TOOL LIBRARY
Choose a tool
Find a tool for your task and start with an example that runs.
Search for the job you need to do, then open a tool for a downloadable example, its inputs, and the result to look for. Run GET /v1/tools to check which tools are ready in your own deployment.
66 tools
| Tool / task | Category | Version | AWS snapshot |
|---|---|---|---|
| AFL++Time-bounded instrumented fuzzing | fuzzing | 4.21c-5 | Qualified |
| AmassAsset and domain discovery | network-discovery | 5.1.3-sr1 | Qualified |
| ApktoolAndroid package inspection | file-and-binary-analysis | 2.7.0+dfsg-7 | Qualified |
| Atomic Red TeamNative detection-test execution | detection-engineering | 2026.11.06-a0e3f9bc | Qualified |
| BanditPython source security checks | source-and-dependencies | 1.8.6 | Qualified |
| BloodHoundAnalysis of supplied identity graph data | offensive-validation | 9.9.2 | Qualified |
| boofuzzTime-bounded protocol fuzzing | fuzzing | 0.4.2 | Qualified |
| Burp SuiteAutomated web assessment integration | web-testing | 2026.10.1-0kali1 | Qualified |
| CaidoWeb testing workflow integration | web-testing | 0.59.0 | Qualified |
| CALDERABounded adversary emulation job | detection-engineering | 5.3.0-0kali2-sr1 | Qualified |
| capaExecutable capability analysis | file-and-binary-analysis | 10.0.0 | Qualified |
| ChainsawSearch supplied Windows forensic artifacts | forensics-and-event-logs | 2.17.1 | Qualified |
| CheckovInfrastructure configuration checks | cloud-containers-and-iac | 3.2.495 | Qualified |
| ClamAVSignature checks on supplied files | file-and-binary-analysis | 1.4.3+dfsg-1 | Qualified |
| CodeQLSource query evaluation | source-and-dependencies | 2.27.4 | Qualified |
| dnsxDNS queries and enumeration | network-discovery | 1.3.1 | Qualified |
| ExifToolFile metadata extraction | file-and-binary-analysis | 13.25+dfsg-1 | Qualified |
| feroxbusterWeb content discovery | web-testing | 2.13.1 | Qualified |
| ffufBounded HTTP input fuzzing | web-testing | 2.1.0-1+b9 | Qualified |
| FLOSSExecutable string extraction | file-and-binary-analysis | 3.2.0 | Qualified |
| GhidraHeadless binary analysis | file-and-binary-analysis | 12.2 | Qualified |
| GitleaksSecret detection in supplied source | source-and-dependencies | 8.30.1 | Qualified |
| GobusterDirectory and DNS discovery | web-testing | 3.6.0-1+b10 | Qualified |
| Greenbone Vulnerability ManagementVulnerability management and scanning | web-testing | 25.04.3 | Qualified |
| GrypeVulnerability checks on supplied inventory | cloud-containers-and-iac | 0.121.3 | Qualified |
| HashcatBounded offline password audit | password-auditing | 6.2.6+ds2-1+b1 | Qualified |
| HayabusaWindows event log detection and timelines | forensics-and-event-logs | 4.3.1 | Qualified |
| httpx (ProjectDiscovery)HTTP endpoint probing | network-discovery | 1.12.0 | Qualified |
| ImpacketNetwork protocol tools and Python API | offensive-validation | 0.13.1 | Qualified |
| John the RipperBounded offline password audit | password-auditing | 1.9.0-jumbo-g37bebbe4 | Qualified |
| KatanaScoped web crawling | network-discovery | 1.8.0 | Qualified |
| kube-benchKubernetes benchmark checks | cloud-containers-and-iac | 0.16.0 | Qualified |
| KubescapeKubernetes configuration assessment | cloud-containers-and-iac | 4.0.20 | Qualified |
| LynisGuest system audit | host-assessment | 3.1.4-1 | Qualified |
| Metasploit FrameworkNative framework modules and payload tooling | offensive-validation | 6.5.7-0kali1 | Qualified |
| NetExecScoped network service assessment | offensive-validation | 1.5.1 | Qualified |
| NiktoWeb server checks | web-testing | 2.6.1 | Qualified |
| NmapService and port inventory | network-discovery | 7.95+dfsg-3 | Qualified |
| NucleiTemplate-based vulnerability checks | web-testing | 3.11.1 | Qualified |
| oletoolsOffice document inspection | file-and-binary-analysis | 0.60.2 | Qualified |
| OpenSCAPSecurity content and benchmark evaluation | host-assessment | 1.4.2+dfsg-1 | Qualified |
| osqueryBounded guest inventory queries | host-assessment | 5.24.1 | Qualified |
| OSV-ScannerDependency vulnerability assessment | source-and-dependencies | 2.7.1 | Qualified |
| OWASP Dependency-CheckDependency vulnerability assessment | source-and-dependencies | 13.0.0 | Qualified |
| OWASP ZAPBounded automated web assessment | web-testing | 2.17.0 | Qualified |
| PEASS-ngGuest privilege configuration enumeration | offensive-validation | 20261109-f4fdadd7 | Qualified |
| PlasoTimeline extraction from supplied evidence | forensics-and-event-logs | 20241006-3 | Qualified |
| PowerShellExplicit script and inventory tasks | host-assessment | 7.6.9 | Qualified |
| radare2Scripted binary inspection | file-and-binary-analysis | 6.2.6 | Qualified |
| SearchSploit / Exploit-DBSearch pinned exploit metadata | offensive-validation | 2026.10.27-f08907b1 | Qualified |
| SemgrepSource rule evaluation | source-and-dependencies | 1.145.0 | Qualified |
| Sigma CLIRule conversion and validation | detection-engineering | 4.0.0 | Qualified |
| sqlmapScoped SQL injection validation | web-testing | 1.9.6-1 | Qualified |
| SubfinderSubdomain discovery | network-discovery | 2.17.0 | Qualified |
| SuricataRule evaluation on supplied packet capture | packet-analysis | 1:7.0.10-1+deb13u4 | Qualified |
| SyftSoftware inventory and SBOM generation | cloud-containers-and-iac | 1.57.1 | Qualified |
| SysmonLinux guest process and file event collection | observation-components | 1.6.0 | Qualified |
| testssl.shTLS configuration checks | network-discovery | 3.2.5 | Qualified |
| TetragonLinux guest execution and IO collection | observation-components | 1.8.0 | Qualified |
| TrivyImage and configuration assessment | cloud-containers-and-iac | 0.76.2 | Qualified |
| TruffleHogSecret discovery and optional verification | source-and-dependencies | 3.99.8 | Qualified |
| Volatility 3Supplied memory image analysis | forensics-and-event-logs | 2.28.2 | Qualified |
| WhatWebWeb technology identification | network-discovery | 0.5.5-1 | Qualified |
| WPScanWordPress assessment | web-testing | 4.2.0 | Qualified |
| YARARules against supplied files | file-and-binary-analysis | 4.5.4 | Qualified |
| ZeekProtocol analysis of supplied packet capture | packet-analysis | 9.0.1 | Qualified |