Share
## https://sploitus.com/exploit?id=C7192A85-60A8-5C54-9112-797CE8CD75DE
# Arsenal — CTF & Pentest Toolkit
> Collection de 198 outils offensifs pour CTF et pentest | 198 offensive security tools for CTF and penetration testing
**Mots-clés :** outils CTF, pentest tools, kali linux toolkit, hacking tools linux, cybersecurity tools, offensive security, red team tools, CTF cheatsheet, pentest cheatsheet, outils hacking français
---
## Installation
### Prérequis
- Linux (Debian/Ubuntu recommandé)
- Python 3, Ruby, Go, Java 17+
- `git`, `curl`, `wget`
### Installer tout en une commande
```bash
git clone https://github.com/jordanwinner/arsenal-tools
cd arsenal-tools
sudo ./install.sh
```
Le script installe automatiquement :
- Les scripts custom de ce repo → `/usr/local/bin/`
- Les dépendances apt, pip, gem, go et les binaires tiers
- Le modèle Ollama `expert` (si Ollama est installé)
### Ollama (optionnel — pour bashgen, pygen, patchgen, virusgen)
Installe Ollama depuis https://ollama.com, puis :
```bash
ollama create expert -f Modelfile.expert
```
Les outils IA utiliseront automatiquement ce modèle.
---
## Outils / Tools
| Catégorie | Outils |
|-----------|--------|
| 🔐 Crypto | xor, rsa, rot, b64, encode, cipher, vigenere, magic, ltee, hashit, hashid, ecb-detect, padding-oracle |
| 🌐 Web | sqli, ssti, xxe, jwt-tool, cors-check, headers, fuzz, crawl, cms-detect, webattack, sslcheck, xsstrike, dalfox, commix, sqlmap, nikto, gobuster, ffuf, feroxbuster, wfuzz, dirb, arjun, paramspider, wpscan, sslyze, testssl |
| 🔍 Recon | portscan, portanalyze, netrecon, dnsrecon, subdomains, subfinder, amass, assetfinder, ipinfo, arpscan, osint, gitrecon, whatsmyname, sherlock, holehe, maigret, theHarvester, recon-ng, spiderfoot, h8mail, phoneinfoga, katana, gau, waybackurls |
| 💥 Exploit/Pwn | revshell, catch, shellcode, shellgen, patterngen, bufferpad, formatstr, ropchain, dasm, pwn-helper, msfconsole, msfvenom, searchsploit, one_gadget, ROPgadget, ropper, checksec, patchelf, seccomp-tools |
| 🔬 Reverse | ghidra, ghidra-headless, radare2, rizin, gdb, pwndbg, frida, frida-ps, frida-trace, objection, frida-legacy, jadx, apktool, dex2jar, uncompyle6, pyinstxtractor-ng, retdec-decompiler, strace, ltrace, rev |
| 🔬 Forensics | entropy, stringsplus, metadata, packer-detect, stego, pngcheck, audiosteg, zipcrack, pcap, memforensics, vol3, analyze, autosolve, loganalyze, timeline, ioc-scan, viruscan, binwalk, foremost, steghide, stegsnow, outguess, zsteg, exiftool, hashdeep, ssdeep, yara, clamscan, misc |
| 🏠 Post-Exploit/AD | privesc-check, loot, persistence, adrecon, nxc, evil-winrm, kerbrute, responder, chisel, ligolo-agent, ligolo-proxy, mitm, mitm6, bettercap, ettercap, sniff, proxychains4, proxychains-gen, mitmproxy, impacket-secretsdump, impacket-psexec, impacket-wmiexec, certipy, coercer, bloodhound-python, windapsearch, enum4linux, enum4linux-ng, smbclient, smbmap, rpcclient, ldapsearch, b2r |
| 📡 WiFi | wifihack, wifianalyze, wifirestore, aircrack-ng |
| 🏭 ICS/SCADA | ics, isf |
| 🔒 Jail Escape | jail |
| 🛠️ Utils | ctf, wordlist, passgen, hexview, bashgen, pygen, timestamp, cidr, encode, arsenal, rar2john, zip2john, pdf2john, ssh2john, office2john, luks2john, exploit-search, virusgen, patchgen |
---
## Guides
- 📖 [Guide complet en Français](GUIDE_FR.md)
- 📖 [Full Guide in English](GUIDE_EN.md)