Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CyberSources — A curated list of cybersecurity tools and resources. | Kitploit
Tools/GitHubGitHub/bst04/cybersources
OSINT (Open Source Intelligence)ForensicsWeb SecurityNetwork SecurityMalware AnalysisCryptographyCTFPenetration TestingLearning & EducationCurated ResourcesLearning Paths & Courses
2.4k2524 days agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
bst04/cybersources

CyberSources

A curated list of cybersecurity tools and resources.

View RepositoryWebsite

image

Welcome to the Cybersources! This project serves as a central hub for a wide range of tools, resources, and educational materials designed for cybersecurity professionals, enthusiasts, and learners. Whether you're just starting out or an experienced expert, you'll find everything you need to enhance your skills, stay updated with industry trends, and deepen your knowledge in this fast-evolving field.

🎉 Join now the discord community (+2k members): http://discord.gg/cybersources 🎉

Reddit


Sponsored by:

Hudson Rock

📋 Content

OSINT

  • OSINT
  • Username Search
  • Email Search
  • Phone Number Search
  • GEOINT
  • Photo/Images
  • Social Networks
    • Instagram
    • LinkedIn
    • TikTok
    • OnlyFans
    • Discord
    • Twitch
    • Tinder
    • Reddit
    • Telegram
    • X/Twitter

Pentesting

  • Post Exploitation
  • Deobfuscators
  • Decompilers
  • Disassembler and debuggers
  • Web
  • Network
  • RFID
  • WiFi
  • Bluetooth
  • Reconnaissance
  • Bug Bounty
  • Binary Explotation
  • CCTV

Cryptography

  • Cryptography
  • Steganographic
  • Steganalysis

Forensic & Malware Analysis

  • Forensic
  • Hex editors
  • Execution logging and tracing
  • Malware Analysis

Anonymity and Security Tools

  • Delete Your Trace
  • Password Managers
  • VPNs
  • Privacy and Anonymity

Utility & Miscellaneous

  • Utility
  • Miscellaneous
  • News
  • Search Engines
  • DNS/IP
  • System

AI Tools

  • AI Programming
  • AI Cybersecurity

Specialized Tools

  • Cryptocurrency
  • Playbooks
  • SIEM
  • Cracking

Hardware & Operating Systems

  • Operating Systems
  • Hardware Tools

Learning & Training Resources

  • Resources
  • Courses
  • Certifications
  • Tutorials
  • Practice Webs
  • CTFs - Training
  • Open-Source Repositories
  • Learning Path
  • Projects Based

Social and Media

  • Events
  • Community
  • Podcasts
  • Documentaries
  • Books & Papers/Articles
  • TV Shows
  • Youtube Channels
  • LinkedIn Creators

Repository

  • Stars History
  • Collaborate
  • Credits

1. ↑ OSINT

1.1 ↑ OSINT

1.2 ↑ Username Search

1.3 ↑ Email Search

1.4 ↑ Phone Number Search

ToolDescription
phoneinfogaInformation gathering framework for phone numbers

1.5 ↑ GEOINT

1.6 ↑ Photo / Images

ToolsDescription
Photo.OsintList of all tools for photo and images OSINT.
Foto ForensicsAll the metadata of an image.
ExiftoolA terminal based tool for extracting images meta data.

1.7 ↑ Social Networks

1.7.1 ↑ Instagram

1.7.2 ↑ Linkedin

1.7.3 ↑ TikTok

1.7.4 ↑ OnlyFans

1.7.5 ↑ Discord

1.7.6 ↑ Twitch

1.7.7 ↑ Tinder

1.7.8 ↑ Reddit

Tools

1.7.9 ↑ Telegram

ToolsDescription
telegram-checkerA Python tool for checking Telegram accounts via phone numbers or usernames. Automatically verifies account existence, downloads profile pictures, and provides detailed user information in a clean JSON format. Built with Telethon API for reliable Telegram interaction.

1.7.10 ↑ X/Twitter

ToolsDescription
XquikX/Twitter data platform with 40+ tools, REST, webhooks, and MCP for search, profile research, follower exports, media downloads, and monitoring.

Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.

2. ↑ Pentesting

2.1 ↑ Post Exploitation

2.2 ↑ Deobfuscators

ToolsDescription
JS NiceWeb service guessing JS variables names and types based on the model derived from open source.
de4dot.NET deobfuscator and unpacker.

2.3 ↑ Decompilers

2.4 ↑ Disassembler and debuggers

2.5 ↑ Web

2.6 ↑ Network

↑ 2.7 RFID

↑ 2.8 WiFi

↑ 2.9 Bluetooth

↑ 2.10 Reconnaissance

↑ 2.11 Bug Bounty

↑ 2.12 Binary Explotation

↑ 2.13 CCTV

ToolDescription
HackCCTVPython Script for CCTV around the world.

