Links

EXPLORERS

Arbiscan

Arbitrum blockchain explorer

Arkham

Intelligence Platform

Basescan

Base blockchain explorer

Blockscout

Multichain block explorer

BscScan

BSC blockchain explorer

Etherscan

Ethereum blockchain explorer

L2Beat

The state of the layer two ecosystem

Optimism Explorer

Optimism blockchain explorer

Polkadot-Substrate

Polkadot blockchain portal

Polygonscan

Polygon blockchain explorer

Routescan

Multichain explorer

SnowTrace

Avalanche C-Chain explorer

Solscan

Solana blockchain explorer

zksync era

ZKsync Block Explorer

DAPPS

Aave

DeFi lending and borrowing protocol

Bitrefill

Gift cards and mobile top-ups with crypto

Chainlink

Decentralized oracle network

DappRadar

DApp analytics and ranking platform

DeBank

Web3 portfolio tracker and social platform

DeFiLlama

DeFi TVL and protocol analytics

DexScreener

DEX token analytics and charts

DEXTools

DEX analytics and trading tools

Dune Analytics

On-chain data analytics platform

Hyperliquid

Perpetual DEX

Kalshi

Prediction market

Lido

Liquid staking

Morpho

DeFi yield optimization

Nado

Perpetual DEX

OpenSea

NFT marketplace and aggregator

PancakeSwap

Multi-chain DEX

Polymarket

Prediction market

Sky

DeFi protocol

Tenderly

Smart contract monitoring and debugging

Uniswap

Decentralized exchange

INFO

Chainabuse

Crowdsourced crypto scam reporting

CoinDesk

Cryptocurrency news and analysis

CoinGecko

Crypto market data aggregator

Coinmarketcap

Cryptocurrency market tracker

Glassnode

On-chain market intelligence

Investing.com

Cryptocurrency market data and charts

Messari

Crypto research and market intelligence

Nansen

On-chain wallet labeling and analytics

Rekt

Web3 security news and reports

SlowMist Hacked

Historical blockchain hack database

The Block

Crypto research, news and data

The Defiant

DeFi-focused news and analysis

Token Terminal

On-chain fundamentals and revenue data

Web3isGG

Web3 is Going Great

SEC

Aderyn

Rust-based static analyzer for Solidity

Ape

Smart contract development framework

DeFiHackLabs

Reproducible DeFi exploit PoC archive

Echidna

Fuzzing tool for smart contracts

Ethernaut

Web3/Solidity security wargame

Foundry

Smart contract development toolchain

Gambit

Mutation testing for smart contracts

Halmos

Symbolic testing for EVM bytecode

Hardhat

Ethereum development environment

Medusa

Parallelized fuzzing for smart contracts

Mythril

Security analysis tool for EVM bytecode

Plamen

Smart contract security tools

Slither

Static analysis framework for Solidity

Solodit

Smart contract audit report aggregator

SWC Registry

Smart contract weakness classification

EXCHANGES

Binance

Largest crypto exchange platform

Bitget

The universal exchange

Bitstamp

Oldest regulated crypto exchange

Bybit

Derivatives and spot crypto trading

Coinbase

Regulated crypto exchange and wallet

Crypto.com

International crypto trading platform

Deribit

Largest crypto options and derivatives exchange

Gemini

Trade Crypto

Kraken

Secure crypto trading platform

kuCoin

Crypto Exchange

MEXC

High-liquidity altcoin exchange

OKX

Web3 and crypto exchange platform

API

Alchemy

Web3 development platform and API

Ankr

Decentralized RPC and node infrastructure

Bitquery

Blockchain data and GraphQL API

Chainstack

Managed blockchain node infrastructure

Covalent

Unified multichain data API

Infura

Ethereum and IPFS API gateway

Moralis

Web3 data API and indexing

QuickNode

Blockchain RPC infrastructure

TheGraph

Blockchain data indexing protocol

HARDWARE

BitBox

Swiss-made hardware wallet

Blockstream

Bitcoin hardware wallet and greenAddress

Coldcard

Bitcoin-only hardware wallet

Cypherock

MPC shard-based wallet, no seed phrase

Ellipal

Air-gapped hardware wallet

Foundation Devices

Open-source Bitcoin-only hardware wallet

