🔍 ARY Recon

Comprehensive Web-Based Passive Reconnaissance Tools Directory

🎯 OSINT Intelligence Hub

OSINT Directory

ARY OSINT

Comprehensive, well-organized directory and centralized launcher of OSINT tools, resources, and research materials for security researchers and cybersecurity professionals

Visit Tool →

🌐 Internet Asset Search Engines

Device Search

Shodan

Premier search engine for internet-connected devices and services - webcams, routers, ICS systems, servers, and IoT devices with real-time data

Visit Tool →
Asset Discovery

Censys

Attack surface management platform combining certificate transparency logs and IPv4 scans with advanced filtering for SSL/TLS analysis

Visit Tool →
Internet Intelligence

Netlas

Advanced internet intelligence platform with team collaboration features - discover domains, IPs, DNS records, open ports, and services

Visit Tool →
Cyberspace Search

FOFA

Chinese-developed cyberspace search engine with advanced fingerprinting - indexes over 4 billion assets with 350,000+ fingerprint rules

Visit Tool →

🔐 Certificate & Domain Discovery

Certificate DB

crt.sh

Certificate Transparency search engine by Comodo - discover subdomains through SSL certificate logs with JSON output support

Visit Tool →
Domain Lookup

Whois.net

Quick WHOIS lookups for domain registration details, registrar information, and domain ownership data

Visit Tool →
Official Registry

ICANN WHOIS

Official ICANN domain registry lookup service for authoritative domain registration information

Visit Tool →

🌍 Network & IP Intelligence

BGP Routing

BGP.he.net

Hurricane Electric BGP toolkit - AS number lookup, IP prefix analysis, peering information, and network infrastructure mapping

Visit Tool →
Geolocation

IPinfo

IP geolocation and organization data with ASN information, hosting details, and company attribution

Visit Tool →
IP Analysis

IP Quality Score

IP address investigation and reputation checking with fraud detection and proxy/VPN identification

Visit Tool →
Abuse Reports

AbuseIPDB

Community-driven IP reputation database with abuse reports, blacklist checking, and threat intelligence

Visit Tool →

🔧 Technology & Web Fingerprinting

Tech Stack

Wappalyzer

Identify web technologies, frameworks, CMS, analytics tools, and JavaScript libraries used on websites

Visit Tool →
Tech Profiling

BuiltWith

Technology profiling and website analysis - discover hosting, frameworks, widgets, and technology trends

Visit Tool →
Fingerprinting

WhatWeb

Detect web technologies, web servers, version numbers, email addresses, and account IDs through HackerTarget

Visit Tool →

🛠️ Multi-Tool Security Platforms

OSINT Suite

HackerTarget

Complete suite of online security tools - DNS lookup, reverse DNS, traceroute, subnet calculator, port scanning, and more

Visit Tool →
Pentest Suite

Pentest-Tools

All-in-one penetration testing suite with passive reconnaissance, network scanning, and security analysis capabilities

Visit Tool →
Multi-Tool

Geekflare Toolbox

Comprehensive collection of security testing and website analysis tools - DNS, SSL, headers, and performance testing

Visit Tool →
Site Analysis

DomSignal

All-in-one website analysis and security testing platform with multiple diagnostic and monitoring tools

Visit Tool →

🔒 SSL/TLS Security Testing

TLS Analysis

SSL Labs

Qualys deep TLS/SSL configuration analysis with A-F grading - comprehensive cipher suite testing and vulnerability detection

Visit Tool →
TLS Grader

CryptCheck

Alternate TLS configuration grader with detailed cipher analysis, protocol scoring, and best practice recommendations

Visit Tool →
Security Posture

Hardenize

Comprehensive security posture reports covering DNS security, certificates, email security, and web application headers

Visit Tool →

🛡️ Web Security & Header Analysis

Security Headers

SecurityHeaders.com

Quick A-F grading for security headers - CSP, HSTS, X-Frame-Options, X-Content-Type, and Referrer-Policy analysis

Visit Tool →
Mozilla Security

Mozilla Observatory

Comprehensive security analysis including headers, TLS configuration, cookies, and actionable security recommendations

Visit Tool →
Privacy Audit

Webbkoll

Privacy-focused header and tracker analysis - assess website privacy posture, third-party requests, and cookie usage

