{"id":669,"date":"2020-12-29T16:48:20","date_gmt":"2020-12-29T16:48:20","guid":{"rendered":"https:\/\/dft.wiki\/?p=669"},"modified":"2026-06-09T13:24:26","modified_gmt":"2026-06-09T17:24:26","slug":"cyber-security-sites-and-tools-you-need-to-know-about","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=669","title":{"rendered":"Cyber Security Sites, Tools and Tips"},"content":{"rendered":"

Darknet Diaries<\/a> – An excellent bi-weekly podcast about cybersecurity, hackers, the dark web, and much more.<\/p>\n

Security Now<\/a> – A weekly technical cybersecurity podcast (by GRC<\/a>) available in video and audio.<\/p>\n

Grumpy Old Geeks<\/a> – A weekly humor show on cybersecurity and the Internet. “What went wrong on the Internet and who is to blame!”<\/p>\n

The Cyber Wire<\/a> – A daily source of cyber news and IT career content.<\/p>\n

The Social-Engineer Podcast<\/a> – The title speaks for itself.<\/p>\n

Virus Total<\/a> – A website from a cybersecurity company that provides information about viruses, worms, malware, and more.<\/p>\n

Alien Vault<\/a> – Similar to Virus Total, but claims to be a fully open threat intelligence community.<\/p>\n

GrayNoise<\/a> – Collects, analyzes, and labels data from IPs that scan the internet and saturate security tools with noise.<\/p>\n

AntiScan<\/a> and DynCheck<\/a> – Free online multi-antivirus scanners.<\/p>\n

GTmetrix<\/a> – Designed to test website loading speed, it also reports on page content and the percentage of each language used.<\/p>\n

PageSpeed Insights<\/a> – Generates performance reports for a page on both mobile and desktop devices, and provides suggestions for improvement.<\/p>\n

Web.Dev<\/a> – Test your pages in a lab environment and get tips and recommendations to improve the user experience.<\/p>\n

SEO SiteCheckup<\/a> – A supercharged analysis and monitoring tool for SEO (Search Engine Optimization).<\/p>\n

IPv6 Test<\/a> – Checks your IPv6 and IPv4 connectivity and speed, and can also test whether your website (DNS and Host) is IPv6-ready.<\/p>\n

Security Header<\/a> – Check the security headers of a website.<\/p>\n

Tor Browser<\/a> – An encrypted browser that routes traffic through relays and proxies around the world to protect user privacy.<\/p>\n

Tails Linux<\/a> – A Linux distribution designed to leave no trace after shutdown.<\/p>\n

Kali Linux<\/a> – A Linux distribution designed for network and system security testing.<\/p>\n

Parrot OS<\/a> – A lightweight but powerful offensive distribution, comparable to Kali. Based on Debian 13 and uses Plasma 6 with Wayland by default.<\/p>\n

Pentest.WS<\/a> – A collaborative interface for working with NMAP scans, inventory, and vulnerabilities. A useful tool for team CTFs.<\/p>\n

The PenTesters Framework<\/a> – Regardless of the distribution, PTF is a toolset that makes it easy to install and keep all the most popular pentesting applications up to date.<\/p>\n

CrackStation<\/a> – A free web-based password hash cracker, and a downloadable password list called RealUniq<\/strong> with over 1.4 billion entries.<\/p>\n

TunnelsUp<\/a> – A source of cybersecurity information and tools, including a web hash analyzer [Link<\/a>].<\/p>\n

SecLists<\/a> – A collection of multiple types of lists (such as password lists) used during security assessments, all in one place.<\/p>\n

Project RainbowCrack<\/a> – A source of rainbow tables with pre-cracked passwords. It is simply a matter of cross-checking the hashes.<\/p>\n

1.4 Billion Text Credentials Analysis (NLP)<\/a> – Also available to download via torrent.<\/p>\n

BYOB<\/a> – A framework for building command-and-control zombie bots (for educational purposes only).<\/p>\n

Eschalot<\/a> – A tool for generating a vanity .onion address for your service on the Tor network.<\/p>\n

Onion.ly<\/a> – Tor2Web proxy (try *****.onion.ly<\/strong>).<\/p>\n

Sn1per<\/a> – An automated scanner for enumerating and finding vulnerabilities during penetration tests. Also available as a Docker image [Link<\/a>].<\/p>\n

Nessus<\/a> – A powerful professional vulnerability scanner.<\/p>\n

DVWA<\/a> – Damn Vulnerable Web App is an intentionally vulnerable PHP\/MySQL web application. Also available for Docker [Link<\/a>].<\/p>\n

IronWASP<\/a> – An open-source tool for web application vulnerability testing, crawling, and more.<\/p>\n

ReconNess<\/a> – Helps run and manage all your reconnaissance in one place, focusing on potentially vulnerable targets.<\/p>\n

Osmedeus<\/a> – A collection of tools for reconnaissance and vulnerability scanning against a target.<\/p>\n

Netcat<\/a> – A tool for tunneling connections (file transfers, remote shell, etc).<\/p>\n

CVE Details<\/a> – Security vulnerability database.<\/p>\n

Hunter<\/a> – An information-gathering tool for OSINT.<\/p>\n

Metasploit Unleashed<\/a> – The official Metasploit documentation and manual.<\/p>\n

Metasploitable<\/a> – An intentionally vulnerable target machine for exploitation exercises.<\/p>\n

