Kunai Sandbox isolates malware in QEMU virtual machines and records detailed system and network activity for threat analysis and detection engineering.
Read more
Category: Security
Reko – general-purpose machine code decompiler
Reko is a general-purpose machine code decompiler with broad architecture support, command-line operation and an extensible analysis engine.
Read more
Easy-RSA – command-line PKI management utility
Easy-RSA is a command-line PKI utility for creating certificate authorities, signing certificates and managing revocation with OpenSSL.
Read more
sigtool – file signing and encryption utility
sigtool is a command-line tool for signing, verifying, encrypting and decrypting files with Ed25519, X25519, AES-GCM and OpenSSH keys.
Read more
ScanCode Toolkit – scan code for licenses and software components
ScanCode Toolkit detects licenses, copyrights, packages, dependencies and vulnerabilities in source and binary code with extensive outputs.
Read more
XCA – graphical certificate and key management
XCA is a graphical certificate and key management tool for creating certificate authorities, requests, keys and X.509 certificates.
Read more
REDasm – cross-platform disassembler and binary analysis tool
REDasm is a cross-platform disassembler and binary analysis tool with graphs, cross-references, type handling, patching and project support.
Read more
Dogtag PKI – enterprise certificate authority suite
Dogtag PKI is an enterprise certificate authority suite providing lifecycle management, key recovery, OCSP, ACME and EST services.
Read more
Cuckoo3 – automated malware analysis sandbox
Cuckoo3 is an automated malware analysis sandbox for testing suspicious files and links in isolated Windows environments from a Linux host.
Read more
OpenXPKI – enterprise-grade PKI management platform
OpenXPKI is an enterprise PKI platform offering certificate lifecycle management, workflows, multiple CAs, SCEP and EST.
Read more
agevault – directory encryption using age
agevault is a simple command-line directory encryption tool built around age, using passphrase-protected identities to lock and unlock vaults.
Read more
IPED – digital evidence processor and analysis tool
IPED processes and analyses digital evidence with high-performance indexing, data carving, searching, timelines, viewers and reporting tools.
Read more
SBOM Tool – scalable Software Bill of Materials generator
SBOM Tool generates and validates SPDX Software Bills of Materials for build artifacts, with component detection and CI/CD integration.
Read more
transcrypt – transparent encryption for Git repositories
transcrypt provides transparent encryption for selected files in Git repositories using Git filters and OpenSSL while preserving normal workflows.
Read more
step-ca – online certificate authority for automated certificate management
step-ca is an automated certificate authority for managing X.509 and SSH certificates, ACME services and private PKI.
Read more
UAC – Unix-like artefact collector for incident response
UAC automates forensic artefact collection from Linux and other Unix-like systems with portable, profile-driven incident response workflows.
Read more
Syft – generate Software Bills of Materials
Syft generates Software Bills of Materials from container images, filesystems and archives, with support for SPDX, CycloneDX and attestations.
Read more
Dissect – digital forensics and incident response framework
Dissect is a Python digital forensics and incident response framework for analysing forensic artefacts across disk, file system and OS formats.
Read more
5 Best Free and Open Source Threat Intelligence Platforms
Discover the best free and open source threat intelligence platforms for collecting, enriching, analysing and sharing cyber threat data.
Read more
L0p4Map – network monitoring and visualization tool
L0p4Map is a graphical network monitoring and visualization tool with Nmap integration, topology mapping, traffic analysis and alerts.
Read more