Catbox- A platform for hosting and sharing files up to 200MB.
crt.sh - A free tool that allows you to search for certificates by domain name. Useful for finding subdomains of a specific domain.
CyberChef - Web-based platform for data analysis and decoding offering a vast range of operations, from simple string manipulation to complex cryptographic tasks.
Malfrat’s OSINT Map - An online tree of selected useful tools made for OSINT purposes,
made to help you during your investigations
Netlas App - Internet intelligence apps that provide accurate technical information on IP addresses, domain names, websites, web applications, IoT devices, and other online assets.
OSINT Framework - Comprehensive web-based directory that organizes and categorizes a wide range of open source intelligence tools and resources for investigative and research purposes.
PickyPaste - Send an email (anonymous or not) whose message is stored in ZeroBin (no trace of the message in the email itself. Discussion possible outside of email.
poubelle.zici.fr - A temporary and anonymous file hosting service.
Records Search - Indexing of databases that have been leaked online, with the possibility of searching by specific categories.
Reverse Shell Generator - Hosted Reverse Shell generator with a ton of functionality. – (Great for CTFs).
bettercap - Powerful, modular, and portable tool used to perform middle-person (man-in-the-middle) attacks, network monitoring, and security assessments through network analysis, packet manipulation, and a variety of network attacks.
BlueSpy - PoC to record audio from a Bluetooth device
John the Ripper - Advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs.
LinEnum - Scripted local Linux enumeration & privilege escalation checks.
ncdu - Disk usage analyzer with an ncurses interface, designed to find space hogs on a Unix-like system.
Maigret - Collect a dossier on a person by username from thousands of sites
marple - Collect links to profiles by username through search engines and analyze with various plugins
NAMINT - A simple javascript tool to prepare possible name and login search patterns with links.
nikto - Command-line vulnerability scanner that scans web servers for dangerous files/CGIs, outdated server software and other problems.
nmap - Open-source tool for network discovery and security auditing.
noisy - Python script that generates random HTTP/DNS traffic noise in the background while you go about your regular web browsing
PEASS-ng - Privilege Escalation Awesome Scripts Suite (with colors).
pgcli - Enhanced command-line interface for PostgreSQL with auto-completion and syntax highlighting.
pwnagotchi - Artificial intelligence tool for a Raspberry Pi Zero W that, using bettercap, learns to optimize attacks on WiFi protocols to efficiently gather and store crackable WPA handshakes and PMKIDs.
Sherlock - Hunt down social media accounts by username across social networks
theHarvester - OSINT tool used in the initial stages of red team assessments and penetration tests to determine a domain’s external threat landscape by collecting names, emails, IPs, subdomains, and URLs from various public resources.
XSS Hunter Express - The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities.