anchor.diff:  Enumeration;LDAP Browser;http://www.ldapbrowser.com/;Ldap Browser Is A Premier Windows Explorer-Like Ldap Directory Client Available For Win32 Platforms.
   Traffic Analysis/Inspection;Libcrafter;http://code.google.com/p/libcrafter/;Is A High Level Library For C++ Designed To Make Easier The Creation And Decoding Of Network Packets. It Is Able To Craft Or Decode Packets Of Most Common Network Protocols, Send Them On The Wire, Capture Them And Match Requests And Replies.
   Python Network;libdnet;http://code.google.com/p/libdnet/;Low-Level Networking Routines, Including Interface Lookup And Ethernet Frame Transmission
  +Shellcode analysis;libemu;http://libemu.carnivore.it/;Library and tools for x86 shell code emulation.
   Python Forensics;LibForensics;http://code.google.com/p/libforensics/;Library For Developing Digital Forensics Applications
   Exploits;libformatstr;https://github.com/hellman/libformatstr;Simplify Format String Exploitation.
   Traffic Analysis/Inspection;Libnet;http://libnet.sourceforge.net/;Is A Collection Of Routines To Help With The Construction And Handling Of Network Packets. It Provides A Portable Framework For Low-Level Network Packet Shaping, Handling And Injection. Libnet Features Portable Packet Creation Interfaces At The Ip Layer And Link Layer, As Well As A Host Of Supplementary And Complementary Functionality. Using Libnet, Quick And Simple Packet Assembly Applications Can Be Whipped Up With Little Effort.
   Traffic Analysis/Inspection;Libnids;http://libnids.sourceforge.net/;Designed By Rafal Wojtczuk, Is An Implementation Of An E-Component Of Network Intrusion Detection System. It Emulates The Ip Stack Of Linux 2.0.X. Libnids Offers Ip Defragmentation, Tcp Stream Assembly And Tcp Port Scan Detection. The Most Valuable Feature Of Libnids Is Reliability. A Number Of Tests Were Conducted, Which Proved That Libnids Predicts Behaviour Of Protected Linux Hosts As Closely As Possible.
   Traffic Capture;Libpcap/Tcpdump;http://www.tcpdump.org/;The Official Site Of Tcpdump, A Powerful Command-Line Packet Analyzer  And Libpcap, A Portable C/C++ Library For Network Traffic Capture.
  +Disassemblers;LIEF;https://lief.quarkslab.com/;LIEF provides a cross-platform library to parse, modify and abstract ELF, PE and MachO formats.
   SSL Analysis Tools;liffy;https://github.com/hvqzao/liffy;Lfi Exploitation Tool
   Web Scanners;LiLith;http://michaelhendrickx.com/lilith;Lilith Is A Tool Written In Perl To Audit Web Applications. This Tool Analyses Webpages And Looks For Html <Form> Tags, Which Often Refer To Dynamic Pages That Might Be Subject To Sql Injection Or Other Flaws.
  +Web scanner malware;Limon;https://github.com/monnappa22/Limon;Sandbox for Analyzing Linux Malwares
   Linux Utils;Linux Exploit Suggester;https://github.com/PenturaLabs/Linux_Exploit_Suggester;Linux Exploit Suggester Based On Operating System Release Number.
   Passwords;Lodowep;http://www.cqure.net/wp/lodowep/;Lodowep Is A Tool For Analyzing Password Strength Of Accounts On A Lotus Domino Webserver System. The Tool Supports Both Session- And Basic-Authentication.
   DDoS Tools;LOIC;https://github.com/NewEraCracker/LOIC/;An Open Source Network Stress Tool For Windows
  +Malware identification;Loki;https://github.com/Neo23x0/Loki;Host based scanner for IOCs.
  +Disassemblers;ltrace;http://ltrace.org/;Dynamic analysis for Linux executables.
   Python Other useful libraries and tools;lxml;http://lxml.de/;Most Feature-Rich And Easy-To-Use Library For Working With Xml And Html In The Python Language
   Python Other useful libraries and tools;M2Crypto;http://chandlerproject.org/bin/view/Projects/MeTooCrypto;Most Complete Openssl Wrapper
  +Domain analysis;Machinae;https://github.com/hurricanelabs/machinae;OSINT tool forgathering information about URLs, IPs, or hashes. Similar to Automator.
  +Domain analysis;mailchecker;https://github.com/FGRibreau/mailchecker;Cross-languagetemporary email detection library.
