A List of Infosec Tools

Thu, 19 Sep 2024 12:52:47 +0200

Last update: 26. 7. 2026

ℹ️ This post is a living documment, I frequently updating tools here.

A list of information security tools for assessments, investigations and other cybersecurity tasks.

Also worth checking out is CISA’s list of free cybersecurity services and tools.

Jump to Section

OSINT / Reconnaissance
- Network Tools
- Breaches, Incidents & Leaks
- FININT
- GEOINT
- HUMINT
- IMINT
- MASINT
- SOCMINT
- Email
- Code Search
Scanning / Enumeration / Attack Surface
Offensive Security
- Exploits
- Red Team
Vulnerability Catalogs & Tools
Blue Team
Assembly / Reverse Engineering
OS / Scripting / Programming
Password
Assorted
- OpSec
- Jobs
- Conferences/Meetups
- Research & Blogs
- Funny
- Walls of Shame
- Other

OSINT / Reconnaissance

Common Crawl - Open repository of web crawl data
Cylect.io - Ultimate AI OSINT searching tool
Dehashed - Data-mining and deep web asset search engine
Dork King - Bug Bounty Dorks
DorkGenius - Generate custom dorks for Google, Bing, DuckDuckGo, & more
DorkSearch.com - Faster Google Dorking
FOFA - Search engine for global cyberspace mapping
Google Advanced Search Operators - A resource for doing advanced Google searches
Have I Been Squatted? - Check if your domain has been squatted.
Hunter.how - Internet search engines for security researchers
IntelligenceX - Search Tor, I2P, data leaks, domains, and emails
MetaOSINT - Aggregation of “top” tools & resources intended to help jumpstart OSINT investigations
OSINT Framework - Helping people find free OSINT resources
OSINT Industries - Gateway to email-based research
SEC eFilings (EDGAR) - Electronic Data Gathering, Analysis and Retrieval system
Wayback Machine - The archive for the Internet and a time machine for the web
Well-Known Resource Index - Search /.well-known/ resources served by sites across the web
Worldwide OSINT tools map - Phonebooks, cadastral maps, vehicle numbers databases, business registries, passengers lists, court records and much more
ZoomEye - Target information search

Network Tools (IP, DNS, WHOIS)

AbuseIPDB - Check IP address, domain name or subnet
American Registry for Internet Numbers (ARIN) - Administers IP addresses & ASNs
Better Whois - The whois domain search that works with all registrars
DomainTools - Whois lookup, domain availability and IP search tools
DNSCheck - DNS tool
DNSDumpster - DNS recon & research, find & lookup dns records
DNSViz - Tool for visualizing the status of a DNS zone
dnsqueries.com - Collection of online network tools
Hurricane Electric BGP Toolkit - A variety of Internet services and network tools
Internet Namespace Security Observatory - DNSSEC statistics and insights into the global adoption of secure internet namespaces
IPSpy.net - IP Lookup, WHOIS, DNS, Utilities
IPVoid - Discover details about IP addresses
ManageEngine Site24x7 - Free Tools for Network, DevOps and Site Reliability Engineers (SRE)
Netcraft - Collection of internet security services
Network Solutions - Whois lookup for domain registration information
Online Whois Tool - WHOIS
Radar | Cloudflare - Search for locations, AS, reports, domains and IP info
RIPE Network Coordination Centre - Organization that allocates and registers blocks of Internet number resources to ISPs and other organizations
Subdomain Center - Subdomain discovery
who.is - Search WHOIS, RDAP, DNS, and nameserver information for any domain name.

