Directory
Published directory entries matching your search.
Web Check is an OSINT and security tool that reports on a website's configuration, including IP information, SSL certificates, DNS records, cookies, crawl rules and response headers. The site states it supports 44 checks and produces results in about 20 seconds.
Web Check is a GitHub repository or organization with source code, releases, documentation, or project resources.
mitmproxy is a free and open source interactive HTTPS proxy. It can be used to intercept, inspect, modify and replay web traffic, including HTTP/1, HTTP/2, HTTP/3, WebSockets and other SSL/TLS-protected protocols. It offers a command line interface, a graphical web interface, and a Python API for writing addons and scripts. Downloads are available for Windows, Linux, macOS and Docker.
SSL Labs is a non-commercial research effort by Qualys offering documents, tools and thoughts related to SSL. It provides tools to test a server's certificate and configuration, test a browser's SSL implementation, and view SSL Pulse data on how other web sites are doing. It also publishes documentation on deploying SSL/TLS correctly.
Python OSINT crawler for extracting URLs, files, endpoints, and related website data.
BugBountyHunting.com is a community-curated resource that collects writeups, resources and content related to bug bounty hunting, described as a bug bounty hunting search engine. It aims to help beginners starting in web application security learn more about bug bounty hunting.
Certbot is a tool run from the command line to obtain and install HTTPS certificates. It can either be run once to get free HTTPS certificates or used with instructions generated for a server's software and system. Using it requires comfort with the command line and an HTTP website. The project is a project of the Electronic Frontier Foundation.
A web-based tool that tests the IPv6 readiness of an internet domain and shows whether the visitor's own connection supports IPv6. It reports DNS-based results, including nameserver and mail exchanger records, and maintains a Hall of Fame of domains scoring five stars. It also warns when an embedded MAC-address identifies the device. The site requires JavaScript.
Kismet is a sniffer, WIDS, and wardriving tool for Wi-Fi, Bluetooth, Zigbee, RF, and more, running on Linux and macOS. It provides distributed capture over TCP sockets or websockets, a unified kismetdb logfile based on sqlite3, and a REST-like API for its embedded webserver.
Let's Encrypt is a free, automated, and open Certificate Authority operated by the nonprofit Internet Security Research Group. It provides free TLS certificates so websites can enable HTTPS encryption; obtaining a certificate requires demonstrating control over the domain, and issuance uses the ACME protocol with client software.
mCaptcha is a proof-of-work based captcha system described as privacy focused and fully automated. It states that it does not track or profile users and does not use IP addresses for rate limiting. The project offers an xCaptcha drop-in replacement, and its APIs are described as compatible with reCAPTCHA and hCaptcha. A guide covers installing the captcha on a website.
SSL For Free issues free SSL and wildcard certificates through ZeroSSL, including via ACME, a web app and a REST API. It offers paid Basic, Premium and Business packages with monthly or yearly billing, plus tutorials for installing certificates on various server and hosting platforms. Private keys are generated and encrypted on the user's device.
A guide introducing Web Authentication (WebAuthn), a W3C and FIDO specification that lets servers register and authenticate users using public key cryptography instead of passwords. It explains how credentials work, with a private key stored on the user's device and a public key sent to the server, and covers registering credentials and authenticating with them.
ZAP, the Zed Attack Proxy, is a free and open source web app scanner maintained as a community project. It provides options for security automation, including packaged scans and an automation framework, and a marketplace of community-contributed add-ons.
