Reconnaissance/Useful Websites

Server/Computer/Node Recon sites:

Adguard.com – World’s most advanced adblocker!

AbuseIPDB – IP address abuse reports

Ahmia – Search Tor Hidden Services

AlienVault – Open Threat Exchange

alphaMountain threatYeti

Analyse your HTTP response headers

Anti Hacker Alliance

Apache Guacamole™

Argo Smart Routing | CloudFlare

Autohost Threat Intelligence 

BGP.Tools

BGPStream

BGPView – Home Page

BinaryEdge

Black Hat Directory – Find malicious host by IP

BuiltWith Technology Lookup

Bulk Domain Blacklist Checker and Bulk IP blacklist Checker

CacheCheck | OpenDNS

CapRover – Build your own PaaS in a few minutes

CDNPerf – CDN Performance and Uptime Monitoring

censys

Check Your Registrar and Domain Security | Cloudflare

CINScore.com

Cloudboot

Cloudflare – The Web Performance & Security Company | Cloudflare

Cloudflare Radar

COMODO SSL Analyzer

CompleteDNS – Research domain nameserver changes

Control D

CookieChecker

Criminal IP (Cybersecurity Search Engine)

Cyberint – Are you vulnerable to domain hijacking?

dark.fail: Which darknet sites are online?

Dark Web Map – Hyperion Gray 

Dataplicity: Remotely control your Raspberry Pi

Detect which CMS a site is using – What CMS?

Digital Attack Map

Discover Non-SaaS Software

DistroTest.net – The first online operating system tester

DMARC Analyzer

DNS Checker – DNS Check Propagation  Tool

DNS-based Content Filtering and Security

DNS leak test

DNS Performance – Compare speed and uptime of DNS servers

DNS Rebinding Attack

DNS Records search engine – DNSTable

DNS Servers – uncensoreddns blog

DNSdumpster.com – dns recon and research, find and lookup dns records

DNSMap – Worldwide DNS Propagation Checker – Global test

DNSTrails

Domain Glass

Domain Security Test | Detect Dark Web Exposure

Dowebscan – Vulnerability Management

Driftnet | Discover & Defend

DROWN SSL Attack Check

DWService – remote access and remote administration

Eternal Terminal

EXFilTRATED

FOFA Search Engine

Free IP Address tools for IPv4 and IPv6

Free Online Network Tools

Geoping – Global Latency Checker

Gibson Research Corporation – ShieldsUp! (Has UPnP test)

Google Hacking Database, GHDB, Google Dorks

Google Search Operators: The Complete List (42 Advanced Operators)

Greg’s Cable Map

grep.app | code search

GreyNoise Visualizer

Heartbleed test

https://reverse-shell.sh

Hurricane Electric BGP Toolkit

ifconfig.me

IBM X-Force Exchange

ImmuniWeb Community Tools

Internet-Wide Scan Data Repository

IP Address and SEO online tools: Web Analysis

IP Address Tools, Network Tools, DNS Tools, | IPVoid

IP Tools for Security and Network Testing | HackerTarget.com

IP Tools with IP Trace, Ping, Open Ports Check and Firewall Testing

IP/DNS Detect – What is your IP, what is your DNS, what information you send to websites.

ip2hosts.com

ipapi.is – Geolocation

Ip-address.com

Ip-address-location

IP-QualityScore.com

iptv-org

IPv6 Now

IP Vigilante

Irongeek’s Browser Information Page

Is BGP safe yet? – Cloudflare

JSLinux – Run Linux or other Operating Systems in your browser!

LeakIX

Linux Containers – LXD – Try it online

Load Impact | Performance testing for DevOps teams

localhost.run | localhost.run

localrouter.net

MAC Vendor Lookup Tool

MAC_Find: Vendor/Ethernet/Bluetooth MAC Address Lookup and Search

Mailsploit

Malware Hunter (Shodan.io product)

MaxMind – GeoIP

MeshCentral

MeshCommander

Moloch – Sessions

Mosh: the mobile shell

Netify – Network Intelligence

netboot.xyz

Netcraft Ltd

NetworkScan Mon (360.com – CN AV company)

nextdns

ngrok – secure introspectable tunnels to localhost

ngrok alternatives list

nip.io – wildcard DNS for any IP Address

Nmap Online

NovaSense Threat Feeds

Observatory by Mozilla

ondevice.io

Online Curl

Online Nmap scanner – nmap.online

Online Penetration Testing Tools | Ethical Hacking Tools

Online Port Scanner

ONYPHE – Cyber Defense Search Engine

Open Data | Rapid7 Open Data

Open Port Statistics

Open recursive DNS resolver test

OpenCelliD – The world’s largest Open Database of Cell Towers

Openport – Easy and secure reverse SSH

Outgoing Port Tester

Pandora FMS

Panopticlick – EFF web tracking test tool

patchbay – connect anything

ping.eu

Pingdom Tools

PipeTo.Me

Play with Docker

Portmap.io – free port forwarding solution

portscan.me

Project Maka

Proxmox – powerful open-source server solutions

Public Route Servers and Looking Glass sites

PunkSPIDER

Qualys BrowserCheck

Qualys SSL Labs – SSL Server Test

Rebex SSH Check

remote.it – remote.it

Request Map Generator

robtex

Route Views Archive Project Page

RST Threat: Free feeds

samy’s geolocation proof of concept

Scamalytics | Stop Scammers Automatically

Scan your website -urlscan.io

SecurityTrails – The World’s Largest Repository of Historical DNS data

Self Hosted Tech (Lucid Index)

