All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityIntermediateSubdomain FinderDiscover subdomains of a target domain using various sources and enumeration techniques.subdomain-finderAPIOffensive SecurityBasicPort ScannerScan open ports on a target host via Shodan InternetDB.port-scannerAPIOffensive SecurityBasicDNS LookupQuery complete DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA).dns-lookupAPIOffensive SecurityIntermediateShodan Dork GeneratorGenerate Shodan search queries for target reconnaissance.shodan-dork-generatorAPIOffensive SecurityAdvancedSSRF Map GeneratorGenerate SSRF payloads (IPv4, IPv6, hex, octal, DNS rebinding).ssrf-map-generatorAPIOffensive SecurityBasicReverse IP LookupFind other domains hosted on the same IP address.reverse-ipAPIDefensive SecurityBasicIP GeolocationGet geolocation info, ASN, and open ports from an IP address.ip-geolocationAPIDefensive SecurityBasicSSL CheckerCheck SSL certificate information and validity with comprehensive analysis.ssl-checkerAPIDefensive SecurityBasicIP Subnet CalculatorCalculate IP subnetting and CIDR.ip-calculatorClientDefensive SecurityBasicSSH Hardening ChecklistGenerate an SSH configuration audit checklist with severities, verification commands, and a hardened sshd_config template.ssh-auditAPIDefensive SecurityBasicFTP Exposure ChecklistGenerate an FTP security audit checklist covering anonymous login, bounce attacks, and TLS enforcement.ftp-scannerAPIDefensive SecurityBasicSMB Exposure ChecklistGenerate an SMB security audit checklist covering null sessions, share enumeration, signing, and EternalBlue (MS17-010).smb-scannerAPIDefensive SecurityBasicSNMP Exposure ChecklistGenerate an SNMP security audit checklist covering default community strings and v1/v2c plaintext enumeration.snmp-scannerAPIDefensive SecurityBasicRDP / VNC Exposure ChecklistGenerate an RDP and VNC security audit checklist covering NLA enforcement, BlueKeep (CVE-2019-0708), and authentication-less VNC.rdp-vnc-checkerAPIDefensive SecurityBasicFirewall Rule AuditorReview common firewall misconfiguration patterns and load a default-deny hardening template for iptables, pfSense, or AWS Security Groups.firewall-auditorAPI
Showing 15 of 98 tools