Site Name URL Description
Censys https://censys.com Up-to-date map of the internet for assessing attack surface for Internet connected devices.
Certificate Search https://crt.sh A web interface that lets you search for web certificates.
CertStream https://certstream.calidog.io An intelligence feed that gives you real-time updates from the Certificate Transparency Log network.
Columbus Project https://columbus.elmasy.com A subdomain enumeration service with advanced queries.
Cookiedatabase https://cookiedatabase.org Cookie details and the services that place these cookies.
CVExploits https://cvexploits.io A comprehensive database for CVE exploits from across the internet.
Dehashed https://www.dehashed.com Data-mining and deep web asset search engine.
FOFA Search Engine https://en.fofa.info Search engine for cyberspace.
FullHunt https://fullhunt.io Attack surface database of the entire Internet.
Grayhatwarfare https://buckets.grayhatwarfare.com Search for Open Amazon s3 Buckets and their contents.
GreyNoise Visualizer https://viz.greynoise.io A platform that collects and analyzes Internet-wide scan and attack traffic.
Hudson Rock https://www.hudsonrock.com Free cybercrime intelligence tools.
IBM X-Force Exchange https://exchange.xforce.ibmcloud.com Search the latest global security threats.
Phonebook.cz https://phonebook.cz Phonebook lists all domains, email addresses, or URLs for the given input domain with 121 billion records.
PimEyes https://pimeyes.com PimEyes is an online face search engine.
PublicWWW https://publicwww.com Source code search engine to find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code.
RocketReach https://rocketreach.co A data broker that curates a massive database containing contact information.
Shodan https://www.shodan.io Search engine for Internet-connected devices.
Simple Email Reputation https://emailrep.io Search and discover the reputation behind an email address.
TableConvert https://tableconvert.com/excel-to-textile Convert Excel data to Textile Table.
ZoomEye https://www.zoomeye.org A cyberspace search engine.
whatismytenantid https://www.whatismytenantid.com Find the Microsoft Azure and Microsoft 365 tenant ID for a domain name.
Site Name URL Description
DNSLog Platform https://dnslog.cn Allows anyone to get a random subdomain under 'dbslog.cn'. The website allows you to monitor any resolution requests for the random subdomain you generated.
ExpiredDomains https://www.expireddomains.net All the information on expired domains that are pending delete.
Google Public DNS https://dns.google Online DNS name resolver.
OpenDNS https://community.opendns.com/domaintagging Domain tagging.
Robtex https://www.robtex.com/ Robtex uses various sources to gather public information about IP numbers, domain names, host names, Autonomous systems, routes etc.
Symantec Sitereview https://sitereview.bluecoat.com Check and dispute the current WebPulse categorization for any URL.
ViewDNS.info https://viewdns.info Gather a large amount of data about a given website or IP address.
WhoisXML API https://whois-history.whoisxmlapi.com WHOIS history tools to check domain name ownership history.
Site Name URL Description
42Crunch https://42crunch.com/freemium Online API security scanner.
AntiScan https://antiscan.me Scan your file with over 26 anti-viruses.
Hacker Target https://hackertarget.com Hosted vulnerability scanners.
Mozilla Observatory https://observatory.mozilla.org Set of tools to analyze a website and inform you if it is not using the many available methods to secure it.
Netcraft https://www.netcraft.com Scan and discover the web technologies and internet infrastructure powering any site.
Pentest Tools https://pentest-tools.com Various online pentesting and scanning tools.
Qualys SSL Labs https://www.ssllabs.com/ssltest SSL server test that performs a deep analysis of the configuration of any SSL web server on the public Internet.
VirusTotal https://www.virustotal.com Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.
Wappalyzer https://www.wappalyzer.com Find out the technology stack of any website.
Site Name URL Description
AbuseIPDB https://www.abuseipdb.com A central blacklist for webmasters, system administrators, and other interested parties to report and find IP addresses that have been associated with malicious activity online.
Cisco Talos https://www.talosintelligence.com Various intelligence on IPs, domains etc.
IPaddressguide https://www.ipaddressguide.com Free IP address and other Internet related tools.
IPcalc https://jodies.de/ipcalc Takes an IP address and netmask and calculates the resulting broadcast, network, Cisco wildcard mask, and host range.
IPinfo https://ipinfo.io IP geolocation, company, carrier and IP type data sets.
IPvoid https://www.ipvoid.com A range of IP address tools to discover details about IP addresses. IP blacklist check, whois lookup, dns lookup, ping etc.
Ifconfig.me https://ifconfig.me/ An online tool to get your public IP address.
NetworksDB https://networksdb.io Information about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organization's across the world along with city-level IP geolocation data and autonomous system information.
Project Honey Pot https://www.projecthoneypot.org List of comprised and Malicious IPs and other data.
