Gharib Blog

What is it ?

This instance is dedicated to my posts, experiences and my daily learning or searching across the Internet. I will mention the authors if that posts does not belong to me.

Apr 16, 2025

Subsections of GharibBlog

About

What Do I believe ?

  • The tree of liberty must be refreshed from time to time with blood of patriots and tyrants – Thomas Jefferson –

  • He who would trade liberty for some temporary security deserves neither security nor liberty – Benjamin Franklin –

  • Democracy is two wolves and a lamb voting on what to have for lunch. Liberty is a well-armed lamb contesting the vote – Benjamin Franklin –

  • Freedom of speech is far more important the content of the speech – Voltaire –

Who am I ?

Hi 👋, I’m Alireza Gharib Software Developer Passionate, Motivated and spontaneous developer, active and disciplined in learning new technologies and trying to be up to date 🙂❤️

  • 📄 Know about my experiences and Skills My Online CV

  • 🔭 I’m currently working on Cybersecurity and DevOps

  • 🌱 I’m currently learning Rust and Cybersecurity

  • 👯 I’m looking to collaborate on any type of Golang Projects

  • 🐳 My Docker Hub Page AlirezaGharib

  • 👨‍💻 My Personal Website AlirezaGharib

  • 📝 Look at my LinkedIn Account to see my Experiences, Skills & Certifications linkedin

  • 🤩 My HackerRank Profile link

  • 💬 Ask me about Golang, Rust, Cybersecuritye

  • 📫 How to reach me [email protected] and [email protected]

  • 😍 Take a look at my telegram channel if you are a Geek Invite Link 😃

  • ❤️ I am not programming for money, that’s a humble goal. I am programming because I LOVE IT, LIVE FOR IT

Linux

Everything about Unix and GNU/Linux operating systems.

Apr 16, 2025

Subsections of Linux

du command

Working with du command in linux efficiently

1. Find the Largest Directories (Sorted)

sudo du -ahx / | sort -rh | head -20
  • -a → Show both files and directories
  • -h → Human-readable sizes (e.g., MB, GB)
  • -x → Stay on the same filesystem (avoid mounted drives)
  • sort -rh → Sort by size, largest first
  • head -20 → Show top 20 largest directories/files

2. Find the Largest Directories Only (Excluding Files)

sudo du -hx --max-depth=3 / | sort -rh | head -20
  • --max-depth=3 → Limits output to top 3 levels for better readability

3. Find the Largest Files (Over 500MB)

sudo find / -type f -size +500M -exec du -h {} + | sort -rh | head -20
  • -type f → Only files
  • -size +500M → Files larger than 500MB
  • du -h → Show file sizes in human-readable format

4. Exclude Certain Directories (Like /proc, /sys, etc.)

sudo du -ahx --exclude={/proc,/sys,/dev,/run,/snap,/tmp,/mnt,/media} / | sort -rh | head -20
  • This avoids system directories that don’t consume real disk space.

5. Find the Largest Users (Disk Usage by User)

sudo du -sh /home/* 2>/dev/null
  • This shows how much each user is consuming in /home.

6. Save Output to a File

If you want to analyze later:

sudo du -ahx / | sort -rh > large_files.txt

Then open it:

less large_files.txt

Next Steps After Finding Large Files:

  1. Check logs:

    sudo du -sh /var/log/*
    • You can clear logs with:
      sudo journalctl --vacuum-time=7d  # Keep logs for 7 days
  2. Check package cache:

    sudo du -sh /var/cache/apt
    • Clean it with:
      sudo apt clean
  3. Check old kernels:

    dpkg --list | grep linux-image
    • Remove old ones (except the current):
      sudo apt remove --purge linux-image-OLD-VERSION

Essential Linux Security Tools

Essential Linux Security Tools for Kali Linux

Introduction

Linux provides a vast collection of security tools for penetration testing, network analysis, and system hardening. This guide covers essential tools with installation steps and example usage.


🔎 Network Scanning and Enumeration

1️⃣ Nmap - Network Mapper

Nmap is a powerful tool for discovering hosts and services on a network.

Installation:

sudo apt update && sudo apt install nmap -y

Basic Usage:

  • Scan a single host:
    nmap <target-ip>
  • Scan a subnet:
    nmap 192.168.1.0/24
  • Detect OS and services:
    nmap -A <target-ip>

📡 Packet Analysis

2️⃣ Wireshark - Network Traffic Analysis

Wireshark captures and inspects network traffic in real time.

Installation:

sudo apt install wireshark -y

Run Wireshark:

wireshark

Capture packets via CLI:

sudo tshark -i eth0

🎯 Exploitation Frameworks

3️⃣ Metasploit - Penetration Testing Framework

Metasploit is a tool for discovering, exploiting, and validating vulnerabilities.

Installation:

sudo apt install metasploit-framework -y

Basic Usage:

msfconsole
use exploit/windows/smb/ms17_010_eternalblue
set RHOSTS <target-ip>
exploit

🔑 Password Cracking

4️⃣ Hashcat - GPU-Accelerated Password Cracking

Hashcat is a high-speed password recovery tool.

Installation:

sudo apt install hashcat -y

Crack a hash:

hashcat -m 0 -a 0 hashes.txt rockyou.txt

5️⃣ John the Ripper - Password Recovery

John the Ripper is another tool for brute-force password attacks.

Installation:

sudo apt install john -y

Crack a password hash:

john --wordlist=/usr/share/wordlists/rockyou.txt hashes.txt

🛡 System Hardening

6️⃣ Lynis - Security Auditing

Lynis performs system audits to detect security weaknesses.

Installation:

sudo apt install lynis -y

Run a system audit:

sudo lynis audit system

7️⃣ Fail2Ban - Brute Force Protection

Fail2Ban monitors logs and bans IPs after multiple failed login attempts.

Installation:

sudo apt install fail2ban -y

Enable and start Fail2Ban:

sudo systemctl enable --now fail2ban

🔥 Firewall and Intrusion Detection

8️⃣ UFW - Uncomplicated Firewall

UFW is a simple tool for managing iptables firewall rules.

Installation:

sudo apt install ufw -y

Basic Firewall Rules:

  • Enable UFW:
    sudo ufw enable
  • Allow SSH:
    sudo ufw allow ssh
  • Check firewall status:
    sudo ufw status

9️⃣ Suricata - Network Intrusion Detection System (IDS)

Suricata is an advanced intrusion detection system.

Installation:

sudo apt install suricata -y

Start Suricata:

sudo systemctl enable --now suricata

🕵️ Rootkit Detection

🔟 Chkrootkit - Rootkit Scanner

Chkrootkit scans the system for known rootkits.

Installation:

sudo apt install chkrootkit -y

Run a scan:

sudo chkrootkit

1️⃣1️⃣ Rkhunter - Rootkit Hunter

Rkhunter detects rootkits, backdoors, and local exploits.

Installation:

sudo apt install rkhunter -y

Scan for rootkits:

sudo rkhunter --check

Conclusion

These tools help enhance Linux security, detect vulnerabilities, and prevent attacks. Regularly updating and using these tools can significantly improve your system’s defense against cyber threats.

🚀 Stay secure and keep learning!

Iphone storage on Linux

Iphone storage on Linux

  • On Debian and Ubuntu use the following command sudo apt install usbmuxd libimobiledevice6 libimobiledevice-utils ifuse

  • On Fedora or RHEL sudo dnf install libimobiledevice ifuse usbmuxd

Kali Essential Security

Hardening Kali Linux is essential for maintaining security, especially since it is a penetration testing distro that can be a target for attackers.


**0. Change kali-rolling to kali-last-snapshot

It is not explicitly associated with security but it affects it implicitly.

In addition to this it affects the stability of whole system.

deb https://kali.download kali-last-snapshot <keep others here>

1. Update and Upgrade Regularly

Ensure your system is always updated with the latest security patches.

sudo apt update && sudo apt full-upgrade -y

For kernel updates:

sudo apt dist-upgrade -y

Remove unnecessary packages:

sudo apt autoremove -y && sudo apt clean

2. Secure User Accounts and Authentication

Disable Root Login

Kali uses kali as the default user. Ensure root login is disabled.

sudo passwd -l root

Use Strong Passwords

Use a strong password or configure password complexity policies:

sudo apt install libpam-pwquality
sudo nano /etc/security/pwquality.conf

Modify:

minlen = 12
dcredit = -1
ucredit = -1
lcredit = -1
ocredit = -1

Enable Two-Factor Authentication (2FA)

sudo apt install libpam-google-authenticator
google-authenticator

Configure /etc/pam.d/sshd:

auth required pam_google_authenticator.so

Restart SSH:

sudo systemctl restart ssh

3. Configure SSH Securely

Edit SSH config:

sudo nano /etc/ssh/sshd_config

Modify:

PermitRootLogin no
PasswordAuthentication no
PermitEmptyPasswords no
UsePAM yes
MaxAuthTries 3
AllowUsers your_username

Restart SSH:

sudo systemctl restart ssh

4. Enable Firewall (UFW)

sudo apt install ufw -y
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 22/tcp  # If using SSH
sudo ufw enable
sudo ufw status verbose

5. Enable AppArmor or SELinux

AppArmor (default in Kali):

sudo apt install apparmor apparmor-profiles apparmor-utils -y
sudo systemctl enable --now apparmor

For SELinux (optional):

sudo apt install selinux-basics selinux-policy-default auditd -y
sudo selinux-activate
sudo reboot

6. Configure Automatic Security Updates

Edit:

sudo nano /etc/apt/apt.conf.d/20auto-upgrades

Add:

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

7. Remove Unnecessary Services

List enabled services:

systemctl list-unit-files --type=service | grep enabled

Disable unneeded ones:

sudo systemctl disable avahi-daemon
sudo systemctl disable bluetooth
sudo systemctl disable cups

8. Harden Networking

Disable IPv6 (if not needed)

Edit GRUB:

sudo nano /etc/default/grub

Modify:

GRUB_CMDLINE_LINUX="ipv6.disable=1"

Update GRUB:

sudo update-grub && sudo reboot

Enable SYN Flood Protection

echo "net.ipv4.tcp_syncookies = 1" | sudo tee -a /etc/sysctl.conf

Disable ICMP Responses (Optional)

echo "net.ipv4.icmp_echo_ignore_all = 1" | sudo tee -a /etc/sysctl.conf

Apply changes:

sudo sysctl -p

9. Secure Bootloader

Prevent unauthorized access by setting a GRUB password:

sudo grub-mkpasswd-pbkdf2

Copy the generated hash and add it to /etc/grub.d/40_custom:

sudo nano /etc/grub.d/40_custom

Add:

set superusers="root"
password_pbkdf2 root <hashed-password>

Update GRUB:

sudo update-grub

10. Use Encrypted Disk or LUKS for Sensitive Data

Encrypt a partition:

sudo cryptsetup luksFormat /dev/sdX
sudo cryptsetup luksOpen /dev/sdX secure_data

For full disk encryption, use LUKS during installation.


11. Install an Intrusion Detection System (IDS)

AIDE (File Integrity Monitoring)

sudo apt install aide -y
sudo aideinit
sudo mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db

Check system integrity:

sudo aide --check

Tripwire (Alternative IDS)

sudo apt install tripwire -y

Initialize and configure rules.


12. Harden Browser and Online Privacy

  • Use Firefox with NoScript and uBlock Origin.
  • Enable DNS over HTTPS (DoH) in Firefox.
  • Configure Tor and VPN for anonymous browsing.

13. Secure Logging and Monitoring

Enable Log Rotation

sudo nano /etc/logrotate.conf

Ensure logs are rotated and archived.

Use AuditD for Logging

sudo apt install auditd -y
sudo systemctl enable --now auditd

Check logs:

sudo ausearch -m avc

14. Restrict USB Access (Optional)

To disable USB storage:

echo "blacklist usb-storage" | sudo tee /etc/modprobe.d/usb-storage.conf

Apply changes:

sudo update-initramfs -u && sudo reboot

15. Physical Security Measures

  • Disable unattended access (lock screen with Ctrl + Alt + L).
  • Use BIOS/UEFI password.
  • Disable booting from USB/CD in BIOS.

16. Sandboxing and Isolation

Firejail for Application Isolation

sudo apt install firejail -y
firejail --seccomp firefox

17. Encrypt Swap and TMP

Edit /etc/fstab:

sudo nano /etc/fstab

Add:

tmpfs /tmp tmpfs defaults,noexec,nosuid 0 0

For encrypted swap:

sudo apt install cryptsetup -y
sudo cryptsetup luksFormat /dev/sdX
sudo cryptsetup luksOpen /dev/sdX swap
mkswap /dev/mapper/swap
swapon /dev/mapper/swap

18. Remove Unnecessary Tools

Since Kali comes with many tools, remove what you don’t use:

sudo apt remove wireshark metasploit-framework -y

19. Enable MAC Address Randomization

For better anonymity:

sudo nano /etc/NetworkManager/conf.d/wifi_scan-rand-mac.conf

Add:

[device]
wifi.scan-rand-mac-address=yes

Restart NetworkManager:

sudo systemctl restart NetworkManager

20. Use a Hardened Kernel (Optional)

Consider using the grsecurity or linux-hardened kernel.


Disabling gnome-tracker

Disabling GNOME Tracker and Other Info

=======================================

GNOME’s tracker is a CPU and privacy hog. There’s a pretty good case as to why it’s neither useful nor necessary here: http://lduros.net/posts/tracker-sucks-thanks-tracker/

After discovering it chowing 2 cores, I decided to go about disabling it.

Directories


~/.cache/tracker
~/.local/share/tracker

After wiping and letting it do a fresh index on my almost new desktop, the total size of each of these directories was a whopping 3.9 GB!

Startup Files


On my Ubuntu GNOME setup, I found the following files:

$ ls  /etc/xdg/autostart/tracker-*
/etc/xdg/autostart/tracker-extract.desktop
/etc/xdg/autostart/tracker-miner-fs.desktop
/etc/xdg/autostart/tracker-store.desktop
/etc/xdg/autostart/tracker-miner-apps.desktop
/etc/xdg/autostart/tracker-miner-user-guides.desktop

You can disable these by adding Hidden=true to them. It’s best done in your local .config directory because 1) you don’t need sudo and 2) you are pretty much guaranteed that your changes won’t be blown away by an update.

The tracker Binary


Running tracker will give you a vast array of tools to check on tracker and manage its processes.

$ tracker
usage: tracker [--version] [--help]
               <command> [<args>]

Available tracker commands are:
   daemon    Start, stop, pause and list processes responsible for indexing content
   info      Show information known about local files or items indexed
   index     Backup, restore, import and (re)index by MIME type or file name
   reset     Reset or remove index and revert configurations to defaults
   search    Search for content indexed or show content by type
   sparql    Query and update the index using SPARQL or search, list and tree the ontology
   sql       Query the database at the lowest level using SQL
   status    Show the indexing progress, content statistics and index state
   tag       Create, list or delete tags for indexed content

See 'tracker help <command>' to read about a specific subcommand.

Non-Invasive Disable Cheat Sheet


This disables everything but tracker-store, which even though it has a .desktop file, seems tenacious and starts up anyway. However, nothing gets indexed.

tracker daemon -t
cd ~/.config/autostart
cp -v /etc/xdg/autostart/tracker-*.desktop ./
for FILE in tracker-*.desktop; do echo Hidden=true >> $FILE; done
rm -rf ~/.cache/tracker ~/.local/share/tracker

Note that tracker daemon -t is for graceful termination. If you are having issues terminating processes or just want to take your frustration out, tracker daemon -k immediately kills all processes.

After this is done, tracker-store will still start on the next boot. However, nothing will be indexed. Your disk and CPU will be better for wear.

$ tracker status
Currently indexed: 0 files, 0 folders
Remaining space on database partition: 123 GB (78.9%)
All data miners are idle, indexing complete

Other References


Security

Everything about security and cybersecurity.

Apr 15, 2025

Subsections of Security

Mail Essential Security

Mail-Sec

SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting & Conformance) are essential email authentication protocols that work together to improve email security. Here’s a breakdown of their full security benefits:

1. SPF (Sender Policy Framework)

  • Purpose: SPF helps prevent email spoofing by allowing domain owners to specify which mail servers are authorized to send emails on behalf of their domain.
  • Security Benefits:
    • Reduces Email Spoofing: SPF prevents attackers from sending fraudulent emails that appear to come from a trusted domain by verifying the sending server’s IP address against the authorized list.
    • Protects Against Phishing: Since SPF helps ensure that only legitimate mail servers can send emails, it reduces the likelihood of phishing emails that appear to come from a trusted source.
    • Improves Deliverability: Legitimate emails are less likely to be marked as spam or rejected, improving the overall email deliverability rate.

2. DKIM (DomainKeys Identified Mail)

  • Purpose: DKIM adds a cryptographic signature to email headers, allowing the recipient to verify that the message has not been tampered with and that it comes from the claimed sender.
  • Security Benefits:
    • Message Integrity: DKIM ensures that the content of the email has not been altered in transit. If an email is tampered with, the DKIM signature will be invalid, alerting the recipient.
    • Authentication of Sender: By verifying that the DKIM signature matches the sender’s domain, DKIM authenticates the legitimacy of the message and helps protect against email impersonation.
    • Enhanced Trust: With DKIM in place, recipients can trust that the email was sent by the domain owner and has not been tampered with, reducing the risk of impersonation and fraud.

3. DMARC (Domain-based Message Authentication, Reporting & Conformance)

  • Purpose: DMARC builds on SPF and DKIM by adding a policy framework that specifies how email receivers should handle emails that fail SPF or DKIM checks, and it provides reporting mechanisms for domain owners.
  • Security Benefits:
    • Policy Enforcement: DMARC allows domain owners to specify whether emails that fail SPF or DKIM checks should be quarantined, rejected, or allowed through. This gives domain owners more control over how their domain is used in email communications.
    • Reduces Spoofing and Phishing: By aligning SPF and DKIM with the “From” domain in the email, DMARC ensures that malicious actors cannot spoof the domain, making phishing and impersonation attacks less likely.
    • Visibility and Reporting: DMARC provides reporting tools that help domain owners monitor email activity and identify any abuse of their domain. This gives them visibility into who is sending emails on behalf of their domain, and allows them to take corrective actions if necessary.
    • Increased Trust for Recipients: By implementing DMARC, organizations demonstrate to email recipients that they take email security seriously, leading to better trust and higher engagement with their emails.
    • Helps Prevent Brand Abuse: By preventing unauthorized use of an organization’s domain in email communications, DMARC protects against reputational damage caused by fraudulent emails that impersonate the brand.

Combined Security Benefits of SPF, DKIM, and DMARC

  • Stronger Authentication: Together, SPF, DKIM, and DMARC provide a multi-layered approach to email authentication, greatly reducing the risk of unauthorized use of your domain for malicious purposes.
  • Improved Email Security: The combination of these protocols prevents a wide range of email-based attacks, including phishing, spoofing, and man-in-the-middle attacks.
  • Enhanced Email Deliverability: Emails that pass SPF, DKIM, and DMARC checks are less likely to be flagged as spam or rejected by receiving mail servers, improving the chance that legitimate emails are delivered to recipients’ inboxes.
  • Global Protection: By enforcing these protocols, you help protect your domain from being exploited across the global email ecosystem, reducing the potential for large-scale attacks like business email compromise (BEC).

Summary

By implementing SPF, DKIM, and DMARC, organizations can significantly enhance their email security posture. These protocols work in tandem to authenticate the sender, protect the integrity of the email, enforce policies on unauthenticated messages, and provide valuable insights through reporting, making them essential for any organization concerned with email fraud and abuse.

DevOps

Everything about DevOps tools and methods.

Apr 12, 2025

Subsections of DevOps

Install nTopNG on Linux

nTopNG

Follow the provided commands to install ntopng on your system

Ubuntu

apt-get install software-properties-common wget
add-apt-repository universe
wget https://packages.ntop.org/apt-stable/xx.yy/all/apt-ntop-stable.deb
apt install ./apt-ntop-stable.deb

Debian

Before to install make sure to edit /etc/apt/sources.list and add “contrib” at the end of each line that begins with deb and deb-src.

codename could be bullseye, bookworm or buster.

wget https://packages.ntop.org/apt-stable/<codename>/all/apt-ntop-stable.deb
apt install ./apt-ntop-stable.deb

Installation

Note that ntopng must not be installed together with nedge. Remove ntopng before installing nedge.

nTopNG

apt-get clean all
apt-get update
apt-get install pfring-dkms ntopng pfring-drivers-zc-dkms

nEdge

apt-get install nedge

Sample nTopNG Configuration

path is /etc/ntopng/ntopng.conf

#         The  configuration  file is similar to the command line, with the exception that an equal
#        sign '=' must be used between key and value. Example:  -i=p1p2  or  --interface=p1p2  For
#        options with no value (e.g. -v) the equal is also necessary. Example: "-v=" must be used.
#
#
#       -G|--pid-path
#        Specifies the path where the PID (process ID) is saved. This option is ignored when
#        ntopng is controlled with systemd (e.g., service ntopng start).
#
-G=/var/run/ntopng.pid
#
#       -e|--daemon
#        This  parameter  causes ntop to become a daemon, i.e. a task which runs in the background
#        without connection to a specific terminal. To use ntop other than as a casual  monitoring
#        tool, you probably will want to use this option. This option is ignored when ntopng is
#        controlled with systemd (e.g., service ntopng start)
#
# -e=
#
#       -i|--interface
#        Specifies  the  network  interface or collector endpoint to be used by ntopng for network
#        monitoring. On Unix you can specify both the interface name  (e.g.  lo)  or  the  numeric
#        interface id as shown by ntopng -h. On Windows you must use the interface number instead.
#        Note that you can specify -i multiple times in order to instruct ntopng to create  multi-
#        ple interfaces.
#
# -i=eth1
# -i=eth2
#
#       -w|--http-port
#        Sets the HTTP port of the embedded web server.
#
-w=3002
#
#       -m|--local-networks
#        ntopng determines the ip addresses and netmasks for each active interface. Any traffic on
#        those  networks  is considered local. This parameter allows the user to define additional
#        networks and subnetworks whose traffic is also considered local in  ntopng  reports.  All
#        other hosts are considered remote. If not specified the default is set to 192.168.1.0/24.
#
#        Commas  separate  multiple  network  values.  Both netmask and CIDR notation may be used,
#        even mixed together, for instance "131.114.21.0/24,10.0.0.0/255.0.0.0".
#
# -m=10.10.123.0/24,10.10.124.0/24
#
#       -n|--dns-mode
#        Sets the DNS address resolution mode: 0 - Decode DNS responses  and  resolve  only  local
#        (-m)  numeric  IPs  1  -  Decode DNS responses and resolve all numeric IPs 2 - Decode DNS
#        responses and don't resolve numeric IPs 3 - Don't decode DNS responses and don't  resolve
#
# -n=1
#
#       -S|--sticky-hosts
#        ntopng  periodically purges idle hosts. With this option you can modify this behaviour by
#        telling ntopng not to purge the hosts specified by -S. This parameter requires  an  argu-
#        ment  that  can  be  "all"  (Keep  all hosts in memory), "local" (Keep only local hosts),
#        "remote" (Keep only remote hosts), "none" (Flush hosts when idle).
#
# -S=
#
#       -d|--data-dir
#        Specifies the data directory (it must be writable by the user that is executing ntopng).
#
# -d=/var/lib/ntopng
#
#       -q|--disable-autologout
#        Disable web interface logout for inactivity.
#
# -q=
#
# Define nDPI custom protocols
#
#--ndpi-protocols=/etc/ntopng/custom_protocols.txt
# Use prefix due to nginx proxy
#--http-prefix="/ntopng"

# Everybody's admin
#--disable-login=1

# Do not resolve any names
--dns-mode=3

# Limit memory usage
--max-num-flows=10000
--max-num-hosts=10000
--community

ARM64 Images

sudo docker run --privileged --restart=always -d -p 3002:3000 --net=host ntop/ntopng_arm64.dev:latest -i eth0

Run FreshRSS With Docker-Compose

FreshRSS

FreshRSS is a self-hosted RSS and Atom feed aggregator. It is lightweight, easy to work with, powerful, and customizable.

Installation

Install Docker and Docker-Compose based on the digitalocean guides on your linux server.

Docker Compose File

version: "2.4"

services:
  freshrss-db:
    image: postgres:17
    container_name: freshrss-db
    hostname: freshrss-db
    restart: unless-stopped
    logging:
      options:
        max-size: 10m
    volumes:
      - ./db/:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: ${DB_BASE}
      POSTGRES_USER: ${DB_USER}
      POSTGRES_PASSWORD: ${DB_PASSWORD}
    command:
      # Examples of PostgreSQL tuning.
      # https://wiki.postgresql.org/wiki/Tuning_Your_PostgreSQL_Server
      # When in doubt, skip and stick to default PostgreSQL settings.
      - -c
      - shared_buffers=1GB
      - -c
      - work_mem=32MB

  freshrss:
    image: freshrss/freshrss:latest
    # Optional build section if you want to build the image locally:
#    build:
      # Pick #latest (stable release) or #edge (rolling release) or a specific release like #1.21.0
#      context: https://github.com/FreshRSS/FreshRSS.git#latest
#      dockerfile: Docker/Dockerfile-Alpine
    container_name: freshrss
    hostname: freshrss
    restart: unless-stopped
    depends_on:
      - freshrss-db
    logging:
      options:
        max-size: 10m
    volumes:
      - ./data/:/var/www/FreshRSS/data/
      - ./extensions/:/var/www/FreshRSS/extensions/
#      - config.custom.php:/var/www/FreshRSS/data/config.custom.php
#      - config-user.custom.php:/var/www/FreshRSS/data/config-user.custom.php
    ports:
      - "127.0.0.1:80:80"
    environment:
      TZ: Asia/Tehran
      CRON_MIN: '3,33'
      FRESHRSS_INSTALL: |-
        --api-enabled
        --base-url ${BASE_URL}
        --db-base ${DB_BASE}
        --db-host ${DB_HOST}
        --db-password ${DB_PASSWORD}
        --db-type pgsql
        --db-user ${DB_USER}
        --default_user admin
        --language en
        --allow-anonymous
        --allow-robots        
      FRESHRSS_USER: |-
        --api-password ${ADMIN_API_PASSWORD}
        --email ${ADMIN_EMAIL}
        --language en
        --password ${ADMIN_PASSWORD}
        --user admin        

Reverse-proxy

If you want to expose your service for others use reverse-proxy like Nginx with TLS to prevent from being compromised.

Nov 18, 2024

SysAdmin Tools

Sysadmin Tools

A curated list of amazingly Free and Open-Source sysadmin resources.


Table of contents


Software

Automation

Build automation.

  • Apache Ant - Automation build tool, similar to make, a library and command-line tool whose mission is to drive processes described in build files as targets and extension points dependent upon each other. (Source Code) Apache-2.0 Java
  • Apache Maven - Build automation tool mainly for Java. A software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project’s build, reporting and documentation from a central piece of information. (Source Code) Apache-2.0 Java
  • Bazel - A fast, scalable, multi-language and extensible build system. Used by Google. (Source Code) Apache-2.0 Java
  • Bolt - You can use Bolt to run one-off tasks, scripts to automate the provisioning and management of some nodes, you can use Bolt to move a step beyond scripts, and make them shareable. (Source Code) Apache-2.0 Ruby
  • GNU Make - The most popular automation build tool for many purposes, make is a tool which controls the generation of executables and other non-source files of a program from the program’s source files. (Source Code) GPL-3.0 C
  • Gradle - Another build automation system. (Source Code) Apache-2.0 Groovy/Java
  • Rake - Build automation tool similar to Make, written in and extensible in Ruby. (Source Code) MIT Ruby

Backups

Backup software.

  • Amanda - Backup and archive many computers on a network to disk, tape changer/drive or cloud storage. (Source Code) MIT C
  • Backupninja - Lightweight, extensible meta-backup system, provides a centralized way to configure and coordinate many different backup utilities. GPL-2.0 Shell
  • BackupPC - High-performance, enterprise-grade system for backing up to a server’s disk.. (Source Code) GPL-3.0 Perl
  • Bareos - Cross-network backup solution which preserves, archives, and recovers data from all major operating systems. (Source Code) AGPL-3.0 C++/C
  • Barman - Backup and Recovery Manager for PostgreSQL. (Source Code) GPL-3.0 Python
  • BorgBackup - Deduplicating archiver with compression and authenticated encryption. (Source Code) BSD-3-Clause Python
  • Burp - Network backup and restore program. (Source Code) AGPL-3.0 C
  • Dar - Which stands for Disk ARchive, is a robust and rich featured archiving and backup software of the tar style. (Source Code) GPL-2.0 C++
  • Duplicati - Backup client that securely stores encrypted, incremental, compressed backups on cloud storage services and remote file servers. (Source Code) LGPL-2.1 C#
  • Duplicity - Encrypted bandwidth-efficient backup using the rsync algorithm. (Source Code) GPL-2.0 Python
  • Proxmox Backup Server - Proxmox Backup Server is an enterprise-class, client-server backup solution thatis capable of backing up virtual machines, containers, and physical hosts. (Source Code) GPL-3.0 Rust
  • rclone - Command-line program to sync files and directories to and from different cloud storage providers.. (Source Code) MIT Go
  • Rdiff-backup - Reverse differential backup tool, over a network or locally. (Source Code) GPL-2.0 Python
  • Restic - Easy, fast, verifiable, secure and efficient remote backup tool. (Source Code) BSD-2-Clause Go
  • Rsnapshot - Filesystem snapshot utility based on rsync. (Source Code) GPL-2.0 Perl
  • Shield - A pluggable architecture for backup and restore of database systems. MIT Go
  • UrBackup - Client/Server Open Source Network Backup for Windows, MacOS and Linux. (Source Code) AGPL-3.0 C/C++

Build and software organization tools

Build and software organization tools.

  • EasyBuild - EasyBuild builds software and modulefiles for High Performance Computing (HPC) systems in an efficient way. (Source Code) GPL-2.0 Python
  • Environment Modules - Environment Modules provides for the dynamic modification of a user’s environment via modulefiles. (Source Code) GPL-2.0 Tcl
  • Lmod - Lmod is a Lua based module system that easily handles the MODULEPATH Hierarchical problem. (Source Code) MIT Lua
  • Spack - A flexible package manager that supports multiple versions, configurations, platforms, and compilers. (Source Code) MIT/Apache-2.0 Python

ChatOps

Conversation-driven development and management.

_See also: /r/chatops*

  • Eggdrop - The oldest Internet Relay Chat (IRC) bot still in active development. (Source Code) GPL-2.0 C
  • Errbot - Plugin based chatbot designed to be easily deployable, extensible and maintainable. (Source Code) GPL-3.0 Python
  • Hubot - A customizable, life embetterment robot. (Source Code) MIT Nodejs

Configuration Management

Configuration management (CM) is a systems engineering process for establishing and maintaining consistency of a product’s performance, functional, and physical attributes with its requirements, design, and operational information throughout its life.

  • Ansible - Provisioning, configuration management, and application-deployment tool. (Source Code) GPL-3.0 Python
  • CFEngine - Configuration management system for automated configuration and maintenance of large-scale computer systems. (Source Code) GPL-3.0 C
  • Chef - Configuration management tool using a pure-Ruby, domain-specific language (DSL) for writing system configuration “recipes”. (Source Code) Apache-2.0 Ruby
  • Puppet - Software configuration management tool which includes its own declarative language to describe system configuration. (Source Code) Apache-2.0 Ruby/C
  • Rudder - Scalable and dynamic configuration management system for patching, security & compliance, based on CFEngine. (Source Code) GPL-3.0 Scala
  • Salt - Event-driven IT automation, remote task execution, and configuration management software. (Source Code) Apache-2.0 Python

Configuration Management Database

Configuration management database (CMDB) software.

  • Collins - At Tumblr, it’s the infrastructure source of truth and knowledge. (Source Code) Apache-2.0 Docker/Scala
  • i-doit - IT Documentation and CMDB. AGPL-3.0 PHP
  • iTop - Complete ITIL web based service management tool. (Source Code) AGPL-3.0 PHP
  • netbox - IP address management (IPAM) and data center infrastructure management (DCIM) tool. (Demo, Source Code) Apache-2.0 Python

Continuous Integration & Continuous Deployment

Continuous integration/deployment software.

  • Buildbot - Python-based toolkit for continuous integration. (Source Code) GPL-2.0 Python
  • CDS - Enterprise-Grade Continuous Delivery & DevOps Automation Open Source Platform. (Source Code) BSD-3-Clause Go
  • Concourse - Concourse is a CI tool that treats pipelines as first class objects and containerizes every step along the way. (Demo, Source Code) Apache-2.0 Go
  • drone - Drone is a Continuous Delivery platform built on Docker, written in Go. (Source Code) Apache-2.0 Go
  • Factor - Programmatically define and run workflows to connect configuration management, source code management, build, continuous integration, continuous deployment and communication tools. (Source Code) MIT Ruby
  • GitLab CI - Gitlab’s built-in, full-featured CI/CD solution. (Source Code) MIT Ruby
  • GoCD - Continuous delivery server. (Source Code) Apache-2.0 Java/Ruby
  • Jenkins - Continuous Integration Server. (Source Code) MIT Java
  • Laminar - Fast, lightweight, simple and flexible Continuous Integration. (Source Code) GPL-3.0 C++
  • PHP Censor - Open source self-hosted continuous integration server for PHP projects. BSD-2-Clause PHP
  • PHPCI - Free and open source continuous integration specifically designed for PHP. (Source Code) BSD-2-Clause PHP
  • Strider - Open Source Continuous Deployment / Continuous Integration platform. (Source Code) MIT Nodejs
  • werf - Open Source CI/CD tool for building Docker images and deploying to Kubernetes via GitOps. (Source Code) Apache-2.0 Go
  • Woodpecker - Community fork of Drone that uses Docker containers. (Source Code) Apache-2.0 Go

Control Panels

Web hosting and server or service control panels.

  • Ajenti - Control panel for Linux and BSD. (Source Code) MIT Python/Shell
  • Cockpit - Web-based graphical interface for servers. (Source Code) LGPL-2.1 C
  • Froxlor - Lightweight server management software with Nginx and PHP-FPM support. (Source Code) GPL-2.0 PHP
  • HestiaCP - Web server control panel (fork of VestaCP). (Demo, Source Code) GPL-3.0 PHP/Shell/Other
  • ISPConfig - Manage Linux servers directly through your browser. (Source Code) BSD-3-Clause PHP
  • Sentora - Open-Source Web hosting control panel for Linux, BSD (fork of ZPanel). (Source Code) GPL-3.0 PHP
  • Virtualmin - Powerful and flexible web hosting control panel for Linux and BSD systems. (Source Code) GPL-3.0 Shell/Perl/Other
  • Webmin - Web-based interface for system administration for Unix. (Source Code) BSD-3-Clause Perl

Deployment Automation

Tools and scripts to support deployments to your servers.

  • Capistrano - Deploy your application to any number of machines simultaneously, in sequence or as a rolling set via SSH (rake based). (Source Code) MIT Ruby
  • CloudSlang - Flow-based orchestration tool for managing deployed applications, with Docker capabilities. (Source Code) Apache-2.0 Java
  • CloudStack - Cloud computing software for creating, managing, and deploying infrastructure cloud services. (Source Code) Apache-2.0 Java/Python
  • Cobbler - Cobbler is a Linux installation server that allows for rapid setup of network installation environments. (Source Code) GPL-2.0 Python
  • Fabric - Python library and cli tool for streamlining the use of SSH for application deployment or systems administration tasks. (Source Code) BSD-2-Clause Python
  • Genesis - A template framework for multi-environment BOSH deployments. MIT Perl
  • munki - Webserver-based repository of packages and package metadata, that allows macOS administrators to manage software installs. (Source Code) Apache-2.0 Python
  • Overcast - Deploy VMs across different cloud providers, and run commands and scripts across any or all of them in parallel via SSH. (Source Code) MIT Nodejs

Diagramming

Tools used to create diagrams of networks, flows, etc.

  • Diagrams.net - A.K.A. Draw.io. Easy to use Diagram UI with a plethora of templates. (Source Code) Apache-2.0 JavaScript/Docker
  • Kroki - API for generating diagrams from textual descriptions. (Source Code) MIT Java
  • Mermaid - Javascript module with a unique, easy, shorthand syntax. Integrates into several other tools like Grafana. (Source Code) MIT Nodejs/Docker

Distributed Filesystems

Network distributed filesystems.

See also: awesome-selfhosted/File Transfer - Object Storage & File Servers

  • Ceph - Distributed object, block, and file storage platform. (Source Code) LGPL-3.0 C++
  • DRBD - Distributed replicated storage system, implemented as a Linux kernel driver. (Source Code) GPL-2.0 C
  • GlusterFS - Software-defined distributed storage that can scale to several petabytes, with interfaces for object, block and file storage. (Source Code) GPL-2.0/LGPL-3.0 C
  • Hadoop Distributed Filesystem (HDFS) - Distributed file system that provides high-throughput access to application data. (Source Code) Apache-2.0 Java
  • JuiceFS - Distributed POSIX file system built on top of Redis and S3. (Source Code) Apache-2.0 Go
  • Kubo - Implementation of IPFS, a global, versioned, peer-to-peer filesystem that seeks to connect all computing devices with the same system of files. Apache-2.0/MIT Go
  • LeoFS - Highly available, distributed, replicated eventually consistent object/blob store. (Source Code) Apache-2.0 Erlang
  • Lustre - Parallel distributed file system, generally used for large-scale cluster computing. (Source Code) GPL-2.0 C
  • Minio - High-performance, S3 compatible object store built for large scale AI/ML, data lake and database workloads. (Source Code) AGPL-3.0 Go
  • MooseFS - Fault tolerant, network distributed file system. (Source Code) GPL-2.0 C
  • OpenAFS - Distributed network file system with read-only replicas and multi-OS support. (Source Code) IPL-1.0 C
  • Openstack Swift - A highly available, distributed, eventually consistent object/blob store. (Source Code) Apache-2.0 Python
  • Perkeep - A set of open source formats, protocols, and software for modeling, storing, searching, sharing and synchronizing data (previously Camlistore). (Source Code) Apache-2.0 C
  • TahoeLAFS - Secure, decentralized, fault-tolerant, peer-to-peer distributed data store and distributed file system. (Source Code) GPL-2.0 Python
  • XtreemFS - Distributed, replicated and fault-tolerant file system for federated IT infrastructures.. (Source Code) BSD-3-Clause Java

DNS - Control Panels & Domain Management

DNS server control panels, web interfaces and domain management tools.

Related: DNS - Servers

See also: awesome-selfhosted/DNS

DNS - Servers

DNS servers.

Related: DNS - Control Panels & Domain Management

See also: awesome-selfhosted/DNS

  • Bind - Versatile, classic, complete name server software. (Source Code) MPL-2.0 C
  • CoreDNS - Flexible DNS server. (Source Code) Apache-2.0 Go
  • djbdns - A collection of DNS applications, including tinydns. (Source Code) CC0-1.0 C
  • dnsmasq - Provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. (Source Code) GPL-2.0 C
  • Knot - High performance authoritative-only DNS server. (Source Code) GPL-3.0 C
  • NSD - Authoritative DNS name server developed speed, reliability, stability and security. (Source Code) BSD-3-Clause C
  • PowerDNS Authoritative Server - Versatile nameserver which supports a large number of backends. (Source Code) GPL-2.0 C++
  • Unbound - Validating, recursive, and caching DNS resolver. (Source Code) BSD-3-Clause C
  • Yadifa - Clean, small, light and RFC-compliant name server implementation developed from scratch by .eu. (Source Code) BSD-3-Clause C

Editors

Open-source code editors.

Identity Management - LDAP

Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.

  • 389 Directory Server - Enterprise-class Open Source LDAP server for Linux. (Source Code) GPL-3.0 C
  • Apache Directory Server - Extensible and embeddable directory server, certified LDAPv3 compatible, with Kerberos 5 and Change Password Protocol support, triggers, stored procedures, queues and views. (Source Code) Apache-2.0 Java
  • FreeIPA - Integrated security information management solution combining Linux (Fedora), 389 Directory Server, Kerberos, NTP, DNS, and Dogtag Certificate System (web interface and command-line administration tools). (Source Code) GPL-3.0 Python/C/JavaScript
  • FreeRADIUS - Multi-protocol policy server (radiusd) that implements RADIUS, DHCP, BFD, and ARP and associated client/PAM library/Apache module. (Source Code) GPL-2.0 C
  • lldap - Light (simplified) LDAP implementation with a simple, intuitive web interface and GraphQL support. GPL-3.0 Rust
  • OpenLDAP - Open-source implementation of the Lightweight Directory Access Protocol (server, libraries and clients). (Source Code) OLDAP-2.8 C

Identity Management - Single Sign-On (SSO)

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems.

  • Authelia - The Single Sign-On Multi-Factor portal for web apps. (Source Code) Apache-2.0 Go
  • Authentik - Flexible identity provider with support for different protocols. (OAuth 2.0, SAML, LDAP and Radius). (Source Code) MIT Python
  • KeyCloak - Open Source Identity and Access Management. (Source Code) Apache-2.0 Java

Identity Management - Tools and web interfaces

Miscellaneous utilities and web interfaces for identity management systems.

  • BounCA - A personal SSL Key / Certificate Authority web-based tool for creating self-signed certificates. (Source Code) Apache-2.0 Python
  • easy-rsa - Bash script to build and manage a PKI CA. GPL-2.0 Shell
  • Fusion Directory - Improve the Management of the services and the company directory based on OpenLDAP. (Source Code) GPL-2.0 PHP
  • LDAP Account Manager (LAM) - Web frontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. (Source Code) GPL-3.0 PHP
  • Libravatar - Libravatar is a service which delivers your avatar (profile picture) to other websites. (Source Code) AGPL-3.0 Python
  • Pomerium - An identity and context aware access-proxy inspired by BeyondCorp. (Source Code) Apache-2.0 Docker/Go
  • Samba - Active Directory and CIFS protocol implementation. (Source Code) GPL-3.0 C
  • Smallstep Certificates - A private certificate authority (X.509 & SSH) and related tools for secure automated certificate management. (Source Code) Apache-2.0 Go
  • ZITADEL - Cloud-native Identity & Access Management solution providing a platform for secure authentication, authorization and identity management. (Source Code) Apache-2.0 Go/Docker/K8S

IT Asset Management

IT asset management software.