Visit Tool →

🔍 Vulnerability & Security Scanning

Vuln Scanner

Nikto Online

Online front-end to Nikto scanner for server security checks - detects outdated software, misconfigurations, and security issues

Visit Tool →
Malware Scanner

SiteCheck (Sucuri)

Free remote malware scanner - blacklist checking, known CMS vulnerabilities, and website infection detection

Visit Tool →
Security Scanner

CyberScan

Comprehensive website security scanner with vulnerability detection, threat analysis, and compliance checking

Visit Tool →

👥 Email & Personnel Discovery

Email Finding

Hunter.io

Find company employee email addresses - pattern recognition, verification scoring, and domain email discovery

Visit Tool →
Contact DB

RocketReach

Professional contact database - email and phone number discovery with social profile linking

Visit Tool →
Email Verification

Email Finder Tools

Verify and find email addresses - check deliverability, MX records, and email format validation

Visit Tool →

🦠 Malware Analysis & Sandboxing

Multi-Engine

VirusTotal

Analyze files, URLs, and domains using 70+ antivirus engines - aggregated malware detection with community intelligence

Visit Tool →
Interactive Sandbox

ANY.RUN

Interactive malware sandbox - real-time Windows/Linux analysis with user interaction, network monitoring, and IOC extraction

Visit Tool →
Behavioral Analysis

Hybrid Analysis

Free automated malware analysis by CrowdStrike - behavioral insights, MITRE ATT&CK mapping, and threat intelligence

Visit Tool →
Advanced Sandbox

Joe Sandbox

Advanced malware analysis sandbox - deep inspection with anti-evasion, behavior monitoring, and comprehensive reporting

Visit Tool →

🔐 Data Breach & Reputation Checking

Breach Check

Have I Been Pwned

Check if email addresses or passwords have been compromised in data breaches - 12+ billion breached accounts

Visit Tool →
Leaked Data

DeHashed

Search leaked database records - credential discovery across millions of breached databases (paid service)

Visit Tool →

📚 Historical Data & Web Archives

Web Archive

Wayback Machine

Internet Archive - historical snapshots of websites over time with 866+ billion web pages archived since 1996

Visit Tool →
URL Scanning

URLScan

URL and website scanning with screenshot captures - DOM analysis, network requests, and security assessment

Visit Tool →

🤖 AI for Cybersecurity & Penetration Testing

Security LLM

Deep Hat AI

Open-source uncensored security LLM (formerly WhiteRabbitNeo) - autonomous offensive/defensive workflows trained on real-world security data

Visit Tool →
Security Knowledge

HackTricks AI

AI-powered penetration testing knowledge base with comprehensive methodologies, techniques, and hacking guides

Visit Tool →
Ethical Hacking AI

HackerGPT

ChatGPT-powered AI assistant for ethical hackers - offensive security, OSINT, coding, vulnerability analysis without censorship

Visit Tool →
Pentest Assistant

PentestGPT

AI-powered penetration testing assistant using GPT-4 - interactive guidance through recon, exploitation, and post-exploitation phases

Visit Tool →
AI Security

HackAIGC

AI-powered cybersecurity platform combining generative AI capabilities with security analysis and threat intelligence

Visit Tool →
Uncensored AI

FreedomGPT

Uncensored AI chatbot for security research - no content restrictions, run locally or via web interface

Visit Tool →
Enterprise AI (Paid)

Xbow AI

Enterprise-grade AI security platform for advanced threat detection and autonomous security operations (premium service)

Visit Tool →

⚙️ OSINT Frameworks & Automation

Visualization

Maltego

Data visualization and OSINT platform - graph-based link analysis, relationship mapping, and transform framework

Visit Tool →
Automation

SpiderFoot

Automated OSINT collection - 200+ modules for reconnaissance, data correlation, and threat intelligence gathering

Visit Tool →
Framework

theHarvester

Email, subdomain, and host discovery from public sources - OSINT gathering tool for penetration testing

Visit Tool →

🔎 Search Engines & Advanced Queries

Google Dorks

Google Hacking Database

Curated collection of Google dorks for passive information gathering - search operators for exposed data discovery

Visit Tool →
Advanced Search

Shodan Filters

Advanced search syntax and filters for finding specific internet-connected assets and services

Visit Tool →