Security Tools Installer for Mac

A collection of installation scripts for common security testing, penetration testing, and forensics tools. This repository provides automated installation of various security tools using different package managers (Homebrew, pip, Ruby gems) and custom installations.

Think about it as a portion of Kali Linux in your Mac OS.

🚀 Quick Start

• Clone this repository:

git clone https://github.com/IonBazan/mac-pentest-tools.git
cd mac-pentest-tools

• Run the installation script:

./install_all.sh

Or run individual scripts for specific package managers:

./installbrewtools.sh    # Install Homebrew packages ./installpiptools.sh     # Install Python packages ./install_gems.sh          # Install Ruby gems ./installcustomtools.sh  # Install tools from source ./install_wordlists.sh     # Install security wordlists (~8GB)

📦 Included Tools

Do note that some tools are missing and won't be installed at the moment for various reasons. Such packages will be reported to stdout and skipped.

Network Analysis & Scanning

| Tool | Package Manager | Description | |------|----------------|-------------| | nmap | Homebrew | Network mapper and security scanner | | masscan | Homebrew | TCP port scanner | | rustscan | Homebrew | Modern port scanner written in Rust | | tcpdump | Homebrew | Packet analyzer | | ngrep | Homebrew | Network packet analyzer | | p0f | Homebrew | OS detection tool | | netcat | Homebrew | Swiss army knife for TCP/IP | | socat | Homebrew | Socket relay tool | | wireshark | Homebrew Cask | GUI network protocol analyzer | | scapy | pip | Interactive packet manipulation | | mitmproxy | Homebrew | Interactive HTTPS proxy |

Web Application Security

| Tool | Package Manager | Description | |------|----------------|-------------| | sqlmap | pip | SQL injection and database takeover | | burp-suite | Homebrew Cask | Web security testing | | nikto | Homebrew | Web server vulnerability scanner | | ffuf | Homebrew | Web fuzzing tool | | feroxbuster | Homebrew | Fast content enumeration | | gobuster | Homebrew | Content discovery tool | | wpscan | Ruby | WordPress security scanner | | arachni | Ruby | Web app testing framework | | wafw00f | pip | WAF detection tool | | dirsearch | pip | Web path brute forcer | | xsser | pip | Cross-site scripting framework | | whatweb | pip | Website fingerprinting | | droopescan | pip | Drupal, WordPress scanner | | nuclei | pip | Template-based scanner |

Network Attack & Exploitation

| Tool | Package Manager | Description | |------|----------------|-------------| | bettercap | Homebrew | Network attack framework | | ettercap | Homebrew | Network protocol analyzer | | proxychains-ng | Homebrew | Force TCP through proxy | | routersploit | pip | Embedded device testing | | responder | pip | Network poisoning tool |

Active Directory & Windows Security

| Tool | Package Manager | Description | |------|----------------|-------------| | crackmapexec | pip | Active Directory testing | | bloodhound | pip | AD relationship visualizer | | impacket | pip | Network protocol toolkit | | pypykatz | pip | Credential dumper | | certipy | pip | AD certificate toolkit | | dploot | pip | DPAPI abuse toolkit | | wesng | pip | Vulnerability checker | | pyrdp | pip | Remote desktop MITM |

Password & Hash Tools

| Tool | Package Manager | Description | |------|----------------|-------------| | hashcat | Homebrew | Password cracker | | john | Homebrew | John the Ripper password cracker | | crunch | Homebrew | Custom wordlist creator | | hydra | Homebrew | Network login cracker | | fcrackzip | Homebrew | Archive password cracker | | hashdeep | Homebrew | Recursive hash computing | | medusa | Homebrew | Parallel login brute-forcer | | hashid | pip | Hash type identifier | | pydictor | pip | Password dictionary generator | | changeme | pip | Default password checker |

Information Gathering & OSINT

| Tool | Package Manager | Description | |------|----------------|-------------| | theharvester | Homebrew | Email and subdomain harvester | | maltego | Homebrew Cask | OSINT visualization and data mining | | amass | Homebrew | DNS enumeration tool | | subfinder | Homebrew | Passive subdomain enumerator | | dnsmap | Homebrew | Subdomain brute-forcing | | recon-ng | Homebrew | Web reconnaissance framework | | dnsrecon | pip | DNS information gathering | | dnsenum | pip | DNS information gathering | | dnstwist | pip | Domain permutation engine | | sublist3r | pip | Subdomain discovery tool | | photon | pip | OSINT gathering tool | | fierce | pip | DNS analysis tool |

Forensics & Analysis

| Tool | Package Manager | Description | |------|----------------|-------------| | binwalk | Homebrew | Firmware analyzer | | foremost | Homebrew | Data carving tool | | radare2 | Homebrew | Binary analyzer | | yara | Homebrew | Malware classification | | ghidra | Homebrew Cask | NSA's reverse engineering tool | | cutter | Homebrew Cask | GUI for radare2 | | binary-ninja | Homebrew Cask | Reverse engineering platform | | hopper | Homebrew Cask | Reverse engineering tool | | ida-free | Homebrew Cask | Industry standard RE tool | | volatility3 | pip | Memory analysis framework | | oletools | pip | MS Office analysis tools | | pyexfil | pip | Exfiltration testing | | pefile | pip | Windows PE file parser | | angr | pip | Program analysis framework |

Exploitation Frameworks

| Tool | Package Manager | Description | |------|----------------|-------------| | metasploit | Homebrew | Penetration testing framework | | empire | pip | PowerShell post-exploitation | | ronin | Ruby | Ruby exploitation framework |

Code Analysis & Security

| Tool | Package Manager | Description | |------|----------------|-------------| | bandit | pip | Python code analysis | | safety | pip | Python dependency scanner | | trufflehog | pip | Find credentials in code |

Dynamic Analysis & Instrumentation

| Tool | Package Manager | Description | |------|----------------|-------------| | frida-tools | pip | Runtime injection toolkit | | pwntools | pip | Exploit development |

Mobile Security

| Tool | Package Manager | Description | |------|----------------|-------------| | android-platform-tools | Homebrew | ADB and fastboot tools |

Custom Installations

| Tool | Installation | Description | |------|-------------|-------------| | PowerSploit | Custom | PowerShell security tools | | Nishang | Custom | PowerShell attack framework | | Inveigh | Custom | Windows spoofing tool | | Unicorn | Custom | PowerShell exploitation | | Proxmark3 | Custom | RFID testing toolkit | | XSStrike | Custom | Advanced XSS detection |

📚 Wordlists

The install_wordlists.sh script installs common security wordlists and resources (~8GB total):

• SecLists - Comprehensive security wordlists
• FuzzDB - Attack patterns and primitives
• PayloadsAllTheThings - Useful payloads and bypasses
• Various specialized wordlists for:

Contributing

Contributions are welcome and highly appreciated. To contribute a new tool to this collection:

• Fork the repository and create a new branch
• Add the tool to the appropriate category in README.md following this format:

| tool-name | package-manager | brief-description |

• Add the package to the corresponding installation script:

• Place the package under the correct category section in the script
• Submit a pull request with your changes

• The tool is security/pentesting focused
• The package manager and installation method are correct
• The description is clear and concise
• The tool is placed in the most appropriate category

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

⚠️ Disclaimer

These tools are intended for legal security testing and educational purposes only. Users are responsible for complying with applicable laws and regulations.