Linux Cybersecurity Tools
Tools for network analysis, security testing, forensics, monitoring and auditing, for authorised security work.
These are established tools used by security professionals, administrators and students. Use them only on systems and networks you own or have explicit permission to test. Aptorise lists software; it doesn't provide attack instructions.
Part of the Cybersecurity toolkit, which explains when you would use each tool.
Network analysis
Capture traffic and map networks you're responsible for.
Web application security testing
Intercept and analyse web traffic to find security issues in applications.
- Burp Suite Community Edition
Widely used web testing toolkit; free Community Edition.
FreemiumWin / Mac / Linux
Vulnerability assessment
Scan systems you manage for known vulnerabilities and misconfigurations.
- Greenbone Community Edition (OpenVAS)
Open-source vulnerability scanning and reporting.
Open SourceLinux
Digital forensics
Examine storage and file systems during investigations.
OSINT
Collect publicly available information, for example during an authorised assessment.
Incident response
Collect evidence and visibility from endpoints during an incident.
Defensive monitoring
Monitor network traffic for suspicious activity.
Security auditing
Review hardening and configuration against good practice.
Wireless analysis
Test the security of Wi-Fi networks you're authorised to assess.
- Aircrack-ng
Tests the security of Wi-Fi networks you own or are authorised to assess.
Open SourceWin / Linux
Password auditing
Test whether password hashes from systems you're responsible for are weak.