Downloads

GPU-accelerated, native, fast. The terminal i actually open.

Lua-configurable cross-platform terminal. Fallback when Ghostty isn't available.

Terminal multiplexer. Surviving SSH disconnects since forever.

Cross-shell prompt. Fast, configurable, looks good out of the box.

Command-line fuzzy finder. Ctrl-R will never feel slow again.

grep replacement. Faster than you'd believe.

cat with syntax highlighting and git integration.

Modern ls. Colors, git status, tree mode.

Modal editing the way it should be. LSP, treesitter, the lot.

The big tent editor. Extensions ecosystem nobody can match.

VSCode fork with AI baked in. Tab autocomplete that actually understands context.

Rust-native editor from the Atom alumni. Insanely fast.

The intercepting proxy. Pro tier unlocks the scanner and extensions you actually want.

Modern web proxy. Lighter than Burp. Workflows are first-class.

Template-based vulnerability scanner. Community templates ship daily.

subfinder, httpx, naabu, katana — the recon backbone.

NSA-built reverse engineering platform. Free IDA Pro competitor.

Network protocol analyzer. The ground truth when nothing else makes sense.

All-in-one honeypot platform. The basis for Joe's honeypots.

The scanner. Host discovery, port states, service/version, NSE scripts.

Internet-scale port scanner. Whole /0 in minutes if your link can take it.

Attack-surface mapping and subdomain enumeration done right.

Fast web fuzzer. Content discovery, vhosts, parameters.

Directory, DNS and vhost brute-forcer in Go.

Automatic SQL injection and database takeover.

Free web app proxy/scanner. The open alternative when Burp Pro isn't around.

Search engine for exposed devices and services.

Link-analysis and OSINT graphing. Community edition is free.

Emails, subdomains, hosts and names from public sources.

The distro. Hundreds of tools, preconfigured, maintained.

The exploitation framework. Modules, payloads, post-ex.

Open-source cross-platform C2. The serious free Cobalt Strike alternative.

Modern malleable C2 framework with a clean operator UI.

Plugin-based C2 with a browser UI. Bring your own agent.

The commercial red-team standard. Beacon, malleable C2.

Active Directory attack-path mapping. Community Edition.

Network swiss-army knife (the maintained CrackMapExec successor).

Python classes for network protocols. secretsdump, psexec, ntlmrelayx.

LLMNR/NBT-NS/MDNS poisoner and rogue auth server.

Windows credential extraction. The reason you rotate krbtgt.

World's fastest password recovery. GPU-accelerated.

The other cracker. Jumbo build covers everything.

Wi-Fi security auditing suite. Capture, crack, replay.

Automated adversary emulation mapped to ATT&CK.

Small, portable ATT&CK technique tests. Validate detections.

Full compromise-assessment scanner. Thousands of hand-crafted YARA/Sigma rules.

Free IOC and YARA scanner with the open signature base.

Lightweight Sigma-based endpoint agent. Real-time detection, your rules.

Free Aurora agent on the open Sigma rule set.

Schedule, configure and manage scans across the whole fleet.

Curated high-quality YARA/Sigma rule feed. Thousands, hand-made.

Free simple IOC and YARA scanner. The original from Florian Roth.

Pattern-matching for malware researchers. Write rules, hunt files.

Generic detection rule format. Write once, convert to any SIEM.

Endpoint visibility and DFIR at scale. VQL hunts across the fleet.

Memory forensics framework. Pull secrets and rootkits out of RAM.

High-performance IDS/IPS and network security monitoring.

Network analysis framework. Rich connection logs, not just alerts.

Full-packet capture, indexing and search at scale.

The cyber swiss-army knife. Decode, deobfuscate, transform, in the browser.

Procmon, Autoruns, Procexp and friends. Windows internals, exposed.

The DFIR artifact toolkit — MFTECmd, KAPE, Registry Explorer.

Open-source digital forensics platform on top of Sleuth Kit.

Open-source XDR/SIEM. Agents, detections, compliance.

Free Linux distro for IDS, NSM and log management.

Threat-intelligence sharing platform. IOCs with context.

Docker Desktop replacement. Faster, lighter, also runs linux VMs.

Infra as code. The default for multi-cloud.

Terraform's open-source fork. License-resilient.

Kubernetes TUI. Navigate clusters without kubectl carpal tunnel.

Kubernetes IDE. When you need a UI, this is it.

WireGuard mesh that just works. Zero config, real SSO.

Free fast VPN-ish layer using Cloudflare's 1.1.1.1 backbone.

Privacy-first VPN. No accounts, flat fee, pay in cash if you want.

Spotlight replacement on creatine. Extensions for everything.

Window management with keyboard shortcuts. Free alternative to Magnet.

Password manager. Worth every cent for SSH key delegation alone.

Open-source password manager. Self-hostable.

Notepad calculator. 'how many days until friday' just works.

Collaborative design tool. The default for UI/UX.

Hand-drawn diagrams. The whiteboard tool.

One-time purchase Photoshop/Illustrator. No subscription.

Pro video editing for free (Studio is paid). Color, audio, fusion.

Local-first markdown notes. Backlinks, graph, plugins.

Outliner-first PKM. Open source, local-first.

Spaced repetition flashcards. For the things you want to actually remember.

(See cloud) — the fast docker replacement on mac.

Polyglot tool version manager. Replaces asdf + nvm + pyenv + rbenv.

10–100x faster Python package manager from Astral. Replaces pip + venv + pipx.

Fast all-in-one JS runtime, bundler, package manager.

GitHub from the terminal. PRs, issues, releases, gists.

Terminal git UI. Stage hunks, rebase, resolve conflicts without leaving your terminal.

The missing package manager for macOS. Or Linux.

Menubar system monitor. CPU, GPU, network, disk, fans.

Battery charging limit for Mac laptops. Extends battery lifespan.

Screenshot tool that fixes every macOS screenshot pain point.

Menubar system monitor — the paid alternative to Stats.

Browser as workspace. Sidebar tabs, spaces, profiles.

Firefox-based, privacy-first, beautiful UI.

The browser that still cares about the open web.