Lots of other tools listed and updated at - GitHub Starred Repositories
| Name/Link | Description | Free? | Details |
|---|---|---|---|
| Abuse IPDB | Online DB to lookup abuse history from public IP's | ✅ | |
| APNIC Whois Database | IP Range Lookup tool, useful for Range Details, Owner, Abuse, Authoritive Registry etc | ✅ | |
| Any Run | Interactive Malware Analysis Service | ☑️ | Free and paid tiers |
| AWS Windows AMI Version History | Reference page for AWS Windwos AMI's and the changelog. | ✅ | |
| AWS IAM Policies in a Nutshell | Good readme and description on how to write IAM Policies | ✅ | |
| AUSNOG Archives | The go to place for the inside word on anything happening with Australian ISPs | ☑️ | Free to view, account required to post. |
| AlientVault OTX | Open Threat Exchange | ✅ | |
| badsite | Reference guide and live examples of weak or misconfigured HTTP headers etc | ✅ | |
| badssl | Reference guide and live examples of misconfigured HTTPs configuration | ✅ | |
| BGP Stats | Shows AS#'s, announcements, descriptions, looking glass links etc for public IP's and their associated ISP's | ✅ | |
| browserling | Live, interactive, cross-browser testing | ☑️ | Limited free options. |
| Browser Sandbox | Run any browser online, including Chrome, Firefox, IE 8, IE 9, IE 10, and IE 11, and more. | ☑️ | Limited free options. |
| BrowserShots | Input a URL a see a screenshot of it on many different browsers | ✅ | |
| Code Sandbox | Online, instant IDE and prototyping tool | ✅ | |
| Cipher List | Strong Ciphers for Apache, nginx and Lighttpd | ✅ | |
| Get Credit Card #'s | Generate a credit card formatted #. Can select vendor, # to generate and format. | ✅ | |
| Secure TLS Implementations | Current, updated secure standards for implementing TLS | ✅ | |
| CentralOps Network Tools | Several different online tools - domain check, NSLookup, TraceRoute etc | ✅ | |
| CrimeFlare | Reveal the IP DNS info of a domain before it was put behind CloudFlare | ✅ | |
| CVE Details | Lookup a CVE and associated details | ✅ | |
| CVSS Calculator (v3) | CVSS v3 Calculator | ✅ | |
| Cyber Chef | A simple, intuitive web app for analysing and decoding data without having to deal with complex tools or programming languages. CyberChef encourages both technical and non-technical people to explore data formats, encryption and compression. | ✅ | |
| Online Dig | Web Based Dig | ✅ | |
| Google Online Dig | Google Web Based Dig | ✅ | |
| Calc | Calculate HEX, DEC, OCT, BIN and set or clear bits directly. | ✅ | |
| Draw.io | When you need a decent looking Network or Architecture Diagram quickly | ✅ | |
| DMARC Wizard | Setup and genereate a basic DMARC Record | ✅ | |
| DNS Dumpster | DNS recon and research, find and lookup dns records | ✅ | |
| DNS Query | Run a huge rage of DNS Queries, in browser. | ✅ | |
| AnonMailer | Send emails, good to spoof, test SPF/DMARC/DKIM effectiveness etc | ✅ | |
| AWS EC2 Reachability Tester | Verify connectivity to all AWS Regions via a connectivity check to a EC2 Instance | ✅ | |
| Extend Class | ExtendsClass provides tools directly usable in a browser. It saves you from having to install add-ons to your browser in order to add features. | ✅ | |
| FreeDNS | Free DNS Name Server for private use | ✅ | |
| FTK Imager | FTK Imager and other Forensic Tools | ✅ | |
| GWhois | Another handy WHOIS tool and also bring in associated DNS Records | ✅ | |
| Hacker Target Tools | Online Vulnerability Scanners, IP and DNS Tools etc | ✅ | |
| HIBP | Check emails/domains for results in data breaches | ✅ | |
| HoneyBuckets | Setup HoneyBuckets (S3) to assist in data breach or suspicious activity | ✅ | |
| HoneyTokens | Setup HoneyTokens to assist in data breach or suspicious activity | ✅ | |
| HybridAnalysis | Sandbox Tooling powered by Crowdstrike Falcon Sandbox | ✅ | |
| Google HTTPs Cert Transparency | Google's open framework to check HTTPs Certificates | ✅ | |
| GreyHat Warfare | Tool to search for Open Amazon s3 Buckets and their contents | ✅ | Are also paid plans for greater access |
| GreyNoise Visulizer | GNQL to Query, IP, Domains, Tags etc... | ✅ | Free and paid plans |
| Online HTTP Editor | Online HTTP Editor and References | ✅ | |
| HTTP Status Codes | Full list of HTTP Status codes and descriptions | ✅ | |
| IP Subnet Calculator | Calculate network class, IP address, subnet mask, subnet bits, mask bits, maximum required IP subnets and maximum required hosts per subnet. | ✅ | |
| IP Lookup | Good IP Lookup Tool | ✅ | |
| IP Lookup #2 | Another IP Lookup Tool | ✅ | |
| JWT Token Tool | JWT Encoder/Decoder | ✅ | |
| Jitsi | Jitsi Meeting Room - Free, No Plugins | ✅ | |
| Email Tester | Email Scoring and Metrics | ✅ | |
| MetaPicz | Online MetaData and EXIF Viewer | ✅ | |
| Morning Star Security | All the latest Security News | ✅ | |
| What's my Public IP | Good tool to check your public NAT etc | ✅ | |
| IP Lookup | Another good IP Lookup Tool | ✅ | |
| NetCraft Site Report | Excellent tool for Website history, setup, architecture and Security best practice analysis | ✅ | |
| Network Tools | Good free list of online Network Tools - whois, ping, trace etc | ✅ | |
| Network Tools 2 | Free online network tools | ✅ | 50 credits every 24 hours |
| Norse | Norse Attack Map | ✅ | |
| One Time Secret | Share sensitive information that's both simple and secure | ✅ | |
| OWASP Top 10 - 2017 | Wiki Page for the 2017 OWASP Top 10 | ✅ | |
| PenTest Tools | PenTest Tools - Black Book Tools - Info Gathering and Recon | ☑️ | Credit based system, initially free then payable if required. |
| PagerDuty Incident Response | Fantastic free resource for incident response | ✅ | |
| PCI Database | Useful for looking up unknown hardware or virtualised hardware devices | ✅ | |
| % Calculator | Calculate % of A, X is what % Y, increase/decrease | ✅ | |
| Port Check | Online Telnet, useful if you need to verify if a port is open to world | ✅ | |
| privnote | Need to send something securely? Self destructs | ✅ | |
| Privacy Tools | privacytools.io provides knowledge and tools to protect your privacy against global mass surveillance. | ✅ | |
| The Register Security | Reliable Security News Site | ✅ | |
| RegEx 101 | RegEx string tester | ✅ | |
| RegExr | Another RegEx cheat-sheet, editor and tool | ✅ | |
| Robtex | Robtex uses various sources to gather public information about IP numbers, domain names, host names, Autonomous systems, routes etc. It then indexes the data in a big database and provide free access to the data. | ✅ | |
| SafeLink | Send credit card numbers, important files, private messages in seconds. | ✅ | |
| Security Headers | HTTP response header and rating tool | ✅ | |
| Secure Password Generator | Use this online tool to generate a strong and random password | ✅ | |
| LastPass Secure Password Generator | Use the online LastPass Password Generator to instantly create a secure, random password. | ✅ | |
| Shodan | Shodan is a search engine for Internet-connected devices. | ☑️ | Limited free use, sign up for unrestricted access |
| Slackmojis | An unofficial* directory of the best custom slack emojis | ✅ | |
| SPF Policy Tester | Check your SPF policy for syntax errors to discover problems prior publishing. | ✅ | |
| SSH Client | Browser based SSH client | ✅ | |
| SSL Cert Diag Tool | Useful tool to locate the problem and verify your SSL Certificate installation. | ✅ | |
| SSL Decoder | This site checks the SSL/TLS configuration of a server. In shows you the full certificate chain, including all kinds of information about every certificate, as well as connection information like ciphersuites and protocol support. Fill in either host + port or paste a CSR/Certficiate. Port defaults to 443. | ✅ | |
| SSL Labs | Free online service performs a deep analysis of the configuration of any SSL web server on the public Internet | ✅ | |
| Standard Notes | Standard Notes is free to use on every platform, and comes standard with cross-platform sync and end-to-end privacy | ☑️ | Excellent free version, pay for extensions, 2FA etc. |
| Subnet Mask Cheatsheet | IPv4 Subnet Mask Cheat Sheet | ✅ | |
| Subnet Calculator | IP Subnet Mask Calculator enables subnet network calculations using network class, IP address, subnet mask, subnet bits, mask bits, maximum required IP subnets and maximum required hosts per subnet. | ✅ | |
| Talky | Urgent meeting? Security Incident you need to talk about ASAP, Talky is a great free, video conferncing and screen sharing tool | ✅ | |
| TCP/UDP Port #'s | This is a list of TCP and UDP port numbers used by protocols of the transport layer of the Internet protocol suite for the establishment of host-to-host connectivity. | ✅ | |
| Text Mechanic | Simple, single task, browser based, text manipulation tools. | ✅ | |
| TinyEye | Search by image and find where that image appears online | ✅ | |
| TLS Bible | Useful to check exact support levels of TLS | ✅ | |
| Touch Typing Tool | Learn Touch Typing for free! | ✅ | |
| TypeForm | Free, beautiful forms with great UX/UI | ✅ | |
| URL Query | Online service for detecting and analyzing web-based malware. | ✅ | |
| Report URI | Tools to analyse and monitor website security policies like CSP and HPKP. | ✅ | |
| URL Decoder | Handy for turning encoded JavaScript URLs from complete gibberish into readable gibberish. | ✅ | |
| URL Haus | URLhaus is a project from abuse.ch with the goal of sharing malicious URLs that are being used for malware distribution. | ✅ | |
| URL Scan | Scan and preview URL's etc... | ✅ | |
| User Agent String | Tool to analyse and break down the User Agent String | ✅ | |
| Virus Total | Upload and scan a file to determine whether or not malicious. | ✅ | |
| ViewDNS | Useful tool if looking for domain takeover and DNS change history | ✅ | |
| Whats My DNS? | Verify DNS propagation or record information from multiple countries. | ✅ | |
| You Get Signal | The open port checker is a tool you can use to check your external IP address and detect open ports on your connection. | ✅ |