  • GLPI - Information Resource-Manager with an additional Administration Interface. (Source Code) GPL-3.0 PHP
  • OCS Inventory NG - Asset management and deployment solution for all devices in your IT Department. (Source Code) GPL-2.0 PHP/Perl
  • OPSI - Hardware and software inventory, client management, deployment, and patching for Linux and Windows. (Source Code) GPL-3.0/AGPL-3.0 OVF/Python
  • RackTables - Datacenter and server room asset management like document hardware assets, network addresses, space in racks, networks configuration. (Demo, Source Code) GPL-2.0 PHP
  • Ralph - Asset management, DCIM and CMDB system for large Data Centers as well as smaller LAN networks. (Demo, Source Code) Apache-2.0 Python/Docker
  • Snipe IT - Asset & license management software. (Source Code) AGPL-3.0 PHP

Log Management

Log management tools: collect, parse, visualize…

  • Fluentd - Data collector for unified logging layer. (Source Code) Apache-2.0 Ruby
  • Flume - Distributed, reliable, and available service for efficiently collecting, aggregating, and moving large amounts of log data. (Source Code) Apache-2.0 Java
  • GoAccess - Real-time web log analyzer and interactive viewer that runs in a terminal or through the browser. (Source Code) MIT C
  • Loki - Log aggregation system designed to store and query logs from all your applications and infrastructure. (Source Code) AGPL-3.0 Go
  • rsyslog - Rocket-fast system for log processing. (Source Code) GPL-3.0 C

Mail Clients

An email client, email reader or, more formally, message user agent (MUA) or mail user agent is a computer program used to access and manage a user’s email.

  • aerc - Terminal MUA with a focus on plaintext and features for developers. (Source Code) MIT Go
  • Claws Mail - Old school email client (and news reader), based on GTK+. (Source Code) GPL-3.0 C
  • ImapSync - Simple IMAP migration tool for copying mailboxes to other servers. (Source Code) NLPL Perl
  • Mutt - Small but very powerful text-based mail client. (Source Code) GPL-2.0 C
  • Sylpheed - Still developed predecessor to Claws Mail, lightweight mail client. (Source Code) GPL-2.0 C
  • Thunderbird - Free email application that’s easy to set up and customize. (Source Code) MPL-2.0 C/C++

Metrics & Metric Collection

Metric gathering and display software.

Related: Databases, Monitoring

  • Beats - Single-purpose data shippers that send data from hundreds or thousands of machines and systems to Logstash or Elasticsearch. (Source Code) Apache-2.0 Go
  • Collectd - System statistics collection daemon. (Source Code) MIT C
  • Diamond - Daemon that collects system metrics and publishes them to Graphite (and others). MIT Python
  • Grafana - A Graphite & InfluxDB Dashboard and Graph Editor. (Source Code) AGPL-3.0 Go
  • Graphite - Scalable graphing server. (Source Code) Apache-2.0 Python
  • RRDtool - Industry standard, high performance data logging and graphing system for time series data. (Source Code) GPL-2.0 C
  • Statsd - Daemon that listens for statistics like counters and timers, sent over UDP or TCP, and sends aggregates to one or more pluggable backend services. MIT Nodejs
  • tcollector - Gathers data from local collectors and pushes the data to OpenTSDB. (Source Code) LGPL-3.0/GPL-3.0 Python
  • Telegraf - Plugin-driven server agent for collecting, processing, aggregating, and writing metrics. MIT Go

Miscellaneous

Software that does not fit in another section.

Monitoring

Monitoring software.

Related: Metrics & Metric Collection

  • Adagios - Web based Nagios interface for configuration and monitoring (replacement to the standard interface), and a REST interface. (Source Code) AGPL-3.0 Docker/Python
  • Alerta - Distributed, scalable and flexible monitoring system. (Source Code) Apache-2.0 Python
  • Bloonix - Bloonix is a monitoring solution that helps businesses to ensure high availability and performance. (Source Code) GPL-3.0 Perl
  • Bosun - Monitoring and alerting system by Stack Exchange. (Source Code) MIT Go
  • Cacti - Web-based network monitoring and graphing tool. (Source Code) GPL-2.0 PHP
  • cadvisor - Analyzes resource usage and performance characteristics of running containers. Apache-2.0 Go
  • checkmk - Comprehensive solution for monitoring of applications, servers, and networks. (Source Code) GPL-2.0 Python/PHP
  • dashdot - A simple, modern server dashboard for smaller private servers. (Demo) MIT Nodejs/Docker
  • EdMon - A command-line monitoring application helping you to check that your hosts and services are available, with notifications support. MIT Java
  • eZ Server Monitor - A lightweight and simple dashboard monitor for Linux, available in Web and Bash application. (Source Code) GPL-3.0 PHP/Shell
  • glances - Open-source, cross-platform real-time monitoring tool with CLI and web dashboard interfaces and many exporting options. (Source Code) GPL-3.0 Python
  • Healthchecks - Monitoring for cron jobs, background services and scheduled tasks. (Source Code) BSD-3-Clause Python
  • Icinga - Nagios fork that has since lapped nagios several times. Comes with the possibility of clustered monitoring. (Source Code) GPL-2.0 C++
  • LibreNMS - Fully featured network monitoring system that provides a wealth of features and device support. (Source Code) GPL-3.0 PHP
  • Linux Dash - A low-overhead monitoring web dashboard for a GNU/Linux machine. MIT Nodejs/Go/Python/PHP
  • Monit - Small utility for managing and monitoring Unix systems. (Source Code) AGPL-3.0 C
  • Munin - Networked resource monitoring tool. (Source Code) GPL-2.0 Perl/Shell
  • Naemon - Network monitoring tool based on the Nagios 4 core with performance enhancements and new features. (Source Code) GPL-2.0 C
  • Nagios - Computer system, network and infrastructure monitoring software application. (Source Code) GPL-2.0 C
  • Netdata - Distributed, real-time, performance and health monitoring for systems and applications. Runs on Linux, FreeBSD, and MacOS. (Source Code) GPL-3.0 C
  • NetXMS - Open Source network and infrastructure monitoring and management. (Source Code) LGPL-3.0/GPL-3.0 Java/C++/C
  • Observium Community Edition - Network monitoring and management platform that provides real-time insight into network health and performance. QPL-1.0 PHP
  • openITCOCKPIT Community Edition - Monitoring Suite featuring seamless integrations with Naemon, Checkmk, Grafana and more. (Demo, Source Code) GPL-3.0 deb/Docker
  • Performance Co-Pilot - Lightweight, distributed system performance and analysis framework. (Source Code) LGPL-2.1/GPL-2.0 C
  • PHP Server Monitor - Open source tool to monitor your servers and websites. (Source Code) GPL-3.0 PHP
  • PhpSysInfo - A customizable PHP script that displays information about your system nicely. (Source Code) GPL-2.0 PHP
  • Prometheus - Service monitoring system and time series database. (Source Code) Apache-2.0 Go
  • Riemann - Flexible and fast events processor allowing complex events/metrics analysis. (Source Code) EPL-1.0 Java
  • rtop - Interactive, remote system monitoring tool based on SSH. MIT Go
  • ruptime - Classic system status server. AGPL-3.0 Shell
  • Scrutiny - Web UI for hard drive S.M.A.R.T monitoring, historical trends & real-world failure thresholds. MIT Go
  • Sensu - Monitoring tool for ephemeral infrastructure and distributed applications. (Source Code) MIT Go
  • Status - Simple and lightweight system monitoring tool for small homeservers with a pleasant web interface. (Demo MIT Python
  • Thruk - Multibackend monitoring web interface with support for Naemon, Nagios, Icinga and Shinken. (Source Code) GPL-1.0 Perl
  • Wazuh - Unified XDR and SIEM protection for endpoints and cloud workloads. (Source Code) GPL-2.0 C
  • Zabbix - Enterprise-class software for monitoring of networks and applications. (Source Code) GPL-2.0 C

Network Configuration Management

Network configuration management tools.

  • GNS3 - Graphical network simulator that provides a variety of virtual appliances. (Source Code) GPL-3.0 Python
  • OpenWISP - Open Source Network Management System for OpenWRT based routers and access points. (Demo, Source Code) GPL-3.0 Python
  • Oxidized - Network device configuration backup tool. Apache-2.0 Ruby
  • phpIPAM - Open source IP address management with PowerDNS integration. (Source Code) GPL-3.0 PHP
  • RANCID - Monitor network devices configuration and maintain history of changes. (Source Code) BSD-3-Clause Perl/Shell
  • rConfig - Network device configuration management tool. (Source Code) GPL-3.0 PHP

PaaS

Platform-as-a-Service software allows customers to provision, instantiate, run, and manage a computing platform and one or more applications, without the complexity of building and maintaining the infrastructure typically associated with developing and launching the application. Also includes Serverless computing and Function-as-a-service (FaaS) software.

  • CapRover - Build your own PaaS in a few minutes. (Demo, Source Code) Apache-2.0 Docker/Nodejs
  • Coolify - An open-source & self-hostable Heroku / Netlify alternative (and even more). (Source Code) Apache-2.0 Docker
  • Dokku - An open-source PaaS (alternative to Heroku). (Source Code) MIT Docker/Shell/Go/deb
  • fx - A tool to help you do Function as a Service with painless on your own servers. MIT Go
  • Kubero - A self-hosted Heroku PaaS alternative for Kubernetes that implements GitOps. (Demo, Source Code) GPL-3.0 K8S/Nodejs/Go
  • LocalStack - LocalStack is a fully functional local AWS cloud stack. This includes Lambda for serverless computation. (Source Code) Apache-2.0 Python/Docker/K8S
  • Nhost - Firebase Alternative with GraphQL. Get a database and backend configured and ready in minutes. (Source Code) MIT Docker/Nodejs/Go
  • OpenFaaS - Serverless Functions Made Simple for Docker & Kubernetes. (Source Code) MIT Go
  • Tau - Easily build Cloud Computing Platforms with features like Serverless WebAssembly Functions, Frontend Hosting, CI/CD, Object Storage, K/V Database, and Pub-Sub Messaging. (Source Code) BSD-3-Clause Go/Rust/Docker
  • Trusted-CGI - Lightweight self-hosted lambda/applications/cgi/serverless-functions platform. MIT Go/deb/Docker

Packaging

A package manager or package-management system is a collection of software tools that automates the process of installing, upgrading, configuring, and removing computer programs for a computer in a consistent manner.

  • aptly - Swiss army knife for Debian repository management. (Source Code) MIT Go
  • fpm - Versatile multi format package creator. (Source Code) MIT Ruby
  • omnibus-ruby - Easily create full-stack installers for your project across a variety of platforms. Apache-2.0 Ruby
  • tito - Builds RPMs for git-based projects. GPL-2.0 Python

Queuing

Message queues and message broker software, typically used for inter-process communication (IPC), or for inter-thread communication within the same process.

See also: Cloud Native Landscape - Streaming & Messaging

Remote Desktop Clients

Remote Desktop client software.

See also: awesome-selfhosted/Remote Access

  • Remmina - Feature-rich remote desktop application for linux and other unixes. (Source Code) GPL-2.0 C
  • Tiger VNC - High-performance, multi-platform VNC client and server. (Source Code) GPL-2.0 C++
  • X2go - X2Go is an open source remote desktop software for Linux that uses the NoMachine/NX technology protocol. (Source Code) GPL-2.0 Perl

Router

Software for management of router hardware.

  • DD-WRT - A Linux-based firmware for wireless routers and access points, originally designed for the Linksys WRT54G series. (Source Code) GPL-2.0 C
  • OpenWrt - A Linux-based router featuring Mesh networking, IPS via snort and AQM among many other features. (Source Code) GPL-2.0 C
  • OPNsense - An open source FreeBSD-based firewall and router with traffic shaping, load balancing, and virtual private network capabilities. (Source Code) BSD-2-Clause C/PHP
  • pfSense CE - Free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free software packages for additional functionality. (Source Code) Apache-2.0 Shell/PHP/Other

Service Discovery

Service discovery is the process of automatically detecting devices and services on a computer network.

  • Consul - Consul is a tool for service discovery, monitoring and configuration. (Source Code) MPL-2.0 Go
  • etcd - Distributed K/V-Store, authenticating via SSL PKI and a REST HTTP Api for shared configuration and service discovery. (Source Code) Apache-2.0 Go
  • ZooKeeper - ZooKeeper is a centralized service for maintaining configuration information, naming, providing distributed synchronization, and providing group services. (Source Code) Apache-2.0 Java/C++

Software Containers

Operating system–level virtualization.

  • Docker Compose - Define and run multi-container Docker applications. (Source Code) Apache-2.0 Go
  • Docker Swarm - Manage cluster of Docker Engines. (Source Code) Apache-2.0 Go
  • Docker - Platform for developers and sysadmins to build, ship, and run distributed applications. (Source Code) Apache-2.0 Go
  • LXC - Userspace interface for the Linux kernel containment features. (Source Code) GPL-2.0 C
  • LXD - Container “hypervisor” and a better UX for LXC. (Source Code) Apache-2.0 Go
  • OpenVZ - Container-based virtualization for Linux. (Source Code) GPL-2.0 C
  • Podman - Daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. Simply put: alias docker=podman. (Source Code) Apache-2.0 Go
  • Portainer Community Edition - Simple management UI for Docker. (Source Code) Zlib Go
  • systemd-nspawn - Lightweight, chroot-like, environment to run an OS or command directly under systemd. (Source Code) GPL-2.0 C

Troubleshooting

Troubleshooting tools.

  • grml - Bootable Debian Live CD with powerful CLI tools. (Source Code) GPL-3.0 Shell
  • mitmproxy - A Python tool used for intercepting, viewing and modifying network traffic. Invaluable in troubleshooting certain problems. (Source Code) MIT Python
  • mtr - Network utility that combines traceroute and ping. (Source Code) GPL-2.0 C
  • Sysdig - Capture system state and activity from a running Linux instance, then save, filter and analyze. (Source Code) Apache-2.0 Docker/Lua/C
  • Wireshark - The world’s foremost network protocol analyzer. (Source Code) GPL-2.0 C

Version control

Software versioning and revision control.

  • Darcs - Cross-platform version control system, like git, mercurial or svn but with a very different approach: focus on changes rather than snapshots. (Source Code) GPL-2.0 Haskell
  • Fossil - Distributed version control with built-in wiki and bug tracking. (Source Code) BSD-2-Clause C
  • Git - Distributed revision control and source code management (SCM) with an emphasis on speed. (Source Code) GPL-2.0 C
  • Mercurial - Distributed source control management tool. (Source Code) GPL-2.0 Python/C/Rust
  • Subversion - Client-server revision control system. (Source Code) Apache-2.0 C

Virtualization

Virtualization software.

  • Ganeti - Cluster virtual server management software tool built on top of KVM and Xen. (Source Code) BSD-2-Clause Python/Haskell
  • KVM - Linux kernel virtualization infrastructure. (Source Code) GPL-2.0/LGPL-2.0 C
  • OpenNebula - Build and manage enterprise clouds for virtualized services, containerized applications and serverless computing. (Source Code) Apache-2.0 C++
  • oVirt - Manages virtual machines, storage and virtual networks. (Source Code) Apache-2.0 Java
  • Packer - A tool for creating identical machine images for multiple platforms from a single source configuration. (Source Code) MPL-2.0 Go
  • Proxmox VE - Virtualization management solution. (Source Code) GPL-2.0 Perl/Shell
  • QEMU - QEMU is a generic machine emulator and virtualizer. (Source Code) LGPL-2.1 C
  • Vagrant - Tool for building complete development environments. (Source Code) BUSL-1.1 Ruby
  • VirtualBox - Virtualization product from Oracle Corporation. (Source Code) GPL-3.0/CDDL-1.0 C++
  • XCP-ng - Virtualization platform based on Xen Source and Citrix® Hypervisor (formerly XenServer). (Source Code) GPL-2.0 C
  • Xen - Virtual machine monitor for 32/64 bit Intel / AMD (IA 64) and PowerPC 970 architectures. (Source Code) GPL-2.0 C

VPN

VPN software.

  • DefGuard - True enterprise WireGuard with MFA/2FA and SSO. (Source Code) Apache-2.0 Rust
  • Dockovpn - Out-of-the-box stateless dockerized OpenVPN server which starts in less than 2 seconds. (Source Code) GPL-2.0 Docker
  • Firezone - WireGuard based VPN Server and Firewall. (Source Code) Apache-2.0 Docker
  • Gluetun VPN client - VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in. MIT docker
  • Headscale - Self-hostable fork of Tailscale, cross-platform clients, simple to use, built-in (currently experimental) monitoring tools. BSD-3-Clause Go
  • Nebula - A scalable p2p VPN with a focus on performance, simplicity and security. MIT Go
  • ocserv - Cisco AnyConnect-compatible VPN server. (Source Code) GPL-2.0 C
  • OpenVPN - Uses a custom security protocol that utilizes SSL/TLS for key exchange. (Source Code) GPL-2.0 C
  • SoftEther - Multi-protocol software VPN with advanced features. (Source Code) Apache-2.0 C
  • sshuttle - Poor man’s VPN. LGPL-2.1 Python
  • strongSwan - Complete IPsec implementation for Linux. (Source Code) GPL-2.0 C
  • WireGuard - Very fast VPN based on elliptic curve and public key crypto. (Source Code) GPL-2.0 C

List of Licenses


Communities / Forums

Repositories

Software package repositories.

  • AlternativeTo - Find alternatives to software you know and discover new software.
  • deb.sury.org - Repository with LAMP updated packages for Debian and Ubuntu.
  • ElRepo - Community Repo for Enterprise Linux (RHEL, CentOS, etc).
  • EPEL - Repository for RHEL and compatibles (CentOS, Scientific Linux).
  • IUS - Community project that provides RPM packages for newer versions of select software for Enterprise Linux distributions.
  • Remi - Repository with LAMP updated packages for RHEL/Centos/Fedora.
  • Software Collections - Community Release of Red Hat Software Collections. Provides updated packages of Ruby, Python, etc. for CentOS/Scientific Linux 6.x.

Websites

  • Cloud Native Software Landscape - Compilation of software and tools for cloud computing.
  • ArchWiki - Arch Linux Wiki which has really nice written articles valid for other distros.
  • Gentoo Wiki - Gentoo Linux Wiki with a lot in-detail description of Linux components.
  • Awesome SysAdmin @ LibHunt - Your go-to SysAdmin Toolbox. Based on the list here.
  • Ops School - Comprehensive program that will help you learn to be an operations engineer.
  • Digital Ocean Tutorials - 6,000+ tutorials for getting the basics of certain applications/tools/systems administration topics.

License

cc license cc license

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International license.

VPS, Dedicated Server, VDS, VPN, email, and Domain Providers

List of VPS, dedicated server, VDS, VPN, email, and domain providers

  • Make sure to include server and company locations. If they use BitPay or Coinbase please flag this. Additional notes (what level of anonymity is allowed at signup, whether they offer block storage / are suited to running Bitcoin full nodes, etc) are welcome. Particularly interested in hosts that take Lightning payments and hosts in exotic locations. Yes, you can request listing for a company you own or work for, we love to hear from providers.

  • Using BitPay, Coinbase or using providers that require it is discouraged: many readers have complained BitPay requires a separate account and extensive personal information from the customer in order to pay for services from BitPay-using merchants. Coinbase has recently changed their service and will require the same as BitPay.

  • Due to draconian new laws being pushed worldwide, I STRONGLY recommend hosting providers move to self-hosted payment processing (e.g BTCPayServer). We have a suggestions for hosting providers page with more information on this for payment providers, along with some other tips.

VPS: Europe

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • Njalla - Locations: Sweden (SE). Company registered in Nevis. Runs their own datacenter. Tor- and anonymity-friendly. Privacy-focused domain registration service that also offers VPS, VPN. Accepts BTC, XMR, ZEC among other options. Onion URL: http://njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion

  • Hostiko - Locations: Kyiv (UA), Falkenstein (DE), Warsaw (PL). Company registered in Ukraine. Accepts BTC, XMR, many others via NOWPayments (no KYC and numerous altcoins). Anonymous sign-up/signup via Tor is allowed. They actively monitor their network for abuse and react accordingly.

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Profvds - Locations: Bratislava (SK). Company registered in Slovakia. Accepts Bitcoin via BTCPayServer, NOWPayments, Plisio, and Payeer. Only Email required to register. Provider notes they support running Bitcoin full nodes

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • VPSBG - Locations: Sofia (BG). Company registered in Bulgaria. Locations: Sofia (BG). Company registered in Bulgaria. Anonymous signup OK, Tor allowed. No 3rd party payment processor, has own implementation to take payments via Bitcoin, Litecoin and Lightning Network (LN). Advertises high performance servers. Provider notes: “VPN servers are installed on a private VPS. They have a dedicated static IP, full SSH root access to the VPS, allowing for full control over the VPN. Verifiable no-logs and privacy policies. Unlimited device connections. VPN uses open-source protocols and custom scripts that are used are publicly available.”

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • PrivateAlps - Locations: Switzerland (CH). Company registered in Panama. Networking provided by Ipconnect (Seychelles). Tor traffic and anonymous signup OK. No LN payment. 10% discount if you enter the affiliate 5DBKR when ordering

  • VSYS - Locations: Ukraine (UA), Netherlands (NL). Company registered in Kyiv, Ukraine. Anonymous signup and Tor traffic OK. States they use Bitcoin Core to process BTC payments directly, LTC and Doge via their billing software.

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • Rockhoster - Locations: US, Canada (CA), France (FR). Company registered in UK.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • 3v-hosting - Locations: Ukraine (UA). Company registered in Ukraine. Tor traffic allowed unless backbone provider objects. User data required at signup (not anonymous)

  • VPS2day - Locations: Frankfurt a.M (DE), Zug/Switzerland (CH), Tallin (EE), Bucharest (RO), The Hague (NL), Stockholm (SE), Manchester (UK), Dallas (US). Company registered in Frankfurt, Germany. Website blocks Tor traffic outright. Does not allow anonymous signup. Payment via Coingate.

  • Eldernode - Locations: Chicago (US), San Jose (US), New York (US), Denmark (DK), Netherlands (NL), Manchester (UK), France (FR), Germany (DE), Canada. Company registered in Lithuania .

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Cinfu - Locations: Germany (DE), Bulgaria (BG), France (FR), Netherlands (NL), US. Company registered in Seychelles. Anonymous signup discouraged (automated fraud checks). No signup over Tor (website currently blocks Tor users entirely). User reports their datacentres may de-prioritise Bitcoin related traffic (and/or other large data transfers) resulting in extremely long full node sync times (weeks, single kbps bandwidth) after an initial burst for about 15% of the BTC blockchain

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • LegionBox - Locations: US, Switzerland (CH), Germany (DE), Russia (RU). Company registered in Australia. Anonymous signup discouraged (automated fraud checks)

  • THC Servers - Locations: Romania (RO), Canada. Company registered in United States. Supports Lightning Network (LN)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • FlokiNET - Locations: Romania (RO), Iceland (IS), Finland (FI), Netherlands (NL). Company registered in Iceland. Free speech-focused service, Tor friendly. Includes (potentially outdated) OpenBSD images which must be manually installed via VNC. Anonymous signup OK, only valid email address is required. Accepts Bitcoin and XMR via Coinpayments. Allows customizing dedicated servers, including with Large Storage suitable for full nodes. This website is currently hosted on Flokinet

  • SeedVPS - Locations: Netherlands (NL). Company registered in US/Israel. Google captchas. Automated fraud detection system may cancel your order or even ban your account, we recommend against using VPN/Tor/proxies to order from this provider. User reports that their website is unusable over Tor: you are constantly logged out, and have to solve a captcha every time you click anything on their website

  • ExtraVM - Locations: Dallas TX (US), Los Angeles CA (US), Miami FL (US), Vint Hill VA (US), Montreal QC (CAN), London (UK), Gravelines (FR), Sydney (AU), Singapore (SG), Tokyo (JP). Company registered in Delaware, US. Ryzen servers. Crypto payments via Cryptomus. DdoS protected. Also offers Minecraft servers.

  • Qhoster - Locations: UK, US, Canada (CA), Bulgaria (BG), Lithuania (LT), France (FR), Germany (DE), Netherlands (NL), Switzerland (CH). Company registered in ???. Google captcha

  • SporeStack - Locations: San Francisco/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Bangalore (IN). Company registered in Texas (US). Accountless VPS provider. Also takes Bcash / Bitcoin SV. API-only/no registration, servers on Digital Ocean, Vultur/Linode available on request, Tor-only servers in undisclosed location, onion service URL: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/#ref=vps

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • NiceVPS - Locations: Netherlands (NL). Company registered in Dominica. Minimal registration data and Tor friendly. Bulletproof DDoS-protected hosting available. Also provides confidential domains. Will offer hosting in Switzerland (CH) soon.

  • BlazingFast - Locations: Netherlands (NL). Company registered in Netherlands. High performance servers

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • Cockbox - Locations: Romania (RO). Company registered in Seychelles. Servers with cocks. Tor and anonymity-friendly. Onion URL: http://dwtqmjzvn2c6z2x462mmbd34ugjjrodowtul4jfbkexjuttzaqzcjyad.onion/?r=3033

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • AtomicNetworks - Locations: Eygelshoven (NL), Chicago (US), Miami (US), Los Angeles (US). Company registered in Delware, United States. Crypto payments through Coinbase Wallets, samller altcoins via NowPayments. Tor traffic OK. Uses Google Captchas. Asks for personal information but you can write whatever you like.

  • AlexHost - Locations: Tallbert (SE), Moldova (MD), Sofia (BG), Netherlands (NL). Company registered in Moldova. Email hosting included with shared web hosting service. Operates through AS200019, with own datacenter, network and hardware in the Republic of Moldova. Domain registration via OpenSRS/Tucows. They welcome people using their VPS for VPN endpoints. No KYC unless the payment gateway (e.g Paypal) asks for it (so pay with crypto). Doesn’t verify the personal data you give them otherwise. Tor bridges and relays are fine, Tor exit nodes are not allowed. Bitcoin payments accepted via BTCPayServer. Monero and other cryptocurrencies also accepted. May use Google Captchas (via Hostbill). Dedicated servers can be customized so they have Large Storage for running full nodes. Provider states they support freedom of speech and privacy.

  • HostStage - Locations: France (FR), Canada (CA), US. Company registered in France. Uses Coingate. Also provides shared web hosting. Anonymous sign up OK as long as no fraud, Tor traffic OK provided it is not used in a way that causes trouble

  • Justhost - Locations: Russia (RU). Company registered in Russia. Selling VDS

  • Lunanode - Locations: Canada (CA), France (FR). Company registered in Canada. User reports that registration is not allowed when using a VPN. Another user reports that their VPN worked, but LunaNode required phone number verification to pay with Bitcoin and/or Lightning Network (LN).

  • Skhron - Locations: Warsaw (PL). Company registered in Estonia. Equipment located at Equinix WA3. Bitcoin, Monero (XMR), TRX, USDT/TRC20, LTC accepted using self-hosted BTCPayServer (BTC) and BitCartCC (other coins). Lightning Network (LN) payments supported. Tor traffic allowed. Only a valid email is required, they don’t check other user-provided personal info unless you pay with fiat. No KYC and no error prone fraud protection to cancel your order unexpectedly. Captchas are standard pictures or hCaptcha. Offers a low-end KVM VPS for 1.15 EUR/month. Onion service at http://ufcmgzuawelktlvqaypyj4efjonbzleoketixdmtzidvfg254gfwyuqd.onion/

  • IP-Connect - Locations: Ukraine (UA). Company registered in Ukraine. Runs their own datacenter. Tor-friendly. Minimal registration. Crypto payments accepted via payment gateway. Doesn’t require KYC, allows TOR/proxy. Criminal activity prohibited. All VPS are KVM-based, 100% SSD, recent Intel processors, redundant high quality uplinks, lowest latency possible, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random generators for fast entropy, noVNC, images of common Linux distributions for fully automated installation, bring your own .iso (also Windows etc. allowed). Now additionally accepts payments via Nowpayments.io, which supports hundreds of different cryptocurrencies. Use promocode “bitcoin-vps2022” for -10% discount

  • FlyNet - Locations: Tomsk/Russia (RU). Company registered in Russia. May require SMS verification. Use coupon code FLYNET-PRO-180784 for 10% discount.

  • SeiMaxim - Locations: Almere (NL), Amsterdam (NL), Los Angeles (US). Company registered in Netherlands. Anonymous signup allowed. Bitcoin full nodes are allowed. Also offers GPU mining servers, domains, shared hosting, and HTTP/SOCKS proxies. Uses Coinbase payment gateway

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • Internoc24 - Locations: Czech Republic (CZ), Sweden (SE), UK, Finland (FI), Russia (RU). Company registered in US/CZ. Offers both OpenVZ and KVM. Advertises anonymous signup

  • VPSGOD - Locations: Germany (DE), US, France (FR), Netherlands (NL), United States (US). Company registered in US. Google captcha

  • BuyVM / Frantech - Locations: Las Vegas (US), New Jersey (US), Luxembourg (LU), Miami (US). Company registered in Canada. Supports Anycast IP addressing

  • Noez - Locations: Frankfurt (DE). Company registered in Germany. Large Storage, may be suitable for running Bitcoin full nodes

  • XetHost - Locations: Budapest (HU). Company registered in Hungary. DevOps-focused. Accepts many different cryptocurrencies via CoinGate. Asks for phone number and email address.

  • Host4Coins - Locations: France (FR), Zurich (CH). Company registered in France(?). Only Bitcoin and Lightning Network (LN) payments. Anonymous signup encouraged (they do not verify email address validity). $2/mo discount for IPv6-only service. Run by https://twitter.com/ketominer

  • Servting - Locations: Netherlands (NL), India (IN), Germany (DE), London (UK), United States (US), Singapore (SG), Canada (CA), South Korea (KR), Australia (AU), Japan (JP), Ireland (IE), France (FR), Sweden (SE), Spain (ES), Mexico (MX), Brazil (BR), Poland (PL). Company registered in United States. Currently reselling Digital Ocean, AWS Lightsail and Vultr. BTCPayServer as payment gateway. Encourage anonymous sign-up. Provider notes: “TOR and VPNs allowed, we do not use any fraud detection software such as Maxmind. A real email address is encouraged for correspondence but not a requirement . We offer block storage upgrades upon request. We do not check identities or perform any verification, if payment is successful you get a server!”

  • MrVM - Locations: Sweden (SE). Company registered in Sweden. No Tor traffic allowed

  • LiteServer - Locations: Netherlands (NL). Company registered in Netherlands. Accepts Lightning Network (LN) payments via Coingate. Large Storage (as of writing, 512GB for 5€/mo!), may be suitable for running full nodes

  • RamNode - Locations: Seattle/Los Angeles/Atlanta/NYC (US), Netherlands (NL). Company registered in US. Pay-by-the-hour model. User reports they require phone number verification

  • VPSServer - Locations: San Francisco/Chicago/Dallas/Miami/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Bangalore (IN), Tokyo (JP), Hong Kong (HK), Singapore (SG), Sydney (AU). Company registered in US. Uses BitPay. Reader reports they are Tor hostile: “I can’t join or use SSH to connect to their VPSs over Tor. No relays allowed (and most certainly no exits).” See: https://www.vpsserver.com/community/questions/7/i-want-tot-use-tor-network-is-it-allowed/

  • HostSailor - Locations: Romania (RO), Netherlands (NL). Company registered in UAE. Lightning network (LN) via Coingate. Google Captchas. User reports they log you out constantly if using Tor.

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

  • OrangeWebsite - Locations: Iceland (IS). Company registered in Iceland. Asks for very minimal user information, seems to take security seriously

  • VPSBit - Locations: Hong Kong (HK), Lithuania (LT). Company registered in Hong Kong & Lithuania.

  • BitLaunch - Locations: DigitalOcean, Vultr, Linode, Netherlands (NL), United States (US), United Kingdom (UK). Company registered in Unknown. Cryptocurrency payment front-end to Digital Ocean/Vultr/Linode. User reprts they also run their own infrastructure with their own ASN

  • Coin.Host / Coinshost - Locations: Zurich (CH). Company registered in Switzerland. Does not provide anonymous hosting, will ask for detailed information about what you are hosting on their servers. Will not refund any deposits made prior to this. We recommend clarifying your proposed usage with them before depositing money with them.

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Crowncloud - Locations: Frankfurt (DE), Los Angeles (US). Company registered in Australia.

  • Hostwinds - Locations: US, Netherlands (NL). Company registered in US.

  • CryptoHO.ST - Locations: Romania (RO). Company registered in Romania (?). Supports Lightning Network (LN), Monero, and 300+ altcoins

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • SuperBitHost - Locations: Bulgaria (BG), Germany (DE), Netherlands (NL), Luxembourg (LU), Malaysia (MY) Russia (RU), Singapore (SG), Switzerland (CH). Company registered in ???. uses Google captchas

  • Aurologic (Fastpipe) - Locations: Combahton datacenter in Frankfurt, Germany (DE). Company registered in Germany. Large Storage / Block storage offered, may be suitable for running Bitcoin full nodes. Used to be Fastpipe.io, is now Aurologic. If they still take Bitcoin, let us know:

  • Sered - Locations: Madrid (ES), Barcelona (ES). Company registered in Spain. Website may block Tor users (Google captcha). Use coupon code VQSZANRO for a 2 month discount.

  • Javapipe (now Mochahost) - Locations: Chicago (US), Amsterdan (NL), Bucharest (RO). Company registered in ???.

  • Evolution Host - Locations: Strasbourg (FR), Sydney (AU), Frankfurt (DE), Montreal (CA), London (UK), Dallas (US), Oregon (US), Virginia (US), Warsaw (PL). Company registered in ???. Supports Lightning Network (LN). User reports they have started blocking proxy/Tor signups for smaller packages due to abuse

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • Hosthatch - Locations: Stockholm (SE), Los Angeles (US), Chicago (US), Amsterdam (NL). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • Serverhub - Locations: Chicago (US), Seattle (US), New York (US), Dallas (US), Phoneix (US), Frankfurt (DE). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • DeinServerHost - Locations: Combahton datacenter in Frankfurt, Germany (DE). Company registered in Germany. Bitcoin & Lightning Network (LN) via Coingate, anonymous/pseudonymous signup over Tor allowed. Very flexible server configuration (set RAM/disk/# cores independently). Large Storage, may be suitable for running Bitcoin full nodes. Offers one-click DdoS protection via Path.net

  • Terrahost - Locations: Sandefjord (NO). Company registered in Norway. Runs their own datacenter. Good reputation in the OpenBSD community (but does not offer OpenBSD support natively, you must bring your own install image). Their website claims to use BitPay but it’s not true, they actually use Coingate/BTCPayServer. Sometimes asks for full KYC at signup (e.g if you signed up via Tor)

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • 1984Hosting - Locations: Iceland (IS). Company registered in Iceland. Anonymous signup allowed. Accepts BTC & XMR via their own implementation. Also offers share & managed hosting, domain registration

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • AnyColo - Locations: Romania (RO). Company registered in Romania. Accepts BTC, XMR. Payments via own BTCPayServer instance. Anonymous signup allowed. According to the company, “our TOS is simple: no abuse and no complaints.”

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • CryptoVPS - Locations: Hetzner/Germany (DE), Hetzner/Finland (FI), Hetzner (US), Ecatel/Netherlands (NL), Norway (NO), Gcorelabs/Luxembourg (LU). Company registered in ???. Anonymity friendly, their TOS promises they will never ask for KYC. Payments via CoinPayments, other gateways available.

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • IQHost - Locations: Poland (PL)?. Company registered in Poland. Only Polish-language website

  • DataClub - Locations: Meppel/Netherlands (NL), Stockholm (SE), Riga/Latvia (LV). Company registered in Belize/Cyprus/UK. Dedicated servers in Latvia. May require KYC

  • Hostiquette - Locations: Amsterdam (NL), Frankfurt (DE), Helsinki (FI), London (UK), Moscow (RU), Paris (FR), Zurich (CH). Company registered in ???. Tor and anonymity-friendly. Using BTCPay Server for Bitcoin payments. Can accept other cryptocurrencies if you contact them. Emai addresses are not verified but using a valid email is recommended for communications. Custom servers are available if you contact them.

  • VPSAG - Locations: Bulgaria (BG). Company registered in Cyprus. Payments via Coinify. Sister company of DediStart (dedicated servers). Blocks Tor users

  • eCompute - Locations: Romania (RO). Company registered in Romania. Payments via Coinify. Website appears not to use HTTPS

  • Servers.Guru - Locations: Helsinki (FI), Nuremberg (DE), Falkenstein (DE), Ashburn (US). Company registered in United States. Anonymous signup allowed (only a valid email address is required). Tor traffic OK. Accepts Lightning Network (LN) payments. Uses self-hosted BitCartCC for Bitcoin payments (as well as others), takes DOGE, DASH, and Zcash/ZEC via Plisio.

  • Ukrainian Data Network (UDN) - Locations: Kyiv/Kiev (UA). Company registered in Ukraine. Anonymous signup OK, even email address is optional. Accepts BTC and Monero/XMR. Uses their own internal payment system, no 3rd party payment processor

  • VPS One - Locations: Netherlands (NL). Company registered in UAE. Anonymous signup allowed (only a valid email address is required). Uses CoinPayments.

  • Zergrush Hosting - Locations: Bucharest (RO). Company registered in Romania. Payments via uTrust, which supports Lightning Network (LN) payments. No Tor exits allowed. Do ask for personal information at signup.

  • IncogNET - Locations: Netherlands (NL), Idaho (US). Company registered in Wyoming, United States. Accepts Bitcoin via BTCPayServer (and other cryptocurrencies also). No personal information required to sign up, only an email address (which isn’t verified). Ordering via Tor/VPN is OK. Large Storage available on a case-by-case basis, contact them to arrange it. Uses Google Captchas (reCaptcha). Also does anonymous domain registration

  • SafeAlps - Locations: Switzerland (CH) (shared hosting only), Romania (RO), United States (US), Iceland (IS) (email hosting only). Company registered in Switzerland. VPS in Romania and the US, shared hosting in Switzerland, one-time-payment email hosting in Iceland. Tor-friendly, both traffic and nodes are welcome. Anonymous sign up is OK, PGP encrypted email communication is supported. Payments via Plisio, Lightning Network (LN) payment supported. No captchas or assets loaded from servers they don’t control. Large Storage servers with HDDs (or SSDs on request) are available.

  • HostSlick - Locations: Netherlands (NL). Company registered in Germany. Accepts Bitcoin via Coinify. Has internal KYC checks - your server can be suspended if you registered via Proxy/VPN. Google captchas. User reports you may be able to register via VPN if you open a support ticket to manually deposit BTC. We recommend testing with small amounts of money and low cost services first.

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • RDP.sh - Locations: Netherlands (NL), Phoneix (US), Poland (PL). Company registered in Germany. Privacy focused Windows RDP and Linux server provider. Only asks for email, no KYC. Accepts Bitcoin via Coinbase gateway.

  • AnonRDP - Locations: Poland (PL), France (FR). Company registered in Unknown. Anonymous signup allowed, only email address is required. Tor traffic is OK, but requires javascipt due to DdoS protection. Payments via Cryptomus. Accepts XMR, BTC, ETH, TRX, USDT, LTC, and more. Uses Google Captcha now, will soon have a self-hosted non-Javascript solution.

  • Fort.pw - Locations: Frankfurt am Main (DE). Company registered in Austria. Offers Large Storage servers with HDD, and NVMe boot disks. Very anonymity friendly, even offers an anonymous Web chat where you can contact them. Only requires an email to sign up, a forwarding or temp email is OK. Happy to host crypto nodes or backups. Accepts BTC, XMR, LTC, BCH, Bitcoin Lightning Network (LN) payments using their own in-house payment system. For some transactions they may use 3rd party no-KYC providers. Servers are in Equinix datacenter in Frankfurt, Germany. Free 3.2Tbit DdoS protection and backup slots. No automated fraud checks, no captchas, no cookies. Tor exit nodes not allowed due to all the abuse complaints they generate.

  • KernelHost - Locations: Frankfurt (DE). Company registered in Austria. Bitcoin payments via BTCPayServer. KVM based servers. Servers at Maincubes datacenter

  • NetNexus - Locations: Virginia (US), Ohio (US), California (US), Oregon (US), Mumbai (IN), Osaka (JP), Seoul (KR), Singapore (SG), Sydney (AU), Tokyo (JP), Central (CA), Frankfurt (DE), Ireland (IE), London (GB), Paris (FR), Stockholm (SE), Sao Paulo (BR). Company registered in Portland, Oregon. Tor traffic allowed. Asks for email address, name, phone number, etc on signup but doesn’t verify the information. Bitcoin payment with Plisio. No Google Captchas. Large Storage, maybe suitable for full nodes.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

  • Gigablits - Locations: Amsterdam (NL), Bangalore (IN), Frankfurt (DE), London (UK), New York (US), San Francisco (US), Singapore (SG), Sydney (AU), Toronto (CA). Company registered in ???. DigitalOcean reseller. Anonymity focused, no personal information required. Payments accepted via Plisio. User reports they took payment but did not deliver service or respond to tickets, business may be defunct.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: North America

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • Rockhoster - Locations: US, Canada (CA), France (FR). Company registered in UK.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • VPS2day - Locations: Frankfurt a.M (DE), Zug/Switzerland (CH), Tallin (EE), Bucharest (RO), The Hague (NL), Stockholm (SE), Manchester (UK), Dallas (US). Company registered in Frankfurt, Germany. Website blocks Tor traffic outright. Does not allow anonymous signup. Payment via Coingate.

  • Eldernode - Locations: Chicago (US), San Jose (US), New York (US), Denmark (DK), Netherlands (NL), Manchester (UK), France (FR), Germany (DE), Canada. Company registered in Lithuania .

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Cinfu - Locations: Germany (DE), Bulgaria (BG), France (FR), Netherlands (NL), US. Company registered in Seychelles. Anonymous signup discouraged (automated fraud checks). No signup over Tor (website currently blocks Tor users entirely). User reports their datacentres may de-prioritise Bitcoin related traffic (and/or other large data transfers) resulting in extremely long full node sync times (weeks, single kbps bandwidth) after an initial burst for about 15% of the BTC blockchain

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • LegionBox - Locations: US, Switzerland (CH), Germany (DE), Russia (RU). Company registered in Australia. Anonymous signup discouraged (automated fraud checks)

  • THC Servers - Locations: Romania (RO), Canada. Company registered in United States. Supports Lightning Network (LN)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • ExtraVM - Locations: Dallas TX (US), Los Angeles CA (US), Miami FL (US), Vint Hill VA (US), Montreal QC (CAN), London (UK), Gravelines (FR), Sydney (AU), Singapore (SG), Tokyo (JP). Company registered in Delaware, US. Ryzen servers. Crypto payments via Cryptomus. DdoS protected. Also offers Minecraft servers.

