🍳Beginner
CyberChef
The cyber “Swiss Army knife.” Decode Base64, convert hex, calculate hashes, decompress data, extract strings, and chain operations together.
Open CyberChef ↗🧰 Multi-Purpose & Decoding
The tools you will reach for again and again.
🔐Beginner
Cryptii
A visual converter for classic ciphers and encodings. Excellent for Caesar/ROT, Base64, Vigenère, Enigma, binary, hexadecimal, and more.
Open Cryptii ↗🧩Beginner
dCode
A huge collection of cipher solvers, encoders, decoders, math tools, and puzzle helpers. Useful when you recognize the cipher family.
Open dCode ↗🦠 Files, Malware & Reputation
Check suspicious files, URLs, domains, and indicators without opening them directly.
🧪Beginner
VirusTotal
Check files, URLs, domains, IPs, and hashes against many security engines and threat-intelligence sources.
Open VirusTotal ↗📦Intermediate
Hybrid Analysis
Public malware sandbox and threat-analysis service. Useful for examining behavior, processes, dropped files, and network activity.
Open Hybrid Analysis ↗🏃Intermediate
ANY.RUN
An interactive malware-analysis sandbox. Public submissions should never contain private or sensitive files.
Open ANY.RUN ↗🔎Beginner
urlscan.io
Loads a webpage in a remote browser and reports screenshots, requests, domains, IPs, technologies, and other useful evidence.
Open urlscan.io ↗🔎 OSINT & Internet Research
Investigate public information, infrastructure, usernames, domains, and historical webpages.
🕰️Beginner
Wayback Machine
View archived versions of websites and investigate how pages, organizations, or content changed over time.
Open Wayback Machine ↗📡Intermediate
Shodan
Search information collected from internet-connected services and devices. Great for understanding exposed infrastructure and service banners.
Open Shodan ↗🌐Intermediate
Censys
Search hosts, services, and certificate data gathered from the public internet. Particularly useful for certificate and infrastructure research.
Open Censys ↗💥Beginner
Have I Been Pwned
Check whether an email address appears in known data breaches and learn which services were affected.
Open HIBP ↗👤Beginner
WhatsMyName
Check whether a username appears across many public websites. Useful for authorized OSINT investigations and classroom exercises.
Open WhatsMyName ↗📜Intermediate
crt.sh
Search public Certificate Transparency logs. A very useful way to discover certificate history and possible subdomains.
Open crt.sh ↗🌐 DNS, IP & Network Investigation
Understand domains, DNS records, IP addresses, routes, headers, and network services.
📮Beginner
MXToolbox
Quick lookups for DNS, MX records, SPF, DKIM, DMARC, blacklists, and other email/domain troubleshooting information.
Open MXToolbox ↗🗺️Beginner
DNSDumpster
Visual DNS research that can reveal host records, mail servers, name servers, and related infrastructure for a domain.
Open DNSDumpster ↗📍Beginner
IPinfo
Look up public information associated with an IP address, such as ASN, network owner, approximate region, and routing details.
Open IPinfo ↗🛣️Intermediate
Hurricane Electric BGP Toolkit
Research autonomous systems, IP prefixes, routing relationships, DNS, WHOIS, and internet routing information.
Open BGP Toolkit ↗🎯Advanced
HackerTarget Network Tools
Online DNS, HTTP, traceroute, and limited network-scanning utilities. Use active scans only on systems you are authorized to test.
Open HackerTarget ↗🌍 Web Security & HTTP
Inspect websites, headers, technologies, APIs, certificates, and defensive configuration.
🧱Beginner
Security Headers
Check a website's HTTP security headers and get an easy-to-understand grade for common defensive settings.
Open Security Headers ↗🔒Beginner
Qualys SSL Labs
Analyze the TLS/SSL configuration of a public web server and learn about protocols, ciphers, certificates, and common weaknesses.
Open SSL Labs ↗🏗️Beginner
BuiltWith
Identify technologies used by a website, including frameworks, analytics, hosting, content-management systems, and services.
Open BuiltWith ↗🔁Beginner
ReqBin
Build and send HTTP/API requests from a browser. Helpful for learning methods, headers, JSON, REST APIs, and request/response behavior.
