Security

Open-source threat intelligence platform. Share, store, and correlate Indicators of Compromise. Used by CERTs and security teams worldwide.

Simple, modern, and secure file encryption tool. No config, no options, just works. Alternative to GPG for file encryption.

World's most used penetration testing framework. Includes exploit modules, payload generators, auxiliary scanners, and post-exploitation tools.

Free, open-source security platform for threat detection, integrity monitoring, incident response, and compliance. Unified SIEM/XDR.

Threat intelligence aggregator. Query 100+ sources for IP, domain, URL, file hash analysis from a single API. Open-source SOAR component.

Container signing, verification, and storage in OCI registries. Keyless signing with OIDC. Part of the Sigstore project.

eBPF-based security observability and runtime enforcement by Cilium. Process, file, network visibility without kernel modules.

Determine file types by signatures. Detect packers, compilers, linkers, and protectors. Essential first step in malware analysis.

Intelligent component analysis platform. Track vulnerabilities in third-party libraries. SBOM ingestion, policy engine, and metrics.

Industry-standard interactive disassembler by Hex-Rays. Free version supports x86/x64. Essential for malware analysis and RE.

NIST-certified Security Content Automation Protocol tools. Vulnerability scanning, compliance checking, and security automation.

Open-source collaborative IDS/IPS. Shares threat intelligence across community. Behavior-based detection with crowdsourced blocklists.

Scan for rootkits, backdoors, and local exploits. Checks for known rootkit signatures, wrong file permissions, and hidden files.

Debian-based security distribution. Pre-installed security, DFIR, and privacy tools. Lighter than Kali with cloud-pentesting focus.

CLI tool for generating Software Bill of Materials (SBOM) from container images and filesystems. CycloneDX and SPDX output.

Advanced Intrusion Detection Environment. File integrity checking tool. Creates a database of files and detects unauthorized changes.

Firmware analysis tool. Extract file systems, find embedded files, and analyze binary images. Essential for IoT security research.

Cross-platform network traffic monitor with a friendly GUI.

Complete implementation of the OpenPGP standard. Encrypt and sign data and communications. Key management and trust model.

Free disk encryption software based on TrueCrypt. Create encrypted volumes, encrypt partitions, and encrypt entire drives. Plausible deniability.

Generic signature format for SIEM systems. Write detection rules once, convert to Splunk, Elastic, QRadar, and more.

Comprehensive security scanner. Finds vulnerabilities in containers, file systems, Git repos, and Kubernetes. Scans OS packages and app dependencies.

OWASP project for network mapping and external asset discovery. DNS enumeration, subdomain brute-forcing, and web scraping.

Simple IOC and YARA scanner. Checks files against known indicators of compromise, suspicious filenames, and YARA rules.