DefensiveCLI
AIDE
File and directory integrity monitoring.
Startup verified · Development
Tool catalog
Find the tool for your task.
All 64 tools below are installed and startup-tested on the Nulx development system. Browse by purpose, then learn what each tool can do. No public ISO is available yet.
Startup-tested in development on September 27, 2026. Complete lab workflows still need wider testing. Some tools require setup, privileges or extra data.
Test scope and remaining work →64 tools shown · Installed in development · Public release pending
WirelessCLI
Aircrack-ng
Wireless network assessment suite for owned or explicitly authorized environments.
Startup verified · Development
CloudCLI
Ansible Core
Repeatable configuration automation for controlled labs and infrastructure.
Startup verified · Development
ReconCLI
arp-scan
Local-network discovery and fingerprinting for authorized environments.
Startup verified · Development
DefensiveCLI
Audit
Linux audit framework utilities for accountable host event collection and review.
Startup verified · Development
Reverse engineeringCLI
Binwalk
Firmware image identification and embedded-file analysis.
Startup verified · Development
ContainersCLI
Buildah
Daemonless OCI image construction.
Startup verified · Development
Reverse engineeringCLI
Checksec
Binary hardening and executable security-property inspection.
Startup verified · Development
DefensiveCLI
ClamAV
Open-source malware scanning engine and signature tooling.
Startup verified · Development
WebCLI
DIRB
Wordlist-based content discovery on websites you have permission to test.
Startup verified · Development
ReconCLI
DNSRecon
DNS enumeration for owned or explicitly authorized domains.
Startup verified · Development
DFIRCLI
EWF Tools
Expert Witness Format forensic image access and conversion.
Startup verified · Development
DFIRCLI
ExifTool
Read and inspect metadata in images, documents and other files.
Startup verified · Development
DefensiveCLI
Fail2ban
Log-driven service protection with configuration and activation kept explicitly opt-in.
Startup verified · Development
WebCLI
ffuf
Fast HTTP fuzzing for explicitly authorized web targets.
Startup verified · Development
SandboxCLI
Firejail
Application isolation using Linux namespaces and security profiles. Defaults still need release review.
Startup verified · Development
DFIRCLI
Foremost
File carving and recovery from disk images and captured media.
Startup verified · Development
Reverse engineeringCLI
GDB
Native binary debugging and crash analysis.
Startup verified · Development
Reverse engineeringGUI / CLI
Ghidra
Software reverse engineering, disassembly and analysis. Headless analysis passed the development fixture.
Startup verified · Development
DevelopmentCLI
Git LFS
Versioned handling of large project assets through Git-compatible pointers.
Startup verified · Development
DevelopmentCLI
GitHub CLI
Command-line GitHub workflows without embedding accounts or credentials in Nulx.
Startup verified · Development
DevelopmentCLI
Go
Compiler and development environment for modern security tooling.
Startup verified · Development
WebCLI
Gobuster
Directory, DNS, and virtual-host discovery for authorized targets.
Startup verified · Development
Password auditCLI
Hashcat
Password-hash recovery and auditing on owned or authorized data.
Startup verified · Development
DFIRCLI
hashdeep
File hashing and comparison for evidence integrity and triage.
Startup verified · Development
ReconCLI
hping3
Packet generation and inspection for controlled network diagnostics.
Startup verified · Development
Password auditCLI
Hydra
Authentication auditing for services and accounts under explicit authorization.
Startup verified · Development
Password auditCLI
John the Ripper
Password-hash auditing for owned or authorized data.
Startup verified · Development
Reverse engineeringCLI
ltrace
Dynamic tracing of userspace library calls for debugging and analysis.
Startup verified · Development
DefensiveCLI
Lynis
Local Unix security auditing and hardening assessment.
Startup verified · Development
ReconCLI
MASSCAN
High-speed TCP discovery for tightly scoped authorized networks.
Startup verified · Development
WebCLI / Web
mitmproxy
Interactive HTTP inspection for your own applications and lab traffic.
Startup verified · Development
ReconCLI
NBTscan
NetBIOS name discovery for network inventory and investigation.
Startup verified · Development
DevelopmentCLI
Neovim
Extensible terminal editor for code, configuration, and operational notes.
Startup verified · Development
NetworkCLI
Net-SNMP client tools
SNMP queries and inspection without running an SNMP server.
Startup verified · Development
ReconCLI
Netdiscover
Active and passive ARP discovery on authorized local networks.
Startup verified · Development
WebCLI
Nikto
Web-server checks for known issues and unsafe configuration. Redistribution review remains open.
Startup verified · Development
ReconCLI
Nmap
Host discovery and port inspection for networks you are authorized to assess.
Startup verified · Development
DevelopmentCLI
Node.js
JavaScript runtime and development environment for modern automation tooling.
Startup verified · Development
ReconCLI
onesixtyone
SNMP discovery for devices in an explicitly authorized test scope.
Startup verified · Development
NetworkCLI
OpenBSD netcat
TCP and UDP connections for testing your own network services.
Startup verified · Development
DevelopmentCLI
pipx
Isolated installation and execution of Python command-line applications.
Startup verified · Development
ContainersCLI
Podman
Daemonless OCI container and pod management.
Startup verified · Development
DevelopmentCLI
Python 3
General-purpose development and security automation environment.
Startup verified · Development
Reverse engineeringCLI
radare2
Binary inspection and reverse engineering from the terminal.
Startup verified · Development
DefensiveCLI
Rootkit Hunter
On-demand host checks for known rootkit indicators and suspicious local state.
Startup verified · Development
DevelopmentCLI
Rust Toolchain
Compiler, Cargo, analyzer, Clippy, and formatting tools.
Startup verified · Development
DFIRCLI
Scalpel
File carving from disk images and recovery media.
Startup verified · Development
DevelopmentCLI
ShellCheck
Static analysis for shell scripts and automation quality checks.
Startup verified · Development
ContainersCLI
Skopeo
Inspect, copy, and verify OCI container images without a daemon.
Startup verified · Development
NetworkCLI
socat
Socket and stream relays for lab connectivity and troubleshooting.
Startup verified · Development
WebCLI
sqlmap
SQL injection assessment for explicitly authorized applications.
Startup verified · Development
WebCLI
sslscan
TLS protocol, cipher and certificate inspection.
Startup verified · Development
DefensiveCLI
Suricata
On-demand network intrusion detection and PCAP analysis.
Startup verified · Development
NetworkCLI
tcpdump
Command-line packet capture and focused traffic inspection.
Startup verified · Development
DFIRCLI
TestDisk
Partition recovery and filesystem repair tooling for controlled recovery work.
Startup verified · Development
DFIRCLI
The Sleuth Kit
Filesystem and volume forensics command suite.
Startup verified · Development
NetworkCLI
traceroute
IPv4 and IPv6 path tracing for connectivity diagnosis.
Startup verified · Development
NetworkCLI
TShark
Console protocol analysis powered by Wireshark.
Startup verified · Development
WebCLI
WhatWeb
Web technology identification for owned or explicitly authorized targets.
Startup verified · Development
ReconCLI
whois
Domain and network registration lookups.
Startup verified · Development
NetworkGUI / CLI
Wireshark
Network protocol analysis for traffic inspection and investigation.
Startup verified · Development
DFIRCLI
YARA
Pattern matching for malware research and file triage.
Startup verified · Development
DefensiveCLI
Zeek
Network traffic analysis and structured security logs. Redistribution documentation remains open.
Startup verified · Development
No public catalog entries match this filter.
Guided discovery