PhoneSploit Pro VS ZoomEye

mimikatz - It's well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket, build Golden tickets, play with certificates or private keys, vault... maybe make coffee?

Shodan - Shodan is the world's first search engine for Internet-connected devices.

Exploit Pack - Exploit Pack is an open source project security that will help you adapt exploit codes on-the-fly.

Censys - Censys helps organizations, individuals, and researchers find and monitor every server on the Internet to reduce exposure and improve security.

Rapid7 - Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the world's best penetration testing software now. DownloadPen testing software to act like an attacker.

Social-Engineer Toolkit - The Social-Engineer Toolkit is an open source penetration testing framework designed for social...