Skip to content

// tools

Tools

Curated cybersecurity tools — recon, analysis, network, and hardening. Use responsibly.

A collection of public tools commonly used for education, defense, and investigation.
External links go to third-party services — read each service’s policies and ToS.

Only use these tools on systems/targets you own or have explicit permission to assess.

Showing 13 tools

AnalysisExternal

CyberChef

Swiss-army knife for encode/decode, hashing, data parsing, and offline payload transformation right in the browser.

#encode#decode#hash
AnalysisExternal

VirusTotal

Scan files, URLs, domains, and hashes against many antivirus engines plus community threat intel.

#malware#hash#url
AnalysisExternal

urlscan.io

Browser sandbox to scan URLs, inspect requests, redirects, and phishing/malware indicators.

#url#phishing
Recon & OSINTExternal

Have I Been Pwned

Check whether an email address or domain has appeared in public breach data.

#breach#email
Recon & OSINTExternal

crt.sh

Look up TLS/SSL certificates from Certificate Transparency logs — useful for subdomain enumeration.

#ssl#subdomain
Recon & OSINTExternal

Shodan

Search engine for internet-exposed devices and services (open ports, banners, related CVEs).

#iot#ports
Hardening & CheckExternal

Security Headers

Analyze your site's HTTP security headers (CSP, HSTS, X-Frame-Options, etc.).

#http#headers
Hardening & CheckExternal

Mozilla Observatory

Web hardening scan (TLS, headers, cookie flags) with a score and remediation recommendations.

#tls#scan
Network & DNSExternal

MXToolbox

Quick checks for DNS, MX, blacklists, SPF/DKIM/DMARC, and email/network diagnostics.

#dns#email#blacklist
Network & DNSExternal

DNS Leak Test

Test whether DNS resolution leaks outside your intended VPN/proxy path.

#dns#vpn
Network & DNSExternal

AbuseIPDB

Check an IP address's reputation against community abuse reports (spam, brute force, bots, etc.).

#ip#reputation
On this siteInternal

Search ShaSec

Search cybersecurity articles on this site (local index, no backend).

#search#internal
On this siteInternal

ShaSec Articles

A collection of threat intelligence, malware analysis, and defense articles.

#blog#internal