Recently Added

Cartography

Python

Intel graph of cloud infrastructure. Maps relationships between AWS, GCP, Azure, and other services into a Neo4j graph.

Steampipe

Go

Query cloud APIs with SQL. Zero-ETL approach to infrastructure visibility across AWS, Azure, GCP, and 140+ plugins.

cloud_enum

Python

Multi-cloud OSINT enumeration. Discovers public resources across AWS, Azure, and GCP from keyword input.

CloudFlair

Python

Find origin servers behind Cloudflare. Uses Censys to discover the real IP address of Cloudflare-protected websites.

MISP

PHP/Python

Open-source threat intelligence and sharing platform. Structured IOC management, feeds, correlation, and STIX/TAXII export.

OpenCTI

TypeScript/Python

Cyber threat intelligence platform. Knowledge management for threat data with STIX2 native storage and graph visualization.

TheHive

Scala/JavaScript

Incident response case management platform. Collaborative investigation with observable analysis, playbooks, and MISP integration.

GRR Rapid Response

Python

Remote live forensics framework by Google. Deploy agents across thousands of endpoints for artifact collection and analysis.

KAPE

C#

Kroll Artifact Parser and Extractor. Fast triage collection and parsing of forensic artifacts from Windows, macOS, and Linux.

Cortex

Scala/Python

Observable analysis and active response engine. Analyze IOCs at scale with 100+ analyzers for IPs, hashes, URLs, and domains.

dnSpy

C#

.NET debugger, decompiler, and assembly editor. Inspect and modify .NET and Unity assemblies without source code.

ILSpy

C#

Open-source .NET decompiler and assembly browser. Produces clean C# from compiled binaries with cross-platform support.

x64dbg

C++

Open-source x64/x32 debugger for Windows. Full-featured binary debugger with plugin ecosystem for malware analysis and reverse engineering.

Detect It Easy

C++/Qt

Binary packer and compiler detection. Identifies compilers, linkers, packers, and protectors used to build PE, ELF, and Mach-O files.

Interactsh

Go

Out-of-band interaction server. Detect blind vulnerabilities with DNS, HTTP, SMTP, and LDAP callback listeners.

Scapy

Python

Interactive packet manipulation library. Craft, send, capture, and decode network packets with a powerful Python interface.

Reaver

C

WPS brute force attack tool. Exploits Wi-Fi Protected Setup to recover WPA/WPA2 passphrases from WPS-enabled routers.

Ignorant

Python

Phone number OSINT. Check if a phone number is registered on various platforms without alerting the target.

angr

Python

Binary analysis framework. Symbolic execution, CFG recovery, and vulnerability discovery for compiled binaries in Python.

RetDec

C++

Retargetable decompiler by Avast. Converts machine code back to C from x86, ARM, MIPS, and PowerPC binaries.

Rizin

C

Reverse engineering framework forked from radare2. Modernized API, improved UX, with Cutter as its official GUI.

Unicorn Engine

C

Lightweight CPU emulator framework. Emulate x86, ARM, MIPS, and more for binary analysis, fuzzing, and instrumentation.

Capstone

C

Multi-architecture disassembly framework. The engine behind Ghidra, radare2, and dozens of security tools.

Pixiewps

C

WPS offline brute force. Exploits weak random number generation in WPS implementations to recover PINs in seconds.

mdk4

C

802.11 protocol exploitation toolkit. Authentication floods, beacon floods, deauth attacks, and SSID fuzzing for wireless testing.

hostapd-mana

C

Rogue access point and evil twin toolkit. Modified hostapd for wireless credential capture and MitM attacks.

WiFi-Pumpkin3

Python

Rogue access point framework. GUI-driven evil twin with captive portal, credential harvesting, and transparent proxy support.

Aquatone

Go

Visual web discovery tool. Takes screenshots of web pages across large target lists and generates browsable HTML reports.

EyeWitness

Python

Web screenshot and categorization tool. Captures screenshots of web pages, RDP, and VNC services with auto-categorization.

CRLFuzz

Go

CRLF injection scanner. Fast detection of HTTP response splitting vulnerabilities across multiple URLs.

Smuggler

Python

HTTP request smuggling tester. Detects CL.TE, TE.CL, and TE.TE desync vulnerabilities in web servers and proxies.

RegRipper

Perl

Windows registry forensic parser. Extracts and decodes forensic artifacts from registry hives with extensible plugins.

bulk_extractor

C++

High-performance forensic data carver. Extracts email addresses, URLs, credit cards, and other artifacts from disk images at speed.

CUPP

Python

Common User Passwords Profiler. Generates targeted wordlists based on personal information about the target.

Patator

Python

Multi-purpose brute force tool. Modular design for attacking SSH, FTP, HTTP, SMB, LDAP, and dozens of other protocols.

