LOADING N0PERM…
Free client-side security analyzers and curated technical reference guides for security engineers, penetration testers, and DevSecOps practitioners.
Run deterministic static security audits directly in your browser. Zero data is uploaded or logged.
Parse and audit JSON Web Tokens locally in your browser. Detect alg:none bypasses, weak symmetric HMAC secrets, token expiration risks, and sensitive payload data exposure.
Static security scanner for container build definitions. Detect root user execution, unpinned base images, curl-pipe-shell risks, hardcoded secrets, and missing healthchecks.
Evaluate Kubernetes manifests against PodSecurityStandards. Detect privileged containers, hostPID/hostNetwork leaks, dangerous hostPath mounts, and wildcard RBAC policies.
Authoritative command cheats, deployment guides, and forensics methodology for production security engineering.
Linux Security Module (LSM) providing name-based Mandatory Access Control (MAC). Confines applications to specific files, network sockets, and capabilities.
Linux Kernel audit configuration utility. Controls rules for syscall telemetry, file integrity monitoring, and privilege elevation tracking.
Query tool for the Linux audit daemon logs (/var/log/audit/audit.log). Allows targeted incident response based on key, syscall, UID, or file path.
Graph analysis platform for mapping Active Directory relationships, hidden ACL paths, Kerberos delegation flaws, and domain privilege escalation routes.
Industry standard HTTP interception proxy, web security scanner, and repeater for auditing API vulnerabilities, token validation, and parameter tampering.
Command-line tool for transferring data with URLs using various protocols. Fundamental for API interaction, custom HTTP header testing, and token validation.
Flexible CLI tool for querying DNS name servers, troubleshooting record propagation, verifying DNSSEC signatures, and diagnosing zone delegations.
Command-line client for managing containers, reviewing volume boundaries, auditing seccomp/AppArmor security profiles, and configuring capability drop flags.
Fast web fuzzer written in Go. Ideal for directory discovery, API parameter fuzzing, and virtual host identification.
Open-source LLM vulnerability scanner that probes language models and AI agents for prompt injection, jailbreaks, data exfiltration, hallucination, and toxic output.
High-speed directory, DNS, vhost, and Amazon S3 bucket brute-forcing tool written in Go.
Free and open-source implementation of the OpenPGP standard (RFC 4880). Allows secure file encryption, digital signatures, and public key ring management.
Vulnerability scanner for container images and filesystems developed by Anchore. Known for fast scanning, vulnerability database caching, and Syft SBOM integration.
Smarter Dockerfile linter that helps you build best-practice Docker images by parsing Dockerfiles into an AST and checking rules against ShellCheck.
Fast and multi-purpose HTTP toolkit that allows running multiple probes using retryablehttp library, extracting titles, status codes, and tech stacks.
Active measurement tool for testing maximum achievable bandwidth on IP networks, tuning TCP buffer parameters, and assessing packet loss.
Standard packet filtering and NAT administration utility for the Linux kernel Netfilter framework.
Toolkit for validating, testing, and cracking JSON Web Tokens (RFC 7519), testing for algorithm confusion, none algorithm bypass, and weak HMAC secrets.
Diagnostic tool that lists all open files and active sockets associated with running processes in the Unix/Linux operating system.
Dynamic library call interception tool that records calls made to shared libraries by a process, providing rapid visibility into binary behavior.
Battle-tested security auditing tool for systems running Linux, macOS, or Unix. Performs in-depth security scans and hardening compliance checks.
Network Mapper for network discovery, port auditing, OS fingerprinting, and vulnerability scanning using the Nmap Scripting Engine (NSE).
Robust, commercial-grade, full-featured toolkit for general-purpose cryptography, TLS/SSL connection inspection, and X.509 certificate administration.
Open-source web application security scanner maintained by the Software Security Project. Features automated active and passive vulnerability scanning.
Task automation and configuration management framework. Features Constrained Language Mode, Script Block Logging, and AMSI security controls.
Advanced monitoring tool for Windows that shows real-time file system, Registry, and process/thread activity. Critical for malware triage and privilege troubleshooting.
C# data collector for BloodHound. Queries domain controllers via LDAP to map AD objects, group memberships, and DACLs.
Modern Linux CLI utility for investigating socket telemetry, open ports, established connections, and TCP state machine diagnostics, replacing netstat.
Diagnostic and debugging utility for Linux that monitors system calls and signals received by a process. Essential for reverse engineering and behavior triage.
Windows system service and device driver from Microsoft Sysinternals that monitors and logs system activity to the Windows event log, tracking process creation, network connections, and file changes.
High-performance CLI packet analyzer built on libpcap. Essential for headless server diagnostics, network forensics, and packet capture ingestion.
Network diagnostic utility that tracks the path taken by packets across IP networks, measuring transit delays across intermediate hops.
Comprehensive and versatile security scanner by Aqua Security. Detects CVEs, misconfigurations, exposed secrets, and SBOM licenses in container images and filesystems.
Terminal-based Wireshark engine designed for automated capture dissection, field extraction, and command-line network forensics pipelines.
World's most widely used memory forensics framework. Enables volatile memory (RAM) extraction, process tree rebuilding, and injected code detection.
World's foremost network protocol analyzer, providing deep packet inspection, protocol decoding, and interactive telemetry visualization.