Challenges 3

OverTheWire Progressive wargames teaching Linux, networking and binary basics over SSH overthewire.org Smash the Stack Long-running wargame network focused on binary exploitation smashthestack.org Hellbound Hackers Community challenges covering web, crypto and application security hbh.sh

AI Security 13

DeepSec Agentic security review of code changes github.com Defending Code Reference Harness Reference harness for evaluating code-defence agents github.com Garak LLM vulnerability scanner probing for jailbreaks and leakage github.com Lakera Guard Commercial guardrails against prompt injection and data leaks lakera.ai LLM Guard Open-source input/output sanitisation toolkit for LLMs github.com NeMo Guardrails Programmable guardrails for conversational LLM apps github.com OWASP LLM Top 10 Reference list of the top LLM application security risks owasp.org promptfoo Test and red-team LLM prompts with adversarial suites promptfoo.dev PyRIT Microsoft's Python risk identification toolkit for generative AI github.com Rebuff Self-hardening prompt injection detector github.com Vigil Scanner for prompt injection and jailbreak payloads github.com Visa Vulnerability Agentic Harness Harness for benchmarking agentic vulnerability discovery github.com VulnHunter ML-assisted vulnerability discovery in source code github.com

Credentials & Leaks 3

Dehashed Search engine for leaked credentials and breach records dehashed.com Intelligence X Archive search across Tor, I2P, paste sites and data leaks intelx.io LeakIX Index of publicly exposed services and leaked databases leakix.net

Internet Host Search 9

Censys Continuously scanned inventory of hosts, certificates and services censys.com FOFA Chinese cyberspace mapping and asset search engine fofa.info FullHunt Attack-surface database with continuous asset monitoring fullhunt.io GrayHatWarfare Search public S3 buckets and other open cloud storage buckets.grayhatwarfare.com IVRE Self-hosted network recon framework and scan database ivre.rocks Netlas Attack-surface discovery across IPs, domains and certificates app.netlas.io Onyphe Cyber defence search engine for exposed assets onyphe.io Shodan The original search engine for internet-connected devices shodan.io ZoomEye Cyberspace search engine for exposed hosts and components zoomeye.org

Network & ASN 3

Cymru ASN Lookup Team Cymru whois service mapping IPs to ASNs asn.cymru.com HE BGP Toolkit Hurricane Electric's BGP, ASN and peering lookup toolkit bgp.he.net IPInfo.io IP geolocation, ASN and hosting data via web or API ipinfo.io

Network Scanning 1

Nmap The standard port scanner and service fingerprinting tool nmap.org

People & OSINT 3

Hunter Find and verify professional email addresses by domain hunter.io theHarvester Gathers emails, subdomains and names from public sources github.com WiGLE Crowd-sourced database of wireless networks worldwide wigle.net

Subdomain & DNS 18

Altdns Generates and resolves subdomain permutations github.com AQUATONE Visual inspection of websites across a host list github.com CertStream Live feed of certificate transparency log updates certstream.calidog.io crt.name Subdomain search over billions of certificate transparency records crt.name crt.sh Searchable certificate transparency log database crt.sh DNSdumpster Free DNS recon and subdomain mapping in the browser dnsdumpster.com DNSRecon Scriptable DNS enumeration and zone transfer testing github.com Domain Analyzer Automated domain reconnaissance and security analysis github.com enumall Subdomain enumeration wrapper from jhaddix's recon toolkit github.com Fierce DNS reconnaissance tool for locating non-contiguous IP space github.com ldns C library and drill utility for DNS and DNSSEC queries nlnetlabs.nl MassDNS High-performance bulk DNS resolver for large wordlists github.com nsec3map Enumerates DNSSEC zones by walking NSEC/NSEC3 records github.com nsec3walker Classic tool for enumerating names from NSEC3 hashes dnscurve.org SecurityTrails Historical DNS, WHOIS and subdomain intelligence securitytrails.com SubBrute Fast subdomain brute-forcer using open resolvers github.com Sublist3r Subdomain enumeration using search engines and public APIs github.com XRay Network and subdomain mapping with OSINT sources github.com

Threat Intelligence 6

AlienVault OTX Open threat exchange with community-contributed indicators otx.alienvault.com GreyNoise Visualizer Separates targeted attacks from internet background noise viz.greynoise.io PolySwarm Multi-engine marketplace for scanning files and URLs polyswarm.io Pulsedive Free threat intelligence platform for indicator enrichment pulsedive.com SOCRadar Digital risk protection and external threat monitoring socradar.io urlscan.io Sandboxed scanning of websites with full request capture urlscan.io

Vulnerabilities & Exploits 3

ExploitDB Offensive Security's archive of public exploits and PoCs exploit-db.com Packet Storm Long-running archive of exploits, advisories and tools packetstorm.news Vulners Aggregated vulnerability database with a powerful search API vulners.com

Web & Code Search 6

DorkSearch Prebuilt Google dork templates for faster recon dorksearch.com Google Search operators and dorks remain a core recon technique google.com grep.app Regex search across hundreds of thousands of Git repos grep.app PublicWWW Search the HTML, JS and CSS source of millions of sites publiccom searchcode Source code search across public repositories searchcode.com Wayback Machine Historical snapshots of websites and removed content web.archive.org

Web App Testing 6

Burp Suite The de facto intercepting proxy for web app testing portswigger.net Charles Proxy HTTP proxy and monitor with strong mobile support charlesproxy.com Fiddler Web debugging proxy for inspecting and replaying traffic telerik.com Insomnia API client for crafting and replaying HTTP requests insomnia.rest OWASP ZAP Free and open-source web application security scanner zaproxy.org Postman API platform for building, testing and fuzzing requests postman.com