Free Cybersecurity Tools
Find the right solution for your security needs without any cost.Explore 2631 curated tools and resources
Search by name, description, or purpose... (⌘+K)
PINNED
Promoted • 4 tools
Commercial
Consulting
Commercial
Application Security
Commercial
Cloud Security
Commercial
Application Security
Want your tool featured here?
Get maximum visibility with pinned placement
LATEST ADDITIONS
A tool to enumerate S3 buckets for a specific target
A tool to escalate SSRF vulnerabilities on modern cloud environments
A GitHub repository for fuzzing and testing file formats
A tool for bruteforcing subdomains of a given domain
A Burp extension for scanning JavaScript files for endpoint links
A Burp extension for scanning JavaScript files for endpoint links
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
A command-line program for finding secrets and sensitive information in textual data and Git history.
A command-line program for finding secrets and sensitive information in textual data and Git history.
A toolkit for testing, tweaking and cracking JSON Web Tokens
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Monitors GitHub for leaked secrets
Fast and customizable vulnerability scanner
A tool for performing subdomain enumeration using Censys API
A tool for performing subdomain enumeration using Censys API
A simple Swagger-ui scanner that detects old versions vulnerable to various XSS attacks
A simple Swagger-ui scanner that detects old versions vulnerable to various XSS attacks
A tool for Local File Inclusion (LFI) exploitation and scanning
LinksDumper extracts links and potential endpoints from HTTP responses with filtering capabilities for web application security testing.
LinksDumper extracts links and potential endpoints from HTTP responses with filtering capabilities for web application security testing.
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.
A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.
A powerful tool for finding and exploiting subdomain takeover vulnerabilities
A tool for detecting and taking over subdomains with dead DNS records
A tool for detecting and taking over subdomains with dead DNS records
A fast domain resolver and subdomain bruteforcing tool
A directory traversal fuzzer for finding and exploiting directory traversal vulnerabilities.
A directory traversal fuzzer for finding and exploiting directory traversal vulnerabilities.