Tools

Finds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.

Privilege escalation enumeration scripts for Linux, Windows and macOS.

NVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.

Lightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.

Maintained successor of CrackMapExec. Swiss army knife for Windows and Active Directory network pentesting.

The reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.

Online reverse shell generator for dozens of languages, with listeners and encoding.

SQL queries on blockchain data. Community dashboards.

Tool for analyzing, extracting and reverse engineering firmware.

Cyber threat intelligence management platform.

Ethereum blockchain explorer. Transaction and contract analysis.

Complete suite for WiFi audits. Capture, attack and cracking of wireless networks.

Security distribution focused on privacy and development.

Decentralized monitoring network for Web3 threat detection.

Blockchain analytics platform for investigations and compliance.

On-chain analytics with wallet labeling. Intelligence for DeFi.

The standard toolkit for web application security testing. Intercepting proxy and automated scanner.

Free and open source web security scanner. Alternative to Burp Suite with CI/CD integration.

Link analysis and data enrichment tool. Visualizes relationships between people, domains and emails.

NSA reverse engineering suite. Free and powerful decompiler, cross-platform.