Defensive Security Tools
Comprehensive free online defensive security tools for security auditing and threat intelligence. URL reputation checker, SSL checker, hash analyzer, email header analyzer, password strength checker, security headers auditor, IP geolocation, and more defensive hacking tools.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Defensive SecurityBasicURL Reputation CheckerCheck URL reputation via multiple threat intelligence sources.url-reputationAPIDefensive SecurityBasicIP GeolocationGet geolocation info, ASN, and open ports from an IP address.ip-geolocationAPIDefensive SecurityBasicSSL CheckerCheck SSL certificate information and validity with comprehensive analysis.ssl-checkerAPIDefensive SecurityIntermediateHash AnalyzerAnalyze, identify, and verify hash types.hash-analyzerAPIDefensive SecurityIntermediateEmail Header AnalyzerParse and analyze email headers for investigation.email-header-analyzerAPIDefensive SecurityBasicPassword Strength CheckerCheck password strength with breach database check.password-checkerAPIDefensive SecurityBasicBase64 Encoder/DecoderEncode and decode Base64 strings.base64-toolClientDefensive SecurityIntermediateJWT DecoderDecode and analyze JSON Web Tokens with vulnerability testing.jwt-decoderAPIDefensive SecurityBasicURL Encoder/DecoderEncode and decode URL strings.url-encoderClientDefensive SecurityBasicIP Subnet CalculatorCalculate IP subnetting and CIDR.ip-calculatorClientDefensive SecurityBasicHTTP Status CheckerCheck HTTP status code, headers, and response time.http-statusAPIDefensive SecurityBasicSecurity Headers CheckerAudit security headers with scoring and grading.security-headersAPIDefensive SecurityBasicEmail Security CheckerCheck SPF, DKIM, DMARC, and BIMI for a domain.email-securityAPIDefensive SecurityIntermediateMagic DetectorAuto-detect encoding, hash, and data type from input.magic-detectorAPIDefensive SecurityBasicHash GeneratorGenerate MD5, SHA1, SHA256, SHA512, and bcrypt hashes.hash-generatorAPIDefensive SecurityBasicTimestamp ConverterConvert Unix timestamp to date and vice versa.timestamp-converterClientDefensive SecurityBasicSSH Hardening ChecklistGenerate an SSH configuration audit checklist with severities, verification commands, and a hardened sshd_config template.ssh-auditAPIDefensive SecurityBasicFTP Exposure ChecklistGenerate an FTP security audit checklist covering anonymous login, bounce attacks, and TLS enforcement.ftp-scannerAPIDefensive SecurityBasicSMB Exposure ChecklistGenerate an SMB security audit checklist covering null sessions, share enumeration, signing, and EternalBlue (MS17-010).smb-scannerAPIDefensive SecurityBasicSNMP Exposure ChecklistGenerate an SNMP security audit checklist covering default community strings and v1/v2c plaintext enumeration.snmp-scannerAPIDefensive SecurityBasicRDP / VNC Exposure ChecklistGenerate an RDP and VNC security audit checklist covering NLA enforcement, BlueKeep (CVE-2019-0708), and authentication-less VNC.rdp-vnc-checkerAPIDefensive SecurityBasicMetadata ExtractorReference guide for extracting metadata from images, PDFs, Office docs, audio, and video (EXIF, GPS, author).metadata-extractorAPIDefensive SecurityAdvancedBinary AnalysisELF/PE binary analysis reference: protections (ASLR, NX, Canary, RELRO, PIE), imports, and sections.binary-analysisAPIDefensive SecurityAdvancedExploit Development AssistantPattern create/offset, textbook shellcode templates, ROP gadgets, NOP sleds, and bad-character reference for binary exploitation training.exploit-dev-assistantAPI
Showing 52 of 52 tools