black electronics

Useful Links

Searching

Site NameURLDescription
Censyshttps://censys.com/Up-to-date map of the internet for assessing attack surface for Internet connected devices.
Certificate Searchhttps://crt.sh/A web interface that lets you search for web certificates.
CertStreamhttps://certstream.calidog.io/An intelligence feed that gives you real-time updates from the Certificate Transparency Log network.
Columbus Projecthttps://columbus.elmasy.com/A subdomain enumeration service with advanced queries.
Cookiedatabasehttps://cookiedatabase.orgCookie details and the services that place these cookies.
CVExploitshttps://cvexploits.io/A comprehensive database for CVE exploits from across the internet.
Dehashedhttps://www.dehashed.comData-mining and deep web asset search engine.
FOFA Search Enginehttps://en.fofa.info/Search engine for cyberspace.
FullHunthttps://fullhunt.io/Attack surface database of the entire Internet.
Grayhatwarfarehttps://buckets.grayhatwarfare.com/Search for Open Amazon s3 Buckets and their contents.
GreyNoise Visualizerhttps://viz.greynoise.io/A platform that collects and analyzes Internet-wide scan and attack traffic.
Hudson Rockhttps://www.hudsonrock.com/Free cybercrime intelligence tools.
IBM X-Force Exchangehttps://exchange.xforce.ibmcloud.com/Search the latest global security threats.
Phonebook.czhttps://phonebook.czPhonebook lists all domains, email addresses, or URLs for the given input domain with 121 billion records.
PimEyeshttps://pimeyes.comPimEyes is an online face search engine.
PublicWWWhttps://publicwww.com/Source code search engine to find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code.
RocketReachhttps://rocketreach.co/A data broker that curates a massive database containing contact information.
Shodanhttps://www.shodan.io/Search engine for Internet-connected devices.
Simple Email Reputationhttps://emailrep.io/Search and discover the reputation behind an email address.
TableConverthttps://tableconvert.com/excel-to-textile/Convert Excel data to Textile Table.
ZoomEyehttps://www.zoomeye.org/A cyberspace search engine.
whatismytenantidhttps://www.whatismytenantid.com/Find the Microsoft Azure and Microsoft 365 tenant ID for a domain name.

DNS

Site NameURLDescription
DNSLog Platformhttps://dnslog.cn/Allows anyone to get a random subdomain under 'dnslog.cn'. The website allows you to monitor any resolution requests for the random subdomain you generated.
ExpiredDomainshttps://www.expireddomains.net/All the information on expired domains that are pending delete.
Google Public DNShttps://dns.google/Online DNS name resolver.
OpenDNShttps://community.opendns.com/domaintagging/Domain tagging.
Robtexhttps://www.robtex.com/Robtex uses various sources to gather public information about IP numbers, domain names, host names, Autonomous systems, routes etc.
Symantec Sitereviewhttps://sitereview.bluecoat.com/#/Check and dispute the current WebPulse categorization for any URL.
ViewDNS.infohttps://viewdns.info/Gather a large amount of data about a given website or IP address.
WhoisXML APIhttps://whois-history.whoisxmlapi.com/WHOIS history tools to check domain name ownership history.

Scanners

Site NameURLDescription
42Crunchhttps://42crunch.com/freemium/Online API security scanner.
AntiScanhttps://antiscan.me/Scan your file with over 26 anti-viruses.
Hacker Targethttps://hackertarget.com/Hosted vulnerability scanners.
Mozilla Observatoryhttps://observatory.mozilla.org/Set of tools to analyze a website and inform you if it is not using the many available methods to secure it.
Netcrafthttps://www.netcraft.com/Scan and discover the web technologies and internet infrastructure powering any site.
Pentest Toolshttps://pentest-tools.com/Various online pentesting and scanning tools.
Qualys SSL Labshttps://www.ssllabs.com/ssltest/SSL server test that performs a deep analysis of the configuration of any SSL web server on the public Internet.
VirusTotalhttps://www.virustotal.com/Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.
Wappalyzerhttps://www.wappalyzer.com/Find out the technology stack of any website.

