httptoolkit.com
HTTPToolkit is a developer resource for coding, documentation, communities, security research, or software tools.
Directory
Security Tools & Toolkits
Explore Security Tools & Toolkits resources in Cybersecurity.
iocaine.madhouse-project.org
Iocaine is an aggressive defense mechanism that tries to poison AI crawlers and other unwelcome bots by serving them garbage, rather than making them go away. It is designed to be lightweight and efficient, spending as few resources as possible while making the life of crawlers more expensive. It is intended for use together with a reverse proxy.
malshare.com
MalShare is a community-driven public malware repository that provides free access to malware samples and tooling for the information security community. The site lists recently added samples with SHA256 hashes, file types and submission sources, and offers upload, search, download and API sections along with registration.
mcaptcha.org
mCaptcha is a proof-of-work based captcha system described as privacy focused and fully automated. It states that it does not track or profile users and does not use IP addresses for rate limiting. The project offers an xCaptcha drop-in replacement, and its APIs are described as compatible with reCAPTCHA and hCaptcha. A guide covers installing the captcha on a website.
metasploit.com
Metasploit is a penetration testing framework developed as a collaboration between the open source community and Rapid7. It is used to find security issues, verify vulnerability mitigations and manage security assessments. The Metasploit Framework is open source, and Metasploit Pro is a commercial product with support. Documentation and community channels are available for help.
mitmproxy.org
mitmproxy is a free and open source interactive HTTPS proxy. It can be used to intercept, inspect, modify and replay web traffic, including HTTP/1, HTTP/2, HTTP/3, WebSockets and other SSL/TLS-protected protocols. It offers a command line interface, a graphical web interface, and a Python API for writing addons and scripts. Downloads are available for Windows, Linux, macOS and Docker.
nmap.org
Nmap is a free open source security scanner and network exploration tool available for Linux, Windows, UNIX and FreeBSD. Its documentation includes a reference guide covering command-line arguments, port scanning techniques, firewall and IDS evasion, and timing and performance, with the man page translated into 15 languages.
nslookup.io
NSLookup is a developer resource for coding, documentation, communities, security research, or software tools.
ntop.org
ntop is a developer resource for coding, documentation, communities, security research, or software tools.
open-source-security-software.net
Open Source Security Software is a developer resource for coding, documentation, communities, security research, or software tools.
osquery.io
osquery is a developer resource for coding, documentation, communities, security research, or software tools.
inventory.raw.pm
Rawsec's CyberSecurity Inventory is a developer resource for coding, documentation, communities, security research, or software tools.
remnux.org
REMnux is a Linux toolkit for reverse-engineering and analyzing malicious software. It provides a curated collection of free community-created tools for hands-on malware investigation, distributed as a virtual machine, a from-scratch install on a dedicated host or compatible Ubuntu system, and Docker images of popular analysis tools.
rizin.re
Rizin is a free and Open Source Reverse Engineering Framework. It uses a shell-like command-line environment for analyzing binaries, with automatic signature detection to match unnamed functions against FLIRT signatures. Projects for saving and loading Rizin sessions are in beta, and Cutter is Rizin's official graphical user interface. A package manager for downloading, compiling and installing plugins is still in early development.
sniffnet.net
Sniffnet is a developer resource for coding, documentation, communities, security research, or software tools.
snyk.io
Snyk is an AI security platform that secures the code AI writes, the agents it runs, and the applications it builds. It offers a developer security solution available for free or from $25/month. The platform subscription is available to small teams at a flat rate, while enterprise pricing uses prepaid credits rated per capability.
spur.us
spur.us is a developer resource for coding, documentation, communities, security research, or software tools.
ssllabs.com
SSL Labs is a non-commercial research effort by Qualys offering documents, tools and thoughts related to SSL. It provides tools to test a server's certificate and configuration, test a browser's SSL implementation, and view SSL Pulse data on how other web sites are doing. It also publishes documentation on deploying SSL/TLS correctly.
supabase.com
Supabase is a Postgres development platform for building applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Every project includes a full Postgres database, and the platform auto-generates a REST API from the database schema using PostgREST. Documentation covers connecting frameworks, building backends, extending databases and migrating existing data.
supertokens.com
SuperTokens is a developer resource for coding, documentation, communities, security research, or software tools.
test-ipv6.com
Test IPv6 tests a browser and connection for IPv6 readiness and shows the current IPv4 and IPv6 address. The site requires JavaScript and the ability to pull in cross-site scripts to perform the testing. A simple test offers a quick pass/fail for IPv4, IPv4+IPv6, and IPv6, but provides little diagnostic information.
radar.offseq.com
Threat Radar is a real-time cyber threat intelligence radar showing vulnerabilities, malware, and global cyber threats, vulnerabilities, and attack patterns. It offers a live threat feed, geographic threat distribution, a threat timeline, and a REST API for access to threat intelligence data. A free account provides 30 API requests per hour.
threatmap.checkpoint.com
ThreatMap is a developer resource for coding, documentation, communities, security research, or software tools.
unblob.org
unblob is an extraction suite that parses unknown binary blobs for more than 30 archive, compression and file-system formats. It extracts content recursively and carves out unrecognized chunks. It is free under the MIT license, offers a command line interface and can be used as a Python library. It was developed and is maintained by ONEKEY.