Frida
Runtime instrumentation
Hook functions, trace data flows, and validate patches at runtime.
21.4K
TOOLS
Security tools
Browse tools by research task and find the right toolchain for your work.
Hooking & dynamic analysis
Observe mobile, desktop, and runtime behavior.
Dobby
Native hooking framework
Cross-platform native hooks for function interception and patch validation.
4.8K
LSPosed
Android hooking
Runtime module framework for Android Zygisk and Xposed.
24.2K
objection
Runtime explorer
Mobile runtime exploration toolkit with one-command hooks for common APIs.
9.3K
Magisk
Root framework
Android rooting and modules with support for Zygisk and hiding features.
61.9K
Reverse engineering & binary analysis
Static analysis, decompilation, visual auditing, and scripted research.
Ghidra
Decompiler
Decompile binaries, follow cross-references, and analyze files in batches.
71.3K
radare2
Reverse engineering framework
Command-line reverse engineering for deep, scriptable analysis.
24.4K
Cutter
Reverse engineering GUI
Rizin desktop workbench for disassembly, graph views, and debugging.
19.4K
angr
Program analysis
Symbolic execution, state exploration, and automated constraint solving.
9K
x64dbg
Debugger
Windows debugger for breakpoints, tracing, and sample analysis.
49K
Binwalk
Firmware analysis
Scan firmware images, identify embedded content, and extract resources.
14.1K
jadx
Dex decompiler
Decompile Dex and APK files to Java with GUI and CLI support.
49.7K
Apktool
APK toolkit
Decompile APKs, extract resources, and rebuild packages.
25.1K
ImHex
Hex editor
Modern hex editor designed for reverse engineers.
54.3K
Detect It Easy
File identification
Identify file types, packers, and entropy across platforms.
11.2K
Packet capture & traffic analysis
Inspect protocols, debug proxies, investigate traffic, and detect intrusions.
Wireshark
Packet analyzer
Decode protocols, inspect pcaps, and locate unusual communication.
9.6K
mitmproxy
Intercepting proxy
Interactive HTTPS proxy with scriptable traffic rewriting.
44.4K
tcpdump
Packet capture
Capture packets from the command line and collect pcaps on site.
3.2K
Zeek
Network monitor
Turn network traffic into searchable logs and events.
7.8K
Suricata
IDS / IPS
High-performance traffic inspection with IDS, IPS, and NSM rules.
6.5K
Sniffnet
Traffic monitor
Cross-platform visual monitoring for network traffic.
40.1K
Vulnerability testing & scanning
Discover assets, validate findings, test web applications, and reproduce exploits.
Nmap
Network scanner
Discover hosts, scan ports, and identify services.
13.2K
Nuclei
Vulnerability scanner
Validate vulnerabilities with templates and inspect assets in batches.
29.9K
sqlmap
SQL injection
Automate SQL injection detection, validation, and evidence collection.
38K
Metasploit
Exploit framework
Modules, payloads, and workflows for reproducing vulnerabilities.
38.6K
Xray
Web scanner
Changting security assessment tool for web scanning and custom PoCs.
11.7K
ffuf
Web fuzzer
Fast web fuzzing for content discovery and directory enumeration.
16.4K
Pocsuite3
PoC framework
Open-source framework for authoring and batch-running remote vulnerability PoCs.
3.9K
Rules, encoding & passwords
Write detection rules, transform data, inspect encodings, and audit passwords.
CyberChef
Data toolkit
Browser-based encoding, decoding, transformation, and data cleanup.
35.4K
YARA
Rule engine
Describe malware families and suspicious file traits with rules.
9.8K
Hashcat
Password recovery
GPU-accelerated password recovery and hash auditing.
26.4K
John the Ripper
Password cracker
Offline password auditing for hundreds of hash and cipher types.
13.4K
Debugging & forensics
Debug samples, inspect memory, and investigate incidents.
Volatility 3
Memory forensics
Analyze system snapshots, process state, and injection traces.
4.3K
pwndbg
GDB plugin
Security-focused GDB enhancements for stack, heap, and register views.
10.7K
Autopsy
Digital forensics
Graphical disk-image analysis and file recovery platform.
3.3K
Velociraptor
Endpoint forensics
Endpoint visibility and forensic collection with VQL queries.
4.1K
Online & general-purpose toolkits
Swiss-army-knife utilities for the browser and desktop.