  +IOC;malc0de;http://malc0de.com/database/;Searchable incident database.
  +Network;Malcom;https://github.com/tomchop/malcom;Malware CommunicationsAnalyzer.
  +Malware identification;Malfunction;https://github.com/Dynetics/Malfunction;Catalog and compare malware at a function level.
  +Web scanner malware;Malheur;https://github.com/rieck/malheur;Automatic sandboxed analysis of malware behavior.
   Network Tools;mallory;https://github.com/justmao945/mallory;Http/Https Proxy Over Ssh
  +Shellcode analysis;malpdfobj;https://github.com/9b/malpdfobj;Deconstruct malicious PDFs into a JSON representation.
  +Malware analysis;Malshare;http://malshare.com;Large repository of malware actively scrapped from malicious sites.samples directly from a number of online sources.
  +Miscellaneous;MalSploitBase;https://github.com/misterch0c/malSploitBase;A database containing exploits used by malware.
  +Web scanner malware;malsub;https://github.com/diogo-fernan/malsub;A Python RESTful API framework for online malware and URL analysis services.
   OSInt Tools;Maltego;http://www.paterva.com/web7/;Proprietary Software For Open Source Intelligence And Forensics, From Paterva.
  -Forensics;Malzilla;http://malzilla.sourceforge.net/;Malware Hunting Tool
  +Domain analysis;MaltegoVT;https://github.com/michael-yip/MaltegoVT;Maltego transform for the VirusTotal API. Allows domain/IP research, and searching for filehashes and scan reports.
  +Network;Maltrail;https://github.com/stamparm/maltrail;A malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails and featuring an reporting and analysis interface.
  +Web scanner malware;Malware config;https://malwareconfig.com/;Extract, decode and display online the configuration settings from common malwares.
  +IOC;Malware Domain List;http://www.malwaredomainlist.com/;Search and share malicious URLs.
  +Miscellaneous;Malware Museum;https://archive.org/details/malwaremuseum;Collection of malware programs that were distributed in the 1980s and 1990s.
  +Malware analysis;MalwareDB;http://malwaredb.malekal.com/;Malware samples repository.
  +Storage and Workflow;Malwarehouse;https://github.com/sroberts/malwarehouse;Store, tag, and search malware.
  +Web scanner malware;Malwr;https://malwr.com/;Free analysis with an online Cuckoo Sandbox instance.
  +Analyze malicious URLs Malware;Malzilla;http://malzilla.sourceforge.net/;Analyze malicious web pages.
   Network Tools;Mass Scan;https://github.com/robertdavidgraham/masscan;Tcp Port Scanner, Spews Syn Packets Asynchronously, Scanning Entire Internet In Under 5 Minutes.
   Networking;Masscan;https://github.com/robertdavidgraham/masscan;Mass Ip Port Scanner, Tcp Port Scanner
  +Harvest and analyze IOCs;Massive Octo Spice;https://github.com/csirtgadgets/massive-octo-spice; Previously known as CIF (Collective Intelligence Framework).
  +Malware identification;MASTIFF;https://github.com/KoreLogicSecurity/mastiff;Static analysis framework.
  +Web scanner malware;MASTIFF Online;https://mastiff-online.korelogic.com/;Online static analysis of malware.
   Python Other useful libraries and tools;matplotlib;http://matplotlib.sourceforge.net/;Make 2D Plots Of Arrays
   Python Other useful libraries and tools;Mayavi;http://code.enthought.com/projects/mayavi/;3D Scientific Data Visualization And Plotting
   Vuln Scanners;MBSA;http://technet.microsoft.com/en-us/security/cc184923;Microsoft Baseline Security Analyzer (Mbsa) Is An Easy-To-Use Tool Designed For The It Professional That Helps Small And Medium-Sized Businesses Determine Their Security State In Accordance With Microsoft Security Recommendations And Offers Specific Remediation Guidance.
   Passwords;Medusa;http://www.foofus.net/~jmk/medusa/medusa.html;Medusa Is Intended To Be A Speedy, Massively Parallel, Modular, Login Brute-Forcer. The Goal Is To Support As Many Services Which Allow Remote Authentication As Possible.
   Reverse Engineering Tools;Medusa disassembler;https://github.com/wisk/medusa;An Open Source Interactive Disassembler
  +Web scanner malware;Metadefender.com;https://www.metadefender.com;Scan a file, hash or IP address for malware (free)
  +IOC;Metadefender.com Threat Intelligence Feeds;https://www.metadefender.com/threat-intelligence-feeds;List of the most looked up file hashes from Metadefender.com malware feed.
