Linux Security Tools

BetterCAP is a complete, modular, portable and easily extensible MitM tool and framework. It is maintained well and appreciated by many.

Hashcat is a well-known tool to crack passwords. It has advanced features to improve performance, allow session resumption, and more.

Zeek is a network security monitoring tool (NSM) and helps with monitoring. It can also play an active rol in performing forensics and incident response.

OpenSSL is an open source project and provides a toolkit for Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Pyelftools is a Python library to parse ELF files and DWARF debugging information. It can be useful to perform dynamic binary analysis on files.

BleachBit is an open source tool focused on maintaining your privacy by cleaning up sensitive data on the system.

ntopng is the successor of the original ntop utility. It shows network usage by capturing traffic and provide insights on the usage.

OSRFramework is an open source research framework. The project helps with information gathering and can be classified as an OSINT tool.

Kubeaudit is a command line tool to audit Kubernetes clusters. It helps to test on various security risks, that may be introduced during deployment.

Patator is a security tool to perform enumeration or brute-force attempts to discover authentication details. It can be used during penetration testing.

Gosec is a security tool that performs a static code analysis for Golang projects for security flaws. Read how it works in this review.

Prowler is a security tool to perform security audits on AWS configurations. It helps to find configuration flaws and improve system hardening.

SpamScope is an advanced spam analysis tool to scan emails for unwanted messages. Read the review and see how it works.

Security Monkey monitors AWS and GCP accounts for policy changes and alerts on insecure configurations.

Seccubus automates vulnerability scanning with support for Nessus, OpenVAS, NMap, SSLyze, Medusa, SkipFish, OWASP ZAP, and SSLlabs.