Tools

Cyber Security related tools & information for security researchers.
Name Categories Type Description
Urlscan.io Webserver, Website Technologies, Website Screenshot, Patterns/Relations Online Scan a website and analyze the resources it requests and the domains it contacts.
Ssllabs.com Webserver, TLS/SSL Online Performs a deep analysis of the configuration of any SSL web server on the public Internet.
Internet.nl Webserver, Mailserver, TLS/SSL Online Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANE.
Securityheaders.com Webserver, Webpage Online Analyse your HTTP response headers.
Censys.io Device, Webserver, Mailserver, Webpage, TLS/SSL, Patterns/Relations Online Platform that discover, monitor, and analyze devices that are accessible from the Internet.
Checktls.com Mailserver, TLS/SSL Online Analyse the steps that email systems go through to send email. Like trying to establish a "~secure" (TLS) connection.
Observatory.mozilla.org Webserver, Webpage, TLS/SSL Online Set of tools to analyze your website and inform you if you are utilizing the many available methods to secure it.
Hardenize.com Webserver, Mailserver, Webpage, TLS/SSL Online A blend of security tools designed to give you visibility into your internet infrastructure and help you deploy new security features as they become available.
Virustotal.com Webserver, Webpage, File, Malware, Phishing, Patterns/Relations Online Analyze suspicious files and URLs to detect types of malware, automatically share them with the security community.
Joesandbox.com Malware, Sandbox, Phishing, Patterns/Relations Online Detect and Analyze potential malicious files and URLs on Windows, Android, Mac OS, Linux, and iOS for suspicious activities. It performs deep malware analysis and generates comprehensive and detailed analysis reports.
Hybrid-analysis.com Webserver, Webpage, File, Patterns/Relations Online Automated Malware Analysis Service
Valkyrie.comodo.com File, Malware, Patterns/Relations Online Automated Malware Analysis Service
Mail-tester.com Mailserver, E-mail Online Check your e-mail spam score and quality. This tool's free, and pretty.
Ssl-tools.net Mailserver, Webserver, TLS Online Online tool that test Web- and Mailserer certificate security.
Appmaildev.com Mailserver, E-mail Online Test tool for DKIM, SPF, DMARC, DomainKey and RBL.
Ssltools.digicert.com Webserver, TLS/SSL Online Make sure your SSL/TLS certificate and web server are properly set up.
Htbridge.com Webserver, TLS/SSL, Trademark monitor, Typosquatting Online Test SSL/TLS security and implementation for compliance with PCI DSS.
Sslanalyzer.comodoca.com Webserver, TLS/SSL Online SSL Certificate Checker, SSL Vulnerability Scanner and SSL Server Configuration Reporting Tool from COMODO.
Report-uri.com Webserver, CSP, Header Online Tools that can help with creation, CSP analysis and maintenance.
Dnsspy.io DNS, DNSSEC, Nameserver Online Analyse and validate your DNS settings.
Csp-evaluator.withgoogle.com Webserver, CSP, Header Online CSP Evaluator allows developers and security experts to check if a Content Security Policy (CSP) serves as a strong mitigation against cross-site scripting attacks.
Haveibeenpwned.com Account, Data breach Online Check if you have an account that has been compromised in a data breach.
Gotcha.pw Account, Data breach Online Search through 1.4+ billion leaked accounts from hacked sites like LinkedIn, Yahoo and Dropbox.
Gwhois.org Whois, DNS, Traceroute, E-mail Online Advanced Whois Lookup service supplemented with DNS and Reverse DNS Records check, Traceroute, HTTP Response Headers and Email Address validation.
Dnssec-analyzer.verisignlabs.com DNSSEC Online DNSSEC Analyzer to assist with diagnosing problems with DNSSEC-signed names and zones.
Zonemaster.iis.se DNS, Nameserver, DNSSEC Online Investigates the state of DNS from the root (.) to the TLD (top-level domain) and then finally through the DNS servers that contain information about the specified domain (for example, zonemaster.se).
Mxtoolbox.com DNS, Mailserver, MX, IP, Blacklist Online Allows to find out whether a given domain has been blacklisted by checking its IP address against 105 DNS-based blacklists
Viewdns.info DNS, IP, Domain, Whois, Reverse, History Online DNS related tools, like find all sites hosted on a given server and find domain names owned by an individual or company.
Dnsdumpster.com DNS, IP, Domain, Reverse, History Online Domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
Hunter.io Mail, Domain, Reverse Online Hunter lets you find email addresses under a domain name in seconds.
Exploit-db.com/google-hacking-database Pentest, Google Hacking Database, GHDB Online An index of Google search queries (also called "Dorks") used to find publicly available information, intended for pentesters and security researchers.
Inflect.com Data centers, AS, Network, Peering Online Mapping every data center on the planet, and making it easy to find out who’s available for connection.
Certdb.com Webserver, TLS Online Internet-wide search engine for digital certificates
Portmap.com Webserver, Mailserver, Ports, Banners Online Open IP ports and banners messages lookup
Pentest-tools.com Webserver, Mailserver, Ports, Banners Online Discover and validate vulnerabilities in websites and network infrastructures
Dnstable.com Webserver, Mailserver, IP, ISP, AS, History Online Search for DNS records by domain, IP, CIDR, ISP
Crt.sh TLS Online Certificate Search
Tools.keycdn.com DNS, IP, traceroute, ping Online Set of checks to help you troubleshooting network or CDN related issues.