Seashells

Serveo: expose local servers to the internet using SSH

‘ShellShock’ Bash Vulnerability test

shell.now.sh

ShellHub

Shellvault: the Cloud SSH Console

SHODAN (Scan me.shodan.io, if ports aren’t open you should get 404)

SHODAN

Simple Email Reputation

SiteLeaks

SMTP2GO: Reliable & Scalable Email Delivery Service

Snapdrop

Spark View (RDP, VNC, SSH, TELNET)

Spectre CPU Vulnerability Online Checker

SPICE – spice-space.org

Spyse Cybersecurity Search Engine

SS7map: SS7 Networks Exposure

SSHMyIp.com – Check Public IP From CLI

SSHReach.me

sshx

Subdomain Center | ARPSyndicate

Sucuri SiteCheck

SysAid 

TacticalRMM – github.com

TCPIPUTILS.com – ip, dns, email, whois and seo tools

Teleconsole | Gravitational

TelnetMyIP.com – Check Public IP From CLI

Test your IPV6.

The Best IP Geolocation Database | IPIP.NET

Threat Crowd | Threatcrowd.org

Threat Intelligence – Pulsedive

ThreatFox | Share Indicators Of Compromise

ThreatMiner.org | Data Mining for Threat Intelligence

ThreatWar.com

Tmate – Instant terminal sharing

Trace Email Address Source

Tunshell – Remote shell into ephemeral environments 

Twenty-five open-source network emulators and simulators you can use in 2023

UltraDNS Public | Neustar

un1c0rn.net

Uptime Robot

URLhaus | Browse

ViewDNS.info

WebCookies.org – scan for HTTP, Flash, HTML5, CANVAS …

WEBWORMHOLE

WhatLeaks

WhatWeb – Next generation web scanner.

WHOIS and Reverse IP Service

WiGLE: Wireless Network Mapping

XSSed

ZeroTier – Global Area Networking

ZoomEye – Cyberspace Search Engine

zrok – An open source sharing solution built on OpenZiti, the zero trust networking platform. 

Proxy sites:

HideMyAss Proxy (Scroll to the bottom of the page)

Proxy Sites List 2017

ProxyFire

Socks24

Unfiltered Browsing

People hunting:

411.com – Official Website

AccessMyGov.com

Background Check & Reverse Phone Lookup

Background Check | People Search | BeenVerified.com

Corporation Wiki

Dirt Search

Doxbin

Epieos, the ultimate OSINT tool – epieos.com

Facebook

Facebook Scanner

Fast People Search

Free Public Records Search – judyrecords.com

HolaConnect

hunter

LinkedIn

Mugshots.com

MyLife

Nuwber

OpenCorporates

People Search

Pipl

Quality Social Media Analytics – SocialGrep socialgrep.com

Simple Email Reputation

Social Recon

Spokeo

Spoonbill

TruePeopleSearch

US People Search

White Pages

Yellow Pages

ZabaSearch

Other Useful Websites:

0x0.st

10 Minute Mail

12ft Ladder

abcdesktop.io cloud native desktop 

Airborn

AmIUnique

APackets.com – Online pcap file analyzer

AppImage | Linux apps that run anywhere 

Archive.Today

Archiveteam

Atlas of Surveillance

awesome-selfhosted – github

Axur Hashcast

Ban Hacked Passwords

beta.SAM.gov | Home

Brave Search

Briefing – Secure anonymous video conferencing

Bugmenot

Call Flow Tracer (VOIP)

Canarytokens

Check files for metadata info

CheckShortURL

cl1p.net – The internet clipboard

command-not-found.com

Communication: Email-to-SMS Gateway list

Compiler Explorer

CourtListener.com – Non-Profit Free Legal Search Engine and Alert System

Cover Your Tracks

CyberChef

Dans Tools – Online tools for users and developers

Dark.fail: PGP verified darknet .onion links

DataBreach | Check if your data was compromised

dead-drop.me – Send Secure information, passwords, links

DeHased – #FreeThePassword

diagrams.net

DiffChecker

disaster.radio | a disaster-resilient communications network powered by the sun

DuckDuckGo

Duo Insight: Phishing Assessment Tool

EFF: DocuColor Tracking Dot Decoding Guide

Encryption Against Global Mass Surveillance

endpoints.dev

Eruda: Console for Mobile Browsers

Fake a Caller ID | Free Call Spoofer | SpoofTel

Fake Name Generator

Fake US Identities

fakena.me (for social network websites)

Fakespot | Analyze and identify fake reviews and counterfeits 

File Signatures List

file.io – Ephemeral file sharing

FilterLists

FilePizza – Your files, delivered.

