# THADD OS — offensive security / network / exploitation (optional set)
# Debian 12 names only. Kali/Parrot-only tools live in the runtime Toolbox
# (tools/toolbox) because Debian does not package them.
# ---------------------------------------------------------------------------
nmap
ncat
netcat-openbsd
netcat-traditional
socat
masscan
zmap
arping
arp-scan
hping3
fping
mtr-tiny
tcpdump
tshark
wireshark
wireshark-common
termshark
ettercap-text-only
dsniff
mitmproxy
bettercap
macchanger
aircrack-ng
airgraph-ng
kismet
reaver
bully
pixiewps
hcxdumptool
hcxtools
wifite
wifiphisher
hostapd
hostapd-wpe
wpa-supplicant
wireless-tools
iw
iwd
blueman
bluez
bluetooth
rfkill
gnuradio
hydra
hydra-gtk
john
john-data
hashcat
hashcat-data
medusa
ncrack
patator
crunch
wordlists
wfuzz
wfuzz
sqlmap
nikto
wpscan
whatweb
wafw00f
dirb
dirbuster
gobuster
ffuf
feroxbuster
dnsenum
dnsrecon
dnsmap
fierce
subfinder
amass
theharvester
recon-ng
maltego
spiderfoot
nessus
openvas
gvm
nikto
w3af
skipfish
zaproxy
burpsuite
owasp-mantra-ff
beef-xss
set
social-engineer-toolkit
responder
impacket-scripts
python3-impacket
python3-pwntools
python3-scapy
scapy
crackmapexec
netexec
evil-winrm
pypykatz
kerberoast
bloodhound
neo4j
metasploit-framework
armitage
msfpc
exploitdb
searchsploit
routersploit
commix
xsstrike
sstimap
nosqlmap
joomscan
droopescan
git-dumper
gitleaks
trufflehog
seclists
payloadsallthethings
wireless-regdb
proxychains4
torsocks
tor
openvpn
wireguard-tools
openconnect
strongswan
ike-scan
vpn-slice
sslscan
sslyze
testssl.sh
openssl
sslstrip
mitm6
dnschef
yersinia
scapy
hping3
tcpreplay
tcprewrite
netsniff-ng
nethogs
iftop
iptraf-ng
bmon
vnstat
bandwhich
tcpflow
tcpick
chaosreader
ngrep
socat
trickle
p0f
arpwatch
snort
suricata
zeek
bro
ossec-hids
wazuh-agent
sagan
fail2ban
crowdsec
