Directory
Explore Security Tools & Toolkits resources in Cybersecurity.
Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads. It collects, aggregates, indexes and analyzes security data to detect intrusions, threats and behavioral anomalies. Capabilities include file integrity monitoring, vulnerability detection, configuration assessment and log data analysis. A managed Wazuh Cloud service is also offered.
Web Check is an OSINT and security tool that reports on a website's configuration, including IP information, SSL certificates, DNS records, cookies, crawl rules and response headers. The site states it supports 44 checks and produces results in about 20 seconds.
WhatsMyDNS is a free online tool for performing DNS lookups against nameservers in many countries. It displays results on a map so users can check DNS propagation for a domain's IP address and DNS record information. The site says it maintains a range of DNS servers for lookups and parses the results for display.
X-Force Exchange is a developer resource for coding, documentation, communities, security research, or software tools.
x64dbg is an open-source debugger for Windows that supports both x64 and x32 applications through a single interface. It offers full-featured debugging of DLL and EXE files, a plugin API, an integrated scripting language and customizable themes.
Zeek is a developer resource for coding, documentation, communities, security research, or software tools.
ZeroSSL is a certificate authority offering free 90-day SSL certificates and premium annual certificates. It supports automated issuance and renewal via ACME clients and a REST API, plus one-step validation, wildcard and multi-domain certificates, installation checks and SSL monitoring.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.
Cap is a free, open-source, self-hosted CAPTCHA alternative. It uses proof-of-work and JavaScript instrumentation challenges instead of visual puzzles, and is licensed under Apache 2.0. It is installed by running a server with Docker and adding a widget to a form.
CVE Details is a developer resource for coding, documentation, communities, security research, or software tools.
CybersecResources is a developer resource for coding, documentation, communities, security research, or software tools.
Demo is a developer resource for coding, documentation, communities, security research, or software tools.
DNS Propagation is a developer resource for coding, documentation, communities, security research, or software tools.
DNSWatch offers DNS lookup and reverse DNS lookup tools with exact performance measuring and DNS server monitoring. It also provides RBL email blacklist lookup and IP location lookup. Paid products include DNS performance monitoring starting at $1 per month, mailserver blacklist monitoring starting at $3.5 per month, and a DNS changetracker starting at $7.9 per month. The site is free to use with ads.
IP Intelligence is a free real-time service that determines how likely an IP address is a proxy, VPN, hosting or bad IP, returning a probabilistic value between 0 and 1. It uses machine learning and probability theory with dynamic checks against large datasets. The API requires no key or sign-up, and an optional residential proxy detection flag is available.
A web-based tool that tests the IPv6 readiness of an internet domain and shows whether the visitor's own connection supports IPv6. It reports DNS-based results, including nameserver and mail exchanger records, and maintains a Hall of Fame of domains scoring five stars. It also warns when an embedded MAC-address identifies the device. The site requires JavaScript.
The Kali NetHunter App Store is an installable catalogue of Android applications for penetration testing and forensics. Its client allows users to browse, install and keep track of updates on their device. The page also links related NetHunter components, including the NetHunter app, terminal emulator and KeX desktop experience client.
Kismet is a sniffer, WIDS, and wardriving tool for Wi-Fi, Bluetooth, Zigbee, RF, and more, running on Linux and macOS. It provides distributed capture over TCP sockets or websockets, a unified kismetdb logfile based on sqlite3, and a REST-like API for its embedded webserver.
Let's Encrypt is a free, automated, and open Certificate Authority operated by the nonprofit Internet Security Research Group. It provides free TLS certificates so websites can enable HTTPS encryption; obtaining a certificate requires demonstrating control over the domain, and issuance uses the ACME protocol with client software.
Lucia is a developer resource for coding, documentation, communities, security research, or software tools.
Mess with dns is a site for hands-on DNS experiments, offering a subdomain at {{ domain }}.messwithdns.com where records can be added and edited. A live updating list shows requests for the subdomain's records, presented as a low-consequence way to learn by experimenting and breaking things.
MSTG is a developer resource for coding, documentation, communities, security research, or software tools.
Open Bug Bounty is a developer resource for coding, documentation, communities, security research, or software tools.
Proxy Check is a proxy detection API offered under free and paid plans. It provides IP data such as network, privacy and operator information, and the documentation describes a v3 API with support for the v2 API until 2035.
