Awesome Pentest Tools Catalog

Skill by ara.so — Security Skills collection.

This skill provides expert knowledge of the Awesome Pentest Tools catalog, a comprehensive collection of penetration testing and red team tools organized by the penetration testing lifecycle and MITRE ATT&CK framework. Use this to discover, recommend, and implement security testing tools across all phases of penetration testing.

Overview

The catalog organizes tools into these primary phases:

1. Information Gathering (信息收集) - Asset and target reconnaissance
2. Vulnerability Analysis (漏洞分析) - Host and web vulnerability scanning
3. Exploitation (漏洞利用) - Exploit frameworks and service-specific tools
4. Privilege Escalation (权限提升) - Linux, Windows, and container escape
5. Persistence (权限维持与后门) - C2 frameworks, webshells, and evasion
6. Tunneling & Proxying (隧道代理) - Network pivoting and protocol tunneling
7. Post-Exploitation (后渗透与域) - Credential theft and lateral movement
8. Covering Tracks (痕迹清理) - Log cleanup and anti-forensics