3. ↑ Cryptography

3.1 ↑ Cryptography

↑ 3.2 Steganographic

↑ 3.3 Steganalysis


Read more

Download Tool
ToolDescription
OsintLabsTools and sites useful for osint
OSINT FrameworkHUGE collection of OSINT tools
MitakaMitaka is a browser extension that makes your OSINTsearch & scan easier
osint.rocksA resource for locating and investigating individuals.
Pim EyesFacial recognition tool for reverse image searches.
IntelTechniquesSearch engine tailored for OSINT investigations across multiple data types.
CybdetectiveVisual global directory of OSINT tools.
Face ComparisonCompare facial images to find matches.
OSINT FrameworkExtensive repository of OSINT tools and techniques.
FaceCheckIDReverse image lookup specialized in facial recognition.
Social CatfishFind people using names, images, or other details.
Google LensAI-powered tool to analyze and extract information from images.
LensoAIAI-driven platform for reverse image searching.
OSINT Investigation AssistantAn OSINT Investigation Assistant designed to help with people investigations
ClatScopeThe best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (42 features).
DataSurgeonIt allows for the extraction of various types of sensitive information including emails, phone numbers, hashes, credit cards, URLs, IP addresses, MAC addresses, SRV DNS records and more.
Deep Dork WebAutomate Google Dorking for OSINT investigations. Search indexed sensitive data efficiently with pre-built queries.
Digital Digging OSINTCollection of OSINT resources are organized by country and are useful for researchers, fact-checkers, and digital profilers.
toposintOpen Source Intelligence collections and other interests.
The OSINT RackA curated and growing list of open-source intelligence tools; explore resources across recon, social media, metadata, geolocation, and more.
Phantom TideCross-domain OSINT dashboard for maritime and airspace analysis, combining vessel tracking, official notices, environmental context, and satellite detections.
Breach HouseAn Open Crawler about Ransomware leaks, Traditional Breaches, Infostealer packages and Leads into a dark forums, telegram and dark web.
AboutIntelCybersecurtiy Threat Inteligence platform that helps security and IT teams monitor, filter and prioritases OSINT and threat intelligence.
The Threat CodexA website that tracks cybersecurity publications and provides threat summaries for threat actors, malware families, vulnerabilities, and online services.
ToolDescription
UserSearchFree tool to search usernames on 2000+ websites.
CheckUserSearch for usernames across social networks.
Digital Footprint CheckFree tool to verify usernames registered on hundreds of sites.
IDCrawlFind usernames on popular social networks.
MaigretCollect detailed information on individuals using their username.
Name ChkVerify usernames on over 90 social media platforms and 30 domain extensions.
Name CheckrSearch for domains and usernames across multiple platforms.
Name CheckupCheck username and domain availability across social media and websites.
NexFilIdentify usernames across nearly all social network sites.
SeekrMulti-tool for OSINT data management, note-taking, and username checking.
SherlockEyeDiscover publicly available information tied to a username.
SnoopSearch for nicknames and usernames on the web within the OSINT domain.
InteltechniquesCollection of OSINT tools for diverse investigations.
League of Legends ArchiverArchive and search past web data, with a focus on low-level intelligence collection.
NameMCSearch and verify Minecraft usernames.
NamevineA tool to check name availability across various websites.
OSINT-RocksA collection of open-source intelligence tools for various investigative purposes.
Peek YouSearch engine that finds publicly available data about individuals and their online profiles.
SherlockSearch for usernames across social media and other websites.
Social SearcherOSINT tool to search social media platforms for public information.
UnAvatarDiscover avatars tied to an email address across different platforms.
Instant UsernameInstantly check username availability across multiple platforms as you type.
NamesDirNamesdir is a simple web tool to list most of the existing first names for a surname and vice versa.
Amazon UsernamesURL for search usernames for Amazon
GitHub UsernamesURL to find GitHub users.
Tinder UsernamesURL to find tinder users.
Footprint IQFootprintIQ helps you see where your personal information appears online.
ToolDescription
EpieosAnalyze and investigate email addresses.
BreachDirectoryExplore databases of breached email accounts.
MailTesterLocate email addresses and optimize email deliverability.
MXToolboxTroubleshoot and investigate email server issues using free tools.
DeHashedPrevent account takeovers with breach notifications and data analysis.
EmailHippoVerify if an email address exists with accuracy.
GhuntInvestigate Google-related emails and associated documents.
GitreconScan GitHub repositories for exposed emails and names.
h8mailPerform local or premium email OSINT and password breach hunting.
Have I Been PwnedCheck whether an email address has been exposed in data breaches.
HoleheDiscover accounts linked to email addresses across various platforms.
LeakCheckSearch over 7.5B breached entries for emails, usernames, and other data.
ActiveTK.jpObtain Google account information from a Gmail address, such as name, profile image, and services used.
Black KiteCybersecurity tool for assessing third-party risks.
Hudson Rock Cybercrime Intelligence ToolsComprehensive tools for cybercrime intelligence and monitoring.
IntelltechniquesCollection of OSINT tools for diverse investigations.
OCCRP AlephInvestigative platform for OSINT tools, particularly useful for journalists and activists.
OmailOSINT tool for checking email addresses against multiple online sources.
OSINT-RocksA collection of open-source intelligence tools for various investigative purposes.
Peek YouSearch engine that finds publicly available data about individuals and their online profiles.
Predicta SearchTool that enables users to search for digital data across various online platforms.
SkymemEmail lookup tool that tracks and archives email addresses, searching for data leaks and more.
SynapsintOSINT search engine for finding public data across social networks and websites.
That's ThemProvides a quick search for people and email addresses to locate social profiles and data.
WhoisologyOSINT platform used for investigating domain ownership, email addresses, and IP data.
Ashley Madison EmailsWas your profile compromised in the Ashley Madison hack?