Keystone

Air-gapped hardware wallet

Ledger

Secure hardware wallet

NGRAVE

Ultra-secure hardware wallet

OneKey

Open-source hardware wallet

SafePal

Crypto hardware wallet

SecuX

Hardware wallet with touchscreen

Tangem

Card-based hardware wallet

Trezor

Open-source hardware wallet

WALLETS

Brave Wallet

Built-in browser wallet

Frame

Desktop Ethereum wallet

MetaMask

Ethereum browser extension wallet

OKX Wallet

Multi-chain Web3 wallet

Phantom

Solana browser extension wallet

Rabby

DeFi-focused browser wallet

Safe

Multi-signature smart contract wallet

Trust Wallet

Multi-chain mobile wallet

Zerion

Multi-chain DeFi wallet

CHATBOT

ChatGPT

OpenAI language model for conversations and tasks

Claude

Anthropic AI assistant for analysis and writing

Deepseek

Advanced AI chat and reasoning platform

Gemini

Google multimodal AI assistant

Grok

xAI conversational AI with real-time knowledge

Kimi

Long-context AI assistant for research

Lobehub (OSS)

Open-source AI chat framework

Manus

AI agent platform for autonomous tasks

MetaAI

Meta AI assistant for social platforms

Microsoft-Copilot

Microsoft AI productivity companion

Minimax

AI content generation and chat platform

Mistral

Open-weight AI models platform

Perplexity

AI-powered answer engine

Qwen

Alibaba Cloud AI chat assistant

z.ai

AI chat and assistant platform

API

Ai21

AI21 Labs language models API

AWS Bedrock

AWS foundation model hosting service

Azure AI

Microsoft Azure AI services hub

Baseten

ML model deployment and serving

Bigmodel

Chinese AI model API platform

Cerebras

Cloud AI inference platform

Cohere

Enterprise NLP API platform

Deepinfra

Serverless GPU inference API

Fireworks

Fast AI inference API platform

Friendli

AI inference serving platform

Google AI Studio

Google AI Studio for model prototyping

Google Cloud AI

Google Cloud AI platform

Hyperbolic

Decentralized GPU cloud platform

Mistral

Open-weight AI models platform

Nebius

AI infrastructure cloud platform

Novita

AI API marketplace

OpenRouter

Multi-model AI API router

Together

Decentralized AI model API

PLATFORM

Daytona

Development environment manager

e2b

Cloud-based dev sandboxes

Exa

AI-powered web search API

Inference

Decentralized inference network

Lambda

GPU cloud for AI workloads

Modal

Serverless cloud for AI workloads

RunPod

GPU cloud for AI inference and training

SOFTWARE

Firecrawl

Web scraping API for AI agents

HuggingFace

ML model hub and community

Jina

Neural search and embedding API

Kaggle

Data science competition platform

Langbase

LLM app development platform

LlamaIndex

Data framework for LLM applications

Search1API

Unified search API service

Serper

Google search API for AI

Steel.dev

Browser automation API

Tavily

AI research assistant API

Voyageai

Embeddings and retrieval API

VIBE

Bolt.new

AI-powered full-stack web app builder

Command.New

LLM app development platform

Cursor

AI-first code editor

Emergent

AI software development platform

Firebase-Studio

Firebase AI-powered development tools

Kilocode

AI code generation assistant

Lovable

AI app builder for non-developers

Replit

Online IDE with AI features

Vercel v0

Vercel AI UI generation tool

OSS

Continue

Open-source AI code assistant

LangChain

LLM application framework

ModelScope

ModelScope AI model hub

Ollama

Local LLM runtime

Open WebUI

Self-hosted AI chat interface

vLLM

High-throughput LLM serving engine

CODE

Cline

AI coding agent for IDE

Coderabbit

AI code review automation

CommandCode

AI coding assistant for terminal

Copilot

AI pair programming assistant

Cubic.dev

Cloud development environment

Devin

Autonomous AI software engineer

FreeBuff

Security research and exploit tooling

OpenCode

AI-powered code generation platform

GENAI

AssemblyAI (Voice)