  • Qhoster - Locations: UK, US, Canada (CA), Bulgaria (BG), Lithuania (LT), France (FR), Germany (DE), Netherlands (NL), Switzerland (CH). Company registered in ???. Google captcha

  • SporeStack - Locations: San Francisco/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Bangalore (IN). Company registered in Texas (US). Accountless VPS provider. Also takes Bcash / Bitcoin SV. API-only/no registration, servers on Digital Ocean, Vultur/Linode available on request, Tor-only servers in undisclosed location, onion service URL: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/#ref=vps

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • AtomicNetworks - Locations: Eygelshoven (NL), Chicago (US), Miami (US), Los Angeles (US). Company registered in Delware, United States. Crypto payments through Coinbase Wallets, samller altcoins via NowPayments. Tor traffic OK. Uses Google Captchas. Asks for personal information but you can write whatever you like.

  • WindowsVPSHost - Locations: Buffalo (US) . Company registered in Singapore .

  • Rad Web Hosting - Locations: Dallas TX (US). Company registered in United States. Datacenter located in a former Federal Reserve Bank building, highly secure

  • HostStage - Locations: France (FR), Canada (CA), US. Company registered in France. Uses Coingate. Also provides shared web hosting. Anonymous sign up OK as long as no fraud, Tor traffic OK provided it is not used in a way that causes trouble

  • Lunanode - Locations: Canada (CA), France (FR). Company registered in Canada. User reports that registration is not allowed when using a VPN. Another user reports that their VPN worked, but LunaNode required phone number verification to pay with Bitcoin and/or Lightning Network (LN).

  • SeiMaxim - Locations: Almere (NL), Amsterdam (NL), Los Angeles (US). Company registered in Netherlands. Anonymous signup allowed. Bitcoin full nodes are allowed. Also offers GPU mining servers, domains, shared hosting, and HTTP/SOCKS proxies. Uses Coinbase payment gateway

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • IndoVirtue - Locations: Singapore (SG), US. Company registered in Bali, Indonesia (?). No VPN/proxy during signup allowed

  • VPSGOD - Locations: Germany (DE), US, France (FR), Netherlands (NL), United States (US). Company registered in US. Google captcha

  • BuyVM / Frantech - Locations: Las Vegas (US), New Jersey (US), Luxembourg (LU), Miami (US). Company registered in Canada. Supports Anycast IP addressing

  • Servting - Locations: Netherlands (NL), India (IN), Germany (DE), London (UK), United States (US), Singapore (SG), Canada (CA), South Korea (KR), Australia (AU), Japan (JP), Ireland (IE), France (FR), Sweden (SE), Spain (ES), Mexico (MX), Brazil (BR), Poland (PL). Company registered in United States. Currently reselling Digital Ocean, AWS Lightsail and Vultr. BTCPayServer as payment gateway. Encourage anonymous sign-up. Provider notes: “TOR and VPNs allowed, we do not use any fraud detection software such as Maxmind. A real email address is encouraged for correspondence but not a requirement . We offer block storage upgrades upon request. We do not check identities or perform any verification, if payment is successful you get a server!”

  • RamNode - Locations: Seattle/Los Angeles/Atlanta/NYC (US), Netherlands (NL). Company registered in US. Pay-by-the-hour model. User reports they require phone number verification

  • VPSServer - Locations: San Francisco/Chicago/Dallas/Miami/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Bangalore (IN), Tokyo (JP), Hong Kong (HK), Singapore (SG), Sydney (AU). Company registered in US. Uses BitPay. Reader reports they are Tor hostile: “I can’t join or use SSH to connect to their VPSs over Tor. No relays allowed (and most certainly no exits).” See: https://www.vpsserver.com/community/questions/7/i-want-tot-use-tor-network-is-it-allowed/

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

  • Namecheap - Locations: US. Company registered in US.

  • BitLaunch - Locations: DigitalOcean, Vultr, Linode, Netherlands (NL), United States (US), United Kingdom (UK). Company registered in Unknown. Cryptocurrency payment front-end to Digital Ocean/Vultr/Linode. User reprts they also run their own infrastructure with their own ASN

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Crowncloud - Locations: Frankfurt (DE), Los Angeles (US). Company registered in Australia.

  • Hostwinds - Locations: US, Netherlands (NL). Company registered in US.

  • Mightweb - Locations: US. Company registered in US.

  • MeanServers - Locations: US. Company registered in US.

  • SecureDragon - Locations: US. Company registered in US.

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • Javapipe (now Mochahost) - Locations: Chicago (US), Amsterdan (NL), Bucharest (RO). Company registered in ???.

  • AHnames - Locations: Ashburn (US). Company registered in Netherlands. Supports Lightning Network (LN)

  • Evolution Host - Locations: Strasbourg (FR), Sydney (AU), Frankfurt (DE), Montreal (CA), London (UK), Dallas (US), Oregon (US), Virginia (US), Warsaw (PL). Company registered in ???. Supports Lightning Network (LN). User reports they have started blocking proxy/Tor signups for smaller packages due to abuse

  • ChunkHost - Locations: Los Angeles (US). Company registered in US. Has anonymous registration (email and password), and they were first web hosting company to ever accept Bitcoin, way back in 2012. When you pay with Bitcoin, you get 5% discount. No payment processor, they accept BTC directly. Description provided by a user and not verified. There is a CloudFlare / Google captcha for Tor browser users visiting their website

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • letbox - Locations: Los Angeles (US), Dallas (US). Company registered in Seattle (US). Large Storage, may be suitable for running Bitcoin full nodes

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • Hosthatch - Locations: Stockholm (SE), Los Angeles (US), Chicago (US), Amsterdam (NL). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • Serverhub - Locations: Chicago (US), Seattle (US), New York (US), Dallas (US), Phoneix (US), Frankfurt (DE). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • Servers.Guru - Locations: Helsinki (FI), Nuremberg (DE), Falkenstein (DE), Ashburn (US). Company registered in United States. Anonymous signup allowed (only a valid email address is required). Tor traffic OK. Accepts Lightning Network (LN) payments. Uses self-hosted BitCartCC for Bitcoin payments (as well as others), takes DOGE, DASH, and Zcash/ZEC via Plisio.

  • MadGenius - Locations: Minneapolis (US), Chicago (US), Ashburn (US). Company registered in Minnesota, US. Uses BitPay, but user reports that if you email their sales department they will give you a non-BitPay BTC address. User reports they do not require/verify personal info except for email address.

  • BreezeHost - Locations: Dallas TX (US), Charlotte NC (US). Company registered in United States. Accepts Bitcoin (and other cryptocurrencies) using Plisio, Lightning payments currently not supported. Personal information supplied at signup does not need to be accurate. Tor traffic is allowed.

  • VPS-mart / DatabaseMart - Locations: Dallas (US). Company registered in Dallas (US).

  • TechRich - Locations: Japan (JP), Korea (KR), Malaysia (MY), China (CN), Hong Kong (HK), United States (US), Thailand (TH). Company registered in Hong Kong. They ask for user information but don’t verify/require KYC if you pay by cryptocurrency. Tor traffic OK as long as you don’t get abuse/complaints. They can arrange dedicated fiber lines for each client at the HK location. Uses Coinpayments, Bitpay, and Payeer for payments, can arrange other payment methods as long as you are not sending from an OFAC-listed address. They accept Lightning Network (LN) payments

  • IncogNET - Locations: Netherlands (NL), Idaho (US). Company registered in Wyoming, United States. Accepts Bitcoin via BTCPayServer (and other cryptocurrencies also). No personal information required to sign up, only an email address (which isn’t verified). Ordering via Tor/VPN is OK. Large Storage available on a case-by-case basis, contact them to arrange it. Uses Google Captchas (reCaptcha). Also does anonymous domain registration

  • SafeAlps - Locations: Switzerland (CH) (shared hosting only), Romania (RO), United States (US), Iceland (IS) (email hosting only). Company registered in Switzerland. VPS in Romania and the US, shared hosting in Switzerland, one-time-payment email hosting in Iceland. Tor-friendly, both traffic and nodes are welcome. Anonymous sign up is OK, PGP encrypted email communication is supported. Payments via Plisio, Lightning Network (LN) payment supported. No captchas or assets loaded from servers they don’t control. Large Storage servers with HDDs (or SSDs on request) are available.

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • GoSSDHosting - Locations: United States (US), India (IN). Company registered in India.

  • RDP.sh - Locations: Netherlands (NL), Phoneix (US), Poland (PL). Company registered in Germany. Privacy focused Windows RDP and Linux server provider. Only asks for email, no KYC. Accepts Bitcoin via Coinbase gateway.

  • CoinsHosting - Locations: New York (US). Company registered in Delaware, US. Tor traffic allowed only on dedicated servers. Doesn’t check the information you provide at signup (only asks for name and email). May require for KYC for suspicious or abusive customers but provider states they do so very rarely. Payments via CoinPayments and Coinify. Uses Google Captchas.

  • NetNexus - Locations: Virginia (US), Ohio (US), California (US), Oregon (US), Mumbai (IN), Osaka (JP), Seoul (KR), Singapore (SG), Sydney (AU), Tokyo (JP), Central (CA), Frankfurt (DE), Ireland (IE), London (GB), Paris (FR), Stockholm (SE), Sao Paulo (BR). Company registered in Portland, Oregon. Tor traffic allowed. Asks for email address, name, phone number, etc on signup but doesn’t verify the information. Bitcoin payment with Plisio. No Google Captchas. Large Storage, maybe suitable for full nodes.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

  • Gigablits - Locations: Amsterdam (NL), Bangalore (IN), Frankfurt (DE), London (UK), New York (US), San Francisco (US), Singapore (SG), Sydney (AU), Toronto (CA). Company registered in ???. DigitalOcean reseller. Anonymity focused, no personal information required. Payments accepted via Plisio. User reports they took payment but did not deliver service or respond to tickets, business may be defunct.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: Asia

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • ExtraVM - Locations: Dallas TX (US), Los Angeles CA (US), Miami FL (US), Vint Hill VA (US), Montreal QC (CAN), London (UK), Gravelines (FR), Sydney (AU), Singapore (SG), Tokyo (JP). Company registered in Delaware, US. Ryzen servers. Crypto payments via Cryptomus. DdoS protected. Also offers Minecraft servers.

  • SporeStack - Locations: San Francisco/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Bangalore (IN). Company registered in Texas (US). Accountless VPS provider. Also takes Bcash / Bitcoin SV. API-only/no registration, servers on Digital Ocean, Vultur/Linode available on request, Tor-only servers in undisclosed location, onion service URL: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/#ref=vps

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • MLNL.host (Millenial) - Locations: Hong Kong (HK), United Kingdom (UK). Company registered in UK. More locations being added. KVM servers, offers cheaper options behind NAT. User reports they work well for accessing geofenced web services intended for HK users. User reports payment is via CoinGate and Coinbase. Automated fraud checks may cancel your order (file a ticket to get through this)

  • Mondoze - Locations: Cyberjaya Malaysia (MY). Company registered in Malaysia. Payments via Plisio. Dedicated server available if you contact them directly. Tor traffic OK as long as you conform to their TOS. Anonymous sign up OK. Large storage maybe available if you contact support.

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • IndoVirtue - Locations: Singapore (SG), US. Company registered in Bali, Indonesia (?). No VPN/proxy during signup allowed

  • Servting - Locations: Netherlands (NL), India (IN), Germany (DE), London (UK), United States (US), Singapore (SG), Canada (CA), South Korea (KR), Australia (AU), Japan (JP), Ireland (IE), France (FR), Sweden (SE), Spain (ES), Mexico (MX), Brazil (BR), Poland (PL). Company registered in United States. Currently reselling Digital Ocean, AWS Lightsail and Vultr. BTCPayServer as payment gateway. Encourage anonymous sign-up. Provider notes: “TOR and VPNs allowed, we do not use any fraud detection software such as Maxmind. A real email address is encouraged for correspondence but not a requirement . We offer block storage upgrades upon request. We do not check identities or perform any verification, if payment is successful you get a server!”

  • VPSServer - Locations: San Francisco/Chicago/Dallas/Miami/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Bangalore (IN), Tokyo (JP), Hong Kong (HK), Singapore (SG), Sydney (AU). Company registered in US. Uses BitPay. Reader reports they are Tor hostile: “I can’t join or use SSH to connect to their VPSs over Tor. No relays allowed (and most certainly no exits).” See: https://www.vpsserver.com/community/questions/7/i-want-tot-use-tor-network-is-it-allowed/

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

  • VPSBit - Locations: Hong Kong (HK), Lithuania (LT). Company registered in Hong Kong & Lithuania.

  • JPStream - Locations: Japan (JP). Company registered in Japan.

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • InternetBrothers - Locations: Korea (KR). Company registered in Korea. BTC accepted only on orders over $100, dedicated servers are not pre-configured. Non-HTTPS site

  • Kdatacenter - Locations: Korea (KR). Company registered in Korea.

  • VpsHosting - Locations: Hong Kong (HK). Company registered in Hong Kong (HK).

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • SuperBitHost - Locations: Bulgaria (BG), Germany (DE), Netherlands (NL), Luxembourg (LU), Malaysia (MY) Russia (RU), Singapore (SG), Switzerland (CH). Company registered in ???. uses Google captchas

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • Casbay - Locations: Malaysia (MY), Singapore (SG). Company registered in Malaysia. Accepts Bitcoin (and many more cryptocurrencies) via Plisio. No restrictions on Tor traffic. They only verify email address on signup, but may require KYC if you trigger anti-abuse/anti-fraud monitoring systems. Uses Google Captchas. Offers Large Storage servers, may be suitable for full nodes. Even larger storage capacity available if you contact them directly.

  • TechRich - Locations: Japan (JP), Korea (KR), Malaysia (MY), China (CN), Hong Kong (HK), United States (US), Thailand (TH). Company registered in Hong Kong. They ask for user information but don’t verify/require KYC if you pay by cryptocurrency. Tor traffic OK as long as you don’t get abuse/complaints. They can arrange dedicated fiber lines for each client at the HK location. Uses Coinpayments, Bitpay, and Payeer for payments, can arrange other payment methods as long as you are not sending from an OFAC-listed address. They accept Lightning Network (LN) payments

  • Wesbytes - Locations: Malaysia (MY). Company registered in Malaysia. Payments via Coinbase. Verifies email address, does not encourage anonymous registration. Does not limit user activity other than specified in their TOS. All VPS instances use KVM

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • GoSSDHosting - Locations: United States (US), India (IN). Company registered in India.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • NetNexus - Locations: Virginia (US), Ohio (US), California (US), Oregon (US), Mumbai (IN), Osaka (JP), Seoul (KR), Singapore (SG), Sydney (AU), Tokyo (JP), Central (CA), Frankfurt (DE), Ireland (IE), London (GB), Paris (FR), Stockholm (SE), Sao Paulo (BR). Company registered in Portland, Oregon. Tor traffic allowed. Asks for email address, name, phone number, etc on signup but doesn’t verify the information. Bitcoin payment with Plisio. No Google Captchas. Large Storage, maybe suitable for full nodes.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • Gigablits - Locations: Amsterdam (NL), Bangalore (IN), Frankfurt (DE), London (UK), New York (US), San Francisco (US), Singapore (SG), Sydney (AU), Toronto (CA). Company registered in ???. DigitalOcean reseller. Anonymity focused, no personal information required. Payments accepted via Plisio. User reports they took payment but did not deliver service or respond to tickets, business may be defunct.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: Worldwide

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

VPS: Middle East

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • IpTransit - Locations: Iran (IR). Company registered in Iran. Non-HTTPS site. Appears to be down, but you can try emailing them at the address given on their website

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: Australia

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • ExtraVM - Locations: Dallas TX (US), Los Angeles CA (US), Miami FL (US), Vint Hill VA (US), Montreal QC (CAN), London (UK), Gravelines (FR), Sydney (AU), Singapore (SG), Tokyo (JP). Company registered in Delaware, US. Ryzen servers. Crypto payments via Cryptomus. DdoS protected. Also offers Minecraft servers.

  • VPSServer - Locations: San Francisco/Chicago/Dallas/Miami/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Bangalore (IN), Tokyo (JP), Hong Kong (HK), Singapore (SG), Sydney (AU). Company registered in US. Uses BitPay. Reader reports they are Tor hostile: “I can’t join or use SSH to connect to their VPSs over Tor. No relays allowed (and most certainly no exits).” See: https://www.vpsserver.com/community/questions/7/i-want-tot-use-tor-network-is-it-allowed/

  • ZappieHost - Locations: New Zealand (NZ), South Africa (ZA), Valdivia (CL). Company registered in US.

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • NetNexus - Locations: Virginia (US), Ohio (US), California (US), Oregon (US), Mumbai (IN), Osaka (JP), Seoul (KR), Singapore (SG), Sydney (AU), Tokyo (JP), Central (CA), Frankfurt (DE), Ireland (IE), London (GB), Paris (FR), Stockholm (SE), Sao Paulo (BR). Company registered in Portland, Oregon. Tor traffic allowed. Asks for email address, name, phone number, etc on signup but doesn’t verify the information. Bitcoin payment with Plisio. No Google Captchas. Large Storage, maybe suitable for full nodes.

  • Gigablits - Locations: Amsterdam (NL), Bangalore (IN), Frankfurt (DE), London (UK), New York (US), San Francisco (US), Singapore (SG), Sydney (AU), Toronto (CA). Company registered in ???. DigitalOcean reseller. Anonymity focused, no personal information required. Payments accepted via Plisio. User reports they took payment but did not deliver service or respond to tickets, business may be defunct.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: South America

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • NetNexus - Locations: Virginia (US), Ohio (US), California (US), Oregon (US), Mumbai (IN), Osaka (JP), Seoul (KR), Singapore (SG), Sydney (AU), Tokyo (JP), Central (CA), Frankfurt (DE), Ireland (IE), London (GB), Paris (FR), Stockholm (SE), Sao Paulo (BR). Company registered in Portland, Oregon. Tor traffic allowed. Asks for email address, name, phone number, etc on signup but doesn’t verify the information. Bitcoin payment with Plisio. No Google Captchas. Large Storage, maybe suitable for full nodes.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • BrilliantHost - Locations: Washington, D.C. (US), California (US), Iowa (US), Toronto (CA), London (GB), Amsterdam (NL), Warsaw (PL), Paris (FR), Frankfurt (DE), Milan (IT), Vienna (AT), Sydney (AU), Hong Kong (HK), Stockholm (SE), Dubai (AE), São Paulo (BR). Company registered in Wyoming, United States. Tor traffic OK. No Google Captchas. Very privacy-and anonymity friendly, only an email is required. Processes crypto payments manually via their support team. Advertises high performance at low prices.

VPS: Africa

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • ZappieHost - Locations: New Zealand (NZ), South Africa (ZA), Valdivia (CL). Company registered in US.

  • Web4Africa - Locations: Ghana, Kenya, Nigeria (NG), South Africa (ZA). Company registered in South Africa.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • VPSBroker - Locations: Amsterdam (NL), Atlanta (US), Bangalore (IN), Chicago (US), Dallas (US), Delhi NCR (IN), Frankfurt (DE), Honolulu (US), Johannesburg (ZA), London (UK), Los Angeles (US), Madrid (ES), Manchester (UK), Melbourne (AU), Mexico City (MX), Miami (US), Mumbai (IN), New York (US), Osaka (JP), Paris (FR), Santiago (CL), São Paulo (BR), Seattle (US), Silicon Valley (US), Singapore (SG), Stockholm (SE), Sydney (AU), Tel Aviv (IL), Tokyo (JP), Toronto (CA), Warsaw (PL), Seoul (KR). Company registered in ???. Signup over Tor ok, user reports no captchas or Maxmind/KYC. Accepts Bitcoin, Monero (XMR), and others. User reports the UI is really good. Disk space available up to 160GB.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

VPS: Accountless

  • SporeStack - Locations: San Francisco/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Bangalore (IN). Company registered in Texas (US). Accountless VPS provider. Also takes Bcash / Bitcoin SV. API-only/no registration, servers on Digital Ocean, Vultur/Linode available on request, Tor-only servers in undisclosed location, onion service URL: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/#ref=vps

  • Host4Coins - Locations: France (FR), Zurich (CH). Company registered in France(?). Only Bitcoin and Lightning Network (LN) payments. Anonymous signup encouraged (they do not verify email address validity). $2/mo discount for IPv6-only service. Run by https://twitter.com/ketominer

VPS: Undisclosed Location

  • SporeStack - Locations: San Francisco/NYC (US), Toronto (CA), London (UK), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Bangalore (IN). Company registered in Texas (US). Accountless VPS provider. Also takes Bcash / Bitcoin SV. API-only/no registration, servers on Digital Ocean, Vultur/Linode available on request, Tor-only servers in undisclosed location, onion service URL: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/#ref=vps

  • Host4Coins - Locations: France (FR), Zurich (CH). Company registered in France(?). Only Bitcoin and Lightning Network (LN) payments. Anonymous signup encouraged (they do not verify email address validity). $2/mo discount for IPv6-only service. Run by https://twitter.com/ketominer

VPS: Oceania

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

VPS: Central America

  • Ccihosting - Locations: Panama (PA). Company registered in Panama.

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

VPS: Cloud Front-End

  • Servting - Locations: Netherlands (NL), India (IN), Germany (DE), London (UK), United States (US), Singapore (SG), Canada (CA), South Korea (KR), Australia (AU), Japan (JP), Ireland (IE), France (FR), Sweden (SE), Spain (ES), Mexico (MX), Brazil (BR), Poland (PL). Company registered in United States. Currently reselling Digital Ocean, AWS Lightsail and Vultr. BTCPayServer as payment gateway. Encourage anonymous sign-up. Provider notes: “TOR and VPNs allowed, we do not use any fraud detection software such as Maxmind. A real email address is encouraged for correspondence but not a requirement . We offer block storage upgrades upon request. We do not check identities or perform any verification, if payment is successful you get a server!”

  • BitHost - Locations: All Digital Ocean/Linode/Hetzner/Vultr. Company registered in ???. Bitcoin-accepting front end for renting servers from Digital Ocean/Linode/Hetzner/Vultr

  • BitLaunch - Locations: DigitalOcean, Vultr, Linode, Netherlands (NL), United States (US), United Kingdom (UK). Company registered in Unknown. Cryptocurrency payment front-end to Digital Ocean/Vultr/Linode. User reprts they also run their own infrastructure with their own ASN

  • Bizcloud - Locations: Everywhere DigitalOcean has presence. Company registered in Malaysia. DigitalOcean reseller. Accepts BTC, LTC, ETH, XRP, BCH.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • Gigablits - Locations: Amsterdam (NL), Bangalore (IN), Frankfurt (DE), London (UK), New York (US), San Francisco (US), Singapore (SG), Sydney (AU), Toronto (CA). Company registered in ???. DigitalOcean reseller. Anonymity focused, no personal information required. Payments accepted via Plisio. User reports they took payment but did not deliver service or respond to tickets, business may be defunct.

Low End VPS providers

  • Providers offering servers for less than 2 EUR/month, sometimes much less. In many cases these are NAT VPS providers where you get no unique IPv4 address, only a port range and/or IPv6 addresses.

Low End VPS: Europe

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • Justhost - Locations: Russia (RU). Company registered in Russia. Selling VDS

  • Skhron - Locations: Warsaw (PL). Company registered in Estonia. Equipment located at Equinix WA3. Bitcoin, Monero (XMR), TRX, USDT/TRC20, LTC accepted using self-hosted BTCPayServer (BTC) and BitCartCC (other coins). Lightning Network (LN) payments supported. Tor traffic allowed. Only a valid email is required, they don’t check other user-provided personal info unless you pay with fiat. No KYC and no error prone fraud protection to cancel your order unexpectedly. Captchas are standard pictures or hCaptcha. Offers a low-end KVM VPS for 1.15 EUR/month. Onion service at http://ufcmgzuawelktlvqaypyj4efjonbzleoketixdmtzidvfg254gfwyuqd.onion/

  • MrVM - Locations: Sweden (SE). Company registered in Sweden. No Tor traffic allowed

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

Low End VPS: Asia

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

Low End VPS: Middle East

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

Low End VPS: North America

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

Low End VPS: Oceania

  • LowEndSpirit - Locations: Rotterdam (NL), London (UK), Milan (IT), Phoenix/Kansas/Lenoir NC (US), Tokyo (JP), Falkenstein (DE), Sofia (BG), Sandefjord (NO), Reims (FR), Perth/Sydney (AU), Singapore. Company registered in ???. Now a directory site / forum for low cost hosting.

Dedicated Server providers

  • Dedicated Servers give you an entire physical server to yourself, generally offering higher performance and better security but also a much higher price than a VPS.

Dedicated Server: Europe

  • Hostiko - Locations: Kyiv (UA), Falkenstein (DE), Warsaw (PL). Company registered in Ukraine. Accepts BTC, XMR, many others via NOWPayments (no KYC and numerous altcoins). Anonymous sign-up/signup via Tor is allowed. They actively monitor their network for abuse and react accordingly.

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • PrivateAlps - Locations: Switzerland (CH). Company registered in Panama. Networking provided by Ipconnect (Seychelles). Tor traffic and anonymous signup OK. No LN payment. 10% discount if you enter the affiliate 5DBKR when ordering

  • VSYS - Locations: Ukraine (UA), Netherlands (NL). Company registered in Kyiv, Ukraine. Anonymous signup and Tor traffic OK. States they use Bitcoin Core to process BTC payments directly, LTC and Doge via their billing software.

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • 3v-hosting - Locations: Ukraine (UA). Company registered in Ukraine. Tor traffic allowed unless backbone provider objects. User data required at signup (not anonymous)

  • Zak Servers - Locations: Bulgaria (BG), Ukraine (UA), Netherlands (NL), Switzerland (CH), Romania (RO), Russia (RU), Malaysia (MY). Company registered in Singapore. Privacy-focused dedicated server provider, anonymous/Tor signup/Tor traffic OK. Payments processed by Blockonomics

  • Eldernode - Locations: Chicago (US), San Jose (US), New York (US), Denmark (DK), Netherlands (NL), Manchester (UK), France (FR), Germany (DE), Canada. Company registered in Lithuania .

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Cinfu - Locations: Germany (DE), Bulgaria (BG), France (FR), Netherlands (NL), US. Company registered in Seychelles. Anonymous signup discouraged (automated fraud checks). No signup over Tor (website currently blocks Tor users entirely). User reports their datacentres may de-prioritise Bitcoin related traffic (and/or other large data transfers) resulting in extremely long full node sync times (weeks, single kbps bandwidth) after an initial burst for about 15% of the BTC blockchain

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • LegionBox - Locations: US, Switzerland (CH), Germany (DE), Russia (RU). Company registered in Australia. Anonymous signup discouraged (automated fraud checks)

  • THC Servers - Locations: Romania (RO), Canada. Company registered in United States. Supports Lightning Network (LN)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • FlokiNET - Locations: Romania (RO), Iceland (IS), Finland (FI), Netherlands (NL). Company registered in Iceland. Free speech-focused service, Tor friendly. Includes (potentially outdated) OpenBSD images which must be manually installed via VNC. Anonymous signup OK, only valid email address is required. Accepts Bitcoin and XMR via Coinpayments. Allows customizing dedicated servers, including with Large Storage suitable for full nodes. This website is currently hosted on Flokinet

  • Qhoster - Locations: UK, US, Canada (CA), Bulgaria (BG), Lithuania (LT), France (FR), Germany (DE), Netherlands (NL), Switzerland (CH). Company registered in ???. Google captcha

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • NiceVPS - Locations: Netherlands (NL). Company registered in Dominica. Minimal registration data and Tor friendly. Bulletproof DDoS-protected hosting available. Also provides confidential domains. Will offer hosting in Switzerland (CH) soon.

  • BlazingFast - Locations: Netherlands (NL). Company registered in Netherlands. High performance servers

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • Cockbox - Locations: Romania (RO). Company registered in Seychelles. Servers with cocks. Tor and anonymity-friendly. Onion URL: http://dwtqmjzvn2c6z2x462mmbd34ugjjrodowtul4jfbkexjuttzaqzcjyad.onion/?r=3033

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • Hostingby.Design - Locations: Germany (DE), Netherlands (NL). Company registered in Denmark. Reseller / crypto front-end for Hetzner, Leaseweb, NFOrce. Large Storage, may be suitable for running full nodes. Google Captchas

  • AtomicNetworks - Locations: Eygelshoven (NL), Chicago (US), Miami (US), Los Angeles (US). Company registered in Delware, United States. Crypto payments through Coinbase Wallets, samller altcoins via NowPayments. Tor traffic OK. Uses Google Captchas. Asks for personal information but you can write whatever you like.

  • AlexHost - Locations: Tallbert (SE), Moldova (MD), Sofia (BG), Netherlands (NL). Company registered in Moldova. Email hosting included with shared web hosting service. Operates through AS200019, with own datacenter, network and hardware in the Republic of Moldova. Domain registration via OpenSRS/Tucows. They welcome people using their VPS for VPN endpoints. No KYC unless the payment gateway (e.g Paypal) asks for it (so pay with crypto). Doesn’t verify the personal data you give them otherwise. Tor bridges and relays are fine, Tor exit nodes are not allowed. Bitcoin payments accepted via BTCPayServer. Monero and other cryptocurrencies also accepted. May use Google Captchas (via Hostbill). Dedicated servers can be customized so they have Large Storage for running full nodes. Provider states they support freedom of speech and privacy.

  • HostStage - Locations: France (FR), Canada (CA), US. Company registered in France. Uses Coingate. Also provides shared web hosting. Anonymous sign up OK as long as no fraud, Tor traffic OK provided it is not used in a way that causes trouble

  • Justhost - Locations: Russia (RU). Company registered in Russia. Selling VDS

  • IP-Connect - Locations: Ukraine (UA). Company registered in Ukraine. Runs their own datacenter. Tor-friendly. Minimal registration. Crypto payments accepted via payment gateway. Doesn’t require KYC, allows TOR/proxy. Criminal activity prohibited. All VPS are KVM-based, 100% SSD, recent Intel processors, redundant high quality uplinks, lowest latency possible, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random generators for fast entropy, noVNC, images of common Linux distributions for fully automated installation, bring your own .iso (also Windows etc. allowed). Now additionally accepts payments via Nowpayments.io, which supports hundreds of different cryptocurrencies. Use promocode “bitcoin-vps2022” for -10% discount

  • SeiMaxim - Locations: Almere (NL), Amsterdam (NL), Los Angeles (US). Company registered in Netherlands. Anonymous signup allowed. Bitcoin full nodes are allowed. Also offers GPU mining servers, domains, shared hosting, and HTTP/SOCKS proxies. Uses Coinbase payment gateway

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • Internoc24 - Locations: Czech Republic (CZ), Sweden (SE), UK, Finland (FI), Russia (RU). Company registered in US/CZ. Offers both OpenVZ and KVM. Advertises anonymous signup

  • VPSGOD - Locations: Germany (DE), US, France (FR), Netherlands (NL), United States (US). Company registered in US. Google captcha

  • Noez - Locations: Frankfurt (DE). Company registered in Germany. Large Storage, may be suitable for running Bitcoin full nodes

  • XetHost - Locations: Budapest (HU). Company registered in Hungary. DevOps-focused. Accepts many different cryptocurrencies via CoinGate. Asks for phone number and email address.

  • Dedimax - Locations: 120+ worldwide: France (FR), Netherlands (NL), United States (US), Canada (CA), Portugal (PT), Lithuania (LT), Moldova (MD), Spain (ES), Bulgaria (BG), Germany (DE), Austria (AT), and many many more…. Company registered in Belgium. User reports Tor signup doesn’t work

  • HostSailor - Locations: Romania (RO), Netherlands (NL). Company registered in UAE. Lightning network (LN) via Coingate. Google Captchas. User reports they log you out constantly if using Tor.

  • OrangeWebsite - Locations: Iceland (IS). Company registered in Iceland. Asks for very minimal user information, seems to take security seriously

  • VPSBit - Locations: Hong Kong (HK), Lithuania (LT). Company registered in Hong Kong & Lithuania.

  • Coin.Host / Coinshost - Locations: Zurich (CH). Company registered in Switzerland. Does not provide anonymous hosting, will ask for detailed information about what you are hosting on their servers. Will not refund any deposits made prior to this. We recommend clarifying your proposed usage with them before depositing money with them.

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Crowncloud - Locations: Frankfurt (DE), Los Angeles (US). Company registered in Australia.

  • Hostwinds - Locations: US, Netherlands (NL). Company registered in US.

  • CryptoHO.ST - Locations: Romania (RO). Company registered in Romania (?). Supports Lightning Network (LN), Monero, and 300+ altcoins

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • SuperBitHost - Locations: Bulgaria (BG), Germany (DE), Netherlands (NL), Luxembourg (LU), Malaysia (MY) Russia (RU), Singapore (SG), Switzerland (CH). Company registered in ???. uses Google captchas

  • Aurologic (Fastpipe) - Locations: Combahton datacenter in Frankfurt, Germany (DE). Company registered in Germany. Large Storage / Block storage offered, may be suitable for running Bitcoin full nodes. Used to be Fastpipe.io, is now Aurologic. If they still take Bitcoin.

  • Sered - Locations: Madrid (ES), Barcelona (ES). Company registered in Spain. Website may block Tor users (Google captcha). Use coupon code VQSZANRO for a 2 month discount.

  • Javapipe (now Mochahost) - Locations: Chicago (US), Amsterdan (NL), Bucharest (RO). Company registered in ???.

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • Serverhub - Locations: Chicago (US), Seattle (US), New York (US), Dallas (US), Phoneix (US), Frankfurt (DE). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • DeinServerHost - Locations: Combahton datacenter in Frankfurt, Germany (DE). Company registered in Germany. Bitcoin & Lightning Network (LN) via Coingate, anonymous/pseudonymous signup over Tor allowed. Very flexible server configuration (set RAM/disk/# cores independently). Large Storage, may be suitable for running Bitcoin full nodes. Offers one-click DdoS protection via Path.net

  • Terrahost - Locations: Sandefjord (NO). Company registered in Norway. Runs their own datacenter. Good reputation in the OpenBSD community (but does not offer OpenBSD support natively, you must bring your own install image). Their website claims to use BitPay but it’s not true, they actually use Coingate/BTCPayServer. Sometimes asks for full KYC at signup (e.g if you signed up via Tor)

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • ServerRoom - Locations: New York (US), Bucharest (RO), San Francisco (US), Miami (US), Amsterdam (NL). Company registered in New York (US). Same management as Primcast. Self-hosted Bitcoin payment processing, no Lightning yet but is planned soon. Anonymous signup and Tor ok. Offers Bitcoin full nodes as dedicated servers, also GPU dedicated servers.

  • Primcast - Locations: New York (US), Bucharest (RO), San Francisco (US), Miami (US), Amsterdam (NL). Company registered in New York (US). Streaming-focused provider, advertises low latency routes. Same management as ServerRoom. Self-hosted Bitcoin payment processing, no Lightning yet but is planned soon. Anonymous signup and Tor ok. Offers Bitcoin full nodes as dedicated servers, also GPU dedicated servers.

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • AnyColo - Locations: Romania (RO). Company registered in Romania. Accepts BTC, XMR. Payments via own BTCPayServer instance. Anonymous signup allowed. According to the company, “our TOS is simple: no abuse and no complaints.”

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • DataClub - Locations: Meppel/Netherlands (NL), Stockholm (SE), Riga/Latvia (LV). Company registered in Belize/Cyprus/UK. Dedicated servers in Latvia. May require KYC

  • Hostiquette - Locations: Amsterdam (NL), Frankfurt (DE), Helsinki (FI), London (UK), Moscow (RU), Paris (FR), Zurich (CH). Company registered in ???. Tor and anonymity-friendly. Using BTCPay Server for Bitcoin payments. Can accept other cryptocurrencies if you contact them. Emai addresses are not verified but using a valid email is recommended for communications. Custom servers are available if you contact them.

  • DediStart - Locations: Bulgaria (BG). Company registered in Cyprus. Payments via Coinify. Sister company of VPSAG (for VPS). Blocks Tor users.

  • Host.ag - Locations: Bulgaria (BG). Company registered in Bulgaria. Blocks Tor users. Uses self-hosted payment gateway. Large Storage, probably suitable for full nodes. Lets you customise the server extensively before ordering. Offers lease-to-own where you own the server after a certain number of months, in exchange for a higher per-month rate.

  • Ukrainian Data Network (UDN) - Locations: Kyiv/Kiev (UA). Company registered in Ukraine. Anonymous signup OK, even email address is optional. Accepts BTC and Monero/XMR. Uses their own internal payment system, no 3rd party payment processor

  • Zergrush Hosting - Locations: Bucharest (RO). Company registered in Romania. Payments via uTrust, which supports Lightning Network (LN) payments. No Tor exits allowed. Do ask for personal information at signup.

  • IncogNET - Locations: Netherlands (NL), Idaho (US). Company registered in Wyoming, United States. Accepts Bitcoin via BTCPayServer (and other cryptocurrencies also). No personal information required to sign up, only an email address (which isn’t verified). Ordering via Tor/VPN is OK. Large Storage available on a case-by-case basis, contact them to arrange it. Uses Google Captchas (reCaptcha). Also does anonymous domain registration

  • HostSlick - Locations: Netherlands (NL). Company registered in Germany. Accepts Bitcoin via Coinify. Has internal KYC checks - your server can be suspended if you registered via Proxy/VPN. Google captchas. User reports you may be able to register via VPN if you open a support ticket to manually deposit BTC. We recommend testing with small amounts of money and low cost services first.

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • KernelHost - Locations: Frankfurt (DE). Company registered in Austria. Bitcoin payments via BTCPayServer. KVM based servers. Servers at Maincubes datacenter

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • RedSwitches - Locations: Singapore (SG), Miami (US), Germany (DE), Switzerland (CH), Australia (AU), Mumbai (IN), Tokyo (JP), Netherlands (NL), Hong Kong (HK), San Francisco (US), Canada (CA), London (UK), Washington DC (US). Company registered in Singapore.

Dedicated Server: North America

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • Eldernode - Locations: Chicago (US), San Jose (US), New York (US), Denmark (DK), Netherlands (NL), Manchester (UK), France (FR), Germany (DE), Canada. Company registered in Lithuania .

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Cinfu - Locations: Germany (DE), Bulgaria (BG), France (FR), Netherlands (NL), US. Company registered in Seychelles. Anonymous signup discouraged (automated fraud checks). No signup over Tor (website currently blocks Tor users entirely). User reports their datacentres may de-prioritise Bitcoin related traffic (and/or other large data transfers) resulting in extremely long full node sync times (weeks, single kbps bandwidth) after an initial burst for about 15% of the BTC blockchain

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • LegionBox - Locations: US, Switzerland (CH), Germany (DE), Russia (RU). Company registered in Australia. Anonymous signup discouraged (automated fraud checks)

  • THC Servers - Locations: Romania (RO), Canada. Company registered in United States. Supports Lightning Network (LN)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • Qhoster - Locations: UK, US, Canada (CA), Bulgaria (BG), Lithuania (LT), France (FR), Germany (DE), Netherlands (NL), Switzerland (CH). Company registered in ???. Google captcha

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • AtomicNetworks - Locations: Eygelshoven (NL), Chicago (US), Miami (US), Los Angeles (US). Company registered in Delware, United States. Crypto payments through Coinbase Wallets, samller altcoins via NowPayments. Tor traffic OK. Uses Google Captchas. Asks for personal information but you can write whatever you like.

  • WindowsVPSHost - Locations: Buffalo (US) . Company registered in Singapore .

  • Rad Web Hosting - Locations: Dallas TX (US). Company registered in United States. Datacenter located in a former Federal Reserve Bank building, highly secure

  • HostStage - Locations: France (FR), Canada (CA), US. Company registered in France. Uses Coingate. Also provides shared web hosting. Anonymous sign up OK as long as no fraud, Tor traffic OK provided it is not used in a way that causes trouble

  • SeiMaxim - Locations: Almere (NL), Amsterdam (NL), Los Angeles (US). Company registered in Netherlands. Anonymous signup allowed. Bitcoin full nodes are allowed. Also offers GPU mining servers, domains, shared hosting, and HTTP/SOCKS proxies. Uses Coinbase payment gateway

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • IndoVirtue - Locations: Singapore (SG), US. Company registered in Bali, Indonesia (?). No VPN/proxy during signup allowed

  • VPSGOD - Locations: Germany (DE), US, France (FR), Netherlands (NL), United States (US). Company registered in US. Google captcha

  • Dedimax - Locations: 120+ worldwide: France (FR), Netherlands (NL), United States (US), Canada (CA), Portugal (PT), Lithuania (LT), Moldova (MD), Spain (ES), Bulgaria (BG), Germany (DE), Austria (AT), and many many more…. Company registered in Belgium. User reports Tor signup doesn’t work

  • Namecheap - Locations: US. Company registered in US.

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Crowncloud - Locations: Frankfurt (DE), Los Angeles (US). Company registered in Australia.

  • Hostwinds - Locations: US, Netherlands (NL). Company registered in US.

  • Mightweb - Locations: US. Company registered in US.

  • MeanServers - Locations: US. Company registered in US.

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • Javapipe (now Mochahost) - Locations: Chicago (US), Amsterdan (NL), Bucharest (RO). Company registered in ???.

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • letbox - Locations: Los Angeles (US), Dallas (US). Company registered in Seattle (US). Large Storage, may be suitable for running Bitcoin full nodes

  • Serverhub - Locations: Chicago (US), Seattle (US), New York (US), Dallas (US), Phoneix (US), Frankfurt (DE). Company registered in US. Large Storage, may be suitable for running Bitcoin full nodes

  • ServerRoom - Locations: New York (US), Bucharest (RO), San Francisco (US), Miami (US), Amsterdam (NL). Company registered in New York (US). Same management as Primcast. Self-hosted Bitcoin payment processing, no Lightning yet but is planned soon. Anonymous signup and Tor ok. Offers Bitcoin full nodes as dedicated servers, also GPU dedicated servers.

  • Primcast - Locations: New York (US), Bucharest (RO), San Francisco (US), Miami (US), Amsterdam (NL). Company registered in New York (US). Streaming-focused provider, advertises low latency routes. Same management as ServerRoom. Self-hosted Bitcoin payment processing, no Lightning yet but is planned soon. Anonymous signup and Tor ok. Offers Bitcoin full nodes as dedicated servers, also GPU dedicated servers.

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • MadGenius - Locations: Minneapolis (US), Chicago (US), Ashburn (US). Company registered in Minnesota, US. Uses BitPay, but user reports that if you email their sales department they will give you a non-BitPay BTC address. User reports they do not require/verify personal info except for email address.

  • BreezeHost - Locations: Dallas TX (US), Charlotte NC (US). Company registered in United States. Accepts Bitcoin (and other cryptocurrencies) using Plisio, Lightning payments currently not supported. Personal information supplied at signup does not need to be accurate. Tor traffic is allowed.

  • VPS-mart / DatabaseMart - Locations: Dallas (US). Company registered in Dallas (US).

