Domain research tools

Domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.

• https://hunter.how/ 

• https://app.dehashed.com/ --> active monitoring features (paid service)

• https://dnsdumpster.com/ --> DNSDumpster.com is a FREE

• https://securitytrails.com/ --> easy-to-use API

• https://en.fofa.info/

• https://fullhunt.io/ --> Attack surface scanning

• https://netlas.io/

Tools for file scanning

Websites for files, websites, URLs testing in sandbox, for viruses, malwares, etc.

• https://polyswarm.io/ 

• https://urlscan.io/

Source Code Search Engine

Find any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code.

• https://publicwww.com/ 

• https://grep.app/ --> Search for codes, files and paths in GitHub repos

Exploit and Vulnerability DBs

Database websites with Cybersec. content

• https://www.exploit-db.com/ 

• https://attack.mitre.org/ 

• https://pulsedive.com/

• https://leakix.net/

• https://otx.alienvault.com/

• https://www.onyphe.io/

• https://vulners.com/