-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathNeed to Organize
245 lines (214 loc) · 26.2 KB
/
Need to Organize
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
* [AIRMASTER](https://github.com/t94j0/AIRMASTER)
* [Awesome Malware Techniques](https://github.com/fr0gger/Awesome_Malware_Techniques)
* [Bug Bounty Wordlists](https://github.com/YaS5in3/Bug-Bounty-Wordlists)
* [CatMyFish](https://github.com/Mr-Un1k0d3r/CatMyFish)
* [Chamelon](https://github.com/mdsecactivebreach/Chameleon)
* [Email Analyzer](https://github.com/keraattin/EmailAnalyzer)
* [Expired Domains](http://expireddomains.net/) - Find recently expired/dropped domains
* [Firefox Decrypt](https://github.com/unode/firefox_decrypt)
* [Mimikatz-rs](https://github.com/memN0ps/mimikatz-rs)
* [Min-Sized Rust](https://github.com/johnthagen/min-sized-rust)
* [Mini Kerberos](https://github.com/skelsec/minikerberos)
* [Pesto Tools](https://pesto.tools/)
* [PsMSI](https://github.com/ironmansoftware/psmsi)
* [Random Scripts](https://github.com/BretMcDanel/Random-Scripts)
* [Red Team Infrastructure Wiki](https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki)
* [RustScan](https://github.com/RustScan/RustScan)
* [Shells](https://github.com/4ndr34z/shells)
* [Vechile OSINT](https://github.com/TheBurnsy/Vehicle-OSINT-Collection)
* [WatchAD](https://github.com/Qianlitp/WatchAD)
* Open Corporates — The largest open database of companies in the world
* AI HIT - AI/ML system trained to build and update company information from the web
# Threat Intelligence
Wigle - Database of wireless networks, with statistics
Binary Edge - Scans the internet for threat intelligence
ONYPHE - Collects cyber-threat intelligence data
Fofa - Search for various threat intelligence
ZoomEye - Gather information about targets
LeakIX - Search publicly indexed information
URL Scan - Free service to scan and analyze websites
PublicWWW - Source code search engine
CRT.sh - Search for certs that have been logged by CT
Pulsedive - Search for threat intelligence
Dehashed - Search for usernames, emails, passwords, addresses, numbers, etc.
Have I Been Pwned? - Check whether personal data has been compromised by data breaches
Snusbase - Indexes information from breached websites and leaked databases
LeakBase - Forum of leaked databases
LeakCheck - Data breach search engine
GhostProject.fr - Smart search engine
SecurityTrails - Attack surface and data intel
DorkSearch - Really fast Google Dorking
PolySwarm - Scan files and URLs for threats
DNSDumpster - Dns recon & research, find & lookup DNS records
AlienVault - Open source threat intelligence community
Vulners - Search vulnerabilities in a large database
WayBackMachine - View content from deleted websites
Hunter - Search for email addresses belonging to a website
## Internet-Connected Devices / Attack Surfaces
GreyNoise - Search for devices connected to the internet
Censys - Assessing attack surface for internet-connected devices
Shodan - Search for devices connected to the internet
IntelligenceX - Search Tor, I2P, data leaks, domains, and emails
Netlas - Search and monitor internet-connected assets
FullHunt - Search and discovery attack surfaces
GrayHatWarfare - Search public S3 buckets
GrayHatWarfare Buckets - Search public S3 buckets
GrayHatWarfare Shorteners - Search for exposed URL shorteners
LeakWatch - Scans the Internet to detect exposed information
FullHunt - Search and discovery attack surfaces
https://ipspy.net/ - IP Lookup, WHOIS, and DNS resolver
GeoTag — Discover the location of pictures
Sarenka — Gathers data from Shodan, censys, etc.
Pushpin — Provides a web interface to keep track of geotagged social media activity
Awesome Hacker Search Engines — CVEs, Domains, Addresses, Certifications, Credentials, etc.
exitLooter - Find geolocation on image URL and directories
FavFreak - Fetches the favicon.ico and hash value and generates shodan dorks
Network Recon Tools
ACLight - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.
BuiltWith - Technology lookup tool for websites.
CloudFail - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
LdapMiner - Multiplatform LDAP enumeration utility.
Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
Netdiscover - Simple and quick network scanning tool.
Pentest-Tools - Online suite of various different pentest related tools.
Ruler - Tool for remotely interacting with Exchange servers.
Shodan - Database containing information on all accessible domains on the internet obtained from passive scanning.
Spyse - Web research services that scan the entire internet using OSINT, to simplify the investigation of infrastructure and attack surfaces.
Spyse.py - Python API wrapper and command-line client for the tools hosted on spyse.com.
Sublist3r - Subdomain enumeration tool for penetration testers.
ldapsearch - Linux command line utility for querying LDAP servers.
nmap - Free security scanner for network exploration & security audits.
pyShodan - Python 3 script for interacting with Shodan API (requires valid API key).
smbmap - Handy SMB enumeration tool.
xprobe2 - Open source operating system fingerprinting tool.
zmap - Open source network scanner that enables researchers to easily perform Internet-wide network studies.
conveyor.cloud — Visual Studio extension to expose IIS Express to the local network or over a tunnel to a public URL.
Hamachi — LogMeIn Hamachi is a hosted VPN service that lets you securely extend LAN-like networks to distributed teams with free plan allows unlimited networks with up to 5 peoples
localhost.run — Expose locally running servers over a tunnel to a public URL.
localtunnel — Expose locally running servers over a tunnel to a public URL. Free hosted version, and open source.
ngrok.com — Expose locally running servers over a tunnel to a public URL.
Radmin VPN — Connect multiple computers together via a VPN enabling LAN-like networks. Unlimited peers. (Hamachi alternative)
segment.com — Hub to translate and route events to other third-party services. 100,000 events/month free
STUN — Session Traversal of User Datagram Protocol [UDP] Through Network Address Translators [NATs])
Google STUN — stun:stun.l.google.com:19302
Twilio STUN — stun:global.stun.twilio.com:3478?transport=udp
Tailscale — Zero config VPN, using the open source WireGuard protocol. Installs on MacOS, iOS, Windows, Linux, and Android devices. Free plan for personal use with 20 devices.
webhookrelay.com — Manage, debug, fan-out and proxy all your webhooks to public or internal (ie: localhost) destinations. Also, expose servers running in a private network over a tunnel by getting a public HTTP endpoint (https://yoursubdomain.webrelay.io <----> http://localhost:8080).
Hookdeck — Develop, test and monitor your webhooks from a single place. 100K requests and 100K attempts per month with 3 days retention.
Xirsys — Global network of STUN / TURN servers with a generous free tier.
ZeroTier — FOSS managed virtual Ethernet as a service. Unlimited end-to-end encrypted networks of 100 clients on free plan. Clients for desktop/mobile/NA; web interface for configuration of custom routing rules and approval of new client nodes on private networks
LocalXpose — Reverse proxy
## Testing
* [Applitools.com](https://applitools.com/) — Smart visual validation for web, native mobile and desktop apps. Integrates with almost all automation solutions (like Selenium and Karma) and remote runners (Sauce Labs, Browser Stack). free for open source. A free tier for a single user with limited checkpoints per week.
* [Appetize](https://appetize.io) — Test your Android & iOS apps on this Cloud Based Android Phone/Tablets emulators and iPhone/iPad simulators directly in your browser. Free tier includes 1 concurrent session with 100 minutes usage per month. No limit on app size.
* [Bird Eats Bug](https://www.birdeatsbug.com/) — Report bugs faster (and better). Record your screen with Bird browser extension, it will auto-capture technical data that engineers need to debug. Free tier suitable for small teams.
* [BugBug](https://bugbug.io/) - Lightweight test automation tool for web applications. Easy to learn and doesn't require coding. You can run unlimited tests on your own computer for free. For an additional monthly fee, you also get cloud monitoring and CI/CD integration.
* [lambdatest.com](https://www.lambdatest.com/) — Manual, visual, screenshot and automated browser testing on selenium and cypress, [free for Open Source](https://www.lambdatest.com/open-source-cross-browser-testing-tool)
* [browserstack.com](https://www.browserstack.com/) — Manual and automated browser testing, [free for Open Source](https://www.browserstack.com/open-source?ref=pricing)
* [checkbot.io](https://www.checkbot.io/) — Browser extension that tests if your website follows 50+ SEO, speed and security best practices. Free tier for smaller websites.
