wlr-randr is a utility to manage outputs of a Wayland compositor.

foot is a terminal emulator for systems using the Wayland display server. It is designed to be fast, lightweight, and independent of desktop environments. It can be used as a standalone terminal and also has a server/client mode.

fuzzel is a Wayland-native application launcher, similar to rofi's drun mode. It has Emacs key bindings and remembers frequently launched applications. The font and colors can be configured.

Channel configures River input devices through the River input-management, libinput-configuration and XKB-configuration protocols. It reads profiles and matching rules from the River config.rh file, applying settings when devices appear or the configuration changes. It runs separately from the window manager and does not configure the system or start itself automatically.

wlroots is a set of pluggable, composable, unopinionated modules for building a Wayland compositor.

Swaybg is a wallpaper utility for Wayland compositors.

Mako is a lightweight notification daemon for Wayland compositors that support the layer-shell protocol.

Wayland-Protocols contains Wayland protocols that add functionality not available in the Wayland core protocol. Such protocols either add completely new functionality, or extend the functionality of some other protocol either in Wayland core, or some other protocol in wayland-protocols.

Xwayland is an X server for running X clients under Wayland.

Swaylock is a screen locking utility for Wayland compositors.

River separates Wayland composition from window-management policy. This package builds River with Xwayland support and requires a separate window manager implementing river-window-management-v1. It is used by the XMonad Wayland nested test and does not configure a system session.

whois searches for an object in a WHOIS (RFC 3912) database. It is commonly used to look up the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system. It can automatically select the appropriate server for most queries.

For historical reasons, this package also includes mkpasswd, which encrypts passwords using crypt(3) and is unrelated to the Expect command of the same name.

SDB is a simple key/value database based on djb's cdb disk storage that supports JSON and array introspection.

Netdiscover is a network address discovery tool developed mainly for wireless networks without a DHCP server. It also works on hub/switched networks. It is based on ARP packets, it will send ARP requests and sniff for replies.

Binwalk is a tool for analyzing, reverse engineering, and extracting firmware images.

Radare2 is a complete framework for reverse-engineering, debugging, and analyzing binaries. It is composed of a set of small utilities that can be used together or independently from the command line.

Radare2 is built around a scriptable disassembler and hexadecimal editor that support a variety of executable formats for different processors and operating systems, through multiple back ends for local and remote files and disk images.

It can also compare (diff) binaries with graphs and extract information like relocation symbols. It is able to deal with malformed binaries, making it suitable for security research and analysis.

Reaver performs a brute force attack against an access point's Wi-Fi Protected Setup (WPS) PIN. Once the PIN is found, the WPA passphrase can be recovered and the AP's wireless settings can be reconfigured.

Rizin is a reverse engineering framework and a set of small command-line utilities, providing a complete binary analysis experience with features like disassembler, hexadecimal editor, emulation, binary inspection, debugger, and more.

Lynis is a security auditing tool. It performs an in-depth security scan and runs on the system itself. The primary goal is to test security defenses and provide tips for further system hardening. It will also scan for general system information, vulnerable software packages, and possible configuration issues.

This package provides a tool to demonstrate how easy it is to gain unauthorized access to a system by automatically attempting logins and passwords. It supports a wide range of protocols including SSH, SMTP and HTTP.

mtr combines the functionality of the traceroute and ping programs in a single network diagnostic tool. mtr can use several network protocols to detect intermediate routers (or hops) between the local host and a user-specified destination. It then continually measures the response time and packet loss at each hop, and displays the results in real time.

MASSCAN is an asynchronous TCP port scanner. It can detect open ports, and also complete the TCP connection and interact with the remote application, collecting the information received.

This package provides a wireless network and device detector, sniffer, wardriving tool, and WIDS (wireless intrusion detection) framework. Kismet works with Wi-Fi interfaces, Bluetooth interfaces, some SDR (software defined radio) hardware like the RTLSDR, and other specialized capture hardware

Arp-scan is a tool that uses ARP to discover and fingerprint IP hosts on the local network.