Security Tools We Actually Use
A short, curated list of the tools we reach for day-to-day at ThreatChain. No affiliate spam — only things we run ourselves for threat research, contract audits, and incident response.
Shodan
Search engine for internet-connected devices. Finds exposed databases, ICS, RDP, and forgotten admin panels in seconds.
Censys Search
Continuous internet-wide scan with deep TLS / HTTP / JARM fingerprinting. Better for cert-based threat-actor pivots than Shodan.
Nuclei
Template-based vulnerability scanner from ProjectDiscovery. 9,000+ community templates covering CVEs, misconfigs, and takeovers.
Burp Suite
The gold standard for web-app proxy / request tampering. Intruder, Repeater, and Collaborator are unmatched.
Any.Run
Interactive malware sandbox — watch a sample detonate in a real desktop VM and pivot on IOCs as they're generated.
Hybrid Analysis
Free automated sandbox run by CrowdStrike. Great for quick YARA matches and network IOC extraction.
Slither
Static analyzer for Solidity and Vyper from Trail of Bits. Catches 80+ bug classes faster than any manual review.
Foundry
Modern Ethereum development toolkit — Forge for testing, Cast for chain calls, Anvil for local fork. Rust-fast.
Mythril
Symbolic-execution engine for EVM bytecode. Finds integer overflows and reachability bugs that static tools miss.
Hashcat
GPU-accelerated password cracker supporting 350+ hash modes. The workhorse for every hash recovery job.
CyberChef
"The Cyber Swiss Army Knife" — 300+ operations for encoding, hashing, network, crypto, and binary analysis, chained visually.
Wireshark
Deep packet inspection. Reconstructs TCP streams, decodes TLS with keys, and has dissectors for virtually every protocol.
Ghidra
NSA's open-source RE suite — decompiler, disassembler, scripting in Java or Python, collaborative projects.
ThreatChain SolidGuard
Yes, our own tool. AI-powered smart-contract auditor with 115 vulnerability detectors for Solidity, Rust, Move, Vyper, and Cairo.