  • TechRich - Locations: Japan (JP), Korea (KR), Malaysia (MY), China (CN), Hong Kong (HK), United States (US), Thailand (TH). Company registered in Hong Kong. They ask for user information but don’t verify/require KYC if you pay by cryptocurrency. Tor traffic OK as long as you don’t get abuse/complaints. They can arrange dedicated fiber lines for each client at the HK location. Uses Coinpayments, Bitpay, and Payeer for payments, can arrange other payment methods as long as you are not sending from an OFAC-listed address. They accept Lightning Network (LN) payments

  • IncogNET - Locations: Netherlands (NL), Idaho (US). Company registered in Wyoming, United States. Accepts Bitcoin via BTCPayServer (and other cryptocurrencies also). No personal information required to sign up, only an email address (which isn’t verified). Ordering via Tor/VPN is OK. Large Storage available on a case-by-case basis, contact them to arrange it. Uses Google Captchas (reCaptcha). Also does anonymous domain registration

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • GoSSDHosting - Locations: United States (US), India (IN). Company registered in India.

  • CoinsHosting - Locations: New York (US). Company registered in Delaware, US. Tor traffic allowed only on dedicated servers. Doesn’t check the information you provide at signup (only asks for name and email). May require for KYC for suspicious or abusive customers but provider states they do so very rarely. Payments via CoinPayments and Coinify. Uses Google Captchas.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • RedSwitches - Locations: Singapore (SG), Miami (US), Germany (DE), Switzerland (CH), Australia (AU), Mumbai (IN), Tokyo (JP), Netherlands (NL), Hong Kong (HK), San Francisco (US), Canada (CA), London (UK), Washington DC (US). Company registered in Singapore.

  • ReliableSite - Locations: New York City metro (US), Miami (US), Los Angeles (US). Company registered in Miami, United States. Tor traffic not allowed. No anonymous signup. Bitcoin payments via BitPay (KYC required). No Google captchas (uses Turnstile). Large Storage servers available.

Dedicated Server: Asia

  • Opera VPS - Locations: London (UK), Frankfurt (DE) , Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Montreal (CA), Amsterdam (NL), Paris (FR), Tokyo (JP). Company registered in US (Washington state). Anonymous signup OK, Tor allowed, Lightning Network (LN) payments via Jeeb

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • RackNerd - Locations: Los Angeles (US), Utah (US), Dallas (US), New York (US), New Jersey (US), Seattle (US), Montreal (CA), London (UK), Amsterdam (NL), Chicago (US), San Jose (US), Atlanta (US), Tampa (US), Ashburn (US), Strasbourg (FR), Frankfurt (DE), Singapore (SG). Company registered in United States. Accepts BTC, LTC, ETH, ZEC. No Lightning Network. User reports good service and responsive support. User reports they use Coinbase Commerce

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • Zak Servers - Locations: Bulgaria (BG), Ukraine (UA), Netherlands (NL), Switzerland (CH), Romania (RO), Russia (RU), Malaysia (MY). Company registered in Singapore. Privacy-focused dedicated server provider, anonymous/Tor signup/Tor traffic OK. Payments processed by Blockonomics

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • Mondoze - Locations: Cyberjaya Malaysia (MY). Company registered in Malaysia. Payments via Plisio. Dedicated server available if you contact them directly. Tor traffic OK as long as you conform to their TOS. Anonymous sign up OK. Large storage maybe available if you contact support.

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • ForexVPS - Locations: New York (US), London (UK), Manchester (UK), Zurich (CH), Amsterdam (NL), Frankfurt (DE), Singapore (SG), Tokyo (JP). Company registered in Hong Kong. Lightning Network (LN) payment support

  • IndoVirtue - Locations: Singapore (SG), US. Company registered in Bali, Indonesia (?). No VPN/proxy during signup allowed

  • VPSBit - Locations: Hong Kong (HK), Lithuania (LT). Company registered in Hong Kong & Lithuania.

  • JPStream - Locations: Japan (JP). Company registered in Japan.

  • Server Field - Locations: Taiwan (TW). Company registered in Taiwan.

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • InternetBrothers - Locations: Korea (KR). Company registered in Korea. BTC accepted only on orders over $100, dedicated servers are not pre-configured. Non-HTTPS site

  • Kdatacenter - Locations: Korea (KR). Company registered in Korea.

  • VpsHosting - Locations: Hong Kong (HK). Company registered in Hong Kong (HK).

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • SuperBitHost - Locations: Bulgaria (BG), Germany (DE), Netherlands (NL), Luxembourg (LU), Malaysia (MY) Russia (RU), Singapore (SG), Switzerland (CH). Company registered in ???. uses Google captchas

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • Privex - Locations: Sweden (SE), Netherlands (NL), Germany (DE), Finland (FI), United States (US), Japan (JP), Canada (CA). Company registered in Belize. Owns their own hardware and network at their SE / NL regions. Resells Hetzner in DE / FI. Resells Dacentec+Reliablesite in US. Resells Vultr in JP/CA. Privacy focused, anonymous/pseudonymous sign up encouraged. No captchas/cloudflare/analytics. Payments processed by their own in-house solution. Allows hosting Tor exit nodes / public VPNs in SE/NL locations and Tor/I2P relays in all locations except JP/CA. Runs their own Tor nodes to support the network. Ordering is possible with JavaScript disabled. Supports Bring-Your-Own-IP and colocation in SE/NL. Very flexible and willing to consider special requests. Onion service: http://privex3guvvasyer6pxz2fqcgy56auvw5egkir6ykwpptferdcb5toad.onion/ and I2P service: http://privex.i2p/

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • Casbay - Locations: Malaysia (MY), Singapore (SG). Company registered in Malaysia. Accepts Bitcoin (and many more cryptocurrencies) via Plisio. No restrictions on Tor traffic. They only verify email address on signup, but may require KYC if you trigger anti-abuse/anti-fraud monitoring systems. Uses Google Captchas. Offers Large Storage servers, may be suitable for full nodes. Even larger storage capacity available if you contact them directly.

  • TechRich - Locations: Japan (JP), Korea (KR), Malaysia (MY), China (CN), Hong Kong (HK), United States (US), Thailand (TH). Company registered in Hong Kong. They ask for user information but don’t verify/require KYC if you pay by cryptocurrency. Tor traffic OK as long as you don’t get abuse/complaints. They can arrange dedicated fiber lines for each client at the HK location. Uses Coinpayments, Bitpay, and Payeer for payments, can arrange other payment methods as long as you are not sending from an OFAC-listed address. They accept Lightning Network (LN) payments

  • Webconn Technology - Locations: Netherlands (NL), United States (US), Italy (IT), Japan (JP), France (FR). Company registered in Pakistan. Offers GPU servers. Unlimited traffic. They don’t care what information you provide at signup. Payments via Coinbase or direct transfer to wallet. Google captchas. Linked to Seimaxim

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • GoSSDHosting - Locations: United States (US), India (IN). Company registered in India.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • RedSwitches - Locations: Singapore (SG), Miami (US), Germany (DE), Switzerland (CH), Australia (AU), Mumbai (IN), Tokyo (JP), Netherlands (NL), Hong Kong (HK), San Francisco (US), Canada (CA), London (UK), Washington DC (US). Company registered in Singapore.

Dedicated Server: Middle East

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • HostZealot - Locations: Amsterdam (NL), London (UK), Stockholm (SE), Warsaw (PL), Limassol (CY), Tallinn (EE), Ashburn (US), Chicago (US), Dallas (US), Seattle (US), Toronto (CA), Brussels (BE), Tel Aviv (IL), Hong Kong (HK), Dusseldorf (DE), Tbilisi (GE). Company registered in Bulgaria. Provider states they are Tor and anonymity friendly as long as you do not violate their ToS. All their VPS instances use SSDs, their Poland and Netherlands locations offer NVMe also. User reports they do not allow registration from Protonmail email addresses.

  • BlueVPS - Locations: Amsterdam (NL), Limassol (CY), Gravelines (FR), Singapore (SG), Sofiya (BG), London (UK), Ashburn (US), Los Angeles (US), Atlanta (US), Frankfurt (DE), Palermo (IT), Tel Aviv (IL), Stockholm (SE), Toronto (CA), Tallinn (EE), Madrid (ES), Hong Kong (CN), Warsaw (PL), Sydney (AU), Fujairah (UAE). Company registered in Estonia. Payments via Coinpayments. Regarding anonymity they state “We require clients confirmation e-Mail or ID”. Provider has hardware in two different data centers at their Warsaw and London locations.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • Ahost - Locations: Dubai (AE), Vienna (AT), Sydney (AU), Brussels (BE), Sofia (BG), Zurich (CH), Prague (CZ), Copenhagen (DK), Seville (ES), Thessaloniki (GR), Kwai Chung (HK), Zagreb (HR), Budapest (HU), Tel Aviv (IL), Hafnarfjordur (IS), Milan (IT), Tokyo (JP), Vilnius (LT), Riga (LV), Chisinau (MD), Skopje (MK), Oslo (NO), Warsaw (PL), Belgrade (RS), Bucharest (RO), Moscow (RU), Stockholm (SE), Ljubljana (SI). Company registered in Estonia. No anonymous signup. No Tor or spam allowed. Payments via Payeer. KVM virtualization, Gigabit speeds for every VPS. They do NOT want anonymous signups or Tor traffic. User reports they ask for KYC (scan of government ID) after payment. Google Captchas

  • IpTransit - Locations: Iran (IR). Company registered in Iran. Non-HTTPS site. Appears to be down, but you can try emailing them at the address given on their website

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Dedicated Server: Australia

  • Shock Hosting - Locations: Piscataway/New Jersey (US), Los Angeles (US), Chicago (US), Dallas (US), Jacksonville (US), Denver (US), Seattle (US), Maidenhead (UK), Amsterdam (NL), Sydney (AU), Tokyo (JP), Singapore (SG). Company registered in United States.

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • RatioServer - Locations: Amsterdam (NL), Budapest (HU), Copenhagen (DK), Dallas (US), Dublin (IE), Frankfurt (DE), London (UK), Los Angeles (US), Madrid (ES), Miami (US), Montreal (CA), New York (US), Paris (FR), Prague (CZ), Rome (IT), Singapore (SG), Sofia (BG), Sydney (AU), Tokyo (JP), Zurich (CH) and more. Company registered in ???. Most locations have unmetered dedicated servers and custom-built server options available. Tor- and anonymity-friendly. Does not verify email address validity, but encourages people to sign up with a working email address. Uses their own in-house BTC/ETH payment processor

  • Aaroli - Locations: Amsterdam (NL), Atlanta (US), Frankfurt (DE), London (UK), Paris (FR), Singapore (SG), Sydney (AU), Tokyo (JP), Toronto (CA). Company registered in an undisclosed location. Large Storage offered in 5 locations, may be suitable for full nodes. Payment via BTCPayServer or manual payment (accepts BTC, ETH). Willing to do custom configurations or payment via alternate methods. Anonymous/pseudonymous signup OK, provided you provide a working email address.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

  • RedSwitches - Locations: Singapore (SG), Miami (US), Germany (DE), Switzerland (CH), Australia (AU), Mumbai (IN), Tokyo (JP), Netherlands (NL), Hong Kong (HK), San Francisco (US), Canada (CA), London (UK), Washington DC (US). Company registered in Singapore.

Dedicated Server: South America

  • Host-World - Locations: Frankfurt (DE), Amsterdam (NL), London (UK), Strasbourg (FR), Gravelines (FR), Limassol (CY), Bratislava (SK), Prague (CZ), Riga (LV), Warsaw (PL), Chisinau (MD), Kiev (UA), New Jersey (US), Toronto (CA), Beauharnois (CA), Sydney (AU), Hong Kong (HK), Tokyo (JP), Singapore (SG), Petach Tikva (IL), Turkey (TR). Company registered in Estonia. Uses Coinpayments.net. Anonymous signup OK (they only verify email)

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Dedicated Server: Africa

  • ServerMath - Locations: Amsterdam (NL), Hong Kong (HK), Madrid (ES), Seoul (KR), Dallas (TX), Istanbul (TR), Manila (PH), Singapore (SG), Dubai (AE), Lagos (NG), Miami (US), Tokyo (JP), Frankfurt (DE), London (UK), Moscow (RU), Warsaw (PL). Company registered in ???. Accepts Bitcoin via BTCPayServer. Willing to consider payment via other cryptocurrencies on request. Does not require KYC or check identity. Happy to arrange custom server configurations (e.g GPUs, high bandwidth servers). Affiliated with RatioServer. Website does not work when visited from some IP addresses

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

  • Web4Africa - Locations: Ghana, Kenya, Nigeria (NG), South Africa (ZA). Company registered in South Africa.

  • Melbicom - Locations: Riga (LV), Amsterdam (NL), Warsaw (PL), Moscow (RU), Palermo (IT), Vilnius (LT), Madrid (ES), Sofia (BG), Lagos (NG), Singapore (SG), Fujairah (AE), Atlanta (US), Los Angeles (US). Company registered in Lithuania. Windows and Linux VPS. Also offers CDN services. No Tor traffic allowed. They don’t ask for much personal information but don’t want anonymous signup, they may request ID verification. No illegal activities allowed. Bitcoin Lightning network (LN) payments supported. No Google Captchas. Large Storage servers are available. They support BGP sessions, colocations, and cloud services also.

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Dedicated Server: Oceania

  • GlobalDataServer - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), Montreal (CA), New York (US), Seattle (US), Vancouver (CA), Washington DC (US), Amsterdam (NL), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Frankfurt (DE), London (UK), Madrid (ES), Milan (IT), Moscow (RU), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Vienna (AT), Vilnius (LT), Warsaw (PL), Zurich (CH), Bursa (TR), Hong Kong (HK), Singapore (SG), Tokyo (JP), Sydney (AU), Johannesburg (ZA). Company registered in Las Vegas (US). Dedicated servers in 100+ locations. Has high bandwidth 20GBps dedicated servers and can do custom configuration. Tor friendly. Contact them directly to arrange BTC payment. User reports they are likely connected to AllServerHost. Use code BITCOINVPS for a 10% discount on first order

Dedicated Server: Central America

  • Ccihosting - Locations: Panama (PA). Company registered in Panama.

  • ClientVPS - Locations: Bahrain (BH), Ukraine (UA), Netherlands (NL), Panama (PA), Russia (RU), Singapore (SG), Hong Kong (HK), Iran (IR). Company registered in Russia or US, it’s unclear. “Bulletproof” hosting provider.

Dedicated Server: Worldwide

  • Dedimax - Locations: 120+ worldwide: France (FR), Netherlands (NL), United States (US), Canada (CA), Portugal (PT), Lithuania (LT), Moldova (MD), Spain (ES), Bulgaria (BG), Germany (DE), Austria (AT), and many many more…. Company registered in Belgium. User reports Tor signup doesn’t work

  • EDIS Global - Locations: Vienna / Austria (AT), Graz / Austria (AT), Brussels / Belgium (BE), Sofia / Bulgaria (BG), Montreal / Canada (CA), Vina del Mar / Valparaiso / Chile (CL), Bogota / Colombia (CO), Prague / Czech Republic (CZ), Zagreb / Croatia (HR), Dubai (UAE), Paris / France (FR), Frankfurt / Germany (DE), Copenhagen / Denmark (DK), Thessaloniki / Greece (GR), Kwai Chung / Hong Kong (HK), Budapest / Hungary (HU), Hafnarfjördur / Iceland (IS), Ballasalla / Isle of Man (IM), Tel Aviv / Israel (IL), Milan / Italy (IT), Palermo / Sicily (IT), Tokyo / Japan (JP), Vilnius / Lithuania (LT), Riga / Latvia (LV), Chisinau / Moldova (MD), Skopje/North Macedonia (MK), Amsterdam / Netherlands (NL), Oslo / Norway (NO), Warsaw / Poland (PL), Bucharest / Romania (RO), Belgrade / Serbia (RS), Moscow / Russia (RU), St. Petersburg / Russia (RU), Belgrade / Serbia (RS), Singapore (SG), Stockholm / Sweden (SE), Ljubljana / Slovenia (SI), Seville / Spain (ES), Zurich / Switcherland(CH), Sydney / Australia (AU), New York (US), London City and London Docklands (UK). Company registered in Limassol, Cyprus. Now using Cryptomus and accepting Bitcoin (plus other standard coins, including DOGE) at all locations.Use coupon code BITCOINVPS for a 10% (lifetime) discount on your first order. The provider notes: Instant Provisioning! All VPS are KVM-based, 100% SSD, modern Intel processors, up to 2x 10Gbps per node, fully GEO-located IP ranges, redundant high quality uplinks, lowest latenc, peerings at local IX, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random-numbers generators for fast entropy, noVNC, 100+ ready to use Turnkey images, images of common Linux distributions for fully automated installation, bring your own .iso and boot it on EDIS KVM, post-install scripts for automated installation according to your recipes. Windows and Linux. Auto-Installers for Windows 2016/2019/2022 Server (trial). TOR traffic is fine but TOR exit notes are not allowed. EDIS does not require KYC, but a real name and a real-world address is required (they don’t come to check if you really live at the indicated address) and EDIS allows signup via TOR or Proxies, but they do not want criminal activity and will manually review all new signups for signs of fraud or criminal intent before provisioning the first service. User reports signups not allowed with cock.li email addresses and a phone number is required at signup.

  • Vultr - Locations: Atlanta (US), Chicago (US), Dallas (US), Los Angeles (US), Miami (US), New Jersey (US), Seattle (US), Silicon Valley (US), Toronto (CA), Amsterdam (NL), Frankfurt (DE), London (UK), Paris (FR), Tokyo (JP), Singapore (SG), Sydney (AU). Company registered in US. Reader reports strong anti-privacy policies: users must make credit card or PayPal payment before they are allowed to make Bitcoin deposits, and they use BitPay (which requires government ID/etc). Reader recommends using a Vultr reseller (e.g Bithost)

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

Dedicated Server: Cloud Front-End

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

VPN providers

Virtual Private Network providers allow you to tunnel your Internet traffic to their servers using an encrypted link.

VPN: Europe

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • Njalla - Locations: Sweden (SE). Company registered in Nevis. Runs their own datacenter. Tor- and anonymity-friendly. Privacy-focused domain registration service that also offers VPS, VPN. Accepts BTC, XMR, ZEC among other options. Onion URL: http://njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • VPS2day - Locations: Frankfurt a.M (DE), Zug/Switzerland (CH), Tallin (EE), Bucharest (RO), The Hague (NL), Stockholm (SE), Manchester (UK), Dallas (US). Company registered in Frankfurt, Germany. Website blocks Tor traffic outright. Does not allow anonymous signup. Payment via Coingate.

  • NiceVPS - Locations: Netherlands (NL). Company registered in Dominica. Minimal registration data and Tor friendly. Bulletproof DDoS-protected hosting available. Also provides confidential domains. Will offer hosting in Switzerland (CH) soon.

  • AlexHost - Locations: Tallbert (SE), Moldova (MD), Sofia (BG), Netherlands (NL). Company registered in Moldova. Email hosting included with shared web hosting service. Operates through AS200019, with own datacenter, network and hardware in the Republic of Moldova. Domain registration via OpenSRS/Tucows. They welcome people using their VPS for VPN endpoints. No KYC unless the payment gateway (e.g Paypal) asks for it (so pay with crypto). Doesn’t verify the personal data you give them otherwise. Tor bridges and relays are fine, Tor exit nodes are not allowed. Bitcoin payments accepted via BTCPayServer. Monero and other cryptocurrencies also accepted. May use Google Captchas (via Hostbill). Dedicated servers can be customized so they have Large Storage for running full nodes. Provider states they support freedom of speech and privacy.

  • LNVPN - Locations: Canada (CA), United States (US), Finland (FI), United Kingdom (UK), Singapore (SG), India (IN), Netherlands (NL), Russia (RU), Ukraine (UA), Switzerland (CH), Israel (IL), Kazakhstan (KZ), Brazil (BR), Romania (RO), Kenya (KE), Iceland (IS). Company registered in Germany. Accountless VPN provider that supports Lightning Network (LN) payment. Stores no private information about you whatsoever. Only supports Wireguard. Aimed at people who know how to configure Wireguard themselves. Soon offering login using LNAUTH

  • Noez - Locations: Frankfurt (DE). Company registered in Germany. Large Storage, may be suitable for running Bitcoin full nodes

  • Airvpn - Locations: 19 Countries. Company registered in ???.

  • OVPN - Locations: US, Finland (FI), Sweden (SE), Norway (NO), UK, France (FR), Spain (ES), Germany (DE), Switzerland (CH), Netherlands (NL). Company registered in Sweden.

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • Zergrush Hosting - Locations: Bucharest (RO). Company registered in Romania. Payments via uTrust, which supports Lightning Network (LN) payments. No Tor exits allowed. Do ask for personal information at signup.

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: North America

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • VPS2day - Locations: Frankfurt a.M (DE), Zug/Switzerland (CH), Tallin (EE), Bucharest (RO), The Hague (NL), Stockholm (SE), Manchester (UK), Dallas (US). Company registered in Frankfurt, Germany. Website blocks Tor traffic outright. Does not allow anonymous signup. Payment via Coingate.

  • LNVPN - Locations: Canada (CA), United States (US), Finland (FI), United Kingdom (UK), Singapore (SG), India (IN), Netherlands (NL), Russia (RU), Ukraine (UA), Switzerland (CH), Israel (IL), Kazakhstan (KZ), Brazil (BR), Romania (RO), Kenya (KE), Iceland (IS). Company registered in Germany. Accountless VPN provider that supports Lightning Network (LN) payment. Stores no private information about you whatsoever. Only supports Wireguard. Aimed at people who know how to configure Wireguard themselves. Soon offering login using LNAUTH

  • Airvpn - Locations: 19 Countries. Company registered in ???.

  • OVPN - Locations: US, Finland (FI), Sweden (SE), Norway (NO), UK, France (FR), Spain (ES), Germany (DE), Switzerland (CH), Netherlands (NL). Company registered in Sweden.

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: Asia

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • LNVPN - Locations: Canada (CA), United States (US), Finland (FI), United Kingdom (UK), Singapore (SG), India (IN), Netherlands (NL), Russia (RU), Ukraine (UA), Switzerland (CH), Israel (IL), Kazakhstan (KZ), Brazil (BR), Romania (RO), Kenya (KE), Iceland (IS). Company registered in Germany. Accountless VPN provider that supports Lightning Network (LN) payment. Stores no private information about you whatsoever. Only supports Wireguard. Aimed at people who know how to configure Wireguard themselves. Soon offering login using LNAUTH

  • Airvpn - Locations: 19 Countries. Company registered in ???.

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Hostens - Locations: London (UK), Frankfurt (DE), Lithuania (LT), Amsterdam (NL), Washington (US), San Fransisco (US), Singapore (SG). Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Requires full KYC (govt ID/etc) on signup, may use BitPay

  • Time4VPS - Locations: Lithuania (LT), Singapore (SG), US. Company registered in Lithuania. Large Storage, may be suitable for running Bitcoin full nodes. Now requiring KYC (ID scans)

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: Worldwide

  • Initech - Locations: Melbourne (AU), Sydney (AU), Belgium (BE), Sao Paulo (BR), Montreal (CA), Toronto (CA), Santiago (CL), Hong Kong (CN), Helsinki (FI), Finland (FI), Paris (FR), Berlin (DE), Falkenstein (DE), Frankfurt (DE), Nuremberg (DE), Bangalore (IN), Delhi (IN), Mumbai (IN), Jakarta (ID), Ireland (IE), Tel Aviv (IL), Milan (IT), Turnin (IT), Osaka (JP), Tokyo (JP), Kuala Lumpur (MY), Mexico City (MX), Amsterdam (NL), Holland (NL), Manila (PH), Warsaw (PL), Doha (QA), Singapore (SG), Johannesburg (ZA), Seoul (KR), Madrid (ES), Stockholm (SE), Dubai (AE), London (UK), Manchester (UK), Atlanta (US), Chicago (US), Columbus (US), Dallas (US), Honolulu (US), Iowa (US), Las Vegas (US), Los Angeles (US), Miami (US), New York (US), Ohio (US), Oregon (US), Salt Lake City (US), San Francisco (US), Seattle (US), Silicon Valley (US), South Carolina (US), Virginia (US), Zurich (CH), Taiwan (TW). Company registered in United States. Also offers a residential proxy (VPN) service with endpoints available in almost every country worldwide (the residential proxy service blocks websites that are common abuse targets, like banking or Netflix. Their VPS service does not block). Resells VPS services from many cloud providers (Vultr, Alibaba Cloud, Amazon Lightsail/AWS, DigitalOcean, Google Cloud/GCP, Hetzner Cloud). No email verification required to order. Accept all major cryptocurrencies. Tor traffic is OK, their website is built to be easy to use over Tor. Accepts crypto payments via Plisio and BTCPayServer, including Bitcoin Lightning Network (LN) payments via BTCPayServer. Large Storage / Block storage 40GB up to 40TB now available via normal ordering flow. Use promo code BITCOINVPS for 10% discount on all orders for new customers.

  • ExpressVPN - Locations: 94+ worldwide. Company registered in British Virgin Islands.

  • NordVPN - Locations: Worldwide. Company registered in Panama. Uses BitPay

  • PrivateVPN - Locations: 60+ worldwide. Company registered in Sweden.

  • Mullvad - Locations: 420+ worldwide. Company registered in Sweden. Accepting Bitcoin since July 2010, supports WireGuard. Has a good reputation, recommended

  • CyberGhost - Locations: 61 Countries, Worldwide. Company registered in Czech Republic. uses Bitpay. Privacy controversy: https://bitcointalk.org/index.php?topic=5203656.msg53196238#msg53196238

  • Surfshark - Locations: 50+ Worldwide. Company registered in British Virgin Islands. uses Coingate, Lightning Network (LN) support

  • privateinternetaccess - Locations: 32 Countries, Worldwide. Company registered in US. privacy controversy: https://bitcointalk.org/index.php?topic=5203656.msg53196238#msg53196238

  • IVACY - Locations: US, United Kingdom (UK), Ukraine (UA), Turkey (TR), Switzerland (CH), Taiwan (TW), Sweden (SE), Spain (ES), South Korea (KR), Singapore (SG), Saudi Arabia (SA), South Africa (ZA), Russia (RU), Seychelles, Romania (RO), Poland (PL), Philippines (PH), Panama (PA), Peru (PE), Norway (NO), Pakistan (PK), Nigeria (NG), New Zealand (NZ), Netherlands (NL), Mexico (MX), Malaysia (MY) Latvia (LV), Luxembourg (LU) Japan (JP), Kuwait, Kenya,Italy (IT), India (IN), Hong Kong (HK), Indonesia (IN), Ghana, France (FR), Finland (FI),Germany (DE), Egypt, Denmark (DK), Czech Republic (CZ), Colombia (CO), China (CN), Chile (CL), Costa Rica, Bulgaria (BG), Brunei, Brazil (BR), Canada (CA), Austria (AT), Australia (AU), Belgium (BE),. Company registered in Singapore. Uses BitPay and Coingate

  • Le Vpn - Locations: 120+ Countries. Company registered in Hong Kong.

  • HIDEme - Locations: 57 Countries. Company registered in Malaysia.

  • IronSocket - Locations: 70+ Countries. Company registered in Hong Kong.

  • Protonvpn - Locations: 89+ Countries. Company registered in Switzerland.

  • TorGuard - Locations: 50+ Worldwide. Company registered in US.

  • VPN.AC - Locations: 21 Countries. Company registered in Romania.

  • VPNme - Locations: US. Company registered in US.

  • VPN Secure - Locations: 48 Countries. Company registered in Australia .

  • xitheon - Locations: Quebec (CA), Frankfurt (DE), Sydney (AU), Warsaw (PL), France (FR), Singapore (SG), UK. Company registered in ???.

  • Windscribe VPN - Locations: Albania (AL), Argentina (AR), Australia (AU), Austria (AT), Azerbaijan (AZ), Belgium (BE), Bosnia, Brazil (BR), Bulgaria (BG), Colombia (CO), Croatia (HR), Cyprus (CY), Czech Republic (CZ), Denmark (DK), Estonia (EE), Fake Antarctica, Finland (FI), France (FR), Germany (DE), Greece (GR), Hong Kong (HK), Hungary (HU), Iceland (IS), India (IN), Indonesia (IN), Ireland (IE), Israel (IL), Italy (IT), Japan (JP), Latvia (LV), Lithuania (LT), Macedonia, Malaysia (MY) Mexico (MX), Moldova (MD), Netherlands (NL), New Zealand (NZ), Norway (NO), Philippines (PH), Poland (PL), Portugal (PT), Romania (RO), Russia (RU), Serbia (RS), Singapore (SG), Slovakia (SK), Slovenia, South Africa (ZA), South Korea (KR), Spain (ES), Sweden (SE), Switzerland (CH), Taiwan (TW), Thailand (TH), Tunisia (TN), Turkey (TR), Ukraine (UA), United Arab Emirates (AE), United Kingdom (UK), Vietnam (VN), Canada (CA), Japan (JP),. Company registered in Canada. Offers residential IP addresses to bypass VPN blocking

  • AzireVPN - Locations: Toronto (CA), Paris (FR), Frankfurt (DE), Amsterdam (NL), Bucharest (RO), Malaga (ES), Gothemburg (SE), Phuket (TH), Chicago (US), New York (US), Copenhagen (DK), Berlin (DE), Milan (IT), Oslo (NO), Madrid (ES), Stockholm (SE), Zurich (CH), London (UK), Miami (US). Company registered in Sweden. IPv6 support, Wireguard support, P2P traffic allowed, they own their own servers, servers run without physical storage media to ensure no logging, unblocks Netflix

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: Accountless

  • LNVPN - Locations: Canada (CA), United States (US), Finland (FI), United Kingdom (UK), Singapore (SG), India (IN), Netherlands (NL), Russia (RU), Ukraine (UA), Switzerland (CH), Israel (IL), Kazakhstan (KZ), Brazil (BR), Romania (RO), Kenya (KE), Iceland (IS). Company registered in Germany. Accountless VPN provider that supports Lightning Network (LN) payment. Stores no private information about you whatsoever. Only supports Wireguard. Aimed at people who know how to configure Wireguard themselves. Soon offering login using LNAUTH

VPN: Central America

  • Ccihosting - Locations: Panama (PA). Company registered in Panama.

VPN: Australia

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: South America

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VPN: Africa

  • iVPN - Locations: United States (US), United Kingdom (UK), Ukraine (UA), Taiwan (TW), Switzerland (CH), Sweden (SE), Spain (ES), South Africa (ZA), Singapore (SG), Serbia (RS), Romania (RO), Portugal (PT), Poland (PL), Netherlands (NL), Mexico (MX), Malaysia (MY), Luxembourg (LU), Japan (JP), Italy (IT), Israel (IL), Iceland (IS), Hong Kong (HK), Greece (GR), Germany (DE), France (FR), Finland (FI), Denmark (DK), Czech Republic (CZ), Canada (CA), Bulgaria (BG), Brazil (BR), Belgium (BE), Austria (AT), Australia (AU). Company registered in Gibraltar. Supports Lightning Network (LN) payments, automatic Wireguard key rotation

VDS providers

Virtual Dedicated Server providers, which are very similar to VPS providers but sometimes offer greater isolation (e.g using KVM or Xen instead of OpenVZ – note many VPS providers also offer KVM or Xen). In some cases VDS may mean a VPS with a dedicated CPU core, so it is not sharing CPU capacity with other clients from that provider.

VDS: Europe

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Profvds - Locations: Bratislava (SK). Company registered in Slovakia. Accepts Bitcoin via BTCPayServer, NOWPayments, Plisio, and Payeer. Only Email required to register. Provider notes they support running Bitcoin full nodes

  • VPSBG - Locations: Sofia (BG). Company registered in Bulgaria. Locations: Sofia (BG). Company registered in Bulgaria. Anonymous signup OK, Tor allowed. No 3rd party payment processor, has own implementation to take payments via Bitcoin, Litecoin and Lightning Network (LN). Advertises high performance servers. Provider notes: “VPN servers are installed on a private VPS. They have a dedicated static IP, full SSH root access to the VPS, allowing for full control over the VPN. Verifiable no-logs and privacy policies. Unlimited device connections. VPN uses open-source protocols and custom scripts that are used are publicly available.”

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • Justhost - Locations: Russia (RU). Company registered in Russia. Selling VDS

  • IP-Connect - Locations: Ukraine (UA). Company registered in Ukraine. Runs their own datacenter. Tor-friendly. Minimal registration. Crypto payments accepted via payment gateway. Doesn’t require KYC, allows TOR/proxy. Criminal activity prohibited. All VPS are KVM-based, 100% SSD, recent Intel processors, redundant high quality uplinks, lowest latency possible, loads of bandwidth, TUN/TAP for VPN, hostCPU passthrough, random generators for fast entropy, noVNC, images of common Linux distributions for fully automated installation, bring your own .iso (also Windows etc. allowed). Now additionally accepts payments via Nowpayments.io, which supports hundreds of different cryptocurrencies. Use promocode “bitcoin-vps2022” for -10% discount

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Servers.Guru - Locations: Helsinki (FI), Nuremberg (DE), Falkenstein (DE), Ashburn (US). Company registered in United States. Anonymous signup allowed (only a valid email address is required). Tor traffic OK. Accepts Lightning Network (LN) payments. Uses self-hosted BitCartCC for Bitcoin payments (as well as others), takes DOGE, DASH, and Zcash/ZEC via Plisio.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • VDS: North America

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • Servers.Guru - Locations: Helsinki (FI), Nuremberg (DE), Falkenstein (DE), Ashburn (US). Company registered in United States. Anonymous signup allowed (only a valid email address is required). Tor traffic OK. Accepts Lightning Network (LN) payments. Uses self-hosted BitCartCC for Bitcoin payments (as well as others), takes DOGE, DASH, and Zcash/ZEC via Plisio.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

VDS: Asia

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

  • Hostkey - Locations: US, Netherlands (NL), Russia (RU). Company registered in Netherlands. User reports they do not allow registration from Protonmail email addresses

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

VDS: Middle East

  • Pqhosting - Locations: Moldova (MD), Russia (RU), Latvia (LV), Netherlands (NL), Hong Kong (HK), Germany (DE), Ukraine (UA), United States (US), Hong Kong (HK), Canada (CA), Czechia (CZ), Slovakia (SK), Israel (IL), Turkey (TR), Poland (PL), Bulgaria (BG), Romania (RO). Company registered in Russia. Google Captchas. User reports they may suddenly require KYC to access your server or pay with crypto if your signup IP (e.g proxy/VPN/Tor) triggers fraud checks, or randomly if they decide they want to know who you are

VDS: Cloud Front-End

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

VDS: Worldwide

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

Email providers

Signing up for a VPS generally requires an email address, but there are major privacy downsides to using most free services. Therefore we also list paid, privacy-friendly email providers who accept Bitcoin. For a non-Bitcoin-specific list of email providers ranked by observable technical security competence, see the Dismail list: https://dismail.de/serverlist.html

Email: Asia

  • Mondoze - Locations: Cyberjaya Malaysia (MY). Company registered in Malaysia. Payments via Plisio. Dedicated server available if you contact them directly. Tor traffic OK as long as you conform to their TOS. Anonymous sign up OK. Large storage maybe available if you contact support.

  • Casbay - Locations: Malaysia (MY), Singapore (SG). Company registered in Malaysia. Accepts Bitcoin (and many more cryptocurrencies) via Plisio. No restrictions on Tor traffic. They only verify email address on signup, but may require KYC if you trigger anti-abuse/anti-fraud monitoring systems. Uses Google Captchas. Offers Large Storage servers, may be suitable for full nodes. Even larger storage capacity available if you contact them directly.

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

Email: Europe

  • Migadu - Locations: France (FR). Company registered in Switzerland. Widely respected. Very strict about TOS enforcement, black-hat users are not welcome here! Unlimited aliases/accounts/domains. Bitcoin payment for annual plans on request (email them or open a ticket)… but… only for existing accounts in good standing unless you can demonstrate you are not planning to use the service for spam/scam/fraud/etc. We currently host our email on Migadu and have found them to be very competent.

  • Neomailbox - Locations: Switzerland (CH). Company registered in Switzerland or Seychelles, it’s unclear. Paid-only. User reports they block Tor users from sending via SMTP

  • Protonmail - Locations: Switzerland (CH). Company registered in Switzerland. Very well known. Free service with paid options. IMAP/POP3 requires paid account. Paying with Bitcoin is somewhat complex: https://proton.me/support/pay-with-bitcoin Please tell Protonmail to simplify this and have their website accept Bitcoin under all circumstances.

  • Tutanota - Locations: Germany (DE). Company registered in Germany. Free service with paid options. No IMAP/POP3.

  • CounterMail - Locations: Sweden (SE). Company registered in Sweden. In business since 2010. Paid-only, requires invite code from another user to register

  • Runbox - Locations: Norway (NO). Company registered in Norway. Uses BitPay

  • AnonymousEmail.me - Locations: Moldova (MD). Company registered in ???. Send-only (no receive!) anonymous email. Accepts Bitcoin and Monero. Lets you anonymously send email to any address for a fee. Offers an optional semi-secure reply forwarding service, to forward replies to your real email. Tor OK, onion service is being developed.

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

Email: North America

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • SnowCore - Locations: Amsterdam (NL), Salt Lake City (US). Company registered in ???. Uses a Mullvad-style token login system so they don’t collect any personal information at all. Payments via NOWpayments. Cloudflare captchas. Dedicated servers available with 1TB SSDs for 30 EUR one time payment in some locations, might be useful as Large Storage servers for full nodes. Tor is allowed and fully supported.

Domain providers

Domain name providers that take Bitcoin.

Domain: Europe

  • Njalla - Locations: Sweden (SE). Company registered in Nevis. Runs their own datacenter. Tor- and anonymity-friendly. Privacy-focused domain registration service that also offers VPS, VPN. Accepts BTC, XMR, ZEC among other options. Onion URL: http://njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • AlexHost - Locations: Tallbert (SE), Moldova (MD), Sofia (BG), Netherlands (NL). Company registered in Moldova. Email hosting included with shared web hosting service. Operates through AS200019, with own datacenter, network and hardware in the Republic of Moldova. Domain registration via OpenSRS/Tucows. They welcome people using their VPS for VPN endpoints. No KYC unless the payment gateway (e.g Paypal) asks for it (so pay with crypto). Doesn’t verify the personal data you give them otherwise. Tor bridges and relays are fine, Tor exit nodes are not allowed. Bitcoin payments accepted via BTCPayServer. Monero and other cryptocurrencies also accepted. May use Google Captchas (via Hostbill). Dedicated servers can be customized so they have Large Storage for running full nodes. Provider states they support freedom of speech and privacy.

  • AnonRDP - Locations: Poland (PL), France (FR). Company registered in Unknown. Anonymous signup allowed, only email address is required. Tor traffic is OK, but requires javascipt due to DdoS protection. Payments via Cryptomus. Accepts XMR, BTC, ETH, TRX, USDT, LTC, and more. Uses Google Captcha now, will soon have a self-hosted non-Javascript solution.

  • KernelHost - Locations: Frankfurt (DE). Company registered in Austria. Bitcoin payments via BTCPayServer. KVM based servers. Servers at Maincubes datacenter

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: North America

  • Private WebHost - Locations: Vienna (AT), Helsinki (FI), Frankfurt (DE), Netherlands (NL), Moscow (RU), Stockholm (SE), Zurich (CH), Paris (FR), Los Angeles (US). Company registered in Switzerland. Privacy/anonymity-focused hoster. Only an email required at signup, Signup via VPNs, proxies, and Tor allowed, payments via NOWPayments, CoinPayments.net. Lightning Network (LN) payments via CoinPayments. Working on self/hosted payments. The Swiss dedicated servers are Large Storage and suitable for Bitcoin full nodes. All servers can be used for Tor nodes (exit nodes allowed if you block port 25). Netherlands VPS servers are Large Storage. No Google Captcha. Support via tickets or encrypted email. Dedicated servers in Switzerland, working on more locations. Use promo code BITCOINVPS for 10% off. Very responsive support.

  • ThunderVM - Locations: Germany (DE), United States (US), Iceland (IS), Switzerland (CH), Netherlands (NL), France (FR), Italy (IT), United Kingdom (UK), Lithuania (LT), Poland (PL). Company registered in italy. Ok with hosting full nodes and Tor relays, but not Tor exit nodes, or (on VPS) mining cryptocurrency. Uses hCaptcha. Provider states that all their servers/hypervisors are installed and encrypted by them for user security. Uses BTCPayServer and self-hosted Monero (XMR) payments. Accepts Lightning Network (LN) payments via NowPayments

  • Namecheap - Locations: US. Company registered in US.

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • CoinsHosting - Locations: New York (US). Company registered in Delaware, US. Tor traffic allowed only on dedicated servers. Doesn’t check the information you provide at signup (only asks for name and email). May require for KYC for suspicious or abusive customers but provider states they do so very rarely. Payments via CoinPayments and Coinify. Uses Google Captchas.

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: Asia

  • Mondoze - Locations: Cyberjaya Malaysia (MY). Company registered in Malaysia. Payments via Plisio. Dedicated server available if you contact them directly. Tor traffic OK as long as you conform to their TOS. Anonymous sign up OK. Large storage maybe available if you contact support.

  • Casbay - Locations: Malaysia (MY), Singapore (SG). Company registered in Malaysia. Accepts Bitcoin (and many more cryptocurrencies) via Plisio. No restrictions on Tor traffic. They only verify email address on signup, but may require KYC if you trigger anti-abuse/anti-fraud monitoring systems. Uses Google Captchas. Offers Large Storage servers, may be suitable for full nodes. Even larger storage capacity available if you contact them directly.

  • Domains4Bitcoins - Locations: United States (US), India (IN). Company registered in United States. Payments via BitPay – KYC and BitPay account required to purchase

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: Cloud Front-End

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

Domain: Worldwide

  • MyNymBox - Locations: Frankfurt (DE), Nuremberg (DE), Helsinki (FI), Munich (DE), Portsmouth (UK), New York (US), Seattle (US), St. Louis (US), Singapore (Asia). Company registered in Seychelles. Resells services from Hetzner Cloud, Dedicated Servers and Contabo. Offers Shared Hosting on encrypted storage and anonym Domain Registrations. No email verification required to order. Tor- and anonymity-friendly. Accepts Bitcoin, Lightning and Monero payments via self hosted BTCPayServer. No Google Captchas or 3rd party stuff. Has Storage VPS (Large Storage) servers, suitable for full nodes, provider runs their BTCPayServer on one of them!

