mac-robber 1.02 A digital investigation tool that collects data from allocated files in a mounted file system.
macchanger 1.6.0 A small utility to change your NIC's MAC address
maclookup 0.3 Lookup MAC addresses in the IEEE MA-L/OUI public listing.
magicrescue 1.1.9 Find and recover deleted files on block devices
magictree 1.3 A penetration tester productivity tool designed to allow easy and straightforward data consolidation,querying, external command execution and report generation
make-pdf 0.1.5 This tool will embed javascript inside a PDF document.
makepasswd 1.10_9 Generates true random passwords with the emphasis on security over pronounceability (Debian version) http://packages.qa.debian.org/m/makepasswd.html
malheur 0.5.4 A tool for the automatic analyze of malware behavior.
maligno 1.5 An open source penetration testing tool written in python, that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS.
malmon 0.3 Hosting exploit/backdoor detection daemon. It's written in python, and uses inotify (pyinotify) to monitor file system activity. It checks files smaller then some size, compares their md5sum and hex signatures against DBs with known exploits backdoor. http://sourceforge.net/projects/malmon/
maltego 3.5.3 An open source intelligence and forensics application, enabling to easily gather information about DNS, domains, IP addresses, websites, persons, etc.
maltrieve 175.8c68c7e Originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. https://github.com/technoskald/maltrieve
malware-check-tool 1.2 Python script that detects malicious files via checking md5 hashes from an offline set or via the virustotal site. It has http proxy support and an update feature.
malwareanalyser 3.3 A freeware tool to perform static and dynamic analysis on malware. http://malwareanalyser.blogspot.de/2011/10/malware-analyser.html
malwaredetect 0.1 Submits a file's SHA1 sum to VirusTotal to determine whether it is a known piece of malware
malwasm 0.2 Offline debugger for malware's reverse engineering.
malybuzz 1.0 A Python tool focused in discovering programming faults in network software.
marc4dasm 6.f11860f This python-based tool is a disassembler for the Atmel MARC4 (a 4 bit Harvard micro). https://github.com/ApertureLabsLtd/marc4dasm
maskprocessor 0.72 A High-Performance word generator with a per-position configurable charset.
masscan 391.a60cc70 TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. https://github.com/robertdavidgraham/masscan
mat 0.5.2 Metadata Anonymisation Toolkit composed of a GUI application, a CLI application and a library.
matahari 0.1.30 A reverse HTTP shell to execute commands on remote machines behind firewalls.
mausezahn 0.40 A free fast traffic generator written in C which allows you to send nearly every possible and impossible packet. http://www.perihel.at/sec/mz/
mbenum 1.5.0 Queries the master browser for whatever information it has registered.
mboxgrep 0.7.9 A small, non-interactive utility that scans mail folders for messages matching regular expressions. It does matching against basic and extended POSIX regular expressions, and reads and writes a variety of mailbox formats.
md5deep 4.3 Advanced checksum hashing tool
mdbtools 0.7.1 Utilities for viewing data and exporting schema from Microsoft Access Database files
mdcrack 1.2 MD4/MD5/NTLM1 hash cracker
mdk3 6 WLAN penetration tool
mdns-scan 0.5 Scan mDNS/DNS-SD published services on the local network.
medusa 2.1.1 A speedy, massively parallel, modular, login brute-forcer for network.
melkor 1.0 An ELF fuzzer that mutates the existing data in an ELF sample given to create orcs (malformed ELFs), however, it does not change values randomly (dumb fuzzing), instead, it fuzzes certain metadata with semi-valid values through the use of fuzzing rules (knowledge base). http://packetstormsecurity.com/files/127924/Melkor-ELF-Fuzzer.0.html
memdump 1.01 Dumps system memory to stdout, skipping over holes in memory maps.
memfetch 0.05b dumps any userspace process memory without affecting its execution
metacoretex 0.8.0 MetaCoretex is an entirely JAVA vulnerability scanning framework for databases.
metagoofil 1.4b An information gathering tool designed for extracting metadata of public documents
metasploit 30949.ce688f4 An open source platform that supports vulnerability research, exploit development and the creation of custom security tools representing the largest collection of quality-assured exploits.
meterssh 10.ebb6f4e A way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection.
metoscan 05 Tool for scanning the HTTP methods supported by a webserver. It works by testing a URL and checking the responses for the different requests.
mfcuk 0.3.8 MIFARE Classic Universal toolKit
mfoc 0.10.7 Mifare Classic Offline Cracker
mfsniffer 0.1 A python script for capturing unencrypted TSO login credentials.
