Package: lockdoor
Lockdoor Pentesting FrameworkCheck the Wiki Pages to know more about the tool.Lockdoor Wiki page HomeOverviewLockDooris a Framework aimed athelping penetration testers, bug bounty hunters And cyber security engineers.
This tool is designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. But containing the favorite and the most used tools by Pentesters.
As pentesters, most of us has his personal ' /pentest/ ' directory so this Framework is helping you to build a perfect one.FeaturesAdded value : (what makes it different from other frameworks).Pentesting Tools Selection:Tools ?:Lockdoordoesn't contain all pentesting tools (Added value) , let's be honest ! Who ever used all the Tools you find on all those Penetration Testing distributions ? Lockdoor contains only the favorite (Added value) and the most used toolsby Pentesters (Added value).what Tools ?: the tools containsLockdoorare a collection from the best tools (Added value) on Kali,Parrot Os and BlackArch. Also some private tools (Added value) from some other hacking teams (Added value) like InurlBr, iran-cyber. Without forgeting some cool and amazing tools I found on Github made by some perfect human beigns (Added value).Easy Customization: Easily add/remove tools. (Added value)Resources and cheatsheets: (Added value)Resources: That's what makesLockdoorAdded value, Lockdoor Doesn't contain only tools ! Pentesing and Security Assessment Findings Reports templates (Added value) , Pentesting walkthrough examples and tempales (Added value) and more.Cheatsheets: Everyone can forget something on processing or a tool use, or even some trciks. Here comes the Cheatsheets (Added value) role ! there are cheatsheets about everything, every tool on the framework and any enumeration,exploitation and post-exploitation techniques.Lockdoor Tools contents:Information Gathering:Tools:dirsearch : A Web path scannerbrut3k1t : security-oriented bruteforce frameworkgobuster : DNS and VHost busting tool written in GoEnyx : an SNMP IPv6 Enumeration ToolGoohak : Launchs Google Hacking Queries Against A Target DomainNasnum : The NAS EnumeratorSublist3r : Fast subdomains enumeration tool for penetration testerswafw00f : identify and fingerprint Web Application FirewallPhoton : ncredibly fast crawler designed for OSINT.Raccoon : offensive security tool for reconnaissance and vulnerability scanningDnsRecon : DNS Enumeration Scriptsherlock : Find usernames across social networkssnmpwn : An SNMPv3 User Enumerator and Attack toolStriker : an offensive information and vulnerability scanner.theHarvester : E-mails, subdomains and names HarvesterURLextractor : Information gathering & website reconnaissancedenumerator.py : Enumerates list of subdomainsother : other Information gathering,recon and Enumeration scripts I collected somewhere.Frameworks:
:   -   ReconDog : Reconnaissance Swiss Army Knife
:   -  RED_HAWK : All in one tool for Information Gathering, Vulnerability Scanning and Crawling
:   -  TIDoS : Offensive Manual Web Application Penetration Testing Framework.
:   -  Dracnmap : Info Gathering FrameworkWeb Hacking:Tools:Spaghetti : Spaghetti - Web Application Security ScannerHTTPoxyScan : HTTPoxy Exploit Scanner by 1N3CMSmap : CMS scannerBruteXSS : BruteXSS is a tool to find XSS vulnerabilities in web applicationJ-dorker : Website List grabber from Bingdroopescan : scanner , identify , CMSs , Drupal , Silverstripe.ptiva : Web Application ScanneV3n0M : Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other VulnsPriv8SqliTool : Find Sqli Targets vSqliV : massive SQL injection vulnerability scannerAtScan : Advanced dork Search & Mass Exploit ScannerWPSeku : Wordpress Security ScannerWpBrute : Wordpress BruteForce ToolsWpscan : A simple Wordpress scanner written in pythonB7S-ToolB0x : Wordpress vulnerability scannerXSStrike : Most advanced XSS scanner.joomscan : Joomla Vulnerability Scanner ProjectFrameworks:
:   -   Dzjecter : Server checking Tool