   OSInt Tools;metagoofil;https://github.com/laramies/metagoofil;Metadata Harvester
   Exploits;Metasploit;http://www.metasploit.com/;Penetration Testing Software
   Vuln Scanners;Metasploit Framework;http://www.metasploit.com/;The Metasploit Framework Is An Advanced Open-Source Platform For Developing, Testing, And Using Exploit Code.
   Vuln Apps;Metasploitable;http://sourceforge.net/projects/metasploitable/;Metasploitable Is An Intentionally Vulnerable Linux Virtual Machine. This Vm Can Be Used To Conduct Security Training, Test Security Tools, And Practice Common Penetration Testing Techniques.
   Windows Utils;mimikatz;http://blog.gentilkiwi.com/mimikatz;Credentials Extraction Tool For Windows Os
   Scanning;MingSweeper;http://www.hoobie.net/mingsweeper/;Mingsweeper Is A Network Reconnaissance Tool Designed To Facilitate Large Address Space,High Speed Node Discovery And Identification.
  +Harvest and analyze IOCs;MISP;https://github.com/MISP/MISP;Malware Information SharingPlatform curated by The MISP Project
   Python Fuzzing;Mistress;http://www.packetstormsecurity.org/fuzzer/mistress.rar;Probe File Formats On The Fly And Protocols With Malformed Data, Based On Pre-Defined Patterns
  -Network;mitmproxy;https://mitmproxy.org/;An Interactive, Ssl-Capable Man-In-The-Middle Proxy For Http With A Console Interface
  +Network;mitmproxy;https://mitmproxy.org/;Intercept network traffic on the fly.
   Network;mitmsocks4j;https://github.com/Akdeniz/mitmsocks4j;Man-In-The-Middle Socks Proxy For Java
  -Traffic Capture;Moloch;https://github.com/aol/moloch;Moloch Is A Open Source Large Scale Full Pcap Capturing, Indexing And Database System.
  +Honeypots;Mnemosyne;https://github.com/johnnykv/mnemosyne;A normalizer for honeypot data supports Dionaea.
  +Network;Moloch;https://github.com/aol/moloch;IPv4 traffic capturing, indexing and database system.
   Python Debugging and reverse engineering;mona.py;https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/;Pycommand For Immunity Debugger That Replaces And Improves On Pvefindaddr
   Network Tools;Morpheus;https://github.com/r00t-3xp10it/morpheus;Automated Ettercap Tcp/Ip Hijacking Tool
   Vuln Apps;Moth;http://www.bonsai-sec.com/en/research/moth.php;Moth Is A Vmware Image With A Set Of Vulnerable Web Applications And Scripts, That You May Use For, Testing Web Application Security Scanners, Testing Static Code Analysis Tools (Sca), Giving An Introductory Course To Web Application Security
  +Domain analysis;Multi rbl;http://multirbl.valli.org/;Multiple DNS blacklist and forward confirmed reverse DNS lookup over more than 300 RBLs.
   Scanning;Multi Threaded TCP Port Scanner 3.0;http://www.secpoint.com/Multi-Threaded-TCP-Port-Scanner.html;This Tool Could Be Used To Scan Ports Of Certain Ip. It Also Could Describe Each Port With Standard Name (Well-Known And Registered Ports).
  +Malware identification;MultiScanner;https://github.com/MITRECND/multiscanner;Modular file scanning/analysis framework
   Traffic Analysis/Inspection;Multitail;http://www.vanheusden.com/multitail;Now Has A Colorscheme Included For Monitoring The Tcpdump Output. It Can Also Filter, Convert Timestamps To Timestrings And Much More.
  +Memory Forensics;Muninn;https://github.com/ytisf/muninn;A script to automate portions of analysis using Volatility, and create a readable report.
   Database Vulnerabilities;MYSQLAudit;http://www.darkoperator.com/tools-and-scripts/;Python Script For Basic Auditing Of Common Security Misconfigurations In Mysql.
   Traffic Capture;n2disk;http://www.ntop.org/products/n2disk/) (Commercial;A Multi-Gigabit Network Traffic Recorder With Indexing Capabilities. N2Disk Is A Network Traffic Recorder Application. With N2Disk You Can Capture Full- Sized Network Packets At Multi-Gigabit Rate (Above 10 Gigabit/S On Adequate Hardware) From A Live Network Interface, And Write Them Into Files Without Any Packet Loss.
