Directory
Published directory entries matching your search.
MalShare is a community-driven public malware repository that provides free access to malware samples and tooling for the information security community. The site lists recently added samples with SHA256 hashes, file types and submission sources, and offers upload, search, download and API sections along with registration.
mCaptcha is a proof-of-work based captcha system described as privacy focused and fully automated. It states that it does not track or profile users and does not use IP addresses for rate limiting. The project offers an xCaptcha drop-in replacement, and its APIs are described as compatible with reCAPTCHA and hCaptcha. A guide covers installing the captcha on a website.
Mess with dns is a site for hands-on DNS experiments, offering a subdomain at {{ domain }}.messwithdns.com where records can be added and edited. A live updating list shows requests for the subdomain's records, presented as a low-consequence way to learn by experimenting and breaking things.
Metasploit is a penetration testing framework developed as a collaboration between the open source community and Rapid7. It is used to find security issues, verify vulnerability mitigations and manage security assessments. The Metasploit Framework is open source, and Metasploit Pro is a commercial product with support. Documentation and community channels are available for help.
mitmproxy is a free and open source interactive HTTPS proxy. It can be used to intercept, inspect, modify and replay web traffic, including HTTP/1, HTTP/2, HTTP/3, WebSockets and other SSL/TLS-protected protocols. It offers a command line interface, a graphical web interface, and a Python API for writing addons and scripts. Downloads are available for Windows, Linux, macOS and Docker.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.
Nmap is a free open source security scanner and network exploration tool available for Linux, Windows, UNIX and FreeBSD. Its documentation includes a reference guide covering command-line arguments, port scanning techniques, firewall and IDS evasion, and timing and performance, with the man page translated into 15 languages.
OpenCVE is a searchable database of CVEs and security vulnerabilities, showing results with vendor, product, update date and CVSS scores. It also offers example searches such as CVEs in KEV and CVEs with high EPSS scores.
A project providing Markdown templates for Offensive Security exam reports, covering exams including OSCP, OSWE, OSCE, OSEE and OSWP. It aims to replace LaTeX, Microsoft Office Word and LibreOffice Writer for report writing. Report generation uses a script and requires Pandoc, LaTeX and p7zip. Optional Pandoc Lua filters can be passed.
Proxy Check is a proxy detection API offered under free and paid plans. It provides IP data such as network, privacy and operator information, and the documentation describes a v3 API with support for the v2 API until 2035.
A notice recommending that users avoid GShade and use normal ReShade instead. It states that GShade's developer added code to reboot computers when a third-party app managed updates, as an anti-tamper measure. The notice says the app stopped working after removal from GitHub and is back online now.
REMnux is a Linux toolkit for reverse-engineering and analyzing malicious software. It provides a curated collection of free community-created tools for hands-on malware investigation, distributed as a virtual machine, a from-scratch install on a dedicated host or compatible Ubuntu system, and Docker images of popular analysis tools.
Ndiff is a tool that compares Nmap scans. It takes two Nmap XML output files and prints the differences between them, such as hosts coming up and down and ports becoming open or closed. It can produce human-readable text or machine-readable XML output and is used by the Zenmap GUI to compare scan results.
ReversingBits helps developers write, search, review, test, or manage code and projects.
Rizin is a free and Open Source Reverse Engineering Framework. It uses a shell-like command-line environment for analyzing binaries, with automatic signature detection to match unnamed functions against FLIRT signatures. Projects for saving and loading Rizin sessions are in beta, and Cutter is Rizin's official graphical user interface. A package manager for downloading, compiling and installing plugins is still in early development.
ROP Emporium teaches return-oriented programming through a series of challenges, starting with ret2win and progressing through topics such as split, callme, write4, badchars, fluff, pivot and ret2csu. A beginners' guide is available.
Security Onion Solutions, LLC is the creator and maintainer of Security Onion, a free and open platform for threat hunting, network security monitoring and log management. It bundles free and open tools including Suricata, Zeek and the Elastic Stack, and the company sells products and services that fund development.
SSL For Free issues free SSL and wildcard certificates through ZeroSSL, including via ACME, a web app and a REST API. It offers paid Basic, Premium and Business packages with monthly or yearly billing, plus tutorials for installing certificates on various server and hosting platforms. Private keys are generated and encrypted on the user's device.
SSL Labs is a non-commercial research effort by Qualys offering documents, tools and thoughts related to SSL. It provides tools to test a server's certificate and configuration, test a browser's SSL implementation, and view SSL Pulse data on how other web sites are doing. It also publishes documentation on deploying SSL/TLS correctly.
Supabase is a Postgres development platform for building applications with a Postgres database, Authentication, instant APIs, Realtime, Functions, Storage and Vector embeddings. Every project includes a full Postgres database, and the platform auto-generates a REST API from the database schema using PostgREST. Documentation covers connecting frameworks, building backends, extending databases and migrating existing data.
Test IPv6 tests a browser and connection for IPv6 readiness and shows the current IPv4 and IPv6 address. The site requires JavaScript and the ability to pull in cross-site scripts to perform the testing. A simple test offers a quick pass/fail for IPv4, IPv4+IPv6, and IPv6, but provides little diagnostic information.
Threat Radar is a real-time cyber threat intelligence radar showing vulnerabilities, malware, and global cyber threats, vulnerabilities, and attack patterns. It offers a live threat feed, geographic threat distribution, a threat timeline, and a REST API for access to threat intelligence data. A free account provides 30 API requests per hour.
ThreatFox is a project from abuse.ch and Spamhaus for sharing indicators of compromise associated with malware with the infosec community, AV vendors and cyber threat intelligence providers. Users can upload IOCs, browse the database, and use APIs to push and pull signals and automate bulk queries. Spamhaus datasets are enhanced with malware samples from ThreatFox.
unblob is an extraction suite that parses unknown binary blobs for more than 30 archive, compression and file-system formats. It extracts content recursively and carves out unrecognized chunks. It is free under the MIT license, offers a command line interface and can be used as a Python library. It was developed and is maintained by ONEKEY.