Mentalist

Python

Wordlist generation GUI. Visual chain-based rule builder that outputs wordlists or hashcat/JtR rule files.

WeirdAAL

Python

AWS Attack Library. Enumerate, exploit, and backdoor AWS services with organized modules for cloud penetration testing.

Zeek

C++

Network analysis framework (formerly Bro). Deep packet inspection, protocol analysis, and security monitoring at scale.

Arkime

JavaScript/C

Full packet capture and search system (formerly Moloch). Indexed network traffic with a web UI for hunting and forensics.

Suricata

C/Rust

High-performance IDS/IPS and network monitoring engine. Multi-threaded with Snort-compatible rules and protocol logging.

osquery

C++

SQL-powered endpoint visibility. Query operating system state as a relational database for security monitoring and compliance.

Wazuh

C/Python

Open-source SIEM and XDR platform. Endpoint detection, log analysis, vulnerability scanning, and compliance monitoring.

Sigma

Python/YAML

Generic detection rule format. Write once, convert to Splunk, Elasticsearch, QRadar, and 30+ SIEM backends.

ImHex

C++

Feature-rich hex editor with pattern language, data analysis, disassembly, and entropy visualization.

BBOT

Python

Recursive internet scanner for automated recon, bug bounties, and attack surface management with 100+ modules.

web-check

TypeScript

All-in-one OSINT tool for analysing any website including DNS, SSL, headers, security audit, and performance.

pwndbg

Python

GDB plugin for exploit developers and reverse engineers with context display, heap analysis, and PEDA-like commands.

OSV-Scanner

Go

Google's dependency vulnerability scanner using the OSV.dev database across multiple language ecosystems.

fscan

Go

Fast internal network scanner with service brute-forcing, vulnerability detection, and exploit modules.

MVT

Python

Amnesty International's Mobile Verification Toolkit for forensic analysis of iOS and Android devices to detect spyware.

dnstwist

Python

Domain name permutation engine for detecting homograph phishing, typo squatting, and brand impersonation.

Timesketch

Python

Google's collaborative forensic timeline analysis platform for organizing and annotating investigation events.

IntelOwl

Python

Threat intelligence management platform integrating 100+ analyzers for enriching observables and malware samples.

reNgine

Python

Automated reconnaissance framework with correlated scan engines, continuous monitoring, and vulnerability reporting.

reconftw

Shell

Automated recon pipeline orchestrating subdomain enum, vulnerability scanning, and OSINT via best-of-breed tools.

Lynis

Shell

Security auditing and hardening tool for Linux/macOS with compliance testing for HIPAA, ISO27001, and PCI DSS.

Stratus Red Team

Go

Datadog's adversary emulation for cloud environments (AWS, Azure, GCP, K8s) mapped to MITRE ATT&CK.

APKLeaks

Python

Scans Android APK files for URIs, API endpoints, and hardcoded secrets using JADX decompilation.

Sn1per

Shell

Automated attack surface management platform integrating recon, vulnerability scanning, and exploit tools.

EMBA

Shell

Firmware security analyzer for IoT and embedded devices performing static and dynamic analysis via emulation.

afrog

Go

Fast vulnerability scanner with custom PoC support for CVEs, default credentials, and command injection.

seekr

Go

Multi-purpose OSINT toolkit with web interface for investigations.

NExfil

Python

OSINT tool for finding profiles by username across social networks.

Snoop

Python

Search for user accounts by nickname across 2500+ sites.

Toutatis

Python

Extract Instagram account information including email and phone via API.

waybackpy

Python

Python wrapper for the Wayback Machine API with CDX search support.

Telegram Nearby Map

Python

Discover and map nearby Telegram users via the People Nearby feature.

ExifLooter

Python

Find geolocation data from image EXIF metadata across target websites.

RouterSploit

Python

Open-source exploitation framework for embedded devices and routers.

Pwnagotchi

Python

AI-powered WiFi auditing companion using deep reinforcement learning on Raspberry Pi.

wafw00f

Python

Identify and fingerprint Web Application Firewall products protecting a site.

SSLyze

Python

Fast TLS/SSL configuration analyzer for identifying misconfigurations.

SMBMap

Python

Enumerate SMB shares across a domain with permissions and access checking.

Wapiti

Python

Black-box web application vulnerability scanner with built-in fuzzer modules.

Vuls

Go

Agentless vulnerability scanner for Linux and FreeBSD with CVE detection.

ssh-audit

Python

SSH server and client configuration auditing tool with algorithm analysis.

airgeddon

Shell

Multi-use bash script for wireless network auditing with 20+ attack modes.

scanless

Python

Perform port scans anonymously through third-party scanner websites.