Find the source of your leaks

Firefox Monitor

Firefox Private Network

Firefox Send

Fortigate-VM Demo

Free AWS, Azure, GCP, Kubernetes Architecture Diagram Tool | CloudSkew

Free for developers

Free Online Tools for Looking up Potentially Malicious Websites

Free Public Records Search – judyrecords

Google Diagnostics

Google Weblight (hint use ?lite_url= in front or url)

Google(SSL)

HackedList.io

Have I been pwned?

Healthchecks.io – Cron Job Monitoring

HTTP Shaming

ID Ransomware

IKnowWhatYouDownloaded

Insecam – World’s biggest online cameras directory

Instant.io – Streaming file transfer over WebTorrent

Introducing Optery – Remove Yourself From People Search Sites

IP/DNS Detect – What is your IP, what is your DNS, what information you send to websites.

IPQuick

Just Delete Me | A directory of direct links to delete your account from web services.

Jitsi Meet

LeakPeek – Home

Let’s Encrypt

Long List of Data Broker Sites and How to Opt-Out of Them

Master List of Data Broker Opt-out Links

MetaDefender Cloud | Advanced threat prevention and detection

Million Short – What haven’t you found?

Mozilla Rally

MWMBL – Search

MXTOOLBOX

MyPwd

netboot.xyz

NomadNet (github)

ntfy.sh | Send push notifications to your phone via PUT/POST 

ODA – The Online Disassembler

Oldest Search – Search for the oldest result on the internet.

OLDVERSION.COM

OneSearch

Online Free Hash Identification

Open recursive DNS resolver test

PasswordPusher

PEdump – dump your PE!

Phishcheck 2.0 beta – Home

Privacy Rights Clearninghouse

PacketTotal – A free, online PCAP analysis engine

Plain Text Offenders

Privnote – Send notes that will self-destruct after being read.

Public Database directory

Public disposable SMS

PwnedList.com

RegExr: Learn, Build, & Test RegEx

Runnaroo | A Better Private Search Engine

sdnotes.com – easily make a website without authentication

searchcode | source code search engine

searx.me

Securedrop.org – Share and accept documents securely

Send

SendTransfer

SEON Fraud Prevention: The Best Tools for Fraud Fighters – seon.io

Serve folder for web development -servefolder.dev

Share a secret – One Time

ShareDrop

ShellCheck – shell script analysis tool

shellshare – live terminal broadcast

silent-install.net [silent-install.net]

Should I change my password?

SHRTURL – Faking the web since 1942

Snusbase – Database Search Engine

SpyCloud | Check Your Exposure 

Startpage.com – The world’s most private search engine

Stashboard: The open source status dashboard

Streamhut

TailTub

Temp Mail – Disposable Temporary Email

termbin.com – terminal pastebin

TextBelt – Use curl to send SMS messages

Textdb

The Internet Health Test

Toolbox for Developers

Tools for better thinking 

transfer.sh – Easy and fast file sharing from the command line

TUXDEX | Anonymous Search Engine

Two Factor Auth List

Unverified Email- api testing site for emails

URLFind – URL mapping and links cross domains.

Verify Email Address Online

Virtual x86

Wayback Machine (Archive.org)

Wave-share: serverless, peer-to-peer, local file sharing through sound | C++ and stuff

We Leak Info

Webpage archive

WebRTC SSH Console

websdr.org

WeTransfer

Wolfram|Alpha: Computational Knowledge Engine

x0.at Filehost

xip.io: wildcard DNS for everyone 

xpra home page

Phone number related websites:

Caller ID Faker

Free Carrier Lookup – Find the carrier information for phone numbers

Globfone | Free online phone

Lookups – CallerID Test

NoPhoneTrees.com

Receive SMS Online

Receive SMS Online – Temporary Phone numbers

SMS Receive Free

telGuarder – Spam Call Blocker 

Unmask Blocked Calls

FOIA Websites:

MuckRock

The Black Vault

Image Forensics Websites:

Bing Image Search

Forensically (Online Photo Forensics Tool)

FotoForensics

Google Images

ImgOps

Online metadata and exif viewer

Reverse Image Search by Image Raider

TinEye Reverse Image Search

View Exif online, remove Exif online

Yandex.Images

Anti-Virus/Malware Analysis Websites:

ANY RUN

CAPE Sandbox

detux – the Linux Sandbox

Free Online Website Malware Scanner

HYBRID ANALYSIS

JOESandBox

Malpedia (Fraunhofer FKIE)

MalwareBazaar | Malware sample Exchange

MalwareHunterTeam

malwares.com

Malware Patrol | Cyber Threat Intelligence

Manalyzer

Maltiverse

NoDistribute

Online Virus Scanner without Result Distribution

Reverse.it

Url Scanner to Detect Phishing in Real-time | CheckPhish

urlquery.net – URL Scanner

URLVir: Monitor Malicious Executable Urls

VALKYRIE COMODO

VirusTotal

YOMI

Free Cloud Hosting/VM/Container sites:

Amazon AWS Free Cloud Tier

Google Cloud Free Services/Tier

Microsoft Azure Free Services/Tier

Oracle | Cloud Free Tier