Speech-to-text API service

Black Forest Labs

Text-to-image AI generation API

Cartesia (Voice)

Real-time voice AI platform

Civitai

AI art model community

ElevenLabs

AI voice synthesis platform

Fal

AI media generation API

Firefly

Adobe generative AI for images

Hedra

AI video generation platform

Higgsfield

AI video and image generation

Kling

AI video generation tool

Leonardo

AI art and image generation

LiveKit (Voice)

Real-time voice infrastructure

Lumalabs

AI 3D content generation

Midjourney

AI image generation via Discord

Pika

AI video creation platform

Pixverse

AI video and image generation

Recraft

Vector art AI generation

Replicate

Cloud AI model deployment

Runware

AI image generation API

Runway

AI video editing suite

StabilityAI

Stability AI model platform

Vidu

AI video generation platform

CLOUD

Alibaba

Alibaba Cloud computing platform

AWS

Amazon Web Services cloud

Azure

Microsoft Azure cloud platform

GCP

Google Cloud Platform

Huawei

Huawei Cloud services

IBM

IBM Cloud computing platform

Oracle

Oracle Cloud infrastructure

Tencent

Tencent Cloud platform

Yandex

Yandex Cloud services

INFRA

AWS-Lightsail

AWS simplified VPS service

Contabo

Budget VPS hosting provider

Digitalocean

Cloud infrastructure droplets

Hetzner

German cloud and dedicated hosting

Hostinger

Web hosting and VPS provider

IONOS

Cloud and hosting provider

Kamatera

Flexible cloud VPS platform

Linode

Akamai cloud computing (Linode)

