cyber-security-tools-for-visually-impaired

KO | EN

gitlite — search

#javascript #python #react #llm #android #machine-learning #rust #deep-learning #macos #java #awesome #cli #awesome-list #mcp

cyber-security-tools-for-visually-impaired

(★ 18)

accessible cyber security tools for the visually impaired

cyber-security-tools-for-visually-impaired 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Cyber Security Tools For Visually Impaired

accessible cyber security tools for the visually impaired

## Introduction

I felt the lack of accessible tools for the visually impaired/blind in the area of cyber security.

So, I created this repository to help others who are starting out in the field or are going to college or starting out on their own.

I leave below several tools for different purposes in the area of cyber security! Hope you like it!

---

## 📑 Table of Contents

- [Threat Intelligence Platforms](#threat-intelligence-platforms)
- [SIEM Platforms](#siem-platforms)
- [OSINT - Open Source Intelligence](#osint---open-source-intelligence)
- [Search Engines](#search-engines)
- [Data Breach & Leak Search](#data-breach--leak-search)
- [Domain & IP Research](#domain--ip-research)
- [Social Media OSINT](#social-media-osint)
- [People Investigation](#people-investigation)
- [Email & Phone Research](#email--phone-research)
- [Username Check](#username-check)
- [Image & Video Analysis](#image--video-analysis)
- [Geospatial & Mapping Tools](#geospatial--mapping-tools)
- [Dark Web & Pastebin Monitoring](#dark-web--pastebin-monitoring)
- [Network Tools](#network-tools)
- [Penetration Testing Frameworks](#penetration-testing-frameworks)
- [Vulnerability Scanners](#vulnerability-scanners)
- [Web Application Security](#web-application-security)
- [Wireless & Bluetooth Tools](#wireless--bluetooth-tools)
- [Password Cracking & Recovery](#password-cracking--recovery)
- [Malware Analysis & Reverse Engineering](#malware-analysis--reverse-engineering)
- [Digital Forensics](#digital-forensics)
- [Memory Forensics](#memory-forensics)
- [Incident Response](#incident-response)
- [Red Team Tools](#red-team-tools)
- [Blue Team / Defense Tools](#blue-team--defense-tools)
- [Cryptography & Encryption](#cryptography--encryption)
- [Phishing Analysis & Scam Detection](#phishing-analysis--scam-detection)
- [CTF Platforms & Labs](#ctf-platforms--labs)
- [Operating Systems for Cyber Security](#operating-systems-for-cyber-security)
- [Kali Linux - Complete Tool Index](#kali-linux---complete-tool-index-kali-linux-everything-metapackage)
- [Mobile Security](#mobile-security)
- [Cloud Security](#cloud-security)
- [Container & Kubernetes Security](#container--kubernetes-security)
- [IoT & Firmware Security](#iot--firmware-security)
- [AI / ML Security](#ai--ml-security)
- [Blockchain & Cryptocurrency Investigation](#blockchain--cryptocurrency-investigation)
- [Threat Hunting](#threat-hunting)
- [Sandboxes & Online Scanners](#sandboxes--online-scanners)
- [Security News & Feeds](#security-news--feeds)
- [Productivity Tools](#productivity-tools)

---
## Threat Intelligence Platforms

* [AlienVault OTX](https://otx.alienvault.com/) - Open Threat Exchange platform for community-driven threat intelligence
* [OpenCTI](https://github.com/OpenCTI-Platform/opencti) - Open source threat intelligence platform
* [Pulsedive](https://pulsedive.com/) - Free threat intelligence platform
* [ZeroFox](https://www.zerofox.com/daily-intelligence-brief/) - Daily threat intelligence briefs
* [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/) - Cloud-based threat intelligence platform
* [MISP](https://www.misp-project.org/) - Malware Information Sharing Platform
* [ThreatConnect](https://threatconnect.com/) - Threat intelligence platform
* [Recorded Future](https://www.recordedfuture.com/) - Real-time threat intelligence
* [Anomali ThreatStream](https://www.anomali.com/products/threatstream) - Threat intelligence platform
* [EclecticIQ Platform](https://www.eclecticiq.com/platform) - Threat intelligence platform
* [ThreatMiner](https://www.threatminer.org/) - Threat intelligence portal
* [ThreatCrowd](https://www.threatcrowd.org/) - Threat search engine
* [Maltiverse](https://www.maltiverse.com/) - IoC database and analysis
* [OTX AlienVault](https://otx.alienvault.com/) - Open threat exchange
* [CIRCL MISP Feeds](https://www.circl.lu/services/misp-feeds/) - Trusted threat intelligence feeds
* [CrowdSec Console](https://app.crowdsec.net/) - Crowd-sourced CTI
* [GreyNoise](https://www.greynoise.io/) - Internet noise analysis
* [Cisco Talos Intelligence](https://talosintelligence.com/) - Threat intelligence from Cisco
* [VirusTotal](https://www.virustotal.com/) - File and URL scanning
* [Abuse.ch](https://abuse.ch/) - Malware and botnet tracking
* [ThreatFox](https://threatfox.abuse.ch/) - IOC sharing platform
* [URLhaus](https://urlhaus.abuse.ch/) - Malicious URL tracker
* [Feodo Tracker](https://feodotracker.abuse.ch/) - Botnet C&C tracker
* [SSL Blacklist](https://sslbl.abuse.ch/) - Malicious SSL certificates
* [YARAify](https://yaraify.abuse.ch/) - Collaborative YARA engine
* [MalwareBazaar](https://bazaar.abuse.ch/) - Malware sample sharing
* [IntelOwl](https://github.com/intelowlproject/IntelOwl) - OSINT threat intelligence
* [Cortex](https://github.com/TheHive-Project/Cortex) - Observable analysis engine
* [IntelMQ](https://github.com/certtools/intelmq) - Incident handling automation
* [CRITS](https://crits.github.io/) - Collaborative threat research
* [Yeti](https://github.com/yeti-platform/yeti) - Threat intelligence platform
* [Bearded Avenger](https://github.com/csirtgadgets/bearded-avenger) - CIF v3 threat intelligence
* [AbuseHelper](https://github.com/abusesa/abusehelper) - Abuse feed framework
* [DigitalSide Threat-Intel](https://osint.digitalside.it/) - OSINT threat intelligence
* [RST Cloud](https://rstcloud.net/) - Threat intelligence feed
* [Q-Feeds](https://qfeeds.com/) - Threat intelligence feeds
* [REScure](https://rescure.fruxlabs.com/) - Threat intel feed
* [Threat Jammer](https://threatjammer.com/) - Threat intelligence API
* [ThreatRecon](https://threatrecon.co/) - IOC search
* [OpenPhish](https://openphish.com/) - Phishing intelligence
* [PhishTank](https://phishtank.com/) - Phishing URL database
* [APTI Groups and Operations](https://docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml) - APT group tracking
* [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/) - Malware family encyclopedia
* [VulDB](https://vuldb.com/) - Vulnerability database with CTI
* [HoneyDB](https://honeydb.io/) - Honeypot threat intelligence
* [CrowdStrike Falcon Intel](https://www.crowdstrike.com/products/threat-intelligence/) - Commercial threat intel
* [MISP Galaxy](https://www.misp-galaxy.org/) - Threat actor galaxy
* [SOCRadar Labs](https://socradar.io/labs/) - Threat actor analysis
* [Dark Web Informer](https://darkwebinformer.com/) - Threat actor database
* [BreachHQ](https://breach-hq.com/) - Threat actor intelligence
* [FortiGuard Threat Actor Encyclopedia](https://www.fortiguard.com/threat-actor) - Threat actor encyclopedia
* [OPENHUNTING.IO](https://openhunting.io/threat-library) - Threat library
* [ETDA APT Groups](https://apt.etda.or.th/cgi-bin/listgroups.cgi) - APT group search
* [Threat Actor Usernames Scrape](https://github.com/spmedia/Threat-Actor-Usernames-Scrape) - 900k+ threat actor usernames
* [lazarusholic](https://lazarus.day/actors/) - 203 threat actors
* [BI.ZONE GTI](https://gti.bi.zone/) - 148 threat groups with TTPs
* [Thales CTI](https://cds.thalesgroup.com/en/cyberthreat/attacks-page) - Threat actor attack explorer
* [Validin DNS Database](https://app.validin.com/) - Historical DNS intelligence
* [CIRCL](https://www.circl.lu/services) - Threat intelligence and malware analysis
* [Hybrid Analysis](https://www.hybrid-analysis.com/) - Malware analysis with threat intel
* [Autoshun](https://www.autoshun.org/) - Snort plugin and blocklist
* [Bambenek Consulting Feeds](http://osint.bambenekconsulting.com/feeds/) - OSINT DGA feeds
* [Spamhaus](https://www.spamhaus.org/) - Spam and threat blocklists
* [Emerging Threats](http://rules.emergingthreats.net/) - IDS/IPS rulesets
* [FireHOL IP Lists](https://iplists.firehol.org/) - 400+ IP threat feeds
* [IPsum](https://github.com/stamparm/ipsum) - Aggregated IP threat feed
* [CISA AIS](https://www.cisa.gov/ais) - Free automated indicator sharing
* [SANS ISC Suspicious Domains](https://isc.sans.edu/suspicious_domains.html) - Suspicious domain lists
* [DShield](https://dshield.org/) - Distributed intrusion detection
* [Blocklist.de](https://www.blocklist.de/) - Failed login attempts feed
* [Binary Defense IP Banlist](https://www.binarydefense.com/banlist.txt) - IP ban list feed
* [BGP Ranking](https://www.circl.lu/projects/bgpranking/) - ASN malicious ranking
* [Botnet Tracker](https://intel.malwaretech.com/) - Active botnet tracking
* [BotVrij](http://www.botvrij.eu/) - Open source IOCs
* [DataPlane.org](https://dataplane.org/) - Community-powered data feeds
* [ELLIO IP Feed](https://feed.ellio.tech) - Malicious IP feed
* [FastIntercept](https://intercept.sh/threatlists/) - Free IP reputation lists
* [FraudGuard](https://fraudguard.io/) - IP fraud validation
* [GriffinGuard](http://griffinguard.io/) - Real-time threat intelligence
* [Icewater YARA Rules](https://github.com/SupportIntelligence/Icewater) - 12,805 free YARA rules
* [InQuest Labs](https://labs.inquest.net) - Open data portal
* [James Brine Threat Feeds](https://jamesbrine.com.au) - Daily threat intel feeds
* [Maldatabase](https://maldatabase.com/) - Malware intel database
* [Malware Patrol](https://www.malwarepatrol.net/) - Block lists and feeds
* [MetaDefender Cloud](https://www.opswat.com/developers/threat-intelligence-feed) - Hash signatures feed
* [NormShield](https://services.normshield.com) - Phishing and breach monitoring
* [Obstracts](https://www.obstracts.com/) - RSS reader for CTI teams
* [PickupSTIX](https://www.celerium.com/pickupstix) - Free STIX feeds
* [SIEM Rules](https://www.siemrules.com) - SIEM rule database
* [SophosLabs Intelix](https://www.sophos.com/intelix) - Threat intelligence API
* [Stixify](https://www.stixify.com/) - Automated threat intelligence analyst
* [UnderAttack.today](https://portal.underattack.today/) - Free attack intelligence
* [YARA Rules](https://github.com/Yara-Rules/rules) - Community YARA rules
* [Arctic Shift](https://github.com/ArthurHeitmann/arctic_shift) - Reddit data analysis
* [CVE PoC Search](https://labs.jamessawyer.co.uk/cves/) - 30,000+ CVEs with PoCs
* [AdversaryGraph](https://github.com/anpa1200/adversarygraph) - CTI-to-detection platform
* [Infosec CERT-PA](https://infosec.cert-pa.it) - Malware collection and analysis
* [NovaSense Threats](https://novasense-threats.com) - Pre-emptive threat protection
* [Q-Feeds TIP](https://qfeeds.com) - Threat intelligence portal
* [SIEM Rules Database](https://www.siemrules.com) - Detection engineering database
* [The DFIR Report](https://thedfirreport.com/) - Real-world intrusion analysis

---
## SIEM Platforms

* [Wazuh](https://documentation.wazuh.com/current/quickstart.html) - Open source SIEM platform
* [OSSEC](https://www.ossec.net/) - Open source HIDS/SIEM
* [Splunk Free](https://www.splunk.com/) - SIEM and log analysis
* [ELK Stack](https://www.elastic.co/elastic-stack/) - Log analysis platform
* [Security Onion](https://securityonion.net/) - Free SIEM platform
* [Prelude SIEM](https://www.prelude-siem.org/) - Open source SIEM
* [OSSIM](https://cybersecurity.att.com/products/ossim) - Open source SIEM
* [Snort](https://www.snort.org/) - Network IDS/IPS
* [Suricata](https://suricata.io/) - High-performance IDS/IPS
* [Zeek](https://zeek.org/) - Network analysis framework
* [Kibana](https://www.elastic.co/kibana/) - Data visualization
* [Grafana](https://grafana.com/) - Monitoring dashboards
* [Prometheus](https://prometheus.io/) - Monitoring and alerting
* [Loki](https://grafana.com/oss/loki/) - Log aggregation
* [Sysmon](https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon) - System monitor
* [HELK](https://github.com/Cyb3rWard0g/HELK) - Hunting ELK
* [TheHive](https://thehive-project.org/) - Incident response platform
* [pfSense](https://www.pfsense.org/) - Firewall and IDS/IPS
* [Sagan](https://quadrantsec.com/sagan_log_analysis_engine/) - Log analysis engine