* [checklyhq.com](https://checklyhq.com) - Checkly is the API & E2E monitoring platform for the modern stack: programmable, flexible and loving JavaScript. Generous free tier for devs.
* [crossbrowsertesting.com](https://crossbrowsertesting.com) - Manual, Visual, and Selenium Browser Testing in the cloud - [free for Open Source](https://crossbrowsertesting.com/open-source)
* [cypress.io](https://www.cypress.io/) - Fast, easy and reliable testing for anything that runs in a browser. Cypress Test Runner is always free and open source with no restrictions and limitations. Cypress Dashboard is free for open source projects for up to 5 users.
* [Cypress Recorder by Preflight](https://cypress.preflight.com/) - Create AI-powered Cypress Tests/POM models on your browser. It's open-source except for the AI part. It's free for 5 test creations each month with Self-healing scripts, Email, and Visual testing.
* [everystep-automation.com](https://www.everystep-automation.com/) — Records and replays all steps made in a web browser and creates scripts,... free with fewer options
* [Gremlin](https://www.gremlin.com/gremlin-free-software) — Gremlin's Chaos Engineering tools allow you to safely, securely, and simply inject failure into your systems to find weaknesses before they cause customer-facing issues. Gremlin Free provides access to Shutdown and CPU attacks on up to 5 hosts or containers.
* [gridlastic.com](https://www.gridlastic.com/) — Selenium Grid testing with free plan up to 4 simultaneous selenium nodes/10 grid starts/4,000 test minutes/month
* [katalon.com](https://katalon.com) - Provides a testing platform that can help teams of all sizes at different levels of testing maturity, including Katalon Studio, TestOps (+ Visual Testing free),TestCloud and Katalon Recorder.
* [loadmill.com](https://www.loadmill.com/) - Automatically create API and load tests by analyzing network traffic. Simulate up to 50 concurrent users for up to 60 minutes for free every month.
* [preflight.com](https://preflight.com) - No-code automated web testing. Record tests on your browser that are resilient to UI changes and run them on Windows machines. Integrate with your CI/CD. The free plan includes 50 test runs per month with video, HTML sessions and more.
* [percy.io](https://percy.io) - Add visual testing to any web app, static site, style guide, or component library. Unlimited team members, Demo app and unlimited projects, 5,000 snapshots / month.
* [saucelabs.com](https://saucelabs.com/) — Cross browser testing, Selenium testing and mobile testing, [free for Open Source](https://saucelabs.com/open-source)
* [snippets.uilicious.com](https://snippets.uilicious.com) - It's like CodePen, but for cross browser testing. UI-licious lets write tests like user stories, and offers a free platform - UI-licious Snippets - that allows you to run unlimited number of tests on Chrome for free with no sign up requred, for up to 3 minutes per test run. Found a bug? You can simply copy the unique url to your test to show your devs exactly how to reproduce the bug.
* [testingbot.com](https://testingbot.com/) — Selenium Browser and Device Testing, [free for Open Source](https://testingbot.com/open-source)
* [Testspace.com](https://testspace.com/) - A Dashboard for publishing automated test results and a Framework for implementing manual tests as code using GitHub. The service is [free for Open Source](https://github.com/marketplace/testspace-com) accounts for 450 results per month.
* [tesults.com](https://www.tesults.com) — Test results reporting and test case management. Integrates with popular test frameworks. Open Source software developers, individuals, educators, and small teams getting started can request discounted and free offerings beyond basic free project.
* [websitepulse.com](https://www.websitepulse.com/tools/) — Various free network and server tools.
* [qase.io](https://qase.io) - Test management system for Dev and QA teams. Manage test cases, compose test runs, perform test runs, track defects and measure impact. The free tier includes all core features, with 500Mb available for attachments and up to 3 users.
* [knapsackpro.com](https://knapsackpro.com) - Speed up your tests with optimal test suite parallelisation on any CI provider. Split Ruby, JavaScript tests on parallel CI nodes to save time. Free plan for up to 10 minutes test files and free unlimited plan for Open Source projects.
