Stay up-to-date in the field of Linux security. Know your Linux security tools and practice with them in online labs.
Radare2 is a tool to perform reverse engineering on files of all types. It can be used to analyze malware, firmware, or any other type of binary files. Read how it works in this review.
Tulpar is a security tool to scan web targets for possible vulnerabilities. It checks a wide range of items and attack types for this particular purpose.
CS Suite is a security toolkit that allows scanning Amazon, Google, and Azure cloud platforms. Read how it works in this review.
Rastrea2r is a threat hunting utility for indicators of compromise (IOC) and can be used by SOC analysts and incident responders. Learn how it works in this review.
Clair is an open source container analyzer. It performs static analysis of container images and correlates their contents with public vulnerability databases.
The known_hosts_bruteforce is a script to discover hostnames from the known_hosts file. This can be useful during penetration testing or incident response.
WarBerryPi is a toolkit to provide a hardware implant during penetration testing or red teaming. Read how it works in this review.
Portspoof is a small utility with the goal to make port scanning by other much harder by showing all TCP ports as 'open' and emulating actual services.
XXSER leverages the execution of arbitrary code on the web server when an administrative user inadvertently triggers a hidden XSS payload.
pass-rotate is a library and command-line tool to rotate password on various web services. It allows for bulk changing your passwords.
Bash Scanner is a security tool that does a quick scan to see if there are vulnerable packages. It uses an external service to validate.
SubOver is a security tool to with the goal to take over subdomains. This can be used as part of security assessment or obtaining bug bounties.
Patator is a security tool to perform enumeration or brute-force attempts to discover authentication details. It can be used during penetration testing.
Karn is a tool to create AppArmor and seccomp profiles. This can be useful to restrict what applications can do for increased security.
Metasploit is a framework that consists of tools to perform security assignments. It focuses on the offensive side of security and leverages exploit modules.
DirSearch is a scanning tool to find directories and files on web applications. It is a remake of the dirsearch tool that was created by Mauro Soria.
Manticore is a binary analysis tool. It uses dynamic analysis, meaning parts of the binary will be executed and tested.
VuLnDAP is a deliberately vulnerable web application. It shows how to exploit flaws in a website based on LDAP. Learn more about the tool and how it works.
Parsero is a Python script to analyze robots.txt on web servers. It specifically looks for the Disallow entries and checks which entries might be accessible.
THC Hydra is a brute-force cracking tool for remote authentication services. It supports many protocols, including telnet, FTP, LDAP, SSH, SNMP, and others.