---

## OSINT - Open Source Intelligence

### General OSINT Tools

* [OSINT Framework](https://osintframework.com/) - Collection of OSINT tools and techniques
* [Spiderfoot](https://github.com/smicallef/spiderfoot) - OSINT automation with 200+ modules
* [Recon-ng](https://github.com/lanmaster53/recon-ng) - Web reconnaissance framework
* [theHarvester](https://github.com/laramies/theHarvester) - Email, subdomain, and name gathering
* [Shodan](https://www.shodan.io/) - Internet-connected devices search engine
* [Censys](https://search.censys.io/) - Internet asset search
* [ZoomEye](https://www.zoomeye.ai/) - Cyberspace search engine
* [FOFA](https://en.fofa.info/) - Asset search and analysis
* [FullHunt](https://fullhunt.io/) - Attack surface discovery
* [ONYPHE](https://search.onyphe.io/) - Cyber defense search engine
* [Netlas](https://app.netlas.io/) - Internet search engine
* [ODIN](https://search.odin.io/) - Host, CVE, and cloud bucket search
* [BinaryEdge](https://www.binaryedge.io/) - Internet scanning and threat intelligence
* [Amass](https://github.com/owasp-amass/amass) - Attack surface mapping
* [Subfinder](https://github.com/projectdiscovery/subfinder) - Passive subdomain enumeration
* [httpx](https://github.com/projectdiscovery/httpx) - HTTP toolkit
* [Nuclei](https://github.com/projectdiscovery/nuclei) - Template-based vulnerability scanner
* [Katana](https://github.com/projectdiscovery/katana) - Web crawling framework
* [ReconFTW](https://github.com/six2dez/reconftw) - Automated recon tool
* [Photon](https://github.com/s0md3v/Photon) - OSINT crawler
* [Osmedeus](https://github.com/j3ssie/osmedeus) - Workflow engine for offensive security
* [Web-Check](https://github.com/Lissy93/web-check) - All-in-one website OSINT
* [Intelligence X](https://intelx.io/) - Search engine and data archive
* [Seekr](https://github.com/seekr-osint/seekr) - All-In-One OSINT tool
* [Tookie-OSINT](https://github.com/alfredredbird/tookie-osint) - Social media OSINT
* [Lampyre](https://lampyre.io/) - OSINT data analysis
* [BOSINT](https://app.bosint.gg/) - Investigation platform
* [DeadDrop](https://deaddrop.theosintconsultants.com/) - OSINT dashboard
* [OSINTNova](https://app.osintnova.com/) - AI-powered OSINT platform
* [Argos OSINT](https://argos-osint.com) - Free OSINT platform (Spanish)
* [Maigret](https://github.com/soxoj/maigret) - Username search across 2500+ sites
* [WhatsMyName](https://whatsmyname.app/) - Username enumeration
* [Blackbird](https://github.com/p1ngul1n0/blackbird) - Username search
* [Alias](https://github.com/sevakt/alias) - Username search
* [Holehe](https://github.com/megadose/holehe) - Email to registered sites
* [SocialScan](https://github.com/iojw/socialscan) - Email and username checker
* [Sherlock](https://github.com/sherlock-project/sherlock) - Username search across social networks
* [Chiasmodon](https://github.com/chiasmod0n/chiasmodon) - Domain OSINT tool
* [Dangerzone](https://github.com/freedomofpress/dangerzone) - Safe document conversion
* [WorldWide OSINT Map](http://cybdetective.com/osintmap/) - Global OSINT resources
* [OSINT.juanmathewsrebellosantos.com](https://osint.juanmathewsrebellosantos.com) - OSINT platform with 2,000+ tools in 30 languages
### Search Engines

* [Google Search](https://www.google.com) - Most popular search engine
* [Bing](https://www.bing.com) - Microsoft's search engine
* [DuckDuckGo](https://duckduckgo.com) - Privacy-focused search
* [Yandex](https://www.yandex.com) - Russian search engine
* [Baidu](https://www.baidu.com) - Chinese search engine
* [Startpage](https://www.startpage.com) - World's most private search engine
* [SearXNG](https://searxng.org/) - Privacy-respecting metasearch engine
* [Qwant](https://www.qwant.com) - French privacy search engine
* [Brave Search](https://search.brave.com) - Private independent search
* [Mojeek](https://www.mojeek.com) - Independent search engine
* [Swisscows](https://swisscows.com) - Family-friendly search
* [Wolfram Alpha](https://www.wolframalpha.com) - Computational knowledge engine
* [Perplexity AI](https://www.perplexity.ai) - AI-powered answer engine
* [You.com](https://you.com) - AI search engine
* [Kagi Search](https://kagi.com) - Premium ad-free search
* [Naver](https://www.naver.com) - Korean search engine
* [Sogou](https://www.sogou.com) - Chinese search engine
* [Seznam](https://seznam.cz) - Czech search engine
* [Yahoo Search](https://search.yahoo.com) - Yahoo search
* [Lycos](https://www.lycos.com) - Classic search engine
* [Aol](https://search.aol.com) - AOL search

### Google Dorking Tools

* [Google Hacking Database](https://www.exploit-db.com/google-hacking-database) - Google dork queries
* [DorkGPT](https://www.dorkgpt.com/) - AI-powered dork generation
* [DorkGenius](https://dorkgenius.com/) - Custom search query generator
* [SearchDorks](https://kriztalz.sh/search-dorks/) - AI dork generator
* [AtDork](https://github.com/amnottdevv/atdork) - OSINT dorking tool
* [Pagodo](https://github.com/opsdisk/pagodo) - Automated Google dorking
* [GooDork](https://github.com/k3170makan/GooDork) - Google dork automation

### Specialty Search Engines

* [Hunter](https://hunter.how) - Exposed assets search
* [Criminal IP](https://www.criminalip.io) - Cyber threat search
* [BeVigil](https://bevigil.com/search) - Mobile app asset search
* [AbuseIPDB](https://www.abuseipdb.com) - IP reputation database
* [Cloudflare Radar](https://radar.cloudflare.com) - Internet traffic insights
* [BGP.tools](https://bgp.tools) - BGP toolkit
* [BGP.he.net](https://bgp.he.net) - BGP intelligence
* [CRT.sh](https://crt.sh) - Certificate transparency search
* [GrayhatWarfare](https://grayhatwarfare.com) - Open S3 bucket search
* [WPScan](https://wpscan.com) - WordPress vulnerability scanner
* [BuiltWith](https://builtwith.com) - Technology profiler
* [Wappalyzer](https://www.wappalyzer.com) - Technology detector
* [WhatWeb](https://github.com/urbanadventurer/WhatWeb) - Website fingerprinting
* [Netcraft](https://sitereport.netcraft.com) - Site reporting
* [URLScan.io](https://urlscan.io) - URL and website scanner
* [SecLists](https://github.com/danielmiessler/SecLists) - Security wordlists
* [Packet.guru](https://packet.guru/) - Browser fingerprint audit
* [SikkerAPI](https://www.sikkerapi.com/) - Free IP and threat intelligence
* [CertKit Certificate Search](https://www.certkit.io/tools/ct-logs/) - SSL cert search
---

## Data Breach & Leak Search

* [Have I Been Pwned](https://haveibeenpwned.com/) - Email breach checker
* [Dehashed](https://www.dehashed.com/) - Breached database search
* [LeakCheck](https://leakcheck.io/) - Credential leak search
* [BreachDirectory](https://breachdirectory.org/) - Breach search
* [Leak-Lookup](https://leak-lookup.com/) - Data breach search engine
* [IntelX](https://intelx.io/) - Darknet and data leak search
* [PSBDMP](https://psbdmp.ws/) - Pastebin dump search
* [Leaked.domains](https://leaked.domains/) - Domain leak search
* [SpyCloud](https://portal.spycloud.com/) - Breach monitoring
* [WeLeakInfo](https://weleakinfo.io/) - Leak search
* [WhiteIntel](https://whiteintel.io/) - Dark web leak search
* [OsintCat](https://www.osintcat.net/) - Email breach check
* [CheckLeaked](https://checkleaked.cc/) - Email/username/phone breach check
* [Leaker](https://github.com/vflame6/leaker) - Multi-breach enumeration CLI
* [LeakRadar](https://leakradar.io/) - Info-stealer credentials search
* [InfoStealers](https://infostealers.info/) - Info-stealer log search
* [LibraryOfLeaks](https://search.libraryofleaks.org) - Leak document search
* [SnusBase](https://snusbase.com/) - Data breach search engine
* [ScamSearch](https://scamsearch.io/) - Scammer phone/email search
* [Firefox Monitor](https://monitor.firefox.com/) - Mozilla breach monitoring
* [HIBP Ransomed](https://haveibeenransom.com/) - Ransomware data leak check
* [HEROIC.NOW](https://heroic.com/) - Dark web identity scan
* [CredenShow](https://credenshow.com/) - Compromised credentials search
* [StealSeek](https://stealseek.io/) - Data breach search engine
* [Venacus](https://venacus.com/) - Data breach monitoring
* [COMB](https://www.proxynova.com/tools/comb/) - Largest credential dataset
* [LeakedSource](https://leakedsource.ru/) - Leaked credentials database
* [vazamentos.bnvd.org](https://vazamentos.bnvd.org) - Dark web leak catalog and credential breach platform

---

## Domain & IP Research

* [Whois (DomainTools)](https://whois.domaintools.com/) - Domain ownership lookup
* [IANA Whois](https://www.iana.org/whois) - Official whois service
* [SecurityTrails](https://securitytrails.com/) - DNS and domain intelligence
* [DNSDumpster](https://dnsdumpster.com/) - DNS recon and research
* [MXToolbox](https://mxtoolbox.com/) - DNS and email tools
* [Robtex](https://www.robtex.com/) - DNS lookup and research
* [ViewDNS](https://viewdns.info/) - DNS tools and information
* [YouGetSignal](https://www.yougetsignal.com/) - Reverse IP and domain tools
* [DNSTwister](https://dnstwister.report/) - Domain phishing analysis
* [DNSlytics](https://dnslytics.com/) - Domain investigation
* [IPinfo](https://ipinfo.io/) - IP address data and insights
* [IP2Location](https://www.ip2location.com/) - IP geolocation
* [IPQS](https://www.ipqualityscore.com/) - IP reputation and fraud detection
* [WhatIsMyIP](https://whatismyipaddress.com/) - IP address lookup
* [IPVoid](https://www.ipvoid.com/) - IP address tools
* [DomainTools](https://www.domaintools.com/) - Domain research platform
* [WhoisXML API](https://www.whoisxmlapi.com/) - Whois and DNS data
* [Talos Reputation Center](https://talosintelligence.com/reputation_center) - IP/domain reputation
* [Sucuri SiteCheck](https://sitecheck.sucuri.net/) - Website malware scanner
* [CertKit](https://www.certkit.io/tools/ct-logs/) - SSL cert search
* [RIPE DB](https://www.ripe.net/) - RIPE database
* [ARIN Whois](https://whois.arin.net/) - ARIN whois
* [APNIC Whois](https://wq.apnic.net/) - APNIC whois
* [LACNIC Whois](https://whois.lacnic.net/) - LACNIC whois
* [AfriNIC Whois](https://whois.afrinic.net/) - AfriNIC whois
* [FindSubdomains](https://findsubdomains.com/) - Subdomain enumeration
* [Rapid7 FDNS](https://opendata.rapid7.com/) - Forward DNS dataset
* [Project Sonar](https://sonar.labs.rapid7.com/) - DNS and SSL data
* [dnstwist](https://github.com/elceef/dnstwist) - Domain typo squatting
* [DnsRecon](https://github.com/darkoperator/dnsrecon) - DNS enumeration
* [DnsEnum](https://github.com/fwaeytens/dnsenum) - DNS enumeration
* [MassDNS](https://github.com/blechschmidt/massdns) - High-performance DNS
* [Sublist3r](https://github.com/aboul3la/Sublist3r) - Subdomain enumeration
* [Findomain](https://github.com/Findomain/Findomain) - Subdomain monitoring
---

## Social Media OSINT

### Twitter / X

* [Twitter Advanced Search](https://twitter.com/search-advanced) - Advanced Twitter search
* [Nitter](https://nitter.net) - Privacy-friendly Twitter frontend
* [ExportData](https://www.exportdata.io/) - Twitter data export
* [Foller.me](https://foller.me) - Twitter profile analysis
* [SocialBearing](https://socialbearing.com/) - Twitter analytics
* [TweetBeaver](https://tweetbeaver.com/) - Twitter intelligence
* [Trends24](https://trends24.in) - Twitter trending topics
* [TweetMap](https://mapd.csail.mit.edu/tweetmap) - Geotagged tweets map
* [OneMillionTweetMap](https://onemilliontweetmap.com) - Tweet visualization
* [Twitonomy](https://www.twitonomy.com/) - Twitter analytics
* [Sleeping Time](http://sleepingtime.org/) - Twitter user sleep patterns
* [Tinfoleak](https://tinfoleak.com/) - Twitter metadata analysis
* [Botometer](https://botometer.osome.iu.edu/) - Twitter bot detection
* [Xquik](https://xquik.com) - Real-time X data platform
* [RiteTag](https://ritetag.com) - Twitter hashtag analytics
* [TweetDeck](https://tweetdeck.twitter.com) - Twitter power user tool
* [MyTweetAlerts](https://www.mytweetalerts.com/) - Custom Twitter alerts