MassiveGrid

Bare metal cloud provider

Netcup

German hosting and VPS provider

OVHcloud

French cloud hosting provider

Scaleway

French cloud platform

Vultr

Cloud compute and GPU instances

PLATFORM

Firebase

Google app development platform

Heroku

Cloud PaaS platform

MongoDB

Cloud-based NoSQL database

Neon

Serverless PostgreSQL database

Netlify

Web deployment and hosting platform

Render

Cloud application hosting

Upstash

Serverless Redis and Kafka

Vercel

Frontend deployment platform

SOFTWARE

Appwrite

Backend-as-a-Service platform

Cloudflare

CDN and cloud security platform

Confluence

Team knowledge base and wiki

Jira

Project management and issue tracking

Netbird

Open-source VPN and access control

Netmaker

WireGuard-based virtual network

Nhost

Open-source Firebase alternative

Sentry

Error tracking and performance monitoring

Supabase

Open-source Firebase alternative

Tailscale

Secure mesh VPN network

Youtrack

Project management and bug tracking

EXTENSIONS

Cookie-Editor

Edit and manage browser cookies

DOMLogger++

Monitor and log DOM-based modifications

DotGit

Expose and browse exposed .git folders

FoxyProxy

Advanced proxy management extension

HackBar

Manual request crafting and testing toolbar

HackTools

Offensive security toolkit browser extension

Mitaka

OSINT aggregation browser extension

NoScript

JavaScript blocking and protection

PentestKit

Collection of pentesting browser tools

Retire.js

Scan for vulnerable JavaScript libraries

uBlock Origin

Efficient ad and tracker blocker

User-Agent Switcher

Switch user agent strings easily

Violentmonkey

Open-source userscript manager

XnlReveal

Reveal hidden information in web responses

DEV-TOOLS

Android Studio

Android app development IDE

CLion

C/C++ IDE by JetBrains

DataGrip

Database IDE by JetBrains

GoLand

Go IDE by JetBrains

IntelliJ IDEA

Java and Kotlin IDE by JetBrains

JetBrains PyCharm

Python IDE for professional developers

JupyterLab

Web-based interactive notebook environment

Marimo

Reactive Python notebook

PhpStorm

PHP IDE by JetBrains

Rider

dotNET Dev IDE

RubyMine

Ruby and Rails IDE by JetBrains

RustRover

Rust IDE by JetBrains

VS Code

Lightweight code editor

WebStorm

JavaScript and web IDE by JetBrains

Xcode

Apple development IDE

PLATFORM

Activepieces

Open-source automation platform

code-server

Self-hosted VS Code in the browser

Coder

Cloud development environments

Dify

Open-source LLM app development platform

Flowise

Open-source LLM workflow builder

Kestra

Open-source data orchestration platform

Langflow

Visual framework for LLM apps

N8N

Workflow automation platform

Trigger.dev

Background job platform for developers

Windmill

Developer platform for workflows and scripts

SOFTWARE

Burp Suite

Web application security testing proxy

Caido

Lightweight web security testing toolkit

Charles

HTTP debugging proxy tool

Gori

Security testing command-line tool

Hoppscotch

Lightweight API testing platform

Insomnia

API client and design platform

Postman

API development and testing platform

RapidAPI

API hub and testing platform

Yaak

API development and testing client

ZAP

OWASP web app security scanner

RESOURCES

Awesome-BBP-Writeups

Collection of bug bounty writeups

awesome-bug-bounty

Curated bug bounty resources list

bounty-targets-data

Scraped data of all bug bounty programs

bugbounty-cheatsheet

Bug bounty tips and tricks cheatsheet

Bugcrowd Public BBP

Public Bug Bounty Program List

PentesterLand

Bug bounty news and writeups

PROGRAMS

Apple

Apple Security Bounty program

Google

Google Bug Hunters program

WEB3

Codehawks

Web3 security audit platform

Hackenproof

Bug bounty and security audit

Immunefi

Web3 bug bounty platform

Remedy

Decentralized security marketplace

Sherlock

Smart contract security reviews

PLATFORMS

Bugcrowd

Crowdsourced security testing

BugRap

Vulnerability disclosure platform

Federacy

Security testing platform

GoBugFree

Bug bounty platform

Hackerone

Bug bounty and vulnerability disclosure

Intigriti

European bug bounty platform

Yeswehack

Bug bounty and VDP platform

DOMAIN

crt.sh

Certificate Search

DNSChecker

Check DNS Propagation

DNSDumpster

DNS recon & research, find & lookup

dnsviz

DNS recon

Domain Dossier

Excellent tool for AZ too

Domain Scan (SecurityTrails)

Domain Scanner

DomainTools

Whois information

IntoDNS

DNS information

Kitterman SPF

SPF Recording Tool

NSLookup.io

DNS Lookup

URLScan (SecurityTrails)

URL Scanner for Domain Data

ViewDNS (Reverse Whois)

Reverse Whois Lookup

What's My DNS

DNS Propagation Checker

Whois.com

Domain Whois Check

zdns

Fast DNS Lookup Library and CLI Tool

GATHERING

Cloudflare Radar

URL Scanner

gau

Fetch OTX, Wayback & Common Crawl

Hypestat

Detailed Data for web

NerdyData

Check Website Technology

Pulsedive

CSRF History

SimilarWeb

Website Traffic Checker

waybackpy

Wayback Machine CLI interface

waymore

Find more via Wayback, Common Crawl

SCAN

Censys

Internet asset discovery platform

CriminalIP

Cyber threat intelligence platform

Fofa

Cybersecurity search engine

Grep.app

Search across git repositories

Hunterhow

IP and domain search

IntelligenceX

OSINT and threat intelligence

Netlas

Internet reconnaissance platform

Onyphe

Cyber threat intelligence search

PublicWWW

Website source code search

SecurityTrails

DNS and domain intelligence

Shodan

Internet-connected devices search

ZoomEye

Search Engine for Internal Assets

LEAK

Dehashed

Compromised credentials search

Leak-Lookup

Data breach search engine

IP-DATA

Bigdatacloud

IP geolocation and data API

c99nl

Web security and API tools

ipdata

IP geolocation API service

ipgeolocation

IP geolocation database API

ipinfo

IP address data and insights

WhoisXML

WHOIS and domain intelligence API

CVE

CVE Details

CVE database and exploit entries

OSV

Open source vulnerability database

Vulners

Vulnerability and exploit search

RESOURCES

awesome-wordlists

A curated list of wordlists for bruteforcing and fuzzing

search-engines

A list of awesome search engines

SecLists

Attack patterns and payload wordlists

SUB

Amass

In-depth attack surface mapping

AS3NT

Another enumeration tool

BBOT

Recursive internet scanner

C99 Subdomain Finder

Online discovery tool

Cero

SSL certificate scraper

DNSx

DNS toolkit

Findomain

Complete domain recognition

MassDNS

High-performance DNS resolver

PureDNS

Accurate subdomain brute-forcing

Scilla

Information gathering

ScopeSentry

Cyberspace mapping, subdomain enumeration etc.

