HACKMIAMI
Categories
- Information gathering
- Vulnerability analysis
- Web applications
- Password attacks
- Wireless
- Sniffing & spoofing
- Exploitation
- Post-exploitation
- Reverse engineering
- Forensics
- Reporting & hygiene
Information gathering
Host discovery, port scans, DNS and lookup.
| Tool | Description |
|---|---|
| amass | Attack-surface and subdomain mapping |
| arp-scan | Local network host discovery via ARP |
| dig / host | dig, host, and related DNS utilities |
| fping | Fast parallel ICMP ping sweeps |
| hping3 | Crafted packet / traceroute helper |
| masscan | Very fast Internet-scale port scanner |
| nbtscan | NetBIOS name scanning |
| nmap | Network discovery and port scanning |
| tcpdump | Command-line packet capture |
| whois | Domain and IP registration lookup |
| zmap | Single-packet Internet-wide scanner |
Vulnerability analysis
Scanners and TLS checkers for authorized targets.
| Tool | Description |
|---|---|
| lynis | Host security auditing |
| nikto | Web server vulnerability checks |
| nuclei | Template-driven vulnerability scans |
| OWASP ZAP | OWASP ZAP web app scanner |
| sslscan | SSL/TLS cipher and protocol probe |
| testssl.sh | Deep SSL/TLS configuration tests |
| trivy | Container and filesystem CVE scanner |
Web applications
HTTP fuzzing, SQLi, and content discovery.
| Tool | Description |
|---|---|
| dirbuster | Directory and file brute-forcing |
| ffuf | Fast web fuzzer |
| gobuster | Directory, DNS, and vhost brute-force |
| nikto | Web server vulnerability checks |
| OWASP ZAP | OWASP ZAP web app scanner |
| sqlmap | Automated SQL injection |
| wapiti | Black-box web vulnerability scanner |
| whatweb | Web technology fingerprinting |
Password attacks
Hash cracking, online guessing, wordlists.
| Tool | Description |
|---|---|
| cracklib | Password quality library / dictionaries |
| crunch | Custom wordlist generator |
| hashcat | GPU-accelerated password recovery |
| hydra | Online login brute-force |
| john | John the Ripper offline cracker |
| medusa | Parallel network login auditor |
| ncrack | High-speed network authentication cracker |
| ophcrack | Windows LM/NTLM hash cracker |
| seclists | Security wordlists and payloads |
Wireless
Needs a supported radio; lab policy applies.
| Tool | Description |
|---|---|
| aircrack-ng | 802.11 capture and WEP/WPA cracking suite |
| kismet | Wireless detector / sniffer / IDS |
| reaver | WPS PIN attack against access points |
Sniffing & spoofing
Capture, MITM lab tools, proxy helpers.
| Tool | Description |
|---|---|
| ettercap | LAN MITM and protocol analysis |
| proxychains-ng | Force apps through SOCKS/HTTP proxies |
| tcpdump | Command-line packet capture |
| tor | Anonymity network daemon |
| torsocks | Route apps through Tor |
| wireshark | GUI packet analyzer |
Exploitation
Optional heavy framework.
| Tool | Description |
|---|---|
| metasploit | Exploitation framework (large, optional) |
Post-exploitation
Authorized lab only.
| Tool | Description |
|---|---|
| Impacket | Python network protocols for AD/lab work |
Reverse engineering
Disassemblers, debuggers, firmware.
| Tool | Description |
|---|---|
| binwalk | Firmware and binary extraction |
| gdb | GNU debugger |
| ghidra | NSA reverse-engineering suite (large) |
| radare2 | Reverse-engineering framework |
| Rizin Cutter | Rizin GUI (Cutter) |
Forensics
Disk, memory, and malware analysis.
| Tool | Description |
|---|---|
| aide | File integrity monitoring |
| chkrootkit | Rootkit detection checks |
| clamav | Antivirus engine |
| ExifTool | Metadata read/write for media files |
| foremost | File carving from disk images |
| sleuthkit | Disk image forensics toolkit |
| testdisk | Partition and file recovery |
| Volatility 3 | Memory forensics framework |
| yara | Malware pattern matching |
Reporting & hygiene
Editors, sync, session tools.
| Tool | Description |
|---|---|
| CA roots | Mozilla CA root bundle |
| curl | HTTP client |
| git | Version control |
| rsync | File sync |
| tmux | Terminal multiplexer |
| vim | Text editor |
| wget | File downloader |