Cybersecurity Tools Directory

The industry-standard open-source network scanner. Nmap discovers hosts, services, and OS versions across entire networks, making it the first tool in any pentester's arsenal.

A fast passive subdomain enumeration tool that uses multiple online sources to discover valid subdomains. Essential for mapping an organization's external attack surface without active scanning.

OWASP's powerful attack surface mapping and OSINT tool. Amass performs DNS enumeration, network mapping, and data source integration to build a comprehensive picture of a target.

A fast and multi-purpose HTTP toolkit for probing live hosts and detecting web technologies. Pairs perfectly with subfinder to validate discovered subdomains and fingerprint tech stacks.

A community-powered vulnerability scanner driven by YAML templates. Nuclei can detect CVEs, misconfigurations, and exposures across thousands of targets with its ever-growing template library.

A comprehensive web server scanner that checks for dangerous files, outdated software, and server misconfigurations. Quick to run and provides a solid baseline assessment of web servers.

A dedicated WordPress security scanner that detects vulnerable plugins, themes, and core versions. Invaluable for auditing the millions of WordPress sites on the internet.

The go-to automated SQL injection and database takeover tool. SQLMap detects and exploits SQL injection flaws, supporting nearly every database engine in existence.

The world's most widely used penetration testing framework. Metasploit provides exploit modules, payloads, and post-exploitation tools for comprehensive security assessments.

The leading web application security testing platform. Burp Suite intercepts and modifies HTTP traffic, scans for vulnerabilities, and provides tools for manual testing of web apps.

A blazing-fast web fuzzer written in Go. ffuf excels at directory discovery, parameter brute-forcing, and virtual host enumeration with support for advanced filtering options.

A versatile brute-forcing tool for discovering directories, DNS subdomains, and virtual hosts. Written in Go for maximum speed, it handles large wordlists efficiently.

A classic URL brute-forcing tool that finds hidden web objects by launching dictionary-based attacks. Simple to use and effective for quick reconnaissance of web servers.

A powerful and fast network login cracker supporting dozens of protocols including SSH, FTP, HTTP, and more. Essential for testing password policies and credential strength.

A legendary password hash cracker that supports hundreds of hash formats. John combines multiple cracking modes including dictionary attacks, brute force, and rule-based mutations.

The world's fastest GPU-accelerated password recovery tool. Hashcat leverages graphics cards to crack hashes at incredible speeds, supporting over 300 hash types.

The most popular network protocol analyzer in the world. Wireshark captures and inspects live network traffic at a granular level, essential for understanding protocols and finding anomalies.

An advanced tunneling and pivoting tool that creates encrypted TUN interfaces without SOCKS proxies. Ideal for establishing secure tunnels through compromised networks during engagements.

GitHub's semantic code analysis engine that treats code as queryable data. Write custom queries to find vulnerability patterns across entire codebases at scale.

An LLMNR, NBT-NS, and MDNS poisoner used for capturing authentication hashes on local networks. A staple in internal penetration tests and Active Directory assessments.

A Linux-based tool for enumerating information from Windows and Samba systems via SMB. Extracts user lists, shares, group memberships, and password policies from target hosts.

The search engine for internet-connected devices. Shodan indexes servers, IoT devices, and industrial systems worldwide, revealing exposed services and misconfigurations.

An OSINT tool for gathering emails, subdomains, hosts, and employee names from public sources. Uses search engines, PGP key servers, and the Shodan database for comprehensive results.

GCHQ's open-source web app for data encoding, decoding, encryption, and analysis. Drag-and-drop recipe building makes complex data transformations accessible to everyone.

The leading open-source memory forensics framework. Volatility extracts digital artifacts from RAM dumps, enabling incident responders to uncover malware, rootkits, and attacker activity.