### Facebook

* [Facebook Search](https://search.fb.com/) - Facebook search
* [Lookup-ID](https://lookup-id.com) - Facebook ID lookup
* [Have I Been Zuckered](https://haveibeenzuckered.com/) - Facebook breach check
* [Fanpage Karma](https://www.fanpagekarma.com) - Facebook page analytics
* [SearchIsBack](https://searchisback.com) - Facebook graph search
* [Wolfram Alpha Facebook Report](https://www.wolframalpha.com/input/?i=facebook+report) - Facebook profile report

### Instagram

* [Osintgram](https://github.com/Datalux/Osintgram) - Instagram OSINT
* [Instaloader](https://instaloader.github.io/) - Instagram downloader
* [Insto](https://github.com/subzeroid/insto) - Interactive OSINT CLI for Instagram
* [Dumpor](https://dumpor.com) - Instagram story viewer
* [ImgInn](https://imginn.com) - Instagram viewer
* [Iconosquare](https://iconosquare.com) - Instagram analytics
* [Toutatis](https://github.com/megadose/toutatis) - Instagram information extractor

### Reddit

* [RedditMetis](https://redditmetis.com/) - Reddit user analysis
* [Reddit User Analyser](https://atomiks.github.io/reddit-user-analyser/) - User statistics
* [Reddit Comment Search](https://redditcommentsearch.com/) - Comment search
* [Pushshift API](https://pushshift.io/) - Reddit data API
* [Reddit Archive](https://www.redditarchive.com) - Historical archives
* [Unddit](https://undddit.com/) - Deleted Reddit comments
* [Reveddit](https://reveddit.com/) - Reveal removed content
* [Subreddits](https://subreddits.org) - Discover new subreddits

### LinkedIn

* [LinkedInDumper](https://github.com/l4rm4nd/LinkedInDumper) - LinkedIn employee scraper
* [the-endorser](https://github.com/eth0izzle/the-endorser) - LinkedIn endorsement analysis
* [CrossLinked](https://github.com/m8sec/CrossLinked) - LinkedIn employee enumeration

### Telegram

* [Telegago](https://cse.google.com/cse?cx=006368593537057042503:efxu7xprihg) - Telegram channel search
* [TgramSearch](https://tgramsearch.com/) - Telegram channel search
* [TGStat](https://tgstat.com) - Telegram analytics
* [Teleteg](https://teleteg.com) - Telegram search engine
* [Telepathy](https://github.com/proseltd/Telepathy-Community) - Telegram chat archiver
* [Telerecon](https://github.com/sockysec/Telerecon) - Telegram reconnaissance
* [TeleTracker](https://github.com/tsale/TeleTracker) - Telegram channel investigation
* [Telegram Nearby Map](https://github.com/tejado/telegram-nearby-map) - Geoposition mapping
* [CCTV](https://github.com/IvanGlinkin/CCTV) - Telegram location tracking
* [TOsint](https://github.com/drego85/tosint) - Telegram OSINT tool
* [GroupDa](https://groupda.com/telegram/group/search) - Telegram group search
* [tg.world](https://tg.world/) - Global Telegram search
* [TeleSearch](https://telesearch.me/) - Telegram search
* [Telegram Finder](https://www.telegram-finder.io/) - Find Telegram users

### Other Social Media

* [TikTokStalker](https://tiktok.einzzcookie.org) - TikTok information lookup
* [DiscordLookup](https://discordlookup.com/) - Discord user lookup
* [SnapMap](https://map.snapchat.com) - Snapchat location map
* [2Chat WhatsApp Checker](https://2chat.co/tools/whatsapp-checker) - WhatsApp number check
* [WhatsApp CheckLeaked](https://whatsapp.checkleaked.cc/) - WhatsApp profile check
* [Groupio](https://en.groupio.app/) - WhatsApp group search
* [Pingroupie](https://pingroupie.com) - Pinterest analytics
* [Steam OSINT](https://osint-steam.vercel.app/en) - Steam profile information
* [VK.watch](https://vk.watch/) - VKontakte OSINT
* [VK5](https://vk5.city4me.com) - VKontakte tools
---

## People Investigation

* [Spokeo](https://www.spokeo.com/) - People search engine
* [Pipl](https://pipl.com/) - Person search engine
* [Whitepages](https://www.whitepages.com/) - People and business search
* [BeenVerified](https://www.beenverified.com/) - Background checks
* [TruthFinder](https://www.truthfinder.com/) - People search
* [Intelius](https://www.intelius.com/) - People search
* [PeekYou](https://peekyou.com/) - People search
* [ZabaSearch](https://www.zabasearch.com/) - Free people search
* [FamilyTreeNow](https://www.familytreenow.com/) - Genealogy search
* [411.com](https://www.411.com/) - People finder
* [ThatsThem](https://thatsthem.com/) - People search
* [Radaris](https://radaris.com/) - People search
* [Yasni](https://www.yasni.com/) - International people search
* [WebMii](https://webmii.com/) - People search
* [IDCrawl](https://www.idcrawl.com/) - Name search across social networks
* [Epieos](https://epieos.com) - Email and phone to social accounts
* [Castrick Clues](https://castrickclues.com) - Social accounts by email/username/phone
* [Predicta Search](https://predictasearch.com) - Social accounts by email/phone
* [Reverse Contact](https://www.reversecontact.com/) - Email to company data
* [Prospeo](https://prospeo.io/) - Email lookup and verification
* [FindEmail.io](https://findemail.io/) - Email finder
* [Skopenow](https://www.skopenow.com/) - Social media investigation
* [Social-Former](https://social-former.com/) - Social media search
* [Cubib](https://cubib.com/) - People search
* [InstantPeopleCheck](https://www.instantpeoplecheck.com/) - People background check
* [USSearch](https://www.ussearch.com/) - People search
* [SearchPeopleFREE](https://www.searchpeoplefree.com/) - People search engine
---

## Email & Phone Research

* [Hunter.io](https://hunter.io/) - Email finder and verifier
* [Phonebook.cz](https://phonebook.cz/) - Email and phone lookup
* [EmailHippo](https://tools.emailhippo.com/) - Email verification
* [NeverBounce](https://neverbounce.com/) - Email verification
* [ZeroBounce](https://www.zerobounce.net/) - Email validation
* [Debounce](https://debounce.io/) - Email verification API
* [MailTester](https://www.mail-tester.com/) - Email spam score
* [Temp-Mail](https://temp-mail.org/) - Disposable email
* [10 Minute Mail](https://10minutemail.com) - Temporary email
* [Guerrilla Mail](https://www.guerrillamail.com/) - Disposable email
* [SimpleLogin](https://simplelogin.io/) - Email aliasing
* [AnonAddy](https://anonaddy.com/) - Anonymous email forwarding
* [Firefox Relay](https://relay.firefox.com/) - Email masking
* [MailDrop](https://maildrop.cc/) - Disposable email
* [MailCheck.ai](https://www.mailcheck.ai/) - Email verification
* [BriteVerify](https://www.briteverify.com/) - Email verification
* [PhoneInfoga](https://github.com/sundowndev/phoneinfoga) - Phone number OSINT
* [Numverify](https://numverify.com/) - Phone number validation
* [FreeCarrierLookup](https://freecarrierlookup.com/) - Phone carrier lookup
* [Twilio Lookup](https://www.twilio.com/lookup) - Phone number intelligence
* [Truecaller](https://www.truecaller.com/) - Caller ID and spam detection
* [Sync.me](https://sync.me/) - Caller ID and phone lookup
* [CallerSmart](https://www.callersmart.com/) - Reverse phone lookup
* [WhoCallsMe](https://whocallsme.com/) - Phone number lookup
* [Tellows](https://www.tellows.com/) - Phone number reputation
* [SpyDialer](https://spydialer.com/) - Reverse phone lookup
* [ReversePhoneLookup](https://www.reversephonelookup.com/) - Phone number lookup
* [No2Bounce](https://no2bounce.com) - Email verification platform
* [VerifyEmailAddress](https://www.verifyemailaddress.org/) - Free email verification
---

## Username Check

* [NameCheckup](https://namecheckup.com/) - Username availability check
* [NameChk](https://namechk.com/) - Username search across social media
* [KnowEm](https://knowem.com/) - Username search
* [CheckUser](https://checkuser.org/) - Username search
* [UserSearch](https://usersearch.org/) - Username search
* [Instant Username Search](https://instantusername.com/) - Username availability
* [Namevine](https://namevine.com/) - Username search

---

## Image & Video Analysis

* [Google Images](https://images.google.com) - Reverse image search
* [TinEye](https://tineye.com/) - Reverse image search
* [Yandex Images](https://yandex.com/images) - Reverse image search
* [Bing Images](https://www.bing.com/images) - Reverse image search
* [Baidu Images](https://image.baidu.com/) - Chinese reverse image search
* [SauceNAO](https://saucenao.com/) - Image source search
* [ImgOps](https://imgops.com/) - Image operations and analysis
* [Forensically](https://29a.ch/photo-forensics/) - Image forensics tool
* [FotoForensics](https://fotoforensics.com/) - Image error level analysis
* [JPEGsnoop](https://www.impulseadventure.com/photo/jpeg-snoop.html) - JPEG decoder analysis
* [ExifTool](https://exiftool.org/) - Metadata reader/editor
* [Jeffrey's Image Metadata Viewer](http://exif.regex.info/) - EXIF viewer
* [ExifData](https://exifdata.com/) - EXIF data viewer
* [GeoImgr](https://www.geoimgr.com/) - Geotag photo viewer
* [PimEyes](https://pimeyes.com/) - Face search engine
* [FaceCheck.ID](https://facecheck.id/) - Face search across social media
* [Search4faces](https://search4faces.com/) - Face search on social networks
* [Betaface](https://www.betaface.com/) - Face recognition API
* [InVID](https://www.invid-project.eu/) - Video verification toolkit
* [YouTube DataViewer](https://citizenevidence.amnestyusa.org/) - YouTube metadata extraction
* [Youtube Geo Search](https://mattw.io/youtube-geofind/) - YouTube geolocation search
* [Amnesty YouTube DataViewer](https://www.amnesty.org/en/latest/research/2018/10/dfrlabs-youtube-dataviewer/) - YouTube metadata
* [Steganography Online](https://stylesuxx.github.io/steganography/) - Online steganography
* [Aperisolve](https://aperisolve.fr/) - Image analysis with steganography
* [OCR Text Extractor](https://osint.sh/ocr/) - OCR from images
* [Face Detection and Comparison](https://6mzld2.csb.app/) - Compare two faces
* [This Person Does Not Exist](https://thispersondoesnotexist.com/) - AI-generated faces

---

## Geospatial & Mapping Tools

* [Google Earth](https://earth.google.com/) - Satellite imagery
* [Google Maps](https://maps.google.com) - World maps
* [OpenStreetMap](https://www.openstreetmap.org/) - Open source maps
* [Bing Maps](https://www.bing.com/maps) - Microsoft maps
* [Yandex Maps](https://maps.yandex.com) - Russian maps
* [Wikimapia](https://wikimapia.org/) - Collaborative map
* [Here Maps](https://www.here.com/) - Location platform
* [Mapillary](https://www.mapillary.com/) - Street-level imagery
* [Sentinel Hub](https://www.sentinel-hub.com/) - Satellite imagery
* [USGS Earth Explorer](https://earthexplorer.usgs.gov/) - Satellite data
* [Zoom Earth](https://zoom.earth/) - Live satellite imagery
* [Windy](https://www.windy.com/) - Weather and map visualization
* [FlightRadar24](https://www.flightradar24.com/) - Live flight tracking
* [FlightAware](https://flightaware.com/) - Flight tracking
* [ADS-B Exchange](https://www.adsbexchange.com/) - Flight tracking (no filter)
* [OpenSky Network](https://opensky-network.org/) - Air traffic data
* [MarineTraffic](https://www.marinetraffic.com/) - Ship tracking
* [VesselFinder](https://www.vesselfinder.com/) - Vessel tracking
* [FleetMon](https://www.fleetmon.com/) - Ship tracking
* [Live AIS](https://www.liveais.com/) - AIS ship data
* [What3Words](https://what3words.com/) - 3-word location system
* [GeoCords](https://geocords.com/) - GPS coordinates tool
* [GPS Coordinates](https://www.gps-coordinates.net/) - Coordinate conversion
* [SunCalc](https://www.suncalc.org/) - Sun position calculator
* [GeoHints](https://geohints.com/) - Geography tips for OSINT
* [Shadow Calculator](https://shademap.app/) - Shadow analysis
---

