Pentesting Tools: Guides, Scripts & Docker Lab

Pentesting scripts and diagnostics. Ready to run.

At a Glance

17 Tools

From nmap to aircrack-ng — scanning, packet analysis, password cracking, web fuzzing, and more.

28 Use-Case Scripts

Task-focused scripts for common pentest scenarios. Run one command, get what you need.

Docker Lab

DVWA, Juice Shop, WebGoat, and VulnerableApp for safe, legal practice.

Diagnostics

Auto-report scripts for DNS, connectivity, and performance troubleshooting.

JSON Output

Pipe any script through -j for structured JSON. Add -x to capture live results.

Nmap Network scanning and host discovery

TShark CLI packet capture and analysis

Metasploit Penetration testing framework

Hashcat GPU-accelerated password cracking

John the Ripper Versatile password cracker

SQLMap Automatic SQL injection testing

Nikto Web server vulnerability scanner

hping3 Packet crafting and network probing

Aircrack-ng WiFi security auditing suite

Skipfish Web application security scanner

Foremost File carving and data recovery

ffuf Fast web fuzzer

Gobuster Web content and DNS discovery

curl HTTP requests and endpoint testing

dig DNS record lookups and tracing

Netcat Network Swiss Army knife

Traceroute Route tracing and latency analysis

DNS Diagnostic Comprehensive DNS troubleshooting report

Connectivity Diagnostic Layer-by-layer connectivity check from DNS to TLS

Performance Diagnostic Hop-by-hop latency analysis with traceroute and mtr

Getting Started Install tools, verify setup, and start the lab

Lab Walkthrough Guided pentest engagement against Docker targets

Script Flags & JSON Use -x, -j, and pipe to jq

I Want To... Find the right tool by task

Reconnaissance Learning path: dig, nmap, tshark, metasploit

Web App Testing Learning path: nmap, nikto, skipfish, sqlmap

Network Debugging Learning path: dig, traceroute, hping3, curl, tshark