External

DNSDumpster

DNSDumpster is a free domain research tool for discovering hosts, DNS records, and attack surfaces related to a domain.

Reconnaissance

DeHashed

DeHashed is a powerful search engine for compromised credentials and breach data used in threat intelligence and reconnaissance.

Reporting

Dradis Pro

Dradis Pro streamlines pentesting with collaboration, automation, and consistent reporting, trusted by security teams worldwide.

Report Web Internal Services External

TrainingCertifications

EC-Council

EC-Council offers cybersecurity courses online, providing industry-recognized certifications and training for career advancement.

Training Certifications Web Internal Services+1

Red Team Operations

Empire

Empire is a post-exploitation framework for red teams and penetration testers, featuring encrypted comms and a modular design.

Internal External C2

Reconnaissance

FOFA Search Engine

FOFA is a cyberspace search engine that helps researchers and enterprises quickly match network assets through cyberspace mapping.

Reverse EngineeringExploit Development

GEF

GEF is a kick-ass set of commands for GDB to make it cool again for exploit dev and reverse engineering on X86, ARM, MIPS, PowerPC, and SPARC.

Application SecurityReconnaissanceInfrastructure Security

Gobuster

Web External Bug Bounty Classification

Gobuster is a tool to brute-force URIs, DNS subdomains, and virtual hostnames, aiding in web application reconnaissance.

Infrastructure SecurityApplication SecurityRed Team Operations

HORIZON3.ai

Internal External Services

Next‑gen autonomous penetration testing with NodeZero®—Horizon3.ai uncovers real‑world attack paths across cloud, on‑prem, and hybrid environments without human intervention.

ReconnaissanceSocial Engineering

Have I Been Pwned

Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.

Red Team Operations

Havoc

Havoc is a modern, malleable post-exploitation C2 framework with sleep obfuscation, return address spoofing, and indirect syscalls.

Internal External C2

ReconnaissanceSocial Engineering

Holehe

Holehe is an OSINT tool to discover accounts linked to an email across 120+ sites using password recovery & registration methods.