~/tools

A curated collection of essential cybersecurity tools for penetration testing, bug bounty hunting, and security research.

Reconnaissance

Tools for information gathering and reconnaissance

Nmap

Network discovery and security auditing

Amass

In-depth attack surface mapping

Subfinder

Subdomain discovery tool

theHarvester

E-mail and subdomain harvesting

Web Application Testing

Tools for testing web application security

Burp Suite

Web vulnerability scanner and proxy

OWASP ZAP

Open source web app scanner

SQLMap

Automatic SQL injection tool

Nuclei

Fast vulnerability scanner

Exploitation

Frameworks and tools for exploitation

Metasploit

Penetration testing framework

Cobalt Strike

Adversary simulation platform

pwntools

CTF framework and exploit dev

ROPgadget

ROP chain finder

Password Attacks

Tools for password cracking and testing

Hashcat

Advanced password recovery

John the Ripper

Password security auditing

Hydra

Network logon cracker

CrackStation

Online hash lookup

Reverse Engineering

Tools for binary analysis and reverse engineering

Ghidra

NSA reverse engineering suite

IDA Pro

Interactive disassembler

radare2

Unix-like reverse engineering

Binary Ninja

Binary analysis platform

Defense & Monitoring

Tools for security monitoring and defense

Wireshark

Network protocol analyzer

Snort

Network intrusion detection

OSSEC

Host-based intrusion detection

Wazuh

Security platform and SIEM

Suggest a Tool

Know a great security tool that should be on this list? Reach out to us and we will review it for inclusion.