Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Hashcat is a very fast password-recovery tool that uses GPUs and CPUs to test candidates against many hash types.
Hayabusa is a Windows event-log fast forensics timeline generator and threat-hunting tool using Sigma-compatible rules.
Impacket is a Python collection of classes and example scripts for working with network protocols such as SMB, Kerberos...
Interactsh is an open-source ProjectDiscovery tool that captures out-of-band DNS, HTTP and SMTP interactions, used to co...
JADX decompiles Android APK and DEX files back into readable Java source with a simple GUI.
John the Ripper is a flexible offline password cracker used to audit password strength by testing hashes against wordlis...
Katana is a fast, configurable web crawler from ProjectDiscovery.
KeePassXC is a free, open-source, offline password manager that stores credentials in an encrypted database file.
Kismet is a wireless network and device detector, sniffer and IDS supporting Wi-Fi, Bluetooth and other radios.
Kubescape scans Kubernetes clusters and manifests for misconfigurations against frameworks such as NSA-CISA and MITRE AT...
Lynis is a security auditing tool for Unix-like systems that checks configuration and hardening and suggests improvement...
MISP is an open-source threat-intelligence platform for collecting, storing and sharing indicators of compromise and thr...
Maltego is a commercial graphical link-analysis platform that visualises relationships between people, domains, infrastr...
Masscan is an asynchronous TCP port scanner built for speed, able to cover very large address ranges far faster than tra...
The Metasploit Framework is a widely used penetration-testing platform containing exploit, auxiliary and post-exploitati...
Metasploit Pro is Rapid7's commercial edition built on the open-source Metasploit Framework, adding a web interface, rep...
MobSF is an automated mobile application security testing framework offering static and dynamic analysis of Android and...
Naabu is a port scanner from ProjectDiscovery that is designed to be piped together with other recon tools.
Ncat is the Nmap project's modern "netcat": it reads and writes data across networks and can act as a client, server, re...
Nessus is a commercial vulnerability scanner from Tenable (a limited free "Essentials" edition is offered; check Tenable...
NetExec (the maintained successor to CrackMapExec) assesses large Windows/Active Directory networks over SMB, WinRM, LDA...
NetworkMiner is a network forensic analysis tool that extracts files, images, credentials and host details from packet c...
Nikto is an open-source web server scanner that checks for dangerous files, outdated server software and common misconfi...
Nmap maps which hosts are alive on a network and which TCP/UDP services they expose, including software versions and ope...