Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Wapiti is a black-box web vulnerability scanner that crawls a site and fuzzes forms and parameters to find issues such a...
Wazuh is an open-source security platform that combines log analysis, file-integrity monitoring, vulnerability detection...
Wfuzz is a Python web fuzzer that replaces FUZZ placeholders in any part of a request with payloads.
WhatWeb identifies the technologies a website uses, such as the web server, CMS, JavaScript libraries and frameworks.
WireGuard is a modern, simple and fast VPN protocol that uses state-of-the-art cryptography and a small codebase.
Wireshark is a graphical network protocol analyser that lets you capture traffic and inspect it packet by packet with de...
XSStrike is a Python cross-site scripting detection suite with fuzzing and context analysis.
YARA is a pattern-matching tool that identifies and classifies files, often malware, using rules made of strings and con...
ZMap is a single-packet network scanner designed for internet-wide research, such as measuring how many hosts answer on...
Zeek is a network analysis framework that turns raw traffic into rich, structured logs (connections, DNS, HTTP, TLS and...
arp-scan finds devices on the local Ethernet segment by sending ARP requests and listing MAC and IP addresses.
bulk_extractor scans disk images or files and extracts features such as email addresses, URLs and credit-card-like numbe...
capa detects capabilities in executable files, such as "encrypts data" or "creates a service", and maps them to MITRE AT...
detect-secrets is an open-source Yelp tool that finds secrets in code and helps prevent new ones being committed.
dirsearch is a command-line web path scanner that brute-forces directories and files on a web server.
dnsx is a fast DNS toolkit for running many queries and resolving large lists of hostnames.
enum4linux-ng is a Python tool that enumerates information from Windows and Samba systems (shares, users, policies).
feroxbuster is a fast, recursive content-discovery tool written in Rust.
ffuf is a fast web fuzzer used to discover hidden directories, files, virtual hosts and parameters.
fping is a ping-like tool that probes many hosts in parallel and reports which are reachable.
gau fetches known URLs for a domain from sources such as the Wayback Machine and Common Crawl.
hping3 crafts and sends custom TCP, UDP and ICMP packets, useful for testing firewall rules and understanding network be...
httpx is a multi-purpose HTTP toolkit from ProjectDiscovery that probes lists of hosts to see which run web services and...
kube-bench checks whether a Kubernetes cluster is configured according to the CIS Kubernetes Benchmark.