\ud83d\udd38 PuTTY<\/strong><\/a> – is an SSH and telnet client, developed originally by Simon Tatham. \ud83d\udd38 dnsdiag<\/strong><\/a> – is a DNS diagnostics and performance measurement tools. \ud83d\udd38 curl<\/strong><\/a> – is a command line tool and library for transferring data with URLs. \ud83d\udd38 openssl<\/strong><\/a> – is a robust, commercial-grade, and full-featured toolkit for the TLS and SSL protocols. \ud83d\udd38 SELinux<\/strong><\/a> – provides a flexible Mandatory Access Control (MAC) system built into the Linux kernel. <\/p>\n\n\n\n \ud83d\udd38 Nipe<\/strong><\/a> – script to make Tor Network your default gateway. \ud83d\udd38 Wireshark<\/strong><\/a> – is the world\u2019s foremost and widely-used network protocol analyzer. \ud83d\udd38 SSL\/TLS Capabilities of Your Browser<\/strong><\/a> – test your browser’s SSL implementation. \ud83d\udd38 SSLLabs Server Test<\/strong><\/a> – performs a deep analysis of the configuration of any SSL web server.
\ud83d\udd38 Mosh<\/strong><\/a> – is a SSH wrapper designed to keep a SSH session alive over a volatile connection.
\ud83d\udd38 Eternal Terminal<\/strong><\/a> – enables mouse-scrolling and tmux commands inside the SSH session.
\ud83d\udd38 nmap<\/strong><\/a> – is a free and open source (license) utility for network discovery and security auditing.
\ud83d\udd38 zmap<\/strong><\/a> – is a fast single packet network scanner designed for Internet-wide network surveys.
\ud83d\udd38 Rust Scan<\/strong><\/a> – to find all open ports faster than Nmap.
\ud83d\udd38 masscan<\/strong><\/a> – is the fastest Internet port scanner, spews SYN packets asynchronously.
\ud83d\udd38 pbscan<\/strong><\/a> – is a faster and more efficient stateless SYN scanner and banner grabber.
\ud83d\udd38 hping<\/strong><\/a> – is a command-line oriented TCP\/IP packet assembler\/analyzer.
\ud83d\udd38 mtr<\/strong><\/a> – is a tool that combines the functionality of the ‘traceroute’ and ‘ping’ programs in a single tool.
\ud83d\udd38 mylg<\/strong><\/a> – utility which combines the functions of the different network probes in one diagnostic tool.
\ud83d\udd38 netcat<\/strong><\/a> – utility which reads and writes data across network connections, using the TCP\/IP protocol.
\ud83d\udd38 tcpdump<\/strong><\/a> – is a powerful command-line packet analyzer.
\ud83d\udd38 tshark<\/strong><\/a> – is a tool that allows us to dump and analyze network traffic (wireshark cli).
\ud83d\udd38 Termshark<\/strong><\/a> – is a simple terminal user-interface for tshark.
\ud83d\udd38 ngrep<\/strong><\/a> – is like GNU grep applied to the network layer.
\ud83d\udd38 netsniff-ng<\/strong><\/a> – is a Swiss army knife for your daily Linux network plumbing if you will.
\ud83d\udd38 sockdump<\/strong><\/a> – dump unix domain socket traffic.
\ud83d\udd38 stenographer<\/strong><\/a> – is a packet capture solution which aims to quickly spool all packets to disk.
\ud83d\udd38 tcpterm<\/strong><\/a> – visualize packets in TUI.
\ud83d\udd38 bmon<\/strong><\/a> – is a monitoring and debugging tool to capture networking related statistics and prepare them visually.
\ud83d\udd38 iptraf-ng<\/strong><\/a> – is a console-based network monitoring program for Linux that displays information about IP traffic.
\ud83d\udd38 vnstat<\/strong><\/a> – is a network traffic monitor for Linux and BSD.
\ud83d\udd38 iPerf3<\/strong><\/a> – is a tool for active measurements of the maximum achievable bandwidth on IP networks.
\ud83d\udd38 ethr<\/strong><\/a> – is a Network Performance Measurement Tool for TCP, UDP & HTTP.
\ud83d\udd38 Etherate<\/strong><\/a> – is a Linux CLI based Ethernet and MPLS traffic testing tool.
\ud83d\udd38 echoip<\/strong><\/a> – is a IP address lookup service.
\ud83d\udd38 Nemesis<\/strong><\/a> – packet manipulation CLI tool; craft and inject packets of several protocols.
\ud83d\udd38 packetfu<\/strong><\/a> – a mid-level packet manipulation library for Ruby.
\ud83d\udd38 Scapy<\/strong><\/a> – packet manipulation library; forge, send, decode, capture packets of a wide number of protocols.
\ud83d\udd38 impacket<\/strong><\/a> – is a collection of Python classes for working with network protocols.
\ud83d\udd38 ssh-audit<\/strong><\/a> – is a tool for SSH server auditing.
\ud83d\udd38 aria2<\/strong><\/a> – is a lightweight multi-protocol & multi-source command-line download utility.
\ud83d\udd38 iptables-tracer<\/strong><\/a> – observe the path of packets through the iptables chains.
\ud83d\udd38 inception<\/strong><\/a> – a highly configurable tool to check for whatever you like against any number of hosts.<\/p>\n\n\n\nNetwork (DNS)<\/h1>\n\n\n\n
\ud83d\udd38 fierce<\/strong><\/a> – is a DNS reconnaissance tool for locating non-contiguous IP space.
\ud83d\udd38 subfinder<\/strong><\/a> – is a subdomain discovery tool that discovers valid subdomains for websites.
\ud83d\udd38 sublist3r<\/strong><\/a> – is a fast subdomains enumeration tool for penetration testers.
\ud83d\udd38 amass<\/strong><\/a> – is tool that obtains subdomain names by scraping data sources, crawling web archives, and more.
\ud83d\udd38 namebench<\/strong><\/a> – provides personalized DNS server recommendations based on your browsing history.
\ud83d\udd38 massdns<\/strong><\/a> – is a high-performance DNS stub resolver for bulk lookups and reconnaissance.
\ud83d\udd38 knock<\/strong><\/a> – is a tool to enumerate subdomains on a target domain through a wordlist.
\ud83d\udd38 dnsperf<\/strong><\/a> – DNS performance testing tools.
\ud83d\udd38 dnscrypt-proxy 2<\/strong><\/a> – a flexible DNS proxy, with support for encrypted DNS protocols.
\ud83d\udd38 dnsdbq<\/strong><\/a> – API client providing access to passive DNS database systems.
\ud83d\udd38 grimd<\/strong><\/a> – fast dns proxy, built to black-hole internet advertisements and malware servers.<\/p>\n\n\n\nNetwork (HTTP)<\/h1>\n\n\n\n
\ud83d\udd38 kurly<\/strong><\/a> – is an alternative to the widely popular curl program, written in Golang.
\ud83d\udd38 HTTPie<\/strong><\/a> – is an user-friendly HTTP client.
\ud83d\udd38 wuzz<\/strong><\/a> – is an interactive cli tool for HTTP inspection.
\ud83d\udd38 h2spec<\/strong><\/a> – is a conformance testing tool for HTTP\/2 implementation.
\ud83d\udd38 h2t<\/strong><\/a> – is a simple tool to help sysadmins to hardening their websites.
\ud83d\udd38 htrace.sh<\/strong><\/a> – is a simple Swiss Army knife for http\/https troubleshooting and profiling.
\ud83d\udd38 httpstat<\/strong><\/a> – is a tool that visualizes curl statistics in a way of beauty and clarity.
\ud83d\udd38 httplab<\/strong><\/a> – is an interactive web server.
\ud83d\udd38 Lynx<\/strong><\/a> – is a text browser for the World Wide Web.
\ud83d\udd38 Browsh<\/strong><\/a> – is a fully interactive, real-time, and modern text-based browser.
\ud83d\udd38 HeadlessBrowsers<\/strong><\/a> – a list of (almost) all headless web browsers in existence.
\ud83d\udd38 ab<\/strong><\/a> – is a single-threaded command line tool for measuring the performance of HTTP web servers.
\ud83d\udd38 siege<\/strong><\/a> – is an http load testing and benchmarking utility.
\ud83d\udd38 wrk<\/strong><\/a> – is a modern HTTP benchmarking tool capable of generating significant load.
\ud83d\udd38 wrk2<\/strong><\/a> – is a constant throughput, correct latency recording variant of wrk.
\ud83d\udd38 vegeta<\/strong><\/a> – is a constant throughput, correct latency recording variant of wrk.
\ud83d\udd38 bombardier<\/strong><\/a> – is a fast cross-platform HTTP benchmarking tool written in Go.
\ud83d\udd38 gobench<\/strong><\/a> – http\/https load testing and benchmarking tool.
\ud83d\udd38 hey<\/strong><\/a> – HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll\/boom.
\ud83d\udd38 boom<\/strong><\/a> – is a script you can use to quickly smoke-test your web app deployment.
\ud83d\udd38 SlowHTTPTest<\/strong><\/a> – is a tool that simulates some Application Layer Denial of Service attacks by prolonging HTTP.
\ud83d\udd38 gobuster<\/strong><\/a> – is a free and open source directory\/file & DNS busting tool written in Go.
\ud83d\udd38 ssllabs-scan<\/strong><\/a> – command-line reference-implementation client for SSL Labs APIs.
\ud83d\udd38 http-observatory<\/strong><\/a> – Mozilla HTTP Observatory cli version.<\/p>\n\n\n\nSSL<\/h1>\n\n\n\n
\ud83d\udd38 gnutls-cli<\/strong><\/a> – client program to set up a TLS connection to some other computer.
\ud83d\udd38 sslyze <\/strong><\/a>– fast and powerful SSL\/TLS server scanning library.
\ud83d\udd38 sslscan<\/strong><\/a> – tests SSL\/TLS enabled services to discover supported cipher suites.
\ud83d\udd38 testssl.sh<\/strong><\/a> – testing TLS\/SSL encryption anywhere on any port.
\ud83d\udd38 cipherscan<\/strong><\/a> – a very simple way to find out which SSL ciphersuites are supported by a target.
\ud83d\udd38 spiped<\/strong><\/a> – is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
\ud83d\udd38 Certbot<\/strong><\/a> – is EFF’s tool to obtain certs from Let’s Encrypt and (optionally) auto-enable HTTPS on your server.
\ud83d\udd38 mkcert<\/strong><\/a> – simple zero-config tool to make locally trusted development certificates with any names you’d like.
\ud83d\udd38 certstrap<\/strong><\/a> – tools to bootstrap CAs, certificate requests, and signed certificates.
\ud83d\udd38 Sublert<\/strong><\/a> – is a security and reconnaissance tool to automatically monitor new subdomains.
\ud83d\udd38 mkchain<\/strong><\/a> – open source tool to help you build a valid SSL certificate chain.<\/p>\n\n\n\nSecurity<\/h1>\n\n\n\n
\ud83d\udd38 AppArmor<\/strong><\/a> – proactively protects the operating system and applications from external or internal threats.
\ud83d\udd38 grapheneX<\/strong><\/a> – Automated System Hardening Framework.
\ud83d\udd38 DevSec Hardening Framework<\/strong><\/a> – Security + DevOps: Automatic Server Hardening.<\/p>\n\n\n\nTOR<\/h1>\n\n\n\n
\ud83d\udd38 multitor<\/strong><\/a> – a tool that lets you create multiple TOR instances with a load-balancing.<\/p>\n\n\n\nNetwork<\/h1>\n\n\n\n
\ud83d\udd38 Ettercap<\/strong><\/a> – is a comprehensive network monitor tool.
\ud83d\udd38 EtherApe<\/strong><\/a> – is a graphical network monitoring solution.
\ud83d\udd38 Packet Sender<\/strong><\/a> – is a networking utility for packet generation and built-in UDP\/TCP\/SSL client and servers.
\ud83d\udd38 Ostinato<\/strong><\/a> – is a packet crafter and traffic generator.
\ud83d\udd38 JMeter\u2122<\/strong><\/a> – open source software to load test functional behavior and measure performance.
\ud83d\udd38 locust<\/strong><\/a> – scalable user load testing tool written in Python.<\/p>\n\n\n\nBrowsers<\/h1>\n\n\n\n
\ud83d\udd38 Can I use<\/strong><\/a> – provides up-to-date browser support tables for support of front-end web technologies.
\ud83d\udd38 Panopticlick 3.0<\/strong><\/a> – is your browser safe against tracking?
\ud83d\udd38 Privacy Analyzer<\/strong><\/a> – see what data is exposed from your browser.
\ud83d\udd38 Web Browser Security<\/strong><\/a> – it’s all about Web Browser fingerprinting.
\ud83d\udd38 How’s My SSL?<\/strong><\/a> – help a web server developer learn what real world TLS clients were capable of.
\ud83d\udd38 sslClientInfo<\/strong><\/a> – client test (incl TLSv1.3 information).<\/p>\n\n\n\nSSL\/Security<\/h1>\n\n\n\n
\ud83d\udd38 SSLLabs Server Test (DEV)<\/strong><\/a> – performs a deep analysis of the configuration of any SSL web server.
\ud83d\udd38 ImmuniWeb\u00ae SSLScan<\/strong><\/a> – test SSL\/TLS (PCI DSS, HIPAA and NIST).
\ud83d\udd38 SSL Check<\/strong><\/a> – scan your website for non-secure content.
\ud83d\udd38 SSL Scanner<\/strong><\/a> – analyze website security.
\ud83d\udd38 CryptCheck<\/strong><\/a> – test your TLS server configuration (e.g. ciphers).
\ud83d\udd38 urlscan.io<\/strong><\/a> – service to scan and analyse websites.
\ud83d\udd38 Report URI<\/strong><\/a> – monitoring security policies like CSP and HPKP.
\ud83d\udd38 CSP Evaluator<\/strong><\/a> – allows developers and security experts to check if a Content Security Policy.
\ud83d\udd38 Useless CSP<\/strong><\/a> – public list about CSP in some big players (might make them care a bit more).
\ud83d\udd38 Why No HTTPS?<\/strong><\/a> – top 100 websites by Alexa rank not automatically redirecting insecure requests.
\ud83d\udd38 TLS Cipher Suite Search<\/strong><\/a>– cipher suite search engine.
\ud83d\udd38 cipherli.st<\/strong><\/a> – strong ciphers for Apache, Nginx, Lighttpd, and more.*<\/strong>
\ud83d\udd38 dhtool<\/strong><\/a> – public Diffie-Hellman parameter service\/tool.
\ud83d\udd38 badssl.com<\/strong><\/a> – memorable site for testing clients against bad SSL configs.
\ud83d\udd38 tlsfun.de<\/strong><\/a> – registered for various tests regarding the TLS\/SSL protocol.
\ud83d\udd38 CAA Record Helper<\/strong><\/a> – generate a CAA policy.
\ud83d\udd38 Common CA Database<\/strong><\/a> – repository of information about CAs, and their root and intermediate certificates.