Forge Anvil

The pentest kit

The tools the Anvil carries for a real engagement, and the labs that teach each one. Where a lab tool is still simulated-only, it says so plainly rather than implying the kit will run it.

What the kit is

The Forge Anvil carries a qualified catalog: every tool has an adapter, a fixed set of approved operations, a risk class and mandatory evidence capture. The browser labs simulate the same workflow. This page is the join between the two — so you know, before an engagement, which of the moves you practiced will run for real on your own machine.

Get the Forge Anvil Practice in the simulator

Labs and tools

Switch between the lab's view of the kit and the kit's view of the labs.

Pentest: External Recon to Foothold

5 of 6 tools run for real in the kit · 83%

Launch lab

Real in the Anvil

NmapgobusterffufNiktohydra

Simulated in the lab only

Metasploit Framework

Pentest: Read the AD Attack Graph

0 of 6 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

BloodHoundPowerSploitImpacket suiteNetExec / CrackMapExecmimikatzMetasploit Framework

Pentest: Web App Assessment (OWASP Top 10)

5 of 7 tools run for real in the kit · 71%

Launch lab

Real in the Anvil

Burp Suite (import-only)sqlmapgobusterffufNikto

Simulated in the lab only

OWASP ZAPSemgrep

Pentest: Cloud Privilege Escalation

1 of 5 tools run for real in the kit · 20%

Launch lab

Real in the Anvil

Nmap

Simulated in the lab only

AWS CLIMetasploit FrameworkTrivyosquery

Pentest: Purple-Team Emulation

0 of 5 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

Atomic Red TeamMetasploit FrameworkPowerSploitmimikatzImpacket suite

Pentest: Wireless Assessment

1 of 5 tools run for real in the kit · 20%

Launch lab

Real in the Anvil

Nmap

Simulated in the lab only

aircrack-ng suiteWiresharktcpdumphashcat

Pentest: Authorized Phishing Simulation

0 of 5 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

Social-Engineer ToolkitLuckyStrikeMetasploit FrameworkBeEFCyberChef

Pentest: Defense Evasion and EDR Sidestep

0 of 4 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

Metasploit FrameworkPowerSploitmimikatzAtomic Red Team

Pentest: C2 Operations and Tunneling

0 of 3 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

Metasploit FrameworkImpacket suitePowerSploit

Pentest: Ransomware Adversary Emulation

0 of 5 tools run for real in the kit · 0%

Launch lab

Real in the Anvil

None qualified yet.

Simulated in the lab only

Atomic Red TeamMetasploit FrameworkPowerSploitmimikatzImpacket suite