Awesome Hacking

Free universal database tool and SQL client

Dex to Java decompiler

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Metasploit Framework

Automatic SQL injection and database takeover tool

.NET debugger and assembly editor

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

UNIX-like reverse engineering framework and command-line toolset

A little tool to play with Windows security

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

🤖 The Modern Port Scanner 🤖

The ZAP by Checkmarx Core project

A standalone Java Decompiler GUI

In-depth attack surface mapping and asset discovery

Firmware Analysis Tool

Fast passive subdomain enumeration tool.

Tools to work with android .dex and java .class files

PowerSploit - A PowerShell Post-Exploitation Framework

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

Beautifier for javascript

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

RetDec is a retargetable machine-code decompiler based on LLVM.

Empire is a PowerShell and Python post-exploitation agent.

.NET deobfuscator and unpacker.

A list of interesting payloads, tips and tricks for bug bounty hunters.

An Open Source Java Decompiler Gui for Procyon

Free Security and Hacking eBooks

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust

A cross-version Python bytecode decompiler

Automated NoSQL database enumeration and web application exploitation tool.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

An engine to make Tor network your default gateway

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Snowman decompiler

Java decompiler, assembler, and disassembler

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

SSH man-in-the-middle tool

A tool to analyze multi-byte xor cipher

Linux Binary Exploitation

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Secure multithreaded packet sniffer

Binary data analysis and visualization tool

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

USB packet capture for Windows

Hacking Toolkit

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)