Aircrack-ng
Suite of utilities for wireless network security auditing and packet analysis.
ESSENTIAL SECURITY TOOLS
The familiar foundations.
Established tools for network analysis, penetration testing, application security, detection and forensics. Follow the original project and documentation before use.
Explore the full catalog →Tools in this collection
38 published records · Inclusion is not a safety endorsement.
Amass
Attack surface mapping and asset discovery framework.
Autopsy
Graphical digital forensics platform built around The Sleuth Kit and related analysis tools.
BloodHound
Graph-based analysis of identity relationships and attack paths in supported directory environments.
Certipy
Tool for assessing Active Directory Certificate Services configurations and associated security risks.
CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Gobuster
Command-line tool for directory, file, DNS and virtual-host discovery.
Hashcat
Password recovery and auditing utility supporting many hash formats.
Impacket
Python classes and example tools for working with network protocols and security assessments.
John the Ripper
Password recovery and auditing suite with support for numerous hash formats.
Masscan
High-speed TCP port scanner for assessing authorized network address ranges.
Metasploit Framework
Framework for developing and running security assessment modules in authorized testing environments.
NetExec
Network security assessment toolkit for authorized enterprise environment testing.
Nikto
Web server scanner for identifying potentially dangerous files, outdated components and configuration issues.
Nmap
Network discovery and security auditing tool for host discovery, port scanning and service identification.
Nuclei
Template-driven scanner for finding documented vulnerability patterns and misconfigurations.
OpenVAS Scanner
Vulnerability scanner component of Greenbone Community Edition.
RustScan
Port discovery tool designed to integrate with Nmap-based network assessment workflows.
Semgrep
Static analysis tool for finding code patterns, bugs and potential security issues.
Sigma rules
Community-maintained collection of generic detection rules for security event logs.
Snort 3
Network intrusion detection and prevention engine from the Snort project.
Subfinder
Passive subdomain discovery tool from ProjectDiscovery.
Suricata
Network intrusion detection, prevention and security monitoring engine.
THC Hydra
Network-service authentication auditing tool for authorized password testing.
The Sleuth Kit
Library and command-line utilities for examining disk images and file systems.
Trivy
Scanner for vulnerabilities and misconfigurations in supported containers, repositories and infrastructure.
Volatility 3
Framework for memory forensics and analysis of supported memory images.
Wazuh
Security monitoring platform combining endpoint telemetry, detection and related analysis capabilities.
Wireshark
Network protocol analyzer for inspecting packet captures and live network traffic.
YARA
Rule-based pattern matching tool used to identify and classify files and malware-related characteristics.
ZAP
Web application security testing proxy and scanner from the ZAP project.
Zeek
Network analysis framework for producing structured security and protocol activity logs.
ffuf
Fast web fuzzing tool for discovering application content and testing input handling.
ghidra
Ghidra is a software reverse engineering (SRE) framework
httpx (ProjectDiscovery)
HTTP probing toolkit for inspecting web-service responses and properties.
osquery
Operating-system instrumentation framework that exposes system information through SQL queries.
sqlmap
Automated SQL injection testing tool for authorized application assessments.
tcpdump
Command-line packet capture and network traffic analysis utility.