Cybersecurity Tools
Dehashed – Credential Leaks SearchDehashed allows users to search for credentials that have been leaked in data breaches. By searching these leaks, security teams can identify compromised user accounts, prompt password resets, and mitigate risks of unauthorized access.
Security Trails – DNS & Domain IntelligenceSecurity Trails provides comprehensive data on DNS, domain names, and subdomains. Security professionals can use this tool to track down previously undiscovered assets, monitor changes in DNS records, and uncover misconfigurations that could be vulnerable to attacks.
DorkSearch – Google Dorking for Exposed DataDorkSearch uses Google dorking techniques, which involve advanced search queries, to find sensitive data exposed on the web. This includes files with passwords, admin panels, or personal information that are inadvertently indexed by Google. It helps in vulnerability assessments and data exposure discovery.
ExploitDB – Vulnerability & Exploit DatabaseExploitDB is an open-source archive of known vulnerabilities and exploits. It provides security researchers with details about specific vulnerabilities, the associated CVE (Common Vulnerabilities and Exposures) identifiers, and the exploits that can be used to target those vulnerabilities. This is crucial for penetration testing and for understanding security weaknesses.
ZoomEye – Internet-Connected Devices SearchZoomEye is a search engine focused on internet-connected devices. It scans the internet for devices such as cameras, routers, and IoT devices. By using ZoomEye, security professionals can discover misconfigured or exposed devices, identify vulnerabilities, and mitigate risks associated with IoT and industrial systems.
Pulsedive – Real-Time Threat IntelligencePulsedive aggregates real-time threat intelligence feeds and enhances them with enriched metadata. It provides threat data on indicators of compromise (IoCs), including IP addresses, domains, URLs, and file hashes. This tool is valuable for threat hunters, incident responders, and security operations teams to identify active threats and respond quickly.
GrayHatWarfare – Exposed Amazon S3 BucketsGrayHatWarfare helps identify publicly exposed Amazon S3 buckets, which are commonly misconfigured to allow public access. These buckets can contain sensitive data such as customer information, financial records, or company files. Identifying exposed buckets early can help mitigate data leakage and unauthorized access.
PolySwarm – Threat Detection in Files & URLsPolySwarm is a multi-engine malware scanner. It analyzes files and URLs to detect malware, trojans, ransomware, and other security threats. By using a diverse set of security engines, it increases the accuracy of threat detection and helps mitigate the risk of false positives.
Fofa – Internet Asset Search EngineFofa is a search engine that allows security professionals to scan the internet for exposed assets, such as servers, web applications, and IoT devices. It provides data on open ports, services, and configurations, which helps security teams identify potential attack vectors.
LeakIX – Exposed Web Servers & ServicesLeakIX indexes exposed web server details, allowing security teams to discover services or servers that are publicly accessible but unprotected. This can include databases, file servers, or admin interfaces that should not be publicly available, helping prevent unauthorized access.
DNSDumpster – DNS & Infrastructure DiscoveryDNSDumpster is a DNS reconnaissance tool that allows users to perform domain discovery, subdomain enumeration, and mapping of infrastructure. It’s particularly useful for uncovering all assets associated with an organization, including hidden or forgotten domains that could present security risks.
FullHunt – Vulnerability & Attack Surface ManagementFullHunt helps identify vulnerabilities in an organization’s attack surface, including exposed services, misconfigurations, and open ports. It provides detailed reports for patch management, penetration testing, and risk assessments, helping prevent breaches before they happen.
AlienVault – Threat Intelligence & Security MonitoringAlienVault is a comprehensive threat intelligence platform that collects data on IoCs, provides real-time alerts, and helps security teams detect and respond to threats. It’s beneficial for detecting advanced persistent threats (APTs), malware, and other security incidents.
Onyphe – Cyber Threat Intelligence Search EngineOnyphe is an OSINT tool that helps users search for cyberattack intelligence, such as leaked credentials, compromised services, and attack infrastructure. It indexes data from public sources, dark web, and other threat repositories, providing valuable insights for proactive defense.
