Categories π°οΈ Reconnaissance22 π OSINT17 π§ͺ Vulnerability Scanning13 π Web Security25 π₯ Exploitation6 π Password Cracking7 π’ Active Directory19 πΈοΈ Network Security20 πΆ Wireless8 βοΈ Cloud Security17 π¦ Container & Kubernetes14 π± Mobile Security8 π§© Reverse Engineering18 π¦ Malware Analysis16 π¬ Digital Forensics & DFIR16 π SIEM & Log Analytics10 π‘οΈ Detection Engineering8 πΊ Threat Hunting6 π§ Threat Intelligence10 π‘ Command & Control8 π― Adversary Emulation7 π§Ώ AI Security11 π Frameworks & Knowledge16
π SIEM & Log Analytics OfficialWazuh Open-source XDR/SIEM: agents, detection rules, FIM and dashboards.
Intermediate Open Source Linux Docker
π SIEM & Log Analytics OfficialElastic Security (ELK) Elasticsearch + Kibana for log search, detection and hunting.
Intermediate Open Source Linux Windows macOS
π SIEM & Log Analytics OfficialSplunk Industry-standard log analytics and SIEM (free tier available).
Intermediate Freemium Linux Windows macOS
π SIEM & Log Analytics OfficialGraylog Centralized log management with alerting and dashboards.
Beginner Open Source Linux Docker
π SIEM & Log Analytics OfficialMicrosoft Sentinel Cloud-native SIEM/SOAR on Azure Log Analytics + KQL.
Intermediate Commercial Cloud
π SIEM & Log Analytics OfficialSecurity Onion Free platform for NSM, log management and threat hunting.
Intermediate Open Source Linux
π SIEM & Log Analytics OfficialOpenSearch Open-source search + analytics with a security-analytics plugin.
Intermediate Open Source Linux Docker
π SIEM & Log Analytics OfficialGrafana Loki Label-based log aggregation that pairs with Grafana.
Intermediate Open Source Linux Docker
π SIEM & Log Analytics OfficialVector High-performance pipeline to collect, transform and route logs.
Intermediate Open Source Linux Windows macOS
π SIEM & Log Analytics OfficialFluent Bit Lightweight log/metric processor and forwarder.
Intermediate Open Source Linux Windows macOS
Official sources only. Every link goes straight to the vendor's official website, documentation or GitHub releases. We never mirror or host binaries. Use these tools only on systems you own or are authorized to test.