Domain: South America

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: Middle East

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: Africa

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Domain: Australia

  • SafeCloud - Locations: Amsterdam (NL), Athens (GR), Barcelona (ES), Belgrade (RS), Brussels (BE), Bucharest (RO), Copenhagen (DK), Dublin (IE), Dusseldorf (DE), Florence (IT), Frankfurt (DE), Helsinki (FI), Kyiv (UA), Lisbon (PT), London (UK), Madrid (ES), Moscow (RU), Nicosia (CY), Oslo (NO), Paris (FR), Sofia (BG), Stockholm (SE), Warsaw (PL), Vienna (AT), Vilnius (LT), Zurich (CH), Ashburn (US), Atlanta (US), Chicago (US), Dallas (US), Kansas City (US), Los Angeles (US), Mexico City (MX), Miami (US), Montreal (CA), New York (US), Portland (US), Salt Lake City (US), San Juan(PR), Seattle (US), Toronto (CA), Vancouver (CA), Washington (US), Bogota (CO), Buenos Aires (AR), Guatemala City (GT), La Paz (BO), Lima (PE), Quito (EC), San Jose (CR), Santiago (CL), São Paulo (BR), Dubai (AE), Hong Kong (HK), Istanbul (TR), Kuala Lumpur (MY), Mumbai (IN), Singapore (SG), Taipei (TW), Tel Aviv (IL), Tokyo (JP), Fez (MA), Johannesburg (ZA), Lagos (NG), Sydney (AU). Company registered in Seattle (US). Tor traffic OK. Only valid email required at signup. Payments via Bitserver and manual payment processing. No Google Captchas. 100MBps-40Gbps dedicated bandwidth dedicated servers available. Use promo code BITCOINVPS for 10% discount on orders.

Run Private Mastodon Instance

This guide helps you to run a private Mastodon Instance. I personally prefer to use mastodon with docker and docker-compose to isolate my application from main server environment. The following docker compose yaml file helps you to deploy your instance. After that we try to modify the settings of our application to make it private instance (Personal Instance with just One Account). Put the content of the following docker-compose config into a seperate folder.

# This file is designed for production server deployment, not local development work
# For a containerized local dev environment, see: https://github.com/mastodon/mastodon/blob/main/README.md#docker

services:
  db:
    restart: always
    image: postgres:14-alpine
    shm_size: 256mb
    networks:
      - internal_network
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', 'postgres']
    volumes:
      - ./mastodon/postgres14:/var/lib/postgresql/data
    environment:
      - 'POSTGRES_HOST_AUTH_METHOD=trust'
      - 'POSTGRES_USER=mastodon'
      - 'POSTGRES_DB=mastodon'
      - 'POSTGRES_PASSWORD=pasword'

  redis:
    restart: always
    image: redis:7-alpine
    networks:
      - internal_network
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
    volumes:
      - ./mastodon/redis:/data

  # es:
  #   restart: always
  #   image: docker.elastic.co/elasticsearch/elasticsearch:7.17.4
  #   environment:
  #     - "ES_JAVA_OPTS=-Xms512m -Xmx512m -Des.enforce.bootstrap.checks=true"
  #     - "xpack.license.self_generated.type=basic"
  #     - "xpack.security.enabled=false"
  #     - "xpack.watcher.enabled=false"
  #     - "xpack.graph.enabled=false"
  #     - "xpack.ml.enabled=false"
  #     - "bootstrap.memory_lock=true"
  #     - "cluster.name=es-mastodon"
  #     - "discovery.type=single-node"
  #     - "thread_pool.write.queue_size=1000"
  #   networks:
  #      - external_network
  #      - internal_network
  #   healthcheck:
  #      test: ["CMD-SHELL", "curl --silent --fail localhost:9200/_cluster/health || exit 1"]
  #   volumes:
  #      - ./elasticsearch:/usr/share/elasticsearch/data
  #   ulimits:
  #     memlock:
  #       soft: -1
  #       hard: -1
  #     nofile:
  #       soft: 65536
  #       hard: 65536
  #   ports:
  #     - '127.0.0.1:9200:9200'

  web:
    # You can uncomment the following line if you want to not use the prebuilt image, for example if you have local code changes
    # build: .
    image: ghcr.io/mastodon/mastodon:v4.2.12
    restart: always
    env_file: .env.production
    command: bundle exec puma -C config/puma.rb
    networks:
      - external_network
      - internal_network
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL',"curl -s --noproxy localhost localhost:3000/health | grep -q 'OK' || exit 1"]
    ports:
      - '127.0.0.1:3000:3000'
    depends_on:
      - db
      - redis
      # - es
    volumes:
      - ./mastodon/public/system/:/mastodon/public/system

  streaming:
    # You can uncomment the following lines if you want to not use the prebuilt image, for example if you have local code changes
    # build:
    #   dockerfile: ./streaming/Dockerfile
    #   context: .
    image: ghcr.io/mastodon/mastodon-streaming:latest
    restart: always
    env_file: .env.production
    command: node ./streaming/index.js
    networks:
      - external_network
      - internal_network
    healthcheck:
      # prettier-ignore
      test: ['CMD-SHELL', "curl -s --noproxy localhost localhost:4000/api/v1/streaming/health | grep -q 'OK' || exit 1"]
    ports:
      - '127.0.0.1:4000:4000'
    depends_on:
      - db
      - redis

  sidekiq:
    build: .
    image: ghcr.io/mastodon/mastodon:v4.2.12
    restart: always
    env_file: .env.production
    command: bundle exec sidekiq
    depends_on:
      - db
      - redis
    networks:
      - external_network
      - internal_network
    volumes:
      - ./mastodon/public/system/:/mastodon/public/system/
    healthcheck:
      test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]

  ## Uncomment to enable federation with tor instances along with adding the following ENV variables
  ## http_hidden_proxy=http://privoxy:8118
  ## ALLOW_ACCESS_TO_HIDDEN_SERVICE=true
  # tor:
  #   image: sirboops/tor
  #   networks:
  #      - external_network
  #      - internal_network
  #
  # privoxy:
  #   image: sirboops/privoxy
  #   volumes:
  #     - ./priv-config:/opt/config
  #   networks:
  #     - external_network
  #     - internal_network

networks:
  external_network:
  internal_network:
    internal: true

The .env.prodution file store critical information about your instance. It is better to use password with your redis instance.

DB_HOST=db
DB_PORT=5432
DB_NAME=mastodon
DB_USER=mastodon
DB_PASS=password
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_PASSWORD=

Run docker-compose run --rm web bundle exec rake mastodon:setup in the folder which holds docker-compose.yml then follow the instructions and answer the questions.

Run the following commands to create a user and make it admin.

export RAILS_ENV=production tootctl accounts create --email EMAIL --confirmed --role Admin
export RAILS_ENV=production tootctl accounts modify USERNAME --approve
export RAILS_ENV=production tootctl accounts approve USERNAME

The commands above give you the requirement information to login to your server.

I prefer using nginx to expose my instance to the internet.

map $http_upgrade $connection_upgrade {
  default upgrade;
  ''      close;
}

upstream backend {
    server 127.0.0.1:3000 fail_timeout=0;
}

upstream streaming {
    # Instruct nginx to send connections to the server with the least number of connections
    # to ensure load is distributed evenly.
    least_conn;

    server 127.0.0.1:4000 fail_timeout=0;
    # Uncomment these lines for load-balancing multiple instances of streaming for scaling,
    # this assumes your running the streaming server on ports 4000, 4001, and 4002:
    # server 127.0.0.1:4001 fail_timeout=0;
    # server 127.0.0.1:4002 fail_timeout=0;
}

proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=CACHE:10m inactive=7d max_size=1g;

server {
  listen <IP>:80;
  server_name domain.com;
  root /var/www/mastodon/public;
  location /.well-known/acme-challenge/ { allow all; }
  location / { return 301 https://$host$request_uri; }
}

server {
  listen <IP>:443 ssl http2;
  server_name domain.com;

  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;

  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:10m;
  ssl_session_tickets off;
  access_log /var/log/nginx/mastodonaccess.log;
  error_log /var/log/nginx/mastodonerror.log warn;
  
  ssl_certificate /root/ghariib.ir.crt;
  ssl_certificate_key /root/ghariib.ir.key;

  keepalive_timeout 70;
  sendfile on;
  client_max_body_size 99m;

  root /var/www/mastodon/public;

  gzip on;
  gzip_disable "msie6";
  gzip_vary on;
  gzip_proxied any;
  gzip_comp_level 6;
  gzip_buffers 16 8k;
  gzip_http_version 1.1;
  gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml image/x-icon;

  location / {
    try_files $uri @proxy;
  }

  location = /sw.js {
    add_header Cache-Control "public, max-age=604800, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/assets/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/avatars/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/emoji/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/headers/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/packs/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/shortcuts/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/sounds/ {
    add_header Cache-Control "public, max-age=2419200, must-revalidate";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    try_files $uri =404;
  }

  location ~ ^/system/ {
#    root /root/mastodon/public/system;  # New root path for /system/
    add_header Cache-Control "public, max-age=2419200, immutable";
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
    add_header X-Content-Type-Options nosniff;
    add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
    try_files $uri =404;
  }

  location ^~ /api/v1/streaming {
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Proxy "";

    proxy_pass http://streaming;
    proxy_buffering off;
    proxy_redirect off;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;

    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";

    tcp_nodelay on;
  }

  location @proxy {
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Proxy "";
    proxy_pass_header Server;

    proxy_pass http://backend;
    proxy_buffering on;
    proxy_redirect off;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;

    proxy_cache CACHE;
    proxy_cache_valid 200 7d;
    proxy_cache_valid 410 24h;
    proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
    add_header X-Cached $upstream_cache_status;

    tcp_nodelay on;
  }

  error_page 404 500 501 502 503 504 /500.html;
}

Run Private Matrix (Element) Instance

This guide helps you to run a private Matrix (Element) instance with Federation mechanism to communicate with other servers. I prefer to use docker with docker-compose to run an isolated environment.

version: '3.8'

services:
  postgres:
    restart: always
    image: docker.io/postgres:13-alpine
    environment:
      LANG: en_US.utf8
      POSTGRES_USER: synapse
      POSTGRES_PASSWORD: password
      POSTGRES_DB: synapse
    volumes:
      - ./matrix/schemas/:/var/lib/postgresql/data

  synapse:
    image: ghcr.io/element-hq/synapse:v1.113.0
    environment:
      - VIRTUAL_HOST=matrix.domain.com
      - SYNAPSE_SERVER_NAME=matrix.domain.com
      - SYNAPSE_REPORT_STATS=no
    volumes:
      - ./matrix/data/:/data
    ports:
#      - "8448:8448"   # Matrix Federation API (HTTPS)
      - "127.0.0.1:8008:8008"   # Client-Server API (HTTP)
#      - "3478:3478"   # STUN/TURN
#      - "5349:5349"   # STUN/TURN over TLS
#      - "49152-49300:49152-49300/udp"  # TURN relay range
    depends_on:
      - postgres
    restart: always
    user: "991:991"

Generate homeserver.yaml which is necessary for running element server. docker run -v ./matrix/data:/data --rm -e SERVER_NAME=matrix.domain.com -e REPORT_STATS=yes ghcr.io/element-hq/synapse:v1.113.0 generate

Put the homeserver.yaml file under the mentioned path in the docker-compose.yml file.

# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "matrix.domain.com"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    tls: false
    type: http
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: false
rc_login:
  address:
    per_second: 5.00
    burst_count: 100
  account:
    per_second: 5.00
    burst_count: 100
  failed_attempts:
    per_second: 5.00
    burst_count: 100
#database:
#    name: psycopg2
#    args:
#        user: synapse
#        password: synapse
#        host: postgres
#        database: synapse
#        cp_min: 5
#        cp_max: 10
database:
  name: psycopg2
  args:
    user: synapse
    password: password
    database: synapse

    # This hostname is accessible through the docker network and is set 
    # by docker-compose. If you change the name of the service it will be different
    host: postgres
log_config: "/data/matrix.domain.com.log.config"
media_store_path: /data/media_store
registration_shared_secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
report_stats: true
macaroon_secret_key: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
form_secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
enable_registration: false
enable_registration_without_verification: false
signing_key_path: "/data/matrix.domain.com.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
# vim:ft=yaml

To expose the Matrix server to the internet I use nginx with the following configuration.

server {
    listen <IP>:8448 ssl http2;
    server_name matrix.domain.com;

    ssl_certificate /root/matrix.domain.com.tls.crt;
    ssl_certificate_key /root/matrix.domain.com.tls.key;

    location / {
        proxy_pass http://127.0.0.1:8008;
        proxy_http_version 1.1;

        ### Set WebSocket headers ###
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Forwarded-For $remote_addr;
        # Nginx by default only allows file uploads up to 1M in size
        # Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
        client_max_body_size 20M;
    }
}

server {
    listen <IP>:443 ssl http2;
    server_name matrix.domain.com;

    ssl_certificate /root/matrix.domain.com.tls.crt;
    ssl_certificate_key /root/matrix.domain.com.tls.key;

    location / {
        proxy_pass http://127.0.0.1:8008;
        proxy_http_version 1.1;

        ### Set WebSocket headers ###
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Forwarded-For $remote_addr;
        # Nginx by default only allows file uploads up to 1M in size
        # Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
        client_max_body_size 20M;
    }
}

Github Actions

Github Actions

A curated list of things related to GitHub Actions.

Actions are triggered by GitHub platform events directly in a repo and run on-demand workflows either on Linux, Windows or macOS virtual machines or inside a container in response. With GitHub Actions you can automate your workflow from idea to production.

Contents

Official Resources

Workflow Examples

Workflow Tool Actions

Tool actions for your workflow.

Actions for GitHub Automation

Automate management for issues, pull requests, and releases.

Setup Actions

Set up your GitHub Actions workflow with a specific version of your programming languages.

Create your Actions

JavaScript and TypeScript Actions

Docker Container Actions

Community Resources

GitHub Tools and Management

Collection of Actions

Utility

Environments

Dependencies

Semantic Versioning

Static Analysis

Testing

Linting

Security

Code Coverage

Dynamic Analysis

Monitoring

Pull Requests

GitHub Pages

Notifications and Messages

Deployment

Docker

Kubernetes

AWS

Terraform

External Services

Frontend Tools

Machine Learning Ops

Build

Database

Networking

Localization

Fun

Cheat Sheet

Tutorials

Please don’t hesitate to make a PR if you have more resources to share. Check out contributing.md for more information.

Self-Hosted

Selfhosted

Self-hosting is the practice of hosting and managing applications on your own server.

Table of contents


Software

Analytics

Analytics is the systematic computational analysis of data or statistics. It is used for the discovery, interpretation, and communication of meaningful patterns in data. Related: Database Management, Personal Dashboards

  • Aptabase - Open source, privacy first and simple analytics for mobile and desktop apps. (Source Code) AGPL-3.0 Docker
  • AWStats - Generate statistics from web, streaming, ftp or mail server logfiles. (Demo, Source Code) GPL-3.0 Perl
  • Countly Community Edition - Real time mobile and web analytics, crash reporting and push notifications platform. (Source Code) AGPL-3.0 Nodejs/Docker
  • Druid - Distributed, column-oriented, real-time analytics data store. (Source Code) Apache-2.0 Java/Docker
  • EDA - Web application for data analysis and visualization. (Source Code) AGPL-3.0 Nodejs/Docker
  • Fathom Lite - A simple and privacy-focused web analytics (alternative to Google Analytics). MIT Go/Docker
  • GoAccess - Real-time web log analyzer and interactive viewer that runs in a terminal. (Source Code) GPL-2.0 C
  • GoatCounter - Easy web statistics without tracking of personal data. (Source Code) EUPL-1.2 Go
  • Matomo - Google Analytics alternative that protects your data and your customers’ privacy. (Source Code) GPL-3.0 PHP
  • Metabase - Easy, open-source way for everyone in your company to ask questions and learn from data. (Source Code) AGPL-3.0 Java/Docker
  • Mixpost - Self-hosted social media management software. Easily create, schedule, publish, and manage social media content in one place (alternative to Hootsuite, Buffer, and other social media tools). (Source Code) MIT PHP/Docker
  • Netron - Visualizer for neural network and machine learning models. (Source Code) MIT Python/Nodejs
  • Offen - Fair, lightweight and open web analytics tool. Gain insights while your users have full access to their data. (Demo, Source Code) Apache-2.0 Go/Docker
  • Open Web Analytics - Web analytics framework that lets you stay in control of how you instrument and analyze the use of your websites and applications. (Source Code) GPL-2.0 PHP
  • Plausible Analytics - Simple, open-source, lightweight (< 1 KB) and privacy-friendly web analytics. (Source Code) AGPL-3.0 Elixir
  • PostHog - Product analytics, session recording, feature flagging and a/b testing that you can self-host (alternative to Mixpanel/Amplitude/Heap/HotJar/Optimizely). (Source Code) MIT Python
  • Prisme Analytics - A privacy-focused and progressive analytics service based on Grafana. (Demo, Source Code) AGPL-3.0/MIT Docker
  • Redash - Connect and query your data sources, build dashboards to visualize data and share them with your company. (Source Code) BSD-2-Clause Docker
  • RudderStack - Collect, unify, transform, and store your customer data, and route it to a wide range of common, popular marketing, sales, and product tools (alternative to Segment). (Source Code) AGPL-3.0 Docker/K8S/Go/Nodejs
  • Shynet - Modern, privacy-friendly, and detailed web analytics that works without cookies or JS. Apache-2.0 Python/Docker
  • Socioboard - Social media management, analytics, and reporting platform supporting nine social media networks out-of-the-box. GPL-3.0 Nodejs
  • Superset - Modern data exploration and visualization platform. (Source Code) Apache-2.0 Python
  • Swetrix - Ultimate, open-source web analytics to satisfy all your needs. (Demo, Source Code) AGPL-3.0 Docker
  • Umami - Simple, fast, privacy-focused alternative to Google Analytics. (Demo, Source Code) MIT Nodejs/Docker

Archiving and Digital Preservation (DP)

Digital archiving and preservation software. Related: Content Management Systems (CMS) See also: awesome-web-archiving

  • ArchiveBox - Self-hosted wayback machine that creates HTML & screenshot archives of sites from your bookmarks, browsing history, RSS feeds, or other sources. (Source Code) MIT Python/Docker
  • ArchivesSpace - Archives information management application for managing and providing Web access to archives, manuscripts and digital objects. (Demo, Source Code) ECL-2.0 Ruby
  • bitmagnet - A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration. (Source Code) MIT Go/Docker
  • CKAN - CKAN is a tool for making open data websites. (Source Code) AGPL-3.0 Python
  • Collective Access - Providence - Highly configurable Web-based framework for management, description, and discovery of digital and physical collections supporting a variety of metadata standards, data types, and media formats. (Source Code) GPL-3.0 PHP
  • Ganymede - Twitch VOD and Live Stream archiving platform. Includes a rendered chat for each archive. GPL-3.0 Docker
  • LiveStreamDVR - An automatic Twitch recorder capable of capturing live streams, chat messages and stream metadata. MIT Python/Nodejs/Docker
  • Omeka S - Omeka S is a web publication system for universities, galleries, libraries, archives, and museums. It consists of a local network of independently curated exhibits sharing a collaboratively built pool of items, media, and their metadata. (Source Code) GPL-3.0 Nodejs
  • Wallabag - Wallabag, formerly Poche, is a web application allowing you to save articles to read them later with improved readability. (Source Code) MIT PHP
  • Wayback - A self-hosted toolkit for archiving webpages to the Internet Archive, archive.today, IPFS, and local file systems. GPL-3.0 Go
  • Webarchive - Lightweight self-hosted wayback machine that creates HTML and PDF files from your bookmarks. BSD-3-Clause Go

Automation

Automation software designed to reduce human intervention in processes. Related: Internet of Things (IoT), Software Development - Continuous Integration & Deployment

  • Activepieces - No-code business automation tool like Zapier or Tray. For example, you can send a Slack notification for each new Trello card. (Source Code) MIT Docker
  • Apache Airflow - Airflow is a platform to programmatically author, schedule, and monitor workflows. (Source Code) Apache-2.0 Python/Docker
  • Automatisch - Business automation tool that lets you connect different services like Twitter, Slack, and more to automate your business processes (alternative to Zapier). (Source Code) AGPL-3.0 Docker
  • betanin - Music organization man-in-the-middle of your torrent client and music player. Based on beets.io, similar to Sonarr and Radarr. GPL-3.0 Python/Docker
  • changedetection.io - Self-hosted tool for staying up-to-date with web-site content changes. Apache-2.0 Python/Docker
  • ChiefOnboarding - Employee onboarding platform that allows you to provision user accounts and create sequences with todo items, resources, text/email/Slack messages, and more! Available as a web portal and Slack bot. (Source Code) AGPL-3.0 Docker
  • Dagu - Powerful Cron alternative with a Web UI. It allows you to define dependencies between commands as a Directed Acyclic Graph (DAG) in a declarative YAML format. (Source Code) GPL-3.0 Go/Docker
  • Exadel CompreFace - Face recognition system that provides REST API for face recognition, face detection, and other face services, and is easily deployed with docker. There are SDKs for Python and JavaScript languages. Can be used without prior machine learning skills. (Source Code) Apache-2.0 Docker/Java/Nodejs
  • feedmixer - FeedMixer is a WSGI (Python3) micro web service which takes a list of feed URLs and returns a new feed consisting of the most recent n entries from each given feed(Returns Atom, RSS, or JSON). (Demo) WTFPL Python
  • Headphones - Automated music downloader for NZB and Torrent, written in Python. It supports SABnzbd, NZBget, Transmission, µTorrent, Deluge and Blackhole. GPL-3.0 Python
  • Healthchecks - Django app which listens for pings and sends alerts when pings are late. (Source Code) BSD-3-Clause Python
  • HRConvert2 - Drag-and-drop file conversion server with session based authentication, automatic temporary file maintenance, and logging capability. GPL-3.0 PHP
  • Huginn - Allows you to build agents that monitor and act on your behalf. MIT Ruby
  • Kestra - Event-driven, language-agnostic platform to create, schedule, and monitor workflows. In code. Coordinate data pipelines and tasks such as ETL and ELT. (Source Code) Apache-2.0 Docker
  • Kibitzr - Lightweight personal web assistant with powerful integrations. (Source Code) MIT Python
  • Krayin - Free and Opensource Laravel CRM Application. (Demo, Source Code) MIT PHP
  • LazyLibrarian - LazyLibrarian is a program to follow authors and grab metadata for all your digital reading needs. It uses a combination of Goodreads Librarything and optionally GoogleBooks as sources for author info and book info. GPL-3.0 Python
  • Leon - Open-source personal assistant who can live on your server. (Source Code) MIT Nodejs
  • Lidarr - Lidarr is a music collection manager for Usenet and BitTorrent users. (Source Code) GPL-3.0 C#/Docker
  • Matchering - A containerized web app for automated music mastering (alternative to LANDR, eMastered, and MajorDecibel). GPL-3.0 Docker
  • Medusa - Automatic Video Library Manager for TV Shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. (Source Code, Clients) GPL-3.0 Python
  • MetaTube - A Web GUI to automatically download music from YouTube add metadata from Spotify, Deezer or Musicbrainz. GPL-3.0 Python
  • MeTube - Web GUI for youtube-dl, with playlist support. Allows downloading videos from dozens of websites. AGPL-3.0 Python/Nodejs/Docker
  • Mylar3 - Automated Comic Book (cbr/cbz) downloader program for use with NZB and torrents. (Source Code) GPL-3.0 Python/Docker
  • nefarious - Web application that automates downloading Movies and TV Shows. GPL-3.0 Python
  • OliveTin - OliveTin is a web interface for running Linux shell commands. AGPL-3.0 Go
  • pyLoad - Lightweight, customizable and remotely manageable downloader for 1-click-hosting sites like rapidshare.com or uploaded.to. (Source Code) GPL-3.0 Python
  • Radarr - Radarr is an independent fork of Sonarr reworked for automatically downloading movies via Usenet and BitTorrent, à la Couchpotato. (Source Code) GPL-3.0 C#/Docker
  • SickChill - SickChill is an automatic video library manager for TV shows. It watches for new episodes of your favorite shows, and when they are posted it does its magic. (Source Code) GPL-3.0 Python/Docker
  • Sonarr - Automatic TV Shows downloader and manager for Usenet and BitTorrent. It can grab, sort and rename new episodes and automatically upgrade the quality of files already downloaded when a better quality format becomes available. (Source Code) GPL-3.0 C#/Docker
  • StackStorm - StackStorm (aka IFTTT for Ops) is event-driven automation for auto-remediation, security responses, troubleshooting, deployments, and more. Includes rules engine, workflow, 160 integration packs with 6000+ actions and ChatOps. (Source Code) Apache-2.0 Python
  • tubesync - Syncs YouTube channels and playlists to a locally hosted media server. AGPL-3.0 Docker/Python
  • ydl_api_ng - Simple youtube-dl REST API to launch downloads on a distant server. GPL-3.0 Python
  • YoutubeDL-Material - Material Design inspired YouTube downloader, based on youtube-dl. Supports playlists, quality select, search, dark mode and much more, all with a clean and modern design. MIT Nodejs/Docker
  • YoutubeDL-Server - Web and REST interface for downloading videos onto a server. MIT Python/Docker
  • yt-dlp Web UI - Web GUI for yt-dlp. MPL-2.0 Docker/Go/Nodejs
  • µTask - Automation engine that models and executes business processes declared in yaml. BSD-3-Clause Go/Docker

Blogging Platforms

A blog is a discussion or informational website consisting of discrete, diary-style text entries (posts). Related: Static Site Generators, Content Management Systems (CMS) See also: WeblogMatrix

  • Antville - Free, open source project aimed at the development of a high performance, feature rich weblog hosting software. (Source Code) Apache-2.0 Javascript
  • Castopod - A podcast management hosting platform that includes the latest podcast 2.0 standards, an automated Fediverse feed, analytics, an embeddable player, and more. (Source Code) AGPL-3.0 PHP/Docker
  • Chyrp Lite - Extra-awesome, extra-lightweight blog engine. (Source Code) BSD-3-Clause PHP
  • Dotclear - Take control over your blog. GPL-2.0 PHP
  • FlatPress - A lightweight, easy-to-set-up flat-file blogging engine. (Source Code) GPL-2.0 PHP
  • Ghost - Just a blogging platform. (Source Code) MIT Nodejs
  • Haven - Private blogging system with markdown editing and built in RSS reader. (Demo, Source Code) MIT Ruby
  • Known - A collaborative social publishing platform. (Source Code) Apache-2.0 PHP
  • Mataroa - Mataroa is a naked blogging platform for minimalists. (Source Code) MIT Python
  • PluXml - XML-based blog/CMS platform. (Source Code) GPL-3.0 PHP
  • Serendipity - Serendipity (s9y) is a highly extensible and customizable PHP blog engine using Smarty templating. (Source Code) BSD-3-Clause PHP
  • WriteFreely - Writing software for starting a minimalist, federated blog — or an entire community. (Source Code) AGPL-3.0 Go

Booking and Scheduling

Event scheduling, reservation, and appointment management software. Related: Polls and Events

  • Alf.io - The open source ticket reservation system. (Demo, Source Code) GPL-3.0 Java
  • Cal.com - The open-source online appointment scheduling system. (Demo, Source Code) MIT Nodejs
  • Easy!Appointments - A highly customizable web application that allows your customers to book appointments with you via the web. (Demo, Source Code) GPL-3.0 PHP
  • QloApps - An open-source, customizable and intuitive web-based hotel reservation system and a booking engine. (Demo, Source Code) OSL-3.0 PHP/Nodejs
  • Rallly - Create polls to vote on dates and times (alternative to Doodle). (Demo, Source Code) AGPL-3.0 Nodejs/Docker
  • Seatsurfing - Webbased app to book seats, desks and rooms for offices. (Source Code) GPL-3.0 Docker

Software which allows users to add, annotate, edit, and share bookmarks of web documents.

  • Briefkasten - Modern app for saving and managing your own bookmarks. Includes a browser extension. (Demo) MIT Nodejs/Docker
  • Buku - A powerful bookmark manager and a personal textual mini-web. GPL-3.0 Python/deb
  • Digibunch - Create bunches of links to share with your learners or colleagues. (Demo, Source Code) AGPL-3.0 Nodejs/PHP
  • Espial - An open-source, web-based bookmarking server. AGPL-3.0 Haskell
  • Firefox Account Server - This allows you to host your own Firefox accounts server. (Source Code) MPL-2.0 Nodejs/Java
  • Grimoire - Bookmark manager with a modern UI, automatic content & metadata extraction, categorization, filtering, and more. It has fully documented REST API, and Docker image for easy deployment. (Source Code) MIT Nodejs/Docker
  • Hackershare - Social bookmarks website for hackers. MIT Ruby
  • Hoarder App - A self-hostable bookmark-everything app with a touch of AI for the data hoarders out there. (Demo, Source Code) AGPL-3.0 Docker
  • LinkAce - A bookmark archive with automatic backups to the Internet Archive, link monitoring, and a full REST API. Installation is done via Docker, or as a simple PHP application. (Demo, Source Code) GPL-3.0 Docker/PHP
  • linkding - Minimal bookmark management with a fast and clean UI. Simple installation through Docker and can run on your Raspberry Pi. MIT Docker/Python/Nodejs
  • LinkWarden - A self-hosted bookmark + archive manager to store your useful links. (Source Code) MIT Docker/Nodejs
  • NeonLink - Self-hosted bookmark service with unique design and simple installation with Docker. MIT Docker
  • Readeck - Readeck is a simple web application that lets you save the precious readable content of web pages you like and want to keep forever. See it as a bookmark manager and a read later tool. (Source Code, Clients) AGPL-3.0 Go/Docker
  • Servas - A self-hosted bookmark management tool. It allows organization with tags, groups, and a list specifically for later access. It supports multiple users with 2FA. Companion browser extensions are available for Firefox and Chrome. (Clients) GPL-3.0 Docker/Nodejs/PHP
  • Shaarli - Personal, minimalist, super-fast, no-database bookmarking and link sharing platform. (Demo) Zlib PHP/deb
  • Shiori - Simple bookmark manager built with Go. MIT Go/Docker
  • Slash - An open source, self-hosted bookmarks and link sharing platform. GPL-3.0 Docker
  • SyncMarks - Sync and manage your browser bookmarks from Edge, Firefox and Chromium. (Clients) AGPL-3.0 PHP

Calendar & Contacts

CalDAV and CardDAV protocol servers and web clients/interfaces for Electronic calendar, address book and contact management. Related: Groupware See also: Comparison of CalDAV and CardDAV implementations - Wikipedia

  • Baïkal - Lightweight CalDAV and CardDAV server based on sabre/dav. (Source Code) GPL-3.0 PHP
  • DAViCal - Server for calendar sharing (CalDAV) that uses a PostgreSQL database as a data store. (Source Code) GPL-2.0 PHP/deb
  • Davis - A simple, dockerizable and fully translatable admin interface for sabre/dav based on Symfony 5 and Bootstrap 4, largely inspired by Baïkal. MIT PHP
  • Etebase (EteSync) - End-to-end encrypted and journaled personal information server supporting calendar and contact data, offering its own clients. (Source Code) AGPL-3.0 Python/Django
  • EteSync Web - EteSync’s official Web-based client (i.e., their Web app). (Demo, Source Code) AGPL-3.0 Javascript
  • Manage My Damn Life - Manage my Damn Life (MMDL) is a self-hosted front end for managing your CalDAV tasks and calendars. GPL-3.0 Nodejs/Docker
  • Radicale - Simple calendar and contact server with extremely low administrative overhead. (Source Code) GPL-3.0 Python/deb
  • SabreDAV - Open source CardDAV, CalDAV, and WebDAV framework and server. (Source Code) MIT PHP
  • Xandikos - Open source CardDAV and CalDAV server with minimal administrative overhead, backed by a Git repository. GPL-3.0 Python/deb

Communication - Custom Communication Systems

Communication software used to provide remote access to systems and exchange files and messages in text, audio and/or video formats between different computers or users, using their own custom protocols.

  • AnyCable - Realtime server for reliable two-way communication over WebSockets, Server-sent events, etc. (Demo, Source Code) MIT Go/Docker
  • Apprise - Apprise allows you to send a notification to almost all of the most popular notification services available to us today such as: Telegram, Discord, Slack, Amazon SNS, Gotify, etc. MIT Python/Docker/deb
  • Centrifugo - Language-agnostic real-time messaging (Websocket or SockJS) server. (Demo, Source Code) MIT Go/Docker/K8S
  • Chatwoot - Self-hosted customer communication platform (alternative to Intercom & Zendesk). (Source Code) MIT Ruby/Docker/K8S
  • Chitchatter - A peer-to-peer chat app that is serverless, decentralized, and ephemeral. (Source Code) GPL-2.0 Nodejs
  • Conduit - A simple, fast, and reliable chat server powered by Matrix. (Source Code) Apache-2.0 Rust
  • Darkwire.io - End-to-end encrypted instant web chat. MIT Nodejs
  • Databag - Federated, end-to-end encrypted messaging service for the web, iOS, and Android, supporting text, photos, video, and WebRTC video and audio calls. (Demo) Apache-2.0 Docker
  • Dendrite - Second-generation Matrix homeserver written in Go. It intends to provide an efficient, reliable and scalable alternative to Synapse. (Source Code) Apache-2.0 Go
  • Element - Fully-featured Matrix client for Web, iOS & Android. (Source Code) Apache-2.0 Nodejs
  • GNUnet - Free software framework for decentralized, peer-to-peer networking. (Source Code) GPL-3.0 C
  • Gotify - Self-hosted notification server with Android and CLI clients, similar to PushBullet. (Source Code, Clients) MIT Go/Docker
  • Hyphanet - Anonymously share files, browse and publish freesites (web sites accessible only through Hyphanet) and chat on forums. (Source Code) GPL-2.0 Java
  • Jami - Free and universal communication platform which preserves the user’s privacy and freedoms (formerly GNU Ring). (Source Code) GPL-3.0 C++
  • KChat - PHP Based Live Chat Application. Apache-2.0 PHP
  • LeapChat - Ephemeral, encrypted, in-browser chat rooms. (Source Code) AGPL-3.0 Docker/Nodejs/Shell
  • Live Helper Chat - Live Support chat for your website. (Source Code) Apache-2.0 PHP
  • Mattermost - Platform for secure collaboration across the entire software development lifecycle, can be integrated with Gitlab (alternative to Slack). (Source Code) AGPL-3.0/Apache-2.0 Go/Docker/K8S
  • MiAOU - Multi-room persistent chat server. (Source Code) MIT Nodejs
  • Mumble - Low-latency, high quality voice/text chat software. (Source Code, Clients) BSD-3-Clause C++/deb
  • Notifo - Multichannel notification server with support for Email, Mobile Push, Web Push, SMS, messaging and a javascript plugin. MIT C#
  • Novu - Self-hosted / cloud notification infrastructure for developers. (Source Code) MIT Docker/Nodejs
  • ntfy - Push notifications to phone or desktop using HTTP PUT/POST, with Android app, CLI and web app, similar to Pushover and Gotify. (Demo, Source Code, Clients) Apache-2.0/GPL-2.0 Go/Docker/K8S
  • OTS - One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser. (Source Code) Apache-2.0 Go
  • PushBits - Self-hosted notification server for relaying push notifications via Matrix, similar to PushBullet and Gotify. ISC Go
  • RetroShare - Secured and decentralized communication system. Offers decentralized chat, forums, messaging, file transfer. (Source Code) GPL-2.0 C++
  • Revolt - Revolt is a user-first chat platform built with modern web technologies. (Source Code) AGPL-3.0 Rust
  • Rocket.Chat - Teamchat solution similar to Gitter.im or Slack. (Source Code) MIT Nodejs/Docker/K8S
  • Screego - Screego is a simple tool to quickly share your screen to one or multiple people via web browser. (Demo, Source Code) GPL-3.0 Docker/Go
  • Shhh - Keep secrets out of emails or chat logs, share them using secure links with passphrase and expiration dates. MIT Python
  • SimpleX Chat - The most private and secure chat and applications platform - now with double ratchet E2E encryption. AGPL-3.0 Haskell
  • Soketi - Simple, fast, and resilient open-source WebSockets server (drop-in alternative to Pusher). (Source Code) MIT Nodejs/Docker/K8S
  • Spectrum 2 - Spectrum 2 is an open source instant messaging transport. It allows users to chat together even when they are using different IM networks. (Source Code) GPL-3.0 C++
  • Synapse - Server for Matrix, an open standard for decentralized persistent communication. (Source Code) Apache-2.0 Python/deb
  • Syndie - Syndie is a libre system for operating distributed forums. CC0-1.0 Java
  • Tailchat - Next generation noIM application in your own workspace, not only another Slack/Discord/rocket.chat. (Demo, Source Code) Apache-2.0 Docker/K8S/Nodejs
  • TextBelt - Outgoing SMS API that uses carrier-specific gateways to deliver your text messages for free, and without ads. MIT Javascript
  • Tiledesk - All-in-one customer engagement platform from lead-gen to post-sales, from WhatsApp to your website. With omni-channel live agents and AI-powered chatbots (alternative to Intercom, Zendesk, Tawk.to and Tidio). (Source Code) MIT Docker/K8S
  • Tinode - Instant messaging platform. Backend in Go. Clients: Swift iOS, Java Android, JS webapp, scriptable command line; chatbots. (Demo, Source Code, Clients) GPL-3.0 Go
  • Tox - Distributed, secure messenger with audio and video chat capabilities. (Source Code) GPL-3.0 C
  • Typebot - Conversational app builder (alternative to Typeform or Landbot). (Source Code) AGPL-3.0 Docker
  • WBO - Web Whiteboard to collaborate in real-time on schemas, drawings, and notes. (Demo) AGPL-3.0 Nodejs/Docker
  • Yopass - Secure sharing of secrets, passwords and files. (Demo) Apache-2.0 Go/Docker
  • Zulip - Zulip is a powerful, open source group chat application. (Source Code) Apache-2.0 Python

Communication - Email - Complete Solutions

Simple deployment of E-mail servers, e.g. for inexperienced or impatient admins.

  • AnonAddy - Open source email forwarding service for creating aliases. (Source Code) MIT PHP/Docker
  • DebOps - Your Debian-based data center in a box. A set of general-purpose Ansible roles that can be used to manage Debian or Ubuntu hosts. (Source Code) GPL-3.0 Ansible/Python
  • docker-mailserver - Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container. Only configuration files, no SQL database. (Source Code) MIT Docker
  • Dovel - SMTP server that sends and receives emails according to a simple configuration file, with an optional web interface that you can use to browse your emails. (Source Code) LGPL-3.0 Go
  • emailwiz - Luke Smith’s bash script to completely automate the setup of a Postfix/Dovecot/SpamAssassin/OpenDKIM server on debian. GPL-3.0 Shell
  • homebox - Suite of Ansible scripts to deploy a fully functional mail server on Debian. Unobtrusive and automatic as much as possible, focusing on stability and security. GPL-3.0 Shell
  • Inboxen - Inboxen is a service that provides you with an infinite number of unique inboxes. (Source Code) GPL-3.0 Python
  • iRedMail - Full-featured mail server solution based on Postfix and Dovecot. (Source Code) GPL-3.0 Shell
  • Maddy Mail Server - All-in-one mail server that implements SMTP (both MTA and MX) and IMAP. Replaces Postfix, Dovecot, OpenDKIM, OpenSPF, OpenDMARC with single daemon. GPL-3.0 Go
  • Mail-in-a-Box - Turns any Ubuntu server into a fully functional mail server with one command. (Source Code) CC0-1.0 Shell
  • Mailcow - Mail server suite based on Dovecot, Postfix and other open source software, that provides a modern Web UI for administration. (Source Code) GPL-2.0 Docker/PHP
  • Mailu - Mailu is a simple yet full-featured mail server as a set of Docker images. (Source Code) MIT Docker/Python
  • Modoboa - Modoboa is a mail hosting and management platform including a modern and simplified Web User Interface. (Source Code) ISC Python
  • Postal - A complete and fully featured mail server for use by websites & web servers. (Source Code) MIT Docker/Ruby
  • Simple NixOS Mailserver - Complete mailserver solution leveraging the Nix Ecosystem. GPL-3.0 Nix
  • SimpleLogin - Open source email alias solution to protect your email address. Comes with browser extensions and mobile apps. (Source Code) MIT Docker/Python
  • Stalwart Mail Server - All-in-one mail server with JMAP, IMAP4, and SMTP support and a wide range of modern features. (Source Code) AGPL-3.0 Rust/Docker
  • wildduck - Scalable no-SPOF IMAP/POP3 mail server. (Source Code) EUPL-1.2 Nodejs/Docker

Communication - Email - Mail Delivery Agents

Mail Delivery Agents (MDAs) - IMAP/POP3 server software.

  • Cyrus IMAP - Email (IMAP/POP3), contacts and calendar server. (Source Code) BSD-3-Clause-Attribution C
  • Dovecot - IMAP and POP3 server written primarily with security in mind. (Source Code) MIT/LGPL-2.1 C/deb
  • Piler - Feature-rich email archiving solution. (Source Code) GPL-3.0 C
  • Stalwart JMAP - JMAP and IMAP server designed to be secure, fast, robust and scalable. (Source Code) AGPL-3.0 Rust/Docker

Communication - Email - Mail Transfer Agents

Mail Transfer Agents (MTAs) - SMTP servers.

  • chasquid - SMTP (email) server with a focus on simplicity, security, and ease of operation. (Source Code) Apache-2.0 Go
  • Courier MTA - Fast, scalable, enterprise mail/groupware server providing ESMTP, IMAP, POP3, webmail, mailing list, basic web-based calendaring and scheduling services. (Source Code) GPL-3.0 C/deb
  • DragonFly - A small MTA for home and office use. Works on Linux and FreeBSD. BSD-3-Clause C
  • EmailRelay - A small and easy to configure SMTP and POP3 server for Windows and Linux. (Source Code) GPL-3.0 C++
  • Exim - Message transfer agent (MTA) developed at the University of Cambridge. (Source Code) GPL-3.0 C/deb
  • Haraka - High-performance, pluginable SMTP server written in Javascript. (Source Code) MIT Nodejs
  • MailCatcher - Ruby gem that deploys a simply SMTP MTA gateway that accepts all mail and displays in web interface. Useful for debugging or development. (Source Code) MIT Ruby
  • OpenSMTPD - Secure SMTP server implementation from the OpenBSD project. (Source Code) ISC C/deb
  • OpenTrashmail - Complete trashmail solution that exposes an SMTP server and has a web interface to manage received emails. Works with multiple and wildcard domains and is fully file based (no database needed). Includes RSS feeds and JSON API. Apache-2.0 Python/PHP/Docker
  • Postfix - Fast, easy to administer, and secure Sendmail replacement. IPL-1.0 C/deb
  • Sendmail - Message transfer agent (MTA). Sendmail C/deb
  • Slimta - Mail Transfer Library built on Python. (Source Code) MIT Python
  • Stalwart SMTP - Modern SMTP server designed with a focus on security, speed, and extensive configurability. (Source Code) AGPL-3.0 Rust

Communication - Email - Mailing Lists and Newsletters

Mailing list servers and mass mailing software - one message to many recipients.