## Dark Web & Pastebin Monitoring

* [Pastebin.com](https://pastebin.com) - Main paste site
* [PasteLert](https://andrewmohawk.com/pasteLert/) - Pastebin alerting
* [Search Pastebin](https://searchpastebin.com/) - Pastebin search engine
* [Rentry](https://rentry.co/) - Markdown paste service
* [PrivateBin](https://privatebin.net/) - Encrypted pastebin
* [ZeroBin](https://sebsauvage.net/paste/) - Zero-knowledge pastebin
* [HashBin](https://hashb.in/) - Hashed pastebin
* [Defuse Pastebin](https://defuse.ca/pastebin.htm) - Encrypted pastebin
* [VaultBin](https://vaultb.in/) - Secure pastebin
* [TextBin](https://textbin.net/) - Secure pastebin
* [Nekobin](https://nekobin.com/) - Simple pastebin
* [Tor Project](https://www.torproject.org/) - Anonymous browsing
* [Tor2Web](https://www.tor2web.org/) - Tor gateway
* [Ahmia](https://ahmia.fi) - Dark web search engine
* [DarkDock](https://darkdock.com/) - Dark web search
* [OnionCity](https://onion.city/) - Onion services list
* [DarkNetLive](https://darknetlive.com/) - Dark web news
* [Hunchly](https://www.hunch.ly/) - Web capture for investigations
* [Tails OS](https://tails.boum.org/) - Privacy-focused live OS
* [Archive.is](https://archive.is/) - Web page snapshots
* [Wayback Machine](https://web.archive.org/) - Internet archive
* [CachedPages](http://www.cachedpages.com/) - Google cached pages
* [OldWeb.today](http://oldweb.today/) - Old web browser emulator

---

## Network Tools

* [Nmap](https://nmap.org/) - Network mapper and port scanner
* [Zenmap](https://nmap.org/zenmap/) - Nmap GUI
* [Wireshark](https://www.wireshark.org/) - Network protocol analyzer
* [Tcpdump](https://www.tcpdump.org/) - Network packet capture
* [Tshark](https://www.wireshark.org/docs/man-pages/tshark.html) - CLI packet analyzer
* [Netcat](https://netcat.sourceforge.net/) - Network utility
* [Ncat](https://nmap.org/ncat/) - Improved Netcat
* [Socat](https://linux.die.net/man/1/socat) - Multipurpose relay
* [Masscan](https://github.com/robertdavidgraham/masscan) - Mass IP port scanner
* [Zmap](https://zmap.io/) - Internet-scale network scanner
* [Angry IP Scanner](https://angryip.org/) - IP and port scanner
* [Advanced IP Scanner](https://www.advanced-ip-scanner.com/) - Network scanner
* [SoftPerfect Network Scanner](https://www.softperfect.com/products/networkscanner/) - Network scanner
* [SolarWinds Port Scanner](https://www.solarwinds.com/free-tools/free-port-scanner) - Free port scanner
* [Fping](https://fping.org/) - Ping multiple hosts
* [Hping3](https://github.com/antirez/hping3) - TCP/IP packet assembler
* [MTR](https://www.bitwizard.nl/mtr/) - Network diagnostic tool
* [Traceroute](https://linux.die.net/man/8/traceroute) - Route tracing
* [PathPing](https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/pathping) - Route tracing with latency
* [Whois](https://linux.die.net/man/1/whois) - Domain ownership lookup
* [Dig](https://linux.die.net/man/1/dig) - DNS lookup utility
* [Nslookup](https://linux.die.net/man/1/nslookup) - DNS query tool
* [Host](https://linux.die.net/man/1/host) - DNS lookup
* [DNSMap](https://github.com/guelfoweb/dnsmap) - Subdomain brute forcing
* [Fierce](https://github.com/mschwager/fierce) - DNS reconnaissance
* [Netdiscover](https://github.com/alexxy/netdiscover) - ARP scanner
* [Arp-scan](https://github.com/royhills/arp-scan) - ARP scanning
* [Bettercap](https://www.bettercap.org/) - Network attack framework
* [Ettercap](https://www.ettercap-project.org/) - MITM framework
* [Aircrack-ng](https://www.aircrack-ng.org/) - WiFi security suite
* [Kismet](https://www.kismetwireless.net/) - Wireless sniffer
* [Wifite](https://github.com/derv82/wifite) - Automated WiFi attack
* [Airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) - WiFi auditing
* [Iperf3](https://iperf.fr/) - Network bandwidth measurement
* [Bmon](https://github.com/tgraf/bmon) - Bandwidth monitor
* [Nload](https://linux.die.net/man/1/nload) - Network traffic monitor
* [Nethogs](https://github.com/raboof/nethogs) - Per-process network monitor
* [IfTop](https://www.ex-parrot.com/pdw/iftop/) - Network traffic display
* [Ntopng](https://www.ntop.org/products/traffic-analysis/ntop/) - Network traffic analysis
* [Darkstat](https://unix4lyfe.org/darkstat/) - Network traffic analyzer
* [P0f](https://lcamtuf.coredump.cx/p0f3/) - Passive fingerprinting
* [Netstat](https://linux.die.net/man/8/netstat) - Network statistics
* [Sslscan](https://github.com/rbsec/sslscan) - SSL/TLS scanner
* [Sslyze](https://github.com/nabla-c0d3/sslyze) - SSL/TLS analysis
* [TestSSL](https://testssl.sh/) - SSL/TLS testing tool
* [Wafw00f](https://github.com/EnableSecurity/wafw00f) - WAF fingerprinting
* [Firewalk](https://github.com/pktfish/firewalk) - Firewall ACL scanning
* [Unicornscan](https://github.com/unicornscan/unicornscan) - Distributed port scanner
* [Scapy](https://scapy.net/) - Packet manipulation library
* [Ligolo-ng](https://github.com/nicocha30/ligolo-ng) - Tunneling tool
* [Chisel](https://github.com/jpillora/chisel) - Fast TCP tunnel
* [Proxychains](https://github.com/rofl0r/proxychains-ng) - Proxy chain tool
* [Stunnel4](https://www.stunnel.org/) - SSL tunnel
* [SSHuttle](https://github.com/sshuttle/sshuttle) - VPN over SSH
* [Mitmproxy](https://mitmproxy.org/) - HTTPS proxy
* [Caido](https://caido.io/) - Web security auditing toolkit
---

## Penetration Testing Frameworks

* [Metasploit Framework](https://www.metasploit.com/) - Exploitation framework
* [Armitage](https://armitage.com/) - Metasploit GUI
* [Cobalt Strike](https://www.cobaltstrike.com/) - Adversary simulation
* [Empire](https://github.com/EmpireProject/Empire) - Post-exploitation framework
* [PowerShell Empire](https://github.com/BC-SECURITY/Empire) - PowerShell post-exploitation
* [Starkiller](https://github.com/BC-SECURITY/Starkiller) - Empire GUI
* [Covenant](https://github.com/cobbr/Covenant) - .NET C2 framework
* [Sliver](https://github.com/BishopFox/sliver) - Adversary emulation framework
* [Havoc](https://github.com/HavocFramework/Havoc) - Modern C2 framework
* [Mythic](https://github.com/its-a-feature/Mythic) - Multi-agent C2 framework
* [PoshC2](https://github.com/nettitude/PoshC2) - PowerShell C2 server
* [Koadic](https://github.com/zerosum0x0/koadic) - Windows post-exploitation rootkit
* [Merlin](https://github.com/Ne0nd0g/merlin) - Go C2 server
* [Nishang](https://github.com/samratashok/nishang) - PowerShell for exploitation
* [PowerSploit](https://github.com/PowerShellMafia/PowerSploit) - PowerShell post-exploitation
* [Impacket](https://github.com/SecureAuthCorp/impacket) - Network protocol collection
* [BloodHound](https://github.com/BloodHoundAD/BloodHound) - Active Directory reconnaissance
* [SharpHound](https://github.com/BloodHoundAD/SharpHound) - BloodHound ingestor
* [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec) - Network service assessment
* [NetExec](https://github.com/Pennyw0rth/NetExec) - Network execution tool
* [Responder](https://github.com/lgandx/Responder) - LLMNR/NBT-NS poisoner
* [Evil-WinRM](https://github.com/Hackplayers/evil-winrm) - WinRM shell
* [PsExec](https://docs.microsoft.com/en-us/sysinternals/downloads/psexec) - Remote execution
* [SET](https://github.com/trustedsec/social-engineer-toolkit) - Social engineering toolkit
* [Gophish](https://getgophish.com/) - Phishing framework
* [BeEF](https://beefproject.com/) - Browser exploitation framework
* [Evilginx2](https://github.com/kgretzky/evilginx2) - MITM phishing framework
* [Modlishka](https://github.com/drk1wi/Modlishka) - Reverse proxy phishing
* [Darkmoon](https://github.com/ASCIT31/Dark-Moon) - AI penetration testing platform
* [Sn1per](https://github.com/1N3/Sn1per) - Automated pentest scanner
* [AutoRecon](https://github.com/Tib3rius/AutoRecon) - Automated network recon
* [Legion](https://github.com/GoVanguard/legion) - Automated pentest framework
* [Faraday](https://github.com/infobyte/faraday) - Collaborative pentest platform
* [Dradis](https://dradisframework.com/) - Collaboration and reporting
* [Raccoon](https://github.com/evyatarmeged/Raccoon) - Offensive security tool
* [WebSift](https://github.com/s-r-e-e-r-a-j/WebSift) - Website info gathering
* [Ivre](https://github.com/ivre/ivre) - Network recon framework

---

## Vulnerability Scanners

* [Nessus](https://www.tenable.com/products/nessus) - Vulnerability scanner
* [OpenVAS / GVM](https://www.greenbone.net/) - Open source vulnerability scanner
* [Nexpose](https://www.rapid7.com/products/nexpose/) - Vulnerability management
* [Qualys FreeScan](https://www.qualys.com/forms/freescan/) - Cloud vulnerability scanner
* [Nikto](https://github.com/sullo/nikto) - Web server scanner
* [JoomScan](https://github.com/OWASP/joomscan) - Joomla vulnerability scanner
* [Droopescan](https://github.com/droope/droopescan) - CMS scanner
* [CMSeek](https://github.com/Tuhinshubhra/CMSeeK) - CMS detection and scanning
* [Vega](https://subgraph.com/vega/) - Web security scanner
* [Skipfish](https://github.com/spinkham/skipfish) - Web application scanner
* [Wapiti](https://github.com/IFGHou/wapiti) - Web application scanner
* [Arachni](https://github.com/Arachni/arachni) - Web application scanner
* [Acunetix](https://www.acunetix.com/) - Commercial web scanner
* [Burp Suite](https://portswigger.net/burp) - Web penetration testing platform
* [OWASP ZAP](https://www.zaproxy.org/) - Web application scanner
* [Snyk](https://snyk.io/) - Open source vulnerability scanning
* [Trivy](https://github.com/aquasecurity/trivy) - Container vulnerability scanner
* [Grype](https://github.com/anchore/grype) - Vulnerability scanner for containers
* [Clair](https://github.com/quay/clair) - Container vulnerability analysis
* [Dependency-Check](https://owasp.org/www-project-dependency-check/) - SCA tool
* [Safety](https://github.com/pyupio/safety) - Python dependency scanner
* [Observatory by Mozilla](https://observatory.mozilla.org/) - Web security scanner
* [SecurityHeaders](https://securityheaders.com/) - HTTP header analysis
* [SSL Labs](https://www.ssllabs.com/ssltest/) - SSL/TLS testing
* [Hardenize](https://www.hardenize.com/) - Security audit platform
* [Cyscan](https://cyscan.io/) - URL security scanner
* [Intruder](https://www.intruder.io/) - Automated vulnerability scanner
* [Probely](https://probely.com/) - Web vulnerability scanner
* [Detectify](https://detectify.com/) - Automated web security scanning
* [HackerTarget](https://hackertarget.com/) - Online security tools
* [Pentest-Tools.com](https://pentest-tools.com/) - Online pentesting tools
* [bnvd.org](https://bnvd.org) - CVE / vulnerability search and cataloging platform
* [Log4j-scan](https://github.com/fullhunt/log4j-scan) - Log4j RCE scanner