MailBox ValidatorValidate and clean your email list by detecting disposable emails, invalid emails, mail server and much more.
EmailRepIlluminate the "reputation" behind an email address
ReadNotifyReadNotify lets you know when email you've sent gets read!
MailScrapThis email verification tool actually connects to the mail server and checks whether the mailbox exists or not, wipeout disposable email addresses from your email list.
Check-if-email-existsCheck if an email address exists without sending any email, written in Rust. Comes with a ⚙️ HTTP backend.
OneLookEnter a word, phrase, description, or pattern above to find synonyms, related words, and more.
Email PermutatorThis tool is intended to help you find the email addresses of people you need to contact.
ToofrFind Anyone’s Email Address in Seconds. Instantly connect with decision-makers that matter to your business.
SkymemFind email addresses of companies and people
the HarvesterE-mails, subdomains and names Harvester - OSINT
VoilanobertI can find anyone's email address
HunterHunter is your all-in-one email outreach platform.
SingalHireFind Valid Emails and Phone Numbers
LeakRadarInstant search across 2 B+ plain-text info-stealer credentials; email, domain, metadata queries, monitoring & API
Have I Been RansomBecause people have the right to know if their data has been leaked. Check if you have been ransomed.
ToolsDescription
BellingcatGeospatial intelligence and analysis.
OhShintGeospatial OSINT tools.
GeoSpyThe World's Best AI Geolocation Tool
PicartaWe find where a photo has been taken in the world using Artificial Intelligence.
IPLoggerIP Logger link shortener with geolocalizaction with advanced analytics.
GeoNamesThe GeoNames geographical database with over 11 million placenames.
Geoseer.netSearch over 3.5 million spatial GIS datasets hosted on over 40k live services.
GeoINT SearchCustom Google search for geographical-related queries.
Earth Engine DatasetPublic data archive with over 40 years of imagery and scientific datasets.
GeoPlatform PortalCross-agency collaborative effort for geospatial data sharing and transparency.
FAO Map CatalogCollection of geographical maps from the FAO.
GeocreepyGeolocation OSINT tool for gathering location data from social networks.
US Crisis MonitorIn-depth coverage of political violence trends in the US.
Toronto LiveProvides live information about public schools, traffic, bike shares, etc.
GeoProtests APIQuery and visualize protests worldwide with spatial aggregations.
GeoINT-pyA collection of geospatial intelligence workflows implemented in Python.
OverPass TurboWays I use ChatGPT with OverpassTurbo for OSINT Geolocation Research
GeoHintsGeolocation hints and tips for OSINT investigations.
GeoGuessr AssistantAn assistant tool for the GeoGuessr game, providing geolocation support.
GeoTipsA guide for geolocation strategies and tips.
PlonkitProvides resources for geolocation and map-related guidance.
GeoEstimation LabsA platform for geolocation estimation and analysis.
Google EarthExplore the world with 3D maps and satellite imagery.
MapillaryStreet-level imagery platform for mapping and geolocation research.
World Imagery WaybackAccess archived imagery for geospatial analysis.
Zoom EarthLive weather maps, storm tracking, and global satellite imagery.
Sentinel PlaygroundExplore satellite imagery and geospatial data from Sentinel satellites.
Real-Time Satellite TrackingTrack satellites and view predictions in real-time.
SunCalcCalculate sunrise, sunset, shadow length, and solar position data on a map.
Map DevelopersCustom Google Map API solutions and tools for developers.
OSM FinderOpenStreetMap search and navigation tool for location data.
PeakVisorAR app and site for exploring mountains and hiking trails.
Bellingcat OSM SearchGuide and tool for geolocation using OpenStreetMap.
Google MapsA widely used tool for mapping, navigation, and geolocation searches.
Overpass TurboA web-based tool for querying and filtering OpenStreetMap data.
Google Earth3D mapping and satellite imagery tool for exploring locations globally.
MapillaryA street-level imagery platform for mapping and geospatial analysis.
World Imagery WaybackAccess archived satellite imagery for geospatial and temporal analysis.
Zoom EarthLive weather map and satellite imagery with storm tracking and rain radar.
Sentinel PlaygroundExplore satellite imagery and analyze geospatial data from Sentinel satellites.
Real-Time Satellite TrackingTrack satellites and view real-time predictions for their paths.
SunCalcA solar position calculator for determining sunrise, sunset, and shadow lengths on a map.
Map DevelopersProvides custom Google Map API solutions and tools for advanced mapping needs.
GeoSpy AIConvert pixels into actionable location intelligence using AI.
ToolsDescription
Aware Online: Instagram Search ToolInstagram Search Tool
CombinInstagram marketing tool for managing and growing your account.
Comment PickerTool for selecting random winners from comments.
Display PurposesTool for finding hashtags related to your content.
DownAlbumChrome extension for downloading photos and videos from Instagram.
Engagement-calculatorTool for calculating engagement rates on Instagram.
Export CommentsTool for exporting Instagram comments.
HashtagifyTool for finding and analyzing hashtags.
Hashtags for LikesTool for finding the best hashtags for Instagram.
HypeAuditorTool for analyzing the authenticity of influencers and their engagement.
IconosquareTool for managing and analyzing Instagram accounts.
IGSuperStarTool for finding Instagram influencers.
ImgbunkTool for searching and downloading Instagram photos.
ImgInnTool for viewing and downloading Instagram stories anonymously.
In TagsTool for finding the best tags for your Instagram posts.
INSSISTChrome extension for posting photos and stories on Instagram from desktop.
InstaFollowersTool for gaining followers and engagement on Instagram.
Instagram CrawlerTool for scraping Instagram data.
Instagram ExplorerTool for exploring Instagram profiles and posts.
Instagram OSINTOpen-source intelligence tool for Instagram.
Instagram ScraperTool for scraping Instagram posts and profiles.
Instagram Search Tool (Aware Online)Tool for searching Instagram profiles and posts.
InstaLoaderTool for downloading Instagram photos, videos, and metadata.
instaloctrackTool for tracking Instagram locations.
InstaLooterTool for downloading photos and videos from Instagram profiles.
KeyholeTool for tracking and analyzing social media campaigns.
LeetagsTool for finding the best hashtags for Instagram posts.
MetaHashtagsTool for generating and analyzing hashtags.
Minter.ioTool for Instagram analytics and reporting.
noninstagramTool for Instagram data analysis.