Performance.sucuri.net Webserver Online Test performance of any of your sites from across the globe.
Gtmetrix.com Webserver, website Online Gives you insight on how well your site loads and provides actionable recommendations on how to optimize it.
Findsubdomains.com Subdomain, Webserver, Mailserver Online Find subdomains for security assessment penetration test.
Ripe.net Whois, IP, AS, RIRs Online The RIPE NCC is one of five Regional Internet Registries (RIRs) providing Internet resource allocations, registration services and coordination activities that support the operation of the Internet globally.
Bgpview.io Whois, IP, AS Online Debug and investigate information about IP addresses, ASN, IXs, BGP, ISPs, Prefixes and Domain names.
Ultratools.com Whois, IP, AS Online Complete set of DNS and domain tools, which test the health of your domain name servers, websites and online hosting environment.
Uptrends.com/tools/uptime Webserver, connection Online Check the availability and connection speed to a webserver from many places around the world.
Toolbar.netcraft.com/site_report Webserver, website, hosting, TLS Online Basic website background check with a good overview of security-related characteristics such as Hosting country, Domain registrar, SSL/TLS-specs and possibly existing Web Trackers.
Httpstatus.io Webserver, website, header Online Bulk HTTP Status Code Checker. Checks status code, response headers, redirect location and redirect chain of a HTTP connection.
Developers.google.com/speed/pagespeed/insights Webserver, website Online PageSpeed ​​Insights analyzes the content of a web page and then generates suggestions to make that page faster. This information can usually be used to obtain a first impression of a web application.
Requestmap.herokuapp.com Website Online Request Map Generator displays a node map of all requests from a webpage. You can quickly determine which third-party content is used within a web page.
Web.archive.org Website, Archive Online The Wayback Machine is a time capsule for web pages. You can explore billions of saved web pages over time.
Archive.fo Website, Archive Online Archive.is is a time capsule for web pages. It takes a 'snapshot' of a webpage that will always be online even if the original page disappears.
Talosintelligence.com/reputation_center Webserver, IP, Domain, Mail Online Talos’ Reputation Center is a real-time threat detection network. The data is made up of daily security intelligence across millions of deployed web, email, firewall and IPS appliances.
Builtwith.com Webserver, website Online Find out what websites are Built With. Builtwith.com covers 29.200+ internet technologies which include analytics, advertising, hosting, CMS and many more.
Hackertarget.com Webserver, website, DNS, IP, Web-Technology Online Vulnerability Scanners to Test Security from the Attackers Perspective. Multiple open source security scanners and network intelligence tools.
Wappalyzer.com Website, Web-Technology Online Cross-platform utility that uncovers the technologies used on websites. It detects content management systems, ecommerce platforms, web frameworks, server software, analytics tools and many more.
Dns.google.com DNS, IP Online Test Domain or IP on Google Public DNS
Centralops.net DNS, IP Online Investigate domains and IP addresses. Get registrant information, DNS records, and more—all in one report.
Expireddomains.net Domain Online ExpiredDomains.net gathers all the information you need to find Expired Domains.
Intelx.io Domain, Mail, IP Online Search engine and data archive. Search by email, IP, CIDR, Bitcoin address and more in the Darknet and North Korea.
Onlinedisassembler.com Disassembler, Reverse, Malware Online Explore executables by dissecting its sections, strings, symbols, raw hex and machine level instructions.
Reverse.it Disassembler, Reverse, Malware Online Malware analysis service for the community that detects and analyzes unknown threats using a unique Hybrid Analysis technology
Appetize.io Emulator, Mobile Online Run iOS or Android mobile apps. For app demos, training, customer support, development, testing, and more.
Abuseipdb.com IP, Domain Online Check the report history of any IP address to see if anyone else has reported malicious activities.
Htmlyse.com DNS, TLS/SSL, IP, Domain Online Check website's DNS, SSL/TLS security, HTTP headers and cleaning up HTML source.
Tools.pingdom.com DNS, IP, Domain Online Website Speed Test to analyze the load speed of websites.
Tools.geekflare.com DNS, TLS/SSL, IP, Domain Online A Site Toolbox to test a website against SEO, Security and performance across devices.
Dotcom-tools.com Website, Webserver Online Instantly get a snapshot of a website availability and performance from nearly two dozen locations around the world.
Loadimpact.com Website, Webserver Online On-demand load testing and performance testing.
Dnsperf.com DNS Online Test the performance of a DNS provider from all over the world using this benchmark tool.
Varvy.com Website Online Test a site to see if it follows the Google guidelines.
Apitester.com Website Online Make HTTP requests, extract values from the responses, assert the values are correct, reuse variables across steps, or inject custom logic using JavaScript.
Wigle.net WIFI, SSID Online Maps and database of 802.11 wireless networks, with statistics, submitted by wardrivers, netstumblers, and net huggers.
Dnstwister.report DNS, Domain, Typosquatting Online Generates a list of domain names that are similar to one that you provide, checking to see if any of them are registered.
Visualping.io DNS, Domain Online Generates website screenshot.