- Enumeration
- Exploitation
- Password Attacks
- Wordlists
- Privilege Escalation
- Buffer Overflows and Exploits
- OSCP Preparation
- Dirsearch - Web path scanner
- Gobuster - Directory/file & DNS busting tool written in Go
- Wfuzz - Web application fuzzer
- pspy - Monitor linux processes without root permissions
- LinEnum - Scripted Local Linux Enumeration & Privilege Escalation Checks
- linuxprivchecker.py -- a Linux Privilege Escalation Check Script
- vector (getcap/setcap)
- linux-exploit-suggester
- Checklist
- PowerSploit - A PowerShell Post-Exploitation Framework
- Windows Kernel Exploits
- PayloadsAllTheThings - Windows - Privilege Escalation
- Checklist
- Impacket Static Binaries - Standalone binaries for Linux/Windows of Impacket's examples
- Various nix tools built as statically-linked binaries
- Nmap Brute forcing Scripts
- John The Ripper - is a fast password cracker
- Crunch - Wordlist Generator
- Hashcat - World's fastest and most advanced password recovery utility
- Metasploitable3
- Kioptrix: Level 1 (#1)
- Kioptrix: Level 1.1 (#2)
- Kioptrix: Level 1.2 (#3)
- Kioptrix: Level 1.3 (#4)
- FristiLeaks: 1.3
- Stapler: 1
- PwnLab: init
- Tr0ll: 1
- Tr0ll: 2
- Kioptrix: 2014
- Lord Of The Root: 1.0.1
- Mr-Robot: 1
- HackLAB: Vulnix
- HackInOS
- VulnOS: 2
- SickOs: 1.2
- pWnOS: 2.0
- Temple of Doom
- SolidState
- Vulnix
- Zico2
- Billu_b0x 2
- SkyTower
- WinterMute