Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

19 results

Blackbone

darthton/blackbone

Windows memory hacking library

binary-analysisdebuggersdynamic-analysis-sandboxing+9

5.5k4 years ago

Squalr

squalr/squalr

A generic game/software hacking tool written from the ground up in Rust.

binary-analysisdebuggersdynamic-analysis-sandboxing+5

1874 months ago

processhacker-mcp

illegal-instruction-co/processhacker-mcp

Runtime process analysis and memory hacking MCP server for AI agents. Supports dynamic extension loading, read-only mode, audit logging, and…

debuggersdynamic-analysis-sandboxingexploitation+7

518 months ago

x64dbg

x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

ai-assisted-reversingbinary-analysisbinary-exploitation+7

50k5 days ago

mastg

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

android-securitycryptographydynamic-analysis-sandboxing+9

13.3k10h 13m ago

Archived

XSpear

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

dynamic-analysis-sandboxingfuzzinginformation-gathering+8

1.4k7 months ago

awesome-mobile-security

vaib25vicky/awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

android-securitycurated-resourcesdynamic-analysis-sandboxing+8

3.6k5 years ago

VivisectION

atlas0fd00m/vivisection

Analysis Plugin and Tools for Vivisect

binary-analysisdebuggersdynamic-analysis-sandboxing+2

222 months ago

emba

e-m-b-a/emba

EMBA - The firmware security analyzer

binary-analysisdynamic-analysis-sandboxingembedded-systems-security+8

3.7k12h 53m ago

mzap

hahwul/mzap

⚡️ Multiple target ZAP Scanning

api-security-testingdevsecopsdynamic-analysis-sandboxing+3

1159 days ago

CakeFuzzer

zigrin-security/cakefuzzer

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…

dynamic-analysis-sandboxingfuzzingpenetration-testing+4

1051 year ago

Archived

arachni

arachni/arachni

Web Application Security Scanner Framework

crawlerdynamic-analysis-sandboxingpenetration-testing+3

4.0k6 months ago

SkypeACLKeyGen.exe-analysis-for-hacking-team

spiralbl0ck/skypeaclkeygen.exe-analysis-for-hacking-team

SkypeACLKeyGen.exe analysis for hacking team

binary-analysisbinary-exploitationdigital-forensics+5

2 years ago

reverse-engineering

wtsxdev/reverse-engineering

List of awesome reverse engineering resources

android-securitybinary-analysiscurated-resources+5

10.7k7 years ago

Text4shell--Automated-exploit---CVE-2022-42889

adarshpv9746/text4shell--automated-exploit---cve-2022-42889

Automated exploit for CVE-2022-42889 (Text4Shell) with a vulnerable Dockerized app for testing and manual exploitation guidance.

dynamic-analysis-sandboxingexploitationpayload-development+3

3 years ago

vimana-framework

s4dhulabs/vimana-framework

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…

api-securityapi-security-testingcrawler+9

662 months ago

poc-cve-2025-55182

koadt/poc-cve-2025-55182

This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React…

code-analysisctfdynamic-analysis-sandboxing+7

167 months ago

toothpicker

seemoo-lab/toothpicker

Coverage-guided in-process fuzzer for iOS Bluetooth daemon (bluetoothd) using FRIDA, with over-the-air fuzzing for MagicPairing protocol and crash…

bluetooth-securitydynamic-analysis-sandboxingfuzzing+3

2485 years ago