## Web Application Security

* [SQLMap](https://sqlmap.org/) - SQL injection automation
* [jSQL Injection](https://github.com/ron190/jsql-injection) - SQL injection tool
* [NoSQLMap](https://github.com/codingo/NoSQLMap) - NoSQL injection tool
* [Commix](https://github.com/commixproject/commix) - Command injection tool
* [XSStrike](https://github.com/s0md3v/XSStrike) - XSS detection suite
* [XSSer](https://github.com/epsylon/xsser) - Cross-site scripting tool
* [Dirb](https://dirb.sourceforge.net/) - Directory brute-forcer
* [Dirbuster](https://github.com/KajanM/DirBuster) - Directory buster
* [Gobuster](https://github.com/OJ/gobuster) - Directory/file busting
* [FFuf](https://github.com/ffuf/ffuf) - Fast web fuzzer
* [WFuzz](https://github.com/xmendez/wfuzz) - Web fuzzer
* [Feroxbuster](https://github.com/epi052/feroxbuster) - Content discovery
* [Dirsearch](https://github.com/maurosoria/dirsearch) - Directory search
* [Arjun](https://github.com/s0md3v/Arjun) - HTTP parameter discovery
* [ParamSpider](https://github.com/devanshbatham/ParamSpider) - URL parameter mining
* [Hakrawler](https://github.com/hakluke/hakrawler) - Web crawler
* [Gospider](https://github.com/jaeles-project/gospider) - Spidering tool
* [WaybackURLs](https://github.com/tomnomnom/waybackurls) - Wayback Machine URL extractor
* [GAU](https://github.com/lc/gau) - URL fetcher from multiple sources
* [Subjack](https://github.com/haccer/subjack) - Subdomain takeover
* [SubOver](https://github.com/Ice3man543/SubOver) - Subdomain takeover
* [Takeover](https://github.com/m4ll0k/takeover) - Subdomain takeover detection
* [Dalfox](https://github.com/hahwul/dalfox) - XSS parameter analysis
* [Corsy](https://github.com/s0md3v/Corsy) - CORS misconfiguration scanner
* [SSTImap](https://github.com/vladko312/SSTImap) - SSTI detection tool
* [Tplmap](https://github.com/epinna/tplmap) - Server-side template injection
* [CRLFuzz](https://github.com/dwisiswant0/crlfuzz) - CRLF injection scanner
* [LFISuite](https://github.com/D35m0nd142/LFISuite) - Local file inclusion scanner
* [OpenRedireX](https://github.com/devanshbatham/OpenRedireX) - Open redirect scanner
* [JWT Tool](https://github.com/ticarpi/jwt_tool) - JWT security testing
* [JWT Crack](https://github.com/brendan-rius/c-jwt-cracker) - JWT cracking
* [Hydra](https://github.com/vanhauser-thc/thc-hydra) - Login brute-forcer
* [Patator](https://github.com/lanjelot/patator) - Multi-service brute-forcer
* [Medusa](https://github.com/jmk-foofus/medusa) - Speedy parallel login brute-forcer
* [Crowbar](https://github.com/galkan/crowbar) - Brute forcing tool
* [WordPress Exploit Framework](https://github.com/rastating/wordpress-exploit-framework) - WP exploitation
* [GraphQL Map](https://github.com/swisskyrepo/GraphQLmap) - GraphQL vulnerability scanner
* [InQL](https://github.com/doyensec/inql) - GraphQL security testing
* [Swagger-EZ](https://github.com/RhinoSecurityLabs/Swagger-EZ) - Swagger API scanning
* [OpenAPI Scanner](https://github.com/projectdiscovery/openapi-scanner) - OpenAPI testing
* [DavTest](https://github.com/cldrn/davtest) - WebDAV scanner
* [WPSeku](https://github.com/m4ll0k/WPSeku) - WordPress security scanner
* [Lazyrecon](https://github.com/nahamsec/lazyrecon) - Automated recon script
* [JSParser](https://github.com/nahamsec/JSParser) - JavaScript URL parser
* [LinkFinder](https://github.com/GerbenJavado/LinkFinder) - JavaScript endpoint discovery
* [SecretFinder](https://github.com/m4ll0k/SecretFinder) - Secret key discovery in JS
* [DotDotPwn](https://github.com/wireghoul/dotdotpwn) - Directory traversal fuzzer
* [rbparser](https://github.com/codingo/Reconnoitre) - URL parser
* [Ground Control](https://github.com/nahamsec/ground-control) - Subdomain discovery

## Wireless & Bluetooth Tools

* [Reaver](https://github.com/t6x/reaver-wps-fork-t6x) - WPS attack tool
* [Bully](https://github.com/aanarchyy/bully) - WPS brute-force
* [PixieWPS](https://github.com/wiire/pixiewps) - WPS offline brute-force
* [Wifiphisher](https://github.com/wifiphisher/wifiphisher) - WiFi phishing
* [Fluxion](https://github.com/FluxionNetwork/fluxion) - WiFi social engineering
* [WiFi Pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) - WiFi security testing
* [EAPhammer](https://github.com/s0lst1c3/eaphammer) - EAP attack tool
* [hostapd-wpe](https://github.com/OpenSecurityResearch/hostapd-wpe) - WPA2 enterprise attack
* [Asleap](https://github.com/joswr1ght/asleap) - LEAP cracking
* [Cowpatty](https://github.com/joswr1ght/cowpatty) - WPA2-PSK cracking
* [Fern Wifi Cracker](https://github.com/savio-code/fern-wifi-cracker) - WiFi security tool
* [WiFi Honey](https://github.com/sensepost/honey) - WiFi honeypot
* [mdk3](https://github.com/wi-fi-analyzer/mdk3-master) - WiFi DoS tool
* [Sparrow-WiFi](https://github.com/ghostop14/sparrow-wifi) - WiFi analysis GUI
* [Wash](https://github.com/t6x/reaver-wps-fork-t6x) - WPS scan tool
* [BlueZ](http://www.bluez.org/) - Bluetooth protocol stack
* [BlueHydra](https://github.com/pwnieexpress/blue_hydra) - Bluetooth discovery
* [Bluelog](https://github.com/MS3FGX/Bluelog) - Bluetooth scanner
* [Bluesnarfer](https://gitlab.com/kalilinux/packages/bluesnarfer) - Bluetooth attack tool
* [BtScanner](https://github.com/ntrippar/btscanner) - Bluetooth scanner
* [Spooftooph](https://github.com/nickbjohnson4224/spooftooph) - Bluetooth spoofing
* [Ubertooth](https://github.com/greatscottgadgets/ubertooth) - Bluetooth Sniffer
* [HackRF](https://greatscottgadgets.com/hackrf/) - Software defined radio
* [GNURadio](https://www.gnuradio.org/) - SDR framework
* [GQRX](https://gqrx.dk/) - SDR receiver
* [RTL-SDR](https://www.rtl-sdr.com/) - Software defined radio
* [RFcat](https://github.com/atlas0fd00m/rfcat) - RF toolkit
* [Chirp](https://chirp.danplanet.com/) - Radio programming tool
* [gr-gsm](https://github.com/osmocom/gr-gsm) - GSM receiver

---

## Password Cracking & Recovery

* [Hashcat](https://hashcat.net/hashcat/) - Advanced password recovery
* [John the Ripper](https://www.openwall.com/john/) - Password security auditing
* [Johny](https://openwall.info/wiki/john/johnny) - John the Ripper GUI
* [Ncrack](https://nmap.org/ncrack/) - Network authentication cracking
* [Crunch](https://github.com/crunchsec/crunch) - Wordlist generator
* [CeWL](https://github.com/digininja/CeWL) - Custom wordlist generator
* [RockYou](https://github.com/praetorian/stego-toolkit) - Famous password list
* [Probable-Wordlists](https://github.com/berzerk0/Probable-Wordlists) - Password wordlists
* [Pipal](https://github.com/digininja/pipal) - Password analyzer
* [Bopscrk](https://github.com/R3nt0n/bopscrk) - Smart wordlist generator
* [RSMangler](https://github.com/digininja/RSMangler) - Wordlist mangler
* [CUPP](https://github.com/Mebus/cupp) - Common user passwords profiler
* [Kwprocessor](https://github.com/hashcat/kwprocessor) - Keyboard walk generator
* [Princeprocessor](https://github.com/hashcat/princeprocessor) - PRINCE wordlist generator
* [Ophcrack](https://ophcrack.sourceforge.io/) - Windows password cracker
* [RainbowCrack](https://github.com/zhutiangong/rainbowcrack) - Rainbow table cracker
* [Cain & Abel](https://www.oxid.it/cain.html) - Windows password recovery
* [L0phtCrack](https://www.l0phtcrack.com/) - Windows password auditing
* [Chntpw](https://sourceforge.net/projects/chntpw/) - Windows registry password editor
* [SamDump2](https://sourceforge.net/projects/samdump2/) - SAM file dumper
* [CmosPwd](https://www.cgsecurity.org/wiki/CmosPwd) - BIOS password cracker
* [Fcrackzip](https://github.com/hyc/fcrackzip) - ZIP password cracker
* [Rarcrack](https://github.com/giskook/rarcrack) - RAR password cracker
* [PDFCrack](https://github.com/robins/pdfcrack) - PDF password cracker
* [TrueCrack](https://github.com/lvaccaro/truecrack) - TrueCrypt password cracker
* [BitCracker](https://github.com/e-ago/bitcracker) - BitLocker password cracker
* [Sipcrack](https://github.com/chemplex/sipcrack) - SIP password cracker
* [Hash-Identifier](https://github.com/psypanda/hashID) - Hash type identifier
* [Name-That-Hash](https://github.com/HashPals/Name-That-Hash) - Hash identifier tool
* [Hashid](https://github.com/s3inlc/hasid) - Hash identification
* [CrackStation](https://crackstation.net/) - Online hash cracking
* [CMD5](https://www.cmd5.org/) - MD5 hash cracking
* [Hashes.com](https://hashes.com/) - Hash cracking service
* [OnlineHashCrack](https://www.onlinehashcrack.com/) - Online hash cracking
* [Mimikatz](https://github.com/gentilkiwi/mimikatz) - Windows credential extraction
* [Rubeus](https://github.com/GhostPack/Rubeus) - Kerberos abuse toolkit
* [Kerbrute](https://github.com/ropnop/kerbrute) - Kerberos brute force
---

## Malware Analysis & Reverse Engineering

### Static Analysis
* [Pestudio](https://www.winitor.com/) - PE file static analysis
* [CFF Explorer](https://ntcore.com/explorer-suite/) - PE file explorer
* [PE-Bear](https://github.com/hasherezade/pe-bear) - PE file reverser
* [PEview](https://www.aldeid.com/wiki/PEView) - PE file viewer
* [Detect-It-Easy](https://github.com/horsicq/Detect-It-Easy) - File type detection
* [Exeinfo PE](https://exeinfo-pe.en.uptodown.com/windows) - PE packer detection
* [TrID](https://trid.en.softonic.com/) - File type identifier
* [PEiD](https://www.aldeid.com/wiki/PEiD) - PE packer detector
* [Dependency Walker](https://dependencywalker.com/) - DLL dependency viewer
* [Resource Hacker](https://www.angusj.com/resourcehacker/) - Resource editor
* [Flare-FLOSS](https://github.com/mandiant/flare-floss) - Obfuscated string solver
* [BinText](https://www.majorgeeks.com/files/details/bintext.html) - String extractor
* [Strings](https://linux.die.net/man/1/strings) - String extraction from binaries
* [XORSearch](https://blog.didierstevens.com/programs/xorsearch) - XOR string search
* [YARA](https://github.com/VirusTotal/yara) - Pattern matching tool
* [YarGen](https://github.com/Neo23x0/yarGen) - YARA rule generator
* [HashMyFiles](https://www.nirsoft.net/utils/hash_my_files.html) - Hash calculator
* [ssdeep](https://ssdeep-project.github.io/ssdeep/) - Fuzzy hashing
* [Hashdeep](https://github.com/jessek/hashdeep) - Deep hash computation

### Dynamic Analysis
* [Cuckoo Sandbox](https://cuckoosandbox.org/) - Automated malware analysis
* [CAPE](https://github.com/kevoreilly/CAPEv2) - Malware config extraction
* [DRAKVUF](https://github.com/tklengyel/drakvuf) - Dynamic malware analysis
* [Noriben](https://github.com/Rurik/Noriben) - Procmon-based sandbox
* [Sandboxie](https://www.sandboxie.com/) - Application isolation
* [FakeNet-NG](https://github.com/mandiant/flare-fakenet-ng) - Network simulation
* [INetSim](https://www.inetsim.org/) - Network service emulation
* [Process Monitor](https://docs.microsoft.com/en-us/sysinternals/downloads/procmon) - Process monitoring
* [Process Explorer](https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer) - Process exploration
* [Process Hacker](https://processhacker.sourceforge.io/) - Process analysis
* [API Monitor](http://www.rohitab.com/apimonitor) - API call monitoring
* [RegShot](https://sourceforge.net/projects/regshot/) - Registry snapshot comparison
* [ProcDot](https://www.procdot.com/) - Process behavior visualizer

