Categories 🛰️ Reconnaissance22 🔎 OSINT17 🧪 Vulnerability Scanning13 🌐 Web Security25 💥 Exploitation6 🔑 Password Cracking7 🏢 Active Directory19 🕸️ Network Security20 📶 Wireless8 ☁️ Cloud Security17 📦 Container & Kubernetes14 📱 Mobile Security8 🧩 Reverse Engineering18 🦠 Malware Analysis16 🔬 Digital Forensics & DFIR16 📊 SIEM & Log Analytics10 🛡️ Detection Engineering8 🐺 Threat Hunting6 🧠 Threat Intelligence10 📡 Command & Control8 🎯 Adversary Emulation7 🧿 AI Security11 📚 Frameworks & Knowledge16
🔬 Digital Forensics & DFIRVolatility 3 The de-facto memory forensics framework.
Advanced Open Source Linux Windows macOS
🔬 Digital Forensics & DFIRAutopsy GUI digital forensics platform on top of The Sleuth Kit.
Beginner Open Source Windows Linux macOS
🔬 Digital Forensics & DFIRVelociraptor Endpoint visibility and IR at scale via VQL hunts.
Advanced Open Source Linux Windows macOS
🔬 Digital Forensics & DFIRKAPE Kroll Artifact Parser & Extractor for fast triage collection.
Intermediate Freemium Windows
🔬 Digital Forensics & DFIRPlaso / log2timeline Build super-timelines from disparate forensic artifacts.
Advanced Open Source Linux Windows macOS
🔬 Digital Forensics & DFIREric Zimmerman's Tools Essential Windows artifact parsers (MFT, registry, shellbags…).
Intermediate Free Windows
🔬 Digital Forensics & DFIRFTK Imager Create forensic disk images and preview evidence.
Beginner Free Windows
🔬 Digital Forensics & DFIRRegRipper Extract and parse data from Windows registry hives.
Intermediate Open Source Windows Linux
🔬 Digital Forensics & DFIRbulk_extractor Carve emails, cards and artifacts from disk images fast.
Intermediate Open Source Linux Windows
🔬 Digital Forensics & DFIRTimesketch Collaborative forensic timeline analysis.
Advanced Open Source Linux Docker
🔬 Digital Forensics & DFIRiLEAPP / ALEAPP Parse iOS/Android logs, events and artifacts.
Intermediate Open Source Linux Windows macOS
🔬 Digital Forensics & DFIRHindsight Parse web-browser artifacts (history, cache, cookies).
Beginner Open Source Linux Windows macOS
🔬 Digital Forensics & DFIRCyLR Fast live-response artifact collector for Windows.
Beginner Open Source Windows
🔬 Digital Forensics & DFIRUAC Unix-like Artifacts Collector for live IR triage.
Beginner Open Source Linux macOS
🔬 Digital Forensics & DFIRdissect Fox-IT's incident-response framework for parsing forensic artifacts at scale.
Advanced Open Source Linux Windows macOS
🔬 Digital Forensics & DFIRTurbinia Automate and scale forensic processing of evidence.
Advanced Open Source Linux Cloud
Official sources only. Every link goes straight to the vendor's official website, documentation or GitHub releases. We never mirror or host binaries. Use these tools only on systems you own or are authorized to test.
