SECURITY TOOLS 3

Know your network. Not just its IPs.

idNX maps active hosts, identifies devices, probes exposed services and builds a readable picture of your local network from a single command.

It decodes LLDP, CDP and MNDP, walks cascaded subnets and fingerprints devices, then exports to JSON, YAML, XML, CSV or plain text. Written in Rust, open source.

Runs on macOS, Windows and Linux, on both x86_64 and ARM, and can also be used as a Rust library.

PLATFORMS

macOS · Windows · Linux

LICENSE

Apache-2.0

File capability extractor.

capa-rs tells you what a program can do. Point it at a PE, .NET, ELF or Mach-O binary, or at shellcode, and it reports capabilities mapped to MITRE ATT&CK and MBC.

It also runs binary hardening checks and matches FLIRT signatures. Available as a Rust library (capa = "0.5") and a command-line tool.

Useful for triaging unknown files: you get a list of behaviours before you open a disassembler. Try it in the browser at analyze.rs.

PLATFORMS

macOS · Windows · Linux

LICENSE

Apache-2.0

Upload a file, see what it can do.

analyze.rs is the online front end for capa-rs. Drop in a binary and get its capabilities back in the browser, with an API for automation.

PLATFORMS

Web