0%
björn@bsteinemann:~/links
$ cat links.txt

Security & OSINT Links

Curated tools for threat intelligence, OSINT, and security research.

IP / Domain / Reputation
VirusTotal →
Scan files, URLs, domains and IPs for malware and threat indicators.
AbuseIPDB →
Check IPs for abuse reports or submit your own abuse reports.
urlscan.io →
Analyse websites and URLs in a sandbox. Note: public scans are visible to others.
Shodan →
Search engine for internet-exposed devices and services.
Censys Search →
Discover and monitor hosts, certificates and internet exposure.
BGP.he.net →
ASN, BGP routing, WHOIS and prefix lookups — useful for tracing IP ownership and network topology.
Maltego →
OSINT and link-analysis platform for visualising relationships between domains, IPs, people and organisations.
Mail / DNS / MX
MXToolbox →
MX, DNS, blacklist, SMTP and domain health checks.
MXToolbox Blacklist →
Check your mail server IP against over 100 DNSBL/RBL blacklists.
Have I Been Pwned →
Check whether email addresses appear in known data breaches.
Threat Intelligence / IOC Lookup
AlienVault OTX →
Community-driven threat intelligence with indicators and pulses.
GreyNoise →
Distinguishes internet background noise and scanner activity from relevant attack traffic.
MISP →
Open-source platform for collecting, sharing and distributing threat indicators.
OpenCTI →
Open-source platform for structuring, correlating and visualising cyber threat intelligence.
! Note: These tools are for defensive research only — your own domains and organisations. Do not process illegal data or research third parties without authorisation.
Dark Web / Breach / Leak Intelligence
Intelligence X →
Search engine and data archive for Tor, I2P, leaks, public web, domains, emails, IPs, CIDRs and more.
SOCRadar Dark Web Report →
Free B2B tool for domain and organisation exposure in breach records, stealer logs and dark web sources.
DeHashed →
Breach and leak search by username, email, IP, name, hash and more.
KELA →
Commercial CTI platform focused on cybercrime underground, brand intelligence and vulnerability intelligence.
deepdarkCTI →
Community-curated collection of CTI sources from the deep and dark web — forums, markets, ransomware groups and more.
Analysis / Encoding / Forensics
CyberChef →
Cyber Swiss Army Knife — encoding, decoding, hashes, crypto, X.509, IPv6, compression and more.
Intelligence X Tools →
Free OSINT and forensic tools plus a dork collection.
NirSoft Suite →
Collection of small Windows utilities for password recovery, network analysis, system information and forensic investigation.
Any.run →
Interactive online malware sandbox — analyse suspicious files and URLs with live process, network and behaviour visibility.
Hybrid Analysis →
Free malware analysis service powered by Falcon Sandbox — static and dynamic analysis with detailed reports.
Vulnerability / CVE
CIRCL CVE Search →
Fast CVE and CPE lookup with a public API — useful for querying vulnerability data programmatically.