Awesome Free Online SOC & Pentest Tools 🚀

A curated collection of free or freemium web-based penetration testing, threat intelligence, OSINT, and vulnerability analysis tools. These tools assist security professionals and enthusiasts in discovering, assessing, and managing vulnerabilities and threats online, without the need for local installations. Contributions are welcome!

---

🚩 Categories:

• Network Security
• Web Application Security
• Vulnerability Scanners
• Reconnaissance and Information Gathering
• Malware Scanning and Threat Intelligence
• Data Breach Monitoring and Dark Web Search
• Code Search and Intelligence
• Cloud Storage Security
• Threat Intelligence and Research Tools
• Browser Extensions

---

🔒 Network Security

1. Nmmapper.com - Perform online Nmap network security scans effortlessly.
2. HostedScan - Cloud-based vulnerability scanning for network and web apps.
3. Pentest-Tools.com - Network testing, including open ports, subdomains, and basic vulnerability scans.
4. Iplocation.net - Domain and Email security tools.
5. Shodan - Search engine for internet-connected devices and identifying vulnerabilities.
6. Censys - Search and discover internet-exposed devices and infrastructure vulnerabilities.
7. BinaryEdge - Continuous monitoring and discovery of exposed assets and vulnerabilities online.
8. ZoomEye - Cyberspace search engine that collects data on internet-connected devices and web apps.
9. FOFA - Internet asset search engine for identifying and monitoring network infrastructure and IoT devices.

🕸️ Web Application Security

1. Nikto.online - Online version of Nikto, a web server vulnerability scanner.
2. Checksite.ai - Detects potential SEO and security issues on websites.
3. Web-check.xyz - Analyze and identify web server vulnerabilities.
4. Acunetix - Freemium web vulnerability scanner with DeepScan technology.
5. SSL Labs - In-depth SSL/TLS security testing for web servers.
6. PhishTank - Online service for checking and reporting phishing websites.
7. OpenPhish - Automated phishing threat intelligence platform.

🛠️ Vulnerability Scanners

1. Urlvoid.com - Scan URLs for malware, blacklists, and reputation issues.
2. W3af - Open-source web vulnerability scanner focusing on SQL injections, XSS, and more.
3. Intruder.io - Automated vulnerability scanning and penetration testing with a free plan.
4. SecurityHeaders.com - Quickly scan websites to check for security header implementation.
5. BeEF - Browser exploitation tool for testing client-side vulnerabilities.
6. CVE Details - A detailed vulnerability database tracking CVEs for various software.
7. Exploit-DB - Archive of public exploits and vulnerable software.
8. NVD - The National Vulnerability Database for tracking CVEs and scoring vulnerabilities.
9. VulDB - Vulnerability database with information on exploits, weaknesses, and vulnerability trends.
10. DocGuard - Analyze and scan documents for embedded malware.

🕵️ Reconnaissance & Information Gathering

1. CloudflareRadar - Insights into internet traffic patterns and security trends.
2. Wappalyzer - Discover the technologies used by websites.
3. OSINT Framework - A collection of open-source intelligence (OSINT) tools for reconnaissance tasks.
4. Censys - Discover and track internet-exposed devices and vulnerabilities.
5. Shodan - Search engine for identifying vulnerabilities in internet-connected devices.
6. Grep.app - Search through public GitHub repositories for specific code or keywords.
7. Searchcode - Source code search engine for finding specific code in open repositories.
8. PublicWWW - Source code search engine focused on web technologies and embedded tracking codes.
9. GrayHatWarfare - Publicly available Amazon S3 buckets indexed for exploration.
10. OpenBuckets - Search for exposed cloud storage buckets across various platforms.
11. DNSTwist - Domain permutation and typosquatting detection tool.

