anchor.diff:  Enumeration;dnsenum;http://code.google.com/p/dnsenum/;The Purpose Of Dnsenum Is To Gather As Much Information As Possible About A Domain.
   DNS Utilities;dnsgram;https://doc.powerdns.com/md/manpages/dnsgram.1/;Dnsgram Is A Debugging Tool For Intermittent Resolver Failures. It Takes One Or More Input Pcap Files And Generates Statistics On 5 Second Segments Allowing The Study Of Intermittent Resolver Issues.
   Enumeration;Dnsmap;http://www.gnucitizen.org/blog/new-version-of-dnsmap-out/;Dnsmap Is Mainly Meant To Be Used By Pentesters During The Information Gathering/Enumeration Phase Of Infrastructure Security Assessments.
  -Reverse Engineering Tools;dnSpy;https://github.com/0xd4d/dnSpy;Dnspy Is A Tool To Reverse Engineer .Net Assemblies
  +Disassemblers;dnSpy;https://github.com/0xd4d/dnSpy;.NET assembly editor, decompiler and debugger.
   Enumeration;Dnsrecon;http://www.darkoperator.com/blog/2009/4/3/dns-recon-tool-written-in-ruby.html;I Wrote This Tool Back In Late 2006 And It Has Been My Favorite Tool For Enumeration Thru Dns, In Great Part Because I Wrote It And It Gives The Output In A Way That I Can Manipulate It In My Own Style.  One Of The Features That I Used The Most And Gave Me Excellent Results Is The Srv Record Enumeration.
   DNS Utilities;dnsreplay;https://doc.powerdns.com/md/manpages/dnsreplay.1/;Dnsreplay Takes Recorded Questions And Answers And Replays Them To The Specified Nameserver And Reporting Afterwards Which Percentage Of Answers Matched, Were Worse Or Better. Then Compares The Answers And Some Other Metrics With The Actual Ones With Those Found In The Dumpfile.
   DNS Utilities;dnsscan;https://doc.powerdns.com/md/manpages/dnsscan.1/;Dnsscan Takes One Or More Infiles In Pcap Format And Generates A List Of The Number Of Queries Per Query Type.
   DNS Utilities;dnsscope;https://doc.powerdns.com/md/manpages/dnsscope.1/;Dnsscope Takes An Input Pcap And Generates Some Simple Statistics Outputs These To Console.
   Enumeration;Dnstracer;http://www.mavetju.org/unix/dnstracer.php;Dnstracer Determines Where A Given Domain Name Server (Dns) Gets Its Information From, And Follows The Chain Of Dns Servers Back To The Servers Which Know The Data.
  +Domain analysis;dnstwist;https://github.com/elceef/dnstwist;Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
   DNS Utilities;dnswasher;https://doc.powerdns.com/md/manpages/dnswasher.1/;Dnswasher Takes An Input File In Pcap Format And Writes Out A Pcap File, While Obfuscating End-User Ip Addresses. This Is Useful To Share Data With Third Parties While Attempting To Protect The Privacy Of Your Users.
  +Web scanner malware;Document Analyzer;https://www.document-analyzer.net/;Free dynamic analysis of DOC and PDF files.
   OSInt Tools;dork-cli;https://github.com/jgor/dork-cli;Command-Line Google Dork Tool.
   Traffic Analysis/Inspection;DPDK;http://dpdk.org/;Is A Set Of Libraries And Drivers For Fast Packet Processing. It Was Designed To Run On Any Processors. The First Supported Cpu Was Intel X86 And It Is Now Extended To Ibm Power 8, Ezchip Tile-Gx And Arm. It Runs Mostly In Linux Userland. A Freebsd Port Is Available For A Subset Of Dpdk Features.
   Traffic Analysis/Inspection;DPKT;http://code.google.com/p/dpkt/;Python Packet Creation/Parsing Library.
   Scanning;Dr.Morena;http://www.securityfriday.com/tools/DrMorena.html;Dr.Morena Is A Tool To Confirm The Rule Configuration Of A Firewall. The Configuration Of A Firewall Is Done By Combining More Than One Rule.
