The Largest Hub of Cybersecurity Tools
Explore 2755 curated tools and resources
Join Mandos Brief
Get weekly cybersecurity updates, straight in your inbox.
Read by professionals from
LATEST ADDITIONS
Python-based web server framework for setting up fake web servers and services with precise data responses.
Redexer is a reengineering tool for Android app binaries with features like RefineDroid and Dr. Android.
Doorman is an osquery fleet manager that allows administrators to remotely manage the osquery configurations retrieved by nodes.
Repository of templates for Ayehu's workflows with the ability to design, execute, and automate IT and business processes.
iOS Reverse Engineering Toolkit for automating common tasks in iOS penetration testing.
A honeypot mimicking Tomcat manager endpoints to log requests and save attacker's WAR files for analysis.
DueDLLigence is an open-source tool for identifying and analyzing DLL hijacking vulnerabilities in Windows applications, providing automated analysis and remediation guidance.
A network recon framework including tools for passive and active recon
A comprehensive guide to SSL/TLS vulnerabilities and vulnerable cipher suites.
PwnAuth is an open-source tool for generating and managing authentication tokens for penetration testing and red teaming exercises.
A library and command line interface for extracting URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora.
Innovative tool for mobile security researchers to analyze targets with static and dynamic analysis capabilities and sharing functionalities.
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
FARA is a repository of purposefully erroneous Yara rules for training security analysts.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Free
Security Operations
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Free
Blogs and News
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Commercial
Cloud Security
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.
Commercial
AI Security