Get Even More Visitors To Your Blog, Upgrade To A Business Listing >>

the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Tags: tool network

" Knowledge is powerful, be careful how you use it!"

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more.


Created by trimstrayand contributors


📔  What is it?

This repository is a collection of various materials and tools that I use every day in my work. It contains a lot of useful information gathered in one piece. It is an invaluable source of knowledge for me that I often look back on.

🚻  For whom?

For everyone, really. Here everyone can find their favourite tastes. But to be perfectly honest, it is aimed towards System and Network administrators, DevOps, Pentesters, and Security Researchers.

ℹ️  Contributing

If you find something which doesn't make sense, or something doesn't seem right, please make a pull request and please add valid and well-reasoned explanations about your changes or comments.

A few simple rules for this project:

  • inviting and clear
  • not tiring
  • useful

These below rules may be better:

  • easy to contribute to (Markdown + HTML ...)
  • easy to find (simple TOC, maybe it's worth extending them?)

Url marked *is temporary unavailable. Please don't delete it without confirming that it has permanently expired.

Before adding a pull request, please see the contributing guidelines. You should also remember about this:

+This repository is not meant to contain everything but only good quality stuff.

All suggestions/PRare welcome!

Code Contributors

This project exists thanks to all the people who contribute.

Financial Contributors

📰  RSS Feed & Updates

GitHub exposes an RSS/Atomfeed of the commits, which may also be useful if you want to be kept informed about all changes.

☑️  ToDo

  • Add new stuff...
  • Add useful shell functions
  • Add one-liners for collection tools (eg. CLI Tools)
  • Sort order in lists

New items are also added on a regular basis.

💢  Table of Contents

Only main chapters:

  • CLI Tools
  • GUI Tools
  • Web Tools
  • Systems/Services
  • Networks
  • Containers/Orchestration
  • Manuals/Howtos/Tutorials
  • Inspiring Lists
  • Blogs/Podcasts/Videos
  • Hacking/Penetration Testing
  • Your daily knowledge and news
  • Other Cheat Sheets
  • Shell One-liners
  • Shell Tricks
  • Shell Functions

🔱  The Book of Secret Knowledge (Chapters)

CLI Tools   [TOC]

▪️ Shells

  :small_orange_diamond: GNU Bash- is an sh-compatible shell that incorporates useful features from the Korn shell and C shell.
  :small_orange_diamond: Zsh- is a shell designed for interactive use, although it is also a powerful scripting language.
  :small_orange_diamond: tclsh- is a very powerful cross-platform shell, suitable for a huge range of uses.
  :small_orange_diamond: bash-it- is a framework for using, developing and maintaining shell scripts and custom commands.
  :small_orange_diamond: Oh My ZSH!- is the best framework for managing your Zsh configuration.
  :small_orange_diamond: Oh My Fish- the Fishshell framework.
  :small_orange_diamond: Starship- the cross-shell prompt written in Rust.
  :small_orange_diamond: powerlevel10k- is a fast reimplementation of Powerlevel9k ZSH theme.

▪️ Shell plugins

  :small_orange_diamond: z- tracks the folder you use the most and allow you to jump, without having to type the whole path.
  :small_orange_diamond: fzf- is a general-purpose command-line fuzzy finder.
  :small_orange_diamond: zsh-autosuggestions- Fish-like autosuggestions for Zsh.
  :small_orange_diamond: zsh-syntax-highlighting- Fish shell like syntax highlighting for Zsh.
  :small_orange_diamond: Awesome ZSH Plugins- A list of frameworks, plugins, themes and tutorials for ZSH.

▪️ Managers

  :small_orange_diamond: Midnight Commander- is a visual file manager, licensed under GNU General Public License.
  :small_orange_diamond: ranger- is a VIM-inspired filemanager for the console.
  :small_orange_diamond: nnn- is a tiny, lightning fast, feature-packed file manager.
  :small_orange_diamond: screen- is a full-screen window manager that multiplexes a physical terminal.
  :small_orange_diamond: tmux- is a terminal multiplexer, lets you switch easily between several programs in one terminal.
  :small_orange_diamond: tmux-cssh- is a tool to set comfortable and easy to use functionality, clustering and synchronizing tmux-sessions.

