jadx
jadx is a Dex-to-Java decompiler used to read Android APK and dex packages for security reviewers, and it is free under the Apache 2.0 license.
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
osquery
osquery is a host instrumentation tool used to query operating system state for detection engineers, and it is free under the Apache 2.0 or GPL 2.0 license.
YARA-X
YARA-X is the free open-source Rust rewrite and successor of YARA, used to scan files with pattern rules and sort malware into families for malware researchers.
YARA
YARA is a pattern-matching tool used to identify and classify malware samples for malware researchers, and it is free under the BSD 3-Clause license.
Gobuster
Fast open-source Go tool for directory, DNS, virtual-host and cloud-bucket brute-forcing during authorized web and infrastructure assessments.
Mimikatz
Mimikatz is a free Windows research tool for authorized Active Directory and lab credential assessments, widely taught in HTB Academy.
Velociraptor
Velociraptor is a free open-source endpoint visibility and DFIR platform for collecting and hunting host artifacts across authorized estates.
ffuf
Fast open-source web fuzzer written in Go for directory, virtual-host and parameter discovery during authorized web assessments.
John the Ripper
Openwall John the Ripper is a free password cracker for offline hash auditing and recovery across many platforms and formats.
Autopsy
Autopsy is a free open-source digital forensics platform with a graphical interface to The Sleuth Kit for disk and artifact investigation.
Rubeus
Rubeus is a free open-source C# Kerberos toolkit from GhostPack for authorized Active Directory assessments and lab abuse-path exercises.
Nikto
Nikto is a free open-source web server scanner that checks authorized targets for dangerous files, misconfigurations and outdated software.
WPScan
WPScan is a freemium WordPress security scanner with a free CLI for authorized assessments, plus paid API plans for commercial vulnerability intelligence.
Offensive Security & PentestingFreemium
Feroxbuster
Feroxbuster is a free open-source Rust content-discovery tool for recursive web enumeration in authorized assessments and HTB-style labs.
CyberChef
CyberChef is a free open-source web app from GCHQ for encoding, decoding, hashing and transforming data during security analysis and investigations.
Cisco Duo
Cisco Duo is a freemium MFA and identity-access platform with a free tier for small teams plus paid Essentials, Advantage and Premier editions.
Identity & AccessFreemium
Zeek
Zeek is a free open-source network security monitor that passively analyses traffic into rich logs for detection, forensics and SIEM workflows.
MISP
MISP is a free open-source threat intelligence platform for collecting, correlating and sharing cyber threat indicators across trusted communities.
Ligolo-ng
Ligolo-ng is a free open-source tunneling and pivoting tool for authorized network assessments and HTB-style labs, using an agent and proxy model.
LinPEAS
LinPEAS is a free open-source Linux privilege-escalation enumerator from PEASS-ng, used in authorized pentests and HTB-style labs.
AbuseIPDB
AbuseIPDB is a freemium IP abuse reporting and reputation service with a free API tier plus paid Basic and Premium plans for higher limits.
Threat IntelligenceFreemium
Open Threat Exchange (OTX)
Open Threat Exchange (OTX) is LevelBlue's free community TI platform for sharing pulses and IoCs (formerly AlienVault OTX).
Tenzai
Commercial agentic AI penetration-testing platform that runs continuous, end-to-end application tests with reproducible exploit evidence for enterprises.
ANY.RUN
ANY.RUN is an interactive malware sandbox with a free Community tier plus paid Hunter and Enterprise plans for private, deeper analysis.