Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

282 results

TransparentTorProxy

onyks-os/transparenttorproxy

A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and easy…

command-and-controldefensive-toolsdns-analysis+6

444 days ago

urgent11-detector

armissecurity/urgent11-detector

URGENT/11 detection tool by Armis

embedded-systems-securityinformation-gatheringiot-security+5

647 years ago

CECster

nccgroup/cecster

A GUI-based tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols

embedded-systems-securityfuzzinghardware-security+3

3112 years ago

stegowiper

mindcrypt/stegowiper

A powerful and flexible tool to apply active attacks for disrupting stegomalware

defensive-toolsincident-responsemalware-analysis+2

564 years ago

zscan

zcyberseclab/zscan

A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network…

network-securitypenetration-testingport-scanning+3

443 months ago

got-responded

joda32/got-responded

A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)

intrusion-detectionnetwork-securitypenetration-testing+1

367 years ago

zeek2es

corelight/zeek2es

A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further…

log-analysisnetwork-securityscripting-automation+1

414 years ago

rtpnatscan

kapejod/rtpnatscan

Minimal CLI scanner that probes RTP proxies and NAT helpers for NAT-stealing vulnerability, helping VoIP administrators validate and harden media…

network-securitypenetration-testingvulnerability-analysis+1

259 years ago

mtpass

manio/mtpass

MikroTik Password Recovery Tool

network-securitypassword-attackspassword-cracking+1

2912 years ago

PQC-Scanner

cyberjez/pqc-scanner

The PQC Network Scanner is a quantum‑focused network assessment tool that scans TLS/SSL certificates across enterprise environments to identify…

cloud-securitycryptographynetwork-security+2

199 months ago

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchtowrlabs/watchtowr-vs-citrix-netscaler-cve-2026-88772

Detection artifact generator for Citrix NetScaler CVE-2026-88772 that builds a DTLS pre-auth buffer overflow payload to verify remote code execution.

exploitationnetwork-securitypenetration-testing+3

712 days ago

kexkill

dag-erling/kexkill

SSH KEXINIT flood tool exploiting CVE-2016-8858 to trigger memory exhaustion in vulnerable OpenSSH servers. Proof-of-concept for denial-of-service…

exploitationnetwork-securitypenetration-testing+1

78 years ago

Woeful

mercuryworkshop/woeful

Woeful is a tool that lets web apps to safely and securely connect to the outside internet without a complex backend.

dns-analysisnetwork-securitypacket-sniffing-analysis+2

141 year ago

roamr

sourabh-khot65/roamr

Find the best WiFi network for where you are — scores every saved network for real-world quality, not just signal bars.

general-purpose-utilitiesnetwork-securitywireless-security

82 months ago

FREAK-Attack-CVE-2015-0204-Testing-Script

abhishekghosh/freak-attack-cve-2015-0204-testing-script

Basic BASH Script to Automate OpenSSL based testing for FREAK Attack (CVE-2015-0204) as advised by Akamai.

network-securitypenetration-testingscripting-automation+1

511 years ago

CQPToolkit

qcomms/cqptoolkit

Framework for controlling QKD devices and managing symmetric keys. See the [project page here](https://qcomms.gitlab.io/cqptoolkit/)

cryptographyembedded-systems-securityencryption-decryption-tools+2

64 years ago

tunnelx

projectdiscovery/tunnelx

TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.

authenticationcloud-securitynetwork-security+3

31 month ago

bleed

dominikto/bleed

bleed is a tool to test servers for the 'Heartbleed' vulnerability (CVE-2014-0160).

exploitationnetwork-securitypenetration-testing+2

712 years ago