Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Cryptomator encrypts files client-side before they are uploaded to cloud storage, using a virtual drive.
Cutter is a graphical reverse-engineering platform powered by Rizin, with a decompiler integration and a friendly interf...
CyberChef is a browser-based "cyber Swiss Army knife" from GCHQ for encoding, decoding, encryption, compression and data...
DNSRecon performs DNS enumeration: standard record lookups, zone transfer checks, brute forcing and more.
Dalfox is an open-source XSS scanner and parameter analyser written in Go.
Detect It Easy identifies the compiler, packer or protector used to build an executable and shows file structure informa...
Docker Bench for Security is a script that checks a Docker host and containers against the CIS Docker Benchmark.
Elastic Security is the SIEM and endpoint security solution built on the Elastic Stack, with detection rules, timelines...
The Elastic Stack (Elasticsearch, Kibana and Beats/Elastic Agent) stores, searches and visualises logs; Elastic Security...
Evil-WinRM provides an interactive remote shell over Windows Remote Management for authorised assessments and labs.
ExifTool reads, writes and edits metadata in a very wide range of file types, such as images, PDFs and Office documents.
Exploit-DB is a public archive of exploits and proof-of-concept code, and SearchSploit is its offline command-line searc...
FLOSS (FLARE Obfuscated String Solver) automatically extracts obfuscated and stack strings from malware binaries in addi...
Falco is a CNCF runtime-security tool that detects abnormal behaviour in containers and hosts by watching system calls a...
Foremost recovers files from disk images or raw data by their headers and footers, without needing a file system.
Frida is a dynamic instrumentation toolkit that lets you inject JavaScript into running processes to observe and modify...
GDB is the GNU debugger; it lets you run, pause and inspect programs, which is fundamental for debugging and binary expl...
Ghidra is a free software reverse-engineering framework released by the U.S. National Security Agency, with a disassembl...
Gitleaks detects hard-coded secrets such as API keys and passwords in git repositories and files.
GnuPG (GPG) is a free implementation of the OpenPGP standard for encrypting and signing data and communications.
Gobuster brute-forces URIs (directories and files), DNS subdomains and virtual host names using wordlists.
Graylog is a log management platform for collecting, indexing and analysing log data from many sources.
OpenVAS is the scanning engine of the Greenbone Community Edition, an open-source vulnerability management system that t...
Grype is a vulnerability scanner for container images and filesystems that matches packages against vulnerability databa...