# Bridging the Gap: A Survey and Classification of Research-Informed Ethical Hacking Tools
## 5 Classification
### Process-Based Classification: PTES and MITE ATT&CK  
Table 11 shows the tools identified and classified for the different PTES phases. The tool distribution according to steps in the Ethical Hacking process is reported in Table 2 (a). The absence of tools in the _Pre-engagement Interactions_ phase aligns with expectations, considering its non-technical nature, which typically involves scoping, planning, and agreement on the terms of engagement between the penetration tester and the client. This may potentially explain the lack of interest from the research community. The significant presence of tools in the _Vulnerability Analysis_ phase (80 tools) reflects the importance of identifying and assessing vulnerabilities within target systems, which is essential for any security assessment activity. In particular, many scanners were developed. Additionally, 20 tools possess _Intelligence Gathering_ capabilities, primarily because this phase sometimes overlaps with vulnerability analysis as attackers interact with target systems. \begin{table}
\begin{tabular}{l c l l} \hline \hline _Topal Name_ & _Year_ & _License Type_ & _Source Code Repository_ \\ \hline TChecker [130] & 2022 & Not Available & Not Available \\ TORPEDO [131] & 2015 & Not Available & Not Available \\ UE Security Reloaded [132] & 2023 & Not Available & Not Available \\ Untangle [133] & 2023 & Not Specified & [[https://github.com/untangle-tool/untangle](https://github.com/untangle-tool/untangle)]([https://github.com/untangle-tool/untangle](https://github.com/untangle-tool/untangle)) \\ VAPE-BRIDCE [134] & 2022 & Not Available & Not Available \\ VERA [135] & 2013 & Not Available & Not Available \\ VUDDY [136] & 2017 & MIT License & [[https://github.com/squizz617/vuddy](https://github.com/squizz617/vuddy)]([https://github.com/squizz617/vuddy](https://github.com/squizz617/vuddy)) \\ Vulcan [137] & 2013 & Not Available & Not Available \\ VulCNN [138] & 2022 & Not Specified & [[https://github.com/CCCL-codes/VulCNN](https://github.com/CCCL-codes/VulCNN)]([https://github.com/CCCL-codes/VulCNN](https://github.com/CCCL-codes/VulCNN)) \\ VulDePecker [139] & 2018 & Apache 2.0 & [[https://github.com/CCCL-codes/VulDeePecker](https://github.com/CCCL-codes/VulDeePecker)]([https://github.com/CCCL-codes/VulDeePecker](https://github.com/CCCL-codes/VulDeePecker)) \\ Vulnet [140] & 2019 & Not Available & Not Available \\ Vulnstit [141] & 2020 & Available upon request & Available upon request \\ VulPecker [142] & 2016 & Not Specified & [[https://github.com/vulpecker/Vulpecker](https://github.com/vulpecker/Vulpecker)]([https://github.com/vulpecker/Vulpecker](https://github.com/vulpecker/Vulpecker)) \\ WAPTT [143] & 2014 & Not Available & Not Available \\ WebFuzz [144] & 2021 & GPLv3 & [[https://github.com/ovarar/webFuzz](https://github.com/ovarar/webFuzz)]([https://github.com/ovarar/webFuzz](https://github.com/ovarar/webFuzz)) \\ WebVIM [145] & 2020 & Not Available & Not Available \\ \hline \hline \end{tabular}
\end{table} 
Table 1: \(Cont.\) \begin{table}
\begin{tabular}{l c} \hline \hline \multicolumn{1}{c}{(a) Number of tools identified according to PTES phases} \\ \hline _PTES Phase_ & _No._ \\ \hline Vulnerability Analysis & 80 \\ Exploitation & 39 \\ Post-Exploitation & 21 \\ Intelligence Gathering & 20 \\ Threat Modelling & 6 \\ Reporting & 4 \\ Pre-engagement Interactions & 0 \\ \hline \hline \multicolumn{1}{c}{(b) Number of tools identified according to Mtire ATTA\&CK phases} \\ \hline _Mtire ATTA\&CK Phase_ & _No._ \\ \hline Reconnaissance & 84 \\ Initial Access & 48 \\ Resource Development & 21 \\ Discovery & 11 \\ Execution & 9 \\ Credential Access & 9 \\ Collection & 2 \\ Impact & 1 \\ Persistence & 0 \\ Privilege Escalation & 0 \\ Defense Evasion & 0 \\ Lateral Movement Command and Control & 0 \\ Exfiltration & 0 \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Tool counts for process-based classification. _Explitation_ (39 tools) has a substantial number of tools designed to exploit identified vulnerabilities to gain unauthorised access to systems.