### Reverse Engineering
* [IDA Pro](https://www.hex-rays.com/ida-pro/) - Interactive disassembler
* [Ghidra](https://ghidra-sre.org/) - NSA reverse engineering framework
* [Radare2](https://rada.re/n/) - Reverse engineering framework
* [Cutter](https://cutter.re/) - Radare2 GUI
* [Binary Ninja](https://binary.ninja/) - Reverse engineering platform
* [x64dbg](https://x64dbg.com/) - Windows debugger
* [OllyDbg](http://www.ollydbg.de/) - 32-bit debugger
* [WinDbg](https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/) - Windows debugger
* [Immunity Debugger](https://debugger.immunityinc.com/) - Debugger with Python API
* [GDB](https://www.sourceware.org/gdb/) - GNU debugger
* [GEF](https://github.com/hugsy/gef) - GDB enhanced features
* [PEDA](https://github.com/longld/peda) - Python exploit development for GDB
* [Hopper](https://www.hopperapp.com/) - macOS/Linux reverse tool
* [RetDec](https://retdec.com/) - Retargetable decompiler
* [angr](https://github.com/angr/angr) - Binary analysis framework
* [BAP](https://github.com/BinaryAnalysisPlatform/bap) - Binary analysis platform
* [Capstone](https://www.capstone-engine.org/) - Disassembly framework
* [Unicorn](https://www.unicorn-engine.org/) - CPU emulator framework
* [Frida](https://frida.re/) - Dynamic instrumentation
* [dnSpy](https://github.com/dnSpy/dnSpy) - .NET debugger/decompiler
* [ILSpy](https://github.com/icsharpcode/ILSpy) - .NET decompiler
* [dotPeek](https://www.jetbrains.com/decompiler/) - JetBrains .NET decompiler
* [JADX](https://github.com/skylot/jadx) - Dex to Java decompiler
* [JD-GUI](https://github.com/java-decompiler/jd-gui) - Java decompiler
* [CFR](http://www.benf.org/other/cfr/) - Java decompiler
* [Procyon](https://bitbucket.org/mstrobel/procyon) - Java decompiler
* [APKTool](https://github.com/iBotPeaches/Apktool) - APK reverse tool
* [Bytecode-Viewer](https://github.com/Konloch/bytecode-viewer) - Bytecode analysis
* [De4dot](https://github.com/0xd4d/de4dot) - .NET deobfuscator
* [UnpacMe](https://www.unpac.me/) - Malware unpacking service
* [PDF Tools](https://blog.didierstevens.com/programs/pdf-tools/) - PDF analysis tools
* [Oletools](https://github.com/decalage2/oletools) - Office document analysis
* [ViperMonkey](https://github.com/decalage2/ViperMonkey) - VBA emulation engine
* [HxD](https://mh-nexus.de/en/hxd/) - Hex editor
* [010 Editor](https://www.sweetscape.com/010editor/) - Professional hex editor
* [CyberChef](https://gchq.github.io/CyberChef/) - Data encoding/decoding
* [Capa](https://github.com/mandiant/capa) - Capability identification

### Malware Samples
* [VX Underground](https://vx-underground.org/) - Malware sample collection
* [The Zoo](https://thezoo.morirt.com/) - Live malware samples
* [MalShare](https://malshare.com/) - Malware repository
* [VirusShare](https://virusshare.com/) - Malware samples
* [Contagio](https://contagiodump.blogspot.com/) - Malware sample dump
* [MalwareDB](https://malwaredb.malekal.com/) - Malware database
* [Any.Run](https://any.run/) - Interactive malware sandbox
* [Joe Sandbox](https://www.joesecurity.org/) - Deep malware analysis
* [Intezer Analyze](https://analyze.intezer.com/) - Malware DNA analysis
* [Triage](https://tria.ge/) - Malware analysis sandbox

---

## Digital Forensics

* [Autopsy](https://www.sleuthkit.org/autopsy/) - Digital forensics platform
* [Sleuth Kit](https://www.sleuthkit.org/) - CLI forensic tools
* [FTK Imager](https://accessdata.com/product-download/ftk-imager-version-4.2) - Forensic imaging
* [EnCase](https://www.guidancesoftware.com/encase-forensic) - Commercial forensic platform
* [X-Ways Forensics](https://www.x-ways.net/forensics/) - Forensic software
* [Bulk Extractor](https://github.com/simsong/bulk_extractor) - Data extraction
* [Foremost](https://github.com/korczis/foremost) - File carving
* [Scalpel](https://github.com/sleuthkit/scalpel) - File carving tool
* [TestDisk](https://www.cgsecurity.org/wiki/TestDisk) - Partition recovery
* [PhotoRec](https://www.cgsecurity.org/wiki/PhotoRec) - File recovery
* [DC3DD](https://sourceforge.net/projects/dc3dd/) - Enhanced dd
* [DCFLDD](https://dcfldd.sourceforge.io/) - DD with forensics features
* [Guymager](https://guymager.sourceforge.io/) - Forensic imaging
* [EWF Tools](https://github.com/libyal/libewf) - Expert Witness Format tools
* [RegRipper](https://github.com/keydet89/RegRipper2.8) - Registry analysis
* [Registry Viewer](https://accessdata.com/product-download/registry-viewer) - Registry viewer
* [Pasco](https://sourceforge.net/projects/odessa/) - Internet Explorer cache parser
* [Rifiuti](https://github.com/abelcheung/rifiuti) - Recycle bin analyzer
* [Rifiuti2](https://github.com/abelcheung/rifiuti2) - Enhanced recycle bin analysis
* [Galleta](https://sourceforge.net/projects/odessa/) - Cookie analysis
* [Binwalk](https://github.com/ReFirmLabs/binwalk) - Firmware analysis
* [HexWalk](https://github.com/gcarmix/HexWalk) - Hex viewer/analyzer
* [Readpst](https://www.five-ten-sg.com/libpst/) - PST file converter
* [Undbx](https://github.com/ramgibbons/undbx) - Outlook Express recovery
* [Vinetto](https://github.com/Atropos7/vinetto) - Thumbs.db viewer
* [MissIdentify](https://github.com/msuhanov/regf) - File type identification
* [Xplico](https://www.xplico.org/) - Network forensics analysis
* [NetworkMiner](https://www.netresec.com/?page=NetworkMiner) - Network forensics
* [CapTipper](https://github.com/omriher/CapTipper) - HTTP traffic explorer
* [Maltrail](https://github.com/stamparm/maltrail) - Malicious traffic detection

### Memory Forensics

* [Volatility 3](https://github.com/volatilityfoundation/volatility3) - Advanced memory forensics
* [Volatility 2](https://github.com/volatilityfoundation/volatility) - Memory analysis framework
* [Rekall](https://github.com/google/rekall) - Memory forensic framework
* [DumpIt](https://www.magnetforensics.com/resources/magnet-dumpit-for-windows/) - Memory acquisition
* [WinPmem](https://github.com/504ensicsLabs/pmem) - Windows memory acquisition
* [LiME](https://github.com/504ensicsLabs/lime) - Linux memory extractor
* [OSXPMem](https://github.com/504ensicsLabs/osxpmem) - Mac memory acquisition
* [Avml](https://github.com/microsoft/avml) - Linux memory acquisition
* [Muninn](https://github.com/ytisf/muninn) - Volatility automation
* [Evolve](https://github.com/JamesHabben/evolve) - Volatility web interface
* [VolUtility](https://github.com/kevthehermit/VolUtility) - Volatility web GUI
* [Redline](https://www.fireeye.com/services/freeware/redline.html) - Memory analysis by FireEye
* [Fibratus](https://github.com/rabbitstack/fibratus) - Windows kernel exploration

---

## Incident Response

* [KAPE](https://www.kroll.com/en/services/cyber-risk/incident-response-litigation-support/kape) - Forensic artifact collection
* [CyLR](https://github.com/orlikoski/CyLR) - Live response collection
* [Velociraptor](https://github.com/Velocidex/velociraptor) - Endpoint visibility
* [Osquery](https://osquery.io/) - SQL-based endpoint instrumentation
* [GRR Rapid Response](https://github.com/google/grr) - Live forensics
* [Sysinternals Suite](https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite) - Windows troubleshooting tools
* [Autoruns](https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns) - Startup program manager
* [TCPView](https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview) - TCP endpoint viewer
* [ListDLLs](https://docs.microsoft.com/en-us/sysinternals/downloads/listdlls) - DLL listing
* [Handle](https://docs.microsoft.com/en-us/sysinternals/downloads/handle) - Handle viewer
* [Sigcheck](https://docs.microsoft.com/en-us/sysinternals/downloads/sigcheck) - File signature verification
* [LogParser](https://docs.microsoft.com/en-us/archive/blogs/msdn/scripting-with-the-logparser-tool) - Log analysis tool
* [Hayabusa](https://github.com/Yamato-Security/hayabusa) - Windows event log analysis
* [Zircolite](https://github.com/wagga40/Zircolite) - EVTX analysis tool
* [Chainsaw](https://github.com/WithSecureLabs/chainsaw) - Security event hunting
* [DeepBlueCLI](https://github.com/sans-blue-team/deepbluecli) - PowerShell log analysis
* [Certify](https://github.com/GhostPack/Certify) - ADCS exploitation
* [Seatbelt](https://github.com/GhostPack/Seatbelt) - Windows security config checker
* [Watson](https://github.com/rasta-mouse/Watson) - Windows privilege escalation
* [SharpUp](https://github.com/GhostPack/SharpUp) - Windows privilege escalation
* [LOLBAS](https://lolbas-project.github.io/) - Living Off the Land Binaries
* [GTFOBins](https://gtfobins.github.io/) - Unix privilege escalation
* [Atomic Red Team](https://atomicredteam.io/) - Detection test library
* [Caldera](https://github.com/mitre/caldera) - Automated adversary emulation
* [SIGMA Rules](https://github.com/SigmaHQ/sigma) - Generic SIEM rules
* [Red Canary](https://redcanary.com/) - Managed detection
* [DFIR Redline](https://www.fireeye.com/services/freeware/redline.html) - IR tool by FireEye

---

## Red Team Tools

* [NimPlant](https://github.com/chvancooten/NimPlant) - Nim C2 agent
* [Villain](https://github.com/t3l3machus/Villain) - Reverse shell handler
* [HoaxShell](https://github.com/t3l3machus/HoaxShell) - Remote access tool
* [Penelope](https://github.com/brightio/penelope) - Reverse shell handler
* [DeimosC2](https://github.com/DeimosC2/DeimosC2) - Go-based C2
* [Shad0w](https://github.com/bats3c/shad0w) - C2 for Windows
* [Faction](https://github.com/FactionC2/Faction) - C2 framework
* [MSFVenom](https://github.com/rapid7/metasploit-framework) - Payload generator
* [Shellter](https://www.shellterproject.com/) - Dynamic shellcode injection
* [Veil](https://github.com/Veil-Framework/Veil) - Payload generator
* [Donut](https://github.com/TheWover/donut) - Shellcode generation
* [MsfPC](https://github.com/g0tmi1k/msfpc) - MSFvenom payload creator
* [ShellNoob](https://github.com/reyammer/shellnoob) - Shellcode writing toolkit
* [Pwntools](https://github.com/Gallopsled/pwntools) - CTF/exploit development
* [ROPgadget](https://github.com/JonathanSalwan/ROPgadget) - ROP gadget finder
* [one_gadget](https://github.com/david942j/one_gadget) - One gadget RCE finder
* [AzureHound](https://github.com/BloodHoundAD/AzureHound) - Azure AD reconnaissance
* [Roadtools](https://github.com/dirkjanm/ROADtools) - Azure AD assessment
* [AADInternals](https://github.com/Gerenios/AADInternals) - Azure AD administration
* [PingCastle](https://www.pingcastle.com/) - AD security assessment
* [Purple Knight](https://www.semperis.com/purple-knight/) - AD security assessment
* [ADRecon](https://github.com/sense-of-security/ADRecon) - AD reconnaissance
* [LDAPDomainDump](https://github.com/dirkjanm/ldapdomaindump) - LDAP domain dump

---

## Blue Team / Defense Tools

* [OpenCanary](https://github.com/thinkst/opencanary) - Honeypot
* [Tpotce](https://github.com/telekom-security/tpotce) - Honeypot platform
* [Cowrie](https://github.com/cowrie/cowrie) - SSH honeypot
* [Dionaea](https://github.com/DinoTools/dionaea) - Malware honeypot
* [Conpot](https://github.com/mushorg/conpot) - ICS/SCADA honeypot
* [Glastopf](https://github.com/mushorg/glastopf) - Web honeypot
* [Honeyd](https://github.com/provos/honeyd) - Virtual honeypot
* [Fail2Ban](https://www.fail2ban.org/) - Intrusion prevention
* [CrowdSec](https://crowdsec.net/) - Collaborative security
* [ClamAV](https://www.clamav.net/) - Open source antivirus
* [Elastic Security](https://www.elastic.co/security/) - SIEM and security

---

## Cryptography & Encryption

* [GnuPG (GPG)](https://gnupg.org/) - OpenPGP encryption
* [OpenSSL](https://www.openssl.org/) - SSL/TLS toolkit
* [VeraCrypt](https://www.veracrypt.fr/) - Disk encryption
* [BitLocker](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/) - Windows encryption
* [LUKS](https://gitlab.com/cryptsetup/cryptsetup) - Linux disk encryption
* [CryptSetup](https://gitlab.com/cryptsetup/cryptsetup) - Encryption utility
* [GnuTLS](https://www.gnutls.org/) - SSL/TLS library
* [AxeCrypt](https://axcrypt.net/) - File encryption
* [BoxCryptor](https://www.boxcryptor.com/) - Cloud encryption
* [Cryptomator](https://cryptomator.org/) - Cloud file encryption
* [EncFS](https://github.com/vgough/encfs) - Encrypted filesystem
* [Steghide](https://steghide.sourceforge.io/) - Steganography hiding
* [StegSuite](https://github.com/domfarolino/stegsuite) - Steganography suite
* [StegSnow](https://www.darkside.com.au/snow/) - Whitespace steganography
* [OutGuess](https://github.com/resurrecting-open-source-projects/outguess) - Steganography tool
* [Signal](https://signal.org/) - Encrypted messaging
* [Keybase](https://keybase.io/) - Encrypted communication
* [Wire](https://wire.com/) - Secure collaboration