Depix

Python

Recover plaintext from pixelized screenshots using De Bruijn sequence matching.

Wifiphisher

Python

Automated WiFi phishing framework with evil twin and KARMA attack support.

CrowdSec

Go

Collaborative open-source IPS with crowd-sourced threat intelligence sharing.

Infection Monkey

Python

Automated adversary emulation platform for validating network security controls.

Sublist3r

Python

Fast subdomain enumeration tool using OSINT sources for penetration testers.

boofuzz

Python

Network protocol fuzzing framework and successor to the Sulley fuzzer.

Bearer

Go

SAST tool scanning code for security risks, sensitive data flows, and vulnerabilities.

Checkov

Python

Static analysis for infrastructure-as-code scanning Terraform, CloudFormation, and K8s.

ROPgadget

Python

Search ROP gadgets in binaries for chain-building across ELF, PE, and Mach-O.

one_gadget

Ruby

Find one-gadget RCE execve calls in libc for streamlined exploit development.

RsaCtfTool

Python

RSA multi-attack tool for recovering private keys from weak public keys.

GEF

Python

GDB Enhanced Features plugin for exploit developers and reverse engineers.

Triton

C++

Dynamic binary analysis framework with symbolic execution and taint analysis.

Z3

C++

High-performance SMT solver from Microsoft Research used in RE and verification.

usbrip

Python

Track USB device connection history and generate forensic artifacts on Linux.

Raccoon

Python

High-performance offensive reconnaissance and information gathering tool.

Yersinia

C

Framework for layer-2 attacks targeting STP, CDP, DHCP, and other protocols.

xortool

Python

Analyze and break multi-byte XOR cipher encrypted data with key guessing.

Snort3

C++

Next-generation open-source intrusion detection and prevention system.

pagodo

Python

Automate Google Hacking Database dorking for passive reconnaissance at scale.

Bandit

Python

Python static analysis security linter to find common code vulnerabilities.

cwe_checker

Rust

Detect common bug classes (CWEs) in compiled binaries using Ghidra backend.

OWASP ZAP

Java

Full-featured intercepting proxy for web application security testing. Automated scanners, fuzzing, scripting, and API testing built in.

Kiterunner

Go

API-aware content discovery tool that brute-forces routes using contextual wordlists derived from real API schemas.

Tplmap

Python

Automated server-side template injection detection and exploitation tool supporting 15+ template engines.

Brakeman

Ruby

Static analysis security scanner for Ruby on Rails applications. Finds SQL injection, XSS, and dozens of Rails-specific vulnerabilities.

BunkerWeb

Python

Open-source Web Application Firewall with built-in security hardening, bot detection, and DDoS protection.

mitmproxy

Python

Interactive TLS-capable intercepting HTTP proxy with a console UI, web interface, and Python scripting API.

Tsunami

Java

Google's general-purpose network security scanner with a plugin system for detecting high-severity vulnerabilities at scale.

Dshell

Python

Network forensic analysis framework by US Army Research Lab. Extensible Python-based packet decoder with plugin architecture.

pwnat

C

Punches through NATs and firewalls to establish direct connections between two hosts without port forwarding.

IVRE

Python

Self-hosted network recon framework combining active scanning, passive traffic analysis, and flow analysis with a web interface.

Smap

Go

Passive port scanner using Shodan's database. Nmap-compatible syntax without sending a single packet to the target.

Ciphey

Python

AI-powered automated decryption and decoding tool. Feed it encrypted/encoded text and it determines the cipher and decodes it.

hate_crack

Python

Hashcat automation tool with intelligent rule chaining, methodology-based attack workflows, and custom wordlist generation.

Bytecode Viewer

Java

Java/Android reverse engineering suite with multiple decompilers, disassemblers, and an integrated hex editor.

JD-GUI

Java

Standalone graphical Java decompiler. Displays Java source code from CLASS files and JAR archives.

dex2jar

Java

Converts Android DEX bytecode to Java CLASS files, enabling analysis with standard Java decompilers.

pyinstxtractor

Python

Extracts the contents of PyInstaller-generated executables, recovering the original Python scripts and resources.

Kaitai Struct

Scala

Declarative binary format parser generator. Define a format once in YAML, generate parsers for 12+ programming languages.

al-khaser

C++

Malware evasion technique reference implementation. Demonstrates VM detection, sandbox evasion, and anti-debugging tricks.

FLARE FLOSS

Python

Mandiant's obfuscated string extraction tool for malware analysis. Recovers strings hidden by encoding, encryption, and stacking.

FakeNet-NG

Python

Mandiant's dynamic network analysis tool. Simulates internet services to capture malware C2 communications locally.

PCILeech

C

Direct Memory Access attack toolkit. Reads and writes target system memory via PCIe/Thunderbolt/USB hardware interfaces.