Veil-Evasion<\/a> – A pentesting framework.<\/p>\n

MSFvenom<\/a> – A combination of Msfpayload and Msfencode in a single framework.<\/p>\n

Armitage<\/a> – A free graphical interface for MSF.<\/p>\n

Cobalt Strike<\/a> – A licensed graphical interface for MSF.<\/p>\n

Empire<\/a> – A Windows and macOS post-exploitation framework featuring a pure PowerShell 2.0 Windows agent and a pure Python 2.6\/2.7 Linux\/OS X agent.<\/p>\n

Jok3r<\/a> – A framework that assists penetration testers with network infrastructure and web security assessments.<\/p>\n

Exploit Database<\/a> – An archive of public exploits and their corresponding vulnerable software.<\/p>\n

HackTheBox<\/a> – An online platform for practicing penetration testing skills.<\/p>\n

VulnHub<\/a> – Hundreds of pre-configured virtual machines set up for vulnerability and penetration testing exercises.<\/p>\n

Command Challenge<\/a> – Practice commands and learn how to solve problems in the CLI.<\/p>\n

picoCFT<\/a> – Compete or practice using picoGym, a non-competitive space to explore and solve challenges from past picoCTF competitions.<\/p>\n

DEFT Linux<\/a> – DEFT (Digital Evidence & Forensic Toolkit) is a Ubuntu-based live distribution for incident response and computer forensics.<\/p>\n

python-cim<\/a> – A forensics tool for analyzing WMI event logs.<\/p>\n

Cloudflare<\/a> – A free CDN (Content Delivery Network) and web application firewall that uses a proxy network and offers optimization features such as caching, code optimization, and more.<\/p>\n

OWASP Broken Web Application Project<\/a> – A collection of vulnerable web applications distributed as a VMware virtual machine.<\/p>\n

OWASP Web Goat<\/a> – Lets developers test vulnerabilities commonly found in Java-based applications that rely on popular open-source components.<\/p>\n

OWASP Juice Shop<\/a> – Contains vulnerabilities from the entire OWASP Top Ten<\/a>, along with many other security flaws found in real-world applications.<\/p>\n

JSON Web Token<\/a> and JWT<\/a> – Encode and decode JSON Web Tokens.<\/p>\n

Wappalyzer<\/a> – A technology profiler that shows you what a website is built with.<\/p>\n

Dan’s Tools<\/a> – Epoch and Unix timestamp conversion tools. Also includes tools for conversion, encoding\/decoding, and formatting.<\/p>\n

CyberChef<\/a> – An online encryption and decryption tool.<\/p>\n

Outline VPN<\/a> – An open-source VPN that runs on Docker, created by Google and partners.<\/p>\n

Shodan<\/a> – A search engine for internet-connected devices. A great OSINT source for open ports and exposed services. Also available via the Kali CLI.<\/p>\n

Censys<\/a> – An internet scanner similar to Shodan, but more focused on specific addresses rather than broad searches.<\/p>\n

Wigle<\/a> – A live map of all discovered wireless networks worldwide.<\/p>\n

Spyse<\/a> – A database of port scans with fingerprints that may reveal OS and application versions.<\/p>\n

Security Trails<\/a> – Another database of port scans and domain information.<\/p>\n

IntelligenceX<\/a> – An OSINT tool for retrieving information about data breaches, Bitcoin addresses, domain information, and more.<\/p>\n

Payloads All The Things<\/a> – A large collection of payloads of all types, along with instructions and exercises.<\/p>\n

SQL Injection Payload List<\/a> – A collection of SQL injection exploits with instructions.<\/p>\n

XXE Injection Payloads List<\/a> – A collection of XXE injection exploits with instructions.<\/p>\n

XSS Payloads<\/a> – A collection of XSS payloads.<\/p>\n

SSL Server Test<\/a> – A free web service for evaluating the SSL\/TLS configuration of your web server.<\/p>\n

Bad SSL<\/a> – A collection of non-compliant certificate samples for browser and client testing.<\/p>\n

ONDMARC<\/a> – Check the SPF and DKIM configuration of a mail server.<\/p>\n

ProtonMail<\/a> – An encrypted and anonymous email provider.<\/p>\n

Tutanota<\/a> – An encrypted and anonymous email provider.<\/p>\n

CoverYourTracks<\/a> – A browser privacy tester from the EFF.<\/p>\n

PrivacyTools.io<\/a> – Provides services, tools, and knowledge to protect your privacy against global mass surveillance.<\/p>\n

JustDeleteMe.xyz<\/a> – A directory of direct links to delete your account from various web services.<\/p>\n

BuiltWith<\/a> – A free web service for analyzing what framework a website is built with. Alternatively, check out the Wappalyzer browser extension [Link<\/a>].<\/p>\n

Transfer.sh<\/a> – A CLI tool for uploading and downloading files via their free file-sharing service.<\/p>\n

Static-Binaries<\/a> – A collection of single executable files for various tasks (e.g., nmap, netcat) with no installation required.<\/p>\n

Ollama<\/a> – A single wrapper for running LLMs such as Llama 3.1, Phi 3, Mistral, Gemma 2, and other models.<\/p>\n","protected":false},"excerpt":{"rendered":"

Darknet Diaries – An excellent bi-weekly podcast about cybersecurity, hackers, the dark web, and much […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-669","post","type-post","status-publish","format-standard","hentry","category-hacking"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=669"}],"version-history":[{"count":89,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/669\/revisions"}],"predecessor-version":[{"id":5806,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/669\/revisions\/5806"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}