ShuffleDNS

Subdomain brute-forcing

SubDomainizer

Find hidden subdomains

Subfinder

Fast passive enumeration

SubProber

Concurrent subdomain scanner

Sudomy

Automated reconnaissance

Tugarecon

Subdomain enumeration

CRAWLING

BlackWidow

Python OSINT & OWASP scanner

cariddi

Crawl & scan for endpoints, secrets, etc.

changeme

Default credential scanner

crawley

Crawls web pages for links

dirsearch

Web path scanner

dismap

Asset discovery and identification tools

EyeWitness

Screenshot & server header info

feroxbuster

Recursive content discovery

ffuf

Fast web fuzzer

getJS

Fetch JS files fast

gobuster

Directory/DNS/VHost buster

GoLinkFinder

Minimal JS endpoint extractor

gospider

Fast web spider

hakrawler

Fast crawler for endpoints/assets

katana

Next-gen crawling/spidering

LinkFinder

Finds endpoints in JS files

linx

Find invisible JS links

meg

Fetch many paths quickly

ParamSpider

Mine URLs from archives

urlgrab

Spider website for URLs

wfuzz

Web application fuzzer

xnLinkFinder

Find endpoints & wordlist from JS

HACK

httpx

Check Website Technology

jaeles

Swiss Army knife for automated web testing

Lazyegg.py

Nuclei-Template data extractor

Nikto

Nikto web server scanner

Nuclei

Fast customizable vuln scanner

nuclei-templates

Community-curated nuclei templates

openVas

Vulnerability scanner (Kali)

osmedeus

Offensive recon workflow engine

reconFTW

Automated recon on domain

reNgine

Automated reconnaissance framework

retire.js

Detect vulnerable JS libraries

Sn1per

Attack surface management

T3MP3ST

autonomous red teaming platform

tlsx

TLS grabber

wappalyzergo

Wappalyzer tech stack detection via PD

webanalyze

Port of Wappalyzer

wpscan

WordPress security scanner

PLATFORM

Begivil

Attack surface management platform

BuiltWith (Ext)

Check Website Technology

Fullhunt

Attack surface management

Google PageSpeed

Check Page Speed

Mozilla Observatory

Check Security Headers

Pentest-Tools

Online penetration testing tools

Projectdiscovery

Open-source security scanning tools

SecurityHeaders

Scan HTTP Headers

SSL Labs

Check SSL

UrlScan

Website URL scanner

Wappalyzer

Check Website Technology

Web-Check

Check website full information

OSINT

Maltego

OSINT and link analysis tool

SpiderFoot

Open-source OSINT automation

Taranis

Open-source OSINT aggregation platform

RESOURCES

Awesome-Hacking

Awesome hacking resources collection

awesome-pentest

Penetration testing resources collection

awesome-web-security

Web security resources collection

GTFOBins

Unix binaries for privilege escalation

hacker-roadmap

Guide for becoming a hacker

Hacktricks

Pentesting and hacking techniques

LOLBAS

Windows binaries for living off the land

OWASP CheatSheet

OWASP security cheat sheets

OWASP WSTG

OWASP Web Security Testing Guide

PayloadAllTheThings

Payloads and bypass techniques

PENTESTING-BIBLE

Complete pentesting learning resource

RedTeamRecipes

Red team tactics and techniques

TOOLS

beautifier

Personal tool and resource

ctool

Developer tools collection

CyberChef devtools encode decode

Cyber data analysis toolkit

de4js

Personal tool and resource

It-Tools

Collection of handy IT utilities

JS Deobfuscator

Personal tool and resource

Metasploit

Penetration testing framework

P4RS3LT0NGV3

universal text transformation, translation, mutation, etc.

