Categories 🛰️ Reconnaissance22 🔎 OSINT17 🧪 Vulnerability Scanning13 🌐 Web Security25 💥 Exploitation6 🔑 Password Cracking7 🏢 Active Directory19 🕸️ Network Security20 📶 Wireless8 ☁️ Cloud Security17 📦 Container & Kubernetes14 📱 Mobile Security8 🧩 Reverse Engineering18 🦠 Malware Analysis16 🔬 Digital Forensics & DFIR16 📊 SIEM & Log Analytics10 🛡️ Detection Engineering8 🐺 Threat Hunting6 🧠 Threat Intelligence10 📡 Command & Control8 🎯 Adversary Emulation7 🧿 AI Security11 📚 Frameworks & Knowledge16
☁️ Cloud Security OfficialScoutSuite Multi-cloud security auditing across AWS, Azure, GCP and more.
Intermediate Open Source Linux Windows macOS
☁️ Cloud Security OfficialProwler Cloud security assessments and CIS benchmarks (AWS/Azure/GCP/K8s).
Intermediate Open Source Linux macOS Docker
☁️ Cloud Security OfficialPacu AWS exploitation framework for offensive cloud testing.
Advanced Open Source Linux macOS
☁️ Cloud Security OfficialCloudSploit Detect security risks in cloud infrastructure accounts.
Intermediate Open Source Linux Windows macOS
☁️ Cloud Security OfficialStratus Red Team Granular, self-contained cloud attack techniques for detection testing.
Advanced Open Source Linux Windows macOS
☁️ Cloud Security OfficialCloudTrail / Athena AWS API audit logging - the backbone of cloud incident investigation.
Intermediate Commercial Cloud
☁️ Cloud Security OfficialPMapper Model and find privilege-escalation paths in AWS IAM.
Advanced Open Source Linux Windows macOS
☁️ Cloud Security OfficialCartography Map cloud and infra assets/relationships into a graph.
Advanced Open Source Linux Docker
☁️ Cloud Security Officialenumerate-iam Enumerate the permissions of a set of AWS credentials.
Intermediate Open Source Linux Windows macOS
☁️ Cloud Security OfficialCloudMapper Analyze and visualize AWS environments.
Advanced Open Source Linux macOS
☁️ Cloud Security OfficialS3Scanner Find open S3 buckets and dump their contents.
Beginner Open Source Linux Windows macOS
☁️ Cloud Security OfficialCloudFox Find exploitable attack paths in cloud infrastructure.
Intermediate Open Source Linux Windows macOS
☁️ Cloud Security OfficialROADtools Explore and attack Azure AD (Entra ID) environments.
Advanced Open Source Linux Windows macOS
☁️ Cloud Security OfficialMicroBurst PowerShell toolkit for assessing Azure security.
Intermediate Open Source Windows
☁️ Cloud Security OfficialGraphRunner Post-exploitation toolset for Microsoft 365 / Entra via Graph.
Advanced Open Source Windows Linux
☁️ Cloud Security Officialo365spray Username enumeration and password spraying against Microsoft 365.
Intermediate Open Source Linux Windows macOS
☁️ Cloud Security OfficialGato Attack and audit GitHub Actions CI/CD pipelines.
Advanced Open Source Linux Windows macOS
Official sources only. Every link goes straight to the vendor's official website, documentation or GitHub releases. We never mirror or host binaries. Use these tools only on systems you own or are authorized to test.