Site Name URL Description
AADInternals https://aadinternals.com/aadinternals The ultimate Entra ID (Azure AD) / Microsoft 365 hacking and admin toolkit.
AMSI.fail https://amsi.fail Generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
ANY.RUN https://any.run Interactive online malware analysis service.
APKCombo https://apkcombo.com Download Android APK mobile apps from Google Play store.
ASCII Character Chart https://www.eso.org/~ndelmott/ascii.html ASCII character chart with decimal, binary and hexadecimal conversions.
ASP.NET ViewState Decoder https://www.httpdebugger.com/tools/ViewstateDecoder.aspx Decode the ASP.NET ViewState strings and display in tree view format online.
Basic Authenticator Header Generator https://www.blitter.se/utils/basic-authentication-header-generator Create basic authenticator headers online.
Browserling https://www.browserling.com Online cross-browser testing tool.
Canarytokens https://canarytokens.org Create payloads that trigger an alert when a victim accesses them.
Code Beautify https://codebeautify.org Code Formatter, JSON Beautifier, XML Viewer, Hex Converters and more.
DB Fiddle https://dbfiddle.uk Testing SQL commands across a variety of database schemas.
dCode.fr https://www.dcode.fr A collection of over 900 tools to help solve games, riddles, ciphers, mathematics, puzzles, etc.
de4js https://lelinhtinh.github.io/de4js Online JavaScript deobfuscator and unpacker.
Excalidraw https://excalidraw.com A whiteboard tool that lets you sketch diagrams that have a hand-drawn feel to them.
GraphiQL Online https://lucasconstantino.github.io/graphiql-online Online available instance of GraphiQL.
iKat https://www.ikat.kronicd.net Aid security consultants with the task of auditing the security of Kiosk terminals.
JSON Web Tokens Builder https://jwtbuilder.jamiekurtz.com Creating JSON Web Tokens online for use in testing.
JWT https://jwt.io Decode, verify and generate JWT.
Living Off Trusted Sites (LOTS) Project https://lots-project.com List of websites that allow attackers to use their domain or subdomain for hosting phishing, C&C etc.
Online Reverse Shell Generator https://www.revshells.com An online reverse shell generator.
OWASP Risk Rating Calculator https://www.owasp-risk-rating.com Risk Rating Calculator based on OWASP's Risk Rating Methodology.
Pastebin https://pastebin.com Store any text online for easy sharing. Find leaked creds etc.
Pine Tools https://pinetools.com/generate-list-numbers Generate a list of numbers online.
PostBin https://www.toptal.com/developers/postbin Collect all requests to a special URL which you can use to test for out-of-band vulnerabilities.
Replit https://replit.com Online integrated development environment.
Reviews https://reviewsonmywebsite.com/google-review-link-generator Google review link generator
Sandboxie-Plus https://sandboxie-plus.com A sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems
SQL Fiddle https://sqlfiddle.com Online SQL compiler that lets you write, edit, and execute any SQL query.
Unit Conversion https://www.unit-conversion.info A comprehensive unit conversion website.
UUID Generator https://www.uuidgenerator.net Online UUID Generator.
W3cub Tools https://tools.w3cub.com/html-escape-unescape HTML escape and unescape online.
W3Schools iFrame www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe Online iFrame tool. Create and test iFrames online.
WhatIsMyBrowser https://www.whatismybrowser.com Know what browser you're using, with a list of your web browser's settings.
Wormhole https://wormhole.app Share files with end-to-end encryption and a link that automatically expires. Useful for data exfiltration.
Site Name URL Description
CrackStation https://crackstation.net CrackStation uses massive pre-computed lookup tables to crack password hashes.
CyberChef https://gchq.github.io/CyberChef The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis.
dCode.fr https://www.dcode.fr A collection of over 900 tools to help solve games, riddles, ciphers, mathematics, puzzles, etc.
Dehashed https://www.dehashed.com Data-mining and deep web asset search engine.
Hashes https://hashes.com/en/decrypt/hash Decrypt MD5, SHA1, MySQL, NTLM, SHA256, MD5 Email, SHA256 Email, SHA512 hashes.
NTLM to Password https://ntlm.pw NTLM to plaintext password "cracking" service, using a custom high performance database with billions of precomputed password hashes
MD5Hashing.net https://md5hashing.net Hash and decode various hashes.
Nitrxgen MD5 Database https://nitrxgen.net/md5db A look-up tool for typical unsalted MD5 cryptographic hashes. The database currently contains 1.1+ trillion passwords.
Online Hash Crack https://www.onlinehashcrack.com Professional Cloud Password Testing & Recovery Services.
Online Hash Tools https://onlinehashtools.com Online hash tools is a collection of useful utilities for cryptographically hashing data.