Security tools

Packet Analyzer

Capture network packets and inspect traffic to understand protocols, troubleshoot connectivity, and investigate issues on authorized networks.

Packet Capture (CLI)

Command-line packet capture, ideal for servers and scripted collection.

Network Scanner

Discover hosts and services on networks you are authorized to test.

Network Utility

Read/write raw TCP/UDP connections for testing connectivity.

Network Security Monitor

Turn network traffic into rich, structured logs.

IDS/IPS

Signature-based intrusion detection and prevention.

Wireless

Wireless network detector, sniffer, IDS.

Wireless

Wi‑Fi security auditing suite (authorized networks only).

Web Proxy

Intercept, inspect and modify HTTP traffic between your browser and a web app.

Web Proxy / DAST

Open-source web proxy and automated scanner for finding web vulnerabilities.

Web Inspection

Inspect HTML, JavaScript, network requests, cookies and storage in your browser.

Content Discovery

Brute-force directories, DNS subdomains and vhosts on authorized targets.

Web Fuzzer

Fast web fuzzer for content discovery and parameter testing.

Web Exploitation

Detect SQL injection flaws in authorized applications.

HTTP Client

Send HTTP requests from the command line.

SAST

Lightweight static analysis for many languages.

API Testing

Build and test HTTP/API requests with collections and environments.

API Testing

Lightweight REST/GraphQL client for API exploration.

API Testing

Visualize GraphQL schemas (use on schemas you are allowed to view).

SAST

Semantic code analysis for vulnerability patterns.

DAST

Automate OWASP ZAP scans in CI.

Recon / OSINT

Map an organization's external attack surface via subdomain enumeration.

Recon / OSINT

Passive subdomain discovery from public sources.

OSINT

Collect emails, names and subdomains from public sources.

OSINT — Username

Find public accounts across many sites for a username (authorized investigations only).

OSINT — Username

Username search across thousands of sites with rich reporting (fork/evolution of Sherlock-style tooling).

OSINT — Image & Media

Read and write metadata in images, PDFs, and media files.

OSINT — Graph & Links

Visual link analysis between domains, people, and infrastructure (Community Edition).

OSINT — Automation

Automated OSINT collection with modular scans (self-hosted).

OSINT — Framework

Modular recon framework (Metasploit-style for OSINT).

OSINT — Email

Check if an email is registered on many sites (no password needed).

OSINT — Web

Use advanced search operators to find indexed sensitive pages — for defense and authorized assessments.

OSINT — Internet-wide

Search certificates, hosts, and services exposed on the internet.

OSINT — Breach

Check if emails appear in known public breach datasets.

OSINT — DNS

Historical DNS, subdomains, and WHOIS intelligence.

OSINT — DNS

Visual DNS reconnaissance (subdomains, MX, NS).

OSINT — Archives

Historical snapshots of websites for change review and leaked path discovery.

OSINT — Web sandbox

Safe remote fetching and analysis of URLs (screenshots, DOM, network).

OSINT — Malware & URLs

Aggregate AV/engine results for files, URLs, domains, and IPs.

OSINT — Internet-wide

Find internet-exposed services on IPs and org footprints (monitor assets you own).

Debugger

Debug binaries to understand memory and program flow.

Programming

The most common language for security automation and tooling.

Shell

The default Linux shell, used for automation and administration.

Shell

Windows automation shell, crucial for admins and defenders.

Version Control

Track code changes; essential for DevSecOps.

Hardening Audit

Audit Linux systems for hardening opportunities.

Privilege Escalation Audit

Enumerate privilege escalation paths in lab Linux machines.

Forensics

GUI digital forensics platform for disk image analysis.

Memory Forensics

Analyze RAM dumps for processes, network connections and malware.

Endpoint Telemetry

Detailed Windows event logging for processes, network and files.

DFIR / Endpoint

Endpoint visibility and forensic collection at scale.

Reverse Engineering

NSA open-source disassembler and decompiler.

Malware Detection

Pattern-matching rules to identify malware families.

Mobile Analysis

Automated static/dynamic mobile app analysis.

Incident Response

Case management for security incidents.

DFIR

Collect triage artifacts from Windows quickly.

DFIR

Super-timeline generation from disk artifacts.

DFIR

Collaborative timeline analysis UI.

DFIR

Fast Windows EVTX hunting and timeline.

Reverse Engineering

CLI reverse engineering framework.

Malware Analysis

Automated malware analysis sandbox.

Malware Analysis

Linux distro with RE/malware analysis tools.

Firmware Analysis

Extract embedded files from firmware images.

Firmware Analysis

Large-scale firmware emulation for research.

SIEM

Centralize, search and correlate logs to detect threats.

Detection Rules

Vendor-neutral detection rule format convertible to SIEM queries.

AD Attack Path Analysis

Graph AD relationships to find and fix attack paths.

Adversary Emulation

Automated adversary emulation mapped to ATT&CK.

Threat Intel Platform

Share and correlate threat intelligence.

Threat Intelligence

Structured CTI platform with STIX/TAXII.

SOAR / Analysis

Automated analyzers for observables (pairs with TheHive).

Threat Intelligence

Aggregate OSINT/threat intel analyzers.

Cloud CLI

Manage AWS and audit IAM, CloudTrail, GuardDuty and Security Hub.

Cloud CLI

Manage Azure and review security posture.

Cloud CLI

Manage GCP resources and review Security Command Center.

Cloud Posture

Open-source cloud security posture assessment.

Secrets Scanning

Scan git repos for leaked secrets.

Secrets Scanning

High-entropy secret detection in git history.

IaC Security

Static analysis for Terraform/K8s/CloudFormation.

IaC Security

Open-source IaC scanner by Checkmarx.

Cloud Posture

Multi-cloud security auditing.

Vulnerability Scanner

Open-source vulnerability scanning.

Vulnerability Scanner

Template-based scanner for known issues.

SCA / Container Scanner

Scan images, IaC and dependencies for vulnerabilities.

SCA

Identify known vulnerable dependencies.

Kubernetes

CIS Kubernetes benchmark checks.

Kubernetes

Pen-test Kubernetes clusters (authorized only).

Runtime Security

Runtime threat detection for containers/K8s.

SCA / Container Scanner

Vulnerability scanner for images and SBOMs.

SBOM

Generate SBOMs for containers and directories.

AI Security

LLM vulnerability probing framework.

AI Security

Microsoft framework for generative AI red teaming.

AI Security

Test and evaluate LLM prompts/policies.

AI Security

ML/LLM testing for performance and security issues.

Exploitation Framework

Validate vulnerabilities during authorized engagements and labs.

Windows Utilities

Process Explorer, Autoruns, Procmon and more for Windows analysis.

Cryptography

Inspect certificates, generate keys and test TLS.

Password Auditing

GPU password recovery for auditing hashes you are authorized to test.

Password Auditing

CPU password auditing for lab and authorized hashes.

Data Analysis

Browser-based encoding, decoding and data transformation.

Virtualization

Run isolated virtual machines for safe labs.

Dynamic Instrumentation

Instrument apps at runtime for testing.