Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Tools: discovery (11)

Pentesting tools tagged discovery. See all tools or the category key.

Team (best effort)

amass

In-depth DNS Enumeration and Network Mapping

network-information network-service-discovery discovery Red Team

arping

Sends IP and/or ARP pings (to the MAC address)

remote-system-discovery discovery Red Team

bloodhound

Six Degrees of Domain Admin, BloodHound CE

active-directory discovery Red Team

enum4linux

Enumerates info from Windows and Samba systems

network-share-discovery discovery Red Team

fierce

Domain DNS scanner

remote-system-discovery discovery Red Team

hping3

Active Network Smashing Tool

remote-system-discovery discovery Red Team

masscan

TCP port scanner

network-service-discovery discovery Red Team

netdiscover

Active/passive network address scanner using ARP requests

system-network-configuration-discovery discovery Red Team

nmap

The Network Mapper

network-information vulnerability-scanning reconnaissance network-service-discovery discovery non-application-layer-protocol Red Team

tcpdump

Command-line network traffic analyzer

network-sniffing discovery Red Team

wireshark

Network traffic analyzer - graphical interface

network-sniffing discovery Red Team