• 🌐 ⁠Awesome Formal Verification (https://github.com/ElNiak/awesome-formal-verification) - Verification / Model Checking Techniques Index

• ⭐ pyWhat (https://github.com/bee-san/pyWhat), horsicq (https://ntinfo.biz/) / GitHub (https://github.com/horsicq/) or ⁠CheckFileType (https://www.checkfiletype.com/) - File Type Identification Tools

• Open Source Security Software (https://open-source-security-software.net/) - Cybersecurity Software

• osquery (https://osquery.io) or Nmap (https://nmap.org/) / Results (https://nmap.org/ndiff/) - Security Monitors

• Canarytokens (https://canarytokens.org/generate) - Network Breach Check

• masscan (https://github.com/robertdavidgraham/masscan) - Port Scanner

• Nuclei (https://docs.projectdiscovery.io/opensource/nuclei/overview) / GitHub (https://github.com/projectdiscovery/nuclei), Synk (https://security.snyk.io/) or NVD (https://nvd.nist.gov/) - Vulnerability Tracking / Scanning

• Zeek (https://zeek.org/), Kismet (https://www.kismetwireless.net/), ntop (https://www.ntop.org/) or Sniffnet (https://sniffnet.app/) / GitHub (https://github.com/GyulyVGC/sniffnet) - Network Monitors

• Crowdsec (https://crowdsec.net/) - Crowd-Sourced Intrusion Detection / Prevention / GitHub (https://github.com/crowdsecurity/crowdsec)

• BBRadar (https://bbradar.io/), ⁠Open Bug Bounty (https://www.openbugbounty.org/) or BugBountyHunting (https://www.bugbountyhunting.com/) - Bug Bounty Trackers

• X-Force Exchange (https://exchange.xforce.ibmcloud.com/) - Security Threat Intelligence Platform

• OpenSCA-CLI (https://github.com/XmirrorSecurity/OpenSCA-cli) - Composition Analysis for Third Party Components

• Unblob (https://unblob.org/) - Extraction Suite

• Security Onion Solutions (https://securityonionsolutions.com/), Wazuh (https://wazuh.com/) or Snyk (https://snyk.io/) / GitHub (https://github.com/snyk/cli) - Site Security Monitor

• spur.us (https://spur.us/) - Block VPNs / Proxies

• Greenbone (https://github.com/greenbone) - Vulnerability Management

• Evervault (https://evervault.com/) - Security / Compliance Infrastructure

• Observatory (https://developer.mozilla.org/en-US/observatory) - HTTP Header Security Test

• UUID Tools (https://www.uuidtools.com/) or ⁠UUID Generator (https://toolkitvault.com/uuid-generator) - UUID Generators

• favicon-hash (https://favicon-hash.kmsec.uk/) - Favicon Hash Generator

• DarkVisitors (https://darkvisitors.com/) - Autonomous Chatbots / Data Scraper List

• Al-Khaser (https://github.com/ayoubfaouzi/al-khaser) - Anti-Malware Stress Test

• CVE Details (https://www.cvedetails.com/) or ⁠OpenCVE (https://app.opencve.io/cve/) - CVE Details / Search

• AllSafe (https://github.com/t0thkr1s/allsafe) - Intentionally Vulnerable Android App

• 🌐 Awesome Cyber Security (https://github.com/fabionoth/awesome-cyber-security) - Cybersecurity Resources

• 🌐 Awesome CI/CD Security (https://github.com/myugan/awesome-cicd-security) - CI/CD Security Resources

• ↪️ Cybersecurity Learning (https://www.reddit.com/r/FREEMEDIAHECKYEAH/wiki/edu#wiki_.25B7_cybersecurity)

• Advisory Database (https://github.com/github/advisory-database), ThreatFox (https://threatfox.abuse.ch/), Exploit DB (https://www.exploit-db.com/) or Att&ck (https://attack.mitre.org/) - Cybersecurity Defense Databases

• Bazaar (https://bazaar.abuse.ch/), MalShare (https://malshare.com/), URLhaus (https://urlhaus.abuse.ch/), PulseDive (https://pulsedive.com/) or Malpedia (https://malpedia.caad.fkie.fraunhofer.de/) - Malware Search / Indexes

• ThreatMap (https://threatmap.checkpoint.com/), Threat Radar (https://radar.offseq.com/) or CyberMap (https://cybermap.kaspersky.com/) - Live Malware Distribution Maps

• Rawsec's CyberSecurity Inventory (https://inventory.raw.pm/) - Cybersecurity Resources

• CybersecResources (https://www.cybersources.site/) - Cybersecurity Resources / GitHub (https://github.com/bst04/cybersources)

