Tools for identifying, prioritizing, and remediating security vulnerabilities in systems and applications.
Explore 159 curated tools and resources
A wargame designed to test your hacking skills and knowledge
Audits JavaScript projects for known vulnerabilities and outdated package versions using OSS Index v3 REST API.
Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.
A search engine for the Internet of Things (IoT) that provides real-time information about connected devices.
An extensible, heuristic-based vulnerability scanning tool for installed npm packages.
A collection of 132 exploits added to Packet Storm in April 2024
A tool for scanning websites with open .git repositories and dumping their content for Bug Hunting/Pentesting Purposes.
A tool to run YARA rules against node_module folders to identify suspicious scripts
A JavaScript scanner built in PHP for scraping URLs and other information.
A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.
A comprehensive open dictionary of fault injection patterns and predictable resource locations for dynamic application security testing
A vulnerable Android application demonstrating various security issues and vulnerabilities
A Pythonic interface to the Internet Storm Center / DShield API
A tool that assesses AWS accounts for subdomain hijacking vulnerabilities in Route53 and CloudFront configurations.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.