---

## Phishing Analysis & Scam Detection

* [CheckPhish](https://checkphish.ai/) - Zero-hour phishing detection
* [CredSniper](https://github.com/ustayready/CredSniper) - Phishing platform
* [ZPhisher](https://github.com/htr-tech/zphisher) - Phishing tool
* [BlackEye](https://github.com/An0nUD4Y/blackeye) - Phishing tool
* [ShellPhish](https://github.com/An0nUD4Y/shellphish) - Phishing tool
* [PhishStats](https://phishstats.info/) - Phishing statistics
* [ScamAdviser](https://www.scamadviser.com/) - Website trust check
* [ScamDoc](https://www.scamdoc.com/) - Website scam checker
* [URLVoid](https://www.urlvoid.com/) - URL reputation check
* [IsLegitSite](https://www.islegitsite.com/) - Website trustworthiness check
* [PhishLabs](https://www.phishlabs.com/) - Phishing protection
* [Cofense](https://cofense.com/) - Phishing defense
* [KnowBe4](https://www.knowbe4.com/) - Security awareness training
* [Phishing Catcher](https://github.com/x0rz/phishing_catcher) - Phishing domain detection

---

## CTF Platforms & Labs

* [TryHackMe](https://tryhackme.com/) - Cybersecurity training
* [HackTheBox](https://hackthebox.com) - CTF and pentesting labs
* [HackTheBox Academy](https://academy.hackthebox.com/) - Structured training
* [OverTheWire](https://overthewire.org) - Wargames
* [PicoCTF](https://picoctf.org) - Beginner CTF
* [CTFtime](https://ctftime.org/) - CTF calendar and team stats
* [Root-Me](https://www.root-me.org/) - CTF challenges
* [VulnHub](https://www.vulnhub.com) - Vulnerable VMs
* [PentesterLab](https://pentesterlab.com/) - Security training
* [PortSwigger Web Security Academy](https://portswigger.net/web-security) - Web security training
* [Cybrary](https://www.cybrary.it/) - Security courses
* [LetsDefend](https://letsdefend.io/) - Blue team training
* [BlueTeamLabs](https://blueteamlabs.online/) - Blue team challenges
* [CyberDefenders](https://cyberdefenders.org/) - Blue team CTF
* [Hacksplaining](https://www.hacksplaining.com) - Security lessons
* [OWASP WebGoat](https://owasp.org/www-project-webgoat/) - Vulnerable web app
* [OWASP Juice Shop](https://owasp.org/www-project-juice-shop/) - Vulnerable web app
* [DVWA](https://github.com/digininja/DVWA) - Damn Vulnerable Web App
* [HackThisSite](https://www.hackthissite.org) - Hacking challenges
* [Crackmes](https://crackmes.one/) - Reverse engineering challenges
* [Pwnable.kr](https://pwnable.kr/) - Pwn challenges
* [Exploit Education](https://exploit.education/) - Exploit development
* [Hacker101](https://www.hacker101.com/) - Free web security training
* [HackerOne](https://hackerone.com/) - Bug bounty platform
* [Bugcrowd](https://www.bugcrowd.com/) - Bug bounty platform
* [Intigriti](https://www.intigriti.com/) - European bug bounty
* [YesWeHack](https://www.yeswehack.com/) - European bug bounty
* [OpenBugBounty](https://www.openbugbounty.org/) - Free bug bounty
* [TCM Security Academy](https://academy.tcm-sec.com/) - Practical security training
* [INE](https://ine.com/) - Security training

---

## Operating Systems for Cyber Security

* [Kali Linux](https://www.kali.org/get-kali/) - Penetration testing distribution
* [Parrot Security OS](https://www.parrotsec.org/) - Security distribution
* [BackBox](https://www.backbox.org/) - Ubuntu-based security distro
* [BlackArch](https://blackarch.org/) - Arch-based pentest distro
* [Tails](https://tails.boum.org/) - Privacy-focused OS
* [Qubes OS](https://www.qubes-os.org/) - Security-focused desktop
* [Whonix](https://www.whonix.org/) - Anonymous OS via Tor
* [REMnux](https://remnux.org/) - Malware analysis toolkit
* [CAINE](https://www.caine-live.net/) - Digital forensics live CD
* [PALADIN](https://sumuri.com/software/paladin/) - Forensic distribution
* [SIFT Workstation](https://www.sans.org/tools/sift-workstation/) - SANS forensic toolkit
* [Pentoo](https://www.pentoo.ch/) - Gentoo-based pentest distro
* [Santoku Linux](https://santoku-linux.com/) - Mobile forensics
* [Kali Nethunter](https://www.kali.org/docs/nethunter/) - Android Kali
* [Buscador](https://inteltechniques.com/buscador/) - OSINT virtual machine
* [Flare VM](https://github.com/mandiant/flare-vm) - Windows malware analysis VM
* [Commando VM](https://github.com/mandiant/commando-vm) - Windows pentest VM

---

## Mobile Security

* [MobSF](https://github.com/MobSF/Mobile-Security-Framework-MobSF) - Mobile security framework
* [Drozer](https://github.com/mwrlabs/drozer) - Android security assessment
* [Objection](https://github.com/sensepost/objection) - Mobile exploration
* [AndroGuard](https://github.com/androguard/androguard) - Android analysis
* [AppUse](https://appuse.org/) - Android testing platform
* [Magisk](https://github.com/topjohnwu/Magisk) - Android rooting
* [Android Studio](https://developer.android.com/studio) - Android development
* [Cydia Impactor](http://www.cydiaimpactor.com/) - iOS sideloading
* [needle](https://github.com/FSecureLABS/needle) - iOS security testing

---

## Cloud Security

* [ScoutSuite](https://github.com/nccgroup/ScoutSuite) - Multi-cloud audit
* [Prowler](https://github.com/prowler-cloud/prowler) - AWS security tool
* [CloudSploit](https://cloudsploit.com/) - Cloud security scanning
* [CloudMapper](https://github.com/duo-labs/cloudmapper) - AWS visualization
* [Nimbus](https://github.com/nimbus-team/nimbus) - Cloud security framework
* [Terraform](https://www.terraform.io/) - Infrastructure as code
* [Checkov](https://www.checkov.io/) - IaC security scanning
* [tfsec](https://github.com/aquasecurity/tfsec) - Terraform security scanner
* [kics](https://github.com/Checkmarx/kics) - Infrastructure scanner

---

## Container & Kubernetes Security

* [Docker Bench Security](https://github.com/docker/docker-bench-security) - Docker security audit
* [Kube-Bench](https://github.com/aquasecurity/kube-bench) - Kubernetes security audit
* [Kube-Hunter](https://github.com/aquasecurity/kube-hunter) - Kubernetes penetration testing
* [Falco](https://falco.org/) - Container runtime security
* [Aqua Security](https://www.aquasec.com/) - Container security platform
* [KubeLinter](https://github.com/stackrox/kube-linter) - Kubernetes configuration scanner
* [Popeye](https://github.com/derailed/popeye) - Kubernetes cluster sanitizer

---

## IoT & Firmware Security

* [Firmwalker](https://github.com/craigz28/firmwalker) - Firmware file search
* [Firmadyne](https://github.com/firmadyne/firmadyne) - Firmware emulation
* [FACT](https://github.com/fkie-cad/FACT_core) - Firmware analysis tool
* [Firmware.re](http://firmware.re/) - Online firmware scanner
* [ThingsBoard](https://thingsboard.io/) - IoT platform security

---

## Threat Hunting

* [ThreatHunting](https://github.com/ThreatHuntingProject/ThreatHunting) - Hunting techniques
* [Sigma](https://github.com/SigmaHQ/sigma) - Generic rule format
* [Kestrel](https://github.com/opencybersecurityalliance/kestrel-lang) - Threat hunting language

---

## Sandboxes & Online Scanners

* [Metadefender](https://www.metadefender.com/) - Multi-engine scanner
* [Jotti](https://virusscan.jotti.org/en) - Multi-AV scanner
* [NetworkTotal](https://www.networktotal.com/) - PCAP analysis
* [Wepawet](https://wepawet.iseclab.org/) - Malicious document scanner

---

## Security News & Feeds

* [The Hacker News](https://thehackernews.com/) - Security news
* [BleepingComputer](https://www.bleepingcomputer.com/) - Tech news
* [Krebs on Security](https://krebsonsecurity.com/) - Security blog
* [Dark Reading](https://www.darkreading.com/) - Cybersecurity news
* [SecurityWeek](https://www.securityweek.com/) - Security news
* [ThreatPost](https://threatpost.com/) - Security news
* [CSO Online](https://www.csoonline.com/) - Security news
* [Naked Security](https://nakedsecurity.sophos.com/) - Sophos blog
* [SANS ISC Diary](https://isc.sans.edu/) - Internet storm center
* [Reddit NetSec](https://www.reddit.com/r/netsec/) - Security subreddit
* [Reddit Bluelang](https://www.reddit.com/r/blueteamsec/) - Blue team subreddit

---

## Productivity Tools

* [Online Tools](https://emn178.github.io/online-tools/) - Hash/encode/decode tools
* [it-tools](https://it-tools.tech/) - Handy online tools
* [Dencode](https://dencode.com/) - Encoding/decoding
* [Unfurl](https://dfir.blog/unfurl/) - URL analysis
* [ExplainShell](https://explainshell.com/) - Command explanation
* [Canary Tokens](http://canarytokens.org/generate) - Threat detection tokens
* [Graphviz Online](https://dreampuf.github.io/GraphvizOnline/) - Graph visualization
* [Google Colab](https://colab.research.google.com/) - Python in browser
* [Compiler Explorer](https://godbolt.org/) - Online compiler
* [Decompiler.com](http://www.decompiler.com/) - Online decompiler
* [CryptPad](https://cryptpad.fr/) - Encrypted collaboration
* [Write.as](https://write.as/) - Anonymous writing
* [DeepL](https://www.deepl.com/translator) - AI translation
* [Sci-hub](https://sci-hub.st/) - Research papers
* [Libgen](https://libgen.fun/) - Free books
* [Annas Archive](https://annas-archive.li) - Book collection
* [Z-Lib](https://z-lib.org/) - Ebook library

## Kali Linux - Complete Tool Index (kali-linux-everything metapackage)

Below is the complete list of ALL tools available in Kali Linux organized by category, including tools not listed in the sections above. These are installed via `sudo apt install kali-linux-everything` or individual metapackages.

### kali-linux-headless - Default tools
* enum4linux - sudo apt install enum4linux
* enum4linux-ng - sudo apt install enum4linux-ng
* smbmap - sudo apt install smbmap
* maltego - sudo apt install maltego
* exploit-database - sudo apt install exploit-database

### kali-linux-large - Additional tools
* metagoofil - sudo apt install metagoofil
* email2phonenumber - sudo apt install email2phonenumber
* emailharvester - sudo apt install emailharvester
* linkedin2username - sudo apt install linkedin2username
* dnstracer - sudo apt install dnstracer
* dnswalk - sudo apt install dnswalk
* lbd - sudo apt install lbd
* ike-scan - sudo apt install ike-scan
* sctpscan - sudo apt install sctpscan
* dmitry - sudo apt install dmitry
* assetfinder - sudo apt install assetfinder
* finalrecon - sudo apt install finalrecon
* wpprobe - sudo apt install wpprobe
* uro - sudo apt install uro
* urlcrazy - sudo apt install urlcrazy
* uniscan-gui - sudo apt install uniscan-gui
* parsero - sudo apt install parsero
* relp - sudo apt install relp
* heartleech - sudo apt install heartleech
* CAT - sudo apt install CAT
* gvm-start - sudo apt install gvm-start
* owasp-mantra-ff - sudo apt install owasp-mantra-ff
* snmp-check - sudo apt install snmp-check
* braa - sudo apt install braa
* onesixtyone - sudo apt install onesixtyone
* tlssled - sudo apt install tlssled
* arping - sudo apt install arping
* arpwatch - sudo apt install arpwatch
* atk6-thcping6 - sudo apt install atk6-thcping6
* iputils-arping - sudo apt install iputils-arping
* apache-users - sudo apt install apache-users
* smtp-user-enum - sudo apt install smtp-user-enum
* mxcheck - sudo apt install mxcheck
* swaks - sudo apt install swaks
* 0trace.sh - sudo apt install 0trace.sh
* pspy - sudo apt install pspy
* pspy-binaries - sudo apt install pspy-binaries

### kali-linux-wireless - WiFi & Bluetooth tools
* eapmd5pass - sudo apt install eapmd5pass
* blueranger - sudo apt install blueranger
* fang - sudo apt install fang
* freeradius-wpe - sudo apt install freeradius-wpe
* freeradius - sudo apt install freeradius
* crackle - sudo apt install crackle

### kali-linux-web - Web application tools
* watobo - sudo apt install watobo
* webscarab - sudo apt install webscarab
* paros - sudo apt install paros
* wcvs - sudo apt install wcvs
* tinja - sudo apt install tinja
* sqlninja - sudo apt install sqlninja
* sqlsus - sudo apt install sqlsus
* dns-rebind - sudo apt install dns-rebind
* legba - sudo apt install legba
* thc-pptp-bruter - sudo apt install thc-pptp-bruter
* jboss-linux - sudo apt install jboss-linux
* jboss-win - sudo apt install jboss-win
* evilgrade - sudo apt install evilgrade
* xspy - sudo apt install xspy