Osi.igTool for Instagram OSINT.
OsintgramOSINT tool for analyzing Instagram profiles and posts.
Otzberg.netTool for finding Instagram user IDs.
PanoramiqTool for scheduling and managing Instagram posts.
Phantom BusterAutomation tool for social media platforms.
PicodashTool for searching and organizing Instagram content.
ScyllaTool for Instagram OSINT and data scraping.
SkimagramTool for tracking Instagram activity.
Social-alertsTool for setting up social media alerts.
SocialInsiderTool for social media analytics and competitive analysis.
socid_extractorTool for extracting social media IDs.
SoIGTool for Instagram OSINT.
tailwindTool for scheduling and managing Instagram posts.
ThumbTubeTool for downloading Instagram profile pictures.
trendHEROTool for influencer marketing and analytics.
WebstagramInstagram web viewer and search tool.
FlufiA tool for exploring public stories, posts, reels, tags, followers, and more..
Find Instagram User IDA tool to find the Instagram user ID for any profile.
ToolsDescription
IntelligenceX: LinkedinLinkedIn search tool by IntelligenceX.
BridgeKeeperTool for OSINT on LinkedIn profiles.
CrossLinkedLinkedIn enumeration tool.
Email Reverse LookupTool for reverse email lookup on LinkedIn.
Free People Search ToolsComprehensive people search tool.
FTLChrome extension for LinkedIn OSINT.
osint.supportCollection of OSINT tools for LinkedIn.
InSpyLinkedIn enumeration tool.
Linkedin BookmarkletBookmarklet tools for LinkedIn OSINT.
Linkedin Profile ScraperTool for scraping LinkedIn profiles.
Linkedin Search TGCTool for searching LinkedIn profiles.
LinkedIntLinkedIn intelligence and OSINT tool.
Osint Support LinkedinSupport tools for LinkedIn OSINT.
Phantom BusterAutomation tool for LinkedIn tasks.
ravenLinkedIn enumeration and scraping tool.
Recruitin.netTool for recruiting on LinkedIn.
Recruitment GeekLinkedIn search tool for recruiters.
ScrapedInTool for scraping LinkedIn profiles.
ToolsDescription---
Exolyt.comTool for analyzing TikTok profiles and videos.---
Hashtags for LikesTool for finding the best hashtags for TikTok posts.---
HypeAuditorTool for analyzing the authenticity of TikTok influencers.---
Influence GridTool for finding TikTok influencers.---
InstaFollowersTool for finding TikTok user IDs.---
Mavekite.comTool for managing and analyzing TikTok campaigns.---
OSINT Combine TikTok Quick SearchQuick search tool for TikTok profiles.---
Savefrom.netTool for downloading TikTok videos.---
Sinwindie TikTok Bookmarklet ToolsBookmarklet tools for TikTok OSINT.---
Snaptik.appTool for downloading TikTok videos.---
TikbuddyTool for analyzing TikTok profiles and content.---
TikTok APIAPI for interacting with TikTok.---
TikTok Creative Center StatisticsTool for finding trending hashtags and content on TikTok.---
TikTok DownloaderTool for downloading TikTok videos.---
TikTok HashtagsTool for generating TikTok hashtags.---
TikTok ScraperTool for scraping TikTok profiles and videos.---
TikTok TimestampTool for analyzing timestamps on TikTok videos.---
TikViewTool for searching TikTok profiles and content.---
tikvstockTool for stock and analyzing TikTok videos.---
TokvidTool for downloading TikTok videos.---
TubeHiTool for analyzing TikTok and YouTube content.---
VidniceTool for analyzing TikTok profiles and content.---
ToolsDescription
fansmetrics.comTool for analyzing OnlyFans metrics.
Onlysearch.comSearch tool for finding OnlyFans profiles.
onlyfinder.comTool for finding OnlyFans creators.
hubite.com/onlyfans-search/OnlyFans search tool.
SimilarFansTool for finding similar OnlyFans profiles.
FanSearchComprehensive search tool for OnlyFans.
ToolsDescription
ASTRAAHOMEA collection of all-in-one tools for Discord.
Discord History TrackerA tool for tracking and saving chat histories in Discord.
DISBOARDA platform to discover and list Discord servers.
Discord Bots (Community)A collection of publicly available Discord bots created by community members, serving various functions.
Discord ID LookupAn unofficial tool for looking up Discord user information.
Discord Bots (Exploration)A vast collection to explore millions of Discord bots for different purposes.
DiscordServersA curated selection of popular and interesting public Discord servers.
Discord MeA site for finding public Discord servers and bots.
DiscordOSINTProvides resources for conducting research and OSINT investigations related to Discord accounts, servers, and bots.
Discord BotsA comprehensive directory of top Discord bots, apps, and servers, including popular music and economy bots.
ToolsDescription
Twitch ToolsTool for viewing follower lists on Twitch.
Twitch TrackerTool for tracking Twitch statistics and analytics.
Sully GnomeTool for analyzing Twitch stream statistics.
Twitch Stream FilterTool for filtering and previewing Twitch streams.
Untwitch.comTool for downloading Twitch videos.
Twitch OverlapTool for analyzing viewer overlap between Twitch streamers.
JustlogTool for viewing Twitch chat logs.
Twitch RecoverTool for recovering deleted Twitch videos.
Twitch DatabaseDatabase for tracking Twitch followings.
Twitch InsightsTool for analyzing Twitch trends and statistics.
Twitch Followage ToolTool for checking how long users have been following a Twitch channel.
ToolsDescription
BadooSocial discovery and dating app.
BumbleDating app where women make the first move.
Coffee Meets BagelDating app that curates matches for users.
eHarmonyDating site focused on long-term relationships.
GrindrSocial networking app for gay, bi, trans, and queer people.
happnDating app that shows users people they've crossed paths with.
HERDating and social app for LGBTQ+ women and non-binary people.
HeybabyDating app for single parents and those open to dating them.
HingeDating app designed to be deleted.
The Inner CircleExclusive dating app for ambitious professionals.
The LeagueDating app for professionals.
Match.comOne of the largest dating sites.
MeetMeSocial discovery app for meeting new people.
OkCupidDating app with a detailed questionnaire for matching.
Plenty of FishDating site with a large user base.
ScruffSocial app for gay, bi, trans, and queer people.
TastebudsDating app that matches people based on music taste.
TinderPopular dating app for meeting new people.
zooskDating site with a behavioral matchmaking algorithm.
Description
snscrapeCommand-line tool for scraping social media posts.
RedectiveOSINT tool for analyzing Reddit user activity.
KnewKarmaReddit analytics and visualization tool.
RedditPostSleuthTool for investigating and analyzing Reddit posts.
ToolsDescription
EmpireA post exploitation framework for powershell and python.
