Useful Websites

14th June 2019

Virustotal.com test a single file against many virus scanners
ssllabs.com test your browser or protocol support
HaveIBeenPwned.com has your email been in a breach? If you administer a domain you can search for any user in your domain under DomainSearch
HaveIBeenEmotet.com similar to above
mailinator.com disposable email
ifttt.com if this then that, automation
send.firefox.com / plover.io browser based large file transfer
grc.com generate strong passwords, test your firewall, DNS speed test, SecurityNow podcast
distrotest.net test drive linux flavors without downloading anything (offline)
NirSoft.net security utilities galore
browseraudit.com test and compare your browser security
https://xsinator.com/ more browser security testing and stats
internettrafficreport.com where is the slowdown
https://www.cyberdegrees.org/resources/the-big-list/
www.nomoreransom.org Decrypt older ransomware without paying
shodan.io /sensus/binaryEdge: database of open tcp ports per website, useful for determining scope of problem
draw.io useful for creating quick diagrams or flowcharts
qrcode-monkey.com create a qr-code of your Wifi or master LastPass password, print it, put it in your wallet. Then make a qr-code of all your contact details (vCard) and make it your cell phone lock screen.
onlinehashcrack.com weak password hashes are free to crack.
pentest-tools.com has a convenient website scanning tool

accountkiller.com helps delete old accounts and decrease your web footprint. If you have re-used passwords in the past, any website breach can compromise many websites. Better clean up after yourself.

Download Windows ISO files direct from Microsoft without need to jump through the media creation tool hoops. here

unshorten.me will let you expand a shortened URL into its full URL

https://isbgpsafeyet.com determines if your ISP is implementing BGP routing in a secure manner.

Mullvad VPN has a page that checks for DNS information leaks

Proton Mail is UltraSecure, Ultra Private mail. Swiss. Gmail, Yahoo, Outlook all sell your metadata. ProtonMail is free for a 500mb mailbox and still affordable if you need larger.

hunter.io can search the internet for domain email addresses that posted publicly so you can remove them, and hopefully get less spam and not announce your logon naming scheme.

freenom.com free domain names. easy testing using their dns server. change to your public dns server is manual process. USA address works correctly, Canada does not.

intodns.com tests your domain for dns servers etc. can append the name of the domain to test to the end of the url

Zoho Mail when doing a phishing training exercise, i recommend NOT using your main SMTP server as it may get blacklisted. zoho limits to 50emails/3hours/account

bit.ly a link shortener that doesn’t require you to sign up. These links can be inserted into emails when running a phishing test. This can let you quickly run a first campaign but your second campaign will need more official looking links from registered domains.

Online converter – convert video, images, audio and documents for free (online-convert.com)

https://www.cogentco.com/en/looking-glass Looking-glass websites let you use connectivity tools like traceroute and ping from a gui web interface.

http://aka.ms/exrca is a Microsoft site that can run a battery of tests to help diagnose email and Skype problems

https://www.scamvoid.net/ tests a website url for blacklist status, reputation, popularity, how long the site has existed, etc

https://emailspooftest.com/ tests email security, no sign-up required,

https://securityforeveryone.com find problems with your website, free for non-commercial use

talky.io simple video conferencing, and you get to play a little game while you wait for others to join.

gsuite.tools/verify-email email address checker

diskprices.com filter and compare disk prices from many sources

live.sysinternal.com easy live download of M$ tools that you can fetch in scripts as the share is also available over SMB. (restrict SMB plz)

portquiz.net lets you test if a tcp port is allowed out the firewall. or lets you prove that it is

M$ connectivity test tools allows testing email and connectivity

Themed QR Codes

anyflip.com books / Textbooks / etc

Any.run will let you detonate malware in a cloud sandbox. free for non-biz.