  • Dada Mail - Web-based list management system that can be used for announcement lists and/or discussion lists. (Source Code) GPL-2.0 Perl
  • HyperKitty - Open source Django application to provide a web interface to access GNU Mailman v3 archives. (Demo, Source Code) GPL-3.0 Python
  • Keila - Self-hosted reliable and easy-to-use newsletter tool (alternative to Mailchimp or Sendinblue). (Demo, Source Code) AGPL-3.0 Docker
  • Listmonk - High performance, self-hosted newsletter and mailing list manager with a modern dashboard. (Source Code) AGPL-3.0 Go/Docker
  • Mailman - The Gnu mailing list server. GPL-3.0 Python
  • Mautic - Mautic is marketing automation software (email, social and more). (Source Code) GPL-3.0 PHP
  • phpList - Newsletter and email marketing with advanced management of subscribers, bounces, and plugins. (Source Code) AGPL-3.0 PHP
  • Postorius - Web user interface to access GNU Mailman. (Source Code) GPL-3.0 Python
  • Schleuder - GPG-enabled mailing list manager with resending-capabilities. (Source Code) GPL-3.0 Ruby
  • Sympa - Mailing list manager. (Source Code) GPL-2.0 Perl

Communication - Email - Webmail Clients

Webmail clients.

Communication - IRC

IRC communication software.

  • Convos - Always online web IRC client. (Demo, Source Code) Artistic-2.0 Perl/Docker
  • Ergo - Modern IRCv3 server written in Go, combining the features of an ircd, a services framework, and a bouncer. (Source Code) MIT Go/Docker
  • Glowing Bear - A web frontend for WeeChat. (Demo) GPL-3.0 Nodejs
  • InspIRCd - Modular IRC server written in C++ for Linux, BSD, Windows, and macOS. (Source Code) GPL-2.0 C++/Docker
  • Kiwi IRC - Responsive web IRC client with theming support. (Demo, Source Code) Apache-2.0 Nodejs
  • ngircd - Free, portable and lightweight Internet Relay Chat server for small or private networks. (Source Code) GPL-2.0 C/deb
  • Quassel IRC - Distributed IRC client, meaning that one (or multiple) client(s) can attach to and detach from a central core. (Source Code) GPL-2.0 C++
  • Robust IRC - RobustIRC is IRC without netsplits. Distributed IRC server, based on RobustSession protocol. (Source Code) BSD-3-Clause Go
  • The Lounge - Self-hosted web IRC client. (Demo, Source Code) MIT Nodejs/Docker
  • UnrealIRCd - Modular, advanced and highly configurable IRC server written in C for Linux, BSD, Windows, and macOS. (Source Code) GPL-2.0 C
  • Weechat - Fast, light and extensible chat client. (Source Code) GPL-3.0 C/Docker/deb
  • ZNC - Advanced IRC bouncer. (Source Code) Apache-2.0 C++/deb

Communication - SIP

SIP/IPBX telephony software.

  • Asterisk - Easy to use but advanced IP PBX system, VoIP gateway and conference server. (Source Code) GPL-2.0 C/deb
  • ASTPP - VoIP Billing Solution for Freeswitch. It supports prepaid and postpaid billing with call rating and credit control. It also provides many other features. (Source Code) AGPL-3.0 PHP
  • Eqivo - Eqivo implements an API layer on top of FreeSWITCH facilitating integration between web applications and voice/video-enabled endpoints such as traditional phone lines (PSTN), VoIP phones, webRTC clients etc. (Source Code) MIT Docker/PHP
  • Flexisip - A complete, modular and scalable SIP server, includes a push gateway, to deliver SIP incoming calls or text messages on mobile device platforms where push notifications are required to receive information when the app is not active in the foreground. (Source Code) AGPL-3.0 C/Docker
  • Freepbx - Web-based open source GUI that controls and manages Asterisk. (Source Code) GPL-2.0 PHP
  • FreeSWITCH - Scalable open source cross-platform telephony platform. (Source Code) MPL-2.0 C
  • FusionPBX - Open source project that provides a customizable and flexible web interface to the very powerful and highly scalable multi-platform voice switch called FreeSWITCH. (Source Code) MPL-1.1 PHP
  • Kamailio - Modular SIP server (registrar/proxy/router/etc). (Source Code) GPL-2.0 C/deb
  • openSIPS - OpenSIPS is an Open Source SIP proxy/server for voice, video, IM, presence and any other SIP extensions. (Source Code) GPL-2.0 C
  • Routr - A lightweight sip proxy, location server, and registrar for a reliable and scalable SIP infrastructure. (Source Code) MIT Docker/K8S
  • SIP3 - VoIP troubleshooting and monitoring platform. (Demo, Source Code) Apache-2.0 Java
  • SIPCAPTURE Homer - Troubleshooting and monitoring VoIP calls. (Source Code) AGPL-3.0 Nodejs/Go/Docker
  • Wazo - Full-featured IPBX solution built atop Asterisk with integrated Web administration interface and REST-ful API. (Source Code) GPL-3.0 Python
  • Yeti-Switch - Transit class4 softswitch(SBC) with integrated billing and routing engine and REST API. (Demo, Source Code) GPL-2.0 C++/Ruby

Communication - Social Networks and Forums

Social Networking and Forum software.

  • Akkoma - Federated microblogging server with Mastodon, GNU social, and ActivityPub compatibility. (Source Code) AGPL-3.0 Elixir/Docker
  • Anahita - Open Source Social Networking Framework and Platform. (Source Code) GPL-3.0 PHP
  • Answer - An open-source knowledge-based community software. You can use it to quickly build your Q&A community for product technical support, customer support, user communication, and more. (Source Code) Apache-2.0 Docker/Go
  • AsmBB - A fast, SQLite-powered forum engine written in ASM. (Source Code) EUPL-1.2 Assembly
  • BuddyPress - Powerful plugin that takes your WordPress.org powered site beyond the blog with social-network features like user profiles, activity streams, user groups, and more. (Source Code) GPL-2.0 PHP
  • Chirpy - Chirpy is an open-source, privacy-friendly and customizable Disqus (comment system) alternate. (Demo, Source Code) AGPL-3.0 Docker/Nodejs
  • Coral - A better commenting experience from Vox Media. (Source Code) Apache-2.0 Docker/Nodejs
  • diaspora* - Distributed social networking server. (Source Code) AGPL-3.0 Ruby
  • Discourse - Advanced forum / community solution based on Ruby and JS. (Demo, Source Code) GPL-2.0 Docker
  • Elgg - Powerful open source social networking engine. (Source Code) GPL-2.0 PHP
  • Enigma 1/2 BBS - Enigma 1/2 is a modern, multi-platform BBS engine with unlimited “callers” and legacy DOS door game support. (Demo, Source Code) BSD-2-Clause Shell/Docker/Nodejs
  • Flarum - Delightfully simple forums. Flarum is the next-generation forum software that makes online discussion fun again. (Source Code) MIT PHP
  • Friendica - Social Communication Server. (Source Code) AGPL-3.0 PHP
  • GoToSocial - ActivityPub federated social network server implementing the Mastodon client API. AGPL-3.0 Docker/Go
  • Hatsu - Bridge that interacts with Fediverse on behalf of your static site. (Source Code) AGPL-3.0 Docker/Rust
  • Hubzilla - Decentralized identity, privacy, publishing, sharing, cloud storage, and communications/social platform. (Source Code) MIT PHP
  • HumHub - Flexible kit for private social networks. (Source Code) AGPL-3.0 PHP
  • Isso - Lightweight commenting server written in Python and Javascript. It aims to be a drop-in replacement for Disqus. (Source Code) MIT Python/Docker
  • kbin - Federated content aggregator and microblogging platform. (Source Code) AGPL-3.0 PHP/Nodejs/Docker
  • Lemmy - A link aggregator / reddit clone for the fediverse (alternative to Reddit). (Source Code) AGPL-3.0 Docker/Rust
  • Libreddit - Private front-end for Reddit written in Rust. AGPL-3.0 Rust
  • Loomio - Loomio is a collaborative decision-making tool that makes it easy for anyone to participate in decisions which affect them. (Source Code) AGPL-3.0 Docker
  • Mastodon - Federated microblogging server. (Source Code, Clients) AGPL-3.0 Ruby
  • Misago - Misago is fully featured modern forum application that is fast, scalable and responsive. (Source Code) GPL-2.0 Docker
  • Misskey - Decentralized app-like microblogging server/SNS for the Fediverse, using the ActivityPub protocol like GNU social and Mastodon. (Source Code) AGPL-3.0 Nodejs/Docker
  • Movim - Modern, federated social network based on XMPP, with a fully featured group-chat, subscriptions and microblogging. (Source Code) AGPL-3.0 PHP/Docker
  • MyBB - Free, extensible forum software package. (Source Code) LGPL-3.0 PHP
  • Nitter - An alternative front end to twitter. (Source Code) AGPL-3.0 Nim/Docker
  • NodeBB - Forum software built for the modern web. (Source Code) GPL-3.0 Nodejs
  • Orange Forum - Orange Forum is an easy to deploy forum that has minimal dependencies and uses very little javascript. (Source Code) BSD-3-Clause Go
  • OSSN - Open Source Social Network (OSSN) is a social networking software written in PHP. It allows you to make a social networking website and helps your members build social relationships, with people who share similar professional or personal interests. (Source Code) GPL-2.0 PHP
  • phpBB - Flat-forum bulletin board software solution that can be used to stay in touch with a group of people or can power your entire website. (Source Code) GPL-2.0 PHP
  • PixelFed - Pixelfed is an open-source, federated platform alternate to Instagram. (Source Code) AGPL-3.0 PHP
  • Pleroma - Federated microblogging server, Mastodon, GNU social, & ActivityPub compatible. (Source Code) AGPL-3.0 Elixir
  • qpixel - Q&A-based community knowledge-sharing software. (Source Code) AGPL-3.0 Ruby
  • remark42 - A lightweight and simple comment engine, which doesn’t spy on users. It can be embedded into blogs, articles or any other place where readers add comments. (Demo, Source Code) MIT Docker/Go
  • Retrospring - A free, open-source social network following the Q/A (question and answer) principle of sites like Formspring, ask.fm or CuriousCat. (Demo) AGPL-3.0 Ruby/Nodejs
  • Scoold - Stack Overflow in a JAR. An enterprise-ready Q&A platform with full-text search, SAML, LDAP integration and social login support. (Demo, Source Code) Apache-2.0 Java/Docker/K8S
  • Simple Machines Forum - Free, professional grade software package that allows you to set up your own online community within minutes. (Source Code) BSD-3-Clause PHP
  • Socialhome - Federated and decentralized profile builder and social network engine. (Demo, Source Code) AGPL-3.0 Docker/Python
  • Takahē - Federated microblogging server. Mastodon, & ActivityPub compatible. (Source Code) BSD-3-Clause Docker
  • Talkyard - Create a community, where your users can suggest ideas and get questions answered. And have friendly open-ended discussions and chat (Slack/StackOverflow/Discourse/Reddit/Disqus hybrid). (Demo, Source Code) AGPL-3.0 Docker/Scala
  • yarn.social - Self-Hosted, Twitter™-like Decentralised micro-logging platform. No ads, no tracking, your content, your data. (Source Code) MIT Go
  • Zusam - Free and open-source way to self-host private forums for groups of friends or family. (Demo) AGPL-3.0 PHP

Communication - Video Conferencing

Video/Web Conferencing tools and software. Related: Conference Management

  • BigBlueButton - Supports real-time sharing of audio, video, slides (with whiteboard controls), chat, and the screen. Instructors can engage remote students with polling, emojis, and breakout rooms. (Source Code) LGPL-3.0 Java
  • Galene - Galène (or Galene) is a videoconference server (an “SFU”) that is easy to deploy and that requires moderate server resources. (Source Code) MIT Go
  • Janus - General-purpose, lightweight, minimalist WebRTC Server. (Demo, Source Code) GPL-3.0 C
  • Jitsi Meet - Jitsi Meet is an OpenSource (MIT) WebRTC Javascript application that uses Jitsi Videobridge to provide high quality, scalable video conferences. (Demo, Source Code) Apache-2.0 Nodejs/Docker/deb
  • Jitsi Video Bridge - WebRTC compatible Selective Forwarding Unit (SFU) that allows for multiuser video communication. (Source Code) Apache-2.0 Java/deb
  • MiroTalk C2C - Real-time cam-2-cam video calls & screen sharing, end-to-end encrypted, to embed in any website with a simple iframe. (Source Code) MIT Nodejs/Docker
  • MiroTalk P2P - Simple, secure, fast real-time video conferences up to 4k and 60fps, compatible with all browsers and platforms. (Demo, Source Code) AGPL-3.0 Nodejs/Docker
  • MiroTalk SFU - Simple, secure, scalable real-time video conferences up to 4k, compatible with all browsers and platforms. (Demo, Source Code) AGPL-3.0 Nodejs/Docker
  • plugNmeet - Scalable, High Performance, Open source web conferencing system. (Demo, Source Code) MIT Docker/Go

Communication - XMPP - Servers

Extensible Messaging and Presence Protocol servers.

Communication - XMPP - Web Clients

Extensible Messaging and Presence Protocol Web clients/interfaces.

  • Converse.js - Free and open-source XMPP chat client in your browser. (Source Code) MPL-2.0 Javascript
  • JSXC - Real-time XMPP web chat application with video calls, file transfer and encrypted communication. There are also versions for Nextcloud/Owncloud and SOGo. (Source Code) MIT Javascript
  • Libervia - Web frontend from Salut à Toi. AGPL-3.0 Python
  • Salut à Toi - Multipurpose, multi frontend, libre and decentralized communication tool. (Source Code) AGPL-3.0 Python

Community-Supported Agriculture (CSA)

Management and administration tools for community supported agriculture and food cooperatives. Related: E-commerce

  • ACP Admin - CSA administration. Manage members, subscriptions, deliveries, drop-off locations, member participation, invoices and emails (documentation in French). (Source Code) MIT Ruby
  • E-Label - Solution for electronic labels, with QR Codes, on wine bottles sold within the European Union. (Source Code) MIT Docker
  • FoodCoopShop - User-friendly open source software for food-coops. (Source Code) AGPL-3.0 PHP/Docker
  • Foodsoft - Web-based software to manage a non-profit food coop (product catalog, ordering, accounting, job scheduling). (Source Code) AGPL-3.0 Docker/Ruby
  • juntagrico - Management platform for community gardens and vegetable cooperatives. (Source Code) LGPL-3.0 Python
  • Local Food Nodes - Your open source platform for peoples driven local food markets and CSA. (Source Code) MIT PHP
  • Open Food Network - Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses. (Source Code) AGPL-3.0 Ruby
  • OpenOlitor - Administration platform for Community Supported Agriculture groups. (Source Code) AGPL-3.0 Scala
  • teikei - A web application that maps out community-supported agriculture based on crowdsourced data. (Demo) AGPL-3.0 Nodejs

Conference Management

Software for submission of abstracts and preparation/management of academic conferences.

  • Conference Organizing Distribution (COD) - Create conference and event websites built on top of Drupal. (Source Code) GPL-2.0 PHP
  • frab - Web-based conference planning and management system. It helps to collect submissions, to manage talks and speakers and to create a schedule. (Source Code) MIT Ruby/Docker
  • indico - A feature-rich event management system, made @ CERN, the place where the Web was born. (Demo, Source Code) MIT Python
  • motion.tools (Antragsgrün) - A web tool for managing motions and amendments for (political) conventions. (Demo, Source Code) AGPL-3.0 PHP/Docker
  • OpenSlides - A web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. (Demo, Source Code) MIT Docker
  • osem - Event management tailored to free Software conferences. (Source Code) MIT Ruby/Docker
  • pretalx - Web-based event management, including running a Call for Papers, reviewing submissions, and scheduling talks. Exports and imports for various related tools. (Source Code) Apache-2.0 Python

Content Management Systems (CMS)

Content Management Systems offer a practical way to setup a website with many features, using third party plugins, themes and functionality that are easy to add and customize. Related: Blogging Platforms, Static Site Generators, Photo and Video Galleries

  • Alfresco Community Edition - The open source Enterprise Content Management software that handles any type of content, allowing users to easily share and collaborate on content. (Source Code) LGPL-3.0 Java
  • Apostrophe - CMS with a focus on extensible in-context editing tools. (Demo, Source Code) MIT Nodejs
  • Backdrop CMS - Comprehensive CMS for small to medium sized businesses and non-profits. (Source Code) GPL-2.0 PHP
  • BigTree CMS - Straightforward, well documented, and capable written with PHP and MySQL. (Source Code) LGPL-2.1 PHP
  • Bludit - Simple application to build a site or blog in seconds. Bludit uses flat-files (text files in JSON format) to store posts and pages. (Demo, Source Code) MIT PHP
  • Bolt CMS - Open source Content Management Tool, which strives to be as simple and straightforward as possible. (Source Code) MIT PHP
  • CMS Made Simple - Open source content management system, faster and easier management of website contents, scalable for small businesses to large corporations. (Source Code) GPL-2.0 PHP
  • Cockpit - Simple Content Platform to manage any structured content. (Source Code) MIT PHP
  • Concrete 5 CMS - Open source content management system. (Source Code) MIT PHP
  • Contao - Contao is a powerful open source CMS that allows you to create professional websites and scalable web applications. (Source Code) LGPL-3.0 PHP
  • CouchCMS - Simple Open-Source CMS for designers. (Source Code) CPAL-1.0 PHP
  • Drupal - Advanced open source content management platform. (Source Code) GPL-2.0 PHP
  • eLabFTW - Online lab notebook for research labs. Store experiments, use a database to find reagents or protocols, use trusted timestamping to legally timestamp an experiment, export as pdf or zip archive, share with collaborators…. (Demo, Source Code) AGPL-3.0 PHP
  • Expressa - Content Management System for powering database driven websites using JSON schemas. Provides permission management and automatic REST APIs. MIT Nodejs
  • Joomla! - Advanced Content Management System (CMS). (Source Code) GPL-2.0 PHP
  • KeystoneJS - CMS and Web Application Platform. (Source Code) MIT Nodejs
  • MODX - MODX is an advanced content management and publishing platform. The current version is called ‘Revolution’. (Source Code) GPL-2.0 PHP
  • Neos - Neos or TYPO3 Neos (for version 1) is a modern, open source CMS. (Source Code) GPL-3.0 PHP
  • Noosfero - Noosfero is a web platform for social and solidarity economy networks with blog, e-Portfolios, CMS, RSS, thematic discussion, events agenda and collective intelligence for solidarity economy in the same system. AGPL-3.0 Ruby
  • Omeka - Create complex narratives and share rich collections, adhering to Dublin Core standards with Omeka on your server, designed for scholars, museums, libraries, archives, and enthusiasts. (Demo, Source Code) GPL-3.0 PHP
  • Payload CMS - Developer-first headless CMS and application framework. (Demo, Source Code) MIT Nodejs
  • Pimcore - Multi-Channel Experience and Engagement Management Platform. (Source Code) GPL-3.0 PHP/Docker
  • Plone - Powerful open-source CMS system. (Source Code) ZPL-2.0 Python/Docker
  • Publify - Simple but full featured web publishing software. (Source Code) MIT Ruby
  • Rapido - Create your website with Rapido. Edit, publish and share collaborative content. AGPL-3.0 Go
  • REDAXO - Simple, flexible and useful content management system (documentation only available in German). (Source Code) MIT PHP/Docker
  • Roadiz - Modern CMS based on a node system which can handle many types of services. (Source Code) MIT PHP
  • SilverStripe - Easy to use CMS with powerful MVC framework underlying. (Demo, Source Code) BSD-3-Clause PHP
  • SPIP - Publication system for the Internet aimed at collaborative work, multilingual environments, and simplicity of use for web authors. (Source Code) GPL-3.0 PHP
  • Squidex - Headless CMS, based on MongoDB, CQRS and Event Sourcing. (Demo, Source Code) MIT .NET
  • Strapi - The most advanced open-source Content Management Framework (headless-CMS) to build powerful API with no effort. (Source Code) MIT Nodejs
  • Textpattern - Flexible, elegant and easy-to-use CMS. (Demo, Source Code) GPL-2.0 PHP
  • Typemill - Author-friendly flat-file-cms with a visual markdown editor based on vue.js. (Source Code) MIT PHP
  • TYPO3 - Powerful and advanced CMS with a large community. (Source Code) GPL-2.0 PHP
  • Umbraco - The friendly CMS. Free and open source with an amazing community. (Source Code) MIT .NET
  • Wagtail - Django content management system focused on flexibility and user experience. (Source Code) BSD-3-Clause Python
  • WinterCMS - Speedy and secure content management system built on the Laravel PHP framework. (Source Code) MIT PHP
  • WonderCMS - WonderCMS is the smallest flat file CMS since 2008. (Demo, Source Code) MIT PHP
  • WordPress - World’s most-used blogging and CMS engine. (Source Code) GPL-2.0 PHP

Database Management

Web interfaces for database management. Includes tools for database analytics and visualization. Related: Analytics, Automation See also: dbdb.io - Database of Databases

  • AdminerEvo - Database management in a single PHP file. Available for MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, Elasticsearch, MongoDB and others (fork of Adminer). (Source Code) Apache-2.0/GPL-2.0 PHP
  • Azimutt - Visual database exploration made for real world databases (big and messy). Explore your database schema as well as data, document them, extend them and even get analysis and guidelines. (Demo, Source Code) MIT Elixir/Nodejs/Docker
  • Baserow - Create your own database without technical experience (alternative to Airtable). (Source Code) MIT Docker
  • Bytebase - Safe database schema change and version control for DevOps teams, supports MySQL, PostgreSQL, TiDB, ClickHouse, and Snowflake. (Demo, Source Code) MIT Docker/K8S/Go
  • Chartbrew - Web application that can connect directly to databases and APIs and use the data to create beautiful charts. (Demo, Source Code) MIT Nodejs/Docker
  • CloudBeaver - Self-hosted management of databases, supports PostgreSQL, MySQL, SQLite and more. A web/hosted version of DBeaver. (Source Code) Apache-2.0 Docker
  • Databunker - Network-based, self-hosted, GDPR compliant, secure database for personal data or PII. (Source Code) MIT Docker
  • Datasette - An open source multi-tool for exploring and publishing data, easy import and export and database management. (Demo, Source Code) Apache-2.0 Python/Docker
  • Directus - An Instant App & API for your SQL Database. Directus wraps your new or existing SQL database with a realtime GraphQL+REST API for developers, and an intuitive admin app for non-technical users. (Source Code) GPL-3.0 Nodejs/Docker
  • Evidence - Evidence is a code-based BI tool. Write reports using SQL and markdown and they render as a website. (Source Code) MIT Nodejs
  • Limbas - Limbas is a database framework for creating database-driven business applications. As a graphical database frontend, it enables the efficient processing of data stocks and the flexible development of comfortable database applications. (Source Code) GPL-2.0 PHP
  • Mathesar - An intuitive UI for managing data collaboratively, for users of all technical skill levels. Built on Postgres – connect an existing DB or set up a new one. (Demo, Source Code) GPL-3.0 Docker/Python
  • MindsDB - MindsDB is an open source self hosted AI layer for existing databases that allows you to effortlessly develop, train and deploy state-of-the-art machine learning models using standard queries. (Source Code) GPL-3.0 Docker/Python
  • NocoDB - No-code platform that turns any database into a smart spreadsheet (alternative to Airtable or Smartsheet). (Source Code) GPL-3.0 Nodejs/Docker
  • WebDB - Efficient database IDE. (Demo, Source Code) AGPL-3.0 Docker

DNS

DNS servers and management tools with advertisement blocking functionality, primarily aimed at home or small networks. See also: awesome-sysadmin/DNS - Servers, awesome-sysadmin/DNS - Control Panels & Domain Management

  • AdGuard Home - Free and open source, userfriendly ads & trackers blocking DNS server. (Source Code) GPL-3.0 Docker
  • blocky - Fast and lightweight DNS proxy (like Pi-hole) as ad-blocker for local network with many features. Apache-2.0 Go/Docker
  • Maza ad blocking - Local ad blocker. Like Pi-hole but local and using your operating system. (Source Code) Apache-2.0 Shell
  • Pi-hole - A blackhole for Internet advertisements with a GUI for management and monitoring. (Source Code) EUPL-1.2 Shell/PHP/Docker
  • Technitium DNS Server - Authoritative/recursive DNS server with ad blocking functionality. (Source Code) GPL-3.0 Docker/C#

Document Management

A document management system (DMS) is a system used to receive, track, manage and store documents and reduce paper.

  • DocKing - Document management service/microservice that handles templates and renders them in PDF format, all in one place. (Demo, Source Code) MIT PHP/Nodejs/Docker
  • Docspell - Auto-tagging document organizer and archive. (Source Code) GPL-3.0 Scala/Java/Docker
  • Docuseal - Create, fill, and sign digital documents (alternative to DocuSign). (Demo, Source Code) AGPL-3.0 Docker
  • EveryDocs - A simple Document Management System for private use with basic functionality to organize your documents digitally. GPL-3.0 Docker/Ruby
  • I, Librarian - I, Librarian can organize PDF papers and office documents. It provides a lot of extra features for students and research groups both in industry and academia. (Demo, Source Code) GPL-3.0 PHP
  • Mayan EDMS - Free Open Source Electronic Document Management System. An electronic vault for your documents with preview generation, OCR, and automatic categorization among other features. (Source Code) Apache-2.0 Python
  • OpenSign - Free, open source & self-hosted document signing software (alternative to DocuSign). (Source Code) AGPL-3.0 Nodejs/Docker
  • Paperless-ngx - Scan, index, and archive all of your paper documents with an improved interface (fork of Paperless). (Demo, Source Code) GPL-3.0 Python/Docker
  • Papermerge - Open Source Document Management System focused on scanned documents (electronic archives). Features file browsing in similar way to dropbox/google drive. OCR, full text search, text overlay/selection. (Source Code) Apache-2.0 Python/Docker/K8S
  • Stirling-PDF - Local hosted web application that allows you to perform various operations on PDF files, such as merging, splitting, file conversions and OCR. Apache-2.0 Docker/Java
  • Teedy - Lightweight document management system packed with all the features you can expect from big expensive solutions (Ex SismicsDocs). (Demo, Source Code) GPL-2.0 Docker/Java

Document Management - E-books

Ebook library management software.

  • Atsumeru - Free and open source self-hosted manga/comic/light novel media server with clients for Windows, Linux, macOS and Android. (Source Code, Clients) MIT Java/Docker
  • Calibre Web - Web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database. GPL-3.0 Python
  • Calibre - E-book library manager that can view, convert, and catalog e-books in most of the major e-book formats and provides a built-in Web server for remote clients. (Demo, Source Code) GPL-3.0 Python/deb
  • Kavita - Cross-platform e-book/manga/comic/pdf server and web reader with user management, ratings and reviews, and metadata support. (Demo, Source Code) GPL-3.0 .NET/Docker
  • Komga - Media server for comics/mangas/BDs with API and OPDS support, a modern web interface for exploring your libraries, as well as a web reader. (Source Code) MIT Java/Docker
  • Librum - A modern e-book reader and library manager that supports most major book formats, runs on all devices and offers great tools to boost productivity. (Source Code) GPL-3.0 C++
  • Stump - A fast, free and open source comics, manga and digital book server with OPDS support. (Source Code) MIT Rust
  • The Epube - Self-hosted web EPUB reader using EPUB.js, Bootstrap, and Calibre. (Source Code) GPL-3.0 PHP

Document Management - Institutional Repository and Digital Library Software

Institutional repository and digital library management software.

  • DSpace - Turnkey repository application providing durable access to digital resources. (Source Code) BSD-3-Clause Java
  • EPrints - Digital document management system with a flexible metadata and workflow model primarily aimed at academic institutions. (Demo, Source Code) GPL-3.0 Perl
  • Fedora Commons Repository - Robust and modular repository system for the management and dissemination of digital content especially suited for digital libraries and archives, both for access and preservation. (Source Code) Apache-2.0 Java
  • InvenioRDM - Highly scalable turn-key research data management platform with a beautiful user experience. (Demo, Source Code, Clients) MIT Python
  • Islandora - Drupal module for browsing and managing Fedora-based digital repositories. (Demo, Source Code) GPL-3.0 PHP
  • Samvera Hyrax - Front-end for the Samvera framework, which itself is a Ruby on Rails application for browsing and managing Fedora-based digital repositories. (Source Code) Apache-2.0 Ruby

Document Management - Integrated Library Systems (ILS)

An integrated library system is an enterprise resource planning system for a library, used to track items owned, orders made, bills paid, and patrons who have borrowed. Related: Content Management Systems (CMS), Archiving and Digital Preservation (DP)

  • Evergreen - Highly-scalable software for libraries that helps library patrons find library materials, and helps libraries manage, catalog, and circulate those materials. (Source Code) GPL-2.0 PLpgSQL
  • Koha - Enterprise-class ILS with modules for acquisitions, circulation, cataloging, label printing, offline circulation for when Internet access is not available, and much more. (Demo, Source Code) GPL-3.0 Perl
  • RERO ILS - Large-scale ILS that can be run as a service with consortial features, intended primarily for library networks. Includes most standard modules (circulation, acquisitions, cataloging,…) and a web-based public and professional interface. (Demo, Source Code) AGPL-3.0 Python/Docker

E-commerce

E-commerce software. Related: Community-Supported Agriculture (CSA)

  • Aimeos - Ultra fast, Open Source e-commerce framework for building custom online shops, market places and complex B2B applications scaling to billions of items with Laravel. (Demo, Source Code) LGPL-3.0/MIT PHP
  • Bagisto - Leading Laravel open source e-commerce framework with multi-inventory sources, taxation, localization, dropshipping and more exciting features. (Demo, Source Code) MIT PHP
  • CoreShop - CoreShop is an e-commerce plugin for Pimcore. (Source Code) GPL-3.0 PHP
  • Drupal Commerce - Drupal Commerce is a popular e-commerce module for Drupal CMS, with support for dozens of payment, shipping, and shopping related modules. (Source Code) GPL-2.0 PHP
  • EverShop - E-commerce platform with essential commerce features. Modular architecture and fully customizable. (Demo, Source Code) GPL-3.0 Docker/Nodejs
  • Litecart - Shopping cart in 1 file (with support for payment by card or cryptocurrency). MIT Go/Docker
  • Magento Open Source - Leading provider of open omnichannel innovation. OSL-3.0 PHP
  • MedusaJs - Medusa is an open-source headless commerce engine that enables developers to create amazing digital commerce experiences. (Demo, Source Code) MIT Nodejs
  • Microweber - Drag and Drop CMS and online shop. (Demo, Source Code) Apache-2.0 PHP
  • Open Source POS - Open Source Point of Sale is a web based point of sale system. MIT PHP
  • OpenCart - Free open source shopping cart solution. (Source Code) GPL-3.0 PHP
  • OXID eShop - OXID eShop is a flexible open source e-commerce software with a wide range of functionalities. (Source Code) GPL-3.0 PHP
  • PrestaShop - PrestaShop offers a free, open-source and fully scalable e-commerce solution. (Demo, Source Code) OSL-3.0 PHP
  • Pretix - Django based ticket sales platform for events. (Source Code) Apache-2.0 Python/Docker
  • s-cart - S-Cart is a free e-commerce website project for individuals and businesses, built on top of Laravel Framework. (Demo, Source Code) MIT PHP
  • Saleor - Django based open-sourced e-commerce storefront. (Demo, Source Code) BSD-3-Clause Docker/Python
  • Shopware Community Edition - PHP based open source e-commerce software made in Germany. (Demo, Source Code) MIT PHP
  • Solidus - A free, open-source ecommerce platform that gives you complete control over your store. (Source Code) BSD-3-Clause Ruby/Docker
  • Spree Commerce - Spree is a complete, modular & API-driven open source e-commerce solution for Ruby on Rails. (Demo, Source Code) BSD-3-Clause Ruby
  • Sylius - Symfony2 powered open source full-stack platform for eCommerce. (Demo, Source Code) MIT PHP
  • Thelia - Thelia is an open source and flexible e-commerce solution. (Demo, Source Code) LGPL-3.0 PHP
  • Vendure - A headless commerce framework. (Demo, Source Code) MIT Nodejs
  • WooCommerce - WordPress based e-commerce solution. (Source Code) GPL-3.0 PHP

Federated Identity & Authentication

Federated identity and authentication software. Please visit awesome-sysadmin/Identity Management

Feed Readers

A news aggregator, also termed a feed aggregator, feed reader, news reader, RSS reader, is an application that aggregates web content such as newspapers/blogs/vlogs/podcasts in one location for easy viewing.

  • Bubo Reader - Open source, “irrationally minimal” RSS feed reader. (Demo) MIT Nodejs
  • CommaFeed - Google Reader inspired self-hosted RSS reader. (Demo, Source Code) Apache-2.0 Java/Docker
  • FeedCord - A simple, lightweight & customizable RSS News Feed for your Discord Server. MIT Docker
  • Feedpushr - Powerful RSS aggregator, able to transform and send articles to many outputs. Single binary, extensible with plugins. GPL-3.0 Go/Docker
  • FreshRSS - Self-hostable RSS feed aggregator. (Demo, Source Code, Clients) AGPL-3.0 PHP/Docker
  • Fusion - A lightweight RSS aggregator and reader. MIT Go/Docker
  • Goeland - Reads RSS/Atom feeds and filter/digest them to create beautiful emails. MIT Go
  • JARR - JARR (Just Another RSS Reader) is a web-based news aggregator and reader (fork of Newspipe). (Demo, Source Code) AGPL-3.0 Docker/Python
  • Kriss Feed - Simple and smart (or stupid) feed reader. CC0-1.0 PHP
  • Leed - Leed (for Light Feed) is a Free and minimalist RSS aggregator. AGPL-3.0 PHP
  • Miniflux - Miniflux is a minimalist and open source news reader, written in Go and PostgreSQL. (Source Code) Apache-2.0 Go/deb/Docker
  • NewsBlur - NewsBlur is a personal news reader that brings people together to talk about the world. A new sound of an old instrument. (Source Code) MIT Python
  • Newspipe - Newspipe is a web news reader. (Demo) AGPL-3.0 Python
  • reader - A Python feed reader web app and library (so you can use it to build your own), with only standard library and pure-Python dependencies. BSD-3-Clause Python
  • Readflow - Lightweight news reader with modern interface and features: full-text search, automatic categorization, archiving, offline support, notifications… (Source Code) MIT Go/Docker
  • RSS-Bridge - Generate RSS/ATOM feeds for websites which don’t have one. Unlicense PHP/Docker
  • RSS Monster - An easy to use web-based RSS aggregator and reader compatible with the Fever API (alternative to Google Reader). MIT PHP
  • RSS2EMail - Fetches RSS/Atom-feeds and pushes new Content to any email-receiver, supports OPML. GPL-2.0 Python/deb
  • RSSHub - An easy to use, and extensible RSS feed aggregator, it’s capable of generating RSS feeds from pretty much everything ranging from social media to university departments. (Demo, Source Code) MIT Nodejs/Docker
  • Selfoss - New multipurpose rss reader, live stream, mashup, aggregation web application. (Source Code) GPL-3.0 PHP
  • Stringer - Work-in-progress self-hosted, anti-social RSS reader. MIT Ruby
  • Temboz - Two-column feed reader emphasizing filtering capabilities to manage information overload. MIT Python
  • Tiny Tiny RSS - Open source web-based news feed (RSS/Atom) reader and aggregator. (Demo, Source Code) GPL-3.0 Docker/PHP
  • Yarr - Yarr (yet another rss reader) is a web-based feed aggregator which can be used both as a desktop application and a personal self-hosted server. MIT Go

File Transfer & Synchronization

File transfer, sharing and synchronization software software. Related: Groupware

  • Git Annex - File synchronization between computers, servers, external drives. (Source Code) GPL-3.0 Haskell
  • Kinto - Kinto is a minimalist JSON storage service with synchronisation and sharing abilities. (Source Code) Apache-2.0 Python
  • Nextcloud - Access and share your files, calendars, contacts, mail and more from any device, on your terms. (Demo, Source Code) AGPL-3.0 PHP/deb
  • OpenSSH SFTP server - Secure File Transfer Program. (Source Code) BSD-2-Clause C/deb
  • ownCloud - All-in-one solution for saving, synchronizing, viewing, editing and sharing files, calendars, address books and more. (Source Code, Clients) AGPL-3.0 PHP/Docker/deb
  • Peergos - Secure and private space online where you can store, share and view your photos, videos, music and documents. Also includes a calendar, news feed, task lists, chat and email client. (Source Code) AGPL-3.0 Java
  • Puter - Web-based operating system designed to be feature-rich, exceptionally fast, and highly extensible. (Demo, Source Code) AGPL-3.0 Nodejs/Docker
  • Pydio - Turn any web server into a powerful file management system and an alternative to mainstream cloud storage providers. (Demo, Source Code) AGPL-3.0 Go
  • Samba - Samba is the standard Windows interoperability suite of programs for Linux and Unix. It provides secure, stable and fast file and print services for all clients using the SMB/CIFS protocol. (Source Code) GPL-3.0 C
  • Seafile - File hosting and sharing solution primary for teams and organizations. (Source Code) GPL-2.0/GPL-3.0/AGPL-3.0/Apache-2.0 C
  • Syncthing - Syncthing is an open source peer-to-peer file synchronisation tool. (Source Code) MPL-2.0 Go/Docker/deb
  • Unison - Unison is a file-synchronization tool for OSX, Unix, and Windows. (Source Code) GPL-3.0 deb/OCaml

File Transfer - Object Storage & File Servers

Object storage is a computer data storage that manages data as objects, as opposed to other storage architectures like file systems which manages data as a file hierarchy, and block storage which manages data as blocks within sectors and tracks.

  • GarageHQ - An open-source geo-distributed storage service you can self-host to fulfill many needs - S3 compatible. (Source Code) AGPL-3.0 Docker/Rust
  • Minio - Minio is an open source object storage server compatible with Amazon S3 APIs. (Source Code) AGPL-3.0 Go/Docker/K8S
  • SeaweedFS - SeaweedFS is an open source distributed file system supporting WebDAV, S3 API, FUSE mount, HDFS, etc, optimized for lots of small files, and easy to add capacity. Apache-2.0 Go
  • SFTPGo - Flexible, fully featured and highly configurable SFTP server with optional FTP/S and WebDAV support. AGPL-3.0 Go/deb/Docker
  • Zenko CloudServer - Zenko CloudServer, an open-source implementation of a server handling the Amazon S3 protocol. (Source Code) Apache-2.0 Docker/Nodejs
  • ZOT OCI Registry - A production-ready vendor-neutral OCI-native container image registry. (Demo, Source Code) Apache-2.0 Go/Docker

File Transfer - Peer-to-peer Filesharing

Peer-to-peer file sharing is the distribution and sharing of digital media using peer-to-peer (P2P) networking technology.

  • bittorrent-tracker - Simple, robust, BitTorrent tracker (client and server) implementation. (Source Code) MIT Nodejs
  • Dat Project - Powerful decentralized file sharing applications built from a large ecosystem of modules. (Source Code) MIT Nodejs
  • Deluge - Lightweight, cross-platform BitTorrent client. (Source Code) GPL-3.0 Python/deb
  • instant.io - Streaming file transfer over WebTorrent. (Demo) MIT Nodejs
  • qBittorrent - Free cross-platform bittorrent client with a feature rich Web UI for remote access. (Source Code) GPL-2.0 C++
  • Send - Simple, private, end to end encrypted temporary file sharing, originally built by Mozilla. (Clients) MPL-2.0 Nodejs/Docker
  • Transmission - Fast, easy, free Bittorrent client. (Source Code) GPL-3.0 C++/deb

File Transfer - Single-click & Drag-n-drop Upload

Simplified file servers for sharing of one-time/short-lived/temporary files, providing single-click or drag-and-drop upload functionality.

