updated threat intel tools: 2026-03-07 19:53:53
Affected files: .obsidian/workspace.json README.md tools/security/Untitled.md tools/security/pentest-recon-enum/Recon & Threat Reputation.md tools/security/ssl-tls-web-security.md
This commit is contained in:
Jacob Kraniak
parent
621bbdc7f6
commit
e372439044
|
|
@ -13,12 +13,12 @@
|
|||
"state": {
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
|
||||
"mode": "source",
|
||||
"source": true
|
||||
"source": false
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "Terminal Emulators"
|
||||
"title": "Recon & Threat Reputation"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
|
@ -94,7 +94,7 @@
|
|||
"state": {
|
||||
"type": "backlink",
|
||||
"state": {
|
||||
"file": "tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
|
||||
"collapseAll": false,
|
||||
"extraContext": false,
|
||||
"sortOrder": "alphabetical",
|
||||
|
|
@ -104,7 +104,7 @@
|
|||
"unlinkedCollapsed": true
|
||||
},
|
||||
"icon": "links-coming-in",
|
||||
"title": "Backlinks for Terminal Emulators"
|
||||
"title": "Backlinks for Recon & Threat Reputation"
|
||||
}
|
||||
},
|
||||
{
|
||||
|
|
@ -113,12 +113,12 @@
|
|||
"state": {
|
||||
"type": "outgoing-link",
|
||||
"state": {
|
||||
"file": "tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
|
||||
"linksCollapsed": false,
|
||||
"unlinkedCollapsed": true
|
||||
},
|
||||
"icon": "links-going-out",
|
||||
"title": "Outgoing links from Terminal Emulators"
|
||||
"title": "Outgoing links from Recon & Threat Reputation"
|
||||
}
|
||||
},
|
||||
{
|
||||
|
|
@ -156,13 +156,13 @@
|
|||
"state": {
|
||||
"type": "outline",
|
||||
"state": {
|
||||
"file": "tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"file": "tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
|
||||
"followCursor": false,
|
||||
"showSearch": false,
|
||||
"searchQuery": ""
|
||||
},
|
||||
"icon": "lucide-list",
|
||||
"title": "Outline of Terminal Emulators"
|
||||
"title": "Outline of Recon & Threat Reputation"
|
||||
}
|
||||
},
|
||||
{
|
||||
|
|
@ -196,6 +196,11 @@
|
|||
},
|
||||
"active": "9b2e89c682f5d2ef",
|
||||
"lastOpenFiles": [
|
||||
"tools/security/Untitled.md",
|
||||
"tools/security/ssl-tls-web-security.md",
|
||||
"README.md",
|
||||
"TOOL-TABLE-SCHEMA.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Files & Directories.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Shells.md",
|
||||
"tools/sysadmin-devops/system-monitoring-tracing/Log Analyzers.md",
|
||||
|
|
@ -203,11 +208,8 @@
|
|||
"tools/sysadmin-devops/https-web-services/clients-inspectors.md",
|
||||
"tools/sysadmin-devops/https-web-services/browsers.md",
|
||||
"tools/sysadmin-devops/https-web-services/benchmark-load.md",
|
||||
"TOOL-TABLE-SCHEMA.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Text Editors.md",
|
||||
"README.md",
|
||||
"tools/sysadmin-devops/https-web-services",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"tools/sysadmin-devops/Remote Access + SSH Clients.md",
|
||||
"tools/network-engineering/dns-dhc-ipam/dns-tools.md",
|
||||
"tools/00_index.md",
|
||||
|
|
@ -223,9 +225,7 @@
|
|||
"docs/sysadmin-devops/terminal-shell-productivity/shell-functions.md",
|
||||
"docs/sysadmin-devops/terminal-shell-productivity/shell-one-liners.md",
|
||||
"tools/system-services.md",
|
||||
"tools/network-engineering/diagnostics-troubleshooting/Bandwidth & Performance Testing.md",
|
||||
"tools/security/hardening-compliance",
|
||||
"tools/network-engineering/diagnostics-troubleshooting/Tracing & Diagnostics.md",
|
||||
"tools/network-engineering/diagnostics-troubleshooting/protocols-general",
|
||||
"docs/sysadmin-devops/ssh-remote-access",
|
||||
"tools/network-engineering/diagnostics-troubleshooting",
|
||||
|
|
|
|||
28
README.md
28
README.md
|
|
@ -205,35 +205,7 @@ When ready: Plan to squash-merge or rebase + clean history into main.
