Tool Arsenal
Security Tools
Curated collection of cybersecurity tools organized by methodology phase.
DNSDumpster
DNS reconnaissance, subdomain discovery, network mapping
Reconnaissance
Spyse
Internet asset search engine (domains, IPs, certificates)
Reconnaissance
Shodan
Search engine for internet-connected devices
Reconnaissance
Censys
Host and certificate search engine
Reconnaissance
theHarvester
Email, subdomain, host, and employee name gathering
Reconnaissance
OWASP ZAP
Full-featured web application security scanner
Vulnerability Scanning
Wapiti
Black-box web vulnerability scanner
Vulnerability Scanning
Nuclei
Template-based vulnerability scanner
Vulnerability Scanning
BeEF
Browser Exploitation Framework
Exploitation
Pentest-Tools.com
Online penetration testing suite
Network Analysis
CyberChef
Cyber Swiss Army Knife for data manipulation
Utilities
Pipedream
HTTP request collection and inspection
Utilities