Home › Tool
Tool
Security tools worth installing — the frameworks, CLIs and utilities you actually run, on both sides of the fence. Each entry is an honest, short note on what it does and a link to the source; no rewrites of the docs, no affiliate fluff.
On the offensive side: BloodHound for Active Directory attack paths, Pacu for AWS exploitation, and recon CLIs like ZoomEye. On the defensive side: Wazuh (open-source XDR/SIEM) and CVE Prioritizer for cutting a patch backlog down with CVSS, EPSS and KEV.
Prefer a command reference to a tool to install? The cheat sheets cover the day-to-day commands; these are the bigger pieces of kit you set up once and keep.
Pulse Diagnostics — Windows Event Log in plain English
Pulse is a free, open-source (MIT) Windows 10/11 app that turns Event Log entries and blue screens into plain-language explanations, with a crash history, system health…
CISA Offers Two Free Tools to Detect Security Misconfigurations in Microsoft 365 and Google Workspace
from the free-config-audit dept.CISA's SCuBA project has two free tools that check cloud settings against its secure configuration baselines. ScubaGear (PowerShell, from the PowerShell Gallery) audits…
OpenOSINT
An OSINT toolkit that wraps 20 open-source intelligence tools behind an AI agent interface. Runs as a REPL, MCP server, or CLI, and works with Claude,…
sqlmapproject/sqlmap: Automatic SQL injection and database takeover tool
SQLMap automates SQL injection detection and exploitation against web applications. It handles payload generation, database fingerprinting, and data extraction across multiple database engines. Useful for penetration…
sherlock-project/sherlock: Hunt down social media accounts by username across social networks
Command-line tool that searches for a given username across hundreds of social media sites and returns matches with direct links. Useful for OSINT work, identity verification,…
Infoooze
OSINT aggregator that bundles common reconnaissance queries into a single interface. Feed it a target—name, email, domain, IP—and it runs the usual lookups across public sources…
sparkfunX/Skimmer_Scanner: A mobile app for detecting bluetooth gas pump credit card skimmers
Android app that detects Bluetooth devices near gas pumps, flagging potential skimming hardware before you swipe. Scans for known skimmer signatures and suspicious Bluetooth presence. Useful…
botherder/androidqf: androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.
A command-line tool for rapidly pulling forensic artifacts from Android devices: logs, installed packages, file metadata, process state, and other indicators useful for spotting compromise or…
Trufflehog
Scanner that hunts for leaked secrets in git repositories, filesystems and cloud storage. Trufflehog finds credentials, API keys and tokens, then verifies them against live services…
Mobile Verification Toolkit
Open-source framework for analyzing mobile devices to detect signs of compromise, spyware, or malware infection. Designed for investigators, journalists, and at-risk users who need to examine…
Canarytokens
Free honeypot tokens you scatter across your network—in code, configs, documentation, fake credentials—that phone home the moment an attacker finds and touches them. Generates alerts with…
What is TruffleHog? ◆ Truffle Security Co.
Open-source scanner that hunts for secrets, passwords, and API keys buried in code repositories and commit history. Catches the mistakes developers make when they push credentials…
owasp-amass/amass
Reconnaissance framework that enumerates DNS, IP space, and web infrastructure to build a complete picture of a target's attack surface. Pulls data from passive sources, APIs,…
- Your trusted source for domain and IP intelligence!
Collection of free DNS and IP lookup utilities: reverse IP, WHOIS, DNS records, subdomain enumeration, port scanning, geolocation. Handy for reconnaissance work and domain research. No…
httprobe
Command-line tool that takes a list of domains and probes them to determine which ones are running HTTP or HTTPS services. Useful during reconnaissance when you…
Detect which CMS a site is using
A web-based CMS fingerprinting tool that identifies the content management system running a target site by analyzing page content and headers. Useful for reconnaissance work and…
Binary Edge
BinaryEdge continuously scans internet-facing devices and correlates the results so you can see your own attack surface — the ports, services, and exposures an outside attacker…
ettercap-project.org
Ettercap is a long-standing suite for man-in-the-middle attacks on a local network. It uses ARP poisoning to sit quietly between two hosts, then sniffs, filters, and…
Hacksguard
A Rust-built malware analysis tool with a terminal interface, handling PE file inspection, YARA rule matching, and heuristic scoring. Aimed at analysts who want speed and…
ZoomEye Search Engine for Internet Asset Discovery
Search engine that indexes internet-facing devices, services and banners. Useful for reconnaissance work and understanding what infrastructure is publicly visible. Free tier available; the kind of…
XLMMacroDeobfuscator
Tool for decoding obfuscated XLM macros in Excel spreadsheets by emulating the XLM interpreter. Useful for malware analysts and incident responders who need to reverse-engineer weaponized…
Shodan Search Engine
Search engine that indexes Internet-connected devices by scanning for open ports, banners, and service metadata. Used by security researchers for reconnaissance, asset discovery, and vulnerability assessment.…
Raccoon
A reconnaissance and vulnerability scanning framework built for speed. Handles asset discovery, port scanning, and service enumeration across networks. Useful for pentesters and red teamers who…
Arcane
A Docker management interface built for accessibility rather than command-line fluency. Arcane sits between the raw Docker API and the operator, offering a GUI that handles…
Splunk Attack Range
Terraform-based lab builder that spins up intentionally vulnerable infrastructure—Windows, Linux, cloud instances—pre-instrumented with logging and Splunk ingestion. Run attacks against it, collect the telemetry. Built for…
Portainer
Web UI for Docker and Kubernetes cluster management. Lets you inspect containers, manage images, handle volumes, and deploy workloads without the CLI. Useful for teams that…
Coolify
Self-hosted deployment platform that handles static sites, databases, and full-stack apps across your own infrastructure. Reduces vendor lock-in and gives you control over where code runs.…
Proxmox VE Helper-Scripts
A collection of helper scripts for Proxmox VE, the open-source hypervisor platform. Covers automation and setup tasks across virtual machines and containers. Useful if you're running…
Wifite2 — automated Wi-Fi auditing
A rewritten wireless auditing framework that automates attacks against WiFi networks, including WEP, WPA and WPS. Chains together existing tools like aircrack-ng and reaver into a…
SearchSploit — offline Exploit-DB search
Command-line search tool for Exploit-DB's vulnerability database. Lets you query exploits and PoCs locally without a browser, useful for offline work or scripting searches into your…