mibble 2.9.3 Mibble is an open-source SNMP MIB parser (or SMI parser) written in Java. It can be used to read SNMP MIB files as well as simple ASN.1 files.
middler 1.0 A Man in the Middle tool to demonstrate protocol middling attacks.
mikrotik-npk 7.88d7e4b Python tools for manipulating Mikrotik NPK format.
minimysqlator 0.5 A multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities. http://www.scrt.ch/en/attack/downloads/mini-mysqlat0r
miranda-upnp 1.3 A Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices http://code.google.com/p/miranda-upnp/
miredo 1.2.6 Teredo client and server.
missidentify 1.0 A program to find Win32 applications.
missionplanner 1.2.55 A GroundControl Station for Ardupilot.
mitmap 0.1 Shell Script for launching a Fake AP with karma functionality and launches ettercap for packet capture and traffic manipulation. http://www.darkoperator.com/tools-and-scripts/
mitmer 22.b01c7fe A man-in-the-middle and phishing attack tool that steals the victim's credentials of some web services like Facebook. https://github.com/husam212/MITMer
mitmf 186.3f6bbb8 A Framework for Man-In-The-Middle attacks written in Python.
mitmproxy 0.11.1 SSL-capable man-in-the-middle HTTP proxy.
mkbrutus 1.0.2 Password bruteforcer for MikroTik devices or boxes running RouterOS.
mobiusft 0.5.21 An open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions.
modscan 0.1 A new tool designed to map a SCADA MODBUS TCP based network.
moloch 0.9.2 An open source large scale IPv4 full PCAP capturing, indexing and database system.
monocle 1.0 A local network host discovery tool. In passive mode, it will listen for ARP request and reply packets. In active mode, it will send ARP requests to the specific IP range. The results are a list of IP and MAC addresses present on the local network.
morxbook 1.0 A password cracking tool written in perl to perform a dictionary-based attack on a specific Facebook user through HTTPS. http://www.morxploit.com/
morxbrute 1.01 A customizable HTTP dictionary-based password cracking tool written in Perl
morxbtcrack 1.0 Single Bitcoin private key cracking tool released.
morxcoinpwn 1.0 Mass Bitcoin private keys brute forcing/Take over tool released.
morxcrack 1.2 A cracking tool written in Perl to perform a dictionary-based attack on various hashing algorithm and CMS salted-passwords. http://www.morxploit.com/morxcrack/
morxkeyfmt 1.0 Read a private key from stdin and output formatted data values.
morxtraversal 1.0 Path Traversal checking tool.
morxtunnel 1.0 Network Tunneling using TUN/TAP interfaces over TCP tool.
mp3nema 0.4 A tool aimed at analyzing and capturing data that is hidden between frames in an MP3 file or stream, otherwise noted as "out of band" data.
mptcp 1.9.0 A tool for manipulation of raw packets that allows a large number of options. http://packetstormsecurity.com/files/119132/Mptcp-Packet-Manipulator.9.0.html
mptcp-abuse 6.b0eeb27 A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014. https://github.com/Neohapsis/mptcp-abuse
ms-sys 2.5.0 A tool to write Win9x-.. master boot records (mbr) under linux - RTM!
mssqlscan 0.8.4 A small multi-threaded tool that scans for Microsoft SQL Servers.
msvpwn 65.328921b Bypass Windows' authentication via binary patching.
mtr 0.86 Combines the functionality of traceroute and ping into one tool (CLI version)
multiinjector 0.3 Automatic SQL injection utility using a lsit of URI addresses to test parameter manipulation. http://chaptersinwebsecurity.blogspot.de/2008/11/multiinjector-v03-released.html
multimac 1.0.3 Multiple MACs on an adapter
multitun 43.9804513 Tunnel arbitrary traffic through an innocuous WebSocket.
mutator 51.164132d This project aims to be a wordlist mutator with hormones, which means that some mutations will be applied to the result of the ones that have been already done, resulting in something like: corporation -> C0rp0r4t10n_2012
mwebfp 16.a800b98 Mass Web Fingerprinter.
mysql2sqlite 14.e5b2c31 Converts a mysqldump file into a Sqlite 3 compatible file.
mac-robber: Download
mac-robber is an open source digital forensics and incident response tool that creates timelines of file activity of suspect systems
www.sleuthkit.org
macchanger 1.6.0 A small utility to change your NIC's MAC address
Index of /gnu/macchanger
ftp.gnu.org
maclookup 0.3 Lookup MAC addresses in the IEEE MA-L/OUI public listing.
magicrescue 1.1.9 Find and recover deleted files on block devices
Best Open Source Software Development Software 2024
Compare the best free open source Software Development Software at SourceForge. Free, secure and fast Software Development Software downloads from the largest Open Source applications and software directory
freshmeat.net
magictree 1.3 A penetration tester productivity tool designed to allow easy and straightforward data consolidation,querying, external command execution and report generation
Home | Gremwell
www.gremwell.com
make-pdf 0.1.5 This tool will embed javascript inside a PDF document.