▪️ Text editors

  :small_orange_diamond: vi- is one of the most common text editors on Unix.
  :small_orange_diamond: vim- is a highly configurable text editor.
  :small_orange_diamond: emacs- is an extensible, customizable, free/libre text editor, and more.
  :small_orange_diamond: micro- is a modern and intuitive terminal-based text editor.
  :small_orange_diamond: neovim- is a free open source, powerful, extensible and usable code editor.
  :small_orange_diamond: spacemacs- a community-driven Emacs distribution.
  :small_orange_diamond: spacevim- a community-driven vim distribution.

▪️ Files and directories

  :small_orange_diamond: fd- is a simple, fast and user-friendly alternative to find.
  :small_orange_diamond: ncdu- is an easy to use, fast disk usage analyzer.

▪️ Network

  :small_orange_diamond: PuTTY- is an SSH and telnet client, developed originally by Simon Tatham.
  :small_orange_diamond: Mosh- is a SSH wrapper designed to keep a SSH session alive over a volatile connection.
  :small_orange_diamond: Eternal Terminal- enables mouse-scrolling and tmux commands inside the SSH session.
  :small_orange_diamond: nmap- is a free and open source (license) utility for network discovery and security auditing.
  :small_orange_diamond: zmap- is a fast single packet network scanner designed for Internet-wide network surveys.
  :small_orange_diamond: Rust Scan- to find all open ports faster than Nmap.
  :small_orange_diamond: masscan- is the fastest Internet port scanner, spews SYN packets asynchronously.
  :small_orange_diamond: pbscan- is a faster and more efficient stateless SYN scanner and banner grabber.
  :small_orange_diamond: hping- is a command-line oriented TCP/IP packet assembler/analyzer.
  :small_orange_diamond: mtr- is a tool that combines the functionality of the 'traceroute' and 'ping' programs in a single tool.
  :small_orange_diamond: mylg- utility which combines the functions of the different network probes in one diagnostic tool.
  :small_orange_diamond: netcat- utility which reads and writes data across network connections, using the TCP/IP protocol.
  :small_orange_diamond: socat- utility which transfers data between two objects.
  :small_orange_diamond: tcpdump- is a powerful command-line packet analyzer.
  :small_orange_diamond: tshark- is a tool that allows us to dump and analyze network traffic (wireshark cli).
  :small_orange_diamond: Termshark- is a simple terminal user-interface for tshark.
  :small_orange_diamond: ngrep- is like GNU grep applied to the network layer.
  :small_orange_diamond: netsniff-ng- is a Swiss army knife for your daily Linux network plumbing if you will.
  :small_orange_diamond: sockdump- dump unix domain socket traffic.
  :small_orange_diamond: stenographer- is a packet capture solution which aims to quickly spool all packets to disk.
  :small_orange_diamond: tcpterm- visualize packets in TUI.
  :small_orange_diamond: bmon- is a monitoring and debugging tool to capture networking related statistics and prepare them visually.
  :small_orange_diamond: iptraf-ng- is a console-based network monitoring program for Linux that displays information about IP traffic.
  :small_orange_diamond: vnstat- is a network traffic monitor for Linux and BSD.
  :small_orange_diamond: iPerf3- is a tool for active measurements of the maximum achievable bandwidth on IP networks.
  :small_orange_diamond: ethr- is a Network Performance Measurement Tool for TCP, UDP & HTTP.
  :small_orange_diamond: Etherate- is a Linux CLI based Ethernet and MPLS traffic testing tool.
  :small_orange_diamond: echoip- is a IP address lookup service.
  :small_orange_diamond: Nemesis- packet manipulation CLI tool; craft and inject packets of several protocols.
  :small_orange_diamond: packetfu- a mid-level packet manipulation library for Ruby.
  :small_orange_diamond: Scapy- packet manipulation library; forge, send, decode, capture packets of a wide number of protocols.
  :small_orange_diamond: impacket- is a collection of Python classes for working with network protocols.
  :small_orange_diamond: ssh-audit- is a tool for SSH server auditing.
  :small_orange_diamond: aria2- is a lightweight multi-protocol & multi-source command-line download utility.
  :small_orange_diamond: iptables-tracer- observe the path of packets through the iptables chains.
  :small_orange_diamond: inception- a highly configurable tool to check for whatever you like against any number of hosts.
  :small_orange_diamond: mRemoteNG- a fork of mRemote, multi-tabbed PuTTy on steroids!

