Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Nuclei is a fast, template-driven vulnerability scanner where checks are written as readable YAML templates.
OSINT Framework is a curated, categorised directory of free OSINT tools and resources arranged as a browsable tree.
OSSEC is an open-source host-based intrusion detection system performing log analysis, integrity checking and rootkit de...
Amass maps an organisation's external attack surface by enumerating subdomains and related network assets from many publ...
Dependency-Check identifies project dependencies and checks whether they have publicly disclosed vulnerabilities (CVEs).
Dependency-Track is an intelligent component-analysis platform that ingests SBOMs and continuously identifies risk in yo...
OWASP Threat Dragon is an open-source threat-modelling tool for drawing data-flow diagrams and recording threats and mit...
ZAP (Zed Attack Proxy) is a free, open-source web application scanner and intercepting proxy maintained by the ZAP commu...
OpenCTI is an open-source platform for structuring and visualising cyber-threat intelligence using the STIX 2 data model...
OpenSCAP is a set of tools for checking system configuration against SCAP security baselines such as those in the SCAP S...
Pacu is an open-source AWS exploitation framework for testing the security of AWS environments in authorised engagements...
ParamSpider mines URLs containing parameters for a domain from web archives.
Plaso (log2timeline) extracts timestamps from many artefacts in a disk image and merges them into one super-timeline.
Prowler is an open-source cloud security tool that runs checks for AWS, Azure, GCP and Kubernetes against best practices...
Recon-ng is a modular web reconnaissance framework with a Metasploit-like interface and a built-in database.
Responder is a tool for testing name-resolution poisoning (LLMNR, NBT-NS, mDNS) in Windows networks, showing why those p...
Rootkit Hunter scans Linux systems for known rootkits, backdoors and suspicious file changes.
RustScan is a fast port scanner written in Rust that finds open ports quickly and can hand them to Nmap for deeper analy...
SSLyze is a fast Python library and CLI that analyses the TLS configuration of a server.
ScoutSuite is a multi-cloud security-auditing tool that gathers configuration data and produces an HTML report of risk a...
Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring and log manageme...
Semgrep is a fast, rule-based static-analysis tool that finds bugs and security issues in source code across many langua...
Sherlock checks whether a username exists across hundreds of social networks and websites.
Shodan is a search engine for internet-connected devices and services; defenders use it to see what their own organisati...