Submit your favorite resources for free.
Browse the newest offensive security tools, platforms, and services recently added to HackDB.
TCM Security offers cybersecurity consulting, penetration testing, auditing, and training services to secure data, systems, and networks.
BloodHound CE maps attack paths in Active Directory, Entra ID, and Azure, using graph theory to reveal hidden relationships and vulnerabilities.
Metasploit is a penetration testing framework that helps security teams verify vulnerabilities, manage assessments, and improve security awareness.
Censys provides attack surface management and threat hunting solutions powered by comprehensive internet intelligence data.
KnowBe4 HRM+ is a human risk management platform with security awareness training, cloud email protection, and AI-driven defense agents.
CanIPhish is a platform for simulated phishing and security awareness training, offering realistic simulations and integrated eLearning.
Probely is an automated web application and API vulnerability scanner designed for agile teams to automate security testing in their SDLC.
Tenable's exposure management platform helps organizations find, prioritize, and fix cyber risks across IT, cloud, OT, and identity environments.
Shodan is a search engine for Internet-connected devices, enabling users to discover and monitor exposed services and gain Internet intelligence.
Intelligence X is a search engine and data archive for searching Tor, I2P, data leaks, and the public web by email, domain, IP, and more.
JWT Debugger is a web application to create, encode, decode, and debug JWT (JSON Web Tokens). It helps developers inspect claims and test token integrity.
PortSwigger offers web application security tools, testing resources, and training to identify the latest vulnerabilities.