Linux Security Tools

OpenSSL is an open source project and provides a toolkit for Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Prowler is a security tool to perform security audits on AWS configurations. It helps to find configuration flaws and improve system hardening.

OpenVAS is a framework of several services and tools offering a vulnerability scanning and vulnerability management solution.

Faraday is collaboration tool for pentest assignments and vulnerability management. It allows integration with a number of other security tools.

Django-guardian extends the default Django permissions model. It does this by allowing permissions on each database object, adding fine-grained control.

WPScan is a security tool to perform black box WordPress vulnerability scans, including enumeration of used plugins

Cowrie is a honeypot to emulate SSH and telnet services. It can be used to learn attack methods and as an additional layer for security monitoring.

Suhosin is a security extension for PHP and consists of two parts that enhance PHP. It helps with protecting against known and unknown attacks.

Frida is a toolkit for reverse engineers, security researchers, and developers. It allows them injecting JavaScript to explore and understand the inner workings of applications on Windows, Mac, Linux, iOS, Android, and others.

LogonTracer is a tool to investigate malicious logins from Windows event logs with visualization capabilities. Read how it works in this review.

The Browser Exploitation Framework (or BeEF) is a penetration testing tool that focuses on the web browser.

Wfuzz is a security tool to do fuzzing of web applications. It is modular and can be used to discover and exploit web application vulnerabilities. This makes the tool useful for both developers as security professionals.

Angr is a security tool written in Python to allow analyzing binaries. It provides a combination of static and dynamic analysis.

Gosec is a security tool that performs a static code analysis for Golang projects for security flaws. Read how it works in this review.

MISP is short for Malware Information Sharing Platform. It helps with sharing threat data which can be used by defenders and malware researchers.