PDF Tools
Here is a set of free YouTube videos showing how to use my tools: Malicious PDF Analysis Workshop. pdf-parser.py This tool will parse a PDF document to identify the fundamental elements used in the…
blog.didierstevens.com
makepasswd 1.10_9 Generates true random passwords with the emphasis on security over pronounceability (Debian version) http://packages.qa.debian.org/m/makepasswd.html
malheur 0.5.4 A tool for the automatic analyze of malware behavior.
maligno 1.5 An open source penetration testing tool written in python, that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS.
Tools
Security tools that can be useful for you, if you are a security tester or interested in information security. Download security tool or toolkit..
www.encripto.no
malmon 0.3 Hosting exploit/backdoor detection daemon. It's written in python, and uses inotify (pyinotify) to monitor file system activity. It checks files smaller then some size, compares their md5sum and hex signatures against DBs with known exploits backdoor. http://sourceforge.net/projects/malmon/
maltego 3.5.3 An open source intelligence and forensics application, enabling to easily gather information about DNS, domains, IP addresses, websites, persons, etc.
Homepage
Maltego is the all-in-one investigation platform that accelerates complex cyber investigations from hours to minutes. Mine, merge, and map all your essential intelligence in one place, and uncover hidden truths now!
www.paterva.com
maltrieve 175.8c68c7e Originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. https://github.com/technoskald/maltrieve
malware-check-tool 1.2 Python script that detects malicious files via checking md5 hashes from an offline set or via the virustotal site. It has http proxy support and an update feature.
Malware Check Tool 1.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
packetstormsecurity.com
malwareanalyser 3.3 A freeware tool to perform static and dynamic analysis on malware. http://malwareanalyser.blogspot.de/2011/10/malware-analyser.html
malwaredetect 0.1 Submits a file's SHA1 sum to VirusTotal to determine whether it is a known piece of malware
malwasm 0.2 Offline debugger for malware's reverse engineering.
GitHub - MalwareLu/malwasm: Offline debugger for malware's reverse engineering
Offline debugger for malware's reverse engineering - MalwareLu/malwasm
code.google.com
malybuzz 1.0 A Python tool focused in discovering programming faults in network software.
Malybuzz - Network Fuzzer | eternal-todo.com
Malybuzz is a multiprotocol and stateful network fuzzer to check the security of applications. Thanks to Malybuzz some new vulnerabilities have been discovered.
eternal-todo.com
marc4dasm 6.f11860f This python-based tool is a disassembler for the Atmel MARC4 (a 4 bit Harvard micro). https://github.com/ApertureLabsLtd/marc4dasm
maskprocessor 0.72 A High-Performance word generator with a per-position configurable charset.
maskprocessor [hashcat wiki]
hashcat.net
masscan 391.a60cc70 TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. https://github.com/robertdavidgraham/masscan
mat 0.5.2 Metadata Anonymisation Toolkit composed of a GUI application, a CLI application and a library.
MAT: Metadata Anonymisation Toolkit
mat.boum.org
matahari 0.1.30 A reverse HTTP shell to execute commands on remote machines behind firewalls.
matahari - a simple reverse HTTP shell
matahari.sourceforge.net
mausezahn 0.40 A free fast traffic generator written in C which allows you to send nearly every possible and impossible packet. http://www.perihel.at/sec/mz/
mbenum 1.5.0 Queries the master browser for whatever information it has registered.
MBEnum
MBEnum queries the master browser for whatever information it has registered. Windows servers/workstations store information about what services they run in the MB, eg; Terminal Services, SQL Serve…
www.cqure.net
mboxgrep 0.7.9 A small, non-interactive utility that scans mail folders for messages matching regular expressions. It does matching against basic and extended POSIX regular expressions, and reads and writes a variety of mailbox formats.
md5deep 4.3 Advanced checksum hashing tool
md5deep and hashdeep
md5deep.sourceforge.net
mdbtools 0.7.1 Utilities for viewing data and exporting schema from Microsoft Access Database files
MDB Tools
Download MDB Tools for free. A set of libraries and utilities for reading Microsoft Access database (MDB) files. THIS PROJECT HAS MOVED TO GITHUB: https://github.com/mdbtools/mdbtools
sourceforge.net
mdcrack 1.2 MD4/MD5/NTLM1 hash cracker
mdk3 6 WLAN penetration tool
mdns-scan 0.5 Scan mDNS/DNS-SD published services on the local network.
medusa 2.1.1 A speedy, massively parallel, modular, login brute-forcer for network.
