• Sysmon

    Sysmon, short for System Monitor, is a Windows system service and device driver that monitors and logs system activity to the Windows event log. Developed by Microsoft, Sysmon provides detailed information about process creations, network connections, and changes to file creation time. Security professionals often use Sysmon for enhanced visibility into system activities, aiding in threat detection and incident response.

  • Taipan

    Taipan is a an automated web application scanner which allows to identify web vulnerabilities in an automatic fashion. This project is the core engine of a broader project which include other components, like a web dashboard where you can manage your scan or download a PDF report and a scanner agent to run on specific host.

  • TCH Hydra

    A free and open source “proof of concept” password cracker tool. THC Hydra is available for Windows, macOS, and Linux and supports protocols such as FTP, SMTP, and HTTP-GET.

  • TCP Dump

    A free and open-source command-line network packet analyzer. Users can specify a particular filter to search for packets that match this description

  • The Sleuth Kit

    A free and open-source library of digital investigation software. The Sleuth Kit allows users to investigate disk images and analyze volume and system data

  • TheHive

    A Scalable, Open Source and Free Security Incident Response Platform. It provides a comprehensive environment for managing and responding to security incidents, offering features such as case management, task tracking, and observables analysis. TheHive is utilized by security teams to streamline incident response processes, enhance collaboration, and improve overall cybersecurity capabilities.

     

  • Threat-composer

    A simple threat modeling tool to help humans to reduce time-to-value when threat modeling.

  • TYK

    Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols.

  • Untitled Goose Tool

    Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

  • Vavkamil

    A curated list of various bug bounty tools

  • Vectr

    VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios Resources.

  • Vega

    A free and open-source web vulnerability scanner and testing platform. Vega can search for security flaws such as SQL injection, cross-site scripting, and exposure of sensitive data.