   Enumeration;NBTEnum;http://www.secguru.com/link/nbtenum_netbios_enume ration_utility;Netbios Enumeration Utility (Nbtenum) Is A Utility For Windows That Can Be Used To Enumerate Netbios Information From One Host Or A Range Of Hosts.
  
positive.code: Python Other useful libraries and tools;PyQt;http://www.riverbankcomputing.co.uk/software/pyqt;Python Bindings For The Qt, Application Framework And Gui Library
  Traffic Analysis/Inspection;pyshark;http://kiminewt.github.io/pyshark/;A Python Wrapper For Tshark, Allowing Python Packet Parsing Using Wireshark Dissectors. There Are Quite A Few Python Packet Parsing Modules, This One Is Different Because It Doesn'T Actually Parse Any Packets, It Simply Uses Tshark'S (Wireshark Command-Line Utility) Ability To Export Xmls To Use Its Parsing.
  Python Network;Pytbull;http://pytbull.sourceforge.net/;Flexible Ids/Ips Testing Framework (Shipped With More Than 300 Tests)
  Python PDF;python-poppler-qt4;https://github.com/wbsoft/python-poppler-qt4;Python Binding For The Poppler Pdf Library, Including Qt4 Support
  Python Debugging and reverse engineering;python-ptrace;http://python-ptrace.readthedocs.org/;Debugger Using Ptrace (Linux, Bsd And Darwin System Call To Trace Processes) Written In Python
  Python Web;python-spidermonkey;http://code.google.com/p/python-spidermonkey/;Bridge To The Mozilla Spidermonkey Javascript Engine Allows For The
  Exploits;Qira;https://github.com/BinaryAnalysisPlatform/qira;Qemu Interactive Runtime Analyser
  Reverse;RABCDAsm;https://github.com/CyberShadow/RABCDAsm;Collection Of Utilities Including An Actionscript 3 Assembler/Disassembler.
  Reverse;radare2;https://github.com/radare/radare2;A Portable Reversing Framework
  Passwords;RainbowCrack;http://project-rainbowcrack.com/;Rainbowcrack Is A General Propose Implementation Of Philippe Oechslin'S Faster Time-Memory Trade-Off Technique.
  Vuln Scanners;Rapid7 NeXpose;http://www.rapid7.com/products/nexpose/editions-and-features.jsp;Rapid7 Nexpose Is A Vulnerability Scanner Which Aims To Support The Entire Vulnerability Management Lifecycle, Including Discovery, Detection, Verification, Risk Classification, Impact Analysis, Reporting And Mitigation. It Integrates With Rapid7'S Metasploit For Vulnerability Exploitation
  Web Scanners;Ratproxy;http://code.google.com/p/ratproxy/;A Semi-Automated, Largely Passive Web Application Security Audit Tool, Optimized For An Accurate And Sensitive Detection, And Automatic Annotation, Of Potential Problems And Security-Relevant Design Patterns Based On The Observation Of Existing, User-Initiated Traffic In Complex Web 2.0 Environments.
  Sniffer;RawCap;http://www.netresec.com/?page=RawCap;Rawcap Is A Free Command Line Network Sniffer For Windows That Uses Raw Sockets.
  Wireless Network Tools;Reaver;https://code.google.com/archive/p/reaver-wps;Brute Force Attack Against Wifi Protected Setup
  OSInt Tools;recon-ng;https://bitbucket.org/LaNMaSteR53/recon-ng;A Full-Featured Web Reconnaissance Framework Written In Python
  Basic Penetration Testing Tools;redsnarf;https://github.com/nccgroup/redsnarf;Post-Exploitation Tool For Grabbing Credentials
  Forensics;Registry Dumper;http://www.kahusecurity.com/downloads/RegistryDumper_v0.2.7z;Dump Your Registry
  Forensics;RegistryViewer;http://www.gaijin.at/en/getitpage.php?id=regview;Used To View Windows Registries
  Python Forensics;Rekall;http://www.rekall-forensic.com;Memory Analysis Framework Developed By Google
  Operating Systems;REMnux;https://remnux.org/;Based On Debian
  Services;Request Bin;http://requestb.in/;Lets You Inspect Http Requests To A Particular Url
  Python Web;Requests;http://python-requests.org/;Elegant And Simple Http Library, Built For Human Beings
  Forensics;ResourcesExtract;http://www.nirsoft.net/utils/resources_extract.html;Extract Various Filetypes From Exes
  Windows Utils;Responder;https://github.com/SpiderLabs/Responder;A Llmnr, Nbt-Ns And Mdns Poisoner
  Reverse;Revelo;http://www.kahusecurity.com/tools/Revelo_v0.6.zip;Analyze Obfuscated Javascript Code
  Python Misc;RevHosts;http://www.securityfocus.com/tools/3851;Enumerate Virtual Hosts For A Given Ip Address
  Vuln Scanners;RIPS;http://rips-scanner.sourceforge.net/;Rips Is A Tool Written In Php To Find Vulnerabilities In Php Applications Using Static Code Analysis.