  +Web scanner malware;DRAKVUF;https://github.com/tklengyel/drakvuf;Dynamic malware analysis system.
   Network Tools;Dripcap;https://github.com/dripcap/dripcap;Caffeinated Packet Analyzer
   Network Tools;Dshell;https://github.com/USArmyResearchLab/Dshell;Network Forensic Analysis Framework
   Sniffer;dsniff;http://monkey.org/~dugsong/dsniff/;Dsniff Is A Collection Of Tools For Network Auditing And Penetration Testing. Dsniff, Filesnarf, Mailsnarf, Msgsnarf, Urlsnarf, And Webspy Passively Monitor A Network For Interesting Data.
  
positive.code: Forensic;WinHex;http://www.winhex.com/winhex/;A Hexadecimal Editor, Helpful In The Realm Of Computer Forensics, Data Recovery, Low-Level Data Processing, And It Security
  Traffic Analysis/Inspection;WinPcap;http://www.tcpdump.org/wpcap.html;An Extract Of A Message From Guy Harris On State Of Winpcap And Windump.
  Wireless;WirelessMon;http://www.passmark.com/products/wirelessmonitor.htm;Wirelessmon Is A Software Tool That Allows Users To Monitor The Status Of Wireless Wifi Adapter(S) And Gather Information About Nearby Wireless Access Points And Hot Spots In Real Time.
  Networking;Wireshark;https://www.wireshark.org/;Analyze The Network Dumps
  Traffic Analysis/Inspection;Wireshark suit;http://wiki.wireshark.org/Tools;The Well-Known Tool Suit To Support Packet Analyzer And Protocol Decoder. It Also Includes A Few Practical Tools And Scripts To Support Most Of The Common Usage.
  Enumeration;wmi client;http://dev.zenoss.org/svn/trunk/inst/externallibs/;This Dcom/Wmi Client Implementation Is Based On Samba4 Sources. It Uses Rpc/Dcom Mechanisms To Interact With Wmi Services On Windows 2000/Xp/2003 Machines.
  Python Misc;wmiexec.py;https://github.com/CoreSecurity/impacket/blob/master/examples/wmiexec.py;Execute Powershell Commands Quickly And Easily Via Wmi
  
negative.code: Bluetooth;BlueScanner;http://sourceforge.net/projects/bluescanner/;Bluescanner Is A Bash Script That Implements A Scanner For Bluetooth Devices. It'S A Tool Designed To Extract As Much Information As Possible From Bluetooth Devices Without The Requeriment To Pair.
  Bluetooth;Bluesnarfer;http://www.alighieri.org/project.html;Bluesnarfer Steals Informations From A Wireless Device Through A Bluetooth Connection. The Connection Can Be Between Mobile Phones, Pdas Or Laptops. You Can Access To A Calendar, Contact List, Emails And Text Messages.
  Bluetooth;BlueSpam;http://www.mulliner.org/palm/bluespam.php;Bluespam Searches For All Discoverable Bluetooth Devices And Sends A File To Them (Spams Them) If They Support Obex. By Default A Small Text Will Be Send. To Customize The Message That Should Be Send You Need A Palm With An Sd/Mmc Card, Then You Create The Directory /Palm/Programs/Bluespam/Send/ And Put The File (Any Type Of File Will Work .Jpg Is Allways Fun) You Would Like To Send Into This Directory.
  Disassemblers;Bokken;http://www.bokken.re/;GUI for Pyew and Radare
  Domain analysis;boomerang;https://github.com/EmersonElectricCo/boomerang;A tool designed for consistent and safe capture of off network web resources.
  Shellcode analysis;box-js;https://github.com/CapacitorSet/box-js;A tool for studying Java Script malware, featuring JScript/WScript support and ActiveX emulation.
  Network;Bro;https://www.bro.org;Protocol analyzer that operates at incredible scale
  Network;BroYara;https://github.com/hempnall/broyara;Use Yara rules from Bro.