* [webhook.site](https://webhook.site) - Verify webhooks, outbound HTTP requests, or emails with a custom URL. Temporary URL and email address is always free.
* [Vaadin](https://vaadin.com) — Build scalable UIs in Java or TypeScript, and use the integrated tooling, components and design system to iterate faster, design better and simplify the development process. Unlimited Projects with 5 years free maintenance.
**[⬆ back to top](#table-of-contents)**
## Security and PKI
* [alienvault.com](https://www.alienvault.com/open-threat-exchange/reputation-monitor) — Uncovers compromised systems in your network
* [atomist.com](https://atomist.com/) — A quicker and more convenient way to automate a variety of development tasks. Now in beta.
* [Bridgecrew](https://bridgecrew.io/) — Infrastructure as code (IaC) security powered by the open source tool - [Checkov](https://github.com/bridgecrewio/checkov). The core Bridgecrew platform is free for up to 50 IaC resources.
* [cloudsploit.com](https://cloudsploit.com/) — Amazon Web Services (AWS) security and compliance auditing and monitoring
* [Cmd](https://cmd.com/) — Security platform providing real-time access control and dynamic policy enforcement on every Linux instance in your cloud or datacenter
* [CodeNotary.io](https://www.codenotary.io/) — Open Source platform with indelible proof to notarize code, files, directories or container
* [crypteron.com](https://www.crypteron.com/) — Cloud-first, developer-friendly security platform prevents data breaches in .NET and Java applications
* [CyberChef](https://gchq.github.io/CyberChef/) — A simple, intuitive web app for analysing and decoding/encoding data without having to deal with complex tools or programming languages. Like a swiss army knife of cryptography & encryption. All features are free to use, no limit. Open source, if you wish to self-host.
* [DAS](https://signup.styra.com/) — Styra DAS Free, Full lifecycle policy management to create, deploy and manage Open Policy Agent(OPA) authorization
* [Datree](https://www.datree.io/) — Open Source CLI tool to prevent Kubernetes misconfigurations by ensuring that manifests and Helm charts follow best practices as well as your organization’s policies
* [Dependabot](https://dependabot.com/) Automated dependency updates for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java (Maven and Gradle), .NET, Go, Elm, Docker, Terraform, Git Submodules and GitHub Actions.
* [DJ Checkup](https://djcheckup.com) — Scan your Django site for security flaws with this free, automated, checkup tool. Forked from the Pony Checkup site.
* [Doppler](https://doppler.com/) — Universal Secrets Manager for application secrets and config, with support for syncing to various cloud providers. Free for 5 users with basic access controls.
* [Dotenv](https://dotenv.org/) — Sync your .env files, quickly & securely. Stop sharing your .env files over insecure channels like Slack and email, and never lose an important .env file again. Free for up to 3 teammates.
* [GitGuardian](https://www.gitguardian.com) — Keep secrets out of your source code with automated secrets detection and remediation. Scan your git repos for 350+ types of secrets and sensitive files – Free for individuals and teams of 25 developers or less.
* [globalsign.com](https://www.globalsign.com/en/ssl/ssl-open-source/) — Free SSL certificates for Open Source
* [Have I been pwned?](https://haveibeenpwned.com) — REST API for fetching the information on the breaches.
* [hostedscan.com](https://hostedscan.com) — Online vulnerability scanner for web applications, servers, and networks. 10 free scans per month.
* [Internet.nl](https://internet.nl) — Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANE
* [keychest.net](https://keychest.net) - SSL expiry management and cert purchase with an integrated CT database
* [letsencrypt.org](https://letsencrypt.org/) — Free SSL Certificate Authority with certs trusted by all major browsers
* [meterian.io](https://www.meterian.io/) - Monitor Java, Javascript, .NET, Scala, Ruby and NodeJS projects for security vulnerabilities in dependencies. Free for one private project, unlimited projects for open source.
* [Mozilla Observatory](https://observatory.mozilla.org/) — Find and fix security vulnerabilities in your site.
* [opswat.com](https://www.opswat.com/) — Security Monitoring of computers, devices, applications, configurations,... Free 25 users and 30 days history users.
* [pyup.io](https://pyup.io) — Monitor Python dependencies for security vulnerabilities and update them automatically. Free for one private project, unlimited projects for open source.
