Loading interactive filters…
1200KM / index
Attack Tools
Evidence-linked tool pages with documented behaviors, existing author guides, detection workspaces and telemetry context. No tools execute in your browser.
Explore the matrix
Interactive ATT&CK & ATLAS Matrix — browse Enterprise, Mobile, ICS and AI technique pages by tactic.
Complete reference directory
- AADInternals
- AdFind
- Aircrack-ng
- Amass
- Arp
- AsyncRAT
- at
- attrib
- BITSAdmin
- BloodHound
- Brute Ratel C4
- Burp Suite
- Cachedump
- CARROTBALL
- certutil
- cipher.exe
- cmd
- Cobalt Strike
- ConnectWise
- Covenant
- CrackMapExec
- Crowbar
- CSPY Downloader
- DCRAT
- DirBuster
- Diskpart
- Donut
- dsquery
- Empire
- esentutl
- evilginx2
- Expand
- Fgdump
- FlexiSpy
- Forfiles
- FRP
- ftp
- gsecdump
- HackerAI
- Hashcat
- Havij
- HexStrike AI
- HTRAN
- Hydra
- ifconfig
- Imminent Monitor
- Impacket
- Invoke-PSImage
- ipconfig
- IronNetInjector
- John the Ripper
- Koadic
- LaZagne
- Lslsass
- MailSniper
- MCMD
- meek
- Metasploit Framework
- Mimikatz
- MimiPenguin
- Mythic
- NBTscan
- nbtstat
- Net
- netsh
- netstat
- ngrok
- Nikto
- Nltest
- Nmap
- NPPSPY
- Out1
- Pacu
- Pass-The-Hash Toolkit
- PcShare
- Peirates
- Personal Pass Generator
- Ping
- PoshC2
- PowerSploit
- PsExec
- Pupy
- pwdump
- QuasarRAT
- Quick Assist
- RawDisk
- Rclone
- Reg
- Remcos
- RemoteUtilities
- Responder
- ROADTools
- route
- RTSP Brute Force Tool
- Rubeus
- Ruler
- schtasks
- SDelete
- ShimRatReporter
- Shodan
- SILENTTRINITY
- Sliver
- SpiderFoot
- spwebmember
- sqlmap
- Systeminfo
- Tasklist
- Tor
- TruffleHog
- UACMe
- Wevtutil
- Windows Credential Editor
- Winexe
- Xbot
- xCmd
- ZAP
Connected ecosystem references
Explore the three modules
Attack Tools · Attack Simulations · Detection Rules · Telemetry · Tags
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.