🦠 Malware Scanning & Threat Intelligence

1. Virustotal.com - Scan files and URLs for viruses using multiple antivirus engines.
2. Urlvoid.com - Check if URLs are flagged for malware or associated with malicious activity.
3. Scumware.org - Check what kind of malware is present on a website.
4. Hybrid Analysis - Free malware analysis service for detecting malicious files.
5. Any.run - Interactive malware analysis sandbox for dynamic threat analysis.
6. Urlscan.io - Scan and analyze URLs for security issues, malware, and phishing attempts.
7. Koodous - Collaborative platform for Android malware analysis and threat intelligence.
8. OTX - Threat intelligence sharing platform to track malicious activity.
9. IBM X-Force - Threat intelligence research and analysis platform by IBM.
10. MISP - Open-source threat intelligence sharing platform for security teams.
11. Intezer - Malware detection and code analysis platform based on genetic code similarities.

🔐 Data Breach Monitoring and Dark Web Search

1. HaveIBeenPwned - Check if your email or phone number has been compromised in data breaches.
2. Dehashed - Search engine for leaked databases and stolen credentials.
3. Hudson Rock - Look up if a specific email address or domain was compromised in global Infostealer malware attacks.
4. WeLeakInfo - Search across various data breaches for exposed personal information.
5. BreachDirectory - Lookup if credentials have been compromised in data breaches.
6. Intelx - Dark web and data breach search engine.
7. Ahmia - Search engine for Tor hidden services and the dark web.
8. The Hidden Wiki - A directory for dark web services and information.

📊 Threat Intelligence and Research Tools

1. SOCRadar Labs - Free threat intelligence tools and research resources.
2. ChatGPT IOC Analyzer - AI-powered tool to analyze and categorize indicators of compromise.
3. ChatGPT NVD CVE Research Assistant - A research assistant for CVE analysis and reporting.
4. ChatGPT Vulnerability Prioritizer - AI-based tool for prioritizing vulnerabilities based on risk.
5. ChatGPT Cyber Sentinel - AI tool for real-time threat monitoring and reporting.
6. ChatGPT Pentest Reporter - AI tool that assists in writing detailed security reports.

☁️ Cloud Storage Security

1. GrayHatWarfare - Index of publicly accessible Amazon S3 buckets.
2. OpenBuckets - Search for open cloud storage buckets across major platforms.
3. Cyberduck - Open-source cloud storage browser supporting a variety of cloud platforms.

---

🔌 Browser Extensions

1. OWASP Penetration Testing Kit - A browser-based extension providing penetration testing tools for web application security testing based on OWASP standards.
2. HackTools - A browser extension offering various tools for pentesting including XSS, SQLi, reverse shells, and more, all accessible within your browser's developer tools.

---

📈 Why use these tools?

• Free or Freemium: All tools listed here are either free or come with robust free plans. No temporary trials!
• Web-Based: These tools are online, meaning you can access them directly from your browser without installation.
• Diverse Capabilities: From network testing to malware detection, this list covers multiple areas of penetration testing and security research.

---

🔄 Contribute

Got a tool to add? Feel free to submit a PR! Ensure it fits the category and is free or freemium.

---

🔑 Keywords

penetration testing tools, free pentest tools, web-based pentest tools, vulnerability scanners, free vulnerability scanning, online security tools, network security testing, web application security, free vulnerability assessment, free security scanners, OSINT tools, cybersecurity tools, open-source pentest tools, network vulnerability scanning, automated penetration testing, online threat intelligence, web security testing, cloud-based vulnerability scanners, online malware scanners, website vulnerability scanners, SSL security testing, open-source vulnerability scanners, reconnaissance tools, free OSINT frameworks, free pentesting platforms, SQL injection scanners, XSS vulnerability scanners, web server vulnerability scanning, browser exploitation tools, free cyber intelligence tools, cybersecurity assessment tools, web vulnerability scanning tools, free network security tools, free online security tools, information gathering tools, free pentesting software, website malware detection, open-source vulnerability tools, network penetration testing, ethical hacking tools, free threat detection tools, continuous vulnerability monitoring, web app security tools, online hacking tools, website penetration testing, web application vulnerability scanners, malware detection tools, network intrusion detection tools, cyber vulnerability assessment.