Tools that analyze

Inspect, disassemble or reverse engineer binaries and traffic.

195 tools indexed

gosec

—

Golang security checker.

ScanAnalyzeSource code

GoApache-2.0

hacksguard

—

Terminal-based malware triage toolkit written in Rust

AnalyzeScanBinaries

RustMIT

house

—

Frida-powered mobile analysis GUI.

AnalyzeInterceptMobile apps

PythonGPL-2.0

jwt_tool

—

Test and exploit JWT vulnerabilities.

ExploitAnalyzeWeb apps

PythonCC-BY-SA-3.0

mac_apt

—

macOS and iOS forensic artifact parser

AnalyzeEndpoints

PythonMIT

malcontent

—

Detect malicious capabilities in code, binaries and containers.

ScanAnalyzeBinariesSource code

GoApache-2.0

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mithril

—

Static security scanner for firmware and IoT images.

ScanAnalyzeBinaries

C++MIT

mitmproxy

—

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks

PythonMIT

moria

—

Firmware and IoT image identification and extraction.

AnalyzeScanBinaries

C++MIT

noxen

—

Frida-based Android intent interception for security research

InterceptAnalyzeMobile apps

PythonGPL-3.0

open·kritt

—

Orchestrate AI agents to find vulnerabilities in code

ScanAnalyzeSource code

JavaScriptAGPL-3.0

osquery

—

SQL-powered endpoint visibility.

MonitorAnalyzeEndpoints

C++Apache-2.0

pwndbg

—

GDB plug-in for exploit dev and RE.

AnalyzeExploitBinaries

PythonMIT

pwntools

—

CTF framework for exploit dev.

ExploitAutomateBinaries

PythonMIT

pypykatz

—

Mimikatz in pure Python.

AnalyzeCrackActive DirectoryEndpoints

PythonMIT

r2frida

—

Radare2 plug-in for Frida.

AnalyzeInterceptMobile appsBinaries

CMIT

radare2

—

Portable reversing framework.

AnalyzeBinaries

CLGPL-3.0

ritridata

—

Read-only MBR/GPT and file-signature inspection toolkit in Rust.

AnalyzeEndpoints

RustAGPL-3.0-only

smali / baksmali

—

Android Dalvik assembler / disassembler.

AnalyzeMobile appsBinaries

JavaBSD-3-Clause

tcpdump

—

Command-line packet capture.

InterceptAnalyzeNetworks

CBSD-3-Clause

tcpflow

—

TCP/IP stream demultiplexer.

InterceptAnalyzeNetworks

C++GPL-3.0

testssl.sh

—

Test TLS/SSL on any port.

ScanAnalyzeWeb appsNetworks

ShellGPL-2.0

unidbg

—

Emulate Android / iOS native libraries.

AnalyzeMobile appsBinaries

JavaApache-2.0