### kali-linux-forensics - Forensics tools
* ewfacquire - sudo apt install ewfacquire
* afflib-tools - sudo apt install afflib-tools
* affcat - sudo apt install affcat
* chkrootkit - sudo apt install chkrootkit
* rkhunter - sudo apt install rkhunter
* unhide - sudo apt install unhide
* reglookup - sudo apt install reglookup
* readpe - sudo apt install readpe
* ext3grep - sudo apt install ext3grep
* ext4magic - sudo apt install ext4magic
* extundelete - sudo apt install extundelete
* magicrescue - sudo apt install magicrescue
* myrescue - sudo apt install myrescue
* recoverdm - sudo apt install recoverdm
* recoverjpeg - sudo apt install recoverjpeg
* safecopy - sudo apt install safecopy
* scrounge-ntfs - sudo apt install scrounge-ntfs
* ddrescue - sudo apt install ddrescue
* dd_rescue - sudo apt install dd_rescue
* pdfid - sudo apt install pdfid
* pdf-parser - sudo apt install pdf-parser
* caPTion - sudo apt install caPTion
* capsa - sudo apt install capsa
* netexpect - sudo apt install netexpect
* pfftools - sudo apt install pfftools
* libpst - sudo apt install libpst
* blkcalc - sudo apt install blkcalc
* blkcat - sudo apt install blkcat
* blkls - sudo apt install blkls
* blkstat - sudo apt install blkstat
* ffind - sudo apt install ffind
* fls - sudo apt install fls
* fsstat - sudo apt install fsstat
* grokevt - sudo apt install grokevt
* grokevt-addlog - sudo apt install grokevt-addlog
* grokevt-builddb - sudo apt install grokevt-builddb
* grokevt-findlogs - sudo apt install grokevt-findlogs
* grokevt-parselog - sudo apt install grokevt-parselog
* grokevt-ripdll - sudo apt install grokevt-ripdll
* hfind - sudo apt install hfind
* icat - sudo apt install icat
* ifind - sudo apt install ifind
* ils - sudo apt install ils
* img_cat - sudo apt install img_cat
* img_stat - sudo apt install img_stat
* istat - sudo apt install istat
* jcat - sudo apt install jcat
* jls - sudo apt install jls
* mactime - sudo apt install mactime
* mmcat - sudo apt install mmcat
* mmls - sudo apt install mmls
* mmstat - sudo apt install mmstat
* sigfind - sudo apt install sigfind
* sorter - sudo apt install sorter
* srch_strings - sudo apt install srch_strings
* tsk_comparedir - sudo apt install tsk_comparedir
* tsk_gettimes - sudo apt install tsk_gettimes
* tsk_loaddb - sudo apt install tsk_loaddb
* tsk_recover - sudo apt install tsk_recover

### kali-linux-pwtools - Password tools
* johnny - sudo apt install johnny
* rcrack - sudo apt install rcrack
* rcracki_mt - sudo apt install rcracki_mt
* sucrack - sudo apt install sucrack
* maskgen - sudo apt install maskgen
* policygen - sudo apt install policygen
* statsgen - sudo apt install statsgen
* twofi - sudo apt install twofi
* wordlists - sudo apt install wordlists
* sqldict - sudo apt install sqldict
* creddump7 - sudo apt install creddump7

### kali-linux-exploitation - Exploitation tools
* searchsploit - sudo apt install searchsploit
* exploitdb-papers - sudo apt install exploitdb-papers
* backdoor-factory - sudo apt install backdoor-factory
* cymothoa - sudo apt install cymothoa
* msf-nasm_shell - sudo apt install msf-nasm_shell
* one-gadget - sudo apt install one-gadget
* pompem - sudo apt install pompem
* weevely - sudo apt install weevely
* webshells - sudo apt install webshells
* webacoo - sudo apt install webacoo
* laudanum - sudo apt install laudanum
* phpggc - sudo apt install phpggc
* powercat - sudo apt install powercat
* dbd - sudo apt install dbd
* sbd - sudo apt install sbd
* dns2tcpc - sudo apt install dns2tcpc
* dns2tcpd - sudo apt install dns2tcpd
* dnscat - sudo apt install dnscat
* iodine - sudo apt install iodine
* iodine-client-start - sudo apt install iodine-client-start
* ligolo-agent - sudo apt install ligolo-agent
* ligolo-proxy - sudo apt install ligolo-proxy
* ligolo-mp - sudo apt install ligolo-mp
* ligolo-mp-client - sudo apt install ligolo-mp-client
* miredo - sudo apt install miredo
* proxytunnel - sudo apt install proxytunnel
* ptunnel - sudo apt install ptunnel
* pwnat - sudo apt install pwnat
* udptunnel - sudo apt install udptunnel
* adaptix - sudo apt install adaptix
* adaptixclient - sudo apt install adaptixclient
* adaptixserver - sudo apt install adaptixserver
* goshs - sudo apt install goshs
* raven - sudo apt install raven
* cadaver - sudo apt install cadaver
* minicom - sudo apt install minicom
* sslh - sudo apt install sslh
* termineter - sudo apt install termineter

### kali-linux-reverse - Reverse engineering tools
* rizin - sudo apt install rizin
* recstudio - sudo apt install recstudio
* ida-free - sudo apt install ida-free
* edb - sudo apt install edb
* fernflower - sudo apt install fernflower
* krakatau - sudo apt install krakatau
* dex2jar - sudo apt install dex2jar
* d2j-dex2jar - sudo apt install d2j-dex2jar
* javasnoop - sudo apt install javasnoop
* cstool - sudo apt install cstool
* floss - sudo apt install floss
* die - sudo apt install die
* uncompyle6 - sudo apt install uncompyle6
* uncomplye2.7 - sudo apt install uncomplye2.7
* pyinstxtractor - sudo apt install pyinstxtractor
* olevba - sudo apt install olevba
* peepdf - sudo apt install peepdf

### kali-linux-sdr - Software defined radio
* kalibrate - sudo apt install kalibrate
* rtl-433 - sudo apt install rtl-433
* inspectrum - sudo apt install inspectrum
* osmocom-sdr - sudo apt install osmocom-sdr
* bladerf - sudo apt install bladerf
* airspy - sudo apt install airspy

### kali-linux-nfc - NFC tools
* mfcuk - sudo apt install mfcuk
* mfoc - sudo apt install mfoc
* mfterm - sudo apt install mfterm
* mifare-classic-format - sudo apt install mifare-classic-format
* nfc-list - sudo apt install nfc-list
* nfc-mfclassic - sudo apt install nfc-mfclassic
* libnfc - sudo apt install libnfc
* nfcutils - sudo apt install nfcutils

### kali-linux-fuzzing - Fuzzing tools
* afl-fuzz - sudo apt install afl-fuzz
* bed - sudo apt install bed
* sfuzz - sudo apt install sfuzz
* generic-chunked - sudo apt install generic-chunked
* generic-listener-tcp - sudo apt install generic-listener-tcp
* generic-sender-tcp - sudo apt install generic-sender-tcp
* generic-sender-udp - sudo apt install generic-sender-udp
* dhcpig - sudo apt install dhcpig
* goldeneye - sudo apt install goldeneye
* slowhttptest - sudo apt install slowhttptest
* t50 - sudo apt install t50
* thc-ssl-dos - sudo apt install thc-ssl-dos
* iaxflood - sudo apt install iaxflood
* inviteflood - sudo apt install inviteflood
* rtpflood - sudo apt install rtpflood
* siege - sudo apt install siege
* ohrwurm - sudo apt install ohrwurm
* protos-sip - sudo apt install protos-sip

### kali-linux-voip - VoIP tools
* svmap - sudo apt install svmap
* svwar - sudo apt install svwar
* svcrash - sudo apt install svcrash
* svreport - sudo apt install svreport
* svcrack - sudo apt install svcrack
* sipsak - sudo apt install sipsak
* sipp - sudo apt install sipp
* sippts - sudo apt install sippts
* siparmyknife - sudo apt install siparmyknife
* rtpbreak - sudo apt install rtpbreak
* rtpinsertsound - sudo apt install rtpinsertsound
* rtpmixsound - sudo apt install rtpmixsound
* voiphopper - sudo apt install voiphopper
* enumiax - sudo apt install enumiax

### kali-linux-database - Database tools
* oscanner - sudo apt install oscanner
* sidguess - sudo apt install sidguess
* tnscmd10g - sudo apt install tnscmd10g
* mdb-sql - sudo apt install mdb-sql
* sqlitebrowser - sudo apt install sqlitebrowser
* mysql-workbench - sudo apt install mysql-workbench
* dbeaver - sudo apt install dbeaver

### kali-linux-cisco - Cisco tools
* cisco-torch - sudo apt install cisco-torch
* cisco-ocs - sudo apt install cisco-ocs
* cge.pl - sudo apt install cge.pl
* copy-router-config.pl - sudo apt install copy-router-config.pl
* merge-router-config.pl - sudo apt install merge-router-config.pl
* yersinia - sudo apt install yersinia

### kali-linux-sniff - Sniffing tools
* netsniff-ng - sudo apt install netsniff-ng
* hexinject - sudo apt install hexinject
* dsniff - sudo apt install dsniff
* driftnet - sudo apt install driftnet
* tcpflow - sudo apt install tcpflow
* dnschef - sudo apt install dnschef
* mitm6 - sudo apt install mitm6
* ssldump - sudo apt install ssldump
* sslsplit - sudo apt install sslsplit
* sslsniff - sudo apt install sslsniff
* ferret-sidejack - sudo apt install ferret-sidejack
* hamster-sidejack - sudo apt install hamster-sidejack
* fiked - sudo apt install fiked
* sniffjoke - sudo apt install sniffjoke
* ftest - sudo apt install ftest
* fragrouter - sudo apt install fragrouter
* arpspoof - sudo apt install arpspoof
* above - sudo apt install above
* cdp - sudo apt install cdp
* intrace - sudo apt install intrace
* netmask - sudo apt install netmask
* sara - sudo apt install sara
* tcpreplay - sudo apt install tcpreplay

### kali-linux-postexploitation - Post-exploitation
* krbrelayx - sudo apt install krbrelayx
* kerberoast - sudo apt install kerberoast
* ldeep - sudo apt install ldeep
* nbtscan - sudo apt install nbtscan
* smbclient - sudo apt install smbclient
* rdesktop - sudo apt install rdesktop
* xfreerdp - sudo apt install xfreerdp
* passing-the-hash - sudo apt install passing-the-hash
* lynis - sudo apt install lynis
* peass - sudo apt install peass
* linpeas - sudo apt install linpeas
* winpeas - sudo apt install winpeas
* unix-privesc-check - sudo apt install unix-privesc-check
* bloodyad - sudo apt install bloodyad

### kali-linux-reporting - Reporting tools
* cherrytree - sudo apt install cherrytree
* obsidian - sudo apt install obsidian
* cutycapt - sudo apt install cutycapt
* eyewitness - sudo apt install eyewitness
* witnessme - sudo apt install witnessme
* recordmydesktop - sudo apt install recordmydesktop
* redeye - sudo apt install redeye
* redeye-start - sudo apt install redeye-start
* keepnote - sudo apt install keepnote
* xmind - sudo apt install xmind
* juice-shop-start - sudo apt install juice-shop-start

### Additional Kali Tools & Utilities
* exe2hex - sudo apt install exe2hex
* macchanger - sudo apt install macchanger
* stegosuite - sudo apt install stegosuite
* ccrypt - sudo apt install ccrypt
* padbuster - sudo apt install padbuster
* gitxray - sudo apt install gitxray
* trufflehog - sudo apt install trufflehog
* python3-pip - sudo apt install python3-pip
* pwsh - sudo apt install pwsh
* shell-gpt - sudo apt install shell-gpt
* gemini-cli - sudo apt install gemini-cli
* kali-tweaks - sudo apt install kali-tweaks
* snapper-gui - sudo apt install snapper-gui
* root-terminal - sudo apt install root-terminal
* hexstrike_server - sudo apt install hexstrike_server
* arsenal-ng - sudo apt install arsenal-ng
* defectdojo - sudo apt install defectdojo
* portspoof - sudo apt install portspoof
* portspoof-start - sudo apt install portspoof-start
* raspberrypi-tools - sudo apt install raspberrypi-tools
* code-oss - sudo apt install code-oss
* sickle-pdk - sudo apt install sickle-pdk
* wixl - sudo apt install wixl
* wmic - sudo apt install wmic
* wmis - sudo apt install wmis
* pyinstaller - sudo apt install pyinstaller
* clang - sudo apt install clang
* clang++ - sudo apt install clang++
* olefile - sudo apt install olefile
* recstudio-cli - sudo apt install recstudio-cli
* exploitdb - sudo apt install exploitdb
* xfreerdp3 - sudo apt install xfreerdp3
* httrack - sudo apt install httrack
* kali-bugs - sudo apt install kali-bugs
* kali-docs - sudo apt install kali-docs
* kali-forums - sudo apt install kali-forums
* kali-www - sudo apt install kali-www
* offsec-training - sudo apt install offsec-training
* ass - sudo apt install ass

---

## License

MIT License - see the [LICENSE](LICENSE) file for details.

cyber-security-tools-for-visually-impaired

cyber-security-tools-for-visually-impaired 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

cyber-security-tools-for-visually-impaired

cyber-security-tools-for-visually-impaired 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README