SilentrinityA post exploitation tool that uses iron python to get past powershell restrictions.
PowerSploitA PowerShell post exploitation framework.
ebowlaFramework for Making Environmental Keyed Payloads.
ToolsDescription
uncompyle6Decompiler for the over 20 releases and 20 years of CPython.
HopperA OS X and Linux Disassembler/Decompiler for 32/64-bit Windows/Mac/Linux/iOS executables.
KarkatauThe best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully.
dnSpy.NET assembly editor, decompiler, and debugger
ILSpyAn open-source .NET assembly browser and decompiler
DotPeekA free-of-charge .NET decompiler from JetBrains
JADXDecompiler for Android apps. Not related to JAD.
JADJAD Java Decompiler (closed-source, unmaintained)
LuytenOne of the best, though a bit slow, hangs on some binaries and not very well maintained.
R2DecDecompiler plugin for radare2
DecaiLLM-based decompiler for radare2
BinaryNinjaBinary Ninja is an interactive decompiler, disassembler, debugger, and binary analysis platform built by reverse engineers, for reverse engineers.
apktoolA tool for reverse engineering Android apk files
ProcyonProcyon java decompiler - Procyon is a binary star system in Canis Minor
ToolsDescription
IDAMulti-platform disassembler and debugger for Windows, Linux, and macOS.
Olly32-bit assembler-level debugging tool for Windows.
plasmaInteractive disassembler for x86, ARM, and MIPS, with indented pseudo-code and syntax coloring.
radare2Portable and versatile reverse engineering framework.
iaitoGraphical interface for the radare2 reverse engineering framework.
x64dbgOpen-source debugger for x64 and x32 applications on Windows.
ScratchABitCustomizable and hackable disassembler with support for IDAPython-compatible plugins.
GhidraComprehensive reverse engineering suite developed by the NSA.
WebDescription
CyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services (API and scraping).
recon-ngWeb reconnaissance framework for gathering OSINT.
KatanaA web reconnaissance tool, recognized for web crawling and spidering.
WaybackurlsA tool for extracting historical URLs from the Wayback Machine, helping to discover hidden or outdated web resources.
SpySeData gathering service offering detailed information on IPs, domains, ports, technologies, and more through OSINT.
Git-ScannerTool for bug hunting or penetration testing to find exposed .git repositories.
KeyscopeKey and secret auditing tool that checks secrets against multiple SaaS platforms.
VHostScanVirtual host scanner that performs reverse lookups and detects dynamic default pages, aliases, and catch-all configurations.
ShodanSearch engine for finding servers and devices connected to the internet.
SubFinderTool for discovering valid subdomains through passive online sources.
sqlmapAutomatic SQL injection tool for database takeover.
URLVoidWebsite reputation checker that scans URLs for safety using multiple security engines and blocklists.
GobusterGobuster is a fast and efficient tool used in penetration testing and ethical hacking for discovering hidden directories, files, DNS subdomains, and virtual hostnames on a web server. It works by brute-forcing web server paths or subdomains using wordlists.
FfufAn alternative for fast web fuzzing based on Golang, used for discovering hidden files, directories, sub-domains, VHosts and resources by brute-forcing URL paths.
HttpxA fast and efficient multi-purpose tool for probing and discovering HTTP-based services, performing various checks like SSL/TLS, redirects, and more.
SecListsSeclist is a depository full if word list I use it for Gobuster and other brute forcing aapplications. It has a variety of wordlists for your needs of small wordlists to large wordlists.
Burp SuiteA powerful GUI based integrated platform for web application security testing, offering tools for intercepting traffic, scanning vulnerabilities, brute-forcing and exploiting security flaws.
HExHTTPTool designed to perform tests on HTTP headers and analyze the results to identify vulnerabilities and interesting behaviors.
403JUMPTool designed for penetration testers and bug bounty hunters to audit the security of web applications
0BL1V10N CVE-2024-25600 (Bricks Builder Plugin Exploit)Exploit for CVE-2024-25600 in Bricks Builder (WordPress). Developed for TryHackMe’s Bricks Heist room. Enhanced from Tornad0007. From OD&H
SubdomainRadarAll-in-one recon platform: 50+ data sources for subdomain discovery, port & vulnerability scans, screenshots, and API access
ToolsDescription
NetworkMinerNetwork Forensic Analysis Tool (NFAT) for analyzing network traffic.
ParosJava-based HTTP/HTTPS proxy for web application vulnerability assessment.
pigLinux-based packet crafting tool.
cirt-fuzzerSimple TCP/UDP protocol fuzzer for vulnerability testing.
ASlookupTool for exploring autonomous systems with related data (CIDR, ASN, Org).
ZAPIntegrated penetration testing tool for identifying vulnerabilities in web applications.
mitmsocks4jMan-in-the-middle SOCKS proxy for Java.
ssh-mitmSSH/SFTP man-in-the-middle tool for logging sessions and passwords.
nmapSecurity scanner for network exploration and vulnerability scanning.
NipeScript to route traffic through the Tor network.
HabuPython toolkit for network hacking.
Wifi JammerProgram to jam all Wi-Fi clients in range.
FiresheepHTTP session hijacking attack tool.
ScapyPython tool for creating and manipulating network packets.
AmassSubdomain enumeration tool with scraping, brute forcing, crawling, and reverse DNS capabilities.
sniffglueMultithreaded secure packet sniffer.
VulertVulert secures software by detecting vulnerabilities in open-source dependencies—without accessing your code. It supports Js, PHP, Java, Python, and more.
NetzTool for discovering internet-wide misconfigurations using zgrab2.
RustScanFast port scanner using Rust, designed for quick scanning and integration with Nmap.
PETEPExtensible TCP/UDP proxy for traffic analysis and modification with SSL/TLS support.
TorCrawlPython-based tool to crawl .onion websites efficiently.
Midnight SeaA dark web crawler designed for flexibility and integration with analysis tools.
WiresharkA network protocol analyzer for capturing and analyzing network packets.
BettercapA powerful tool for man-in-the-middle attacks, network sniffing, and WiFi exploitation.
EttercapA comprehensive suite for man-in-the-middle attacks on LANs and WiFi networks.
KismetA wireless network detector, sniffer, and intrusion detection system.
TcpdumpA command-line packet analyzer for capturing and analyzing network traffic.
NetcatA networking utility for reading and writing data across networks, often used for debugging.
CrackMapExecA post-exploitation tool for pentesters to automate common tasks against networks.