  Passwords;Bruter;http://sourceforge.net/projects/worawita/;Bruter Is A Parallel Network Login Brute-Forcer On Win32. This Tool Is Intended To Demonstrate The Importance Of Choosing Strong Passwords. The Goal Of Bruter Is To Support A Variety Of Services That Allow Remote Authentication.
  Bluetooth;BTCrawler;http://sourceforge.net/projects/btcrawler/;An Application Used To To Discover Bluetooth Devices And The Services They Provide. Runs On J2Me Enabled Devices Supporting Midp 2.0 And Jsr082 (Java Api For Bluetooth)
  Bluetooth;BTScanner;http://www.pentest.co.uk/downloads.html;Btscanner For Xp Is A Bluetooth Environment Auditing Tool For Microsoft Windows Xp, Implemented Using The Bluecove Libraries (An Open Source Implementation Of The Jsr-82 Bluetooth Api For Java).
  Live CD;Bugtraq;http://bugtraq-team.com/;Bugtraq Is A Distribution Based On The 2.6.38 Kernel Has A Wide Range Of Penetration And Forensic Tools. Bugtraq Can Install From A Live Dvd Or Usb Drive, The Distribution Is Customized To The Last Package, Configured And Updated The Kernel And The Kernel Has Been Patched For Better Performance And To Recognize A Variety Of Hardware, Including Wireless Injection Patches Pentesting Other Distributions Do Not Recognize.
  File Carving;bulk_extractor;https://github.com/simsong/bulk_extractor;Fast file carving tool.
  Web Scanners;Burp Suite;http://www.portswigger.net/burp/;Burp Suite Is An Integrated Platform For Performing Security Testing Of Web Applications.
  Penetration Testing Distributions;Buscador;https://inteltechniques.com/buscador/;A Linux Virtual Machine That Is Pre-Configured For Online Investigators
  Passwords;CacheDump;http://www.off-by-one.net/;Cachedump, Licensed Under The Gpl, Demonstrates How To Recover Cache Entry Information: Username And Mscash.
  Passwords;Cain & Abel;http://www.oxid.it/cain.html;Cain & Abel Is A Password Recovery Tool For Microsoft Operating Systems. It Allows Easy Recovery Of Various Kind Of Passwords By Sniffing The Network.
  Web Scanners;CAL9000;https://www.owasp.org/index.php/Category:OWASP_C AL9000_Project;Cal9000 Is A Collection Of Web Application Security Testing Tools That Complement The Feature Set Of Current Web Proxies And Automated Scanners. Cal9000 Gives You The Flexibility And Functionality You Need For More Effective Manual Testing Efforts.
  Vuln Scanners;Canvas;http://www.immunitysec.com/products-canvas.shtml;Immunity'S Canvas Makes Available Hundreds Of Exploits, An Automated Exploitation System, And A Comprehensive, Reliable Exploit Development Framework To Penetration Testers And Security Professionals Worldwide.
  Disassemblers;Capstone;https://github.com/aquynh/capstone;Disassembly framework for binary analysis and reversing, with support for many architectures and bindings in several languages.
  Network;CapTipper;https://github.com/omriher/CapTipper; Malicious HTTP traffic explorer.
  Web Scanners;CAT;http://www.contextis.co.uk/research/tools/cat/;Cat Is Designed To Facilitate Manual Web Application Penetration Testing For More Complex, Demanding Application Testing Tasks.
  Vuln Scanners;CAT.NET;http://www.microsoft.com/en-us/download/details.aspx?id=19968;Cat.Net Is A Binary Code Analysis Tool That Helps Identify Common Variants Of Certain Prevailing Vulnerabilities That Can Give Rise To Common Attack Vectors Such As Cross-Site Scripting (Xss), Sql Injection And Xpath Injection.
  OSInt Tools;Censys;https://www.censys.io/;Collects Data On Hosts And Websites Through Daily Zmap And Zgrab Scans
  