Security
5,347 items in 29 lists
-
DynamoRIO dynamorio.org
Runtime code manipulation system that supports code transformations on any part of a program, while it executes.
-
Dev-Sec.io dev-sec.io
The DevSec collection helps you harden your Linux Based OS as well as MySQL, NGINX and SSH Server/Services.
-
Portswigger Web Security Academy portswigger.net
PortSwigger - A set of materials and labs to learn and exploit common web vulnerabilities.
-
Hudson Rock hudsonrock.com
A Free cybercrime intelligence toolset that can indicate if a specific APK package was compromised in an Infostealer malware attack.
-
repo-supervisor github.com
Auth0 - Secrets scanning tool that can run as a CLI, as a Docker container or in AWS Lambda.
-
TheHive thehive-project.org
Scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.
-
PagerDuty Incident Response Documentation response.pagerduty.com
Documents that describe parts of the PagerDuty Incident Response process. It provides information not only on preparing for an incident, but also what to do during and after. Source is available on GitHub.
-
Security Weekly securityweekly.com
Excellent podcast covering all ranges of security, with some episodes focusing portions on vehicle security from cars to drones.
-
Red Pitaya redpitaya.com
Replaces expensive measurement tools such as oscilloscopes, signal generators, and spectrum analyzers. Red Pitaya has LabView and Matlab interfaces, and you can write your own tools and applications for it. It even supports extensions for things like Arduino shields.
-
HackerSDR greatscottgadgets.com
A Software Defined Radio peripheral capable of transmission or reception of radio signals from 1 MHz to 6 GHz. Designed to enable test and development of modern and next generation radio technologies.
-
"Hopping on the CAN Bus" from BlackHat Asia 2015 blackhat.com
A talk from BlackHat Asia 2015 that aims to enable the audience to "gain an understanding of automotive systems, but will also have the tools to attack them".
-
Redline fireeye.com
Provides host investigative capabilities to users to find signs of malicious activity through memory and file analysis, and the development of a threat assessment profile.
-
CFR benf.org
Java decompiler
-
ViruSign virussign.com
Giant database dedicated to combating malware in the digital world.
-
VirusShare virusshare.com
Virus online database with more than 44 millions of samples.
-
urlscan.io urlscan.io
-
tcpxtract tcpxtract.sourceforge.net
is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and footers (sometimes called "carving") is an age old data recovery technique.
-
tcpick tcpick.sourceforge.net
is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the…
-
SecurityTrails securitytrails.com
Web based archive for WHOIS and DNS records. REST API available free of charge.
-
Privoxy privoxy.org
-
TrID mark0.net
Utility for identifying file types from their binary signatures.
-
Malshare malshare.com
Free Malware repository providing researchers access to samples, malicious feeds, and Yara results.
-
Internet Storm Center (DShield) isc.sans.edu
the ISC run a regular podcast going into the latest vulnerabilities and security news.
-
Hybrid Analysis hybrid-analysis.com
Free powerful online sandbox by CrowdStrike.
-
PEview wjradburn.com
A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files
-
JAD varaneckas.com
JAD Java Decompiler (closed-source, unmaintained)
-
Shodan shodan.io
A web-crawling search engine that lets users search for various types of servers connected to the internet.
-
OllyDbg ollydbg.de
A 32-bit assembler level analysing debugger for Windows
-
usbmon kernel.org
USB capture for Linux.
-
cutter github.com
a decompiler based on radare2.
-
OWASP Juice Shop github.com
OWASP - A web application containing the OWASP Top 10 security vulnerabilities and more.
-
peepdf eternal-todo.com
-
CRITs crits.github.io
Web-based tool which combines an analytic engine with a cyber threat database.
-
Contagio contagiodump.blogspot.com
Collection of the latest malware samples, threats, observations, and analyses.
-
CAINE caine-live.net
CAINE is a Ubuntu-based app that offers a complete forensic environment that provides a graphical interface. This tool can be integrated into existing software tools as a module. It automatically extracts a timeline from RAM.
-
chkrootkit chkrootkit.org
-
procyon bitbucket.org
Java decompiler
-
WebHacking webhacking.kr
Hacking challenges for web.
-
CTF Field Guide trailofbits.github.io
Field Guide by Trails of Bits.
-
Swftools swftools.org
Collection of utilities to work with SWF files.
-
Exif Tool sno.phy.queensu.ca
Read, write and edit file metadata.
-
SmashTheStack smashthestack.org
A variety of wargames maintained by the SmashTheStack Community.
-
Shell Storm shell-storm.org
CTF challenge archive maintained by Jonathan Salwan.
-
Reversin.kr reversing.kr
Reversing challenge.
-
Request Bin requestbin.com
Lets you inspect http requests to a particular url.
-
Pwnable.kr pwnable.kr
Pwn Game.
-
BurpSuite portswigger.net
A graphical tool to testing website security.
-
PentesterLab pentesterlab.com
Variety of VM and online challenges (paid).
-
John The Ripper openwall.com
Password Cracker.
-
IDA Pro hex-rays.com
Most used Reversing software.
- next page of items loading…
