluid Attacks can use. The security analysts of Fluid Attacks use the automation of these tools to make their security testing faster.

Aircrack-ng: A suite of tools to evaluate the security of WiFi networks. It includes tools to capture packets and crack encryption keys.
AltServer: A companion application that lets AltStore sideload apps onto iOS devices.
Amass: Also known as the OWASP Amass Project. It uses open-source information gathering and active reconnaissance techniques to map the network attack surface and find external assets.
Android Studio: The official IDE to develop Android apps.
APKLab: A set of scripts and tools to do reverse engineering on Android applications from VS Code.
Apktool: A tool for the reverse engineering of Android APK files.
AWS CLI: A unified tool to manage AWS services.
BeEF: The Browser Exploitation Framework. It is a penetration testing tool to evaluate the security posture of web browsers.
bettercap: A versatile network pentesting tool written in Go. It makes reconnaissance and attacks easier on WiFi networks, Bluetooth Low Energy devices, wireless HID devices, and IPv4/IPv6 networks.
BloodHound: A tool that shows the hidden relationships in an Active Directory or Azure environment. With it, the pentester can find very complex attack paths fast.
Burp Suite Professional: A toolkit to automate and help the discovery and exploitation of web vulnerabilities.
Checkra1n: A jailbreak tool for iOS devices, based on the checkm8 BootROM exploit.
Ciphey: An automated decryption tool that uses artificial intelligence to identify encryption types and give the plaintext.
Covenant: A .NET command and control framework for red teamers.
CrackMapExec: A post-exploitation tool that helps to automate the security assessment of large Active Directory networks.
Dbeaver: A multi-platform tool for database management.
dnSpy: A tool to debug and edit .NET and Unity assemblies, if the source code is not available.
DNSRecon: A Python script to do DNS attacks. These attacks include Zone transfers, DNS records enumeration, TLD expansion, and Wildcard resolution, and other techniques.
enumerate-iam: A program that uses brute force to try to find all the API calls that an IAM policy allows. The risk of damage is low, because it only does get* and list* calls.
ffuf: A tool for fast web fuzzing, written in Go.
Fiddler: A proxy tool for web debugging, available for Windows, macOS, and Linux.
Frida: A dynamic instrumentation toolkit to intercept and debug closed-source or locked-down software.
GDB-PEDA: A tool that gives Python exploit development assistance for GNU Debugger (GDB).
Ghidra: A suite of tools for software reverse engineering (SRE). The Research Directorate of the National Security Agency (NSA) developed it.
Gitleaks: An open-source SAST tool that finds secrets and sensitive data in Git repositories.
hashcat: A fast, efficient, and versatile pentesting tool that helps with offline brute-force attacks.
hashID: A tool that identifies the type of hash that encrypts data.
Hydra: A proof-of-concept code for researchers and security consultants. It shows how easy it can be to get unauthorized remote access to a system.
Hopper: A reverse engineering tool to disassemble, decompile, and debug applications.
HTTP Toolkit: An open-source toolkit to debug, test, and build with HTTP(S) on Windows, Linux, and macOS. It is useful to intercept, inspect, and rewrite HTTP(S) traffic.
Interactsh: An open-source tool that finds vulnerabilities that cause out-of-band (OOB) interactions.
jadx: Command-line and GUI tools that decompile Android Dex and APK files to Java source code.
JMeter: An open-source software application in Java to load test functional behavior and measure performance.
John the Ripper: A tool for password security audits and password recovery.
Magisk: A suite of open-source software to customize Android versions later than the 6.0 release.
Magisk Modules: Modules that give a simple way to apply system-level mods to devices without manual changes to system files.
Metasploit: A framework that helps to launch and develop exploits and do offensive tasks.
mimikatz: A program that extracts passwords, hashes, PINs, and Kerberos tickets from memory in Windows x32/x64.
mitmproxy: A free and open-source HTTPS proxy that intercepts traffic.
MobSF: The Mobile Security Framework. It is a tool for pentesting, malware analysis, and security assessment of Android, iOS, and Windows. It supports static and dynamic analysis.
ngrok: A cross-platform application that exposes local server ports to the Internet.
Nmap: A tool for network discovery and security audits.
Objection: A runtime mobile exploration toolkit that helps the tester evaluate the security posture of mobile apps without a jailbreak.
OpenVAS: The Open Vulnerability Assessment Scanner. It is a security testing tool that can do unauthenticated and authenticated testing.
OWASP ZAP: Zed Attack Proxy. It is a "man-in-the-middle proxy" between the browser and the web application. It intercepts and inspects messages, changes the contents, and sends the packets to the destination. It is available as a standalone application and as a daemon process.
Pacu framework: An open-source AWS exploitation framework. It helps with exfiltration, enumeration, lateral movement, escalation, persistence, exploitation, and evasion.
Postman: An API platform to build and use APIs.
Pwndbg: A plugin for GDB that improves the debugging features that low-level software developers, hardware pentesters, reverse engineers, and exploit developers need.
reFlutter: A framework that helps with the reverse engineering of apps made with Flutter. It uses a patched version of the Flutter library that is already compiled and ready for app repacking. It also uses a modified snapshot deserialization process that makes dynamic analysis possible.
Rubeus: A C# toolset for raw Kerberos interaction and abuse.
SoapUI: A testing tool for SOAP and REST APIs.
sqlmap: A tool that automates SQL injection and database takeover.
TruffleHog: A tool that finds high entropy strings and secrets in Git history.
Uber Apk Signer: A command-line tool that makes it easier to sign, zip align, and verify Android application packages (APKs). It uses debug certificates or the release certificates that the user gives.
Vega: A web application security scanner and platform. It helps to find vulnerabilities that can cause SQLi, XSS, and other attacks.
Wireshark: An open-source tool that analyzes and intercepts network traffic in real time. It also finds security issues in networks.
x64dbg: An open-source, very extensible debugger for Windows. It supports 32-bit and 64-bit programs.
WinDbg: The default debugger of Windows. Fluid Attacks uses it for kernel debugging.
WPScan: A vulnerability scanner that helps to find security weaknesses in WordPress websites.