Downloads

Determine file types by signatures. Detect packers, compilers, linkers, and protectors. Essential first step in malware analysis.

Advanced automated malware analysis system. Execute suspicious files in isolated VMs, track API calls, network traffic, and file changes.

Malware configuration and payload extraction. Advanced fork of Cuckoo with YARA integration, behavior analysis, and config extraction.

Detects capabilities in executable files. Identifies what malware can do (e.g., HTTP comms, file encryption) using MITRE ATT&CK mapping.

FireEye Labs Obfuscated String Solver. Automatically extracts obfuscated strings from malware. Goes beyond basic strings extraction.

Free software development toolkit for signal processing. Build software-defined radios and signal processing systems.

Open-source SDR receiver powered by GNU Radio. Supports RTL-SDR, HackRF, Airspy, and other SDR hardware.

Swiss army knife for WiFi, Bluetooth, and network attacks. ARP spoofing, DNS spoofing, proxy, sniffer, and WiFi module.

Internet routing daemon. Supports BGP, OSPF, RIP, Babel protocols. Used by major IXPs and ISPs worldwide. High performance.

VRRP and health-checking for Linux. Provides high-availability via virtual router redundancy. Load balancing with LVS integration.

Cluster engine for high-availability. Group communication, quorum, and cluster membership. Foundation for Pacemaker HA clusters.

Advanced, scalable high-availability cluster resource manager. Manages services, detects failures, and handles automatic recovery.

Sysinternals system monitor. Logs process creation, network connections, file changes, and driver loads. Essential for threat detection.

Physical memory acquisition tool for Windows. Captures RAM for forensic analysis. Kernel driver-based, minimal footprint.

Malware initial assessment tool. Analyzes PE files without executing them. Detects anomalies, imports, resources, and indicators.

Active Directory security assessment tool. Generates risk scores, identifies misconfigurations, and provides remediation guidance.

Sysinternals Active Directory viewer and editor. Browse AD database, take snapshots, compare changes. Essential for AD forensics.

BloodHound data collector for Active Directory. Gathers AD relationships, permissions, and trust info for attack path analysis.

Pure Python SSHv2 protocol library. Provides SSH2 client and server functionality. Foundation for Fabric and many automation tools.

Test SSL/TLS encryption on any server. Checks protocols, ciphers, vulnerabilities (Heartbleed, POODLE, etc.), and certificate details from command line.

Fast and powerful SSL/TLS scanning library and CLI tool. Tests server configuration, certificate info, and known vulnerabilities. Python-based.

Fast SSL/TLS scanner. Tests ciphers, protocols, and vulnerabilities. Shows certificate details, key exchange, and signature algorithms.

EFF's tool for obtaining free SSL/TLS certificates from Let's Encrypt. Automates certificate issuance, renewal, and web server configuration.

X Certificate and Key Management. Create and manage X.509 certificates, CSRs, CRLs, and RSA/EC keys with a graphical interface.