CYBRARY Nmap
v7.94Nmap Project (Gordon Lyon)Host discovery, port scanning and service/version fingerprinting.
- Package
- nmap
- Runs on
- Linux · Windows
- Commands
- nmap, ncat
Tool catalog
Every package you can put on a range host, with the version the host will report. Browse before you pick a loadout, then tick what you need on the launch screen — or install it yourself from a terminal. Everything is simulated: no software is fetched and nothing executes.
50 of 50 packages
Discovery & reconnaissance
Cloud CLI (aws-compatible)
v2.15.30Range control planeEnumerate identities, keys, buckets and control-plane events.
- Package
- awscli
- Runs on
- Linux · Windows
- Commands
- aws
Packet & network traffic analysis
Wireshark
v4.2.2Wireshark Foundation (formerly Ethereal)Deep packet inspection of captured traffic.
- Package
- wireshark
- Runs on
- Linux · Windows
- Commands
- wireshark, tshark, capinfos, editcap, mergecap, dumpcap
Zeek
v6.0.3Zeek Project (formerly Bro)Network security monitoring: protocol logs, not just packets.
- Package
- zeek
- Runs on
- Linux
- Commands
- zeek, zeek-cut, zeekctl
tcpdump
v4.99.4The Tcpdump GroupCommand-line packet capture and BPF filtering.
- Package
- tcpdump
- Runs on
- Linux
- Commands
- tcpdump
Intrusion detection & network monitoring
Snort
v2.9.20Cisco / Snort ProjectSignature-based intrusion detection and prevention.
- Package
- snort
- Runs on
- Linux · Windows
- Commands
- snort
Suricata
v7.0.4Open Information Security FoundationHigh-performance IDS/IPS/NSM with EVE JSON telemetry.
- Package
- suricata
- Runs on
- Linux
- Commands
- suricata, suricatasc, suricata-update
Endpoint telemetry & host instrumentation
Sysinternals Sysmon
v15.15Microsoft SysinternalsDeep Windows endpoint telemetry: process, network, image-load, WMI.
- Package
- sysinternals-sysmon
- Runs on
- Windows
- Commands
- sysmon, sysmon64
Sysinternals Suite
v2024.06Microsoft SysinternalsProcess Explorer, Autoruns, Process Monitor, PsExec and friends.
- Package
- sysinternals-suite
- Runs on
- Windows
- Commands
- procexp, procexp64, procmon, autoruns, autorunsc, handle, tcpview, pslist, psexec
Osquery
v5.12.1Linux Foundation (originally Facebook)Query an endpoint like it's a database — SQL over host state.
- Package
- osquery
- Runs on
- Linux · Windows
- Commands
- osqueryi, osqueryctl, osqueryd
Digital forensics & reverse engineering
Volatility 3
v2.7.0Volatility FoundationMemory forensics: reconstruct processes, DLLs, network state from a dump.
- Package
- volatility3
- Runs on
- Linux · Windows
- Commands
- vol, vol.py, volatility, volatility3
Ghidra
v11.1.2National Security AgencySoftware reverse-engineering suite: disassembler and decompiler.
- Package
- ghidra
- Runs on
- Linux · Windows
- Commands
- ghidra, ghidraRun, analyzeHeadless
YARA
v4.5.1VirusTotalPattern-matching engine for classifying and identifying malware.
- Package
- yara
- Runs on
- Linux · Windows
- Commands
- yara, yarac
Threat intelligence & case management
TheHive
v5.2.7StrangeBeeCollaborative incident-response case management.
- Package
- thehive
- Runs on
- Linux
- Commands
- thehive, thehive-cli
MISP
v2.4.194MISP Project / CIRCLThreat-intel sharing platform: events, attributes, IOCs, sightings.
- Package
- misp
- Runs on
- Linux
- Commands
- misp-cli, misp
Vulnerability scanning
OpenVAS / Greenbone
v22.4.1Greenbone NetworksFree, full-featured infrastructure vulnerability assessment.
