THE ARSENAL

Tools

756 documented, categorized tools across 26 disciplines. Every entry links to its original project — you decide what to install.

756 results
Featured

Apify Console

Web

Cloud platform of ready-made scrapers (Actors) for social media, search engines, maps and marketplaces — run them in the browser or call them from your own code.

frameworksscrapingautomation
Frameworks
Open
Featured

Cylect.io

Web

OSINT search engine that scans the web, social media and breach data from a single query for people, emails, usernames, phone numbers and documents.

search-dorkingpeople-identityfeatured
Search & Dorking
Open
Featured

OSINT.rocks

Web

Multi-tool OSINT dashboard that chains email, phone, username, domain and IP lookups across dozens of sources in one interface.

miscpeople-identityemail-phone
Miscellaneous
Open

0xdf hacks stuff

Web

HTB writeups and pentesting writeups

learning-resources
Learning Resources
Open

abuse.ch Hunting

Web

Hunt across all abuse.ch malware platforms with one query

malware-threat-intelcurated-additionfrom-jivoi
Malware & Threat Intel
Open

AbuseIPDB

Manual

IP address reputation database

domain-ip-network
Domain, IP & Network

AD Attack & Defense

Git

Comprehensive Active Directory attack reference

red-team-offensive
Offensive Security
Open

ADS-B Exchange

Manual

Unfiltered flight tracking data

vehicle-aviation-maritime
Vehicles, Aviation & Maritime

AdvPhishing

Git

Advanced phishing tool

people-identity
People & Identity
Open

Ahmia

Manual

Clearnet search engine for dark web

dark-web
Dark Web

AhMyth Android RAT

Git

Android remote access tool

iot-devices
IoT Devices
Open

AI or Not

Web

Detect AI-generated images

image-facial
Image & Facial
Open

Aircrack-ng

APT

Wi-Fi security auditing suite

domain-ip-network
Domain, IP & Network

Aleph (OCCRP)

Manual

Global corporate & public records

company-business
Company & Business

Aletheia (image forensics)

Web

Detect manipulated/AI-generated images

image-facial
Image & Facial
Open

Alfa Network Adapters

Web

Wi-Fi adapters known to support monitor/inject mode (AWUS036ACH etc.)

hardware-hacking
Hardware Hacking
Open

Algo VPN

Git

Self-hosted cloud VPN — sets up WireGuard/IPsec automatically

vpn-privacyfree-tier:Free (self-hosted on cloud)open-source:✅
VPN & Privacy
Open

AlienVault OTX

Manual

Open threat exchange platform

malware-threat-intel
Malware & Threat Intel

altdns

Pip

Generates permutations, alterations and mutations of subdomains

domain-ip-network
Domain, IP & Network
Open

Amass

Go

In-depth DNS enumeration and network mapping

domain-ip-network
Domain, IP & Network

anew

Go

Append lines from stdin to a file only if not already there

domain-ip-network
Domain, IP & Network
Open

Anomali ThreatStream

Web

Enterprise threat intel aggregation platform

threat-intel-platforms
Threat Intel Platforms
Open

Anon-SMS

Git

Anonymous SMS sending

vpn-privacy
VPN & Privacy
Open

Anonsurf

Git

Anonymize entire OS traffic through Tor

vpn-privacy
VPN & Privacy
Open

ANY.RUN

Web

Interactive online malware sandbox

malware-threat-intelcurated-addition
Malware & Threat Intel
Open

Apktool

APT

Android APK decompiler/rebuilder

iot-devices
IoT Devices

Apollo.io

Web

B2B phone/email finder — 1200 free credits/yr

people-identitycurated-additionfrom-jivoi
People & Identity
Open

APT Groups and Operations

Web

Spreadsheet of threat actors, sponsoring countries, TTPs

malware-threat-intelcurated-additionfrom-jivoi
Malware & Threat Intel
Open

Aquatone

Go

Visual inspection of websites across hosts (HTTP screenshots, attack-surface flyovers)

domain-ip-networkcurated-addition
Domain, IP & Network
Open

Archive.today

Web

Web archive — saves snapshots even when robots.txt blocks Wayback

document-metadata
Document Metadata
Open

Arctic Shift

Git

Tool for accessing large dumps of Reddit data via API/web

username-socialcurated-additionfrom-jivoi
Username & Social
Open

ARIN WHOIS

Web

IP registration database

domain-ip-network
Domain, IP & Network
Open

Arjun

Pip

HTTP parameter discovery suite

red-team-offensive
Offensive Security
Open

Arkham Intelligence

Web

On-chain intel — labels, entities, historical flows

crypto-blockchain
Crypto & Blockchain
Open

assetfinder

Go

Find domains and subdomains related to a given domain

domain-ip-networkcurated-addition
Domain, IP & Network
Open

Atomic Red Team

Git

Library of small detection-test scripts mapped to MITRE ATT&CK

blue-team-defensive
Blue Team & Defense
Open

Attify Badge

Web

Hardware tool for IoT firmware/UART/JTAG analysis

hardware-hacking
Hardware Hacking
Open

AutoCheck

Web

Vehicle history reports

vehicle-aviation-maritime
Vehicles, Aviation & Maritime
Open

Autopsy

APT

Full digital forensics platform

document-metadata
Document Metadata

AutoRecon

Pip

Multi-threaded network reconnaissance and enumeration framework

domain-ip-networkcurated-addition
Domain, IP & Network
Open

awesome-hacking-resources

Web

Beginner-friendly hacking learning resources

learning-resources
Learning Resources
Open

awesome-incident-response

Web

Curated list of IR tools and resources

learning-resources
Learning Resources
Open

awesome-malware-analysis

Web

Curated list of malware-analysis tools

learning-resources
Learning Resources
Open

awesome-pentest

Web

Massive curated list of pentesting tools and resources

learning-resources
Learning Resources
Open

Axiom

Git

Dynamic infra framework for parallel cloud-based recon

domain-ip-network
Domain, IP & Network
Open

BackgroundChecks.com

Web

Background check aggregator (BeenVerified family)

people-identitycurated-additionfrom-jivoi
People & Identity
Open

Baidu

Web

Major Chinese search engine — essential for China-focused OSINT

search-dorkingcurated-additionfrom-jivoi
Search & Dorking
Open