Directory
Published directory entries matching your search.
DNSai is a collection of DNS and email security tools on one page. It covers DNS record lookups, WHOIS, blacklist checks, SPF, DKIM and DMARC builders and validators, email header analysis and bulk domain scanning. The tools return plain-English AI summaries, and each is available through an API and MCP connectors.
CyberArsenal is a forum focused on computer and network security and reverse engineering. Content requires signing up to view and participate. The site states there is no payment, credits system, or reply-to-reveal. Sections include general discussion, requests for installer or setup files, requests related to security or reversing, and red team tools and techniques.
DNSViz is a tool for visualizing the status of a DNS zone. It was designed to help understand and troubleshoot deployment of the DNS Security Extensions, providing a visual analysis of the DNSSEC authentication chain and resolution path and listing configuration errors it detects.
Domain Recon Tool is a free online tool for security researchers and analysts that retrieves DNS records, WHOIS and RDAP data, SSL certificates, IP addresses and subdomains for a domain or URL. It supports complete DNS record analysis and WHOIS registration data retrieval.
Security research toolkit for extracting, transforming, and analyzing data during investigation workflows.
IntoDNS.AI is a DNS and mail server checker that reports on SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS and blacklists. It also offers a free public REST API for DNS and email security scans, with JSON and Markdown reports. The service states it is not affiliated with intodns.com.
Onion Browser is a free, open-source web browser for iOS that connects to the Tor network. It encrypts traffic through Tor, which the project describes as providing a high standard of privacy and security. Tabs close when done, and security settings can be adjusted per website. No personal data is saved or used for targeted ads.
A page from the Fake Name Generator that checks whether a US Social Security number follows Social Security Administration numbering rules. It explains how SSNs are built and how numbering changed in 2011, and provides sample SSNs for testing forms. The page notes that numbers following the rules may still never have been issued.
Web Check is described as an all-in-one OSINT and security tool for revealing the inner workings of a website. It reports on items such as IP information, SSL certificates, DNS records, cookies, crawl rules and response headers.
Website.informer offers a free aggregated report on any domain, including WHOIS, visitors, IP and DNS details, competitors, and owners. It provides website statistics such as daily visitors, safety status, and global rank, plus competitor and similar-site research. It also offers IP and DNS lookup, WHOIS records, a browser extension for website analysis and security checks, and email-to-domain matching from WHOIS data.
BlockBlock is a macOS security tool that monitors common persistence locations and alerts whenever a new persistent component is added. It uses Apple's Endpoint Security Framework, requires system privileges and Full Disk Access, and runs automatically after restart to provide continual protection. Alerts identify the responsible process and the persisted item, and users can allow or block it.
A curated GitHub list of papers and tools covering LLM threats and vulnerabilities from a security and privacy standpoint. It includes paper summaries, key takeaway points, citations in a bib file, and frameworks and taxonomies such as OWASP Top 10 for LLM Applications.
byp4xx is an open source security tool written in the Go programming language, intended for bypassing 40X HTTP status responses during web testing. Its features include HTTP verb tampering, custom header modification, User-Agent switching, extension handling, and testing of default credentials, with resources relevant to bug bounty workflows.
Collection of online network tools for DNS, IP lookup, email checks, and security research.
A curation of awesome tools, documents and projects about LLM Security.
ImHex supports reverse engineering, malware analysis, file inspection, or security research workflows.
LemmeDebug supports reverse engineering, malware analysis, file inspection, or security research workflows.
LibreWolf is an independent custom version of Firefox aimed at privacy, security and user freedom. It uses privacy and security oriented settings and patches to increase protection against tracking and fingerprinting, and aims to remove telemetry, data collection and annoyances while disabling anti-freedom features such as DRM. uBlock Origin is included.
A guide that explains how to harden Linux for security and privacy, covering distributions, kernel hardening, mandatory access control, sandboxing, root account restrictions, firewalls and identifiers. It states that Linux is not a secure operating system and that the guide is distribution-agnostic and focused purely on security and privacy.
Privacy and web security resource for checking data exposure, metadata, and online traces.
Metasploit is a penetration testing framework developed as a collaboration between the open source community and Rapid7. It is used to find security issues, verify vulnerability mitigations and manage security assessments. The Metasploit Framework is open source, and Metasploit Pro is a commercial product with support. Documentation and community channels are available for help.
SecLists.Org is a security mailing list archive providing web archives and RSS feeds for lists including Nmap Development, Bugtraq, Full Disclosure, Security Basics and Pen-test. It offers search capabilities and RSS feeds with message extracts, updated in real time.
Snyk is an AI security platform that secures the code AI writes, the agents it runs, and the applications it builds. It offers a developer security solution available for free or from $25/month. The platform subscription is available to small teams at a flat rate, while enterprise pricing uses prepaid credits rated per capability.
SpiderSuite is a web crawling and security testing platform for security professionals, penetration testers and researchers. It offers specialized crawlers, traffic interception, request crafting and fuzzing, along with source and graph views of crawl data, plus import and export in formats such as HAR, WARC, CSV and JSON.
