flaregun

OSS Aggregator

Snort

IDS/IPS that excels at traffic analysis and packet logging on IP networks. Snort uses a flexible rule-based language to describe traffic that it should collect or pass, and a modular detection engine.

Fail2ban

Scans log files and bans IPs that show malicious signs: too many password failures, seeking for exploits, etc.

Nikto2

Web server scanner which performs comprehensive tests for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers.

w3af

Web app security scanner that identifies more than 200 vulnerabilities and reduces your site’s overall risk exposure.

Scapy

A packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer, Scapy is a low-level tool with which you interact using the Python programming language.

DNSLint

A Windows utility that helps you to diagnose common DNS name resolution issues.

maltrail

Malicious traffic detection system utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists.

Watchman

Watches (duh…) files and records when they change. It can also trigger actions (such as rebuilding assets) when matching files change.

Trend Micro Ransomware File Decryptor

As of May 21, 2017, limited decryption support for the WannaCry Ransomware has been added to this tool (primarily for Windows XP).

Umbrella

A security handbook in a free, open source app. It's up-to-date information you can trust.

gmail-pwned

A Chrome extension that checks if a received email comes from an address that's been in a data breach using the HIBP API.

PassProtect

A Chrome extension it easy for people to discover in real-time if a password they’re using has been exposed in a data breach.

HTTPS Everywhere

A browser extension that automatically makes websites use a more secure HTTPS connection instead of HTTP, if they support it.

For more security tools, please visit: