Cybersecurity Tools Directory

Static Application Security Testing

Sonarsource SonarQube IDE on SecurityListing: IDE plugin for real-time code quality and security issue detection

Security Awareness Training

Verificient Proctordiy on SecurityListing: DIY live proctoring platform for remote exam monitoring with AI assistance

Risk Assessment

SaltyCloud Isora GRC on SecurityListing: GRC platform for infosec assessment, risk mgmt, vendor & asset oversight

Threat Modeling

TrustOnCloud Comprehensive Threat Research on SecurityListing: Cloud service threat research & control library for AWS, Azure, and GCP

Software Composition Analysis

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.

Next-Generation Firewalls

Sense Defence on SecurityListing: Sense Defence is a next-generation web security suite that leverages AI to provide real-time threat detection and blocking.

Security Orchestration Automation and Response

StrangeBee TheHive on SecurityListing: Security case management platform for SOCs, CERTs, and CSIRTs

Container Security

Understanding Docker container escapes on SecurityListing: Exploit that launches a process on the host from within a Docker container run with the --privileged flag by abusing the Linux cgroup v1 “notification on release” feature.

Privileged Access Management

Securden Unified PAM on SecurityListing: A powerful tool that enables organizations to discover, manage, and secure privileged access, helping to reduce the risks associated with privileged accounts and activities.

Guides

Reversing With Lena (Tutorials) on SecurityListing: Educational resources for reverse engineering tutorials by lena151.

Industry Reports

SteelCon 2018 on SecurityListing: Cybersecurity conference featuring talks on various hacking topics by industry experts.

Security Scanning

Internacious Website and Email Security Scan on SecurityListing: Web and email security scanner that checks 16 critical security points in 60 seconds

Digital Forensics and Incident Response

WinHex on SecurityListing: Universal hexadecimal editor for computer forensics, data recovery, and IT security.

Offensive Security

DDE attack with PowerShell Empire on SecurityListing: Weaponize Word documents with PowerShell Empire using the Microsoft DDE exploit.

Industrial Control System Security

Snap7 Homepage on SecurityListing: Website providing information on Snap7 open-source communication library.

Threat Intelligence Platforms

Ryan Stillions: On TTPs on SecurityListing: In-depth analysis of real-world attacks and threat tactics

Penetration Testing

Preparing for Red Team at PRCCDC 2015 on SecurityListing: Preparation process for participating in the Pacific Rim CCDC 2015.

Threat Hunting

Reveald ManagedDetection and Response on SecurityListing: MDR service for CrowdStrike, Microsoft, and Trellix endpoints with 24/7 monitoring

Zyber 365 Group

Data Loss Prevention

Zyber 365 are providing a robust, decentralized, and cyber-secured operating system which adheres to the fundamental principles of environmental sustainability. We have designed our solutions to enab

12Port

Security Operations

At 12Port, we believe security shouldn’t be complicated or out of reach for any business. Our goal is to provide enterprise-class security technology that is easy to deploy, scalable, and accessible f