- www.base64decode.org
- https://vuldb.com
- https://nvd.nist.gov/vuln
- https://regex101.com
- https://www.exploit-db.com/
- https://www.circl.lu/services/cve-search/
- https://util.unicode.org/UnicodeJsps/
- http://websec.github.io/unicode-security-guide/
- https://tools.kali.org/tools-listing
- cwe.mitre.org/data
- owasp.org/projects
- cheatsheetseries.owasp.org
- nvd.nist.gov/vuln-metrics/cvss/v3-calculator
- https://weakpass.com/wordlist
- whois.domaintools.com
- reverseip.domaintools.com (web-based reverse DNS lookup)
- spyse.com
- lookup.icann.org
- www.shodan.io
- sitereport.netcraft.com
- searchdns.netcraft.com (web-based DNS lookup)
- pgp.circl.lu
- www.exploit-db.com/google-hacking-database
- pentest-tools.com/information-gathering/google-hacking
- www.calculator.net/ip-subnet-calculator.html
- www.speedguide.net/ports.php
- securityheaders.com
- www.exploit-db.com
- www.cvedetails.com
- www.securityfocus.com/vulnerabilities
- www.xssed.com
- gchq.github.io/CyberChef
- www.onlinehashcrack.com
- hashkiller.io/listmanager
- crackstation.net
- weakpass.com/wordlist
- archive.org
- isithacked.com
- haveibeenpwned.com
- search.wikileaks.org
- jsonlint.com
- www.base64decode.org
- www.urldecoder.org
- raikia.com/tool-powershell-encoder
- bitly.com
- www.getcreditcardnumbers.com