- Package
- gvm
- Runs on
- Linux
- Commands
- gvm-cli, gvm-script, openvas, greenbone-feed-sync
Probely
v2024.6Probely (Snyk)Developer-friendly SaaS DAST for web apps and APIs.
- Package
- probely-cli
- Runs on
- Linux · Windows
- Commands
- probely
Trivy
v0.53.0Aqua SecurityContainer, filesystem and IaC vulnerability scanner.
- Package
- trivy
- Runs on
- Linux
- Commands
- trivy
Web application security testing
Acunetix
v24.4Invicti SecurityCommercial web vulnerability scanner with proof-based verification.
- Package
- acunetix
- Runs on
- Linux · Windows
- Commands
- acunetix, awvs
Burp Suite
v2024.5 (Community-equivalent surface)PortSwiggerIntercepting proxy and manual web application testing workbench.
- Package
- burpsuite
- Runs on
- Linux · Windows
- Commands
- burpsuite, burp
SQLMap
v1.8.2sqlmapprojectAutomated SQL injection discovery, fingerprinting and data extraction.
- Package
- sqlmap
- Runs on
- Linux · Windows
- Commands
- sqlmap, sqlmap.py, python-sqlmap
Nikto
v2.5.0CIRT.netWeb server misconfiguration and known-issue scanner.
- Package
- nikto
- Runs on
- Linux · Windows
- Commands
- nikto, nikto.pl
Gobuster
v3.6OJ ReevesContent, DNS and virtual-host brute-force discovery.
- Package
- gobuster
- Runs on
- Linux · Windows
- Commands
- gobuster
ffuf
v2.1.0Joona HoikkalaFast web fuzzer for paths, parameters and headers.
- Package
- ffuf
- Runs on
- Linux · Windows
- Commands
- ffuf
Runtime application protection (WAAP)
Wallarm
v4.10WallarmAPI security and runtime WAAP: block attacks in front of the app.
- Package
- wallarm-node
- Runs on
- Linux
- Commands
- wallarm-cli, addnode
Data decoding, cryptanalysis & analysis
Forge Chef (CyberChef)
v10.19.4GCHQ / CyberChef communityDecode, decrypt, hash and analyze data with chained recipes.
- Package
- cyberchef
- Runs on
- Linux · Windows
- Commands
- cyberchef, chefctl, forge-chef
Steghide
v0.5.1Steghide projectRecover data hidden inside JPEG and audio carriers.
- Package
- steghide
- Runs on
- Linux · Windows
- Commands
- steghide, stegseek
zsteg
v0.2.13zed-0xffDetect LSB steganography in PNG and BMP images.
- Package
- zsteg
- Runs on
- Linux
- Commands
- zsteg
StegSolve
v1.4CaesumVisual bit-plane analysis of image carriers.
- Package
- stegsolve
- Runs on
- Linux · Windows
- Commands
- stegsolve
Audacity
v3.4.2Audacity TeamWaveform and spectrogram analysis of audio carriers.
- Package
- audacity
- Runs on
- Linux · Windows
- Commands
- audacity
ExifTool
v12.76Phil HarveyRead metadata from images, audio, PDFs and documents.
- Package
- libimage-exiftool-perl
- Runs on
- Linux · Windows
- Commands
- exiftool, exiftool.exe
Standards, guidance & secure-development tooling
OWASP toolchain (ZAP + Dependency-Check)
vZAP 2.15.0 / Dependency-Check 9.2.0OWASP FoundationOpen web security testing and dependency risk analysis, plus OWASP guidance.
- Package
- zaproxy
- Runs on
- Linux · Windows
- Commands
- zaproxy, zap-cli, dependency-check, owasp
Semgrep
v1.79.0Semgrep Inc.Lightweight static analysis with pattern-matching rules.
