Search Tools

The de-facto exploitation framework — a massive library of payloads and exploit modules with a consistent console

The standard, automatic SQL injection exploitation tool — detect, fingerprint and dump databases through a vulnerable parameter

Template-driven vulnerability scanner that fires thousands of community-maintained checks against live hosts in minutes

The free edition of the industry-standard web pentest proxy — manual intercept, repeater and intruder (throttled) for hands-on testing

Maps Active Directory attack paths so you can see — and prove — how a low-priv user becomes Domain Admin

OWASP\'s attack-surface mapping tool — passive, active and brute-force enumeration of an organization\'s external footprint

Fast passive subdomain enumeration across dozens of OSINT sources — the quick way to expand a target\'s scope

A single scanner for vulnerabilities, misconfigurations, secrets and SBOM across containers, filesystems, IaC and clouds

Open-source XDR and SIEM that does agent-based threat detection, integrity monitoring and compliance across endpoints, containers and cloud

Free IDS/NSM distro

Endpoint visibility and DFIR at scale using VQL — query live hosts and hunt across a fleet in one language

The original open-source network intrusion detection system — signature-based packet analysis with a rule language the industry learned on

The open-source web app security scanner (DAST) — proxy, spider, active/passive scanning and a baseline you can CI

The open-source memory forensics framework — analyze a RAM dump to reveal what was actually running

Free IR endpoint triage

Free TLS certificates for everyone