XCA is a graphical certificate and key management tool for creating certificate authorities, requests, keys and X.509 certificates.
Read more
Category: Security
REDasm – cross-platform disassembler and binary analysis tool
REDasm is a cross-platform disassembler and binary analysis tool with graphs, cross-references, type handling, patching and project support.
Read more
Dogtag PKI – enterprise certificate authority suite
Dogtag PKI is an enterprise certificate authority suite providing lifecycle management, key recovery, OCSP, ACME and EST services.
Read more
Cuckoo3 – automated malware analysis sandbox
Cuckoo3 is an automated malware analysis sandbox for testing suspicious files and links in isolated Windows environments from a Linux host.
Read more
OpenXPKI – enterprise-grade PKI management platform
OpenXPKI is an enterprise PKI platform offering certificate lifecycle management, workflows, multiple CAs, SCEP and EST.
Read more
agevault – directory encryption using age
agevault is a simple command-line directory encryption tool built around age, using passphrase-protected identities to lock and unlock vaults.
Read more
IPED – digital evidence processor and analysis tool
IPED processes and analyses digital evidence with high-performance indexing, data carving, searching, timelines, viewers and reporting tools.
Read more
SBOM Tool – scalable Software Bill of Materials generator
SBOM Tool generates and validates SPDX Software Bills of Materials for build artifacts, with component detection and CI/CD integration.
Read more
transcrypt – transparent encryption for Git repositories
transcrypt provides transparent encryption for selected files in Git repositories using Git filters and OpenSSL while preserving normal workflows.
Read more
step-ca – online certificate authority for automated certificate management
step-ca is an automated certificate authority for managing X.509 and SSH certificates, ACME services and private PKI.
Read more
UAC – Unix-like artefact collector for incident response
UAC automates forensic artefact collection from Linux and other Unix-like systems with portable, profile-driven incident response workflows.
Read more
Syft – generate Software Bills of Materials
Syft generates Software Bills of Materials from container images, filesystems and archives, with support for SPDX, CycloneDX and attestations.
Read more
Dissect – digital forensics and incident response framework
Dissect is a Python digital forensics and incident response framework for analysing forensic artefacts across disk, file system and OS formats.
Read more
5 Best Free and Open Source Threat Intelligence Platforms
Discover the best free and open source threat intelligence platforms for collecting, enriching, analysing and sharing cyber threat data.
Read more
L0p4Map – network monitoring and visualization tool
L0p4Map is a graphical network monitoring and visualization tool with Nmap integration, topology mapping, traffic analysis and alerts.
Read more
IntelOwl – threat intelligence enrichment and analysis platform
IntelOwl enriches files and observables through modular analysers, connectors, playbooks, investigations and a REST API for security teams.
Read more
HashGarten – graphical frontend for Jacksum
HashGarten is a GUI for calculating and verifying checksums, exploring hundreds of hash algorithms, and integrating with file managers.
Read more
Yeti – forensics intelligence platform for CTI and DFIR
Yeti bridges CTI and DFIR with observable search, threat relationships, enrichment, automation and custom exports for forensic investigations.
Read more
12 Best Free and Open Source Wireless Security Tools
Wireless security is the prevention of unauthorized access or damage to computers or data using wireless networks, which include Wi-Fi networks.
Read more
OpenCTI Community Edition – cyber threat intelligence knowledge platform
OpenCTI Community Edition structures and visualises cyber threat intelligence with STIX, a knowledge graph, connectors and a GraphQL API.
Read more