Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners such as Nexpose - for free. This helps prioritize remediation and eliminate false positives, providing true...

Nessus is a software tool designed to identify system vulnerabilities through automated point-in-time assessments. It is capable of detecting software defects, missing patches, malware, and misconfigurations across a wide range of operating systems, devices, and applications.

Network mapping service.

Exploit Pack is an open source project security that will help you adapt exploit codes on-the-fly.

Sn1per Professional is an all-in-one offensive security platform that provides a comprehensive view of your internal and external attack surface and offers an asset risk scoring system to prioritize, reduce, and manage risk.

The Social-Engineer Toolkit is an open source penetration testing framework designed for social engineering. SET has a number of custom attack vectors that allow you to make a believable attack quickly.

The all-in-one Red Team extension for Web Pentester 🛠 - LasCC/Hack-Tools

It's well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket, build Golden tickets, play with certificates or private keys, vault... maybe make coffee?.

Android hacking toolkit for creating payloads and launching exploits.

A general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Immunity's CANVAS makes available hundreds of exploits, an automated exploitation system, and a comprehensive, reliable exploit development framework to penetration testers and security professionals worldwide.

Cobalt Strike is threat emulation software. Red teams and penetration testers use Cobalt Strike to demonstrate the risk of a breach and evaluate mature security programs. Cobalt Strike exploits network vulnerabilities, launches spear phishing campaigns, hosts web drive-by...