ROP Emporium teaches return-oriented programming through a series of challenges, starting with ret2win and progressing through topics such as split, callme, write4, badchars, fluff, pivot and ret2csu. A beginners' guide is available.
Directory
Security Tools & Toolkits
Explore Security Tools & Toolkits resources in Cybersecurity.
Security Onion Solutions, LLC is the creator and maintainer of Security Onion, a free and open platform for threat hunting, network security monitoring and log management. It bundles free and open tools including Suricata, Zeek and the Elastic Stack, and the company sells products and services that fund development.
SSL For Free issues free SSL and wildcard certificates through ZeroSSL, including via ACME, a web app and a REST API. It offers paid Basic, Premium and Business packages with monthly or yearly billing, plus tutorials for installing certificates on various server and hosting platforms. Private keys are generated and encrypted on the user's device.
Tempesta FW is a developer resource for coding, documentation, communities, security research, or software tools.
UUID Tools is an open-source, free online tool and API for generating UUIDs and GUIDs on the fly, including version-1, version-3, version-4 and version-5. The API requires no authentication, allows up to 100 UUIDs per request and is limited to 60 requests per minute per IP address. It also offers a UUID decoder and bulk generator.
ZAP, the Zed Attack Proxy, is a free and open source web app scanner maintained as a community project. It provides options for security automation, including packaged scans and an automation framework, and a marketplace of community-contributed add-ons.
GNUnet is GNU's framework for secure peer-to-peer networking. It is described as a network protocol stack for building secure, distributed and privacy-preserving applications, aiming to replace the existing Internet protocol stack, and is free software.
Radare is a developer resource for coding, documentation, communities, security research, or software tools.
SSLMate CAA is a developer resource for coding, documentation, communities, security research, or software tools.
Abuseipdb helps search threat intelligence, IP reputation, domains, and security investigation data.
CheckFileType is a free online tool that determines a file's true type, extension and MIME type from its contents rather than its extension. Users upload a file without registration, and the tool can look inside archives such as ZIP files to report the type of each contained file. Files are stored temporarily and removed after one hour.
Phishing detection tool for checking suspicious URLs, brand impersonation, and risky web pages.
Online disassembly tool for reviewing binaries, shellcode, and low-level code snippets.
OpenCVE is a searchable database of CVEs and security vulnerabilities, showing results with vendor, product, update date and CVSS scores. It also offers example searches such as CVEs in KEV and CVEs with high EPSS scores.
UUID Generator is a developer resource for coding, documentation, communities, security research, or software tools.
Kaspersky map showing real-time cyber threat activity and detected security events worldwide.
Online HTML editor is a browser-based HTML editing tool powered by CKEditor 5, offering Word to HTML conversion and real-time collaboration. It provides control over source code, custom elements and styles, and can work with complete HTML documents including meta tags and comments.
An online color picker tool for choosing colors and exporting them as hexadecimal, RGB, HSV or HSL codes. It shows color combinations including complementary, triadic and analogous schemes, and saved colors remain until cleared.
Binary Ninja offers two free ways to try the reverse engineering tool: Binary Ninja Cloud, a browser-based tool, and Binary Ninja Free, a downloadable app for local use. Cloud supports all architectures but requires uploading binaries; Free supports x86, x86_64, ARMv7 and ARMv8/AArch64 and is for non-commercial purposes or evaluation.
Online editor for building and previewing Vega and Vega-Lite data visualizations.
Calculator for working with very large integers used in cryptography, math, and technical checks.
Canarytokens creates monitored links, files, or identifiers that alert when accessed.
A free online tool that converts supplied text into an image file in GIF, JPEG or PNG format. Users choose text up to 500 characters, dimensions between 10 and 1500 pixels, font size from 6pt to 54pt, and foreground and background colors, then download the image or link to it. The site stores choices in a database and a cookie.
Password generator that creates strong passphrases from Diceware-style word lists.