▪️ Network (DNS)

  :small_orange_diamond: dnsdiag- is a DNS diagnostics and performance measurement tools.
  :small_orange_diamond: fierce- is a DNS reconnaissance tool for locating non-contiguous IP space.
  :small_orange_diamond: subfinder- is a subdomain discovery tool that discovers valid subdomains for websites.
  :small_orange_diamond: sublist3r- is a fast subdomains enumeration tool for penetration testers.
  :small_orange_diamond: amass- is tool that obtains subdomain names by scraping data sources, crawling web archives, and more.
  :small_orange_diamond: namebench- provides personalized DNS server recommendations based on your browsing history.
  :small_orange_diamond: massdns- is a high-performance DNS stub resolver for bulk lookups and reconnaissance.
  :small_orange_diamond: knock- is a tool to enumerate subdomains on a target domain through a wordlist.
  :small_orange_diamond: dnsperf- DNS performance testing tools.
  :small_orange_diamond: dnscrypt-proxy 2- a flexible DNS proxy, with support for encrypted DNS protocols.
  :small_orange_diamond: dnsdbq- API client providing access to passive DNS database systems.
  :small_orange_diamond: grimd- fast dns proxy, built to black-hole internet advertisements and malware servers.
  :small_orange_diamond: dnstwist- detect typosquatters, phishing attacks, fraud, and brand impersonation.

▪️ Network (HTTP)

  :small_orange_diamond: curl- is a command line tool and library for transferring data with URLs.
  :small_orange_diamond: kurly- is an alternative to the widely popular curl program, written in Golang.
  :small_orange_diamond: HTTPie- is an user-friendly HTTP client.
  :small_orange_diamond: wuzz- is an interactive cli tool for HTTP inspection.
  :small_orange_diamond: h2spec- is a conformance testing tool for HTTP/2 implementation.
  :small_orange_diamond: h2t- is a simple tool to help sysadmins to hardening their websites.
  :small_orange_diamond: htrace.sh- is a simple Swiss Army knife for http/https troubleshooting and profiling.
  :small_orange_diamond: httpstat- is a tool that visualizes curl statistics in a way of beauty and clarity.
  :small_orange_diamond: httplab- is an interactive web server.
  :small_orange_diamond: Lynx- is a text browser for the World Wide Web.
  :small_orange_diamond: Browsh- is a fully interactive, real-time, and modern text-based browser.
  :small_orange_diamond: HeadlessBrowsers- a list of (almost) all headless web browsers in existence.
  :small_orange_diamond: ab- is a single-threaded command line tool for measuring the performance of HTTP web servers.
  :small_orange_diamond: siege- is an http load testing and benchmarking utility.
  :small_orange_diamond: wrk- is a modern HTTP benchmarking tool capable of generating significant load.
  :small_orange_diamond: wrk2- is a constant throughput, correct latency recording variant of wrk.
  :small_orange_diamond: vegeta- is a constant throughput, correct latency recording variant of wrk.
  :small_orange_diamond: bombardier- is a fast cross-platform HTTP benchmarking tool written in Go.
  :small_orange_diamond: gobench- http/https load testing and benchmarking tool.
  :small_orange_diamond: hey- HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll/boom.
  :small_orange_diamond: boom- is a script you can use to quickly smoke-test your web app deployment.
  :small_orange_diamond: SlowHTTPTest- is a tool that simulates some Application Layer Denial of Service attacks by prolonging HTTP.
  :small_orange_diamond: gobuster- is a free and open source directory/file & DNS busting tool written in Go.
  :small_orange_diamond: ssllabs-scan- command-line reference-implementation client for SSL Labs APIs.
  :small_orange_diamond: http-observatory- Mozilla HTTP Observatory cli version.
  :small_orange_diamond: Hurl- is a command line tool to run and test HTTP requests with plain text.

▪️ SSL

  :small_orange_diamond: openssl- is a robust, commercial-grade, and full-featured toolkit for the TLS and SSL protocols.
  :small_orange_diamond: gnutls-cli- client program to set up a TLS connection to some other computer.
  :small_orange_diamond: sslyze- fast and powerful SSL/TLS server scanning library.
  :small_orange_diamond: sslscan- tests SSL/TLS enabled services to discover supported cipher suites.
  :small_orange_diamond: testssl.sh- testing TLS/SSL encryption anywhere on any port.
  :small_orange_diamond: cipherscan- a very simple way to find out which SSL ciphersuites are supported by a target.
  :small_orange_diamond: spiped- is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
  :small_orange_diamond: Certbot- is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server.
  :small_orange_diamond: mkcert- simple zero-config tool to make locally trusted development certificates with any names you'd like.
  :small_orange_diamond: certstrap- tools to bootstrap CAs, certificate requests, and signed certificates.
  :small_orange_diamond: Sublert- is a security and reconnaissance tool to automatically monitor new subdomains.
  :small_orange_diamond: mkchain- open source tool to help you build a valid SSL certificate chain.
  :small_orange_diamond: ssl-cert-check- SSL Certification Expiration Checker.

