Software Directory
7,649 tools found
ProxyCat
github一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用
oryx
github🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
fibratus
githubAdversary tradecraft detection, protection, and hunting
smart-contract-vulnerabilities
githubA collection of smart contract vulnerabilities along with prevention methods
u2f-zero
githubU2F USB token optimized for physical security, affordability, and style
wifipumpkin3
githubPowerful framework for rogue access point attack.
exifcleaner
githubCross-platform desktop GUI app to clean image metadata
sn0int
githubSemi-automatic OSINT framework and package manager
find-sec-bugs
githubThe SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
winscript
githubOpen-source tool to build your Windows script from scratch. It includes debloat, privacy, performance & app installing scripts.
brutespray
githubFast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
awesome-cloud-security
github🛡️ Awesome Cloud Security Resources ⚔️
awesome-iot-hacks
githubA Collection of Hacks in IoT Space so that we can address them (hopefully).
Peergos
githubA p2p, secure file storage, social network and application protocol
Malcolm
githubMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
solo1
githubSolo 1 firmware in C
cloudfox
githubAutomating situational awareness for cloud penetration tests.
masvs
githubThe OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
creepjs
githubCreepy device and browser fingerprinting
agent-scan
githubSecurity scanner for AI agents, MCP servers and agent skills.
secure
githubHTTP middleware for Go that facilitates some quick security wins.
noseyparker
githubNosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
boofuzz
githubA fork and successor of the Sulley Fuzzing Framework
SSH-Snake
githubSSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.