|
|||
<a href="https://suche.org/sslClientInfo"><b>sslClientInfo</b></a> - client test (incl TLSv1.3 information).<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: SSL/Security
|
||||
|
||||
<p>
|
||||
<a href="https://www.ssllabs.com/ssltest/"><b>SSLLabs Server Test</b></a> - performs a deep analysis of the configuration of any SSL web server.<br>
|
||||
<a href="https://dev.ssllabs.com/ssltest/"><b>SSLLabs Server Test (DEV)</b></a> - performs a deep analysis of the configuration of any SSL web server.<br>
|
||||
<a href="https://www.immuniweb.com/ssl/"><b>ImmuniWeb® SSLScan</b></a> - test SSL/TLS (PCI DSS, HIPAA and NIST).<br>
|
||||
<a href="https://www.jitbit.com/sslcheck/"><b>SSL Check</b></a> - scan your website for non-secure content.<br>
|
||||
<a href="http://www.ssltools.com"><b>SSL Scanner</b></a> - analyze website security.<br>
|
||||
<a href="https://cryptcheck.fr/"><b>CryptCheck</b></a> - test your TLS server configuration (e.g. ciphers).<br>
|
||||
<a href="https://urlscan.io/"><b>urlscan.io</b></a> - service to scan and analyse websites.<br>
|
||||
<a href="https://report-uri.com/home/tools"><b>Report URI</b></a> - monitoring security policies like CSP and HPKP.<br>
|
||||
<a href="https://csp-evaluator.withgoogle.com/"><b>CSP Evaluator</b></a> - allows developers and security experts to check if a Content Security Policy.<br>
|
||||
<a href="https://uselesscsp.com/"><b>Useless CSP</b></a> - public list about CSP in some big players (might make them care a bit more).<br>
|
||||
<a href="https://whynohttps.com/"><b>Why No HTTPS?</b></a> - top 100 websites by Alexa rank not automatically redirecting insecure requests.<br>
|
||||
<a href="https://ciphersuite.info/"><b>TLS Cipher Suite Search</b></a>- cipher suite search engine.<br>
|
||||
<a href="https://github.com/RaymiiOrg/cipherli.st"><b>cipherli.st</b></a> - strong ciphers for Apache, Nginx, Lighttpd, and more.<b>*</b><br>
|
||||
<a href="https://2ton.com.au/dhtool/"><b>dhtool</b></a> - public Diffie-Hellman parameter service/tool.<br>
|
||||
<a href="https://badssl.com/"><b>badssl.com</b></a> - memorable site for testing clients against bad SSL configs.<br>
|
||||
<a href="https://tlsfun.de/"><b>tlsfun.de</b></a> - registered for various tests regarding the TLS/SSL protocol.<br>
|
||||
<a href="https://sslmate.com/caa/"><b>CAA Record Helper</b></a> - generate a CAA policy.<br>
|
||||
<a href="https://ccadb.org/resources"><b>Common CA Database</b></a> - repository of information about CAs, and their root and intermediate certificates.<br>
|
||||
<a href="https://certstream.calidog.io/"><b>CERTSTREAM</b></a> - real-time certificate transparency log update stream.<br>
|
||||
<a href="https://crt.sh/"><b>crt.sh</b></a> - discovers certificates by continually monitoring all of the publicly known CT.<br>
|
||||
<a href="https://www.hardenize.com/"><b>Hardenize</b></a> - deploy the security standards.<br>
|
||||
<a href="https://cryptcheck.fr/suite/"><b>Cipher suite compatibility</b></a> - test TLS cipher suite compatibility.<br>
|
||||
<a href="https://www.urlvoid.com/"><b>urlvoid</b></a> - this service helps you detect potentially malicious websites.<br>
|
||||
<a href="https://securitytxt.org/"><b>security.txt</b></a> - a proposed standard (generator) which allows websites to define security policies.<br>
|
||||
<a href="https://github.com/mozilla/ssl-config-generator"><b>ssl-config-generator</b></a> - help you follow the Mozilla Server Side TLS configuration guidelines.<br>
|
||||
<a href="https://github.com/mjol/TLScan"><b>TLScan</b></a> - pure python, SSL/TLS protocol and cipher scanner/enumerator.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: HTTP Headers & Web Linters
|
||||
|
|
|
|||
|
|
@ -1,5 +1,16 @@
