awesome-security-tools

List of dope security tools that exist

Fuzzing

Tool	Description	License
afl++	The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!	Apache-2.0 license
honggfuzz	Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)	Apache-2.0 license

|

Scanners

Tool	Description	License
trivy	Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	Apache-2.0 license
grype	A vulnerability scanner for container images and filesystems	Apache-2.0 license
syft	CLI tool and library for generating a Software Bill of Materials from container images and filesystems	Apache-2.0 license
openvas-scanner	Scanner component for Greenbone Community Edition.	GPL-2.0 and Unknown licenses
nmap	Network mapper - network discovery and security auditing	Custom License

Cyberdeception

Tool	Description	License
cowrie	Cowrie SSH/Telnet Honeypot	Custom License

Reverse Engineering

Tool	Description	License
ghidra	Software Reverse Engineering (SRE) framework	Apache-2.0 license
radare2	UNIX-like reverse engineering framework and command-line toolset	LGPL-3.0 and GPL-3.0 licenses

Incident Response

Tool	Description	License
RITA (Real Intelligence Threat Analytics)	Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.	GPL-3.0 license

Online Resources

Tool	Description
MXToolbox	TODO
BlacklistMaster	TODO
urlscan.io	TODO

Examples

• Know how to use a tool? Show off by creating a directory and a knowledge