Tools that analyze

Inspect, disassemble or reverse engineer binaries and traffic.

164 tools indexed

gosec

—

Golang security checker.

ScanAnalyzeSource code

GoApache-2.0

hacksguard

—

Terminal-based malware triage toolkit written in Rust

AnalyzeScanBinaries

RustMIT

house

—

Frida-powered mobile analysis GUI.

AnalyzeInterceptMobile apps

PythonGPL-2.0

jwt_tool

—

Test and exploit JWT vulnerabilities.

ExploitAnalyzeWeb apps

PythonCC-BY-SA-3.0

mac_apt

—

macOS and iOS forensic artifact parser

AnalyzeEndpoints

PythonMIT

malcontent

—

Detect malicious capabilities in code, binaries and containers.

ScanAnalyzeBinariesSource code

GoApache-2.0

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mitmproxy

—

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks

PythonMIT

osquery

—

SQL-powered endpoint visibility.

MonitorAnalyzeEndpoints

C++Apache-2.0

pwndbg

—

GDB plug-in for exploit dev and RE.

AnalyzeExploitBinaries

PythonMIT

pwntools

—

CTF framework for exploit dev.

ExploitAutomateBinaries

PythonMIT

pypykatz

—

Mimikatz in pure Python.

AnalyzeCrackActive DirectoryEndpoints

PythonMIT

r2frida

—

Radare2 plug-in for Frida.

AnalyzeInterceptMobile appsBinaries

CMIT

radare2

—

Portable reversing framework.

AnalyzeBinaries

CLGPL-3.0

smali / baksmali

—

Android Dalvik assembler / disassembler.

AnalyzeMobile appsBinaries

JavaBSD-3-Clause

tcpdump

—

Command-line packet capture.

InterceptAnalyzeNetworks

CBSD-3-Clause

tcpflow

—

TCP/IP stream demultiplexer.

InterceptAnalyzeNetworks

C++GPL-3.0

testssl.sh

—

Test TLS/SSL on any port.

ScanAnalyzeWeb appsNetworks

ShellGPL-2.0

unidbg

—

Emulate Android / iOS native libraries.

AnalyzeMobile appsBinaries

JavaApache-2.0

x64dbg

—

Open-source Windows debugger.

AnalyzeBinaries

C++GPL-3.0