All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityIntermediateSubdomain FinderDiscover subdomains of a target domain using various sources and enumeration techniques.subdomain-finderAPIOffensive SecurityBasicPort ScannerScan open ports on a target host via Shodan InternetDB.port-scannerAPIOffensive SecurityIntermediateDirectory BruteforcerDiscover hidden directories and files on web servers.directory-bruteforcerAPIOffensive SecurityBasicDNS LookupQuery complete DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA).dns-lookupAPIOffensive SecurityBasicWHOIS LookupQuery domain registration info via RDAP/WHOIS.whois-lookupAPIOffensive SecurityIntermediateGoogle Dork GeneratorGenerate Google dork queries to find sensitive information.google-dork-generatorAPIOffensive SecurityIntermediateShodan Dork GeneratorGenerate Shodan search queries for target reconnaissance.shodan-dork-generatorAPIOffensive SecurityBasicReverse IP LookupFind other domains hosted on the same IP address.reverse-ipAPIOffensive SecurityIntermediateAPI FuzzerGenerate a bounded set of fuzz test cases (SQLi, XSS, path traversal, command injection, SSRF, header injection, type juggling, method override, GraphQL introspection) for one API endpoint you control.api-fuzzerAPIOffensive SecurityAdvancedGraphQL IntrospectorIntrospect GraphQL endpoints: schema dump, query list, mutation discovery, batching test.graphql-introspectorAPIOffensive SecurityIntermediateUsername EnumerationCheck whether a username has a public profile across 30 well-known platforms (Sherlock-style OSINT).username-enumerationAPIDefensive SecurityBasicMetadata ExtractorReference guide for extracting metadata from images, PDFs, Office docs, audio, and video (EXIF, GPS, author).metadata-extractorAPIDefensive SecurityIntermediateDGA DetectorDetect algorithmically generated domains (DGA) using entropy, n-gram, and pattern analysis.dga-detectorAPI
Showing 13 of 98 tools