|
|||
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|
||||
|---|---|---|---|---|---|
|
||||
|Netcraft|[https://toolbar.netcraft.com/site_report](https://toolbar.netcraft.com/site_report)|— (org: [netcraft](https://github.com/netcraft))|Detailed web site reports on hosting history, tech stack, phishing risk, and integrity indicators.|[recon, site-report, security, osint, web-intel]|Active (ongoing service; public-iocs repo ~Dec 2025)|
|
||||
|Security Trails|[https://securitytrails.com/](https://securitytrails.com/)|— (clients e.g. [hakluke/haktrails](https://github.com/hakluke/haktrails))|API for historical and current DNS, IP, domain, SSL cert, and open port intelligence.|[recon, dns-history, api, osint, ip-intel]|Active (API service; client libs ~2023+)|
|
||||
|VirusTotal|[https://www.virustotal.com/](https://www.virustotal.com/)|— (API clients exist)|Multi-engine scanner for files, URLs, IPs to detect malware, phishing, and suspicious behavior.|[malware, analysis, url-scan, file-scan, intel]|Active (daily engine/database updates)|
|
||||
# Threat Hunting & Intel / Reputation Tools
|
||||
|
||||
Online services and scanners for URL/domain/file reputation checking, malware analysis, IOC lookup, threat intelligence enrichment, and reconnaissance during cyber threat hunting or incident response. Many of these are used daily for quick triage of suspicious indicators.
|
||||
|
||||
| Name | Vendor/Webpage | Brief Description | Tags | Creation Date |
|
||||
| ------------------ | -------------------------------- | -------------------------------------------------------------------------------- | --------------------------------------------------- | ------------- |
|
||||
| AbuseIPDB | https://www.abuseipdb.com/ | Database and API for reporting/checking abusive IP addresses and reputation. | ip-reputation, abuse, threat-intel, blacklist | 2013 |
|
||||
| AlienVault OTX | https://otx.alienvault.com/ | Open Threat Exchange for sharing and searching IOCs and pulses. | threat-intel, ioc, community, otx | 2015 |
|
||||
| Any.Run | https://any.run/ | Interactive online malware sandbox for real-time threat analysis and hunting. | malware, sandbox, interactive, threat-hunting | 2016 |
|
||||
| GreyNoise | https://www.greynoise.io/ | Distinguishes internet background noise from targeted threats and scans. | threat-intel, noise-filter, ip-reputation, hunting | 2018 |
|
||||
| Hybrid Analysis | https://www.hybrid-analysis.com/ | Free automated malware analysis sandbox with Falcon Sandbox backend. | malware, sandbox, analysis, threat-hunting | 2015 |
|
||||
| Joe Sandbox | https://www.joesandbox.com/ | Advanced behavioral malware analysis with detailed reports and IOC extraction. | malware, sandbox, behavioral, analysis | 2011 |
|
||||
| Talos Intelligence | https://talosintelligence.com/ | Cisco threat intelligence portal with reputation, IOC search, and blog feeds. | threat-intel, reputation, cisco, ioc | 2013 |
|
||||
| urlscan.io | https://urlscan.io/ | Automated website scanning with screenshots, DOM analysis, and threat detection. | recon, url-scanner, sandbox, threat-hunting | 2016 |
|
||||
| urlvoid | https://www.urlvoid.com/ | Checks website reputation against blacklists for malware, phishing, and spam. | reputation, url-scanner, blacklist, threat-intel | 2010 |
|
||||
| VirusTotal | https://www.virustotal.com/ | Analyzes files, URLs, domains, and IPs with 70+ antivirus engines and scanners. | threat-intel, malware, url-scanner, ioc, reputation | 2004 |
|
||||
|
|
|
|||
|
|
@ -0,0 +1,29 @@
|
|||
# SSL/TLS & Web Security Tools
|
||||
|
||||
Online scanners, analyzers, configuration generators, Certificate Transparency resources, and related utilities for hardening web TLS/SSL.
