Outils pour research

Vulnerability and malware research.

205 tools indexed

angr

—

Binary analysis with symbolic execution.

AnalyzeBinaries

PythonBSD-2-Clause

apk-mitm

—

Auto-prepare APKs for HTTPS inspection.

AnalyzeInterceptMobile apps

TypeScriptMIT

bettercap

—

Swiss army knife for network attacks.

InterceptScanNetworksWireless

GoGPL-3.0

capa

—

Identify executable capabilities.

AnalyzeBinaries

PythonApache-2.0

dex2jar

—

DEX ↔ JAR conversion toolkit.

AnalyzeMobile appsBinaries

JavaApache-2.0

dnSpy

—

.NET assembly debugger and editor.

AnalyzeBinaries

C#GPL-3.0

dnscat2

—

Encrypted C2 over DNS.

ExploitAutomateNetworksEndpoints

CMIT

dnstwist

—

Detect typosquats and phishing domains.

ScanReconWeb apps

PythonApache-2.0

eCapture

—

Capture SSL/TLS plaintext with eBPF.

InterceptAnalyzeNetworksEndpoints

CApache-2.0

flare-emu

—

IDA Pro emulation scripting framework.

AnalyzeBinaries

PythonApache-2.0

fq

—

jq for binary formats.

AnalyzeBinariesNetworks

GoMIT

garak

—

LLM vulnerability scanner.

ScanFuzzWeb appsSource code

PythonApache-2.0

hacksguard

—

Terminal-based malware triage toolkit written in Rust

AnalyzeScanBinaries

RustMIT

honggfuzz

—

Google's general-purpose fuzzer.

FuzzBinariesSource code

CApache-2.0

house

—

Frida-powered mobile analysis GUI.

AnalyzeInterceptMobile apps

PythonGPL-2.0

hping3

—

TCP/IP packet crafter and analyzer.

ScanInterceptNetworks

CGPL-2.0

malcontent

—

Detect malicious capabilities in code, binaries and containers.

ScanAnalyzeBinariesSource code

GoApache-2.0

memguard-rs

—

Secure in-memory handling of secrets for Rust

HardenSource codeEndpoints

RustMIT

mimikatz

—

Windows credential extraction.

ExploitAnalyzeEndpointsActive Directory

CCC-BY-4.0

mitmproxy

—

Interactive HTTPS proxy.

InterceptAnalyzeWeb appsNetworks

PythonMIT

mkPIVM

—

Turn x86/x64 shellcode into polymorphic position-independent VMs.

ExploitAutomateBinariesEndpoints

C++MIT

noxen

—

Frida-based Android intent interception for security research

InterceptAnalyzeMobile apps

PythonGPL-3.0

open·kritt

—

Orchestrate AI agents to find vulnerabilities in code

ScanAnalyzeSource code

JavaScriptAGPL-3.0

promptfoo

—

Red-team prompts, agents and RAGs.

ScanFuzzWeb appsSource code

TypeScriptMIT