Directory
Cybersecurity is the practitioner side of the directory, aimed at people who defend systems or investigate them. Security tools and toolkits covers scanners, frameworks, and command line utilities. Security scanners and resolvers follows with services that check a host, a certificate, or a configuration. Domain, IP, and DNS research collects lookup and reputation tools, while malware protection lists engines, sandboxes, and analysis services. Safety and risk research covers threat reports, vulnerability databases, and standards, and IoT security deals with connected devices and their firmware. Threat intelligence, malware analysis, password and hash tools, and sandboxes and emulation sit at the deeper end of the category. Check what a tool is built to do and whether you are allowed to point it at a target before you start a scan.
The aa419 Fake Sites Database lists suspected fraudulent websites, described as a visual answer to 419 fake sites. Each record shows a URL, site name, status, and date added and updated, along with a project label. The list can be searched and sorted, and an advanced search is offered.
Lucia is a developer resource for coding, documentation, communities, security research, or software tools.
DNS History is a database of DNS record history that reports more than 2.2 billion nameserver changes detected and is updated daily. A premium bulk checker allows lookups of up to 5,000 domains at once, with export to Excel and CSV, and comparison of drops, changes and parked status across a list.
Mess with dns is a site for hands-on DNS experiments, offering a subdomain at {{ domain }}.messwithdns.com where records can be added and edited. A live updating list shows requests for the subdomain's records, presented as a low-consequence way to learn by experimenting and breaking things.
Domain Recon Tool is a free online tool for security researchers and analysts that retrieves DNS records, WHOIS and RDAP data, SSL certificates, IP addresses and subdomains for a domain or URL. It supports complete DNS record analysis and WHOIS registration data retrieval.
MSTG is a developer resource for coding, documentation, communities, security research, or software tools.
Mark Monitor WHOIS is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
Open Bug Bounty is a developer resource for coding, documentation, communities, security research, or software tools.
Proxy Check is a proxy detection API offered under free and paid plans. It provides IP data such as network, privacy and operator information, and the documentation describes a v3 API with support for the v2 API until 2035.
SSL Server Test is a free online service from Qualys SSL Labs that performs a deep analysis of the configuration of any SSL web server on the public Internet. The site states that submitted information is used only to provide the service.
ROP Emporium teaches return-oriented programming through a series of challenges, starting with ret2win and progressing through topics such as split, callme, write4, badchars, fluff, pivot and ret2csu. A beginners' guide is available.
WebScore is a website legitimacy checker that produces a detailed report on a scanned URL. The report includes columns for URL Scanned, Uses HTTPS, Domain Age, Wayback History and Google Safe Browsing.
The site allows you to look up domain registration information (WHOIS) on the internet
Security Onion Solutions, LLC is the creator and maintainer of Security Onion, a free and open platform for threat hunting, network security monitoring and log management. It bundles free and open tools including Suricata, Zeek and the Elastic Stack, and the company sells products and services that fund development.
uses advanced search operators (Google Dorks) to find juicy information about target websites.
SSL For Free issues free SSL and wildcard certificates through ZeroSSL, including via ACME, a web app and a REST API. It offers paid Basic, Premium and Business packages with monthly or yearly billing, plus tutorials for installing certificates on various server and hosting platforms. Private keys are generated and encrypted on the user's device.
AccuRanker is an SEO rank tracking platform providing real-time data on tracked keywords, along with keyword research, competitor analysis, SERP analysis and reporting. AccuLLM tracks brand mentions, citations and sentiment across AI search tools such as ChatGPT, Perplexity, AI Overviews and AI Mode. The site states the platform includes unlimited users, domains and API calls.
Tempesta FW is a developer resource for coding, documentation, communities, security research, or software tools.
Ahrefs is an AI marketing platform built on a proprietary web index, offering tools for SEO, competitive intelligence, content marketing, website performance, local SEO, social media and reporting. Its Brand Radar tracks brand mentions, citations and sentiment across AI chatbots. Subscription plans are Lite, Standard and Advanced, with an annual billing discount stated.
UUID Tools is an open-source, free online tool and API for generating UUIDs and GUIDs on the fly, including version-1, version-3, version-4 and version-5. The API requires no authentication, allows up to 100 UUIDs per request and is limited to 60 requests per minute per IP address. It also offers a UUID decoder and bulk generator.
AnalyzeID is a reverse lookup tool that searches Google Analytics, Google Adsense, Amazon affiliate, email, IP and other third-party IDs to find other websites owned by the same person. The site lists uses such as researching site owners, checking whether sellers are mass producing sites, and finding money sites. It presents itself as more than a reverse IP tool when owners host sites on different servers.
ZAP, the Zed Attack Proxy, is a free and open source web app scanner maintained as a community project. It provides options for security automation, including packaged scans and an automation framework, and a marketplace of community-contributed add-ons.
Internet intelligence tool for looking up ASN details, IP information, and BGP routing data.
GNUnet is GNU's framework for secure peer-to-peer networking. It is described as a network protocol stack for building secure, distributed and privacy-preserving applications, aiming to replace the existing Internet protocol stack, and is free software.
