Tools Library

A clean toolbox for reconnaissance, web testing, cloud review, and deep technical workflows. The goal is practical value, not tool noise.

Recon

Discovery

Tools used for network discovery, asset mapping, and initial enumeration before deeper testing.

  • Nmap
  • Amass
  • Subfinder
  • httpx
Web

Web Testing

Primary tools for request manipulation, endpoint testing, and identifying high-risk application behavior.

  • Burp Suite
  • FFUF
  • SQLMap
  • Wfuzz
Cloud

Cloud Review

Tools and flows for reviewing identity access, public exposure, services, and weak permissions.

  • AWS CLI
  • Prowler
  • ScoutSuite
  • IAM review scripts
Scripting

Automation

Useful for pushing workflows into repeatable scripts and reducing manual overhead in repeated tasks.

  • Python
  • Bash
  • PowerShell
  • jq / curl / regex
Post

Post-Exploitation

Low-noise utilities used after access is obtained, focusing on validation and clean impact demonstration.

  • LinPeas
  • WinPEAS
  • PSExec alternatives
  • Privilege-check tools
OSINT

Research & Enumeration

Useful for public information gathering, target mapping, and identifying overlooked exposure points.

  • Waybackurls
  • crt.sh
  • Google dorking
  • GitHub search
View Roadmaps Research Notes