security-tools-reference

This repository is a collection of research notes and documentation about cybersecurity and penetration testing tools. It is intended for educational purposes, lab testing, and authorized security assessments only. The project gathers written explanations of how various security tools work, covering their architecture, workflows, and defensive measures.

The repository is organized as an index of individual markdown files, each dedicated to a specific tool. The tools span several categories including social engineering, open source intelligence (OSINT), network security, web application testing, exploitation, and password cracking. Some of the documented tools are widely known in the security community, such as Nmap for network scanning, Metasploit for exploitation research, Burp Suite for web application testing, and Wireshark for network packet analysis.

Other entries cover tools focused on investigation and reconnaissance. Sherlock helps find social media accounts by searching for a username across networks. Holehe checks whether an email address is registered on various platforms. GhostTrack is described as a utility for gathering intelligence from digital footprints. Several files document social engineering and phishing tools, including the Social Engineer Toolkit, Zphisher and PyPhisher, and CamPhish. These are presented with the framing that they are meant for understanding attack methods in controlled or authorized environments.

The documentation also covers tools used for vulnerability detection and password auditing. Nessus is listed as a scanner for finding security flaws and misconfigurations. John the Ripper is described as a password cracker used for auditing weak password hashes. Cobalt Strike is included as software for simulating adversary behavior after a system has been compromised. Bettercap is documented as a tool for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth, and Ethernet. SQLMap is covered for automating detection and exploitation of SQL injection flaws in web applications.

The repository includes a disclaimer stating that the material is strictly for education, lab testing, and authorized penetration testing. It explicitly prohibits using the documented tools against systems without explicit permission. The README is concise and serves mainly as a directory pointing to the individual tool files, which are not shown in the repository description itself.