• Awesome List (https://github.com/0xor0ne/awesome-list) - Cybersecurity Resources

• Infosec Resources (https://github.com/stong/infosec-resources) - Cybersecurity Resources

• CyberSecTools (https://cybersectools.com/) - Cybersecurity Resources

• My Infosec Awesome (https://github.com/pe3zx/my-infosec-awesome) - Infosec Resources

• 🌐 Awesome Pen Testing (https://github.com/enaqx/awesome-pentest) - Penetration Testing Resources

• 🌐 Awesome Hacking (https://github.com/Hack-with-Github/Awesome-Hacking) - Pentesting / Security Index

• Metasploit (https://www.metasploit.com/) / Cheatsheet (https://www.comparitech.com/net-admin/metasploit-cheat-sheet/) - Pentesting Framework

• Pentest Contracts (https://github.com/cure53/Contracts) - Security Contract Templates

• OSCP-Exam-Report-Template-Markdown (https://noraj.github.io/OSCP-Exam-Report-Template-Markdown/) - Offensive Security Exam Report Markdown / GitHub (https://github.com/noraj/OSCP-Exam-Report-Template-Markdown)

• Kali NetHunter (https://store.nethunter.com/) or AndroGuard (https://github.com/androguard/androguard) - Penetration Testing / Forensics Apps

• ↪️ Free DNS Resolvers (https://www.reddit.com/r/FREEMEDIAHECKYEAH/wiki/storage/#wiki_free_dns_resolvers)

• ⭐ mess with dns (https://messwithdns.net/) - Experiment with DNS / GitHub (https://github.com/jvns/mess-with-dns)

• DNS over HTTPS (https://github.com/curl/curl/wiki/DNS-over-HTTPS) - Encrypted DNS Providers & Resources / Public Servers (https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-available-servers) / iOS + macOS Configs (https://github.com/paulmillr/encrypted-dns)

• DNSPerf (https://www.dnsperf.com/dns-providers-list/) - DNS Provider Rankings

• DNS Propagation (https://dnsaudit.io/tools/dns-propagation-check) - DNS Checker

• ⁠DNS Coffee (https://dns.coffee/) - DNS Search History Tool

• MXToolBox (https://mxtoolbox.com/) - MX Record Lookup Tool

• DNSDumpster (https://dnsdumpster.com/), DNS Watch (https://dnswatch.info), DNSHistory (https://dnshistory.org/) or WhatsMyDNS (https://whatsmydns.net/) - DNS Lookup / Security

• Web Check (https://web-check.xyz/) / GitHub (https://github.com/Lissy93/web-check) or NSLookup (https://www.nslookup.io/) - DNS Information Tools

• ⭐ Cap (https://trycap.dev/) / GitHub (https://github.com/tiagozip/cap), LibreCaptcha (https://github.com/librecaptcha/lc-core), mCaptcha (https://mcaptcha.org/) / GitHub (https://github.com/mCaptcha/mCaptcha) or Anubis (https://anubis.techaro.lol/) / GitHub (https://github.com/TecharoHQ/anubis) - Bot Protection / Captchas

• ⁠Iocaine (https://iocaine.madhouse-project.org/) - Anti-Web Crawler Software / Source Code (https://git.madhouse-project.org/iocaine/iocaine)

• WebAuthn (https://webauthn.guide/) - Web Authentication API - Demo (https://webauthn.io/)

• Hydra (https://github.com/ory/hydra) - OAuth 2.0 Server / OpenID Connect Provider

• SuperTokens (https://supertokens.com/), ⁠Better Auth (https://better-auth.com/) or Lucia (https://lucia-auth.com/) - User Authentication

• ⁠crt.name (https://crt.name/) - Passive Subdomain Index / Search

• SupaBase (https://supabase.com/) - Database / Authentication Service

• ⁠GNUnet (https://www.gnunet.org/en/) - Decentralized P2P Framework

• ZAP (https://www.zaproxy.org/) - Web App Security Testing

• IP Intelligence (https://getipintel.net/), AbuseIPDB (https://www.abuseipdb.com/) or Proxy Check (https://proxycheck.io/) - Proxy / VPN / Bad IP Detection

• Fail2Ban (https://github.com/fail2ban/fail2ban) - Protect Servers from Brute Force Attacks

• Tempesta FW (https://tempesta-tech.com/) - DDoS / Web Attack Protection

• IPv6 Leak Test (https://ip6.nl/) or Test-IPv6 (https://test-ipv6.com/) - IPv6 Test

• How To Turn off IPv6 (https://www.itechguides.com/disable-ipv6-windows-10/) - Prevent IPv6 Leaks

• ⭐ Awesome Cryptography (https://github.com/sobolevn/awesome-cryptography) - Cryptography Resources

