Cybersecurity Tools & Resources
Advanced search operators for Google to find specific information
Essential tool for information gathering. The advanced search operators make it easy to find specific information across the web.
Advanced search operators for Bing
Good alternative to Google Dorks, especially useful for finding content that might be filtered by Google.
Privacy-focused search engine
Excellent privacy-focused search engine. Great for sensitive searches and avoiding tracking.
Search engine for Internet-connected devices and systems
Invaluable tool for discovering and analyzing internet-connected devices. Essential for security research and network mapping.
Search engine for Internet-connected devices and networks
Powerful alternative to Shodan with unique features for network discovery and analysis.
Network exploration and security auditing tool
The industry standard for network scanning. Versatile, powerful, and essential for any security professional.
Fast port scanner
Incredibly fast port scanner, perfect for large-scale network scanning operations.
Analyze suspicious files, domains, IPs and URLs
Essential tool for malware analysis and threat intelligence. The community aspect makes it even more valuable.
Free automated malware analysis service
Excellent sandbox environment for malware analysis with detailed reports and behavioral analysis.
Collection of malware samples for security researchers
Valuable resource for researchers. Great collection of malware samples with detailed information.
Check if your email has been compromised in a data breach
Essential tool for personal security. Helps users identify if their accounts have been compromised.
Search through billions of leaked credentials
Powerful tool for searching through leaked credentials. Useful for security research and incident response.
Search through leaked databases and credentials
Useful API for credential searching, though the free tier is somewhat limited.
Interactive data mining tool for link analysis
Powerful tool for link analysis and data visualization. Excellent for complex investigations.
Open-source network analysis and visualization software
Great open-source alternative for network visualization. Steep learning curve but very powerful.
Graph visualization and analysis platform
Enterprise-grade graph visualization platform. Excellent for large-scale network analysis.
Gather emails, subdomains, hosts, employee names, open ports and banners
Essential tool for reconnaissance. Excellent for gathering information about target organizations.
Full-featured reconnaissance framework
Powerful reconnaissance framework with extensive modules and automation capabilities.
Automated OSINT tool for reconnaissance
Comprehensive OSINT automation tool. Great for continuous monitoring and information gathering.
OSINT research framework
Useful framework for OSINT research, though some modules require additional setup.
Find usernames across social networks
Excellent tool for finding usernames across multiple platforms. Very useful for investigations.
Social media search engine
Good tool for searching social media content. Free tier is limited but sufficient for basic searches.
Advanced Twitter search and monitoring
Powerful Twitter monitoring tool. Essential for tracking specific topics and accounts.
Social media statistics and analytics
Useful for social media analytics, though some features require a paid subscription.
Domain registration and ownership information
Reliable WHOIS lookup service with additional domain intelligence features.
DNS recon and research tool
Excellent free tool for DNS reconnaissance. Provides comprehensive domain information.
Domain and DNS intelligence platform
Powerful platform for domain intelligence. API access makes it great for automation.
Fast subdomains enumeration tool
Fast and efficient subdomain enumeration tool. Great for initial reconnaissance.
Archive of web pages across time
Invaluable resource for accessing historical web content. Essential for research and investigations.
Web page archiving service
Useful alternative to Wayback Machine. Good for quick snapshots of web pages.
Reverse image search engine
Powerful reverse image search engine. Great for finding image sources and duplicates.
Image search with reverse image search capability
Convenient reverse image search with Google's extensive image database.
Collection of OSINT tools and resources
Comprehensive collection of OSINT tools. Excellent starting point for investigations.
Curated list of OSINT tools and resources
Extensive curated list of OSINT tools. Great resource for discovering new tools.
OSINT training and resources
Valuable resource for OSINT training and education. Great for beginners.
Metadata harvester
Useful tool for extracting metadata from documents. Great for information gathering.
Read, write and edit metadata
Powerful tool for metadata analysis. Essential for digital forensics and image analysis.
Fingerprinting Organizations with Collected Archives
Comprehensive tool for metadata analysis and fingerprinting. Great for security assessments.
In-depth attack surface mapping and asset discovery
Powerful tool for attack surface mapping. Essential for security assessments.
Incredibly fast crawler designed for OSINT
Fast and efficient web crawler. Great for quick reconnaissance of websites.
Web screenshot tool for security assessments
Useful tool for taking screenshots of websites. Helpful for visual reconnaissance.
Visual recon tool for web applications
Great tool for visual reconnaissance of web applications. Produces nice reports.
Fetch all URLs that the Wayback Machine knows about for a domain
Simple but effective tool for discovering historical URLs. Great for content discovery.
Fetch known URLs from AlienVault's Open Threat Exchange, Wayback Machine, and Common Crawl
Powerful URL discovery tool that combines multiple sources. Great for comprehensive research.
HTTP parameter discovery suite
Useful tool for discovering HTTP parameters. Helpful for security testing.
Parameter discovery tool
Fast and efficient parameter discovery tool. Great for web application testing.
Discovers endpoints and their parameters in JavaScript files
Excellent tool for discovering endpoints in JavaScript files. Essential for web security testing.
Find sensitive data in JavaScript files
Great tool for finding sensitive data in JavaScript files. Useful for security assessments.
A tool to extract website JS files and analyze them
Basic tool for JavaScript file analysis. Good for simple extractions.
A .git folder disclosure exploit
Useful tool for recovering source code from exposed .git directories.
Find sensitive information in GitHub repositories
Great tool for finding sensitive information in GitHub repositories. Essential for security research.
Searches through git repositories for secrets
Powerful tool for finding secrets in git repositories. Essential for security audits.