Security tools
Scanners, sandboxes and firewalls that watch what software on your machine is doing.
Filters and sorting
14 results
Burp Suite Community Edition
PortSwigger's free web security testing toolkit, for intercepting, inspecting and modifying HTTP traffic by hand.
ClamAV
An open source antivirus engine, used mostly for scanning mail servers and file shares rather than desktops.
Ghidra
The NSA's reverse engineering framework, with a decompiler that turns machine code back into readable C.
hashcat
A GPU password recovery tool used for auditing how weak the password hashes in your own systems actually are.
John the Ripper
The long-running password auditing tool, whose community jumbo build supports hundreds of hash and cipher types.
Metasploit Framework
The standard open-source exploitation framework for authorised penetration testing and verifying that a vulnerability is real.
mitmproxy
An intercepting proxy that decrypts, displays and lets you modify HTTP and HTTPS traffic, with a console, a web interface and a scriptable command-line version.
Nuclei
A fast vulnerability scanner driven by YAML templates contributed by thousands of security researchers.
OpenSnitch
An interactive application firewall for Linux that asks before letting any program make an outbound connection.
Portmaster
Shows every connection each application makes and lets you block any of them, with sensible defaults already set.
Sandboxie-Plus
Runs a Windows program inside an isolated box, so whatever it writes to disk or the registry disappears afterwards.
simplewall
Puts a plain list of programs in front of the Windows Filtering Platform, so you decide what is allowed online.
sqlmap
Automates detecting and exploiting SQL injection flaws, for testing your own applications before someone else does.
x64dbg
An open-source Windows debugger for reverse engineering, with an IDA-like interface, a built-in assembler and a decompiler.