Foofus Networking Services - Medusa
www.foofus.net
melkor 1.0 An ELF fuzzer that mutates the existing data in an ELF sample given to create orcs (malformed ELFs), however, it does not change values randomly (dumb fuzzing), instead, it fuzzes certain metadata with semi-valid values through the use of fuzzing rules (knowledge base). http://packetstormsecurity.com/files/127924/Melkor-ELF-Fuzzer.0.html
memdump 1.01 Dumps system memory to stdout, skipping over holes in memory maps.
The Coroner's Toolkit (TCT)
www.porcupine.org
memfetch 0.05b dumps any userspace process memory without affecting its execution
[lcamtuf.coredump.cx]
lcamtuf.coredump.cx
metacoretex 0.8.0 MetaCoretex is an entirely JAVA vulnerability scanning framework for databases.
MetaCoretex
Download MetaCoretex for free. MetaCoretex security scanner is an extreemely modular plugin based security scanner written entirely in JAVA to allow the use of JDBC Type IV drivers when scanning databases. Initially, most plugins will likely be for DBs.
metacoretex.sourceforge.net
metagoofil 1.4b An information gathering tool designed for extracting metadata of public documents
Edge-security group - Metagoofil
www.edge-security.com
metasploit 30949.ce688f4 An open source platform that supports vulnerability research, exploit development and the creation of custom security tools representing the largest collection of quality-assured exploits.
Metasploit | Penetration Testing Software, Pen Testing Security | Metasploit
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the world's best penetration testing software now.
www.metasploit.com
meterssh 10.ebb6f4e A way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection.
GitHub - trustedsec/meterssh: MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.
MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injec...
github.com
metoscan 05 Tool for scanning the HTTP methods supported by a webserver. It works by testing a URL and checking the responses for the different requests.
mfcuk 0.3.8 MIFARE Classic Universal toolKit
GitHub - nfc-tools/mfcuk: MiFare Classic Universal toolKit (MFCUK)
MiFare Classic Universal toolKit (MFCUK). Contribute to nfc-tools/mfcuk development by creating an account on GitHub.
code.google.com
mfoc 0.10.7 Mifare Classic Offline Cracker
GitHub - nfc-tools/mfoc: Mifare Classic Offline Cracker
Mifare Classic Offline Cracker. Contribute to nfc-tools/mfoc development by creating an account on GitHub.
code.google.com
mfsniffer 0.1 A python script for capturing unencrypted TSO login credentials.
MF Sniffer TN3270 Password Grabber ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
packetstormsecurity.com
mibble 2.9.3 Mibble is an open-source SNMP MIB parser (or SMI parser) written in Java. It can be used to read SNMP MIB files as well as simple ASN.1 files.
Mibble MIB Parser
www.mibble.org
mikrotik-npk 7.88d7e4b Python tools for manipulating Mikrotik NPK format.
GitHub - kost/mikrotik-npk: Python tools for manipulating Mikrotik NPK format
Python tools for manipulating Mikrotik NPK format. Contribute to kost/mikrotik-npk development by creating an account on GitHub.
github.com
minimysqlator 0.5 A multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities. http://www.scrt.ch/en/attack/downloads/mini-mysqlat0r
miranda-upnp 1.3 A Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices http://code.google.com/p/miranda-upnp/
miredo 1.2.6 Teredo client and server.
Miredo : Teredo for Linux and BSD
www.remlab.net
missidentify 1.0 A program to find Win32 applications.
Miss Identify
missidentify.sourceforge.net
missionplanner 1.2.55 A GroundControl Station for Ardupilot.
mitmap 0.1 Shell Script for launching a Fake AP with karma functionality and launches ettercap for packet capture and traffic manipulation. http://www.darkoperator.com/tools-and-scripts/
mitmer 22.b01c7fe A man-in-the-middle and phishing attack tool that steals the victim's credentials of some web services like Facebook. https://github.com/husam212/MITMer
mitmf 186.3f6bbb8 A Framework for Man-In-The-Middle attacks written in Python.
GitHub - byt3bl33d3r/MITMf: Framework for Man-In-The-Middle attacks
Framework for Man-In-The-Middle attacks. Contribute to byt3bl33d3r/MITMf development by creating an account on GitHub.
github.com
mitmproxy 0.11.1 SSL-capable man-in-the-middle HTTP proxy.
mitmproxy - an interactive HTTPS proxy
mitmproxy.org
mkbrutus 1.0.2 Password bruteforcer for MikroTik devices or boxes running RouterOS.
MKBRUTUS by mkbrutusproject
mkbrutusproject.github.io
mobiusft 0.5.21 An open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions.
Mobius Forensic Toolkit - Summary [Savannah]
Savannah is a central point for development, distribution and maintenance of free software, both GNU and non-GNU.
savannah.nongnu.org
modscan 0.1 A new tool designed to map a SCADA MODBUS TCP based network.
moloch 0.9.2 An open source large scale IPv4 full PCAP capturing, indexing and database system.
GitHub - arkime/arkime: Arkime is an open source, large scale, full packet capturing, indexing, and database system.
Arkime is an open source, large scale, full packet capturing, indexing, and database system. - arkime/arkime
github.com
monocle 1.0 A local network host discovery tool. In passive mode, it will listen for ARP request and reply packets. In active mode, it will send ARP requests to the specific IP range. The results are a list of IP and MAC addresses present on the local network.
Monocle Host Discovery Tool 1.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
packetstormsecurity.com
morxbook 1.0 A password cracking tool written in perl to perform a dictionary-based attack on a specific Facebook user through HTTPS. http://www.morxploit.com/
morxbrute 1.01 A customizable HTTP dictionary-based password cracking tool written in Perl
morxbtcrack 1.0 Single Bitcoin private key cracking tool released.
morxcoinpwn 1.0 Mass Bitcoin private keys brute forcing/Take over tool released.
morxcrack 1.2 A cracking tool written in Perl to perform a dictionary-based attack on various hashing algorithm and CMS salted-passwords. http://www.morxploit.com/morxcrack/
morxkeyfmt 1.0 Read a private key from stdin and output formatted data values.
morxtraversal 1.0 Path Traversal checking tool.
morxtunnel 1.0 Network Tunneling using TUN/TAP interfaces over TCP tool.
mp3nema 0.4 A tool aimed at analyzing and capturing data that is hidden between frames in an MP3 file or stream, otherwise noted as "out of band" data.
MP3nema Forensic Analysis Tool ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
packetstormsecurity.com
mptcp 1.9.0 A tool for manipulation of raw packets that allows a large number of options. http://packetstormsecurity.com/files/119132/Mptcp-Packet-Manipulator.9.0.html
mptcp-abuse 6.b0eeb27 A collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014. https://github.com/Neohapsis/mptcp-abuse
ms-sys 2.5.0 A tool to write Win9x-.. master boot records (mbr) under linux - RTM!
ms-sys
ms-sys.sourceforge.net
mssqlscan 0.8.4 A small multi-threaded tool that scans for Microsoft SQL Servers.
MSSQLScan
A small multi-threaded tool that scans for Microsoft SQL Servers. The tool does it’s discovery by using UDP and returns a list of all detected instances with there respective protocols and po…
www.cqure.net
msvpwn 65.328921b Bypass Windows' authentication via binary patching.
Bitbucket
bitbucket.org
mtr 0.86 Combines the functionality of traceroute and ping into one tool (CLI version)
MTR
www.bitwizard.nl
multiinjector 0.3 Automatic SQL injection utility using a lsit of URI addresses to test parameter manipulation. http://chaptersinwebsecurity.blogspot.de/2008/11/multiinjector-v03-released.html
multimac 1.0.3 Multiple MACs on an adapter
MultiMac - Multiple MACs on an adapter
Download MultiMac - Multiple MACs on an adapter for free. Multimac is a linux virtual ethernet tap allocator to emulate and use multiple virtual interfaces (with different MAC addresses) on a LAN using a single network adapter
sourceforge.net
multitun 43.9804513 Tunnel arbitrary traffic through an innocuous WebSocket.
covertcodes/multitun
Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN. - covertcodes/multitun
github.com
mutator 51.164132d This project aims to be a wordlist mutator with hormones, which means that some mutations will be applied to the result of the ones that have been already done, resulting in something like: corporation -> C0rp0r4t10n_2012
Bitbucket
bitbucket.org
mwebfp 16.a800b98 Mass Web Fingerprinter.
GitHub - falcon-lnhg/mwebfp: LNHG - Mass Web Fingerprinter
LNHG - Mass Web Fingerprinter. Contribute to falcon-lnhg/mwebfp development by creating an account on GitHub.
github.com
mysql2sqlite 14.e5b2c31 Converts a mysqldump file into a Sqlite 3 compatible file.
MySQL to Sqlite converter
MySQL to Sqlite converter. GitHub Gist: instantly share code, notes, and snippets.
gist.github.com