Open ReqBin ↗🔭Intermediate
Mozilla Observatory
Evaluate defensive web configuration and security headers, with explanations of settings that can improve a site's security posture.
Open Observatory ↗🧬 Digital Forensics & File Analysis
Identify file types, inspect metadata, analyze packet captures, and understand hidden file structure.
✍️Beginner
File Signatures Table
Gary Kessler's classic reference for identifying files from their hexadecimal signatures or “magic numbers.”
Open File Signatures ↗📷Beginner
Jeffrey's Image Metadata Viewer
Inspect metadata embedded in image files, including camera information and other EXIF fields when present.
Open Metadata Viewer ↗🕵️Intermediate
Aperi'Solve
Runs several image-forensics and steganography techniques in one place. Useful for CTF images and classroom investigations.
Open Aperi'Solve ↗📦Intermediate
Packetor
A browser-based packet-capture analyzer for viewing conversations and protocols when a full desktop Wireshark setup is not available.
Open Packetor ↗#️⃣ Hashes & Password Security
Recognize hashes, check password exposure, and learn what secure password storage looks like.
#️⃣Beginner
Hash Analyzer
Paste a hash and get suggestions for possible hash types based on length and format. Identification is not always definitive.
Open Hash Analyzer ↗🔑Beginner
Pwned Passwords
Check whether a password has appeared in known breach corpuses. Never test an actual current password you still use.
Open Pwned Passwords ↗🧱Intermediate
CrackStation
A lookup service for common unsalted hashes. Useful for understanding why fast, unsalted password hashes are poor password storage.
Open CrackStation ↗🔓Intermediate
Hashes.com
Search known hash/plaintext pairs and identify common hash formats. Useful for classroom password-hash exercises and authorized investigations.
Open Hashes.com ↗🌈Intermediate
Rainbow Tables — IT64
A rainbow-table resource for demonstrating precomputed password-hash recovery. Especially useful for teaching why older unsalted password hashes are vulnerable.
Open Rainbow Tables ↗🛡️ Threat Intelligence & Indicators
Research IPs, domains, hashes, vulnerabilities, and known attacker behavior.
🚫Beginner
AbuseIPDB
Check community reports and reputation information associated with public IP addresses.
Open AbuseIPDB ↗💓Intermediate
Pulsedive
Enrich domains, URLs, and IP addresses with threat-intelligence context and relationships.
Open Pulsedive ↗🧠Beginner
MITRE ATT&CK
A knowledge base of real-world adversary tactics and techniques. Excellent for learning how attacks are described and mapped.
Open MITRE ATT&CK ↗🩹Beginner
NIST NVD
Look up CVE vulnerability records, CVSS information, affected products, references, and technical details.
Open NVD ↗🎣 Email & Phishing Analysis
Investigate suspicious messages, sender authentication, URLs, and email headers.
✉️Beginner
Google Messageheader
Paste raw email headers to visualize delivery hops and timing. Helpful for learning Received headers and tracing message flow.
Open Messageheader ↗🧾Beginner
MXToolbox Header Analyzer
Analyze email headers and message delivery information in a friendlier format than reading raw headers by hand.
Open Header Analyzer ↗✅Beginner
dmarcian Inspector
Inspect DMARC and related email-authentication records to understand how domains protect against sender spoofing.
Open dmarcian ↗🎯 Practice & Learning Labs
Safe places to build skill when you are ready to move from reference tools to hands-on practice.
🚩Beginner
picoCTF
Free cybersecurity challenges covering cryptography, web exploitation, forensics, reversing, and general skills.
Open picoCTF ↗🐧Beginner
OverTheWire: Bandit
A classic guided Linux wargame for learning commands, files, permissions, SSH, pipes, and other command-line fundamentals.
Open Bandit ↗🕸️Intermediate
PortSwigger Web Security Academy
Excellent free lessons and legal practice labs for web-security concepts such as authentication, access control, XSS, and SQL injection.
Open Web Security Academy ↗No tools matched that search. Try a broader term such as DNS, hash, email, web, or forensics.