• mitmproxy (https://mitmproxy.org/) - Analyze and modify HTTPS traffic / OpenAPI Converter (https://github.com/alufers/mitmproxy2swagger) / GitHub (https://github.com/mitmproxy/mitmproxy)

• HTTPToolkit (https://httptoolkit.com/) - Intercept, Debug, and Mock HTTP(S)

• TLSRef (https://configurator.tlsref.org/) - SSL Configuration Generator

• SSLLabs (https://www.ssllabs.com/) - SSL Testing

• Hitch (https://www.varnish-software.com/community/hitch) - SSL / TLS Proxy / GitHub (https://github.com/varnish/hitch)

• Let's Encrypt (https://letsencrypt.org/) or ZeroSSL (https://zerossl.com/) - Free TLS Certificates

• SSL for Free (https://www.sslforfree.com/) - Free SSL Certificates

• CertAlert (https://certalert.net/) - TLS/SSL Certificate Expiration Alerts

• acme.sh (https://github.com/acmesh-official/acme.sh) or Certbot (https://certbot.eff.org/) - Automatically Configure / Renew Certificates

• mkcert (https://github.com/FiloSottile/mkcert) - Locally Trusted Development Certificates

• SSLMate CAA (https://sslmate.com/caa/) - CAA Record Helper

• minisign (https://jedisct1.github.io/minisign/) - Sign Files / Verify Digital Signatures / GitHub (https://github.com/jedisct1/minisign)

• 🌐 ⁠Reverse Engineering Notes (https://gist.github.com/0xdevalias/d8b743efb82c0e9406fc69da0d6c6581) or ReversingBits (https://mohitmishra786.github.io/reversingBits/) / GitHub (https://github.com/mohitmishra786/reversingBits) - Reverse Engineering Resources

• 🌐 Awesome Android Reverse Engineering (https://github.com/user1342/Awesome-Android-Reverse-Engineering) - Android Reverse Engineering Resources

• 🌐 Awesome Malware Analysis (https://github.com/rshipp/awesome-malware-analysis) - Malware Analysis Resources

• ⭐ IDA Pro (https://www.reddit.com/r/FREEMEDIAHECKYEAH/wiki/torrent/) (search) - Software Disassembler / Decompiler / Plugins (https://plugins.hex-rays.com/)

• ⭐ GHIDRA (https://github.com/NationalSecurityAgency/ghidra) - Reverse Engineering Framework / Plugins (https://github.com/AllsafeCyberSecurity/awesome-ghidra)

• ⭐ Binary Ninja (https://binary.ninja/free/) - Decompiler / Disassembler / Debugger / Plugins (https://github.com/vector35/community-plugins)

• ⭐ Frida (https://frida.re/) - Dynamic Instrumentation Toolkit / GitHub (https://github.com/frida/frida)

• ⭐ x64dbg (https://x64dbg.com/) - Debugger for Reverse Engineering / Plugins (https://github.com/x64dbg/x64dbg/wiki/Plugins)

• ⁠Reverse Engineering (https://discord.gg/reverse-engineering-391398885819547652) (discord) - Reverse Engineering Community

• ⁠LemmeDebug (https://greasyfork.org/en/scripts/537775) - Disable Anti-Devtools for Reverse Engineering / Debugging

• Radare (https://www.radare.org/n/) - Free Reversing Toolkit / Discord (https://discord.gg/YBey7CR9jf) / GitHub (https://github.com/radareorg/radare2)

• Rizin (https://rizin.re/) or Cutter (https://cutter.re/) - Reverse Engineering Framework

• Flare VM (https://github.com/mandiant/flare-vm) - Reverse Engineering Environment Setup Script

• REMnux (https://remnux.org/) - Reverse Engineering / Malware Analysis

• dnSpyEx (https://github.com/dnSpyEx/dnSpy) - .NET Debugger and Assembly Editor

• Gaultier Blog (https://gaultier.github.io/blog/x11_x64.html) - Learn x86-64 Assembly

• ROP Emporium (https://ropemporium.com/) - Learn Return-Oriented Programming

• APK Editor Studio (https://qwertycube.com/apk-editor-studio/) / GitHub (https://github.com/kefir500/apk-editor-studio) or APKTool (https://apktool.org/) / GitHub (https://github.com/iBotPeaches/Apktool) - APK Reverse Engineering

• MSTG (https://mas.owasp.org/) or DVIA-v2 (https://github.com/prateek147/DVIA-v2) - App Security Testing / Reverse Engineering

• Malimite (https://github.com/LaurieWired/Malimite) - iOS / macOS Decompiler

• challenges.re (https://challenges.re/) - Reverse Engineer Code

↑ developer-tools · ↑ FMHY index