  Exploits;ROP Gadget;https://github.com/JonathanSalwan/ROPgadget;Framework For Rop Exploitation
  Basic Penetration Testing Tools;routersploit;https://github.com/reverse-shell/routersploit;Automated Penetration Testing Software For Router
  Cryptography;RSATool;https://github.com/ius/rsatool;Generate Private Key With Knowledge Of P And Q
  Python Other useful libraries and tools;RTGraph3D;http://www.secdev.org/projects/rtgraph3d/;Create Dynamic Graphs In 3D
  Live CD;Samurai;http://samurai.inguardians.com/;The Samurai Web Testing Framework Is A Live Linux Environment That Has Been Pre-Configured To Function As A Web Pen-Testing Environment. The Cd Contains The Best Of The Open Source And Free Tools That Focus On Testing And Attacking Websites.
  Traffic Analysis/Inspection;Sanitize;http://ita.ee.lbl.gov/html/contrib/sanitize.html;Sanitize Is A Collection Of Five Bourne Shell Scripts For Reducing Tcpdump Traces In Order To Address Security And Privacy Concerns, By Renumbering Hosts And Stripping Out Packet Contents. Each Script Takes As Input A Tcpdump Trace File And Generates To Stdout A Reduced, Ascii File In Fixed-Column Format.
  File Extraction;scalpel;https://github.com/sleuthkit/scalpel;Scalpel Is An Open Source Data Carving Tool.
  Web Scanners;ScanEx;http://www.blueinfy.com/tools.html;This Is A Simple Utility Which Runs Against Target Site And Look For External References And Cross Domain Malicious Injections. There Are Several Vulnerable Sites Which Get Manipulated With These Types Of Injections And Compromised.
  Scanning;ScanPBNJ;http://pbnj.sourceforge.net/;Scanpbnj Performs An Nmap Scan And Then Stores The Results In A Database. The Scanpbnj Stores Information About The Machine That Has Been Scanned. Scanpbnj Stores The Ip Address, Operating System, Hostname And A Localhost Bit.
  Networking Tools;Scapy;http://www.secdev.org/projects/scapy/;Scapy Is A Powerful Interactive Packet Manipulation Program. It Is Able To Forge Or Decode Packets Of A Wide Number Of Protocols, Send Them On The Wire, Capture Them, Match Requests And Replies, And Much More.
  
negative.code: Database Vulnerabilities;sqlininja;http://sqlninja.sourceforge.net/;Sqlininja Exploits Web Applications That Use Microsoft Sql Server As A Database Backend. Its Focus Is On Getting A Running Shell On The Remote Host. Sqlninja Doesn'T Find An Sql Injection In The First Place, But Automates The Exploitation Process Once One Has Been Discovered.
  Web;SQLMap;https://github.com/sqlmapproject/sqlmap;Automatic Sql Injection And Database Takeover Tool
  Web Scanners;Sqlsus;http://sqlsus.sourceforge.net/;Sqlsus Is An Open Source Mysql Injection And Takeover Tool, Written In Perl.
  Network;Squidmagic;https://github.com/ch3k1/squidmagic;squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and malicious sites, using Squid proxy server and Spamhaus.
  Malware identification;ssdeep;http://ssdeep.sourceforge.net/;Compute fuzzy hashes.
  Passwords;SSHatter;http://freecode.com/projects/sshatter;Sshatter Uses A Brute Force Technique To Determine How To Log Into An Ssh Server. It Rigorously Tries Each Combination In A List Of Usernames And Passwords To Determine Which Ones Successfully Log In.
  SSL Analysis Tools;sslstrip;https://www.thoughtcrime.org/software/sslstrip/;A Demonstration Of The Https Stripping Attacks
  SSL Analysis Tools;sslstrip2;https://github.com/LeonardoNve/sslstrip2;Sslstrip Version To Defeat Hsts
  