IP Tools

Site NameURLDescription
AbuseIPDBhttps://www.abuseipdb.com/A central blacklist for webmasters, system administrators, and other interested parties to report and find IP addresses that have been associated with malicious activity online.
Cisco Taloshttps://www.talosintelligence.com/Various intelligence on IPs, domains etc.
IPaddressguidehttps://www.ipaddressguide.com/Free IP address and other Internet related tools.
IPcalchttps://jodies.de/ipcalc/Takes an IP address and netmask and calculates the resulting broadcast, network, Cisco wildcard mask, and host range.
IPinfohttps://ipinfo.ioIP geolocation, company, carrier and IP type data sets.
IPvoidhttps://www.ipvoid.com/A range of IP address tools to discover details about IP addresses. IP blacklist check, whois lookup, dns lookup, ping etc.
Ifconfig.mehttps://ifconfig.me/An online tool to get your public IP address.
NetworksDBhttps://networksdb.ioInformation about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organization's across the world along with city-level IP geolocation data and autonomous system information.
Project Honey Pothttps://www.projecthoneypot.orgList of compromised and Malicious IPs and other data.

  • AbuseIPDB

    https://www.abuseipdb.com/

    A central blacklist for webmasters, system administrators, and other interested parties to report and find IP addresses that have been associated with malicious activity online.

  • Cisco Talos

    https://www.talosintelligence.com/

    Various intelligence on IPs, domains etc.

  • IPaddressguide

    https://www.ipaddressguide.com/

    Free IP address and other Internet related tools.

  • IPcalc

    https://jodies.de/ipcalc/

    Takes an IP address and netmask and calculates the resulting broadcast, network, Cisco wildcard mask, and host range.

  • IPinfo

    https://ipinfo.io

    IP geolocation, company, carrier and IP type data sets.

  • IPvoid

    https://www.ipvoid.com/

    A range of IP address tools to discover details about IP addresses. IP blacklist check, whois lookup, dns lookup, ping etc.

  • Ifconfig.me

    https://ifconfig.me/

    An online tool to get your public IP address.

  • NetworksDB

    https://networksdb.io

    Information about the public IPv4 and IPv6 addresses, networks and domains owned by companies and organization's across the world along with city-level IP geolocation data and autonomous system information.

  • Project Honey Pot

    https://www.projecthoneypot.org

    List of compromised and Malicious IPs and other data.