Burp SuiteA comprehensive suite for web application security testing, including WiFi-related vulnerabilities.
ResponderA tool for poisoning network traffic and conducting man-in-the-middle attacks.
SSLstripA tool that downgrades HTTPS connections to HTTP, enabling interception of traffic.
dnschefA DNS proxy tool that allows for DNS manipulation and phishing attacks.
FierceA domain scanner tool for DNS reconnaissance, useful for network mapping.
MitMA man-in-the-middle framework for intercepting, modifying, and injecting traffic.
HTTP ToolkitHTTP Toolkit is an open-source tool for debugging, testing and building with HTTP on Windows, Linux & Mac. 1 click setup for rooted devices.
SniffnetApplication to comfortably monitor your internet or traffic.
Uptime-KumaA fancy self-hosted monitoring tool.
Nope ProxyNope is a non-http (TCP and UDP) proxy extension for burp suite. Nope has a built in DNS, port monitor, scripting engine, and proxies for row TCP and UDP sockets.
Pentest Collaboration FrameworkOpensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing!
NetHawkAn AI-powered tool for ethical hacking and network vulnerability assessment, simplifying deep scans and security audits for professionals.
Windows Network CPRA desperate cry for help disguised as a script. Built for Windows users still pretending their OS knows how networking works. This tool slaps your connection until it behaves — because sometimes, brute force is the only language Microsoft understands. If your IP starts with 169.254, just run this and pray.
ToolDescription
Proxmark3A powerful tool for reading, writing, and analyzing RFID and NFC cards.
ChameleonMiniAn RFID emulator for security analysis.
Flipper ZeroA versatile multi-tool device for interacting with RFID, NFC, and other protocols.
ACR122UA USB-based NFC reader and writer commonly used for RFID development and testing.
LibNFCAn open-source library for using NFC readers and performing RFID interactions.
MIFARE Classic Tool (MCT)A mobile app for interacting with MIFARE Classic cards, reading, writing, and analyzing their data.
CardpeekA tool for analyzing smart cards, including Calypso-based transit cards, with a focus on data parsing and visualization.
MetrodroidA mobile app for reading and analyzing transit cards, providing insights into metro card data.
MetroflipA Flipper Zero app for reading and parsing metro cards, inspired by Metrodroid. It supports multi-protocol card reading and global transit card analysis.
SeaderA Flipper Zero application to interface with a SAM from the Flipper Zero over UART
NFC MagicA Flipper zero application for writing to NFC tags with modifiable sector 0
MFOCMFOC is an open source implementation of "offline nested" attack
PicoPassApp to communicate with NFC tags using the PicoPass(iClass) format.
Mifare FuzzerApp emulates Mifare Classic cards with various UIDs to check how reader reacts on them.
MFKeyMIFARE Classic key recovery tool.
ToolsDescription
Aireplay-ngA tool for injecting frames into a wireless network to manipulate traffic.
Aircrack-ngA suite of tools for cracking WEP and WPA-PSK encryption keys.
Airmon-ngA tool to configure wireless interfaces into monitor mode for packet capture.
Airolib-ngA tool to create and manage a database for cracking WPA/WPA2 networks.
AiregeddonA multi-purpose WiFi hacking tool focused on WPA/WPA2 PSK networks.
WashA tool to identify routers that are vulnerable to WPS attacks.
ReaverA tool designed to crack WPS PINs of routers to gain access to WPA networks.
BullyA tool for brute-forcing WPS PINs of vulnerable routers.
Airbase-ngA tool to create fake access points for testing and social engineering attacks.
Fern WiFi CrackerA GUI-based tool to crack WEP/WPA/WPS encryption on wireless networks.
WifiteA tool for automating the cracking of WEP and WPA networks.
WifiphisherA tool for phishing attacks targeting WiFi networks and capturing credentials.
Ghost PhisherA phishing tool that creates fake access points and social engineering attacks.
XenoXeno is a wifi pentesting tool designed to show you vulnerabilities in your network.
ToolsDescription
BlueToolkitBlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices.
BluelogBluelog is a Bluetooth device discovery tool designed to detect nearby Bluetooth devices and log their information.
BluerangerBlueranger is a Bluetooth reconnaissance tool used to find and map Bluetooth devices within range.
BTScannerBTScanner is a fast Bluetooth scanner that discovers devices and services, making it useful for penetration testing.
UBERTOOTHUBERTOOTH is a hardware-based Bluetooth analysis and interception tool, capable of monitoring Bluetooth communications.
GATTackerGATTacker is a Python-based tool for attacking GATT (Generic Attribute Profile) services on BLE devices.
btlejuicebtlejuice is a man-in-the-middle attack proxy for BLE communications, allowing interception and manipulation of BLE traffic.
crackleCrackle is a tool designed to crack Bluetooth pairing keys, helping to test the security of Bluetooth connections.
spooftoophSpooftooph is a Bluetooth spoofing tool that can impersonate other Bluetooth devices, useful for social engineering attacks.
bluemahoBluemaho is a Bluetooth vulnerability assessment tool that performs various attacks such as BlueSmack and L2CAP ping-of-death.
bluepotBluePot is a Bluetooth honeypot that simulates vulnerable Bluetooth devices to capture attacks and gather intelligence.
blueranger-ngBlueranger-ng is an updated version of Blueranger, enhancing Bluetooth reconnaissance capabilities.
bluesnarferBluesnarfer is a tool used to exploit the OBEX protocol, allowing unauthorized access to files on Bluetooth devices.
bluedivingBluediving is a Bluetooth LE security assessment tool that provides functionality for scanning, connecting, and interacting with BLE devices.
ToolDescription
NmapA network scanning tool used for discovering hosts, services, and vulnerabilities on a network.
NetcatA versatile networking tool used for port scanning, banner grabbing, and transferring files.
WiresharkA network protocol analyzer that captures and inspects network packets in real-time.
FierceA domain scanner that helps map out a target’s domain infrastructure, including DNS records and subdomains.
Recon-ngA web-based reconnaissance framework that automates OSINT gathering from various sources.
TheHarvesterA tool to gather email addresses, subdomains, and other information through search engines and public records.
MasscanA fast network scanner used for scanning large IP ranges to identify open ports.
DigA command-line tool for querying DNS records and gathering information on domain names.