Breaches, Incidents & Leaks

CSIDB - Cyber Security Incident Database
Cybersecurity Incident Tracker | Board Cybersecurity - Tracker for cybersecurity incidents reported in an entity’s 8-K
DataBreaches.net - Information on corporate security breaches
DefiLlama Hacks - Cryptocurrency hack tracker
escape.tech API Data breaches - Database for API data breaches
Firefox Monitor - Find out if your personal information has been compromised
GDPR Enforcement Tracker - Overview of fines and penalties which data protection authorities within the EU have imposed under the EU GDPR.
Leak-Lookup - Data Breach Search Engine
LeakPeek - Data breach search engine
Northrecon - Incident database
PrivacyRights.org Data Breaches - Info on publicly available reported breaches
Public Cloud Security Breaches - Security incidents and breaches from customers in major cloud providers
Ransomfeed
RansomLook - Tracking ransomware posts and activities
Ransomware.live - Ransomware leak monitoring tool and observatory
Ransomwatch - Ransomware page crawler (archived)
Ransomwhere - Open, crowdsourced ransomware payment tracker
SnusBase - Data breach search engine
White Intel - Dark-Web Scan

FININT (Financial Intelligence)

GSA eLibrary - Source for the latest GSA contract award information

GEOINT (Geographical Intelligence)

MoonCalc - Calculate moon phase
PeakFinder - Mountains/coordinates
PowerOutage.us - Track, record and aggregate power outages in the US
SunCalc - Sun path computation, solar data & geo data
VypadokElektriny.sk - track and record power outages in Slovakia

HUMINT (Human & Corporate Intelligence)

No-Nonsense Intel - List of keywords which you can use to screen for adverse media, military links, political connections, sources of wealth, asset tracing etc
CheckUser - Check desired usernames across social network sites
CorporationWiki - Find and explore relationships between people and companies
Crunchbase - Discover innovative companies and the people behind them
Find Email - Find email addresses from any company
Info Sniper - Search property owners, deeds & more
Library of Leaks - Search documents, companies and people
LittleSis - Who-knows-who at the heights of business and government
Minerva - Find TRACES of anyone’s email
NAMINT - Shows possible name and login search patterns
OpenCorporates - Legal-entity database
That’s Them - Find addresses, phones, emails and much more
TruePeopleSearch - People search service
WhatsMyName - Enumerate usernames across many websites
Whitepages - Find people, contact info & background checks

IMINT (Imagery/Maps Intelligence)

Exposing.ai
Insecam - Live cameras directory
Map IPs - Paste up to 500,000 IPs below to see where they’re located on a map
Map of worldwide ransomware attacks
Photo OSINT - A lot of OSINT tools
World Imagery Wayback - Digital archive, providing users with access to the different versions of World Imagery created over time
WorldCam - Webcams from around the world

MASINT (Measurement and Signature Intelligence)

Wigle.net - Database of wireless networks

Discord Servers - Discord server search
Find a Discord - Discord server search
Lyzem - Telegram search engine
Spy.pet - Explore Discord’s data
TGStat - Telegram search channel

Email

DMARC Checker - Check DMARC, DKIM, and SPF Settings
EmailFormat.com - Find the email address formats in use at thousands of companies
Hunter - Search for professional email addresses
merox.io - DNS security and DMARC
MX Lookup Tool - Check your DNS MX records online
MX Toolbox - List MX records for a domain in priority order
DMARCIAN - Control Your domain, Secure your Email.
Mail Tester - Newsletters spam test
MESCA - My Email Communications Security Assessment (MECSA)

Code Search

grep.app - Search across a half million git repos
PublicWWW - Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code
searchcode - Search 75 billion lines of code from 40 million projects

Scanning / Enumeration / Attack Surface

Awseye
badkeys.info - Checking cryptographic public keys for known vulnerabilities
Browser History Analyzer - Processes your browser history
Built With - Find out what websites are built with
Censys Search - Search IP address, name, protocol or field
CensysGPT Beta - CensysGPT beta simplifies building queries and empowers users to conduct efficient and effective reconnaissance operations
Cert Central
CertDB - A searcheable database of the internet’s SSL/TLS certificate names
CriminalIP - Search for information about assets connected to the public Internet
crt.sh - Certificate search
CRXcavator - Chrome extension scanning
FullHunt - Attack Surface Enumerator
Grayhat Warfare - Public Bucket Finder
GreyNoise - Internet-connected devices
HTTP Observatory - Analyzing compliance with best security practices
ꓘamerka and ꓘamerka lite - Public ICS identification
LeakIX - Search publicly indexed information to find security misconfigurations
Netlas - Search and monitor internet connected assets.
Onyphe - Cyber defense search engine
OSINT.SH Public Buckets - Public Bucket Finder
S3 Bucket Scanner | purpleleaf - Checks S3 bucket-level permissions that may allow data exposure
Security Headers | Probely - Analyze HTTP headers
SecurityTrails - Attack surface scanning
Shodan - Search engine for internet-connected devices
Shodan | InternetDB - Fast way to see the open ports for an IP address
Shodan-Dork
Should I click? - Tells you if it’s safe to click on a link
SSL Checker - SSL certificate verification
SSL Server Test - Tool from Qualys to perform deep analysis of the configuration of an SSL web server
urlscan.io - Scan and analyze websites
Wappalyzer - Identify technologies on websites

