Curated directory of free tools, distributions, sandboxes, and threat research portals.
Standard Linux distro for offensive operations, digital forensics, and payload triage.
Debian-based distro tuned for reverse engineering, pentesting, and privacy routing.
Free threat hunting, network security monitoring (NSM), and enterprise log analysis platform.
Specialized Linux distribution configured for malware analysis and binary reverse engineering.
Heavyweight digital forensics (DFIR) and live OSINT investigation distribution.
Community crowd-sourced IP threat reports, attack categories, and confidence scores.
Hurricane Electric authoritative routing, ASN prefixes, peers, and BGP route origins.
Commercial VPN, proxy, residential exit node, and anonymous infrastructure tracking.
Global IP/domain reputation, web categorization, and sender threat scoring.
Search engine for internet-connected devices, open service banners, and TLS configurations.
Internet-wide scan dataset for discovering host fingerprints, ports, and certificates.
Certificate Transparency log search for discovering subdomains and issued TLS certs.
Domain research tool for DNS record reconnaissance, mapping, and subdomain enumeration.
Historical DNS data, WHOIS records, and domain ownership change tracking.
Free web crawler analyzing DOM trees, network requests, screenshots, and redirects.
Fast authoritative registrar, name server, and registrant profile lookup.
Comprehensive MX record queries, blacklists, SPF/DKIM validation, and SMTP diagnostics.
Official Azure tool to inspect email relay hops, hop latency, and anti-spam headers.
Parses RFC 822 headers and flags delivery delays across mail transfer agents.
Inspects domain DMARC policies, alignment configurations, and reporting tags.
Multi-engine static scanning for files, hashes, domains, and suspicious IPs.
Interactive malware hunting sandbox with real-time process monitoring.
Free automated malware analysis powered by CrowdStrike Falcon Sandbox.
Abuse.ch community repository for sharing, querying, and downloading live malware samples.
High-throughput automated sandbox with deep Windows, Android, and macOS evasion detection.
The standard web swiss-army knife for arbitrary decoding, parsing, and transformations.
Online regular expression tester, debugger, and reference for PCRE, Python, and JS engines.
Extensive catalog of legacy ciphers, esoteric encodings, and cryptanalysis solvers.
Decode, inspect, and verify JSON Web Token headers, payloads, and claims.