PEDA

Python

Python Exploit Development Assistance for GDB. Enhanced debugging display with exploit development features.

Voltron

Python

Debugger UI toolkit providing split-pane views for LLDB, GDB, VDB, and WinDbg with customizable layouts.

aws-vault

Go

Securely stores and accesses AWS credentials in your operating system's keystore, never writing them to disk.

CloudGoat

Python

Rhino Security's 'vulnerable by design' AWS deployment tool for practicing cloud penetration testing techniques.

KICS

Go

Infrastructure-as-Code security scanner supporting Terraform, CloudFormation, Kubernetes, Docker, Ansible, and more.

changedetection.io

Python

Self-hosted website change monitoring and notification tool. Tracks DOM changes, price drops, and content alterations.

OnionScan

Go

Dark web OPSEC analyzer that discovers identifying information leaks from Tor hidden services.

waybackpack

Python

Downloads entire website archives from the Wayback Machine. Retrieves historical snapshots for OSINT and content recovery.

Fibratus

Go

Windows kernel event tracing and threat detection tool. Captures process, file, registry, network, and driver events in real-time.

Cowrie

Python

Medium-interaction SSH and Telnet honeypot. Logs brute force attacks, shell interactions, and malware downloads.

garak

Python

NVIDIA's LLM vulnerability scanner. Tests language models for prompt injection, jailbreaks, data leakage, and harmful outputs.

Osmedeus

Go

Automated reconnaissance and vulnerability scanning workflow engine. Chains recon, scanning, and exploitation into configurable pipelines.

git-dumper

Python

Dumps exposed .git repositories from web servers, reconstructing the full source code and commit history.

CAPEv2

Python

Malware behavior analysis sandbox. Detonates samples and extracts configs, payloads, network IOCs, and API call traces.

IntelMQ

Python

Automated security feed processing framework. Collects, normalizes, and distributes threat intelligence from hundreds of sources.

Shannon

TypeScript

Featured

Autonomous AI pentester for web apps and APIs. Analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities.

WorldMonitor

TypeScript

Featured

Real-time global intelligence dashboard with AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking across 500+ feeds.

Sniffnet

Rust

Featured

Cross-platform network traffic monitor with real-time analysis, 6000+ protocol identification, PCAP export, and IP geolocation.

DeepAudit

Python

Multi-agent AI code auditing system with automated sandbox PoC verification. Has discovered 49 CVEs across 17 open-source projects.

Crucix

JavaScript

Personal intelligence agent aggregating 27 real-time feeds including satellite, flight, radiation, and conflict data on a local-first dashboard.

ShadowBroker

Python

GEOINT dashboard tracking aircraft, ships, satellites, and 11,000+ CCTV cameras with SAR anomaly detection and AI agent integration.

User-Scanner

Python

2-in-1 email and username OSINT suite scanning 195+ vectors with bulk scanning and infostealer log cross-referencing.

Device Activity Tracker

TypeScript

PoC exploiting WhatsApp and Signal delivery receipt timing to detect device activity patterns and location changes.

Lonkero

Rust

Professional web app scanner with 126+ checks, ML-powered false positive reduction, proof-based XSS detection, and blind SQLi engine.

Titus

Go

High-performance secrets scanner by Praetorian with CLI, Go library, Burp extension, and Chrome extension. 487 detection rules.

DllShimmer

Go

Weaponizes DLL hijacking by generating proxy DLLs with matching export address tables and C++ backdoor boilerplate.

Shannon

TypeScript

Featured

Autonomous AI pentester for web apps and APIs. Analyzes source code, identifies attack vectors, and executes real exploits to prove vulnerabilities.

WorldMonitor

TypeScript

Featured

Real-time global intelligence dashboard with AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking across 500+ feeds.

Sniffnet

Rust

Featured

Cross-platform network traffic monitor with real-time analysis, 6000+ protocol identification, PCAP export, and IP geolocation.

Lonkero

Rust

Professional web app scanner with 126+ checks, ML-powered false positive reduction, proof-based XSS detection, and blind SQLi engine.

Crucix

JavaScript

Personal intelligence agent aggregating 27 real-time feeds including satellite, flight, radiation, and conflict data on a local-first dashboard.

DeepAudit

Python

Multi-agent AI code auditing system with automated sandbox PoC verification. Has discovered 49 CVEs across 17 open-source projects.

ShadowBroker

Python

GEOINT dashboard tracking aircraft, ships, satellites, and 11,000+ CCTV cameras with SAR anomaly detection and AI agent integration.

Cartography

Python

Intel graph of cloud infrastructure. Maps relationships between AWS, GCP, Azure, and other services into a Neo4j graph.