Offensive Security

Exploits

Bug Bounty Hunting Search Engine - Search for writeups, payloads, bug bounty tips, and more…
BugBounty.zip - Your all-in-one solution for domain operations
CP-R Evasion Techniques
CVExploits - Comprehensive database for CVE exploits
DROPS - Dynamic CheatSheet/Command Generator
Exploit Notes - Hacking techniques and tools for penetration testings, bug bounty, CTFs
ExploitDB - Huge repository of exploits from Offensive Security
files.ninja - Upload any file and find similar files
Google Hacking Database (GHDB) - A list of Google search queries used in the OSINT phase of penetration testing
GTFOArgs - Curated list of Unix binaries that can be manipulated for argument injection
GTFOBins - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Hijack Libs - Curated list of DLL Hijacking candidates
Living Off the Living Off the Land - A great collection of resources to thrive off the land
Living Off the Pipeline - CI/CD lolbin
Living Off Trusted Sites (LOTS) Project - Repository of popular, legitimate domains that can be used to conduct phishing, C2, exfiltration & tool downloading while evading detection
LOFLCAB - Living off the Foreign Land Cmdlets and Binaries
LoFP - Living off the False Positive
LOLBAS - Curated list of Windows binaries that can be used to bypass local security restrictions in misconfigured systems
LOLC2 - Collection of C2 frameworks that leverage legitimate services to evade detection
LOLESXi - Living Off The Land ESXi
LOLOL - A great collection of resources to thrive off the land
LOLRMM - Remote Monitoring and Management (RMM) tools that could potentially be abused by threat actors
LOOBins - Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes
LOTTunnels - Living Off The Tunnels
Microsoft Patch Tuesday Countdown
offsec.tools - A vast collection of security tools
Shodan Exploits
SPLOITUS - Exploit search database
VulnCheck XDB - An index of exploit proof of concept code in git repositories
XSSed - Information on and an archive of Cross-Site-Scripting (XSS) attacks

Red Team

ArgFuscator - Generates obfuscated command lines for common system tools
ARTToolkit - Interactive cheat sheet, containing a useful list of offensive security tools and their respective commands/payloads, to be used in red teaming exercises
Atomic Red Team - A library of simple, focused tests mapped to the MITRE ATT&CK matrix
C2 Matrix - Select the best C2 framework for your needs based on your adversary emulation plan and the target environment
ExpiredDomains.net - Expired domain name search engine
Living Off The Land Drivers - Curated list of Windows drivers used by adversaries to bypass security controls and carry out attacks
Unprotect Project - Search Evasion Techniques
WADComs - Curated list of offensive security tools and their respective commands, to be used against Windows/AD environments

Web Security

Invisible JavaScript - Execute invisible JavaScript by abusing Hangul filler characters
INVISIBLE.js - A super compact (116-byte) bootstrap that hides JavaScript using a Proxy trap to run code

Security Advisories

CISA Alerts - Providing information on current security issues, vulnerabilities and exploits
ICS Advisory Project - DHS CISA ICS Advisories data visualized as a Dashboard and in Comma Separated Value (CSV) format to support vulnerability analysis for the OT/ICS community

Attack Libraries

A more comprehensive list of Attack Libraries can be found here.

Assessment on May Meow's Blog