The Largest Platform to Find Cybersecurity Tools

RABCDAsm is a collection of utilities for ActionScript 3 assembly/disassembly and SWF file manipulation.

A structured approach for conducting penetration tests with seven main sections covering all aspects of the test.

A honeytoken-based tripwire for Microsoft's Active Directory to detect privilege escalation attempts

A command-line tool for extracting data from iOS mobile device backups created by iTunes on macOS systems.

A command line tool that generates randomized malleable C2 profiles for Cobalt Strike to vary command and control communication patterns.

Comprehensive manual for mobile app security testing and reverse engineering with technical processes for verifying controls.

Timeliner is a digital forensics tool that rewrites mactime with an advanced expression engine for complex timeline filtering using BPF syntax.

Create checkpoint snapshots of the state of running pods for later off-line analysis.

DFIRTrack is an open source web application focused on incident response for handling major incidents with many affected systems, tracking system status, tasks, and artifacts.

A web security tool that scans for vulnerabilities and known attacks.

A Ruby framework designed to aid in the penetration testing of WordPress systems.

A command-line tool that extracts detailed technical information, metadata, and checksums from JPEG image files with support for multiple output formats.

A Windows-based workflow automation and case management application that integrates with CrowdStrike Falcon APIs to streamline security operations and incident response processes.

A curated collection of companies that have publicly disclosed adversary tactics, techniques, and procedures following security breaches.

Taxii2 server for interacting with taxii services.

Web interface for the Volatility Memory Analysis framework with advanced features.

Strelka is a real-time, container-based file scanning system that performs file extraction and metadata collection at enterprise scale for threat hunting, detection, and incident response.

Kiterunner is a tool for lightning-fast traditional content discovery and bruteforcing API endpoints in modern applications.

A FTP honeypot tool for detecting and capturing malicious file upload attempts.

A Vim syntax-highlighting plugin for YARA rules that supports versions up to v4.3 and provides enhanced code readability for malware analysts.

Linux packet crafting tool for testing IDS/IPS and creating attack signatures.

A guide on basic Linux privilege escalation techniques including enumeration, data analysis, exploit customization, and trial and error.

Utilize Jupyter Notebooks to enhance threat hunting capabilities by focusing on different threat categories or stages.

A command-line tool that analyzes local CloudTrail files to detect off-instance AWS key usage patterns for security monitoring and forensic analysis.