Dual Use

ProxyChains-ng

C

Dual UseFeatured

Force any TCP connection through SOCKS4/5 or HTTP proxies. Chain multiple proxies for anonymity.

Socat

C

Dual Use

Multipurpose relay tool. Bidirectional data transfer between two data channels - sockets, files, pipes, devices.

ngrok

Go

Dual UseFeatured

Expose local servers to the internet via secure tunnels. Instant public URLs for localhost services.

Rclone

Go

Dual UseFeatured

rsync for cloud storage. Sync, copy, and mount 70+ cloud providers. Command-line Swiss army knife for cloud data.

GTFOBins

Shell

Dual UseFeatured

Curated list of Unix binaries that can be used to bypass security restrictions. Living off the land, documented.

LOLBAS

Shell

Dual UseFeatured

Living Off The Land Binaries, Scripts and Libraries for Windows. Documenting every Windows binary with offensive potential.

Sysinternals Suite

C/C++

Dual UseFeatured

Microsoft's advanced system utilities. PsExec, Process Monitor, Autoruns, TCPView - essential for both ops and offense.

Empire

Python

Dual UseFeatured

Post-exploitation agent built on PowerShell and Python. Cryptologically-secure communications and flexible architecture.

Tor

C

Dual UseFeatured

Anonymous communication network. Routes traffic through multiple relays to conceal location and usage.

OpenSSH

C

Dual Use

The SSH protocol implementation. Remote access, tunneling, port forwarding, SOCKS proxying - everywhere.

NetExec

Python

Dual UseFeatured

Network execution tool - the maintained successor to CrackMapExec. SMB, LDAP, WinRM, SSH, MSSQL, and more.

CobaltStrike Parser

Python

Dual Use

Parse and extract configs from Cobalt Strike beacons. Identify C2 servers, watermarks, and malleable C2 profiles.

PowerSploit

PowerShell

Dual Use

Collection of PowerShell post-exploitation modules. Credential theft, privilege escalation, persistence, exfiltration.

Nishang

PowerShell

Dual Use

PowerShell offensive security framework. Shells, backdoors, information gathering, and privilege escalation.

dnscat2

Ruby

Dual UseFeatured

Create an encrypted C2 channel over DNS. Tunnel data through DNS queries when all other protocols are blocked.

Notify

Go

Dual Use

Stream tool output to messaging platforms. Pipe results from any CLI tool to Slack, Discord, Telegram, or email in real-time.

PDTM

Go

Dual Use

ProjectDiscovery Tool Manager. Install, update, and manage all ProjectDiscovery tools from a single unified interface.

CyberChef

JavaScript

Dual Use

The Cyber Swiss Army Knife. Browser-based data transformation with 300+ operations for encoding, encryption, and analysis.

yt-dlp

Python

Dual Use

Feature-rich command-line video downloader supporting 1000+ sites.

OpenSnitch

Go

Dual Use

GNU/Linux interactive application firewall inspired by Little Snitch.

CTFd

Python

Dual Use

Capture The Flag competition platform for hosting jeopardy-style CTF events.

Vulhub

Dockerfile

Dual Use

Pre-built Docker-Compose vulnerable environments for security testing and CVE reproduction.

Infisical

TypeScript

Dual Use

Open-source secrets management platform with certificate lifecycle, privileged access management, and multi-environment sync.

Tirith

Rust

Dual Use

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell attacks, ANSI injection, and obfuscated payloads.