OpenCTI Community Edition structures and visualises cyber threat intelligence with STIX, a knowledge graph, connectors and a GraphQL API.
Read more
Category: Security
Directory Checksum – recursively hash directory contents
Directory Checksum recursively hashes directory contents to identify changes and help diagnose Docker, BuildKit, and other OCI build-cache issues.
Read more
bitrat – fast multi-algorithm file checksum tool
bitrat is a fast command-line checksum tool supporting multiple hash algorithms, HMAC, parallel processing, and nested file hierarchies.
Read more
5 Best Free and Open Source Linux Honeypot Tools
Explore free and open source honeypot tools for detecting attacks, analysing malware, capturing credentials, and monitoring threats.
Read more
DRAKVUF Sandbox – agentless malware analysis platform
DRAKVUF Sandbox provides agentless, black-box malware analysis with a web interface, automated sandboxing and detailed behavioural reports.
Read more
paq – fast BLAKE3 file and directory hashing
paq is a fast BLAKE3 command-line tool for recursively hashing files and directories with deterministic output and parallel processing.
Read more
Nyxelf – static and dynamic ELF malware analysis
Nyxelf combines static and dynamic analysis, decompilation and a QEMU sandbox to investigate suspicious Linux ELF binaries through a graphical interface.
Read more
MISP – threat intelligence sharing and collaboration platform
MISP is a threat intelligence platform for collecting, correlating, sharing, importing, exporting and automating security intelligence.
Read more
h0neytr4p – configurable web honeypot for reconnaissance and exploits
h0neytr4p is a configurable web honeypot that lets defenders create traps for reconnaissance and exploit attempts without deploying vulnerable applications.
Read more
SentryPeer – SIP honeypot and VoIP fraud detection tool
SentryPeer is a SIP honeypot and fraud-detection tool that records hostile VoIP activity and can share collected data through peer-to-peer networking.
Read more
4 Best Free and Open Source Secret Scanning Tools
These tools typically search files and Git repositories for patterns that resemble known types of secrets.
Read more
Heralding – credentials-catching network honeypot
Heralding is a credentials-catching honeypot that emulates common authentication services and records usernames, passwords, and session data.
Read more
Dionaea – honeypot for capturing exploit and malware activity
Dionaea is a network honeypot that emulates vulnerable services, detects shellcode, captures attack activity, and supports numerous protocols.
Read more
OpenCanary – modular multi-protocol network honeypot
OpenCanary is a lightweight, modular network honeypot that emulates common services and generates alerts when attackers interact with them.
Read more
Talisman – detect sensitive data before Git commits
Talisman scans Git changesets for passwords, tokens, private keys and other sensitive data before they are committed or pushed.
Read more
WHAD Client – Wireless Protocol Exploration Framework
WHAD Client is a command-line framework for capturing, analysing, replaying and experimenting with traffic from supported wireless devices and protocols.
Read more
detect-secrets – detect and prevent secrets in source code
detect-secrets helps teams detect and prevent credentials from entering source code using baselines, plugins, filters and Git hooks.
Read more
Fluxion – Wireless Security Auditing Tool
Fluxion is a terminal-based security auditing tool for evaluating WPA and WPA2 network exposure through controlled captive-portal testing.
Read more
Gitleaks – detect secrets in Git repositories and files
Gitleaks scans Git repositories, files and standard input for passwords, API keys, tokens and other hard-coded secrets in source code.
Read more
hcxtools – Analyze Wi-Fi Capture and Hash Files
hcxtools is a command-line suite for converting, filtering and analysing wireless captures and authentication hashes during authorised security assessments.
Read more