  • ass - The superior self-hosted ShareX server. For use with clients such as ShareX (Windows), Flameshot (Linux), & MagicCap (Linux, macOS). ISC Nodejs/Docker
  • Chibisafe - File uploader service that aims to to be easy to use and set up. It accepts files, photos, documents, anything you imagine and gives you back a shareable link for you to send to others. (Source Code) MIT Docker/Nodejs
  • elixire - Simple yet advanced screenshot uploading and link shortening service. (Source Code, Clients) AGPL-3.0 Python
  • Files Sharing - Open Source and self-hosted files sharing application based on unique and temporary links. GPL-3.0 PHP/Docker
  • FileShelter - FileShelter is a self-hosted software that allows you to easily share files over the Internet. GPL-3.0 C++/deb
  • Gokapi - Lightweight server to share files, which expire after a set amount of downloads or days. Similar to the discontinued Firefox Send, with the difference that only the admin is allowed to upload files. GPL-3.0 Go/Docker
  • goploader - Easy file sharing with server-side encryption, curl/httpie/wget compliant. MIT Go
  • GoSƐ - GoSƐ is a modern file-uploader focusing on scalability and simplicity. It only depends on a S3 storage backend and hence scales horizontally without the need for additional databases or caches. (Demo) Apache-2.0 Go/Docker
  • lufi - Let’s Upload that FIle, client-side encrypted. (Demo, Source Code) AGPL-3.0 Perl
  • OnionShare - Securely and anonymously share a file of any size. GPL-2.0 Python/deb
  • Pairdrop - Local file sharing in your browser, inspired by Apple’s AirDrop (fork of Snapdrop). GPL-3.0 Docker
  • PicoShare - A minimalist, easy-to-host service for sharing images and other files. (Demo, Source Code) AGPL-3.0 Go/Docker
  • Picsur - A simple imaging hosting platform that allows you to easily host, edit, and share images. GPL-3.0 Docker
  • PictShare - PictShare is a multi lingual, open source image hosting service with a simple resizing and upload API. (Source Code) Apache-2.0 PHP/Docker
  • Pingvin Share - A self-hosted file sharing platform that combines lightness and beauty, perfect for seamless and efficient file sharing. (Demo) BSD-2-Clause Docker/Nodejs
  • Plik - Plik is a scalable and friendly temporary file upload system. (Demo) MIT Go/Docker
  • ProjectSend - Upload files and assign them to specific clients you create. Give access to those files to your clients. (Source Code) GPL-2.0 PHP
  • PsiTransfer - Simple open source self-hosted file sharing solution with robust up-/download-resume and password protection. BSD-2-Clause Nodejs
  • QuickShare - Quick and simple file sharing between different devices. LGPL-3.0 Docker/Go
  • Sharry - Share files easily over the internet between authenticated and anonymous users (both ways) with resumable up- and downloads. GPL-3.0 Scala/Java/deb/Docker
  • Shifter - A simple, self-hosted file-sharing web app, powered by Django. MIT Docker
  • transfer.sh - Easy file sharing from the command line. MIT Go
  • Uguu - Stores files and deletes after X amount of time. MIT PHP
  • Uploady - Uploady is a simple file uploader script with multi file upload support. MIT PHP
  • XBackBone - A simple, fast and lightweight file manager with instant sharing tools integration, like ShareX (a free and open-source screenshot utility for Windows). (Source Code) AGPL-3.0 PHP/Docker
  • Zipline - A lightweight, fast and reliable file sharing server that is commonly used with ShareX, offering a react-based Web UI and fast API. MIT Docker/Nodejs

File Transfer - Web-based File Managers

Web-based file managers. Related: Groupware

  • Apaxy - Theme built to enhance the experience of browsing web directories, using the mod_autoindex Apache module and some CSS to override the default style of a directory listing. (Source Code) GPL-3.0 Javascript
  • copyparty - Portable file server with accelerated resumable uploads, deduplication, WebDAV, FTP, zeroconf, media indexer, video thumbnails, audio transcoding, and write-only folders, in a single file with no mandatory dependencies. (Demo) MIT Python
  • DirectoryLister - Simple PHP based directory lister that lists a directory and all its sub-directories and allows you to navigate there within. (Source Code) MIT PHP
  • filebrowser - Web File Browser with a Material Design web interface. (Source Code) Apache-2.0 Go
  • FileGator - FileGator is a powerful multi-user file manager with a single page front-end. (Demo, Source Code) MIT PHP/Docker
  • Filestash - A web file manager that lets you manage your data anywhere it is located: FTP, SFTP, WebDAV, Git, S3, Minio, Dropbox, or Google Drive. (Demo, Source Code) AGPL-3.0 Docker
  • Gossa - Gossa is a light and simple webserver for your files. MIT Go
  • IFM - Single script file manager. MIT PHP
  • mikochi - Browse remote folders, upload files, delete, rename, download and stream files to VLC/mpv. MIT Go/Docker/K8S
  • miniserve - CLI tool to serve files and dirs over HTTP. MIT Rust
  • ResourceSpace - ResourceSpace open source digital asset management software is the simple, fast, and free way to organise your digital assets. (Demo, Source Code) BSD-4-Clause PHP
  • Surfer - Simple static file server with webui to manage files. MIT Nodejs
  • TagSpaces - TagSpaces is an offline, cross-platform file manager and organiser that also can function as a note taking app. The WebDAV version of the application can be installed on top of a WebDAV servers such as Nextcloud or ownCloud. (Demo, Source Code) AGPL-3.0 Nodejs
  • Tiny File Manager - Web based File Manager in PHP, simple, fast and small file manager with a single file. (Demo, Source Code) GPL-3.0 PHP

Games

Multiplayer game servers and browser games. Related: Games - Administrative Utilities & Control Panels

  • 0 A.D. - A free, open-source game of ancient warfare. (Source Code) MIT/GPL-2.0/Zlib C++/C/deb
  • A Dark Room - Minimalist text adventure game for your browser. (Demo) MPL-2.0 Javascript
  • Digibuzzer - Create a virtual game room around a connected buzzer (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs
  • Lila - The forever free, adless and open source chess server powering lichess.org, with official iOS and Android client apps. (Source Code) AGPL-3.0 Scala
  • Mindustry - Factorio-like tower defense game. Build production chains to gather more resources, and build complex facilities. (Source Code) GPL-3.0 Java
  • Minetest - An open source voxel game engine. Play one of our many games, mod a game to your liking, make your own game, or play on a multiplayer server. (Source Code) LGPL-2.1/MIT/Zlib C++/deb
  • MTA:SA - Multi Theft Auto (MTA) is a software project that adds network play functionality to Rockstar North’s Grand Theft Auto game series, in which this functionality is not originally found. (Source Code) GPL-3.0 C++
  • OpenTTD - Open source transport tycoon simulation game. (Source Code, Clients) GPL-2.0 C++/Docker
  • piqueserver - Server for openspades, the first-person shooter in a destructible voxel world. (Clients) GPL-3.0 Python/C++
  • Posio - Geography multiplayer game. MIT Python
  • Quizmaster - A web-app for conducting a quiz, including a page for players to enter their answers. Apache-2.0 Scala
  • Red Eclipse 2 - A FOSS Arena First-Person Shooter Similar to Unreal Tournament. (Source Code) Zlib/MIT/CC-BY-SA-4.0 C/C++/deb
  • Romm - RomM (Rom Manager) is a web based retro roms manager integrated with IGDB. GPL-3.0 Docker
  • Suroi - An open-source 2D battle royale game inspired by surviv.io. (Demo, Source Code) GPL-3.0 Nodejs
  • The Battle for Wesnoth - The Battle for Wesnoth is an Open Source, turn-based tactical strategy game with a high fantasy theme, featuring both singleplayer and online/hotseat multiplayer combat. GPL-2.0 C++/deb
  • Veloren - Multiplayer RPG. Open-source game inspired by Cube World, Legend of Zelda, Dwarf Fortress and Minecraft. (Source Code) GPL-3.0 Rust
  • Word Mastermind - Wordle clone. A Mastermind-like game, but instead of colors you need to guess words. (Demo) MIT Nodejs
  • Zero-K - Open Source on Springrts engine. Zero-K is a traditional real time strategy game with a focus on player creativity through terrain manipulation, physics, and a large roster of unique units - all while being balanced to support competitive play. (Source Code) GPL-2.0 Lua

Games - Administrative Utilities & Control Panels

Utilities for managing game servers. Related: Games

  • ARRCON - Terminal-based RCON client compatible with any game servers using the Source RCON Protocol. GPL-3.0 C++
  • Crafty Controller - Crafty Controller is a free and open-source Minecraft launcher and manager that allows users to start and administer Minecraft servers from a user-friendly interface. (Source Code) GPL-3.0 Docker/Python
  • EasyWI - Easy-Wi is a Web-interface that allows you to manage server daemons like gameservers. In addition it provides you with a CMS which includes a fully automated game- and voiceserver lending service. (Source Code) GPL-3.0 PHP/Shell
  • Kubek - Web management panel for Minecraft servers. (Source Code) GPL-3.0 Nodejs
  • Lancache - LAN Party game caching made easy. (Source Code) MIT Docker/Shell
  • LinuxGSM - CLI tool for deployment and management of dedicated game servers on Linux: more than 120 games are supported. (Source Code) MIT Shell
  • Lodestone - A free, open source server hosting tool for Minecraft and other multiplayers. AGPL-3.0 Docker/Rust
  • Pterodactyl - Management panel for game servers, with an intuitive UI for end users. (Source Code) MIT PHP
  • PufferPanel - PufferPanel is an open source game server management panel, designed for both small networks and game server providers. (Source Code) Apache-2.0 Go
  • RconCli - CLI for executing queries on a remote Valve Source dedicated server using the RCON Protocol. MIT Go
  • SourceBans++ - Admin, ban, and communication management system for games running on the Source engine. (Source Code) CC-BY-SA-4.0 PHP
  • Sunshine - Remote game stream host for Moonlight with support up to 120 frames per second and 4K resolution. (Source Code) GPL-3.0 C++/deb/Docker

Genealogy

Genealogy software used to record, organize, and publish genealogical data.

  • Genea.app - Genea is a privacy by design and open source tool anyone can use to author or edit their family tree. Data is stored in the GEDCOM format and all processing is done in the browser. (Source Code) MIT Javascript
  • GeneWeb - Genealogy software. It comes with a Web interface and can be used off-line or as a Web service. (Demo, Source Code) GPL-2.0 OCaml
  • Gramps Web - Web app for collaborative genealogy, based on and interoperable with Gramps, the open source genealogy desktop application. (Demo, Source Code) AGPL-3.0 Docker
  • webtrees - Webtrees is the web’s leading online collaborative genealogy application. (Demo, Source Code) GPL-3.0 PHP

Groupware

Collaborative software or groupware is designed to help people working on a common task to attain their goals. Groupware often regroups multiple services such as file sharing, calendar/events management, address books… in a single, integrated application.

  • Citadel - Groupware including email, calendar/scheduling, address books, forums, mailing lists, IM, wiki and blog engines, RSS aggregation and more. (Source Code) GPL-3.0 C/Docker/Shell
  • Corteza - CRM including a unified workspace, enterprise messaging and a low code environment for rapidly and securely delivering records-based management solutions. (Demo, Source Code) Apache-2.0 Go
  • Cozy Cloud - Personal cloud where you can manage and sync your contact, files and calendars, and manage your budget with an app store full of community contributions. (Source Code) GPL-3.0 Nodejs
  • Digipad - An online self-hosted application for creating collaborative digital notepads (Documentation in french). (Source Code) AGPL-3.0 Nodejs
  • Digistorm - Create collaborative surveys, quizzes, brainstorms, and word clouds (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs
  • Digiwall - Create multimedia collaborative walls for in-person or remote work (documentation in French). (Source Code) AGPL-3.0 Nodejs
  • egroupware - Software suite including calendars, address books, notepad, project management tools, client relationship management tools (CRM), knowledge management tools, a wiki and a CMS. (Source Code) GPL-2.0 PHP
  • EspoCRM - CRM with a frontend designed as a single page application, and a REST API. (Demo, Source Code) AGPL-3.0 PHP
  • Group Office - Group-Office is an enterprise CRM and groupware tool. Share projects, calendars, files and e-mail online with co-workers and clients. (Source Code) AGPL-3.0 PHP
  • Openmeetings - Openmeetings provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools using API functions of the Red5 Streaming Server for Remoting and Streaming. (Source Code) Apache-2.0 Java
  • SOGo - SOGo offers multiple ways to access the calendaring and messaging data. CalDAV, CardDAV, GroupDAV, as well as ActiveSync, including native Outlook compatibility and Web interface. (Demo, Source Code) LGPL-2.1 Objective-C
  • SuiteCRM - The award-winning, enterprise-class open source CRM. (Source Code) AGPL-3.0 PHP
  • Tine - Software for digital collaboration in companies and organizations. From powerful groupware functionalities to clever add-ons, tine combines everything to make daily team collaboration easier. (Source Code) AGPL-3.0 Docker
  • Tracim - Collaborative Platform for team collaboration: file,threads,notes,agenda,etc. AGPL-3.0/LGPL-3.0/MIT Python
  • Twenty - A modern CRM offering the flexibility of open source, advanced features, and a sleek design. (Source Code) AGPL-3.0 Docker
  • Zimbra Collaboration - Email, calendar, collaboration server with Web interface and lots of integrations. (Source Code) GPL-2.0/CPAL-1.0 Java

Human Resources Management (HRM)

A human resources management system combines a number of systems and processes to ensure the easy management of human resources, business processes and data.

  • admidio - Admidio is a free open source user management system for websites of organizations and groups. The system has a flexible role model so that it’s possible to reflect the structure and permissions of your organization. (Demo, Source Code) GPL-2.0 PHP/Docker
  • OrangeHRM - OrangeHRM is a comprehensive HRM system that captures all the essential functionalities required for any enterprise. (Demo, Source Code) GPL-2.0 PHP
  • TimeOff.Management - Simple yet powerful absence management software for small and medium size business. (Demo, Source Code) MIT Nodejs

Internet of Things (IoT)

Internet of Things describes physical objects with sensors, processing ability, software, and other technologies that connect and exchange data with other devices over the Internet.

  • DeviceHive - Open Source IoT Platform with a wide range of integration options. (Demo, Source Code) Apache-2.0 Java/Docker/K8S
  • Domoticz - Home Automation System that lets you monitor and configure various devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more. (Source Code, Clients) GPL-3.0 C/C++/Docker/Shell
  • EMQX - An ultra-scalable open-source MQTT broker. Connect 100M+ IoT devices in one single cluster, move and process real-time IoT data with 1M msg/s throughput at 1ms latency. (Demo, Source Code) Apache-2.0 Docker/Erlang
  • FHEM - FHEM is used to automate common tasks in the household like switching lamps and heating. It can also be used to log events like temperature or power consumption. You can control it via web or smartphone frontends, telnet or TCP/IP directly. (Source Code) GPL-3.0 Perl
  • FlowForge - FlowForge allows companies to deploy Node-RED applications in a reliable, scalable and secure manner. The FlowForge platform provides DevOps capabilities for Node-RED development teams. (Source Code) Apache-2.0 Nodejs/Docker/K8S
  • Gladys - Gladys is a privacy-first, open-source home assistant. (Source Code) Apache-2.0 Nodejs/Docker
  • Home Assistant - Open-source home automation platform. (Demo, Source Code) Apache-2.0 Python/Docker
  • ioBroker - Integration platform for the Internet of Things, focused on building automation, smart metering, ambient assisted living, process automation, visualization and data logging. (Source Code) MIT Nodejs
  • Node RED - Browser-based flow editor that helps you wiring hardware devices, APIs and online services to create IoT solutions. (Source Code) Apache-2.0 Nodejs/Docker
  • openHAB - Vendor and technology agnostic open source software for home automation. (Source Code) EPL-2.0 Java
  • OpenRemote - Open-Source IoT Platform - IoT Asset management, Flow Rules and WHEN-THEN rules, Data visualization, Edge Gateway. (Demo, Source Code) AGPL-3.0 Java
  • SIP Irrigation Control - Open source software for sprinkler/irrigation control. (Source Code) GPL-3.0 Python
  • Tasmota - Open source firmware for ESP devices. Total local control with quick setup and updates. Control using MQTT, Web UI, HTTP or serial. Automate using timers, rules or scripts. Integration with home automation solutions. (Source Code) GPL-3.0 C/C++
  • Thingsboard - Open-source IoT Platform - Device management, data collection, processing and visualization. (Demo, Source Code) Apache-2.0 Java/Docker/K8S
  • WebThings Gateway - WebThings is an open source implementation of the Web of Things, including the WebThings Gateway and the WebThings Framework. (Source Code) MPL-2.0 Nodejs

Inventory Management

Inventory management software. Related: Money, Budgeting & Management, Resource Planning See also: awesome-sysadmin/IT Asset Management

  • Inventaire - Collaborative resources mapper project, while yet only focused on exploring books mapping with wikidata and ISBNs. (Source Code) AGPL-3.0 Nodejs
  • Inventree - InvenTree is an open-source inventory management system which provides intuitive parts management and stock control. (Demo, Source Code) MIT Python
  • Part-DB - An inventory management system for your electronic components. (Demo, Source Code) AGPL-3.0 Docker/PHP/Nodejs
  • Shelf - Asset and equipment tracking software used by teams who value clarity. Shelf is an asset database and QR asset label generator that lets you create, manage and overview your assets across locations. Unlimited assets, free forever. (Source Code) AGPL-3.0 Nodejs

Knowledge Management Tools

Knowledge management is the collection of methods relating to creating, sharing, using and managing the knowledge and information. Related: Note-taking & Editors, Wikis, Database Management

  • Atomic Server - Knowledge graph database with documents (similar to Notion), tables, search, and a powerful linked data API. Lightweight, very fast and no runtime dependencies. (Demo) MIT Docker/Rust
  • Digimindmap - Create simple mindmaps (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs/PHP
  • TeamMapper - Host and create your own mindmaps. Share your mindmap sessions with your team and collaborate live on mindmaps. (Demo) MIT Docker/Nodejs

Learning and Courses

Tools and software to help with education and learning.

  • Canvas LMS - Canvas is the trusted, open-source learning management system (LMS) that is revolutionizing the way we educate. (Demo, Source Code) AGPL-3.0 Ruby
  • Chamilo LMS - Chamilo LMS allows you to create a virtual campus for the provision of online or semi-online training. (Source Code) GPL-3.0 PHP
  • Dalton Plan - Dalton Plan is a modern adoption of a free teaching method developed by Helen Parkhurst in the 20th century. (Source Code) AGPL-3.0 PHP
  • Digiscreen - Interactive whiteboard/wallpaper for the classroom, in person or remotely (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs/PHP
  • Digitools - A set of simple tools to accompany the animation of courses in person or remotely. (documentation in French). (Demo, Source Code) AGPL-3.0 PHP
  • edX - The Open edX platform is open-source code that powers edX.org. (Source Code) AGPL-3.0 Python
  • Gibbon - The flexible, open source school management platform designed to make life better for teachers, students, parents and leaders. (Source Code) GPL-3.0 PHP
  • ILIAS - ILIAS is the Learning Management System that can cope with anything you throw at it. (Demo, Source Code) GPL-3.0 PHP
  • INGInious - Intelligent grader that allows secured and automated testing of code made by students. (Source Code, Clients) AGPL-3.0 Python/Docker
  • Moodle - Moodle is a learning and courses platform with one of the largest open source communities worldwide. (Demo, Source Code) GPL-3.0 PHP
  • Open eClass - Open eClass is an advanced e-learning solution that can enhance the teaching and learning process. (Demo, Source Code) GPL-2.0 PHP
  • OpenOLAT - OpenOLAT is a web-based learning management system for teaching, education, assessment and communication. (Demo, Source Code) Apache-2.0 Java
  • QST - Online assessment software. From a quick quiz on your phone to large scale, high stakes, proctored desktop testing, easy, secure and economical. (Demo, Source Code) GPL-2.0 Perl
  • RELATE - RELATE is a web-based courseware package, includes features such as: flexible rules, statistics, multi-course support, class calendar. (Source Code) MIT Python
  • RosarioSIS - RosarioSIS, free Student Information System for school management. (Demo, Source Code) GPL-2.0 PHP
  • Schoco - Online IDE for learning Java programming at school, including automatic JUnit tests. Designed to give coding homework/assignments. MIT Docker

Manufacturing

Software to manage 3D printers, CNC machines and other physical manufacturing tools.

  • CNCjs - A web-based interface for CNC milling controller running Grbl, Smoothieware, or TinyG. (Source Code) MIT Nodejs
  • Fluidd - Lightweight & responsive user interface for Klipper, the 3D printer firmware. (Source Code) GPL-3.0 Docker/Nodejs
  • Mainsail - A modern and responsive user interface for the Klipper 3D printer firmware. Control and monitor your printer from everywhere, from any device. (Source Code) GPL-3.0 Docker/Python
  • Manyfold - Digital asset manager for 3d print files; STL, OBJ, 3MF and more. (Source Code) MIT Docker
  • Octoprint - A snappy web interface for controlling consumer 3D printers. (Source Code) AGPL-3.0 Docker/Python

Maps and Global Positioning System (GPS)

Maps, cartography, GIS and GPS software. See also: awesome-openstreetmap, awesome-gis

  • Bicimon - Bike Speedometer as Progressive Web App. (Demo) MIT Javascript
  • Geo2tz - Get the timezone from geo coordinates (lat, lon). MIT Go/Docker
  • GraphHopper - Fast routing library and server using OpenStreetMap. (Source Code) Apache-2.0 Java
  • Nominatim - Server application for geocoding (address -> coordinates) and reverse geocoding (coordinates -> address) on OpenStreetMap data. (Source Code) GPL-2.0 C
  • Open Source Routing Machine (OSRM) - High performance routing engine designed to run on OpenStreetMap data and offering an HTTP API, C++ library interface, and Nodejs wrapper. (Demo, Source Code) BSD-2-Clause C++
  • OpenRouteService - Selfhosted route service with directions, isochrones, time-distance matrix, route optimization, etc. (Demo, Source Code) GPL-3.0 Docker/Java
  • OpenStreetMap - Collaborative project to create a free editable map of the world. (Source Code, Clients) GPL-2.0 Ruby
  • OpenTripPlanner - Multimodal trip planning software based on OpenStreetMap data and consuming published GTFS-formatted data to suggest routes using local public transit systems. (Source Code) LGPL-3.0 Java/Javascript
  • OwnTracks Recorder - Store and access data published by OwnTracks location tracking apps. GPL-2.0 C/Lua/deb/Docker
  • TileServer GL - Vector and raster maps with GL styles. Server side rendering by Mapbox GL Native. Map tile server for Mapbox GL JS, Android, iOS, Leaflet, OpenLayers, GIS via WMTS, etc. (Source Code) BSD-2-Clause Nodejs/Docker
  • Traccar - Java application to track GPS positions. Supports loads of tracking devices and protocols, has an Android and iOS App. Has a web interface to view your trips. (Demo, Source Code) Apache-2.0 Java
  • μlogger - Collect geolocation from users in real-time and display their GPS tracks on a website. (Demo) GPL-3.0 PHP

Media Streaming - Audio Streaming

Audio streaming tools and software.

  • Ampache - Web based audio/video streaming application. (Demo, Source Code) AGPL-3.0 PHP
  • Audiobookshelf - Fully open-source self-hosted audiobook and podcast server. It streams all audio formats, keeps and syncs progress across devices. Comes with open-source apps for Android and iOS. (Source Code, Clients) GPL-3.0 Docker/deb/Nodejs
  • Audioserve - Simple personal server to serve audio files from directories (audiobooks, music, podcasts…). Focused on simplicity and supports sync of play position between clients. MIT Rust
  • AzuraCast - A modern and accessible self-hosted web radio management suite. (Source Code) Apache-2.0 Docker
  • Beets - Music library manager and MusicBrainz tagger (command-line and Web interface). (Source Code) MIT Python/deb
  • Black Candy - Music streaming server built with Rails and Stimulus. MIT Docker/Ruby
  • Bsimp - Minimalistic S3-backed audio library. Apache-2.0 Go
  • Funkwhale - Modern, web-based, convivial, multi-user and free music server. BSD-3-Clause Python/Django
  • gonic - Lightweight music streaming server. Subsonic compatible. GPL-3.0 Go/Docker
  • HoloPlay - Web app using Invidious API for listening to Youtube audio sources. (Source Code) MIT Nodejs/Docker
  • koel - Personal music streaming server that works. (Demo, Source Code) MIT PHP
  • LibreTime - Simple, open source platform that lets you broadcast streaming radio on the web (fork of Airtime). (Source Code) AGPL-3.0 Docker/PHP
  • LMS - Access your self-hosted music using a web interface. GPL-3.0 Docker/deb/C++
  • Maloja - Self-hosted music scrobble database (alternative to Last.fm). (Demo) GPL-3.0 Python/Docker
  • moOde Audio - Audiophile-quality music playback for the wonderful Raspberry Pi family of single board computers. (Source Code) GPL-3.0 PHP
  • Mopidy - Extensible music server. Offers a superset of the mpd API, as well as integration with 3rd party services like Spotify, SoundCloud etc. (Source Code) Apache-2.0 Python/deb
  • mpd - Daemon to remotely play music, stream music, handle and organize playlists. Many clients available. (Source Code, Clients) GPL-2.0 C++
  • mStream - Music streaming server with GUI management tools. Runs on Mac, Windows, and Linux. (Source Code) GPL-2.0 Nodejs
  • multi-scrobbler - Scrobble plays from multiple sources to multiple scrobbling services. (Source Code) MIT Nodejs/Docker
  • musikcube - Streaming audio server with Linux/macOS/Windows/Android clients. (Source Code) BSD-3-Clause C++/deb
  • Navidrome Music Server - Modern Music Server and Streamer, compatible with Subsonic/Airsonic. (Demo, Source Code, Clients) GPL-3.0 Docker/Go
  • Pinepods - A rust based podcast management system with multi-user support. Pinepods utilizes a central database so aspects like listen time and themes follow from device to device. (Demo, Source Code) GPL-3.0 Docker
  • Polaris - Music browsing and streaming application optimized for large music collections, ease of use and high performance. MIT Rust/Docker
  • Snapcast - Synchronous multiroom audio server. GPL-3.0 C++/deb
  • Stretto - Music player with Youtube/Soundcloud import and iTunes/Spotify discovery. (Demo, Clients) MIT Nodejs
  • Supysonic - Python implementation of the Subsonic server API. AGPL-3.0 Python/deb
  • SwingMusic - Swing Music is a beautiful, self-hosted music player and streaming server for your local audio files. Like a cooler Spotify … but bring your own music. (Source Code) MIT Python/Docker
  • vod2pod-rss - Convert YouTube and Twitch channels to podcasts, no storage required. Transcodes VoDs to MP3 192k on the fly, generates an RSS feed to use in podcast clients. MIT Docker

Media Streaming - Multimedia Streaming

Multimedia streaming tools and software. Related: Media Streaming - Video Streaming, Media Streaming - Audio Streaming

  • Dim - Dim is a self-hosted media manager fueled by dark forces. With minimal setup, Dim will organize and beautify your media collections, letting you access and play them anytime from anywhere. GPL-2.0 Rust
  • Gerbera - Gerbera is an UPnP Media Server. It allows you to stream your digital media throughout your home network and listen to/watch it on a variety of UPnP compatible devices. (Source Code) GPL-2.0 Docker/deb/C++
  • Icecast 2 - Streaming audio/video server which can be used to create an Internet radio station or a privately running jukebox and many things in between. (Source Code, Clients) GPL-2.0 C
  • Jellyfin - Media server for audio, video, books, comics, and photos with a sleek interface and robust transcoding capabilities. Almost all modern platforms have clients, including Roku, Android TV, iOS, and Kodi. (Demo, Source Code, Clients) GPL-2.0 C#/deb/Docker
  • Karaoke Eternal - Host awesome karaoke parties where everyone can easily find and queue songs from their phone’s browser. The player is also fully browser-based with support for MP3+G, MP4 and WebGL visualizations. (Source Code) ISC Docker/Nodejs
  • Kodi - Multimedia/Entertainment center, formerly known as XBMC. Runs on Android, BSD, Linux, macOS, iOS and Windows. (Source Code) GPL-2.0 C++/deb
  • Kyoo - Innovative media browser designed for seamless streaming of anime, series and movies, offering advanced features like dynamic transcoding, auto watch history and intelligent metadata retrieval. (Demo) GPL-3.0 Docker
  • LBRY - Is a secure, open, and community-run digital marketplace that aims to replace Youtube and Amazon. (Demo, Source Code, Clients) MIT PHP
  • Meelo - Personal Music Server, designed for collectors and music maniacs. GPL-3.0 Docker
  • MistServer - Streaming media server that works well in any streaming environment. (Source Code) AGPL-3.0 C++
  • NymphCast - Turn your choice of Linux-capable hardware into an audio and video source for a television or powered speakers (alternative to Chromecast). (Source Code) BSD-3-Clause C++
  • ReadyMedia - Simple media server software, with the aim of being fully compliant with DLNA/UPnP-AV clients. Formerly known as MiniDLNA. (Source Code) GPL-2.0 C
  • Rygel - Rygel is a UPnP AV MediaServer that allows you to easily share audio, video, and pictures. Media player software may use Rygel to become a MediaRenderer that may be controlled remotely by a UPnP or DLNA Controller. (Source Code) GPL-3.0 C
  • Stash - A web-based library organizer and player for your adult media stash, with auto-tagging and metadata scraping support. (Source Code) AGPL-3.0 Docker/Go
  • µStreamer - Lightweight and very quick server to stream MJPEG video from any V4L2 device to the net. GPL-3.0 C/deb
  • üWave - Self-hosted collaborative listening platform. Users take turns playing media—songs, talks, gameplay videos, or anything else—from a variety of media sources like YouTube and SoundCloud. (Demo, Source Code) MIT Nodejs

Media Streaming - Video Streaming

Video streaming tools and software. Related: Video Surveillance, Media Streaming - Multimedia Streaming

  • CyTube - CyTube is a web application providing media synchronization, chat, and more for an arbitrary number of channels. (Demo) MIT Nodejs
  • Invidious - Alternative YouTube front-end. (Demo) AGPL-3.0 Docker/Crystal
  • MediaCMS - MediaCMS is a modern, fully featured open source video and media CMS, written in Python/Django/React, featuring a REST API. (Source Code) AGPL-3.0 Python/Docker
  • Oblecto - Media server for Movies and TV Shows with a responsive Vue.js frontend. It has robust transcoding support as well as federation capabilities to share your library with your friends. AGPL-3.0 Nodejs
  • Open Streaming Platform - Live and on-demand video streaming (alternative to Twitch and Youtube Live). (Source Code) MIT Python
  • OvenMediaEngine - OvenMediaEngine is a selfhostable Open-Source Streaming Server with Sub-Second Latency. (Demo) GPL-3.0 C++/Docker
  • Owncast - Decentralized single-user live video streaming and chat server for running your own live streams similar in style to the large mainstream options. (Source Code) MIT Go
  • PeerTube - Decentralized video streaming platform using P2P (BitTorrent) directly in the web browser. (Source Code) AGPL-3.0 Nodejs
  • Rapidbay - Self-hosted torrent videostreaming service/torrent client that allows searching and playing videos from torrents in the browser or from a Chromecast/AppleTV/Smart TV. MIT Python/Docker
  • Restreamer - Restreamer allows you to do h.264 real-time video streaming on your website without a streaming provider. (Source Code) Apache-2.0 Nodejs/Docker
  • SRS - A simple, high efficiency and real-time video server, supports RTMP, WebRTC, HLS, HTTP-FLV and SRT. (Source Code) MIT Docker/C++
  • Streama - Self hosted streaming media server. MIT Java
  • SyncTube - Lightweight and very simple to setup CyTube alternative to watch videos with friends and chat. MIT Nodejs/Haxe
  • Tube Archivist - Organize, search, and enjoy your YouTube collection. Subscribe, download, and track viewed content with metadata indexing and a user-friendly interface. (Source Code, Clients) GPL-3.0 Docker
  • Tube - Youtube-like (without censorship and features you don’t need!) Video Sharing App written in Go which also supports automatic transcoding to MP4 H.265 AAC, multiple collections and RSS feed. (Demo) MIT Go
  • VideoLAN Client (VLC) - Cross-platform multimedia player client and server supporting most multimedia files as well as DVDs, Audio CDs, VCDs, and various streaming protocols. (Source Code) GPL-2.0 C/deb

Miscellaneous

Software that does not fit in another section.

  • 2FAuth - A web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes. (Demo) AGPL-3.0 PHP/Docker
  • AlertHub - AlertHub is a simple tool to get alerted from GitHub releases. MIT Nodejs/Docker
  • Anchr - Anchr is a toolbox for tiny tasks on the internet, including bookmark collections, URL shortening and (encrypted) image uploads. (Source Code) GPL-3.0 Nodejs
  • asciinema - Web app for hosting asciicasts. (Demo) Apache-2.0 Elixir/Docker
  • Baby Buddy - Helps caregivers track baby sleep, feedings, diaper changes, and tummy time. (Demo) BSD-2-Clause Python
  • beelzebub - Honeypot framework designed to provide a highly secure environment for detecting and analyzing cyber attacks. (Demo, Source Code) MIT Docker/K8S/Go
  • Cerbos - A self-hosted, open source user authorization layer for your applications. (Demo, Source Code) Apache-2.0 Go/deb/Docker/K8S
  • Cloudlog - Cloudlog is a self-hosted PHP application that allows you to log your amateur radio contacts anywhere. (Source Code) MIT PHP/Docker
  • CUPS - The Common Unix Print System uses Internet Printing Protocol (IPP) to support printing to local and network printers. (Source Code) GPL-2.0 C
  • CyberChef - Perform all manner of operations within a web browser such as AES, DES and Blowfish encryption and decryption, creating hexdumps, calculating hashes, and much more. (Demo) Apache-2.0 Javascript
  • Digiboard - Create collaborative whiteboards (documentation in French). (Source Code) AGPL-3.0 Nodejs
  • Digicard - Create simple graphic compositions (documentation in French). (Demo) AGPL-3.0 Nodejs
  • Digiface - Create avatars using the Avataaars library (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs
  • Digimerge - Assemble audio and video files directly in your browser (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs
  • Digitranscode - Convert audio files and videos directly in the browser (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs
  • Digiview - View YouTube videos in a distraction-free interface (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs/PHP
  • Digiwords - A simple online application for creating word clouds (documentation in French). (Source Code) AGPL-3.0 Nodejs/PHP
  • DOCAT - Host your docs. Simple. Versioned. Fancy. MIT Python/Docker
  • DomainMOD - Application to manage your domains and other internet assets in a central location. DomainMOD includes a Data Warehouse framework that allows you to import your WHM/cPanel web server data so that you can view, export, and report on your data. (Demo, Source Code) GPL-3.0 PHP
  • DOMJudge - A system for running a programming contest, like the ICPC regional and world championship programming contests. (Demo, Source Code) GPL-2.0/BSD-3-Clause/MIT PHP
  • ESMira - Run longitudinal studies (ESM, AA, EMA) with data collection and communication with participants being completely anonymous. (Demo, Source Code) AGPL-3.0 PHP
  • F-Droid - Server tools for maintaining an F-Droid repository system. (Source Code) AGPL-3.0 Python/Docker/deb
  • Fasten Health - Fasten is an open-source, self-hosted, personal/family electronic medical record aggregator, designed to integrate with 100,000’s of insurances/hospitals/clinics in the United States. GPL-3.0 Go/Docker
  • Flagsmith - Flagsmith provides a dashboard, API and SDKs for adding Feature Flags to your applications (alternative to LaunchDarkly). (Source Code) BSD-3-Clause Docker/K8S
  • Flipt - Feature flag solution with support for multiple data backends (alternative to LaunchDarkly). (Demo, Source Code) GPL-3.0 Docker/K8S/Go
  • Flyimg - Resize and crop images on the fly. Get optimised images with MozJPEG, WebP or PNG using ImageMagick, with an efficient caching system. (Demo, Source Code) MIT Docker
  • GO Feature Flag - Simple, complete, and lightweight feature flag solution (alternative to LaunchDarkly). (Source Code) MIT Go
  • google-webfonts-helper - Hassle-Free Way to Self-Host Google Fonts. Get eot, ttf, svg, woff and woff2 files + CSS snippets. (Demo) MIT Nodejs
  • Gophish - Gophish is a powerful, open-source phishing framework that makes it easy to test your organization’s exposure to phishing. (Source Code) MIT Go/Docker
  • graph-vl - Identity document verification using Machine Learning and GraphQL. MIT Python/Docker/K8S
  • Habitica - Habit tracker app which treats your goals like a Role Playing Game. Previously called HabitRPG. (Source Code) GPL-3.0/CC-BY-SA-3.0 Nodejs/Docker
  • HortusFox - A collaborative plant management system. (Source Code) MIT PHP/Docker
  • IconCaptcha - IconCaptcha is a self-hosted, fast, simple and user-friendly captcha for PHP. (Source Code) MIT PHP
  • Jellyseerr - Manage requests for your media library, supports Plex, Jellyfin and Emby media servers (fork of Overseerr). MIT Docker/Nodejs
  • Kasm Workspaces - Streaming containerized apps and desktops to end-users. Examples include Ubuntu in your browser, or simply single apps such as Chrome, OpenOffice, Gimp, Filezilla etc. (Demo, Source Code) GPL-3.0 Docker
  • Koillection - Koillection is a service allowing users to manage any kind of collections. (Source Code) MIT Docker/PHP
  • Lama-Cleaner - A free and open-source inpainting tool powered by SOTA AI model. Apache-2.0 Python/Docker
  • LanguageTool - Proofread more than 20 languages. It finds many errors that a simple spell checker cannot detect. (Source Code, Clients) LGPL-2.1 Java/Docker
  • Libre Translate - Free and Open Source Machine Translation API, entirely self-hosted. (Source Code) AGPL-3.0 Docker/Python
  • Loggit - End-to-end encrypted and simple life tracking & logging. (Demo, Source Code) AGPL-3.0 Deno
  • MailyGo - MailyGo is a small tool written in Go that allows to send HTML forms, for example from static websites without a dynamic backend, via email. MIT Go
  • Mere Medical - With Mere Medical, you can finally manage all of your medical records from Epic MyChart, Cerner, and OnPatient patient portals in one place. Privacy-focused, self-hosted, and offline-first. (Demo, Source Code) GPL-3.0 Docker/Nodejs
  • Monica - Personal relationship manager, and a new kind of CRM to organize interactions with your friends and family. (Source Code) AGPL-3.0 PHP/Docker
  • mosparo - The modern spam protection tool. It replaces other captcha methods with a simple and easy to use spam protection solution. (Source Code) MIT PHP
  • MyIP - All in one IP Toolbox. Easy to check what’s your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability and more. (Demo, Source Code) MIT Nodejs/Docker
  • Neko - A self hosted virtual browser (rabb.it clone) that runs in Docker. (Source Code) Apache-2.0 Docker/Go
  • Noisedash - Self-hostable web tool for generating ambient noises/sounds using audio tools and user-uploadable samples. AGPL-3.0 Nodejs/Docker
  • Octave Online - Infrastructure behind a web UI for GNU Octave (alternative to MATLAB). (Source Code) AGPL-3.0 Docker/Nodejs
  • Ombi - A content request system for Plex/Emby, connects to SickRage, CouchPotato, Sonarr, with a growing feature set. (Demo, Source Code) GPL-2.0 C#/deb
  • Open-Meteo - Open-source weather API with open-data forecasts, historical and climate data from all major national weather services. (Demo, Source Code) AGPL-3.0 Docker
  • OpenZiti - Fully-featured, self-hostable, zero trust, full mesh overlay network. Includes a 2FA support out of the box, clients for all major desktop/mobile OS’es. (Source Code) Apache-2.0 Go
  • OTS-Share - A self-hosting app to share secrets with file support up to 1MB. MIT Docker
  • Overseerr - Overseerr is a free and open source software application for managing requests for your media library. It integrates with your existing services, such as Sonarr, Radarr, and Plex!. (Source Code) MIT Docker
  • penpot - A web based design and prototyping platform meant for cross-domain teams. (Source Code) MPL-2.0 Docker
  • POMjs - Random Password Generator. (Source Code) GPL-2.0 Javascript
  • Reactive Resume - A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. (Demo, Source Code) MIT Docker/Nodejs
  • ReleaseBell - Send release notifications for starred Github repos. (Source Code) MIT Nodejs
  • revealjs - Framework for easily creating beautiful presentations using HTML. (Demo, Source Code) MIT Javascript
  • Revive Adserver - World’s most popular free, open source ad serving system. Formerly known as OpenX Adserver and phpAdsNew. (Source Code) GPL-2.0 PHP
  • SANE Network Scanning - Allow remote clients to access image acquisition devices (scanners) available on the local host. (Source Code) GPL-2.0 C
  • Speed Test by OpenSpeedTest™ - Free & Open-Source HTML5 Network Performance Estimation Tool. (Source Code) MIT Docker
  • string.is - An open-source, privacy-friendly online string toolkit for developers. (Source Code) AGPL-3.0 Nodejs
  • Teleport - Certificate authority and access plane for SSH, Kubernetes, web applications, and databases. (Source Code) Apache-2.0 Go/Docker/K8S
  • TeslaMate - A powerful data logger for Tesla vehicles. MIT Elixir/Docker
  • Upsnap - A simple Wake on LAN (WOL) dashboard app. Wake up devices on your network and see current status. MIT Go/Docker
  • URL-to-PNG - URL to PNG utility featuring parallel rendering using Playwright for screenshots and with storage caching via Local, S3, or CouchDB. MIT Nodejs/Docker
  • Watcharr - A free and open source content watch list. Add and track all the shows and movies you are watching. Comes with user authentication, modern and clean UI and a very simple setup. (Demo) MIT Docker
  • Wavelog - Webbased Logging Software for Radio Amateurs. Enhanced QSO logging, statistics and maps for your browser. (Demo, Source Code) MIT PHP/Docker
  • WeeWX - Open source software for your weather station. (Demo, Source Code) GPL-3.0 Python/deb
  • WeTTY - Terminal in browser over http/https. (Source Code) MIT Docker/Nodejs
  • wger - Web-based personal workout, fitness and weight logger/tracker. It can also be used as a simple gym management utility and offers a full REST API as well. (Demo, Source Code) AGPL-3.0 Python/Docker

Money, Budgeting & Management

Money management and budgeting software. Related: Inventory Management, Resource Planning

  • Actual - Actual is a local-first personal finance tool based on zero-sum budgeting. It supports synchronization across devices, custom rules, manual transaction importing (from QIF, OFX, and QFX files), and optional automatic synchronization with many banks. (Source Code) MIT Nodejs/Docker
  • Bigcapital - A self-hosted financial accounting and inventory management software for small to medium businesses. (Source Code) AGPL-3.0 Docker
  • Bitcart - A self-hosted cryptocurrencies payment processor and development platform. (Demo, Source Code) MIT Docker/Python/Nodejs
  • BTCPay Server - A self-hosted Bitcoin and other cryptocurrencies payment processor. (Demo, Source Code) MIT C#
  • Budget Zen - End-to-end encrypted and simple expense manager. (Demo, Source Code) AGPL-3.0 Deno
  • DePay - Accept Web3 Payments directly into your wallet. Peer-to-peer, free, self-hosted & open-source. (Demo, Source Code) MIT Nodejs
  • Family Accounting Tool - Web-based finance management tool for partners with partially shared expenses. Apache-2.0 Scala
  • Fava - Fava is the web frontend of Beancount, a text based double-entry accounting system. (Demo, Source Code) MIT Python
  • Firefly III - Firefly III is a modern financial manager. It helps you to keep track of your money and make budget forecasts. It supports credit cards, has an advanced rule engine and can import data from many banks. (Demo, Source Code) AGPL-3.0 PHP/Docker
  • FOSSBilling - Free and open source hosting and billing automation. Integrates with WHM, CWP, cPanel and HestiaCP. Full API and easily extensible. (Demo, Source Code) Apache-2.0 PHP/Docker
  • Galette - Galette is a membership management web application towards non profit organizations. (Source Code) GPL-3.0 PHP
  • Ghostfolio - Wealth management software to keep track of stocks, ETFs and cryptocurrencies. (Source Code) AGPL-3.0 Docker/Nodejs
  • GRR - Assets management and booking for small/medium companies. (Source Code) GPL-2.0 PHP
  • Hub20 - A self-hosted payment processor for Ethereum and ERC20 Tokens. (Source Code) AGPL-3.0 Docker/Python
  • HyperSwitch - HyperSwitch is an Open Source Financial Switch to make payments Fast, Reliable and Affordable. It lets you connect with multiple payment processors and route traffic effortlessly, all with a single API integration. (Source Code) Apache-2.0 Docker/Rust
  • IHateMoney - Manage your shared expenses, easily. (Demo, Source Code) BSD-3-Clause Docker/Python
  • Invoice Ninja - Powerful tool to invoice clients online. (Demo, Source Code) AAL PHP/Docker/K8S
  • InvoicePlane - Manage quotes, invoices, payments and customers for your small business. MIT PHP
  • Kill Bill - Open-Source Subscription Billing & Payments Platform. Have access to real-time analytics and financial reports. (Source Code) Apache-2.0 Java/Docker
  • Kresus - Open source personal finance manager. (Demo, Source Code) MIT Nodejs/Docker
  • Lago - Open-source metering and usage-based billing. (Source Code) AGPL-3.0 Docker
  • OctoBot - Open-source cryptocurrency trading bot. (Source Code) GPL-3.0 Python/Docker
  • Ocular - Simplistic and straightforward budgeting app to track your budget across months and years. (Demo) MIT Docker
  • OpenBudgeteer - A budgeting app based on the Bucket Budgeting Principle. MIT Docker/C#
  • Receipt Wrangler - Easy-to-use receipt manager, powered by AI. Allows users to create receipts effortlessly and quickly, categorize and more. (Demo, Source Code) AGPL-3.0 Docker
  • REI3 - Open source, expandable Business Management Software. Manage tasks, time, assets and much more. (Demo, Source Code) MIT Go
  • SolidInvoice - Open source invoicing and quote application. (Source Code) MIT PHP

Note-taking & Editors

Note taking editors. Related: Wikis

  • Benotes - An open source self hosted notes and bookmarks taking web app. (Source Code) MIT PHP/Docker
  • DailyTxT - Encrypted diary Web application to save your personal memories of each day. Includes a search function and encrypted file upload. MIT Docker
  • Dnote - A simple command line notebook with multi-device sync and web interface. (Source Code) AGPL-3.0 Go
  • draw.io - Diagram software for making flowcharts, process diagrams, org charts, UML, ER and network diagrams. (Source Code) Apache-2.0 Javascript/Docker
  • flatnotes - A self-hosted, database-less note-taking web app that utilises a flat folder of markdown files for storage. (Demo) MIT Docker
  • HedgeDoc - Realtime collaborative markdown notes on all platforms, formerly known as CodiMD and HackMD CE. (Source Code) AGPL-3.0 Docker/Nodejs
  • Joplin - Joplin is a note taking application with Markdown editor and encryption support for mobile and desktop platforms. Runs client-side and syncs through self hosted Nextcloud or similar (alternative to Evernote). (Source Code) MIT Nodejs
  • kiwix-serve - HTTP daemon for serving wikis from ZIM files. (Source Code) GPL-3.0 C++
  • Livebook - Realtime collaborative notebook app based on Markdown that supports running Elixir code snippets, TeX and Mermaid Diagrams. Easily deployed using Docker or Elixir. (Source Code) Apache-2.0 Elixir/Docker
  • Meemo - Personal notes stream with Markdown support. (Source Code) MIT Nodejs
  • Memos - An open source, self-hosted knowledge base that works with a SQLite db file. (Source Code) MIT Docker/Go
  • minimalist-web-notepad - Minimalist notepad.cc clone. (Demo) Apache-2.0 PHP
  • Note Mark - A minimal web-based Markdown notes app. (Source Code) AGPL-3.0 Docker
  • Oddmuse - A simple wiki engine written in Perl. No database required. (Source Code) GPL-3.0 Perl
  • Overleaf - Web-based collaborative LaTeX editor. (Source Code) AGPL-3.0 Ruby
  • Plainpad - A modern note taking application for the cloud, utilizing the best features of progressive web apps technology. (Demo, Source Code) GPL-3.0 PHP
  • Standard Notes - Simple and private notes app. Protect your privacy while getting more done. That’s Standard Notes. (Demo, Source Code) GPL-3.0 Ruby
  • Trilium Notes - Trilium Notes is a hierarchical note taking application with focus on building large personal knowledge bases. AGPL-3.0 Nodejs/Docker/K8S
  • turndown - HTML to Markdown converter written in Javascript. (Source Code) MIT Javascript
  • Turtl - Totally private personal database and note taking app. (Source Code) GPL-3.0 CommonLisp
  • Writing - Lightweight distraction-free text editor, in the browser (Markdown and LaTeX supported). No lag when writing. (Source Code) MIT Javascript

Office Suites

An office suite is a collection of productivity software usually containing at least a word processor, spreadsheet and a presentation program.