* [qualys.com](https://www.qualys.com/community-edition) — Find web app vulnerabilities, audit for OWASP Risks
* [reCAPTCHAMe](https://recaptchame.com/) — free reCAPTCHA and hCAPTCHA backend service. No Server-Side coding needed. Works for static websites.
* [report-uri.io](https://report-uri.io/) — CSP and HPKP violation reporting
* [ringcaptcha.com](https://ringcaptcha.com/) — Tools to use phone number as id, available for free
* [seclookup.com](https://seclookup.com/) - Seclookup APIs can enrich domain threat indicators in SIEM, provide comprehensive information on domain names, improve threat detection & response. Get 50K lookups free [here](https://account.seclookup.com/).
* [snyk.io](https://snyk.io) — Can find and fix known security vulnerabilities in your open source dependencies. Unlimited tests and remediation for open source projects. Limited to 200 tests/month for your private projects.
* [ssllabs.com](https://www.ssllabs.com/ssltest/) — Very deep analysis of the configuration of any SSL web server
* [StackHawk](https://www.stackhawk.com/) Automate application scanning throughout your pipeline to find and fix security bugs before they hit production. Unlimited scans and environments for a single app.
* [Sucuri SiteCheck](https://sitecheck.sucuri.net) - Free website security check and malware scanner
* [Protectumus](https://protectumus.com) - Free website security check, site antivirus and server firewall (WAF) for PHP. Email notifications for registered users in free tier.
* [TestTLS.com](https://testtls.com) - Test a SSL/TLS service for secure server configuration, certificates, chains etc. Not limited to HTTPS.
* [threatconnect.com](https://threatconnect.com) — Threat intelligence: It is designed for individual researchers, analysts and organizations who are starting to learn about cyber threat intelligence. Free up to 3 Users
* [tinfoilsecurity.com](https://www.tinfoilsecurity.com/) — Automated vulnerability scanning. Free plan allows weekly XSS scans
* [Ubiq Security](https://ubiqsecurity.com/) — Encrypt and decrypt data with 3 lines of code and automatic key management. Free for 1 application and up to 1,000,000 encryptions per month.
* [Virgil Security](https://virgilsecurity.com/) — Tools and services for implementing end-to-end encryption, database protection, IoT security and more in your digital solution. Free for applications with up to 250 users.
* [Virushee](https://virushee.com/) — Privacy-oriented file/data scanning powered by hybrid heuristic and AI-assisted engine. Possible to use internal dynamic sandbox analysis. Limited to 50MB per file upload
* [Escape GraphQL Quickscan](https://escape.tech/) - One-click security scan of your GraphQL endpoints. Free, no login required.
## Miscellaneous
* [Smartcar API](https://smartcar.com) - An API for cars to locate, get fuel tank, battery levels, odometer, unlock/lock doors, etc.
* [Blynk](https://blynk.io) — A SaaS with API to control, build & evaluate IoT devices. Free Developer Plan with 5 devices,Free Cloud & data storage. Mobile Apps also available.
* [Bricks Note Calculator](https://free.getbricks.app/) - a note-taking app (PWA) with a powerful built-in multiline calculator.
* [Carbon.now.sh](https://carbon.now.sh) - create and share code snippet in an aesthetic screenshot-like image format. Usually used to aesthetically share/show-off code snippet on Twitter or blog posts.
* [Code Time](https://www.software.com/code-time) - an extension for time-tracking and coding metrics in VS Code, Atom, IntelliJ, Sublime Text, and more.
* [Codepng](https://www.codepng.app) - Create awesome snapshots from your source code that you can share on social media.
* [CodeToImage](https://codetoimage.com/) - Create screenshots of code or text to share on social media.
* [ConfigCat](https://configcat.com) - ConfigCat is a developer-centric feature flag service with unlimited team size, awesome support, and a reasonable price tag. Free plan up to 10 flags, 2 environments, 1 product and 5 Million requests per month.
* [datelist.io](https://datelist.io) - Online booking / appointment scheduling system. Free up to 5 bookings per month, includes 1 calendar
* [docsapp.io](https://www.docsapp.io/) — Easiest way to publish documentation, free for Open Source
* [Elementor](https://elementor.com) — WordPress website builder. Free plan available with 40+ Basic Widgets.