|
||||
|
||||
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|
||||
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
|
||||
| SSLLabs Server Test | https://www.ssllabs.com/ssltest/ | — | Deep analysis of public SSL/TLS server configuration and vulnerabilities. | ssl, tls, scanner, online, qualys, grading| — | 2011 | — |
|
||||
| ImmuniWeb SSL Security Test | https://www.immuniweb.com/ssl | — | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness. | ssl, tls, compliance, pci, hipaa, scanner | — | 2015 | — |
|
||||
| SSL Check | https://www.jitbit.com/sslcheck/ | — | Scans websites for mixed/insecure content and common SSL configuration issues. | ssl, mixed-content, scanner, online | — | 2012 | — |
|
||||
| SSL Scanner | https://www.sslshopper.com/ssl-checker.html | — | Validates SSL certificate chain, expiry dates, and basic misconfigurations. | ssl, certificate, checker, online | — | 2008 | — |
|
||||
| CryptCheck | https://cryptcheck.fr/ | — | Evaluates TLS configuration, ciphers, protocols, and client handshake support. | tls, cipher, scanner, handshake, online | — | 2015 | — |
|
||||
| Report URI | https://report-uri.com/ | — | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations. | csp, hsts, monitoring, reporting | — | 2015 | — |
|
||||
| CSP Evaluator | https://csp-evaluator.withgoogle.com/ | — | Analyzes and scores the effectiveness of Content Security Policies. | csp, security, policy, analyzer | — | 2018 | — |
|
||||
| Useless CSP | https://github.com/0xInfection/Useless-CSP | [0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | Collection exposing weak or useless CSP implementations on major websites. | csp, security, list, github | 2023-04-12 | 2020 | ~200 |
|
||||
| Why No HTTPS? | https://www.whynohttps.com/ | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | https, adoption, tracking, list | — | 2018 | — |
|
||||
| TLS Cipher Suite Search | https://ciphersuite.info/ | — | Searchable database of TLS cipher suites with security and support details. | cipher, tls, search, database | — | 2019 | — |
|
||||
| cipherli.st | https://syslink.pl/cipherlist | — | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd. | cipher, config, tls, server | — | 2014 | — |
|
||||
| dhtool | https://2ton.com.au/dhtool/ | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | dhparam, pfs, tls, generator | — | 2015 | — |
|
||||
| badssl.com | https://badssl.com/ | — | Site with intentionally broken SSL/TLS setups for testing client behavior. | tls, testing, badssl, client | — | 2015 | — |
|
||||
| tlsfun.de | https://tlsfun.de/ | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | tls, demo, testing, protocol | — | 2016 | — |
|
||||
| CAA Record Helper | https://sslmate.com/caa/ | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | caa, dns, generator, certificate | — | 2017 | — |
|
||||
| Common CA Database (CCADB) | https://ccadb.my.salesforce-sites.com/ | — | Repository of Certificate Authority information, roots, and intermediates. | ca, certificate, database, root | — | 2017 | — |
|
||||
| CERTSTREAM | https://certstream.calidog.io/ | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | ct, transparency, stream, real-time | 2025-11-20 | 2018 | ~400 |
|
||||
| crt.sh | https://crt.sh/ | — | Search engine for certificates logged in public Certificate Transparency logs. | ct, transparency, search, certificate | — | 2015 | — |
|
||||
| Hardenize | https://www.hardenize.com/ | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | hardening, scanner, tls, multi-protocol | — | 2018 | — |
|
||||
| Cipher suite compatibility | https://www.ssllabs.com/ssltest/viewMyClient.html | — | Tests TLS cipher and protocol compatibility from your current browser/client. | tls, compatibility, client, browser | — | 2011 | — |
|
||||
| security.txt | https://securitytxt.org/ | — | Standard and generator for security contact/policy disclosure on websites. | securitytxt, policy, contact, standard | — | 2017 | — |
|
||||
| Mozilla SSL Config Generator | https://ssl-config.mozilla.org/ | — | Generates secure TLS configurations following Mozilla guidelines for servers. | tls, config, generator, mozilla, server | — | 2016 | — |
|
||||
| TLScan | https://github.com/prbinu/tlscan | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | tls, scanner, python, enumerator | 2022-08-15 | 2019 | ~50 |
|
||||
Loading…
Reference in New Issue