:   -   W3af : web application attack and audit frameworkPrivilege Escalation:Linux :Scripts :linux_checksec.shlinux_enum.shlinux_gather_files.shlinux_kernel_exploiter.pllinux_privesc.pylinux_privesc.shlinux_security_testLinux_exploits folderWindows :windows-privesc-check.pywindows-privesc-check.exeMySql :raptor_udf.craptor_udf2.cReverse Engineering:Radare2 : unix-like reverse engineering frameworkVirtusTotal : VirusTotal toolsMiasm : Reverse engineering frameworkMirror : reverses the bytes of a fileDnSpy : .NET debugger and assemblyDLLRunner : a smart DLL execution script for malware analysis in sandbox systems.Fuzzy Server : a Program That Uses Pre-Made Spike Scripts to Attack VulnServer.yara : a tool aimed at helping malware researchers toidentify and classify malware samplesSpike : a protocol fuzzer creation kit + auditsother : other scripts collected somewhereExploitation:Findsploit : Find exploits in local and online databases instantlyMassExpConsole : concurrent exploitingPompem : Exploit and Vulnerability Finderrfix : Python tool that helps RFI exploitation.InUrlBr : Advanced search in search engineslinux-exploit-suggester2 : Next-Generation Linux Kernel Exploit Suggesterother : other scripts I collected somewhere.Shells:WebShells : Webshells CollectionShellSum : A defense tool - detect web shells in local directoriesWeevely : Weaponized web shellpython-pty-shells : Python PTY backdoorsPassword Attacks:crunch : a wordlist generatorCeWL : a Custom Word List Generatorpatator : a multi-purpose brute-forcer, with a modular design and a flexible usageEncryption - Decryption:Codetective : a tool to determine the crypto/encoding algorithm usedfindmyhash : Python script to crack hashes using online serviceshashID : Software to identify the different types of hashesPost Exploitation::TheFatRat : massive exploiting toolReverse Engineering:scythe : an accounts enumeratorLockdoor Resources contents:Information Gathering:Cheatsheet_SMBEnumerationconfiguration_managementdns_enumerationfile_enumerationhttp_enumerationinformation_gathering_owasp_guideminiserv_webmin_enumerationms_sql_server_enumerationnfs_enumerationosint_recon_ngpassive_information_gatheringpop3_enumerationports_emumerationrpc_enumerationscanningsmb_enumerationsmtp_enumerationsnmb_enumerationvulnerability_scanningCrypto:Crypto101.pdfExploitation:computer_network_exploitsfile_inclusion_vulnerabilitiesFile_Transfersnc_transfersnetworking_pivoting_and_tunnelingnetwork_pivoting_techniquespivotingpivoting_Public Exploitsreverse_shell_with_msfvenomNetworking:bpf_syntaxCheatsheet_NetworkingCheatsheet_Oraclenetworking_conceptnmap_quick_reference_guidetcpdumpPassword Attacks:password_attacksSome-Links-To-WordlistsPost Exploitation:Cheatsheet_AVBypassCheatsheet_BuildReviewscode-execution-reverse-shell-commandsimportant-linux-serv-filesPrivilege Escalation:Cheatsheet_LinuxPrivilegeEsclinux_enumerationwindows_enumerationwindows_priv_escalationwindows_priv_escalation_practicalPentesting & Security Assessment Findings Report Templates:Demo Company - Security Assessment Findings Report.docxlinux-template.mdPWKv1-REPORT.docpwkv1_report.doctemplate-penetration-testing-report-v03.pdfwindows-template.mdReverse Engineering:Buffer_Overflow_Exploitbuffer_overflowsgdb_cheat_sheetr2_cheatsheetwin32_buffer_overflow_exploitation64_ia_32_jmp_instructionscourse_notesdebugingIntelCodeTable_x86Radare2 cheatsheetx86_assembly_x86_architecturex86_opcode_structure_and_instruction_overviewSocial Engineering:social_engineeringWalk Throughs:Cheatsheet_PenTesting.txtOWASP Testing Guide v4OWASPv4_Checklist.xlsxWeb Hacking:auxiliary_info.mdCheatsheet_ApacheSSLCheatsheet_AttackingMSSQLCheatsheet_DomainAdminExploitationCheatsheet_SQLInjectionCheatsheet_VulnVerify.txtcode-execution-reverse-shell-commandsfile_upload.mdhtml5_cheat_sheetjquery_cheat_sheet_1.3.2sqlisqli_cheatsheetsqli-quriessqli-tipsweb_app_securityweb_app_vulns_ArabicXss_1Xss_2xss_actionscriptxxeOther:Security
:   -Best Version of BriskSec Security CheatsheetsImages (I'll let you discover that)Google Hacking DataBaseGoogle Fu