Linux Security Tools

Cowrie is a honeypot to emulate SSH and telnet services. It can be used to learn attack methods and as an additional layer for security monitoring.

Hashcat is a well-known tool to crack passwords. It has advanced features to improve performance, allow session resumption, and more.

OpenSSL is an open source project and provides a toolkit for Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Gosec is a security tool that performs a static code analysis for Golang projects for security flaws. Read how it works in this review.

Angr is a security tool written in Python to allow analyzing binaries. It provides a combination of static and dynamic analysis.

Viper is a binary analysis and management framework for security researchers. It provides a way to organization your collection of malware samples and exploits.

Vault is a tool created by HashiCorp to store secrets like keys and passwords. These secrets are typically used by other software components and scripts.

Tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines

Moloch is an open source, large scale, full packet capturing, indexing, and database system. Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access.

KeePassXC is a cross-platform platform to store sensitive data like passwords, keys, and other secrets. It has a graphical user interface and is written in C++.

The mitmproxy tool allows to intercept, inspect, modify, and replay traffic flows. It may be used for pentesting, troubleshooting, or learning about SSL/TLS.

Faraday is collaboration tool for pentest assignments and vulnerability management. It allows integration with a number of other security tools.

Cryptomator is a multi-platform tool for transparent client-side encryption of your files. It is used together with cloud services to ensure you are the only one who can access the data.

BleachBit is an open source tool focused on maintaining your privacy by cleaning up sensitive data on the system.

The osquery tool allows querying your Linux, Windows, and macOS infrastructure. It can help with intrusion detection, infrastructure reliability, or compliance.