#Pentester Toolkit - GO Edition
#Good list of the trillest pentesting weapons written in Go, and a skid-level script to get 'em all brainlessly.
#Also lots of these have dependencies or binary releases that work a bit better so check the readmes instead of your berzerk download mania, take it easy, bruh
# to download all of them you can just
#: cat README.md | grep github | awk -F "https://" '{print $2}' | tee goodboy.txt
#: for goodboy in $(cat goodboy.txt); do go get $goodboy ; done
# some people need to add GOMODULE111=ON to the "go get $goodboy GOMODULE111=ON" part to download anything in Go
#Thanks for reading!
#Recon/Osint/Content Discovery
https://github.com/devanshbatham/golookup
https://github.com/devanshbatham/gorecon
https://github.com/j3ssie/metabigor
https://github.com/badoux/goscraper
https://github.com/tomsteele/go-nmap
https://github.com/lair-framework/go-nmap
https://github.com/s-rah/onionscan
https://github.com/micheneriksen/aquatone
https://github.com/proabiral/gorequest
https://github.com/rverton/webanalyze
https://github.com/rwcarlsen/goexif
https://github.com/sensepost/gowitness
https://github.com/tomnomnom/rawhttp
https://github.com/theblackturtle/fprobe
https://github.com/mvdan/xurls
https://github.com/rverton/webanalyze
https://github.com/root4loot/rescope
https://github.com/harleo/asnip
https://github.com/harleo/knockknock
https://github.com/hahwul/s3reverse
#Content/Directory Enumeration/Discovery
https://github.com/stefanoj3/dirstalk
https://github.com/OJ/gobuster
https://github.com/tomnomnom/waybackurls
https://github.com/tomnomnom/assetfinder
https://github.com/lc/gau
https://github.com/dzonerzy/goWAPT
https://github.com/m-mizutani/urlscan-go
https://github.com/temoto/robotstxt
#Subdomain Enumeration
https://github.com/jakewarren/tldomains
https://github.com/Q2h1Cg/dnsbrute
https://github.com/lukasikic/subzy
https://github.com/miekg/dns
https://github.com/projectdiscovery/subfinder
https://github.com/projectdiscovery/retryabledns
https://github.com/projectdiscovery/dnsprobe
https://github.com/subfinder/goaltdns
#Subdomain Takeover
https://github.com/ice3man543/sub0ver
https://github.com/anshumanbh/tko-subs
#Parameter Discovery
https://github.com/m4ll0k/aron
#Versatile/Multi-Use/Frameworks
https://github.com/ffuf/ffuf
https://github.com/amyangXYZ/assassingo
https://github.com/future-architect/vuls
https://github.com/proabiral/inception
https://github.com/projectdiscovery/nuclei
https://github.com/tomnomnom/hacks
https://github.com/jaeles-project/jaeles
https://github.com/tomnomnom/gf
https://github.com/gocaio/goca
#Password/Wordlist Creation
https://github.com/kevin-ott/gocewl
https://github.com/tomnomnom/unfurl
#Network Pentesting/Scanners/Ports
https://github.com/cgrates/rpcclient
https://github.com/DominicBreuker/pspy
https://github.com/nray-scanner/nray
https://github.com/marco-lancini/goscan
https://github.com/Ice3man543/hawkeye
https://github.com/sundowndev/go-covermyass
#Web vulns
https://github.com/jmoiron/sqlx
https://github.com/hahwul/dalfox
https://github.com/dsopas/rfd-checker
https://github.com/jamesbcook/mssql-pillage
https://github.com/hahwul/websocket-connection-smuggler
#Knowledge
https://github.com/mozqnet/go-exploitdb
https://github.com/pathwar/pathwar
#Github Disclosures
https://github.com/micheneriksen/gitrob
https://github.com/zricethezav/gitleaks
#Red-Team/Shells
https://github.com/sysdream/hershell
https://github.com/ne0nd0g/merlin
https://github.com/0x09AL/go-deliver
https://github.com/sensepost/ruler
https://github.com/Dliv3/Venom
https://github.com/wangyihang/platypus
https://github.com/llkat/rsockstun
#Phishing
https://github.com/dsnezhkov/deepsea
#Javascript-related
https://github.com/003random/GetJS
#Container/Docker pentesting
https://github.com/Ullaakut/Gorsair
#Mobile
https://github.com/ndelphit/apkurlgrep
#Not pentest related but killer and beneficial to workflow
https://github.com/akamensky/argparse
https://github.com/cjbassi/gotop
https://github.com/junegunn/fzf
https://github.com/spf13/afero
scumdestroy/pentester-toolkit-GO-edition
Good list of the trillest pentesting weapons written in Go, and a skid-level script to get 'em all brainlessly.