Maltego
Visual link analysis tool for OSINT investigations. Map relationships between people, domains, IPs, and organizations.
Abrir herramienta Maltego (se abre en una pestaña nueva)Centro de Herramientas
Un directorio seleccionado de utilidades y recursos de ciberseguridad para investigación, análisis de redes, privacidad e investigación — con búsqueda y organizado por categoría.
Visual link analysis tool for OSINT investigations. Map relationships between people, domains, IPs, and organizations.
Abrir herramienta Maltego (se abre en una pestaña nueva)Search engine for internet-connected devices. Discover exposed servers, webcams, industrial systems, and IoT devices.
Abrir herramienta Shodan (se abre en una pestaña nueva)Automated OSINT framework with 200+ modules for intelligence gathering on IPs, domains, emails, and names.
Abrir herramienta SpiderFoot (se abre en una pestaña nueva)Email, subdomain, and name harvesting tool. Gathers information from public sources like Google, Bing, and LinkedIn.
Abrir herramienta theHarvester (se abre en una pestaña nueva)Modular web reconnaissance framework written in Python. Supports dozens of OSINT modules and API integrations.
Abrir herramienta Recon-ng (se abre en una pestaña nueva)A curated directory of OSINT tools and resources organized by category and target type.
Abrir herramienta OSINT Framework (se abre en una pestaña nueva)OSINT search tools and resources for social media, usernames, emails, and public records investigation.
Abrir herramienta IntelTechniques (se abre en una pestaña nueva)Analyze suspicious files, URLs, domains, and IPs against 70+ antivirus engines and threat intelligence feeds.
Abrir herramienta VirusTotal (se abre en una pestaña nueva)Open-source threat intelligence platform for sharing, storing, and correlating IOCs and malware samples.
Abrir herramienta MISP (se abre en una pestaña nueva)Open threat exchange platform with 20M+ IOCs contributed by a global community of security researchers.
Abrir herramienta AlienVault OTX (se abre en una pestaña nueva)Global knowledge base of adversary tactics, techniques, and procedures (TTPs) based on real-world observations.
Abrir herramienta MITRE ATT&CK (se abre en una pestaña nueva)AI-powered threat intelligence platform for real-time analysis of threats across the web, dark web, and technical sources.
Abrir herramienta Recorded Future (se abre en una pestaña nueva)Community-driven database of IP addresses reported for abusive behavior, spam, and cyberattacks.
Abrir herramienta AbuseIPDB (se abre en una pestaña nueva)Check the reputation and safety of a URL or website against multiple blacklist engines and threat feeds.
Abrir herramienta URLVoid (se abre en una pestaña nueva)The world's most used penetration testing framework. Exploit development, payload delivery, and post-exploitation.
Abrir herramienta Metasploit (se abre en una pestaña nueva)Industry-standard web application security testing platform for intercepting, scanning, and exploiting web apps.
Abrir herramienta Burp Suite (se abre en una pestaña nueva)Network discovery and security auditing tool. Port scanning, OS detection, service enumeration, and scripting engine.
Abrir herramienta Nmap (se abre en una pestaña nueva)Directory and DNS brute-forcing tool written in Go. Fast enumeration of web directories, subdomains, and virtual hosts.
Abrir herramienta Gobuster (se abre en una pestaña nueva)Fast and flexible online password cracking tool supporting 50+ protocols including SSH, FTP, HTTP, and SMB.
Abrir herramienta Hydra (se abre en una pestaña nueva)Open-source web server scanner that detects dangerous files, outdated software, and misconfigurations.
Abrir herramienta Nikto (se abre en una pestaña nueva)Automated SQL injection and database takeover tool with support for all major database engines.
Abrir herramienta SQLmap (se abre en una pestaña nueva)Interactive online sandbox for real-time malware analysis. Analyze suspicious files and URLs in a safe environment.
Abrir herramienta Any.run (se abre en una pestaña nueva)Open-source automated malware analysis system for dynamic behavioral analysis of suspicious files.
Abrir herramienta Cuckoo Sandbox (se abre en una pestaña nueva)Free malware analysis service using CrowdStrike Falcon Sandbox for in-depth behavioral and static analysis.
Abrir herramienta Hybrid Analysis (se abre en una pestaña nueva)NSA-developed open-source software reverse engineering framework for analyzing compiled code.
Abrir herramienta Ghidra (se abre en una pestaña nueva)Industry-standard interactive disassembler and debugger for binary analysis and malware reverse engineering.
Abrir herramienta IDA Pro (se abre en una pestaña nueva)World's leading network protocol analyzer. Capture and interactively browse network traffic in real time.
Abrir herramienta Wireshark (se abre en una pestaña nueva)Powerful open-source network security monitoring platform for traffic analysis and anomaly detection.
Abrir herramienta Zeek (Bro) (se abre en una pestaña nueva)High-performance open-source IDS/IPS/NSM engine with multi-threading and hardware acceleration.
Abrir herramienta Suricata (se abre en una pestaña nueva)Open-source intrusion prevention system capable of real-time traffic analysis and packet logging.
Abrir herramienta Snort (se abre en una pestaña nueva)Open-source digital forensics platform for analyzing hard drives, smartphones, and evidence in cyber investigations.
Abrir herramienta Autopsy (se abre en una pestaña nueva)Advanced open-source memory forensics framework for analyzing RAM dumps from Windows, Linux, and macOS.
Abrir herramienta Volatility (se abre en una pestaña nueva)Forensic Toolkit — industry-standard digital forensics software for disk imaging, evidence analysis, and reporting.
Abrir herramienta FTK (se abre en una pestaña nueva)SANS Institute forensics toolkit — a Linux distro pre-built with industry-leading incident response and forensics tools.
Abrir herramienta SIFT Workstation (se abre en una pestaña nueva)Full-featured vulnerability scanner and management tool. Identify security weaknesses across your infrastructure.
Abrir herramienta OpenVAS (se abre en una pestaña nueva)World's most widely deployed vulnerability assessment solution for identifying misconfigurations and CVEs.
Abrir herramienta Nessus (se abre en una pestaña nueva)Cloud-based vulnerability management, policy compliance, and web application scanning platform.
Abrir herramienta Qualys (se abre en una pestaña nueva)