Convention on Cyber Crime

Misuse of devices (Art 6)
The making available (i) devices, including computer programs, designed or adapted primarily for the purpose of committing any of the offences established in Art 2 – 5 or of (ii) passwords or similar data by which a computer system can be accessed for the same motifs or possession of such devices or data with the intent that they be used for such offence.
States may require possession of a number of such items for criminal liability.
Additionally states choose not to criminalise the making available or possession of the devices and programs defined in Art 6 .