Directory
Published directory entries matching your search.
Hitch is a scalable, open source SSL/TLS proxy based on libev. It handles large numbers of connections on multicore machines, supports TLS 1.0, 1.1 and 1.2, and is the successor of the Stud project. It is licensed under a 2-clause BSD license and has been tested on Linux.
MalShare is a community-driven public malware repository that provides free access to malware samples and tooling for the information security community. The site lists recently added samples with SHA256 hashes, file types and submission sources, and offers upload, search, download and API sections along with registration.
Metasploit is a penetration testing framework developed as a collaboration between the open source community and Rapid7. It is used to find security issues, verify vulnerability mitigations and manage security assessments. The Metasploit Framework is open source, and Metasploit Pro is a commercial product with support. Documentation and community channels are available for help.
ZAP, the Zed Attack Proxy, is a free and open source web app scanner maintained as a community project. It provides options for security automation, including packaged scans and an automation framework, and a marketplace of community-contributed add-ons.
MalwareBazaar is a platform from abuse.ch and Spamhaus for sharing malware samples with the infosec community, antivirus vendors, and threat intelligence providers. Users can upload samples, browse the database, set alerts for newly observed malware, and use APIs to push or pull signals and automate bulk queries. Spamhaus datasets enhanced with MalwareBazaar samples are also available.
BugBountyHunting.com is a community-curated resource that collects writeups, resources and content related to bug bounty hunting, described as a bug bounty hunting search engine. It aims to help beginners starting in web application security learn more about bug bounty hunting.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.
REMnux is a Linux toolkit for reverse-engineering and analyzing malicious software. It provides a curated collection of free community-created tools for hands-on malware investigation, distributed as a virtual machine, a from-scratch install on a dedicated host or compatible Ubuntu system, and Docker images of popular analysis tools.
ThreatFox is a project from abuse.ch and Spamhaus for sharing indicators of compromise associated with malware with the infosec community, AV vendors and cyber threat intelligence providers. Users can upload IOCs, browse the database, and use APIs to push and pull signals and automate bulk queries. Spamhaus datasets are enhanced with malware samples from ThreatFox.
