Tools for research

Vulnerability and malware research.

192 tools indexed

garak

—

LLM vulnerability scanner.

ScanFuzzWeb appsSource code

PythonApache-2.0

hacksguard

—

Terminal-based malware triage toolkit written in Rust

AnalyzeScanBinaries

RustMIT

honggfuzz

—

Google's general-purpose fuzzer.

FuzzBinariesSource code

CApache-2.0

house

—

Frida-powered mobile analysis GUI.

AnalyzeInterceptMobile apps

PythonGPL-2.0

hping3

—

TCP/IP packet crafter and analyzer.

ScanInterceptNetworks

CGPL-2.0

malcontent

—

Detect malicious capabilities in code, binaries and containers.

ScanAnalyzeBinariesSource code

GoApache-2.0

memguard-rs

—

Secure in-memory handling of secrets for Rust

HardenSource codeEndpoints

RustMIT

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mitmproxy

—

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks

PythonMIT

mkPIVM

—

Turn x86/x64 shellcode into polymorphic position-independent VMs.

ExploitAutomateBinariesEndpoints

C++MIT

promptfoo

—

Red-team prompts, agents and RAGs.

ScanFuzzWeb appsSource code

TypeScriptMIT

pwndbg

—

GDB plug-in for exploit dev and RE.

AnalyzeExploitBinaries

PythonMIT

pwntools

—

CTF framework for exploit dev.

ExploitAutomateBinaries

PythonMIT

r2frida

—

Radare2 plug-in for Frida.

AnalyzeInterceptMobile appsBinaries

CMIT

radare2

—

Portable reversing framework.

AnalyzeBinaries

CLGPL-3.0

rage

—

Modern file encryption with age.

HardenEndpointsSource code

RustMIT

smali / baksmali

—

Android Dalvik assembler / disassembler.

AnalyzeMobile appsBinaries

JavaBSD-3-Clause

sn0int

—

Semi-automatic OSINT framework.

ReconAutomateWeb appsNetworks

RustGPL-3.0

sshesame

—

Easy SSH honeypot.

MonitorNetworksEndpoints

GoMIT

tcpflow

—

TCP/IP stream demultiplexer.

InterceptAnalyzeNetworks

C++GPL-3.0

unidbg

—

Emulate Android / iOS native libraries.

AnalyzeMobile appsBinaries

JavaApache-2.0

wolfSSL

—

Embedded TLS / DTLS library.

HardenEndpointsSource code

CGPL-2.0

x64dbg

—

Open-source Windows debugger.

AnalyzeBinaries

C++GPL-3.0

ysoserial

—

Java deserialization payload generator.

ExploitWeb appsBinaries

JavaMIT