OpenCVE is a searchable database of CVEs and security vulnerabilities, showing results with vendor, product, update date and CVSS scores. It also offers example searches such as CVEs in KEV and CVEs with high EPSS scores.
Directory
Search results
Published directory entries matching your search.
Advisory Database is a GitHub repository or organization with source code, releases, documentation, or project resources.
PingCastle Cloud provides a search page for Azure tenants by domain name or tenant ID. Domain searches use online OpenID configuration data, while ID searches rely on a database built from publicly known domains from certificate transparency records, with each domain checked for OpenID configuration and collected tenant IDs. It lists known tenants.
Surveillance under Surveillance is a map showing surveillance cameras and guards, with type, observed area and other information where available. It uses OpenStreetMap contributor data not visualized on the regular OpenStreetMap site, updated once an hour. New or revised entries can be added using an OSM account.
GitHub collection of APT reports, threat actor notes, and security research documents.
Exploit-DB paper archive with security research, exploitation papers, and technical writeups.
CamRoute is a tool for planning a driving route in the Greater Toronto Area and viewing traffic cameras near that route. It draws on over 1,300 cameras from the City of Toronto, Ontario 511, and Durham Region, with routing powered by OpenStreetMap data. It is described as an independent, unofficial project.
Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads. It collects, aggregates, indexes and analyzes security data to detect intrusions, threats and behavioral anomalies. Capabilities include file integrity monitoring, vulnerability detection, configuration assessment and log data analysis. A managed Wazuh Cloud service is also offered.
Guide to free and open source privacy tools, safer apps, and alternatives to data-heavy services.
Python OSINT crawler for extracting URLs, files, endpoints, and related website data.
digga is a free domain and infrastructure research tool that looks up DNS records, RDAP and WHOIS data, subdomains, IP details and email authentication in one report. It supports many DNS record types and passive subdomain enumeration. The project is open source under AGPL 3.0 with no accounts or paywalls.
Security research toolkit for extracting, transforming, and analyzing data during investigation workflows.
Research database covering Russian aggression, military activity, and related open-source evidence.
Shodan InternetDB lookup for checking open ports, vulnerabilities, tags, and host data by IP.
A custom OSINT tool from Aware Online Academy for investigating a target website. It provides scripts to view historical WHOIS data, check website text and source code on third-party sites, visualise links, map web pages, check Reddit presence, find open FTP ports and find other top level domains.