sqlmap by sqlmapproject

Automatic SQL injection and database takeover tool

created at June 26, 2012, 9:52 a.m.

1,091 +1

30,754 +64

5,554 +5

jadx by skylot

Dex to Java decompiler

created at March 18, 2013, 5:08 p.m.

819 +0

39,460 +78

4,669 +9

masscan by robertdavidgraham

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

created at July 28, 2013, 5:35 a.m.

655 +0

22,729 +26

2,994 +4

radare2 by radareorg

UNIX-like reverse engineering framework and command-line toolset

created at July 3, 2012, 7:42 a.m.

483 +0

19,726 +48

2,939 +1

john by openwall

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

created at Dec. 16, 2011, 7:43 p.m.

261 +0

9,372 +24

2,003 +5

CTFd by CTFd

CTFs as you need them

created at Jan. 1, 2015, 5:36 a.m.

114 +0

5,358 +18

1,975 +8

ctf-tools by zardus

Some setup scripts for security research tools.

created at May 7, 2015, 11:02 a.m.

294 +0

8,190 +17

1,861 +2

pwntools by Gallopsled

CTF framework and exploit development library

created at April 29, 2013, 2:43 p.m.

290 -1

11,547 +20

1,660 +2

binwalk by ReFirmLabs

Firmware Analysis Tool

created at Nov. 15, 2013, 8:45 p.m.

368 -1

10,215 +21

1,475 +2

z3 by Z3Prover

The Z3 Theorem Prover

created at March 26, 2015, 6:16 p.m.

181 +0

9,803 +20

1,448 +1

bettercap by bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

created at Jan. 7, 2018, 3:30 p.m.

413 +1

15,765 +26

1,412 +1

fbctf by facebookarchive

Platform to host Capture the Flag competitions

created at March 14, 2016, 5:42 p.m.

390 +0

6,513 +2

1,318 +0

volatility by volatilityfoundation

An advanced memory forensics framework

created at April 24, 2014, 3:45 p.m.

308 +0

6,956 +8

1,249 -3

UglifyJS by mishoo

JavaScript parser / mangler / compressor / beautifier toolkit

created at Aug. 15, 2010, 11:51 a.m.

275 +0

12,949 +1

1,239 +0

w3af by andresriancho

w3af: web application attack and audit framework, the open source web vulnerability scanner.

created at Aug. 31, 2011, 11:20 p.m.

193 +0

4,460 +5

1,207 +0

androguard by androguard

Reverse engineering and pentesting for Android applications

created at Sept. 12, 2014, 8:48 a.m.

240 +0

4,975 +11

1,044 +1

angr by angr

A powerful and user-friendly binary analysis platform!

created at Aug. 6, 2015, 9:46 p.m.

185 +0

7,258 +15

1,041 +2

RsaCtfTool by RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

created at March 7, 2015, 5:29 p.m.

67 +0

5,300 +17

889 -1

pwndbg by pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

created at Feb. 22, 2015, 9:35 p.m.

139 +0

6,815 +30

841 +1

objection by sensepost

📱 objection - runtime mobile exploration

created at June 29, 2017, 11:21 a.m.

160 +0

7,052 +22

814 +3