x64dbg by x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

created at April 11, 2015, 8:48 p.m.

2,743 -3

43,380 +57

2,312 +2

jadx by skylot

Dex to Java decompiler

created at March 18, 2013, 5:08 p.m.

819 +0

39,533 +73

4,674 +5

dbeaver by dbeaver

Free universal database tool and SQL client

created at Oct. 21, 2015, 8:26 a.m.

510 +0

37,822 +95

3,266 +6

mitmproxy by mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

created at Feb. 16, 2010, 4:10 a.m.

623 +0

34,681 +83

3,913 +5

metasploit-framework by rapid7

Metasploit Framework

created at Aug. 30, 2011, 6:13 a.m.

2,043 -1

32,980 +48

13,736 +16

sqlmap by sqlmapproject

Automatic SQL injection and database takeover tool

created at June 26, 2012, 9:52 a.m.

1,090 -1

30,810 +56

5,557 +3

dnSpy by dnSpy

.NET debugger and assembly editor

created at July 1, 2015, 4:05 p.m.

985 +1

25,697 +32

4,936 +13

masscan by robertdavidgraham

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

created at July 28, 2013, 5:35 a.m.

655 +0

22,756 +27

2,999 +5

radare2 by radareorg

UNIX-like reverse engineering framework and command-line toolset

created at July 3, 2012, 7:42 a.m.

483 +0

19,752 +26

2,942 +3

mimikatz by gentilkiwi

A little tool to play with Windows security

created at April 6, 2014, 6:30 p.m.

913 +1

18,828 +27

3,585 +5

Ciphey by Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

created at July 16, 2019, 8:20 p.m.

236 +0

17,231 +39

1,093 +4

jd-gui by java-decompiler

A standalone Java Decompiler GUI

created at March 25, 2015, 5:28 a.m.

512 +0

13,616 +15

2,346 +3

RustScan by RustScan

🤖 The Modern Port Scanner 🤖

created at July 11, 2020, 8 p.m.

129 +1

12,822 +74

855 +2

zaproxy by zaproxy

The ZAP core project

created at June 3, 2015, 4:55 p.m.

395 +0

12,100 +28

2,198 +2

dex2jar by pxb1988

Tools to work with android .dex and java .class files

created at March 16, 2015, 9:13 a.m.

440 +0

11,939 +17

2,073 +1

PowerSploit by PowerShellMafia

PowerSploit - A PowerShell Post-Exploitation Framework

created at May 26, 2012, 4:08 p.m.

781 +0

11,552 +24

4,577 +1

amass by owasp-amass

In-depth attack surface mapping and asset discovery

created at July 10, 2018, 4:05 p.m.

208 +0

11,317 +23

1,826 -2

movies-for-hackers by k4m4

🎬 A curated list of movies every hacker & cyberpunk must watch.

created at Feb. 19, 2017, 3:24 p.m.

386 +0

10,335 +17

887 +1

binwalk by ReFirmLabs

Firmware Analysis Tool

created at Nov. 15, 2013, 8:45 p.m.

368 +0

10,240 +25

1,480 +5

juice-shop by juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

created at Sept. 19, 2014, 2:53 p.m.

156 +0

9,651 +20

9,526 +49