* [Form2Channel](https://form2channel.com) — Place a static html form on your website and receive submissions directly to Google Sheets, Email, Slack, Telegram or Http. No coding necessary.
* [FOSSA](https://fossa.com/) - Scalable, end-to-end management for third-party code, license compliance and vulnerabilities.
* [fullcontact.com](https://www.fullcontact.com/developer/pricing/) — Help your users know more about their contacts by adding social profile into your app. 500 free Person API matches/month
* [http2.pro](https://http2.pro) — HTTP/2 protocol readiness test and client HTTP/2 support detection API.
* [JWT Decoder](https://jwt.ssotools.com/) — Online free tool for decoding JWT(JSON web token) and verifying it's signature.
* [Base64 decoder/encoder](https://devpal.co/base64-decode/) — Online free tool for decoding & encoding data.
* [newreleases.io](https://newreleases.io/) - Receive notifications on email, Slack, Telegram, Discord and custom webhooks for new releases from GitHub, GitLab, Bitbucket, Python PyPI, Java Maven, Node.js NPM, Node.js Yarn, Ruby Gems, PHP Packagist, .NET NuGet, Rust Cargo and Docker Hub.
* [OnlineExifViewer](https://onlineexifviewer.com/) — View EXIF data online instantly for a photo including GPS location and metadata.
* [PDFMonkey](https://www.pdfmonkey.io/) — Manage PDF templates in a dashboard, call the API with dynamic data, download your PDF. Offers 300 free documents per month.
* [QuickType.io](https://quicktype.io/) - Quickly auto generate models/class/type/interface and serializers from JSON, schema, and GraphQL for working with data quickly & safely in any programming language. Convert JSON into gorgeous, typesafe code in any language.
* [ray.so](https://ray.so/) - Create beautiful images of your code snippets.
* [readme.com](https://readme.com/) — Beautiful documentation made easy, free for Open Source.
* [redirection.io](https://redirection.io/) — SaaS tool for managing HTTP redirections for businesses, marketing and SEO.
* [redirect.pizza](https://redirect.pizza/) - Easily manage redirects with HTTPS support. Free plan includes 10 sources and 100.000 hits per month.
* [ReqBin](https://www.reqbin.com/) — Post HTTP Requests Online. Popular Request Methods include GET, POST, PUT, DELETE, and HEAD. Supports Headers and Token Authentication. Includes a basic login system for saving your requests.
* [Sunrise and Sunset](https://sunrisesunset.io/api/) - Get sunrise and sunset times for a given longitude and latitude.
* [superfeedr.com](https://superfeedr.com/) — Real-time PubSubHubbub compliant feeds, export, analytics. Free with less customization
* [SurveyMonkey.com](https://www.surveymonkey.com) — Create online surveys. Analyze the results online. Free plan allows only 10 questions and 100 responses per survey.
* [videoinu](https://videoinu.com) — Create and edit screen recordings and other videos online.
* [RandomKeygen](https://randomkeygen.com/) - A free mobile-friendly tool offers a variety of randomly generated keys and passwords you can use to secure any application, service or device.
* [Cronit](https://cronit.app) - Online cronjobs service. Free plan includes 100 job execution per month
* [Cronhooks](https://cronhooks.io/) - Schedule on time or recurring webhooks. Free plan allows 5 ad-hoc schedules.
* [Hook Relay](https://www.hookrelay.dev/) - Add webhook support to your app without the hassles: done-for-you queueing, retries with backoff, and logging. The free plan has 100 deliveries per day, 14-day retention, and 3 hook endpoints.
* [Format Express](https://www.format-express.dev) - Instant online formatter for JSON / XML / SQL.
* [ChipWhisperer](https://rtfm.newae.com/) - Complete open-source toolchain for side-channel power analysis and glitching attacks
### Cryptography
* [FeatherDuster](https://github.com/nccgroup/featherduster) - Analysis tool for discovering flaws in cryptography.
* [rsatool](https://github.com/ius/rsatool) - Tool for calculating RSA and RSA-CRT parameters.
* [xortool](https://github.com/hellman/xortool/) - XOR cipher analysis tool.