▪️ Security

  :small_orange_diamond: SELinux- provides a flexible Mandatory Access Control (MAC) system built into the Linux kernel.
  :small_orange_diamond: AppArmor- proactively protects the operating system and applications from external or internal threats.
  :small_orange_diamond: grapheneX- Automated System Hardening Framework.
  :small_orange_diamond: DevSec Hardening Framework- Security + DevOps: Automatic Server Hardening.

▪️ Auditing Tools

  :small_orange_diamond: ossec- actively monitoring all aspects of system activity with file integrity monitoring.
  :small_orange_diamond: auditd- provides a way to track security-relevant information on your system.
  :small_orange_diamond: Tiger- is a security tool that can be use both as a security audit and intrusion detection system.
  :small_orange_diamond: Lynis- battle-tested security tool for systems running Linux, macOS, or Unix-based operating system.
  :small_orange_diamond: LinEnum- scripted Local Linux Enumeration & Privilege Escalation Checks.
  :small_orange_diamond: Rkhunter- scanner tool for Linux systems that scans backdoors, rootkits and local exploits on your systems.
  :small_orange_diamond: PE-sieve- is a light-weight tool that helps to detect malware running on the system.
  :small_orange_diamond: PEASS- privilege escalation tools for Windows and Linux/Unix and MacOS.

▪️ System Diagnostics/Debuggers

  :small_orange_diamond: strace- diagnostic, debugging and instructional userspace utility for Linux.
  :small_orange_diamond: DTrace- is a performance analysis and troubleshooting tool.
  :small_orange_diamond: ltrace- is a library call tracer, used to trace calls made by programs to library functions.
  :small_orange_diamond: ptrace-burrito- is a friendly wrapper around ptrace.
  :small_orange_diamond: perf-tools- performance analysis tools based on Linux perf_events (aka perf) and ftrace.
  :small_orange_diamond: bpftrace- high-level tracing language for Linux eBPF.
  :small_orange_diamond: sysdig- system exploration and troubleshooting tool with first class support for containers.
  :small_orange_diamond: Valgrind- is an instrumentation framework for building dynamic analysis tools.
  :small_orange_diamond: gperftools- high-performance multi-threaded malloc() implementation, plus some performance analysis tools.
  :small_orange_diamond: glances- cross-platform system monitoring tool written in Python.
  :small_orange_diamond: htop- interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.
  :small_orange_diamond: bashtop- Linux resource monitor written in pure Bash.
  :small_orange_diamond: nmon- a single executable for performance monitoring and data analysis.
  :small_orange_diamond: atop- ASCII performance monitor. Includes statistics for CPU, memory, disk, swap, network, and processes.
  :small_orange_diamond: lsof- displays in its output information about files that are opened by processes.
  :small_orange_diamond: FlameGraph- stack trace visualizer.
  :small_orange_diamond: lsofgraph- convert Unix lsof output to a graph showing FIFO and UNIX interprocess communication.
  :small_orange_diamond: rr- is a lightweight tool for recording, replaying and debugging execution of applications.
  :small_orange_diamond: Performance Co-Pilot- a system performance analysis toolkit.
  :small_orange_diamond: hexyl- a command-line hex viewer.
  :small_orange_diamond: Austin- Python frame stack sampler for CPython.

▪️ Log Analyzers

  :small_orange_diamond: angle-grinder- slice and dice log files on the command line.
  :small_orange_diamond: lnav- log file navigator with search and automatic refresh.
  :small_orange_diamond: GoAccess- real-time web log analyzer and interactive viewer that runs in a terminal.
  :small_orange_diamond: ngxtop- real-time metrics for nginx server.