Online Tools

Site NameURLDescription
AADInternalshttps://aadinternals.com/aadinternalsThe ultimate Entra ID (Azure AD) / Microsoft 365 hacking and admin toolkit.
AMSI.failhttps://amsi.failGenerates obfuscated PowerShell snippets that break or disable AMSI for the current process.
ANY.RUNhttps://any.run/Interactive online malware analysis service.
APKCombohttps://apkcombo.comDownload Android APK mobile apps from Google Play store.
ASCII Character Charthttps://www.eso.org/~ndelmott/ascii.htmlASCII character chart with decimal, binary and hexadecimal conversions.
ASP.NET ViewState Decoderhttps://www.httpdebugger.com/tools/ViewstateDecoder.aspxDecode the ASP.NET ViewState strings and display in tree view format online.
Basic Authenticator Header Generatorhttps://www.blitter.se/utils/basic-authentication-header-generatorCreate basic authenticator headers online.
Browserlinghttps://www.browserling.comOnline cross-browser testing tool.
Canarytokenshttps://canarytokens.org/Create payloads that trigger an alert when a victim accesses them.
Code Beautifyhttps://codebeautify.org/Code Formatter, JSON Beautifier, XML Viewer, Hex Converters and more.
DB Fiddlehttps://dbfiddle.uk/Testing SQL commands across a variety of database schemas.
dCode.frhttps://www.dcode.fr/A collection of over 900 tools to help solve games, riddles, ciphers, mathematics, puzzles, etc.
de4jshttps://lelinhtinh.github.io/de4jsOnline JavaScript deobfuscator and unpacker.
Excalidrawhttps://excalidraw.comA whiteboard tool that lets you sketch diagrams that have a hand-drawn feel to them.
GraphiQL Onlinehttps://lucasconstantino.github.io/graphiql-online/Online available instance of GraphiQL.
iKathttps://www.ikat.kronicd.net/Aid security consultants with the task of auditing the security of Kiosk terminals.
JSON Web Tokens Builderhttps://jwtbuilder.jamiekurtz.com/Creating JSON Web Tokens online for use in testing.
JWThttps://jwt.io/Decode, verify and generate JWT.
Living Off Trusted Sites (LOTS) Projecthttps://lots-project.com/List of websites that allow attackers to use their domain or subdomain for hosting phishing, C&C etc.
Online Reverse Shell Generatorhttps://www.revshells.com/An online reverse shell generator.
OWASP Risk Rating Calculatorhttps://www.owasp-risk-rating.com/Risk Rating Calculator based on OWASP's Risk Rating Methodology.
Pastebinhttps://pastebin.comStore any text online for easy sharing. Find leaked creds etc.
Pine Toolshttps://pinetools.com/generate-list-numbers/Generate a list of numbers online.
PostBinhttps://www.toptal.com/developers/postbin/Collect all requests to a special URL which you can use to test for out-of-band vulnerabilities.
Replithttps://replit.com/Online integrated development environment.
Reviewshttps://reviewsonmywebsite.com/google-review-link-generator/Google review link generator
Sandboxie-Plushttps://sandboxie-plus.com/A sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems
SQL Fiddlehttps://sqlfiddle.com/Online SQL compiler that lets you write, edit, and execute any SQL query.
Unit Conversionhttps://www.unit-conversion.info/A comprehensive unit conversion website.
UUID Generatorhttps://www.uuidgenerator.net/Online UUID Generator.
W3cub Toolshttps://tools.w3cub.com/html-escape-unescape/HTML escape and unescape online.
W3Schools iFramehttps://www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe/Online iFrame tool. Create and test iFrames online.
WhatIsMyBrowserhttps://www.whatismybrowser.com/Know what browser you're using, with a list of your web browser's settings.
Wormholehttps://wormhole.app/Share files with end-to-end encryption and a link that automatically expires. Useful for data exfiltration.

Hashing & Cracking

Site NameURLDescription
CrackStationhttps://crackstation.net/CrackStation uses massive pre-computed lookup tables to crack password hashes.
CyberChefhttps://gchq.github.io/CyberChef/The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis.
dCode.frhttps://www.dcode.fr/A collection of over 900 tools to help solve games, riddles, ciphers, mathematics, puzzles, etc.
Dehashedhttps://www.dehashed.com/Data-mining and deep web asset search engine.
Hasheshttps://hashes.com/en/decrypt/hash/Decrypt MD5, SHA1, MySQL, NTLM, SHA256, MD5 Email, SHA256 Email, SHA512 hashes.
NTLM to Passwordhttps://ntlm.pw/NTLM to plaintext password "cracking" service, using a custom high performance database with billions of precomputed password hashes
MD5Hashing.nethttps://md5hashing.net/Hash and decode various hashes.
Nitrxgen MD5 Databasehttps://nitrxgen.net/md5db/A look-up tool for typical unsalted MD5 cryptographic hashes. The database currently contains 1.1+ trillion passwords.
Online Hash Crackhttps://www.onlinehashcrack.com/Professional Cloud Password Testing & Recovery Services.
Online Hash Toolshttps://onlinehashtools.com/Online hash tools is a collection of useful utilities for cryptographically hashing data.
Useful LinksPentest PayloadsCheat Sheets