ssl-config.mozilla.org
Mozilla SSL is a developer resource for coding, documentation, communities, security research, or software tools.
Directory
Security Tools & Toolkits
Explore Security Tools & Toolkits resources in Cybersecurity.
colab.research.google.com
Google notebook environment for running Python code, experiments, data analysis, and research workflows.
pypi.org
Python package template for building command-line OSINT tools with a reusable project structure.
developer.mozilla.org
Observatory is a developer resource for coding, documentation, communities, security research, or software tools.
nvd.nist.gov
NVD is a developer resource for coding, documentation, communities, security research, or software tools.
pypi.org
Python tool that identifies hashes, emails, IPs, URLs, and other strings found in text or files.
github.com
Awesome Android Reverse Engineering is a GitHub repository or organization with source code, releases, documentation, or project resources.
anubis.techaro.lol
Anubis is a developer resource for coding, documentation, communities, security research, or software tools.
apktool.org
Apktool is a tool for reverse engineering Android apk files. It can disassemble resources to nearly original form and assemble rebuilt folders, including changing an app's permissions. It can also analyze by ripping apart resources and the manifest for inspection.
bazaar.abuse.ch
MalwareBazaar is a platform from abuse.ch and Spamhaus for sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Users can upload samples, browse the database, set alerts for newly observed malware, and use APIs to push or pull signals and automate bulk queries. Spamhaus datasets enhanced with MalwareBazaar samples are also available.
bbradar.io
BBRadar is a developer resource for coding, documentation, communities, security research, or software tools.
better-auth.com
Better Auth is a framework-agnostic authentication and authorization framework for TypeScript. It provides built-in email and password authentication, account and session management, social sign-on, two-factor authentication, and a rate limiter, and can be extended with plugins for features such as passkeys and multi-tenancy. It supports most popular frameworks and requires a database, such as SQLite, PostgreSQL, or MySQL, to store user data.
bugbountyhunting.com
BugBountyHunting.com is a community-curated resource that collects writeups, resources and content related to bug bounty hunting, described as a bug bounty hunting search engine. It aims to help beginners starting in web application security learn more about bug bounty hunting.
certalert.net
CertAlert is a developer resource for coding, documentation, communities, security research, or software tools.
certbot.eff.org
Certbot is a tool run from the command line to obtain and install HTTPS certificates. It can either be run once to get free HTTPS certificates or used with instructions generated for a server's software and system. Using it requires comfort with the command line and an HTTP website. The project is a project of the Electronic Frontier Foundation.
challenges.re
Reverse Engineering challenges is a collection of reverse engineering exercises contrived by Dennis Yurichev. The challenges are organized by level, type, architecture and operating system, with levels ranging from 1 to 3. The site also offers an about page.
crowdsec.net
CrowdSec provides curated, crowd-powered threat intelligence in the form of actionable blocklists intended to help security operations teams block malicious IPs. The site describes a global view of threat intelligence built from data from real users, servers and production environments, and lists blocklists covering aggressive IPs, specific industries and countries, and high background noise.
cutter.re
Cutter is a free and open-source reverse-engineering platform powered by Rizin, using Rizin as its core engine. It is built with Qt and C++ and provides access to Rizin features through a GUI or an integrated terminal. Its releases integrate the native Ghidra decompiler, and it includes a graph view, debugger (beta), hex editor, Python scripting engine and plugins.
cybersectools.com
CyberSecTools is a developer resource for coding, documentation, communities, security research, or software tools.
darkvisitors.com
DarkVisitors is a developer resource for coding, documentation, communities, security research, or software tools.
dnshistory.org
DNSHistory is a developer resource for coding, documentation, communities, security research, or software tools.
evervault.com
Evervault is a developer resource for coding, documentation, communities, security research, or software tools.
exploit-db.com
Exploit DB is a developer resource for coding, documentation, communities, security research, or software tools.
frida.re
Frida is a dynamic instrumentation toolkit for developers, reverse-engineers and security researchers. It lets users inject their own scripts into black box processes to hook functions and trace application code, and it runs on Windows, macOS, GNU/Linux, iOS, watchOS, tvOS, Android, FreeBSD and QNX.
Compare listed projects
Details from each project's website. Open a listing for its full overview.
APKTool
Features
- reverse engineering Android apk files Source: apktool.org
Uses
- disassemble resources to nearly original form Source: apktool.org
Bazaar
Uses
- platform from abuse.ch and Spamhaus, dedicated to sharing malware samples Source: bazaar.abuse.ch
Better Auth
Features
- framework-agnostic, universal authentication and authorization framework for TypeScript Source: better-auth.com
Limitations
- requires a database to store user data Source: better-auth.com
BugBountyHunting
Features
- collects writeups, resources and content related to bug bounty hunting Source: www.bugbountyhunting.com