▪️ Databases

  :small_orange_diamond: usql- universal command-line interface for SQL databases.
  :small_orange_diamond: pgcli- postgres CLI with autocompletion and syntax highlighting.
  :small_orange_diamond: mycli- terminal client for MySQL with autocompletion and syntax highlighting.
  :small_orange_diamond: litecli- SQLite CLI with autocompletion and syntax highlighting.
  :small_orange_diamond: mssql-cli- SQL Server CLI with autocompletion and syntax highlighting.
  :small_orange_diamond: OSQuery- is a SQL powered operating system instrumentation, monitoring, and analytics framework.
  :small_orange_diamond: pgsync- sync data from one Postgres database to another.
  :small_orange_diamond: iredis- a terminal client for redis with autocompletion and syntax highlighting.
  :small_orange_diamond: SchemaCrawler- generates an E-R diagram of your database.

▪️ TOR

  :small_orange_diamond: Nipe- script to make Tor Network your default gateway.
  :small_orange_diamond: multitor- a tool that lets you create multiple TOR instances with a load-balancing.

▪️ Messengers/IRC Clients

  :small_orange_diamond: Irssi- is a free open source terminal based IRC client.
  :small_orange_diamond: WeeChat- is an extremely extensible and lightweight IRC client.

▪️ Productivity

  :small_orange_diamond: taskwarrior- task management system, todo list

▪️ Other

  :small_orange_diamond: sysadmin-util- tools for Linux/Unix sysadmins.
  :small_orange_diamond: incron- is an inode-based filesystem notification technology.
  :small_orange_diamond: lsyncd- synchronizes local directories with remote targets (Live Syncing Daemon).
  :small_orange_diamond: GRV- is a terminal based interface for viewing Git repositories.
  :small_orange_diamond: Tig- text-mode interface for Git.
  :small_orange_diamond: tldr- simplified and community-driven man pages.
  :small_orange_diamond: archiver- easily create and extract .zip, .tar, .tar.gz, .tar.bz2, .tar.xz, .tar.lz4, .tar.sz, and .rar.
  :small_orange_diamond: commander.js- minimal CLI creator in JavaScript.
  :small_orange_diamond: gron- make JSON greppable!
  :small_orange_diamond: bed- binary editor written in Go.

GUI Tools   [TOC]

▪️ Terminal emulators

  :small_orange_diamond: Guake- is a dropdown terminal made for the GNOME desktop environment.
  :small_orange_diamond: Terminator- is based on GNOME Terminal, useful features for sysadmins and other users.
  :small_orange_diamond: Kitty- is a GPU based terminal emulator that supports smooth scrolling and images.
  :small_orange_diamond: Alacritty- is a fast, cross-platform, OpenGL terminal emulator.

▪️ Network

  :small_orange_diamond: Wireshark- is the world’s foremost and widely-used network protocol analyzer.
  :small_orange_diamond: Ettercap- is a comprehensive network monitor tool.
  :small_orange_diamond: EtherApe- is a graphical network monitoring solution.
  :small_orange_diamond: Packet Sender- is a networking utility for packet generation and built-in UDP/TCP/SSL client and servers.
  :small_orange_diamond: Ostinato- is a packet crafter and traffic generator.
  :small_orange_diamond: JMeter™- open source software to load test functional behavior and measure performance.
  :small_orange_diamond: locust- scalable user load testing tool written in Python.

▪️ Browsers

  :small_orange_diamond: TOR Browser- protect your privacy and defend yourself against network surveillance and traffic analysis.

▪️ Password Managers

  :small_orange_diamond: KeePassXC- store your passwords safely and auto-type them into your everyday websites and apps.
  :small_orange_diamond: Bitwarden- open source password manager with built-in sync.
  :small_orange_diamond: Vaultwarden- unofficial Bitwarden compatible server written in Rust.

▪️ Messengers/IRC Clients

  :small_orange_diamond: HexChat- is an IRC client based on XChat.
  :small_orange_diamond: Pidgin- is an easy to use and free chat client used by millions.

▪️ Messengers (end-to-end encryption)

  :small_orange_diamond: Signal- is an encrypted communications app.
  :small_orange_diamond: Wire- secure messaging, file sharing, voice calls and video conferences. All protected with end-to-end encryption.
  :small_orange_diamond: TorChat- decentralized anonymous instant messenger on top of Tor Hidden Services.
  :small_orange_diamond: Matrix- an open network for secure, decentralized, real-time communication.

▪️ Text editors

  :small_orange_diamond: Sublime Text- is a lightweight, cross-platform code editor known for its speed, ease of use.
  :small_orange_diamond: Visual Studio Code- an open-source and free source code editor developed by Microsoft.
  :small_orange_diamond: Atom- a hackable text editor for the 21st Century.