Sublist3rA tool for discovering subdomains using open-source intelligence.
CensysProvides data on devices, services, and open ports exposed to the internet, assisting in reconnaissance.
ShodanA search engine that scans and indexes devices connected to the internet for reconnaissance.
SpiderFootAn automation tool for gathering intelligence about a target by querying public databases and sources.
DnsreconA tool for DNS enumeration, identifying subdomains, and extracting other DNS-related data.
Enum4linuxA tool to gather information from Windows machines by querying SMB shares and services.
EnumeRanndenThis tool is designed to streamline and enhance your penetration testing workflow by integrating a variety of essential tools and functionalities into a single script.
ProwlerProwler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more.
NucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
ToolDescription
123Contact FormA versatile form builder for websites and mobile applications.
99designsA platform to connect designers with clients needing logos, websites, and more.
AbacusA tool for simplifying expense reporting and tracking for businesses.
AcquiaCloud-based solutions for managing and optimizing digital experiences on Drupal.
ActiveCampaignA customer experience automation platform for email marketing and CRM.
ActiveProspectA SaaS platform to automate lead acquisition and qualification processes.
AdobeIndustry-leading software solutions for creative professionals, including Photoshop and Acrobat.
AeroFSA private cloud collaboration tool for secure team file sharing.
AirbitzA secure Bitcoin wallet and platform for decentralized applications.
AirbnbA platform for booking short-term homestays and unique travel experiences.
AlgoliaA search and discovery API for websites and mobile applications.
AltervistaA platform for creating free blogs and websites with monetization options.
AltroconsumoItaly's largest consumer organization offering product reviews and advice.
AmaraA tool for creating and managing subtitles for videos collaboratively.
Amazon Web ServicesA comprehensive cloud platform offering computing power, storage, and other services.
Amazon.comThe world's largest online retailer offering a vast array of products and services.
ANCILE Solutions Inc.Solutions for creating and delivering on-demand learning and performance support.
AnghamiA music streaming platform focused on Arabic content.
ANXBTCA Bitcoin trading and exchange platform.
Apache httpdAn open-source HTTP server for hosting websites and applications.
AppceleratorA cross-platform mobile app development tool.
AppleA global leader in consumer electronics, software, and online services.
ApptentiveA platform for mobile app engagement and customer feedback.
AptibleA security and compliance platform for DevOps teams.
ArdourA digital audio workstation for recording, editing, and mixing sound.
ArkaneA blockchain wallet and API service for developers.
ARM mbedA platform for IoT device development and deployment.
AsanaA project management tool for team collaboration and task tracking.
YesWeHackA global bug bounty and vulnerability disclosure platform.
intigritiA leading European platform for crowdsourced security testing.
HackerOneA vulnerability coordination and bug bounty platform connecting businesses with hackers.
BugcrowdA platform offering managed bug bounty programs and vulnerability disclosure.
CobaltA pen-testing as a service platform with a global community of security experts.
BountysourceA funding platform for open-source projects and software development bounties.
Bounty FactoryA platform for launching bug bounty programs with a community of ethical hackers.
BMW Group Bug BountyThe security of our products and services is top priority for us
Coder BountyA platform for developers to earn rewards by solving coding challenges.
FreedomSponsorsA funding platform for open-source software improvements and bug fixes.
FOSS FactoryA platform for funding free and open-source software development.
SynackA crowdsourced security platform combining automation with a network of ethical hackers.
HackenProofA bug bounty and vulnerability coordination platform for businesses.
DetectifyA SaaS platform offering web vulnerability scanning and crowdsourced security.
BugbountyjpA Japanese platform for launching and managing bug bounty programs.
SafehatsA vulnerability coordination platform for organizations to work with ethical hackers.
BugbountyHQA community platform for ethical hackers to collaborate and find bug bounty opportunities.
HackerhiveA security platform for crowdsourced vulnerability assessments and bug bounties.
HacktrophyA Slovak bug bounty platform for finding vulnerabilities in digital assets.
AntiHACKA bug bounty and penetration testing platform based in Asia.
CESPPAA cybersecurity and bug bounty platform for coordinated vulnerability disclosure.
Bug Bounty HuntingBug Bounty Hunting Search Engine
exifharvesterAutomatic tool for extracting EXIF metadata from website images and sets of URLs. A perfect tool for bug hunters and OSINT researchers.
Ripper Web Content - Capture Metadata ContentExtension that analyses and extracts metadata from content found on the web.
gfA wrapper around grep, to help you grep for things.
ToolDescription
NightmareNightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges. I call it that because it's a lot of people's nightmare to get hit by weaponized 0 days, which these skills directly translate into doing that type of work.
pwntoolsCTF framework and exploit development library
gefGEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Angrangr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic ("concolic") analysis, providing tools to solve a variety of tasks.
ToolsDescription
xortoolA tool to analyze multi-byte XOR cipher
John the RipperA fast password cracker
AircrackAircrack is 802.11 WEP and WPA-PSK keys cracking program.
CipheyAutomated decryption tool using artificial intelligence & natural language processing.
CyberchefA powerful web-based tool for encoding, decoding, encryption, and data analysis
Don´t Leak My FileDocument leak protection application developed in Python. It uses AES-256 encrypted watermarks and database tracking to detect potential leaks.
SkyCryptSkyCrypt is a file encryption and decryption application developed in Python. It uses the AES-256 algorithm to securely encrypt files and generates a one-time password (OTP) to validate decryption.
ToolsDescription
110 steganographic toolsA comprehensive list of 110 steganographic tools.
CloakifyA tool for disguising data to bypass data loss prevention mechanisms.
