Tools

Web services

• dCode

  Cipher encryption / decryption / identifier.

• BugMeNot (not HTTPS)

  Account sharing platform

• Binzb

  Usenet search engine

• Usenet Archives

  Similar to Binzb

• BinSearch

  Similar to Binzb

• DetectMyBrowser

• EFF Cover Your Tracks

  Similar to DetectMyBrowser

• BrowserAudit

  Similar to DetectMyBrowser

• AmIUnique

  Similar to DetectMyBrowser

• IPLeak

  Similar to DetectMyBrowser

• DeviceInfo.me

  Similar to DetectMyBrowser, but much more comprehensive

• WebSocketTest

  Websocket Test

• EmailRep

  Check Email reputation

• Expired Domains

  Expired Domain Name Search Engine

• LeakIX

  Similar to exploit-db

• ThisPersonDoesNotExist

  Generate fake selfies

• DarkSearch

  Onion search engine with clearnet frontend

• Email Privacy Tester

  Check your email security/privacy

• DNSLeakTest

  DNS Leak Test

• EasyCounter

  Website info; daily visits, SEO stats, domain data

• CanaryTokens

  Generate canary/trip tokens

• dehash.me

  Hash encryptor/decryptor

Browser Extensions

• HTTPS Everywhere
• Privacy Badger
• Port Authority
• DecentralEyes

Communication // Messaging

• AnonAddy

  Anonymous Email Forwarding

• Firefox Relay

  Similar to AnonAddy

• SimpleLogin

  Similar to AnonAddy

• 33Mail

  Similar to AnonAddy

• Twilio

  VOIP

• OperationPrivacy VOIP

  Free in-browser VOIP

• Element

  Matrix client

• Signal

  Secure comms; requires phone number to work

• Session

  Privacy & Security oriented messaging app

• HexChat

  FOSS & Cross-platform IRC client

• WebSDR (not HTTPS)

  Use radio receivers from around the world and tune them to your needs

Share

• Tresorit

  Secure file sharing - up to 5 GB

Lists

Lists containing software solutions related to privacy, infosec, opsec or similar. There is a slight overlap between these lists and FBC.

• PrivacyTools

  List of FOSS apps with emphasis on privacy/anonymity

• PrivacyGuides

  Similar to PrivacyTools

OSINT

• UserHunt

  Search social media accounts by username

• OSINT.sh

• Host.io
• KartaView
• Bankrupt11

• OCCRP Aleph

  The global archive of research material for investigative reporting.

• Oh-Shint

  Collection of OSINT web-services

• LocateFamily

  Search 350+ mil of indexed people, addresses, phone numbers

• Fagan Finder

  All search engines/tools in one place

• Small Town Papers (not HTTPS)

  Archive of papers of small US towns

• WayBack Machine

  Webpage archive - search website snapshots

• Sowdust's Facebook Search

• Vehicle History

  Vehicle License Plate Search

• crt.sh

  SSL Certificate Search

• Apeiron

  Phone info lookup

• MailCat

  Find existing email addresses by nickname using API/SMTP checking methods without user notification

• Shodan

  IoT search engine; find open webcams, databases etc.

• OperationPrivacy

  Web app that guides you through data removal, opsec, credit freeze, etc.

• Nitter

  Twitter search engine

• judyrecords

  Search US Court cases

• Scout.tel

  US or Canadian phone number lookup

• Whoseno

  Similar to Scout.tel; type get_token(0) into console to skip timer

• New FB Search

  Gist with Facebook's search query explanation

• RocketReach

  People search

• US Staff

  Employee data of companies across US

• SearchMyBio

  Instagram bio search

Breaches // Leaks

• BreachDirectory
• RaidForums
• Cit0day Email Lookup
• BlackKite

Software

• Re4son Kernel

  Kali Linux for Raspberry Pi

• DeepSound (not HTTPS)

  DeepSound is a steganography tool and audio converter that hides secret data into audio files. The application also enables you to extract secret files directly from audio files or audio CD tracks.

• Sherloq

  An open-source digital image forensic toolset

• Pi-Hole

• Crocodile Hunter

  Crocodile Hunter is a tool to hunt fake eNodeBs, also known commonly as hailstorm, stingray, cell site simulators, or IMSI catchers.

• SmartDeblur

• PBandJ

  PasteBin Crawler

• Photon

  Fast web crawler

• WPScan

  Wordpress vulnerability scanner

• LinkBait

  PHP file used to store browser and connection information on anyone who loads the webpage

• Search-That-Hash

  Searches Hash APIs to crack your hash quickly If hash is not found, automatically pipes into HashCat

• KeePassXC

  Offline password manager

• BitWarden

  Online password manager

• VSCodium

  VSCode without telemetry

• yttool

  Tool for extracting comments or subtitles from youtube video's

• Nexfil

  OSINT tool for finding profiles by username

Cheat Sheets

• OWASP Cheat Sheet (direct download)

Hardware

• HackerWarehouse
• Maltronics
• Lab401
• System76
• Hak5