All Tools

LLM-driven pentesting copilot that chains reasoning steps with offensive tools through a REPL interface

Security-dense RAG-augmented LLM that answers infosec questions, analyzes logs, and assists incident response

NLP pipeline that turns unstructured threat reports into structured IOCs and ATT&CK-mapped TTPs

Fine-tuned open LLM purpose-built for vulnerability analysis and malware-behavior descriptions

Research framework that applies deep reinforcement learning to learn multi-step attack chains

LLM-driven exploit-chaining agent that tries to go from scan input to a proven exploit

Multi-agent AI system for vulnerability discovery

LLM agent for automated threat hunting

AI reconnaissance that learns from past pentests

Autonomous AI agent for pentesting

Adversary simulation via AI

Chatbot for security questions

AI terminal for security commands

Auto-generates nuclei templates from CVE descriptions

AI security monitoring with classification

LLM generates exploits from CVE descriptions

AI generates exploits from CVE details

AI automated exploit framework with target analysis

MCP server connecting LLMs to security tools

Guides pentesters through methodology

LLM for source code vulnerability detection

AI agent operations monitoring

Automated compliance audit with AI

Defensive AI agent for SOC triage

AI vulnerability scanner

Open-source alternative to MS Security Copilot

Multi-agent autonomous reconnaissance

ML model predicting exploited CVEs

AI agent for SOC workflows

End-to-end AI pentesting platform

AI threat hunting across endpoints, network, cloud

General-purpose security AI admin

AI assistant for OSINT and recon

Composes multi-step exploits

LLM agent with security tools

Maps controls to compliance frameworks

AI agent for automated testing

AI copilot for pentesting

Deep learning for vulnerable code

AI breach simulation

The de-facto exploitation framework — a massive library of payloads and exploit modules with a consistent console

The standard, automatic SQL injection exploitation tool — detect, fingerprint and dump databases through a vulnerable parameter

Template-driven vulnerability scanner that fires thousands of community-maintained checks against live hosts in minutes

The free edition of the industry-standard web pentest proxy — manual intercept, repeater and intruder (throttled) for hands-on testing

Python network protocol classes

Maps Active Directory attack paths so you can see — and prove — how a low-priv user becomes Domain Admin

Social engineering framework

Phishing simulation platform

OWASP\'s attack-surface mapping tool — passive, active and brute-force enumeration of an organization\'s external footprint

Web path brute-forcer

Network Swiss army knife

Post-exploitation AD tool

Library of 2000+ ATT&CK tests

Fast web fuzzer

Directory/DNS brute-forcer

Fast passive subdomain enumeration across dozens of OSINT sources — the quick way to expand a target\'s scope

HTTP prober

Rust directory brute-forcer

Automated reconnaissance pipeline

MITM phishing framework

Adversary emulation platform

Automated recon scanner

Offensive security framework

A single scanner for vulnerabilities, misconfigurations, secrets and SBOM across containers, filesystems, IaC and clouds

Automated command injection

Automated XSS detection

PHP web shell

Cross-platform RAT

HTTP/2 C2 agent

Multi-user implant framework

Modern post-exploitation framework

Collaborative red team framework

PowerShell credential extraction

Reverse proxy phishing

Phishing campaign tool

Browser exploitation framework

Kerberos abuse toolkit

BloodHound data collector

AD CS exploitation tool

Kerberos brute-forcing

LLMNR/NBT-NS poisoner

Man-in-the-middle suite

Metasploit GUI

Collaborative pentest platform

Fast port scanner

Web crawling framework

URL fetcher from Wayback Machine

Wayback Machine URL fetcher

Subdomain finder

Subdomain finder

MassDNS wrapper

DNS toolkit

Subdomain permutation generator

Parameter mining tool

Greppable patterns

CORS misconfiguration scanner

HTTP request smuggling tester

High-speed HTTP fuzzer

Authorization testing Burp ext

Unhidden parameter discovery Burp ext

Secret finder in JavaScript

JS endpoint extractor

Vulnerable JS library scanner

LLM cybersecurity assistant

AI agent for SecOps automation

AI threat modeling with attack paths

LLM source code vuln scanner

AI web app pentest agent

Multi-agent SOC automation

AI SOC triage and response

AI security code review

RAG security knowledge base

AI automated pentesting

Security automation framework

Chat security assistant

AI pentest reporting

AI alert investigation

AI threat intel analysis

AI vulnerability management

AI-powered WAF for attack detection

AI compliance mapping

AI security audit

AI pentest report generator

Chatbot for vuln discussion

AI security architecture advisor

Multi-agent security monitoring

Automated threat detection

General security AI

AI vuln prioritization advisor

AI automated exploitation

AI exploit technique advisor

AI IR automation

Agentic security platform

AI vuln remediation

AI chatbot for security

AI cloud security assessment

Agentic AI for autonomous pentesting

Open-source MS Security Copilot alt

Open-source XDR and SIEM that does agent-based threat detection, integrity monitoring and compliance across endpoints, containers and cloud

Free IDS/NSM distro

SIEM on Elastic Stack

Threat intelligence platform

Threat intel sharing platform

Endpoint visibility and DFIR at scale using VQL — query live hosts and hunt across a fleet in one language

Log aggregation for monitoring

SIEM-agnostic detection rules

High-performance IDS/IPS

The original open-source network intrusion detection system — signature-based packet analysis with a rule language the industry learned on

Network analysis framework

Packet capture and search

Open-source log management

Open-source SOAR platform

IR investigation platform

Cloud security assessment

Multi-cloud security audit

IaC security scanner

IaC security scanner by Checkmarx

Runtime security for containers

CIS K8s Benchmark scanner

Kubernetes pentest tool

Cloud compliance as code

Static analysis for 30+ languages

The open-source web app security scanner (DAST) — proxy, spider, active/passive scanning and a baseline you can CI

Code quality and security

Python security linter

JS security analysis

Java security audit plugin

Web server scanner

Digital forensics platform

File system analysis tools

The open-source memory forensics framework — analyze a RAM dump to reveal what was actually running

Windows registry analysis

Extract emails, URLs, CCs from disk images

Super timeline creation

Collaborative timeline analysis

Free IR endpoint triage

NIST-certified SCAP scanner

Infrastructure compliance as code

Web recon framework 100+ modules

Email, subdomain, name recon

Fast subdomain enumeration

Subdomain permutation tool

High-performance DNS resolver

NSA reverse engineering tool

Framework for reverse engineering

Pattern matching for malware researchers

Automated capability detection for malware

Share and search malware samples

Automated malware analysis sandbox

Command-line interface to VirusTotal

Free TLS certificates for everyone

Open-source vulnerability scanner

Industry-standard vulnerability scanner

Black-box web app scanner

Web app security scanner

Cloud security and config assessment

Open security controls assessment language

Community-driven vulnerability templates

Community Metasploit modules

Wordlist and payload database for fuzzing

Production-grade orchestration framework for role-based multi-agent systems — agents collaborate, delegate, and execute complex workflows

Microsoft's framework for building multi-agent conversational systems where agents chat, code, and negotiate solutions together

Graph-based agent runtime for building stateful, multi-step workflows with cycles, branching, and human-in-the-loop

HuggingFace's minimal agent framework that runs Code Agents — agents that plan by writing and executing Python, not by calling tools

Type-safe, Pydantic-native agent framework that gives you fully typed inputs/outputs, structured outputs, and built-in observability