Grep App – Source Code Exposure SearchGrep App searches public code repositories (e.g., GitHub, GitLab) for sensitive information like hardcoded secrets, credentials, or API keys. This tool helps prevent the accidental exposure of critical secrets and sensitive data in code that is publicly available.
URL Scan – Website Vulnerability AnalysisURL Scan is a web application security tool that scans websites for vulnerabilities such as cross-site scripting (XSS), SQL injection, and malware. It provides detailed reports about a website’s security posture and highlights areas that need to be addressed.
Vulners – Vulnerability Database & Exploit SearchVulners is a vulnerability search engine that aggregates and indexes data on CVEs, security advisories, and exploits. Security researchers can use it to find known vulnerabilities and associated exploits, ensuring they stay informed about emerging threats.
Wayback Machine – Archiving & Website BrowsingThe Wayback Machine archives old versions of websites. Security professionals use it to track changes, recover deleted content, or identify past security misconfigurations. This historical data can be valuable in understanding how a website’s security has evolved over time.
Shodan – Search Engine for Exposed DevicesShodan is widely used for discovering internet-facing devices. It scans the internet for IPs and reports the services running on devices. This includes servers, IoT devices, and industrial control systems. It’s particularly valuable for identifying devices with exposed vulnerabilities or misconfigurations.
Netlas – Internet-Connected Devices Search EngineSimilar to Shodan, Netlas helps security teams search for internet-connected devices and services. It provides a comprehensive view of the global internet landscape and helps identify misconfigurations, vulnerable services, and potential attack surfaces.
CRT.sh – SSL/TLS Certificate Transparency SearchCRT.sh is a search engine for SSL/TLS certificates. It allows security professionals to track newly issued certificates, detect fraudulent domains, and identify phishing sites. Monitoring certificate transparency logs is crucial for detecting unauthorized or malicious certificates.
Wigle – Wireless Network MappingWigle helps discover wireless networks and their vulnerabilities. Security professionals use it to map Wi-Fi networks, assess their security configurations, and identify unprotected networks that could be exploited by attackers.
PublicWWW – Website Technology DetectionPublicWWW is a tool for identifying the technologies used by websites, including their CMS, analytics tools, and frameworks. Security teams use it to identify potential security risks associated with outdated or vulnerable technologies.
BinaryEdge – Internet-Wide Network ScanningBinaryEdge is a platform that performs large-scale network scanning to identify exposed services and vulnerabilities. It helps organizations by giving visibility into their public-facing infrastructure and highlighting potential attack vectors.
GreyNoise – Filtering Internet-Wide Scanning ActivityGreyNoise is a tool that filters out internet-wide scanning noise, allowing security teams to focus on targeted threats. It helps distinguish between benign scanning activities and real attacks, enabling faster response times.
Hunter – Email Discovery by DomainHunter allows users to search for email addresses associated with a particular domain. It’s useful for social engineering tests, phishing awareness, and gathering contact information for OSINT purposes.
Censys – Search Engine for Exposed DevicesCensys scans and indexes internet-connected devices, providing detailed information on services and vulnerabilities. It helps security teams detect exposed assets and monitor their global attack surface.
IntelligenceX – Dark Web & Leak Search EngineIntelligenceX indexes data from the dark web, leaks, and encrypted communication networks like Tor and I2P. It helps security teams track down leaked credentials, data breaches, and other cybercrime-related activities.
Packet Storm – Exploit & Hacking Tools ArchivePacket Storm is an archive of security tools, exploits, and vulnerability information. It’s an essential resource for penetration testers and researchers who need to stay up-to-date with the latest exploits.
SearchCode – Source Code Vulnerability SearchSearchCode scans public code repositories for vulnerabilities and insecure coding practices. It helps developers and security researchers identify potential flaws in open-source projects, reducing the likelihood of exploitable bugs.
Comentarios