Security & Malware Analysis

MVT (Mobile Verification Toolkit)

Security & Malware Analysis

A free forensic toolkit from Amnesty International's Security Lab. It checks Android and iOS phones for traces of known spyware, such as Pegasus.

Free, open threat intelligence sharing platform — free alternative to paid threat intel feeds like Recorded Future.

Built-in, free endpoint protection for Windows — free alternative to CrowdStrike for basic endpoint security.

Autonomous white-box AI pentester for web apps/APIs — analyzes your own source code, maps attack surface, and executes real exploits with proof-of-concept to catch vulnerabilities before production. Automates security auditing.

Interactive malware sandbox, real-time execution view.

Free, open-source digital forensics platform — free alternative to X-Ways Forensics for disk image and file analysis.

Free, open-source SSH/Telnet honeypot — free alternative to Attivo Networks for capturing and logging attacker behavior in a controlled, defensive setup.

Free, open-source log management and analytics stack — free alternative to IBM QRadar for centralized logging and visualization.

Sandbox malware analysis, runtime behavior.

Deep malware analysis, static + dynamic reports.

Free, open-source password security auditing tool — free alternative to Passware for testing password strength (defensive/authorized use).

Free, open-source wireless network detector and IDS — free alternative to Ekahau AI Pro for WiFi network analysis.

Toolkit compiling diagnostic/recovery tools (password removal, malware recovery, disk utilities).

Free, open-source penetration testing and exploit development framework — free/community edition alternative to Metasploit Pro, for authorized security testing.

Free, open-source web application security scanner — free alternative to Burp Suite Pro for finding vulnerabilities in web apps.

Free, open-source vulnerability scanner — free alternative to Nessus for identifying security weaknesses in systems and networks.

Free, open-source cloud security assessment tool for AWS/Azure/GCP — free alternative to Wiz for cloud security posture checks.

Hunts down social media accounts by username across many social networks. Well-known, widely used OSINT/recon tool, 88k+ stars, MIT license.

Client-side APK analyzer (permissions, libraries, certs).

Scans files/URLs against 70+ AV engines.

Free, open-source SIEM and XDR platform — free alternative to Splunk for log analysis, threat detection, and compliance.

Free, open-source network protocol analyzer — free alternative to Darktrace for packet-level network traffic inspection.

Free, open-source interactive HTTPS proxy — free alternative to Fiddler Everywhere for intercepting and inspecting web traffic.