Nix Security Tool Box
Tool set for Information security professionals and all others
Tool overview
Wireless
- aircrack-ng
- airgeddon
- bully
- cowpatty
- dbmonster
- horst
- killerbee
- kismet
- netscanner
- pixiewps
- reaverwps
- wavemon
- wifite2
- zigpy-cli
Hardware
- cantoolz
- chipsec
- cmospwd
- esptool
- extrude
- gallia
- hachoir
- nrfutil
- packetry
- teensy-loader-cli
- termineter
- tytools
- python3Packages.angr
- python3Packages.angrop
- python3Packages.can
- python3Packages.pyi2cflash
- python3Packages.pyspiflash
Forensics
- afflib
- amoco
- acquire
- dcfldd
- ddrescue
- dislocker
- dismember
- exiv2
- ext4magic
- extundelete
- foremost
- gef
- gzrt
- hivex
- hstsparser
- noseyparker
- ntfs3g
- ntfsprogs
- nwipe
- recoverjpeg
- safecopy
- sleuthkit
- srm
- stegseek
- testdisk
- volatility3
- wipe
- xorex
Misc
- ares-rs
- badchars
- changetower
- creds
- cve-prioritizer
- doona
- exposor
- galleta
- honeytrap
- jwt-cli
- kepler
- nali
- nmap-formatter
- penelope
- pwntools
- python3Packages.pytenable
- snscrape
- sr2t
- sttr
- troubadix
Code
- bomber-go
- cargo-audit
- credential-detector
- deepsecrets
- detect-secrets
- freeze
- git-secret
- gitjacker
- gitleaks
- gitls
- gitxray
- gokart
- legitify
- osv-detector
- packj
- pip-audit
- python310Packages.safety
- search-vulns
- secretscanner
- skjold
- tell-me-your-secrets
- trufflehog
- whispers
- xeol
Smartcards
Load testing
Host
Port scanners
Web
- albedo
- arjun
- brakeman
- cameradar
- cansina
- cariddi
- cf-hero
- chopchop
- clairvoyance
- commix
- crackql
- crlfsuite
- dalfox
- dismap
- dirstalk
- dontgo403
- forbidden
- galer
- gau
- genzai
- gospider
- gotestwaf
- gowitness
- graphpython
- graphqlmaker
- graphqlmap
- graphw00f
- hakrawler
- python3Packages.hakuin
- hey
- http-server
- httpx
- nodePackages.hyperpotamus
- jaeles
- jsubfinder
- jwt-hack
- katana
- kiterunner
- mantra
- mitmproxy2swagger
- monsoon
- nikto
- nomore403
- ntlmrecon
- offat
- photon
- plecost
- scraper
- slowlorust
- snallygaster
- subjs
- swaggerhole
- uddup
- urlfinder
- wad
- webanalyze
- websecprobe
- whatweb
- wprecon
- wpscan
- wsrepl
- wuzz
- xcrawl3r
- xnlinkfinder
- xsubfind3r
Kubernetes
Mobile
- abootimg
- androguard
- apkeep
- apktool
- dex2jar
- genymotion
- ghost
- morf
- payload-dumper-go
- scrcpy
- simg2img
- trueseeing
Cloud
- cloud-nuke
- cloudfox
- ec2stepshell
- gato
- gcp-scanner
- goblob
- grimoire
- imdshift
- pacu
- poutine
- prowler
- yatas
Generic
- chrony
- clamav
- curl
- cyberchef
- dorkscout
- easyeasm
- exiflooter
- flashrom
- girsh
- gtfocli
- httpie
- hurl
- inetutils
- inxi
- ioccheck
- iproute
- iproute2
- iw
- lynx
- macchanger
- nano
- parted
- pwgen
- ronin
- spyre
- utillinux
- wget
- xh
- btop
- iftop
- iotop
- eternal-terminal
- mosh
- shellz
- certinfo-go
- cifs-utils
- freerdp
- net-snmp
- nfs-utils
- ntp
- openssh
- openvpn
- samba
- step-cli
- wireguard-go
- wireguard-tools
- xrdp
- ipcalc
- netmask
- tmux
- zellij
- cabextract
- p7zip
- unrar
- unzip
Ldap
Proxies
Services
- acltoolkit
- checkip
- ghunt
- ike-scan
- keepwn
- metasploit
- nbutools
- nuclei
- nuclei-templates
- openrisk
- osv-scanner
- uncover
- traitor
- vuls
- mx-takeover
- ruler
- swaks
- trustymail
- agneyastra
- ghauri
- laudanum
- mongoaudit
- nosqli
- pysqlrecon
- sqlmap
- sqlmc
- braa
- onesixtyone
- snmpcheck
- baboossh
- sshchecker
- ssh-audit
- ssh-mitm
- teler
- waf-tester
- wafw00f
- oshka
- terrascan
- tfsec
- chain-bench
- witness
- davtest
Password
- authoscope
- bruteforce-luks
- brutespray
- conpass
- crunch
- h8mail
- hashcat
- hashcat-utils
- hashdeep
- john
- legba
- medusa
- nasty
- ncrack
- nth
- phrasendrescher
- python3Packages.patator
- pywhisker
- sh4d0wup
- spraycharles
- thc-hydra
- truecrack
Packet generators
Tunneling
Container
Bluetooth
Tls
Traffic
- above
- dhcpdump
- dnstop
- driftnet
- dsniff
- goreplay
- joincap
- netsniff-ng
- ngrep
- secrets-extractor
- sniffglue
- tcpdump
- tcpflow
- tcpreplay
- termshark
- wireshark
- wireshark-cli
- zeek
Exploits
- exploitdb
- go-exploitdb
- keedump
- padre
- sploitscan
- lmp
- log4jcheck
- log4j-detect
- log4j-scan
- log4j-sniffer
- log4j-vuln-scanner
- logmap
Information gathering
Fuzzers
Terminals
Dns
- aiodnsbrute
- amass
- bind
- dnsenum
- dnsmon-go
- dnsmonster
- dnsrecon
- dnstake
- dnstracer
- dnstwist
- dnspeep
- dnsvalidator
- dnsx
- fierce
- findomain
- knockpy
- massdns
- subcat
- subfinder
- subprober
- subzerod
- wtfis
Windows
- adidnsdump
- adreaper
- autobloody
- azurehound
- bloodhound-py
- breads-ad
- chainsaw
- certi
- certipy
- certsync
- coercer
- donpapi
- enum4linux
- enum4linux-ng
- erosmb
- evil-winrm-py
- go365
- gomapenum
- kerbrute
- knowsmore
- lil-pwny
- nbtscan
- nbtscanner
- offensive-azure
- powerview
- pre2k
- python3Packages.lsassy
- python3Packages.pypykatz
- rdwatool
- samba
- sccmhunter
- smbmap
- smbscan
- taskhound
Voip
Network
- arp-scan
- arp-scan-rs
- arping
- arpoison
- atftp
- bandwhich
- bngblaster
- cdncheck
- evillimiter
- iperf2
- iputils
- lftp
- mdns-scanner
- mitm6
- mtr
- ncftp
- netcat-gnu
- netdiscover
- netexec
- nload
- nuttcp
- pingu
- putty
- pwnat
- responder
- route-graph
- rustcat
- sshping
- sslh
- tunnelgraf
- wbox
- whois
- yersinia