The Largest Collection of Cybersecurity Tools

An educational cybersecurity knowledge repository that compiles and presents hacking and cybersecurity information in an accessible format for learning purposes.

NFStream is a multiplatform Python framework for network flow data analysis with a focus on speed and flexibility.

A Zeek-based protocol analyzer that parses GQUIC traffic to extract connection metadata and create fingerprints for detecting anomalous network behavior.

An article in Phrack Magazine discussing the creation of shellcode for StrongARM/Linux architecture.

CrowdFMS is a CrowdStrike framework that automates malware sample collection from VirusTotal using YARA rule-based notifications and the Private API system.

Retraced is an audit logging solution that provides compliant, searchable audit trails for applications with client libraries for Go and JavaScript.

A virtual host scanner with the ability to detect catch-all scenarios, aliases, and dynamic default pages, presented at SecTalks BNE in September 2017.

A tool that scans for accessibility tools backdoors via RDP

A platform for accessing threat intelligence and collaborating on cyber threats.

Advanced command and control tool for red teaming and adversary simulation with extensive features and evasion capabilities.

Export Kubernetes events for observability and alerting purposes with flexible routing options.

InfoRisk Today is a key resource for news and insights on information risk management and cybersecurity education.

Allstar is a GitHub App that continuously monitors repositories and organizations for security policy violations, creating alerts when best practices are not followed.

A framework for orchestrating forensic collection, processing, and data export.

A signature-based, multi-threaded honeypot detection tool written in Golang that identifies honeypots through crafted requests and response analysis.

A Python module for orchestrating remote forensic data acquisition and analysis from Linux instances using Amazon SSM.

ConventionEngine is a Yara rule collection that analyzes PE files by examining PDB paths for suspicious keywords, terms, and anomalies that may indicate malicious software.

Embeddable Yara library for Java with support for loading rules and scanning data.

Yara rule generator using VirusTotal code similarity feature code-similar-to.

A modified version of GNU dd with added features like hashing and fast disk wiping.

Powerfully simple endpoint security solution that takes down threats without interrupting business.

Skyhook is an HTTP-based file transfer tool that uses obfuscation techniques to evade detection by Intrusion Detection Systems.

A cloud-focused attack simulation framework that provides granular, self-contained offensive techniques mapped to MITRE ATT&CK for red team exercises.

A command line utility for managing volume shadow copies with capabilities for evasion, persistence, and file extraction.