Security Tools We Actually Use¶

These tools are useful for investigating files, domains, IP addresses and security events.

But think before you upload anything.

These are security research platforms, not private dumping grounds.

Don't upload:

If the material belongs to your school, employer or someone else, ask first.

Tool	What it does
VirusTotal	Analyse files, URLs and hashes using many security engines
Cisco Talos	Threat intelligence and reputation information
AlienVault OTX	Community-driven threat intelligence
ANY.RUN	Interactive malware sandbox
URLScan.io	Inspect what happens when a URL is loaded
Shodan	Search engine for internet-exposed devices
Spur	IP address and infrastructure context
crt.sh	Search certificate transparency data
WhereGoes	Trace URL redirects
WHOIS	Domain registration information
Have I Been Pwned	Check whether an email address appears in known breaches
CyberChef	Decode, transform and analyse data
abuse.ch	Malware and botnet threat intelligence
MACVendors	Identify a device manufacturer from a MAC address
CVSS Calculator	Understand how vulnerability severity scores are calculated

The golden rule

If you don't own it and you don't have permission to test it, don't test it.

Your own devices, your own accounts, deliberately vulnerable labs and CTF platforms are fair game.

Pointing scanners at somebody else's systems because "I was only learning" isn't a defence.