|
Site Name |
URL |
Description |
|
AADInternals |
https://aadinternals.com/aadinternals |
The ultimate Entra ID (Azure AD) / Microsoft 365 hacking and admin toolkit. |
|
AMSI.fail |
https://amsi.fail |
Generates obfuscated PowerShell snippets that break or disable AMSI for the current process. |
|
ANY.RUN |
https://any.run |
Interactive online malware analysis service. |
|
APKCombo |
https://apkcombo.com |
Download Android APK mobile apps from Google Play store. |
|
ASCII Character Chart |
https://www.eso.org/~ndelmott/ascii.html |
ASCII character chart with decimal, binary and hexadecimal conversions. |
|
ASP.NET ViewState Decoder |
https://www.httpdebugger.com/tools/ViewstateDecoder.aspx |
Decode the ASP.NET ViewState strings and display in tree view format online. |
|
Basic Authenticator Header Generator |
https://www.blitter.se/utils/basic-authentication-header-generator |
Create basic authenticator headers online. |
|
Browserling |
https://www.browserling.com |
Online cross-browser testing tool. |
|
Canarytokens |
https://canarytokens.org |
Create payloads that trigger an alert when a victim accesses them. |
|
Code Beautify |
https://codebeautify.org |
Code Formatter, JSON Beautifier, XML Viewer, Hex Converters and more. |
|
DB Fiddle |
https://dbfiddle.uk |
Testing SQL commands across a variety of database schemas. |
|
dCode.fr |
https://www.dcode.fr |
A collection of over 900 tools to help solve games, riddles, ciphers, mathematics, puzzles, etc. |
|
de4js |
https://lelinhtinh.github.io/de4js |
Online JavaScript deobfuscator and unpacker. |
|
Excalidraw |
https://excalidraw.com |
A whiteboard tool that lets you sketch diagrams that have a hand-drawn feel to them. |
|
GraphiQL Online |
https://lucasconstantino.github.io/graphiql-online |
Online available instance of GraphiQL. |
|
iKat |
https://www.ikat.kronicd.net |
Aid security consultants with the task of auditing the security of Kiosk terminals. |
|
JSON Web Tokens Builder |
https://jwtbuilder.jamiekurtz.com |
Creating JSON Web Tokens online for use in testing. |
|
JWT |
https://jwt.io |
Decode, verify and generate JWT. |
|
Living Off Trusted Sites (LOTS) Project |
https://lots-project.com |
List of websites that allow attackers to use their domain or subdomain for hosting phishing, C&C etc. |
|
Online Reverse Shell Generator |
https://www.revshells.com |
An online reverse shell generator. |
|
OWASP Risk Rating Calculator |
https://www.owasp-risk-rating.com |
Risk Rating Calculator based on OWASP's Risk Rating Methodology. |
|
Pastebin |
https://pastebin.com |
Store any text online for easy sharing. Find leaked creds etc. |
|
Pine Tools |
https://pinetools.com/generate-list-numbers |
Generate a list of numbers online. |
|
PostBin |
https://www.toptal.com/developers/postbin |
Collect all requests to a special URL which you can use to test for out-of-band vulnerabilities. |
|
Replit |
https://replit.com |
Online integrated development environment. |
|
Reviews |
https://reviewsonmywebsite.com/google-review-link-generator |
Google review link generator |
|
Sandboxie-Plus |
https://sandboxie-plus.com |
A sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems |
|
SQL Fiddle |
https://sqlfiddle.com |
Online SQL compiler that lets you write, edit, and execute any SQL query. |
|
Unit Conversion |
https://www.unit-conversion.info |
A comprehensive unit conversion website. |
|
UUID Generator |
https://www.uuidgenerator.net |
Online UUID Generator. |
|
W3cub Tools |
https://tools.w3cub.com/html-escape-unescape |
HTML escape and unescape online. |
|
W3Schools iFrame |
www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe |
Online iFrame tool. Create and test iFrames online. |
|
WhatIsMyBrowser |
https://www.whatismybrowser.com |
Know what browser you're using, with a list of your web browser's settings. |
|
Wormhole |
https://wormhole.app |
Share files with end-to-end encryption and a link that automatically expires. Useful for data exfiltration. |
