Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
OpenVAS is the scanning engine of the Greenbone Community Edition, an open-source vulnerability management system that t...
Grype is a vulnerability scanner for container images and filesystems that matches packages against vulnerability databa...
Lynis is a security auditing tool for Unix-like systems that checks configuration and hardening and suggests improvement...
Nessus is a commercial vulnerability scanner from Tenable (a limited free "Essentials" edition is offered; check Tenable...
Dependency-Check identifies project dependencies and checks whether they have publicly disclosed vulnerabilities (CVEs).
OpenSCAP is a set of tools for checking system configuration against SCAP security baselines such as those in the SCAP S...
Rootkit Hunter scans Linux systems for known rootkits, backdoors and suspicious file changes.
SSLyze is a fast Python library and CLI that analyses the TLS configuration of a server.
ldapdomaindump collects and presents Active Directory information via LDAP as readable HTML, JSON and grep-friendly file...
testssl.sh checks a server's TLS/SSL ciphers, protocols and known cryptographic flaws from the command line.