Find Intelligence reports from an IP address

GreyNoise

Internet scanner reputation intelligence

Wireshark

Network protocol analyzer

urlscan.io

Scan and analyze URLs safely

AbuseIPDB

a community IP reputation database for checking and reporting abusive interne

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Burp Suite

a commercial web security testing platform for proxying, scanning, and analyz

CVE Details

a searchable vulnerability database for CVEs, vendors, products, versions, an

Can I Take Over XYZ

a community-maintained reference for identifying services vulnerable to subdo

CheckLeaked

Aggregated breach search across Dehashed, Snusbase and LeakCheck

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cloudflare Radar

Internet trends and DDoS data from Cloudflare

Cortex

an observable analysis and active response engine used with TheHive and secur

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Cyberbro

Extract IOCs from raw text and enrich them across reputation services

DFIR Platform

API toolkit for phishing triage, IOC enrichment and BEC investigation

ExoneraTor

Historical Tor relay/exit checker

Exploit-DB

a public exploit archive maintained by Offensive Security for vulnerability r

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

FortiGuard Web Filter Lookup

Look up a URL, domain or IP reputation and category

GeoLite2

Free MaxMind IP geolocation data

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

Greenbone Community Edition

an open-source vulnerability scanning stack for identifying known issues acro

Grype

a vulnerability scanner for container images, filesystems, and software bills

Harpoon

Meta OSINT CLI wrapping 30+ APIs

Hudson Rock Cavalier

Infostealer exposure lookup tool

I Know What You Download

See torrent downloads recorded for an IP address

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

IP2Location

IP geolocation database and API

Interactsh

an out-of-band interaction server used to verify blind vulnerabilities and ca

Interlace

Multi-threaded recon CLI runner

Jaeles

a signature-based web application scanner for detecting security issues and e

MISP

an open-source threat intelligence platform for sharing indicators, events, g

Maltrail

Detect traffic to malicious domains and IPs from blacklists

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

MaxMind GeoIP

Paid IP geolocation and network data

Metasploit Framework

Penetration testing and exploit framework

NVD

the U.S. National Vulnerability Database for CVEs, CPEs, CVSS scores, and ref

Nikto

a web server scanner for dangerous files, outdated software, and common misco

Nuclei

a template-based vulnerability scanner used to detect misconfigurations and e

Nuclei Templates

a community template library used by Nuclei to identify vulnerabilities and m

OONI Explorer

OONI internet censorship measurement archive

OSINT Combine Browser

OSINT Combine free tools and tutorials

OSINT Framework

Interactive mind-map directory of free OSINT resources by data type

OSV-Scanner

a vulnerability scanner that checks dependencies against the Open Source Vuln

OWASP ZAP

an open-source web application security scanner and intercepting proxy for au

OpenCTI

an open-source cyber threat intelligence platform for modeling entities, rela

OpenPhish

a phishing intelligence service that detects and publishes active phishing in

Packet Storm Security

a long-running archive of exploits, advisories, tools, and security research

Pentest-Tools.com

Hosted pentest scanner SaaS

PhishTank

a community phishing verification service for checking and submitting suspect

Pulsedive

a threat intelligence platform for enriching indicators, domains, IPs, and UR

Qualys SSL Labs

a web service for analyzing public TLS configuration and certificate deployme

Reconmap

Open-source pentest management platform

Retire.js

a JavaScript dependency scanner that identifies vulnerable client-side librar

SEON Digital Footprint

Enrich email, phone or IP into a digital-footprint profile

SSLyze

a Python scanner that analyzes SSL and TLS services for protocol and certific

Sn1per

Automated recon and pentest framework

Snyk

a developer security platform for scanning dependencies, containers, code, an

Subjack

a subdomain takeover scanner that checks dangling DNS records against known s

Syft

an SBOM generation tool for cataloging packages in containers, filesystems, a