Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Assetfinder is a small Go tool that finds domains and subdomains related to a given domain using public data sources.
Censys indexes internet-facing hosts and certificates so you can search for exposed services and see how your own assets...
DNSRecon performs DNS enumeration: standard record lookups, zone transfer checks, brute forcing and more.
Maltego is a commercial graphical link-analysis platform that visualises relationships between people, domains, infrastr...
OSINT Framework is a curated, categorised directory of free OSINT tools and resources arranged as a browsable tree.
Amass maps an organisation's external attack surface by enumerating subdomains and related network assets from many publ...
ParamSpider mines URLs containing parameters for a domain from web archives.
Recon-ng is a modular web reconnaissance framework with a Metasploit-like interface and a built-in database.
Sherlock checks whether a username exists across hundreds of social networks and websites.
Shodan is a search engine for internet-connected devices and services; defenders use it to see what their own organisati...
SpiderFoot automates OSINT collection about domains, IPs, emails and names using many data sources, with a web UI.
Subfinder is a passive subdomain discovery tool that queries public sources such as certificate transparency and DNS dat...
dnsx is a fast DNS toolkit for running many queries and resolving large lists of hostnames.
gau fetches known URLs for a domain from sources such as the Wayback Machine and Common Crawl.
theHarvester gathers publicly available emails, subdomains, hosts and names for a domain from search engines and other s...
waybackurls reads the Internet Archive's Wayback Machine for URLs it has stored for a domain.