- Package
- semgrep
- Runs on
- Linux · Windows
- Commands
- semgrep
CBOM Scanner
v1.4.0CycloneDX CBOM community (CipherIQ / OQS Scanner alike)Cryptographic discovery and post-quantum readiness with a CycloneDX 1.6 CBOM.
- Package
- cbom-scan
- Runs on
- Linux · Windows
- Commands
- cbom-scan
Open Quantum Safe (liboqs + oqs-provider)
v0.14.0Open Quantum Safe project (Linux Foundation PQCA)Post-quantum KEMs and signatures beyond the NIST set, for comparison and testing.
- Package
- liboqs-tools
- Runs on
- Linux · Windows
- Commands
- oqs-bench, lms-tool
Exploitation frameworks
Metasploit Framework
v6.4.9Rapid7Exploit, payload and post-exploitation framework.
- Package
- metasploit-framework
- Runs on
- Linux · Windows
- Commands
- msfconsole, msfvenom, msfdb, searchsploit
BeEF
v0.5.4BeEF ProjectBrowser Exploitation Framework — hook a browser, then test what it exposes.
- Package
- beef-xss
- Runs on
- Linux
- Commands
- beef-xss, beef
Credential attack & password auditing
THC-Hydra
v9.5The Hacker's ChoiceParallel online login brute-forcing across many protocols.
- Package
- hydra
- Runs on
- Linux · Windows
- Commands
- hydra, hydra-wizard, pw-inspector
John the Ripper
v1.9.0-jumbo-1OpenwallOffline password cracker across dozens of hash formats.
- Package
- john
- Runs on
- Linux · Windows
- Commands
- john, unshadow, zip2john
Hashcat
v6.2.6hashcat.netGPU-class password recovery across hundreds of hash modes.
- Package
- hashcat
- Runs on
- Linux · Windows
- Commands
- hashcat
Aircrack-ng
v1.7Aircrack-ng ProjectWi-Fi auditing suite: capture, replay and WPA-PSK cracking.
- Package
- aircrack-ng
- Runs on
- Linux
- Commands
- aircrack-ng, airodump-ng, aireplay-ng, airmon-ng
Responder
v3.1.4Laurent GaffiéLLMNR/NBT-NS/mDNS poisoner and rogue authentication server.
- Package
- responder
- Runs on
- Linux
- Commands
- responder, MultiRelay
Mimikatz
v2.2.0 (20231121)Benjamin Delpy (gentilkiwi)Extract Windows credentials and Kerberos tickets from memory.
- Package
- mimikatz
- Runs on
- Windows
- Commands
- mimikatz
Post-exploitation & lateral movement
Impacket
v0.12.0Fortra (SecureAuth)Python classes for network protocols — the Windows/AD attack staple.
- Package
- impacket-scripts
- Runs on
- Linux · Windows
- Commands
- impacket-secretsdump, impacket-psexec, impacket-wmiexec, impacket-smbclient, impacket-GetNPUsers, impacket-GetUserSPNs, impacket-ntlmrelayx
CrackMapExec / NetExec
v1.3.0 (netexec)Porchetta Industries (community)Sweep an Active Directory estate for access, shares and quick wins.
- Package
- netexec
- Runs on
- Linux
- Commands
- crackmapexec, cme, netexec, nxc
PowerSploit
v3.0.0PowerShellMafia (archived, still widely referenced)PowerShell post-exploitation modules — the classic living-off-the-land kit.
- Package
- PowerSploit
- Runs on
- Windows
- Commands
- powersploit, invoke-allchecks, get-netuser, get-netcomputer
Atomic Red Team
v24.06Red CanaryMITRE ATT&CK-mapped atomic test harness (Invoke-AtomicTest).
- Package
- invoke-atomicredteam
- Runs on
- Linux · Windows
- Commands
- invoke-atomictest, invoke-atomic, atomic
BloodHound
v5.13.0SpecterOpsActive Directory attack-path analysis with a graph database.
- Package
- bloodhound
- Runs on
- Linux · Windows
- Commands
- bloodhound, bloodhound-python, sharphound