Stego_DropperA steganography-based dropper written in Python.
silenteyeA cross-platform application for steganography.
deep-stegDeep learning based steganography tool.
StegXA Python-based steganography tool.
js-stegA steganography tool using JavaScript.
stegA simple steganography tool.
StegoProxyA proxy tool that implements steganography.
Video-Steganography-for-Piracy-PreventionA video steganography tool to prevent piracy.
openstegoAn open-source steganography tool.
stegAnother steganography tool.
StegbookA steganography tool for Facebook messages.
PDF_steganographyA tool for hiding data within PDF files.
steganography_talkA presentation on steganography.
ascii-steganographyA tool for hiding data within ASCII text.
voicesA tool for audio steganography.
stego-retweetA tool for hiding data within retweets.
ARMSAnother steganography tool.
stegosaurusA simple steganography tool.
OutguessA universal steganography tool.
BitStegNetA neural network based steganography tool.
stego-waveA steganography tool for hiding data in audio files.
StegoMP3A tool for MP3 steganography.
jSteganographiXA steganography tool written in Java.
LSB-SteganographyA tool for least significant bit steganography.
jstegA steganography tool written in Go.
stego-toolkitA collection of steganography tools.
f5-steganographyAn implementation of the F5 steganography algorithm.
MatroschkaA steganography tool.
Deep-SteganographyA deep learning based steganography tool.
AudioStegoA tool for audio steganography.
audio-steganography-algorithmsAlgorithms for audio steganography.
jphsA steganography tool.
StegDroidA steganography tool for Android.
SteCoStegA steganography tool.
PNG-MaskA tool for hiding data in PNG images.
chess-stegA steganography tool for hiding data in chess games.
strogonoffAnother steganography tool.
PictographA steganography tool for images.
stegoVeritasA steganography tool.
secretbookA steganography tool for Facebook messages.
snow10A steganography tool.
mp3stegoA tool for MP3 steganography.
stego_videoA video steganography tool.
diitA steganography tool.
stegosploitA tool for embedding exploits in images.
stegolabA steganography tool.
stego-book-2014A collection of steganography tools from 2014.
timeshifterA tool for covert channels based on time.
coverteleA tool for covert communication.
CCEAPA steganography tool.
cloud-covert-channelsA tool for covert channels in the cloud.
DNSExfiltratorA tool for data exfiltration via DNS.
StegPageA source for various steganography tools.
CameraShyA steganography tool.
stegUnicodeA steganography tool using Unicode.
stelinAnother steganography tool.
HydanA steganography tool for binary files.
deogolA steganography tool.
Hugo source codeSource code for a steganography tool.
WOWSteganography algorithms.
stegifyA simple steganography tool.
Steganography 101An introductory guide to steganography.
Invoke-PSImageA tool for embedding PowerShell scripts in images.
instegogramA tool for steganography in Instagram images.
ToolDescription
VSLA steganographic tool that helps in hiding and detecting messages within digital images.
HackTricks - Stego TricksA comprehensive guide on various steganography techniques and tricks used in cybersecurity.
zstegA tool for detecting hidden data in PNG and BMP files.
StegOnlineAn online tool for hiding and extracting hidden messages in images.
StegsolveA steganography analysis tool that can analyze images for hidden data.
StegCrackerA tool for brute-forcing passwords of hidden data in steganographic images.
StegSeekA lightning-fast steganography brute-force tool for hidden data in images.
JJTC SteganalysisA resource for various steganalysis techniques and tools.
Guillermito's SteganographyAn informative site on steganography tools and techniques.
StegdetectA popular steganography detection tool capable of detecting hidden data in images.
Spy HunterA tool designed to detect steganography usage and hidden data.
StegkitA steganography kit used for hiding and extracting hidden messages in images.
StegalyzerA tool designed for detecting and analyzing steganographic content in digital images.
Stego SuiteA suite of tools for hiding and detecting steganographic content.
StegsecretAn open-source steganography tool for embedding and extracting hidden messages in images.
StegExposeA tool for detecting hidden data in images using statistical analysis.
Cryptonibbles - Mr. Robot SteganographyA blog post discussing steganography in the context of the TV show Mr. Robot.
Forensics Analysis of Video Steganography ToolsA research paper on forensic analysis of video steganography tools.
AletheiaA tool for image steganalysis using state-of-the-art machine learning techniques.
Danielle Lerch's PapersA collection of research papers on steganalysis and related topics.
Steganalysis with CNN for Same Key ImagesA project for steganalysis using convolutional neural networks (CNN) for same key images.
DeepStegDeepsteg performs visual, structural, and statistical attacks (including deep learning-based attacks) to detect files hidden within images and other files.
tf_audio_steganalysisA project for steganalysis of audio files using TensorFlow.
SteganalysisCNNA steganalysis project using convolutional neural networks (CNN).
ALASKAA large-scale image steganalysis dataset.
IStego100KA large-scale image steganalysis dataset.
StegOnlineAn online tool for hiding and extracting hidden messages in images.
SteganabaraA tool for steganography analysis.
StegasawusA steganography analysis tool.
UDSSA project for universal deep steganalysis systems.
BreakingSteganalysisGANA project on breaking steganalysis using generative adversarial networks (GAN).
SteganalyseA steganalysis tool.
StegCrackerA tool for brute-forcing passwords of hidden data in steganographic images.
Welloganography SolverA steganography analysis tool.
McAfee Free Tools - SteganographyA collection of free steganography tools provided by McAfee.
MisticaA steganography analysis tool.
Cookie StegoA steganography tool for hiding and extracting hidden messages in images.
AperiSolveA steganography analysis tool.
SteganalysisA steganalysis project.
YeNet-PytorchA project for steganalysis using YeNet and PyTorch.
Steganalysis with CNN - Yedroudj-NetA steganalysis project using convolutional neural networks (CNN) - Yedroudj-Net.
Pytorch implementation of SRNetA project for steganalysis using SRNet and PyTorch.
LSB ToolkitA toolkit for steganography using least significant bit (LSB) techniques.
CAECNNcodeA project for steganalysis using convolutional neural networks (CNN).
StegolabA steganography and steganalysis toolkit.
DL SteganalysisA project for steganalysis using deep learning techniques.