Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
ATT&CK Navigator is a web tool from MITRE for annotating and exploring the ATT&CK matrices, for example to track detecti...
Aircrack-ng is a suite of tools for assessing Wi-Fi network security: monitoring, capturing and testing WEP/WPA key stre...
Angry IP Scanner is a simple graphical IP and port scanner that shows which addresses in a range are alive.
Apktool decodes Android app resources and smali code and can rebuild an APK after changes, useful for analysis in author...
Arjun finds hidden HTTP parameters on web endpoints by testing wordlists efficiently.
Arkime captures and indexes network traffic so analysts can search large packet datasets quickly.
Assetfinder is a small Go tool that finds domains and subdomains related to a given domain using public data sources.
Autopsy is a graphical digital-forensics platform built on The Sleuth Kit that analyses disk images and recovers files,...
Bandit is a tool designed to find common security issues in Python code, such as use of eval, weak hashes and hard-coded...
Bettercap is a modular framework for network reconnaissance and man-in-the-middle testing on Wi-Fi, Bluetooth LE and Eth...
Binwalk analyses binary files, such as firmware images, to find and extract embedded files and compressed data.
BloodHound maps relationships in Active Directory and Azure/Entra ID as a graph so defenders and testers can find privil...
Brakeman is a static-analysis security scanner for Ruby on Rails applications that finds vulnerabilities without running...
Burp Suite is a web application security testing platform built around an intercepting proxy, available in a free Commun...
CAPE is an open-source malware sandbox that executes samples in a virtual machine and extracts payloads and configuratio...
Caido is a lightweight web security auditing toolkit with an intercepting proxy, replay and automation features.
CeWL spiders a website and builds a custom wordlist from the words it finds, useful for targeted password audits.
Censys indexes internet-facing hosts and certificates so you can search for exposed services and see how your own assets...
Chainsaw quickly searches and hunts through Windows event logs using Sigma rules and built-in detection logic.
Checkmarx One is a commercial application security platform covering static analysis, dependency scanning and more.
Checkov is a static-analysis tool for infrastructure-as-code (Terraform, CloudFormation, Kubernetes, Dockerfiles and mor...
ClamAV is an open-source antivirus engine for scanning files and mail gateways.
CloudFox helps find exploitable attack paths in cloud infrastructure by enumerating resources and permissions in authori...
CodeQL treats code as data so you can query it for vulnerabilities; it powers GitHub code scanning and is free for open-...