Security Tools Catalog

Intercepting proxy and web app testing toolkit. The Community edition covers most manual testing; Pro adds the active scanner and Intruder at speed.

The "cyber swiss-army knife" for encoding, decoding, encryption, and data transforms — chain operations into reusable recipes entirely in-browser.

NSA-developed reverse engineering suite with a capable decompiler. A free alternative to IDA for static binary analysis and CTF reversing.

Fast directory, DNS, and vhost brute-forcing. A go-to for content discovery during web challenges and assessments.

GPU-accelerated password recovery supporting hundreds of hash types. Pairs well with rule-based and mask attacks on captured hashes.

Modular exploitation framework with a large library of exploits, payloads, and post-exploitation modules. Great for validating findings in a lab.

The de-facto network scanner for host discovery, port scanning, and service /OS fingerprinting. NSE scripts extend it into light vuln detection.

Deep packet inspection and protocol analysis. Indispensable for debugging network issues and analysing captured traffic.