MIMIKATZ
A tool to play with Windows security, written in C.
Tools
MSFVENOM
A Metasploit module that generates shellcodes.
NETCAT
A featured networking utility which reads and writes data across network connections.
NIKTO
A web server scanner.
NMAP
A very famous network discovery tool.
OWASP AMASS
An in-depth asset discovery tool.
PINGCASTLE
An Active Directory audit tool.
SEARCHSPLOIT
A command line search tool for Exploit-DB.
SMBCLIENT
A FTP-like client to access SMB/CIFS resources on servers.
SQLMAP
An automatic SQL injection and database takeover tool.
STEGHIDE
A steganography tool that is able to hide data in various kinds of files.
SUBLIST3R
A fast subdomains enumeration tool.
WFUZZ
A web application fuzzer.
WINPEAS
A Windows local Privilege Escalation Awesome Script.
WPSCAN
A WordPress security scanner.
YARA
A tool aimed to identify and classify malware samples.