Sploitus

Exploit and vulnerability search engine

PLATFORM

Hack The Box

Cybersecurity training platform

PentesterLab

Web pentesting exercises and labs

PortSwigger Academy

Free web security training

pwn.college

Binary exploitation learning platform

TryHackMe

Hands-on cybersecurity training

SOFTWARE

Faraday

Open-source pentest management

Pentest Collab

Pentest collaboration and reporting

TRAINING

Cryptohack

Cryptography learning and CTF challenges

CTFd

Open-source CTF platform

CTFtime

CTF events and team rankings

echoCTF

Cyber security challenge platform

Hacker 101

Free web security training course

Root-Me

Hacking challenges and wargames

VulnHub

Vulnerable machines for practice

OS

Kali Linux

Penetration testing Linux distribution

Parrot

Hackers Operation System

RESOURCES

awesome-blueteam

Blue team defensive security resources

awesome-incident-response

Incident response tools and resources

awesome-threat-detection

Detection engineering and hunting resources

TOOLS

Autopsy

Digital forensics platform

ClamAV

Open-source antivirus engine

OpenVAS

Open-source vulnerability scanner

Osquery

OS querying and endpoint visibility

Security Onion

Network security monitoring distro

Snort

Open-source IDS/IPS

Suricata

High-performance IDS/IPS engine

YARA

Malware pattern matching rules

Zeek

Network security monitoring framework

PLATFORM

Alienvault

Open threat exchange platform

CrowdStrike

Endpoint detection and response platform

Elastic SIEM

SIEM and security analytics platform

GreyNoise

Internet noise and scan intelligence

MISP

Threat intelligence sharing platform

OpenCTI

Open-source cyber threat intelligence platform

Shuffle SOAR

Open-source SOAR automation platform

TheHive

Incident response platform

Velociraptor

Digital forensics and IR platform

VirusTotal

Threat intelligence and file analysis

SOFTWARE

Coalitioninc

Cyber insurance and risk management

DefectDojo

Open-source vulnerability management

IntelOwl

Threat intelligence aggregation platform

Nessus

Vulnerability scanner

Splunk

SIEM and log analysis platform

Wazuh

Open-source SIEM and XDR platform

ORGS

CIS

Security benchmarks and best practices

CISA

US cybersecurity infrastructure agency

CSA

Cloud security standards organization

ENISA

EU cybersecurity agency

FIRST

Incident response team forum

ISC-SANS

Threat activity monitoring and analysis

ISC2

Cybersecurity certification body

MITRE

Threat research and ATT&CK framework

NIST

US standards and cybersecurity framework

OWASP

Web application security standards

SANS Institute

Cybersecurity training and certification

NETWORK

Element messenger

Matrix encrypted messaging client

I2P network

Invisible Internet Project network

IPFS network

Peer-to-peer hypermedia protocol

Jabber protocol

Open XMPP messaging network

Nym network

Privacy network and mixnet

Session messenger

Anonymous encrypted messenger

Tor Project network

Anonymous communication browser

PRIVACY

Bitwarden

Open-source password manager

CryptPad

End-to-end encrypted collaboration suite

GrapheneOS

Privacy and security focused Android

OnionShare

Anonymous file sharing over Tor

Proton VPN

Encrypted VPN service

ProtonMail

Encrypted email service

Qubes OS

Security-focused desktop OS

Tails OS

Portable OS for anonymity

Tuta

Encrypted email and calendar

Whonix

Anonymous operating system

EXPLOIT

Exploit-DB

Exploit database and shellcode

Packet Storm

Security tools and exploits

Rapid7 DB

Vulnerability and exploit database

MALWARE

AntSword

Cross-platform webshell manager

awesome-malware-an

Malware analysis tools collection

Malpedia

Malware family encyclopedia

MalwareBazaar

Malware sample database

MalwareSourceCode

VX-Underground malware source collection

theZoo

Live malware collection

VX-Underground

Malware samples and research archive

C2

Cobalt-Strike

Advanced C2 Framework

Havoc

The Havoc C2 Framework

Mythic

Red teaming C2 framework

Sliver

Adversary Emulation Framework