Download CySecTek for Windows
One installer, free, with no account, no licence key and no trial period. Two packages: the .exe for a normal install, and an .msi for deploying it across a fleet.
Windows will warn you. Here is why.
The installer is not code-signed yet, so SmartScreen shows “Windows protected your PC”. That is Windows correctly telling you nobody has vouched for the file — not a false positive to wave away.
Verify the SHA-256 below before you run it, and read the full explanation and roadmap.
Step one
Verify what you downloaded
Because the installer is unsigned, this is the check that actually tells you the file is ours.
Get-FileHash .\CySecTek_0.7.1_x64-setup.exe -Algorithm SHA256Compare the output with the value on the right. If they differ, delete the file and download it again from cysectek.com — do not run it.
- CySecTek_0.7.1_x64-setup.exe
- 5a8d8c69edec4094860863d4f5d92ced685e6600e00aecaae495da8b4b2482b4
- CySecTek_0.7.1_x64_en-US.msi
- 73a833d4ee22a9c2f26ed899f07b7b80c1daf29ccddb7c94efacc4c9c1d63756
Before you install
What it needs
Two of the twelve tools have an extra dependency. The rest work with what the installer puts on the machine.
- Operating system
- Windows 10 or Windows 11, 64-bit (x64).
- WebView2 runtime
- Microsoft Edge WebView2 runtime. Present on current Windows 11 and on Windows 10 with recent updates; where it is missing the installer fetches and installs it, which needs an internet connection during setup.
- Npcap (optional)
- Npcap, only for Port Finder and Packet Capture. Installed separately from npcap.com; everything else works without it. Installation steps.
- Administrator (optional)
- Administrator rights, only for Packet Capture.
- Disk space
- Roughly 45 MB installed.
- Network
- No internet connection required for normal use. Version checks and the public-IP display need one; everything else works on an isolated network.
Getting started
Installing, upgrading, first launch
Install
Run the .exe and accept the SmartScreen warning once you have checked the hash. It installs per-user, so it does not need administrator rights.
Installation guide →Set the app password
On first launch you choose a password. It is not a screen lock — it is the key your saved credentials are encrypted with, and it cannot be recovered. Put it somewhere safe.
First launch →Add Npcap if you need it
Only for Port Finder and Packet Capture. Everything else — scanning, SSH, SFTP, serial, TFTP, DHCP — works without it.
Installing Npcap →Upgrading from an earlier version
Install over the top; saved connections, host keys and settings are kept. Upgrading from before 0.7.0 introduces the app password for the first time, and any passwords you had saved are moved onto the new key as soon as you set it.
Upgrading and migrating →Deploying across a fleet
The MSI is there for Intune and GPO. Note that it is unsigned, which most deployment tooling will flag — that is worth knowing before you plan a rollout.
Enterprise deployment →Version 0.7.1
What changed in this release
Fixes SSH and file transfer against equipment that would not connect at all. Anything offering ecdh-sha2-nistp256 or the SHA-1 key exchanges — which is most enterprise network hardware and all older kit — failed with "No common key exchange algorithm", which read as a network fault and was not one. Both the terminal and file transfer now negotiate the algorithms that equipment actually speaks, modern ones first, so a device that refused you before should simply open. SSH and SFTP also authenticate with a private key now, not just a password. Choose Private key on the connection form and any keys already in ~/.ssh are offered as one click; otherwise browse for one. OpenSSH format keys work — Ed25519, RSA and ECDSA — including encrypted ones, where the password field becomes the passphrase and is left blank if the key has none. A saved key connection reconnects in one click without asking for anything. PuTTY's own .ppk is not readable: the app says so and names the PuTTYgen steps to export an OpenSSH key instead. There is no SSH agent support. Passphrases you save are encrypted with your app password exactly as passwords are; the key file itself is never copied, only its location remembered. The SSH and serial terminals also have visible Copy and Paste buttons. The clipboard already worked — select to copy, right-click to paste, Ctrl+Shift+C and Ctrl+Shift+V — but none of that is discoverable, and Ctrl+C in a terminal interrupts the running command rather than copying. The buttons name the shortcuts in their tooltips.