Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
BloodHound maps relationships in Active Directory and Azure/Entra ID as a graph so defenders and testers can find privil...
Evil-WinRM provides an interactive remote shell over Windows Remote Management for authorised assessments and labs.
Exploit-DB is a public archive of exploits and proof-of-concept code, and SearchSploit is its offline command-line searc...
Impacket is a Python collection of classes and example scripts for working with network protocols such as SMB, Kerberos...
The Metasploit Framework is a widely used penetration-testing platform containing exploit, auxiliary and post-exploitati...
Metasploit Pro is Rapid7's commercial edition built on the open-source Metasploit Framework, adding a web interface, rep...
NetExec (the maintained successor to CrackMapExec) assesses large Windows/Active Directory networks over SMB, WinRM, LDA...
Responder is a tool for testing name-resolution poisoning (LLMNR, NBT-NS, mDNS) in Windows networks, showing why those p...
Sliver is an open-source cross-platform adversary-emulation framework used by red teams to test detection and response.