{"repo":"mcnamee/huntkit","free":true,"listed":false,"github":"https://github.com/mcnamee/huntkit","clone":"git clone https://github.com/mcnamee/huntkit.git","description":"Docker - Ubuntu with a bunch of PenTesting tools and wordlists","language":"Shell","stars":395,"topics":["docker","pentesting","penetration-testing","pentest"],"license":"MIT","category":"security-tools","readme_excerpt":"What is this?   —   Instructions   —   Tools What is this? HuntKit is a collection of [penetration testing, bug bounty hunting, capture the flag, red teaming] tools in a single Docker image. Simply run the image and start using the tools. Why? I got sick of waiting for VitualBox to start, Kali to boot, then dealing with the slugish-ness of operating in a VM. I still use Kali for certain tasks. But for a quick nmap scan (for example), using this container is a lot quicker. - The tool run very quick (opposed to running inside a VM for example) - Simpler to keep the tools up to date - Disposable - Something broken? Simply prune and start again Instructions Run from DockerHub Advanced usage (Update) Pull the latest from Docker Hub Build it yourself Test it (smoke test) After building, verify every tool is installed and the key tools run: This is the same check CI runs on every pull request (see .github/workflows/ci.yml ), so a broken tool is caught without anyone eyeballing the build. Push to Docker Hub Tools Recon Tool Description & Example --- --- amass Network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques. amass enum -v -src -ip -brute -min-for-recursive 2 -d kali.org brutespray Service scanner by bruteforcing. brutespray --file nmap.gnmap commix Command injection exploiter - used to test web applications with the view to find bugs, errors ","default_branch":null,"files":null,"tree":[],"storefront":"/r/mcnamee","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/mcnamee/huntkit/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}