developer.mozilla.org
Observatory is a developer resource for coding, documentation, communities, security research, or software tools.
Directory
Cybersecurity
Cybersecurity is the practitioner side of the directory, aimed at people who defend systems or investigate them. Security tools and toolkits covers scanners, frameworks, and command line utilities. Security scanners and resolvers follows with services that check a host, a certificate, or a configuration. Domain, IP, and DNS research collects lookup and reputation tools, while malware protection lists engines, sandboxes, and analysis services. Safety and risk research covers threat reports, vulnerability databases, and standards, and IoT security deals with connected devices and their firmware. Threat intelligence, malware analysis, password and hash tools, and sandboxes and emulation sit at the deeper end of the category. Check what a tool is built to do and whether you are allowed to point it at a target before you start a scan.
Filters
md5hashing.net
Online hashing tool for generating and checking MD5, SHA, and other common hash values.
whoxy.com
Whoxy is a hosted web service that returns parsed WHOIS fields to applications in XML or JSON format over HTTP requests. It follows WHOIS registry referral chains to find the correct servers, and supports 2026 domain extensions including gTLDs and ccTLDs. The page notes a free account signup and query pricing by volume.
digga.dev
digga is a free domain and infrastructure research tool that looks up DNS records, RDAP and WHOIS data, subdomains, IP details and email authentication in one report. It supports many DNS record types and passive subdomain enumeration. The project is open source under AGPL 3.0 with no accounts or paywalls.
reddit.com
Fake Z-Lib Sites documents a safety warning, scam report, malware concern, or risky download example.
fisgonia.com
Public webcam and live camera directory for browsing locations and visual feeds.
hashes.org
Hash search database for looking up password hashes and contributed recovery results.
ironmarch.exposed
Public archive and research site documenting Iron March forum material and far-right networks.
virusscan.jotti.org
Jotti's malware scan is a free service that scans suspicious files with several anti-virus programs. Users can submit up to five files at once, with a 250MB limit per file. Files are shared with anti-virus companies so their products' detection accuracy can be improved.
localmonero.co
Peer-to-peer Monero marketplace reference for privacy-focused cryptocurrency trading.
malwarebytes.com
Security software for detecting malware, adware, scams, and unwanted programs on devices.
github.com
OSINT tool for collecting domain, IP, ASN, and infrastructure intelligence from multiple sources.
nvd.nist.gov
NVD is a developer resource for coding, documentation, communities, security research, or software tools.
map.lookingglasscyber.com
LookingGlass threat map for visualizing security events, attack activity, and internet risk signals.
wire.com
Wire is an end-to-end encrypted collaboration platform offering messaging, calls, conferencing and file sharing. It supports audio and video conferencing for up to 150 participants across web browsers, desktop and mobile devices, and includes Wire Drive for file collaboration tied to group membership.
privacyguides.org
Privacy Guides page comparing browsers, hardening options, and safer browsing setups.
dnsstuff.com
DNSStuff is a web tool for finding, checking, or analyzing online information related to domains, networks, and digital services.
domainwat.ch
Domain monitoring tool for tracking DNS changes, records, and domain activity.
hashmob.net
Community hash-recovery platform for searching, submitting, and discussing password hash challenges.
insecam.org
Insecam is a directory of online surveillance and network cameras. It lists live feeds such as street, traffic, parking, office, road, beach and earth webcams by country, and provides a search for live webcams. The site states only filtered cameras are available and that it removed private or unethical cameras upon complaint; cameras can be removed by setting a password.
cloud.iobit.com
Cloud malware scanning page for checking suspicious files against online detection services.
matweb.info
Privacy and web security resource for checking data exposure, metadata, and online traces.
whispers.ddosecrets.com
DDoSecrets project for searching and analyzing public-interest datasets and leaked records.
pypi.org
Python tool that identifies hashes, emails, IPs, URLs, and other strings found in text or files.