Web Tools   [TOC]

▪️ Browsers

  :small_orange_diamond: SSL/TLS Capabilities of Your Browser- test your browser's SSL implementation.
  :small_orange_diamond: Can I use- provides up-to-date browser support tables for support of front-end web technologies.
  :small_orange_diamond: Panopticlick 3.0- is your browser safe against tracking?
  :small_orange_diamond: Privacy Analyzer- see what data is exposed from your browser.
  :small_orange_diamond: Web Browser Security- it's all about Web Browser fingerprinting.
  :small_orange_diamond: How's My SSL?- help a web server developer learn what real world TLS clients were capable of.
  :small_orange_diamond: sslClientInfo- client test (incl TLSv1.3 information).

▪️ SSL/Security

  :small_orange_diamond: SSLLabs Server Test- performs a deep analysis of the configuration of any SSL web server.
  :small_orange_diamond: SSLLabs Server Test (DEV)- performs a deep analysis of the configuration of any SSL web server.
  :small_orange_diamond: ImmuniWeb® SSLScan- test SSL/TLS (PCI DSS, HIPAA and NIST).
  :small_orange_diamond: SSL Check- scan your website for non-secure content.
  :small_orange_diamond: SSL Scanner- analyze website security.
  :small_orange_diamond: CryptCheck- test your TLS server configuration (e.g. ciphers).
  :small_orange_diamond: urlscan.io- service to scan and analyse websites.
  :small_orange_diamond: Report URI- monitoring security policies like CSP and HPKP.
  :small_orange_diamond: CSP Evaluator- allows developers and security experts to check if a Content Security Policy.
  :small_orange_diamond: Useless CSP- public list about CSP in some big players (might make them care a bit more).
  :small_orange_diamond: Why No HTTPS?- top 100 websites by Alexa rank not automatically redirecting insecure requests.
  :small_orange_diamond: TLS Cipher Suite Search- cipher suite search engine.
  :small_orange_diamond: cipherli.st- strong ciphers for Apache, Nginx, Lighttpd, and more. *
  :small_orange_diamond: dhtool- public Diffie-Hellman parameter service/tool.
  :small_orange_diamond: badssl.com- memorable site for testing clients against bad SSL configs.
  :small_orange_diamond: tlsfun.de- registered for various tests regarding the TLS/SSL protocol.
  :small_orange_diamond: CAA Record Helper- generate a CAA policy.
  :small_orange_diamond: Common CA Database- repository of information about CAs, and their root and intermediate certificates.
  :small_orange_diamond: CERTSTREAM- real-time certificate transparency log update stream.
  :small_orange_diamond: crt.sh- discovers certificates by continually monitoring all of the publicly known CT.
  :small_orange_diamond: Hardenize- deploy the security standards.
  :small_orange_diamond: Cipher suite compatibility- test TLS cipher suite compatibility.
  :small_orange_diamond: urlvoid- this service helps you detect potentially malicious websites.
  :small_orange_diamond: security.txt- a proposed standard (generator) which allows websites to define security policies.
  :small_orange_diamond: ssl-config-generator- help you follow the Mozilla Server Side TLS configuration guidelines.
  :small_orange_diamond: TLScan- pure python, SSL/TLS protocol and cipher scanner/enumerator.

▪️ HTTP Headers & Web Linters

  :small_orange_diamond: Security Headers- analyse the HTTP response headers (with rating system to the results).
  :small_orange_diamond: Observatory by Mozilla- set of tools to analyze your website.
  :small_orange_diamond: webhint- is a linting tool that will help you with your site's accessibility, speed, security, and more.

▪️ DNS

  :small_orange_diamond: ViewDNS- one source for free DNS related tools and information.
  :small_orange_diamond: DNSLookup- is an advanced DNS lookup tool.
  :small_orange_diamond: DNSlytics- online DNS investigation tool.
  :small_orange_diamond: DNS Spy- monitor, validate and verify your DNS configurations.
  :small_orange_diamond: Zonemaster- helps you to control how your DNS works.
  :small_orange_diamond: Leaf DNS- comprehensive DNS tester.
  :small_orange_diamond: Find subdomains online- find subdomains for secu



This post first appeared on IT瘾 | IT社区推荐资讯, please read the originial post: here

Share the post

the-book-of-secret-knowledge: A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

×

Subscribe to It瘾 | It社区推荐资讯

Get updates delivered right to your inbox!

Thank you for your subscription

×