  • Collabora Online Development Edition - Collabora Online Development Edition (CODE) is a powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats, which you can integrate in your own infrastructure. (Source Code) MPL-2.0 C++
  • CryptPad - CryptPad is a collaboration suite that is end-to-end-encrypted and open-source. It is built to enable collaboration, synchronizing changes to documents in real time. (Source Code) AGPL-3.0 Nodejs/Docker
  • Digislides - Create multimedia presentations in a quick and easy way. (documentation in French). (Demo, Source Code) AGPL-3.0 Nodejs/PHP
  • Etherpad - Etherpad is a highly customizable Open Source online editor providing collaborative editing in really real-time. (Demo, Source Code) Apache-2.0 Nodejs/Docker
  • Grist - Grist is a next-generation spreadsheet with relational structure, formula-based access control, and a portable, self-contained format (alternative to Airtable). (Demo, Source Code) Apache-2.0 Nodejs/Python/Docker
  • Infinoted - Server for Gobby, a multi-platform collaborative text editor. (Source Code) MIT C++
  • ONLYOFFICE - Office suite that enables you to manage documents, projects, team and customer relations in one place. (Source Code) AGPL-3.0 Nodejs/Docker
  • PHPOffice - PHPOffice contains libraries which permits to write and read files from most office suites. LGPL-3.0 PHP

Password Managers

A password manager allows users to store, generate, and manage their passwords for local applications and online services.

  • Bitwarden - Password manager with webapp, browser extension, and mobile app. (Source Code) AGPL-3.0 Docker/C#
  • Padloc - A modern, open source password manager for individuals and teams. (Source Code) GPL-3.0 Nodejs
  • Passbolt - Password manager dedicated for managing passwords in a collaborative way on any Web server, using a MySQL database backend. (Source Code) AGPL-3.0 PHP/deb/K8S/Docker
  • PassIt - Simple password manage with sharing features by group and user, but no administration interface. (Demo, Source Code) AGPL-3.0 Docker/Django
  • Passky - Simple, modern and open source password manager with website, browser extension, android and desktop application. (Demo, Source Code) GPL-3.0 PHP
  • Psono - A promising password managers fully featured for teams. (Demo, Source Code) Apache-2.0 Python
  • Teampass - Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP. (Source Code) GPL-3.0 PHP
  • Vaultwarden - Lightweight Bitwarden server API implementation written in Rust. GPL-3.0 Rust/Docker

Pastebins

A pastebin is a type of online content-hosting service used for sharing and storing code and text.

  • bepasty - A pastebin for all kinds of files. (Source Code) BSD-2-Clause Python/deb
  • bin - A paste bin that’s actually minimalist. WTFPL/0BSD Rust
  • dpaste - Simple pastebin with multiple text and code option, with short url result easy to remember. (Source Code) MIT Docker/Django
  • ExBin - A pastebin with public/private snippets and netcat server. MIT Docker
  • FlashPaper - A one-time encrypted zero-knowledge password/secret sharing application focused on simplicity and security. No database or complicated set-up required. (Demo) MIT Docker/PHP
  • Hemmelig - Share encrypted secrets cross organizations, or as private persons. (Source Code) MIT Docker/Nodejs
  • Opengist - Self-hosted pastebin powered by Git. (Demo) AGPL-3.0 Docker/Go/Nodejs
  • paaster - Paaster is a secure by default end-to-end encrypted pastebin built with the objective of simplicity. (Source Code) GPL-3.0 Docker
  • Password Pusher - A dead-simple application to securely communicate passwords (or text) over the web. Passwords automatically expire after a certain number of views and/or time has passed. (Source Code) GPL-3.0 Docker/K8S/Ruby
  • Pastefy - Beautiful, simple and easy to deploy Pastebin with optional Client-Encryption, Multitab-Pastes, an API, a highlighted Editor and more. (Source Code, Clients) MIT Docker/K8S/Java
  • PrivateBin - PrivateBin is a minimalist, open source online pastebin/discussion board where the server has zero knowledge of hosted data. (Demo, Source Code) Zlib PHP
  • rustypaste - A minimal file upload/pastebin service. MIT Rust
  • SnyPy - Open source on-prem code snippet manager. (Demo, Source Code) MIT Docker
  • Spacebin - Modern Pastebin server written in Go with a JS-free web UI and tons of features. (Demo, Source Code) Apache-2.0 Go/Docker
  • Sup3rS3cretMes5age - Very simple (to deploy and to use) secret message service using Hashicorp Vault as a secrets storage. MIT Go
  • wantguns/bin - Minimal pastebin for both textual and binary files shipped in a single statically linked binary. (Demo) GPL-3.0 Rust/Docker
  • Wastebin - Lightweight, minimal and fast pastebin with an SQLite backend. (Demo) MIT Rust/Docker
  • YABin - A pastebin that contains plentiful features while remaining simple. Supports optional E2E encryption, a client-side CLI app, syntax highlighting, minimalistic UI, APIs, keyboard shortcuts, and more. It can even be run in serverless environments. (Demo) MIT Nodejs/Docker
  • ybFeed - Personal micro feed where you can post snippets of text or images. MIT Go/Nodejs/Docker

Personal Dashboards

Dashboards for accessing information and applications. Related: Monitoring, Bookmarks and Link Sharing

  • Dashy - Feature-rich homepage for your homelab, with easy YAML configuration. (Demo) MIT Nodejs/Docker
  • Fenrus - A self hosted personal home page that allows for multiple users, guest access and multiple dashboards for each user. It also has “Smart Apps” which display live data for those apps. GPL-3.0 .NET/Docker
  • Heimdall - Heimdall is an elegant solution to organise all your web applications. (Source Code) MIT PHP
  • Hiccup - A beautiful static homepage to get to your links and services quickly. It has built-in search, editing, PWA support and localstorage caching to easily organize your start page. (Source Code) MIT Javascript/Docker
  • Homarr - Sleek, modern dashboard with many integrations and web-based config. (Demo, Source Code) MIT Docker/Nodejs
  • Homepage by gethomepage - A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations. GPL-3.0 Docker/Nodejs
  • Homepage by tomershvueli - Simple, standalone, self-hosted PHP page that is your window to your server and the web. MIT PHP
  • Homer - A dead simple static homepage to expose your server services, with an easy yaml configuration and connectivity check. Apache-2.0 Docker/K8S/Nodejs
  • Hubleys - Self-hosted personal dashboards to organize links for multiple users via a central yaml config. MIT Docker
  • Jump - Yet another self-hosted startpage for your server designed to be simple, stylish, fast and secure. MIT Docker/PHP
  • LinkStack - Link all your social media platforms easily accessible on one page, customizable through an intuitive, easy to use user/admin interface (alternative to Linktree and Manylink). (Demo, Source Code) AGPL-3.0 PHP/Docker
  • LittleLink - A simplistic approach for links in bio with 100+ branded buttons (alternative to Linktree). (Demo, Source Code) MIT Javascript
  • Mafl - Minimalistic flexible homepage. (Source Code) MIT Docker/Nodejs
  • Organizr - Organizr aims to be your one stop shop for your Servers Frontend. GPL-3.0 PHP/Docker
  • portkey - A simple web portal that can act as startup page and shows a collection of links/urls. Also supports adding custom pages. Everything with one config file. (Demo, Source Code) AGPL-3.0 Go/Docker
  • ryot - Platform for tracking various facets of your life - media, fitness, etc. (Demo) GPL-3.0 Docker
  • Starbase 80 - A simple homepage with an iPad-style application grid, for mobile and desktop. One JSON configuration file. MIT Docker
  • Web-Portal - A python web app designed to allow a easy way to manage the links to all of your web services. AGPL-3.0 Docker/Python
  • Your Spotify - Allows you to record your Spotify listening activity and have statistics about them served through a Web application. MIT Nodejs/Docker

Photo and Video Galleries

A gallery is software that helps the user publish or share photos, pictures, videos or other digital media. Related: Static Site Generators, Photo and Video Galleries, Content Management Systems (CMS)

  • Chevereto - Ultimate image sharing software. Create your very own personal image hosting website in just minutes. (Source Code) AGPL-3.0 PHP/Docker
  • Coppermine - Multilingual photo gallery that integrates with various bulletin boards. Includes upload approval and password protected albums. (Demo, Source Code) GPL-3.0 PHP
  • Damselfly - Fast server-based photo management system for large collections of images. Includes face detection, face & object recognition, powerful search, and EXIF Keyword tagging. Runs on Linux, MacOS and Windows. (Source Code) GPL-3.0 Docker/C#/.NET
  • Ente - An end-to-end encrypted photo-sharing platform (alternative to Google Photos, Apple Photos). (Source Code) AGPL-3.0 Docker/Nodejs/Go
  • HomeGallery - Self-hosted open-source web gallery to browse personal photos and videos featuring tagging, mobile-friendly, and AI powered image discovery. (Demo, Source Code) MIT Nodejs/Docker
  • Immich - Self-hosted photo and video backup solution directly from your mobile phone. (Source Code) AGPL-3.0 Docker
  • LibrePhotos - Self hosted wannabe Google Photos clone, with a slight focus on cool graphs. (Clients) MIT Python/Docker
  • Lychee - Open source grid and album based photo-management-system. (Source Code) MIT PHP/Docker
  • Mediagoblin - Free software media publishing platform that anyone can run (alternative to Flickr, YouTube, SoundCloud, etc). (Source Code) AGPL-3.0 Python
  • Mejiro - An easy-to-use PHP web application for instant photo publishing. GPL-3.0 PHP
  • Nextcloud Memories - Fast, modern and advanced photo management suite. Runs as a Nextcloud app. (Demo, Source Code) AGPL-3.0 PHP
  • PhotoPrism - Personal photo management powered by Go and Google TensorFlow. Browse, organize, and share your personal photo collection, using the latest technologies to automatically tag and find pictures. (Demo, Source Code) AGPL-3.0 Go/Docker
  • Photoview - A simple and user-friendly Photo Gallery for personal servers. It is made for photographers and aims to provide an easy and fast way to navigate directories, with thousands of high resolution photos. (Source Code) GPL-3.0 Go/Docker
  • PiGallery 2 - A directory-first photo gallery website, with a rich UI, optimised for running on low resource servers. (Source Code) MIT Docker/Nodejs
  • Piwigo - Photo gallery software for the web, built by an active community of users and developers. (Source Code) GPL-2.0 PHP
  • sigal - Yet another simple static gallery generator. MIT Python
  • SPIS - A simple, lightweight and fast media server with decent mobile support. GPL-3.0 Docker/Rust
  • This week in past - Aggregates images taken this week, from previous years and presents them on a web page with a simple slideshow. MIT Docker/Rust
  • Thumbor - A smart imaging service and enables on-demand cropping, resizing, applying filters and optimizing images. (Source Code) MIT Python/Docker
  • Zenphoto - Open-source gallery and CMS project. (Source Code) GPL-2.0 PHP

Polls and Events

Software for organising polls and events. Related: Booking and Scheduling

  • Bitpoll - A web application for scheduling meetings and general polling. (Demo) GPL-3.0 Docker/Python
  • Bracket - Flexible tournament system to build a tournament setup, add teams, schedule matches, keep track of scores and present ranking live to the public. (Demo, Source Code) AGPL-3.0 Docker/Nodejs
  • Christmas Community - Create a simple place for your entire family to use to find gifts that people want, and to avoid double-gifting. AGPL-3.0 Docker/Nodejs
  • Claper - The ultimate tool to interact with your audience (alternative to Slido, AhaSlides and Mentimeter). (Source Code) GPL-3.0 Elixir/Docker
  • ClearFlask - Community-feedback tool for managing incoming feedback and prioritizing a public roadmap (alternative to Canny, UserVoice, Upvoty). (Demo, Source Code) AGPL-3.0 Docker
  • docassemble - A free, open-source expert system for guided interviews and document assembly, based on Python, YAML, and Markdown. (Demo, Source Code) MIT Docker/Python
  • Fider - Open platform to collect and prioritize feedback (alternative to UserVoice). (Demo, Source Code) MIT Docker
  • Formbricks - Experience Management Suite built on the largest open source survey stack worldwide. Gracefully gather feedback at every step of the customer journey to know what your customers need. (Demo, Source Code) AGPL-3.0 Nodejs/Docker
  • Framadate - Online service for planning an appointment or make a decision quickly and easily: Make a poll, Define dates or subjects to choose, Send the poll link to your friends or colleagues, Discuss and make a decision. (Demo, Source Code) CECILL-B PHP
  • Gancio - A shared agenda for local communities. (Source Code) AGPL-3.0 Nodejs
  • gathio - Self-destructing, shareable, no-registration event pages. (Demo, Source Code) GPL-3.0 Nodejs/Docker
  • hitobito - A web application to manage complex group hierarchies with members, events and a lot more. (Demo, Source Code) AGPL-3.0 Ruby
  • Input - A privacy-focused, no-code, open-source form builder designed for simplicity and brand consistency. (Source Code) AGPL-3.0 PHP/Nodejs/Docker
  • LimeSurvey - Feature-rich Open Source web based polling software. Supports extensive survey logic. (Demo, Source Code) GPL-2.0 PHP
  • Meetable - A minimal events aggregator. (Source Code) MIT PHP
  • Mobilizon - A federated tool that helps you find, create and organise events and groups. (Demo, Source Code) GPL-3.0 Elixir/Docker
  • Open Event Server - Enables organizers to manage events from concerts to conferences and meet-ups. GPL-3.0 Python/Docker

Proxy

A proxy is a server application that acts as an intermediary between a client requesting a resource and the server providing that resource. This section about forward (i.e. outgoing) proxies. For reverse proxies, see the Web Server section. Related: Web Servers

  • imgproxy - Fast and secure standalone server for resizing and converting remote images. It works great when you need to resize multiple images on the fly without preparing a ton of cached resized images or re-doing it every time the design changes. (Source Code) MIT Go/Docker/K8S
  • iodine - IPv4 over DNS tunnel solution, enabling you to start up a socks5 proxy listener. (Source Code) ISC C/deb
  • Koblas - Lightweight SOCKS5 proxy server. MIT Rust/Docker
  • Outline Server - A proxy server that runs a Shadowsocks instance for each access key and a REST API to manage the access keys. (Source Code) Apache-2.0 Docker/Nodejs
  • Privoxy - Non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. GPL-2.0 C/deb
  • sish - HTTP(S)/WS(S)/TCP tunnels to localhost using only SSH (serveo/ngrok alternative). MIT Go/Docker
  • socks5-proxy-server - SOCKS5 proxy server with built-in authentication and Telegram-bot for user management and user statistics on data spent (handy when you pay per GB of data). It is dockerised and simple to install. Apache-2.0 Docker
  • Squid - Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. (Source Code) GPL-2.0 C/deb
  • Tinyproxy - Light-weight HTTP/HTTPS proxy daemon. (Source Code) GPL-2.0 C/deb
  • txtdot - A HTTP proxy that parses only text, links and pictures from pages reducing internet bandwidth usage, removing ads and heavy scripts. (Demo, Source Code) MIT Nodejs/Docker

Recipe Management

Software and tools for managing recipes.

  • Bar Assistant - Bar assistant is a self hosted application for managing your home bar. It allows you to add your ingredients, search for cocktails and create custom cocktail recipes. (Demo) MIT PHP/Docker
  • KitchenOwl - A cross-platform shopping list, recipe storage, expense tracker, and meal planner following the material design language. (Source Code) AGPL-3.0 Docker/deb
  • Mealie - Material design inspired recipe manager with category and tag management, shopping-lists, meal-planner, and site customizations. Mealie is focused on simple user interactions to keep the whole family using the app. (Source Code) MIT Python
  • RecipeSage - A recipe keeper, meal plan organizer, and shopping list manager that can import recipes directly from any URL. (Demo) AGPL-3.0 Nodejs
  • Specifically Clementines - Grocery shopping app (previously Groceries), providing reliable sync with multiple users/devices (web/Android/iOS), recipes and integration with Tandoor. (Demo, Source Code) MIT Docker
  • Tamari - Recipe manager web app with a built-in collection of recipes. Organize by favorites and categories, create shopping lists, and plan meals. (Demo, Source Code) GPL-3.0 Docker/Python

Remote Access

Remote desktop and SSH servers and web interfaces for remote management of computer systems.

  • Firezone - Self-hosted secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO. (Source Code) Apache-2.0 Elixir/Docker
  • Guacamole - Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC and RDP. (Source Code) Apache-2.0 Java/C
  • MeshCentral - A full computer management website. With MeshCentral, you can run your own web server to remotely manage and control computers on a local network or anywhere on the internet. (Source Code) Apache-2.0 Nodejs
  • Remotely - A remote desktop control and remote scripting solution, enterprise level remote support solution with admin web interface and remote control via browser. GPL-3.0 C#/Docker
  • RustDesk - Remote Desktop Access software that works out-of-the-box (alternative to TeamViewer). (Source Code) AGPL-3.0 Rust/Docker/deb
  • ShellHub - ShellHub is a modern SSH server for remotely accessing linux devices via command line (using any SSH client) or web-based user interface, designed as an alternative to sshd. (Source Code) Apache-2.0 Docker
  • Sshwifty - Sshwifty is a SSH and Telnet connector made for the Web. (Demo) AGPL-3.0 Go/Docker
  • Warpgate - Smart SSH and HTTPS bastion that works with any SSH client. Apache-2.0 Rust/Docker

Resource Planning

Software and tools to help with resource and supply planning, including enterprise resource and supply planning (ERP). Related: Money, Budgeting & Management, Inventory Management

  • Dolibarr - Dolibarr ERP CRM is a modern software package to manage your company or foundation activity (contacts, suppliers, invoices, orders, stocks, agenda, accounting, …). (Demo, Source Code) GPL-3.0 PHP/deb
  • ERPNext - Free open source ERP system. (Source Code) GPL-3.0 Python/Docker
  • farmOS - Web-based farm record keeping application. (Demo, Source Code) GPL-2.0 PHP/Docker
  • grocy - ERP beyond your fridge - grocy is a web-based self-hosted groceries & household management solution for your home. (Demo, Source Code) MIT PHP/Docker
  • LedgerSMB - Integrated accounting and ERP system for small and midsize businesses, with double entry accounting, budgeting, invoicing, quotations, projects, orders and inventory management, shipping and more. (Demo, Source Code) GPL-2.0 Docker/Perl
  • Odoo - Free open source ERP system. (Demo, Source Code) LGPL-3.0 Python/deb/Docker
  • OFBiz - Enterprise Resource Planning system with a suite of business applications flexible enough to be used across any industry. (Source Code) Apache-2.0 Java
  • Tryton - Free open source business solution. (Demo, Source Code) GPL-3.0 Python

Search Engines

A search engine is an information retrieval system designed to help find information stored on a computer system. This includes Web search engines.

  • Apache Solr - Enterprise search platform featuring full-text search, hit highlighting, faceted search, real-time indexing, dynamic clustering, and rich document (e.g., Word, PDF) handling. (Source Code) Apache-2.0 Java/Docker/K8S
  • Fess - Fess is a very powerful and easily deployable Enterprise Search Server. (Demo, Source Code) Apache-2.0 Java/Docker
  • Jina - Cloud-native neural search framework for any kind of data. Apache-2.0 Python/Docker
  • Manticore Search - Full-text search and data analytics, with fast response time for small, medium and big data (alternative to Elasticsearch). GPL-2.0 Docker/deb/C++
  • MeiliSearch - Ultra relevant, instant and typo-tolerant full-text search API. (Source Code) MIT Rust/Docker/deb
  • OpenSearch - Open source distributed and RESTful search engine. (Source Code) Apache-2.0 Java/Docker/K8S/deb
  • SearXNG - Internet metasearch engine which aggregates results from various search services and databases (Fork of Searx). (Source Code) AGPL-3.0 Python/Docker
  • sist2 - Lightning-fast file system indexer and search tool. GPL-3.0 C/Docker
  • Sosse - Selenium based search engine and crawler with offline archiving. (Source Code) AGPL-3.0 Python/Docker
  • Typesense - Blazing fast, typo-tolerant open source search engine optimized for developer happiness and ease of use. (Source Code) GPL-3.0 C++/Docker/K8S/deb
  • Websurfx - Aggregate results from other search engines (metasearch engine) without ads while keeping privacy and security in mind. It is extremely fast and provides a high level of customization (alternative to SearX). AGPL-3.0 Rust/Docker
  • Whoogle - A self-hosted, ad-free, privacy-respecting metasearch engine. MIT Python
  • Yacy - Peer based, decentralized search engine server. (Source Code) GPL-2.0 Java/Docker/K8S
  • ZincSearch - Search engine that requires minimal resources (alternative to Elasticsearch). (Demo, Source Code) Apache-2.0 Go/Docker/K8S

Self-hosting Solutions

Software for easy installation, management and configuration of self-hosted services and applications.

  • Ansible-NAS - Build a full-featured home server with this playbook and an Ubuntu box. MIT Ansible/Docker
  • CasaOS - A simple, easy-to-use, elegant open-source Home Cloud system. (Source Code) Apache-2.0 Go/Docker
  • DietPi - Minimal Debian OS optimized for single-board computers, which allows you to easily install and manage several services for selfhosting at home. (Source Code) GPL-2.0 Shell
  • DockSTARTer - DockSTARTer helps you get started with home server apps running in Docker. (Source Code) MIT Shell
  • FreedomBox - Community project to develop, design and promote personal servers running free software for private, personal, communications. (Source Code) AGPL-3.0 Python/deb
  • HomelabOS - Your very own offline-first privacy-centric open-source data-center. Deploy over 100 services with a few commands. (Source Code) MIT Docker
  • LibreServer - Home server configuration based on Debian. (Source Code) AGPL-3.0 Shell
  • Mars Server - Managed home server with Docker, Docker Compose, Make and Bash. MIT Docker
  • Mistborn - Mistborn is your own virtual private cloud platform and WebUI that manages self hosted services. MIT Shell/Docker
  • NextCloudPi - Nextcloud preinstalled and preconfigured, with a text and web management interface and all the tools needed to self host private data. With installation images for Raspberry Pi, Odroid, Rock64, Docker, and a curl installer for Armbian/Debian. GPL-2.0 Shell/PHP
  • OpenMediaVault - OpenMediaVault is the next generation network attached storage (NAS) solution based on Debian Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, RSync, BitTorrent client and many more. (Source Code) GPL-3.0 PHP
  • Sandstorm - Personal server for running self-hosted apps easily and securely. (Demo, Source Code) Apache-2.0 C++/Shell
  • StartOS - Browser-based, graphical Operating System (OS) that makes running a personal server as easy as running a personal computer. (Source Code) MIT Rust
  • Syncloud - Your own online file storage, social network or email server. (Source Code) GPL-3.0 Go/Shell
  • Tipi - Homeserver manager. One command setup, one click installs for your favorites self-hosted apps. (Source Code) GPL-3.0 Shell
  • UBOS - Linux distro that runs on indie boxes (personal servers and IoT devices). Single-command installation and management of apps - Jenkins, Mediawiki, Owncloud, WordPress, etc., and other features. GPL-3.0 Perl
  • WikiSuite - The most comprehensive and integrated Free / Libre / Open Source enterprise software suite. (Source Code) GPL-3.0/LGPL-2.1/Apache-2.0/MPL-2.0/MPL-1.1/MIT/AGPL-3.0 Shell/Perl/deb
  • xsrv - Install and manage self-hosted services/applications, on your own server(s). (Source Code) GPL-3.0 Ansible/Shell
  • YunoHost - Server operating system aiming to make self-hosting accessible to everyone. (Demo, Source Code) AGPL-3.0 Python/Shell

Software Development - API Management

API management is the process of creating and publishing application programming interfaces (APIs), enforcing their usage policies, controlling access, nurturing the subscriber community, collecting and analyzing usage statistics, and reporting on performance.

  • DreamFactory - Turns any SQL/NoSQL/Structured data into Restful API. (Source Code) Apache-2.0 PHP/Docker/K8S
  • form.io - A REST API building platform that utilizes a drag & drop form builder, and is application framework agnostic. Contains open source and enterprise version. (Demo, Source Code) MIT Nodejs/Docker
  • Fusio - Open-source API management platform which helps to build and manage REST APIs. (Demo, Source Code) AGPL-3.0 PHP/Docker
  • Graphweaver - Turn multiple data sources into a single GraphQL API. (Source Code) MIT Nodejs
  • Hasura - Fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigger webhooks on database events. (Source Code) Apache-2.0 Haskell/Docker/K8S
  • Hoppscotch Community Edition - A free, fast and beautiful API request builder. (Source Code) MIT Nodejs/Docker
  • Kong - The World’s Most Popular Open Source Microservice API Gateway and Platform. (Source Code) Apache-2.0 Lua/Docker/K8S/deb
  • Lura - Open source High-Performance API Gateway. (Source Code) Apache-2.0 Go
  • Panora - An API to add an integration catalog to your SaaS product in minutes (alternative to Merge.dev). (Source Code) AGPL-3.0 Nodejs/Docker
  • Para - Flexible and modular backend framework/server for object persistence, API development and authentication. (Source Code) Apache-2.0 Java/Docker
  • Psychic - Universal API to connect large language models to dynamic data sources. GPL-3.0 Python
  • Svix - Open-source webhooks as a service that makes it super easy for API providers to send webhooks. (Source Code) MIT Docker/Rust
  • Tyk - Fast and scalable open source API Gateway. Out of the box, Tyk offers an API Management Platform with an API Gateway, API Analytics, Developer Portal and API Management Dashboard. (Source Code) MPL-2.0 Go/Docker/K8S
  • Yaade - Yaade is an open-source, self-hosted, collaborative API development environment. (Source Code) MIT Docker

Software Development - IDE & Tools

An integrated development environment (IDE) is a software application that provides comprehensive facilities to computer programmers for software development. Related: Software Development - Low Code

  • Atheos - Web-based IDE framework with a small footprint and minimal requirements, continued from Codiad. (Source Code) MIT PHP/Docker
  • code-server - VS Code in the browser, hosted on a remote server. MIT Nodejs/Docker
  • Coder - Remote development machines on your own infrastructure. (Source Code) AGPL-3.0 Go/Docker/K8S/deb
  • Eclipse Che - Open source workspace server and cloud IDE. (Source Code) EPL-1.0 Docker/Java
  • Hakatime - WakaTime server implementation with analytics dashboard. Unlicense Haskell
  • HttPlaceholder - Quickly mock away any webservice using HttPlaceholder. HttPlaceholder lets you specify what the request should look like and what response needs to be returned. MIT C#
  • Judge0 CE - Open source API to compile and run source code. (Source Code) GPL-3.0 Docker
  • JupyterLab - Web-based environment for interactive and reproducible computing. (Demo, Source Code) BSD-3-Clause Python/Docker
  • Lowdefy - Build internal tools, BI dashboards, admin panels, CRUD apps and workflows in minutes using YAML / JSON on an self-hosted, open-source platform. Connect to your data sources, host via Serverless, Netlify or Docker. (Source Code) Apache-2.0 Nodejs/Docker
  • RStudio Server - Web browser based IDE for R. (Source Code) AGPL-3.0 Java/C++
  • Wakapi - Tracking tool for coding statistics, compatible with WakaTime. (Source Code) GPL-3.0 Go/Docker

Software Development - Localization

Localization is the process of adapting code and software to other languages.

  • Accent - Open-source, self-hosted, developer-oriented translation tool. (Source Code) BSD-3-Clause Elixir/Docker
  • Tolgee - Developer & translator friendly web-based localization platform enabling users to translate directly in the app they develop. (Source Code) Apache-2.0 Docker/Java
  • Traduora - Translation management platform for teams. (Source Code) AGPL-3.0 Docker/K8S/Nodejs
  • Weblate - Web-based translation tool with tight version control integration. (Demo, Source Code) GPL-3.0 Python/Docker/K8S

Software Development - Low Code

A low-code development platform (LCDP) provides a development environment used to create application software through a graphical user interface. Related: Software Development - IDE & Tools

  • Appsmith - Cloud or self-hosted open-source platform to build admin panels, CRUD apps and workflows. Build everything you need, 10x faster. (Source Code) Apache-2.0 Java/Docker/K8S
  • Appwrite - End to end backend server for web, native, and mobile developers 🚀. (Source Code) BSD-3-Clause Docker
  • CASE - Lightweight BaaS (Backend As A Service) requiring minimal coding, with database, admin panel, API, and Javascript SDK. (Source Code) MIT Nodejs
  • Dashpress - Generate fully functional admin apps in seconds from your database information, with a single command. (Demo) AGPL-3.0 Nodejs/Docker
  • Motor Admin - No-code admin panel and business intelligence software - search, create, update, and delete data entries, create custom actions, and build reports. (Source Code) AGPL-3.0 Ruby/Docker
  • PocketBase - Open Source backend for your next SaaS and Mobile app in 1 file. (Source Code) MIT Go/Docker
  • SQLPage - SQL-only dynamic website builder. (Source Code) MIT Rust/Docker
  • ToolJet - Low-code framework to build & deploy internal tools with minimal engineering effort (alternative to Retool & Mendix). (Source Code) GPL-3.0 Nodejs/Docker/K8S

Software Development - Project Management

Tools and software for software project management. Related: Ticketing, Task Management & To-do Lists

  • Cgit - A fast lightweight web interface for git repositories. (Source Code) GPL-2.0 C
  • Forgejo - A lightweight software forge focused on scaling, federation, and privacy (fork of Gitea). (Demo, Source Code, Clients) MIT Docker/Go
  • Fossil - Distributed version control system featuring wiki and bug tracker. BSD-2-Clause-FreeBSD C
  • Gerrit - A code review and project management tool for Git based projects. (Source Code) Apache-2.0 Java/Docker
  • Gitblit - Pure Java stack for managing, viewing, and serving Git repositories. (Source Code) Apache-2.0 Java
  • gitbucket - Easily installable GitHub clone powered by Scala. (Source Code) Apache-2.0 Scala/Java
  • Gitea - Community managed, lightweight code hosting solution (fork of Gogs). (Demo, Source Code) MIT Go/Docker/K8S
  • GitLab - Self Hosted Git repository management, code reviews, issue tracking, activity feeds and wikis. (Demo, Source Code) MIT Ruby/deb/Docker/K8S
  • Gitolite - Gitolite allows you to setup git hosting on a central server, with fine-grained access control and many more powerful features. (Source Code) GPL-2.0 Perl
  • Gogs - Painless self-hosted Git Service written in Go. (Source Code) MIT Go
  • Huly - All-in-One Project Management Platform (alternative to Linear, Jira, Slack, Notion, Motion). (Demo, Source Code) EPL-2.0 Docker/K8S/Nodejs
  • Kallithea - Source code management system that supports two leading version control systems, Mercurial and Git, with a web interface. (Source Code) GPL-3.0 Python
  • Klaus - Simple, easy-to-set-up Git web viewer that Just Works. ISC Python/Docker
  • Lazylead - Eliminate the annoying work within ticketing systems (Jira, GitHub, Trello). Allows to automate daily actions like tickets fields verification, email notifications by JQL/GQL, meeting requests to your (or teammates) calendar. (Source Code) MIT Ruby/Docker
  • Leantime - Leantime is a lean project management system for small teams and startups helping to manage projects from ideation through delivery. (Source Code) GPL-2.0 PHP/Docker
  • Mindwendel - Brainstorm and upvote ideas and thoughts within your team. (Demo, Source Code) AGPL-3.0 Docker/Elixir
  • minimal-git-server - A lightweight and minimal self-hosted git server with a basic CLI to manage repositories, supporting multiple accounts and running in a container. MIT Docker
  • Octobox - Take back control of your GitHub Notifications. (Source Code) AGPL-3.0 Ruby/Docker
  • OneDev - All-In-One DevOps Platform. With Git Management, Issue Tracking, and CI/CD. Simple yet Powerful. (Source Code) MIT Java/Docker/K8S
  • OpenProject - OpenProject is a web-based project management system. (Source Code) GPL-3.0 Ruby/deb/Docker
  • Pagure - A lightweight, powerful, and flexible git-centric forge with features laying the foundation for federated and decentralized development. (Demo) GPL-2.0 Docker/Python/deb
  • Phorge - Phorge is an open source, community driven platform for collaborating, managing, organizing and reviewing software development projects. (Source Code) Apache-2.0 PHP
  • Plane - Helps you track your issues, epics, and product roadmaps in the simplest way possible (alternative to JIRA, Linear and Height). (Demo, Source Code) Apache-2.0 Docker
  • ProjeQtOr - A complete, mature, multi-user project management system with extensive functionality for all phases of a project. (Demo, Source Code) AGPL-3.0 PHP
  • Redmine - Redmine is a flexible project management web application. (Source Code) GPL-2.0 Ruby
  • Review Board - Extensible and friendly code review tool for projects and companies of all sizes. (Demo, Source Code) MIT Python/Docker
  • rgit - An ultra-fast & lightweight cgit clone. WTFPL Rust/Docker
  • RhodeCode - RhodeCode is an open source platform for software development teams. It unifies and simplifies repository management for Git, Subversion, and Mercurial. (Source Code) AGPL-3.0 Python
  • Rukovoditel - Configurable open source project management, web-based application. (Source Code) GPL-2.0 PHP
  • SCM Manager - The easiest way to share and manage your Git, Mercurial and Subversion repositories over http. (Source Code) BSD-3-Clause Java/deb/Docker/K8S
  • Smederee - A frugal platform which is dedicated to help people build great software together leveraging the power of the Darcs version control system. (Source Code) AGPL-3.0 Scala
  • Sourcehut - A full web git interface with no javascript. (Demo, Source Code) GPL-2.0 Go
  • Taiga - Agile Project Management Tool based on the Kanban and Scrum methods. (Source Code) MPL-2.0 Docker/Python/Nodejs
  • Titra - Time-tracking solution for freelancers and small teams. (Source Code) GPL-3.0 Javascript/Docker
  • Trac - Trac is an enhanced wiki and issue tracking system for software development projects. BSD-3-Clause Python/deb
  • Traq - Project management and issue tracking system written in PHP. (Source Code) GPL-3.0 PHP/Nodejs
  • Tuleap - Tuleap is a libre suite to plan, track, code and collaborate on software projects. (Source Code) GPL-2.0 PHP
  • UVDesk - UVDesk community is a service oriented, event driven extensible opensource helpdesk system that can be used by your organization to provide efficient support to your clients effortlessly whichever way you imagine. (Demo, Source Code) MIT PHP
  • ZenTao - An agile(scrum) project management system/tool. (Demo, Source Code) AGPL-3.0 PHP

Software Development - Testing

Tools and software for software testing.

  • Bencher - Bencher is a suite of continuous benchmarking tools designed to catch performance regressions in CI. (Source Code) MIT/Apache-2.0 Rust
  • Selenoid - Lightweight Selenium hub implementation launching browsers within Docker containers. (Source Code) Apache-2.0 Go
  • Sorry Cypress - Alternative open-source dashboard for the Cypress browser automation framework, featuring unlimited parallelization, recording and debugging of tests. (Source Code) MIT Docker/K8S
  • Touca - Continuous regression testing for engineering teams. Get feedback when you write code that could break your software. (Source Code) Apache-2.0 Docker/Nodejs

Status / Uptime pages

Uptime is a measure of system reliability, expressed as the percentage of time a machine, typically a computer, has been working and available. Related: Monitoring

  • cState - Static status page for hyperfast Hugo. Clean design, minimal JS, super light HTML/CSS, high customization, optional admin panel, read-only API, IE8+. Best used with Netlify, Docker. (Demo, Source Code) MIT Go
  • Gatus - Automated service health dashboard. (Demo) Apache-2.0 Docker/K8S
  • StatPing.ng - An easy to use Status Page for your websites and applications. Statping will automatically fetch the application and render a beautiful status page with tons of features for you to build an even better status page. (Source Code) GPL-3.0 Docker/Go
  • Uptime Kuma - Self-hosted website monitoring tool like “Uptime Robot”. (Demo) MIT Docker/Nodejs
  • Vigil - Microservices Status Page. Monitors a distributed infrastructure and sends alerts (Slack, SMS, etc.). (Demo, Source Code) MPL-2.0 Rust/Docker/deb

Task Management & To-do Lists

Task management software. Related: Software Development - Project Management, Ticketing

  • AppFlowy - With AppFlowy, you can build detailed lists of to-do’s for different projects while tracking the status of each one. Open Source Notion Alternative. (Source Code) AGPL-3.0 Rust/Dart/Docker
  • Focalboard - Define, organize, track and manage work across individuals and teams (alternative to Trello, Notion, and Asana). (Source Code, Clients) MIT/AGPL-3.0/Apache-2.0 Nodejs/Go/Docker
  • Kanboard - Simple and open source visual task board. (Source Code) MIT PHP
  • myTinyTodo - Simple way to manage your todo list in AJAX style. Uses PHP, jQuery, SQLite/MySQL. GTD compliant. (Demo, Source Code) GPL-2.0 PHP
  • Nullboard - Single-page minimalist kanban board; compact, highly readable and quick to use. BSD-2-Clause Javascript
  • Our Shopping List - Simple shared list application. Typical uses include shopping lists of course, and any other small todo-list that needs to be used collaboratively. (Demo) AGPL-3.0 Docker
  • Planka - Realtime kanban board for workgroups (alternative to Trello). (Demo, Source Code) AGPL-3.0 Nodejs/Docker/K8S
  • Task Keeper - List editor for power users, backed by a self-hosted server. Apache-2.0 Scala
  • Tasks.md - A self-hosted, file based task management board that supports Markdown syntax. MIT Docker
  • Taskwarrior - Taskwarrior is Free and Open Source Software that manages your TODO list from your command line. It is flexible, fast, efficient, and unobtrusive. It does its job then gets out of your way. (Source Code) MIT C++
  • Tracks - Web-based application to help you implement David Allen’s Getting Things Done™ methodology. (Source Code) GPL-2.0 Ruby
  • Vikunja - The to-do app to organize your life. (Demo, Source Code) GPL-3.0 Go
  • Wekan - Open-source Trello-like kanban. (Source Code) MIT Nodejs

Ticketing

Helpdesk, bug and issue tracking software to help the tracking of user requests, bugs and missing features. Related: Task Management & To-do Lists, Software Development - Project Management

  • Bugzilla - General-purpose bugtracker and testing tool originally developed and used by the Mozilla project. (Source Code) MPL-2.0 Perl
  • FreeScout - Open source clone of Help Scout: email-based customer support application, help desk and shared mailbox. AGPL-3.0 PHP/Docker
  • GlitchTip - Open source error-tracking app. GlitchTip collects errors reported by your app. (Source Code) MIT Python/Docker/K8S
  • Iguana - Iguana is an open source issue management system with a kanban board. CC-BY-SA-4.0 Python/Docker
  • ITFlow - Client IT Documentation, Ticketing, Invoicing and Accounting Web Application for MSPs (Managed Service Providers). (Demo, Source Code) GPL-3.0 PHP
  • MantisBT - Self hosted bug tracker, fits best for software development. (Demo, Source Code) GPL-2.0 PHP
  • osTicket - Manage, organize and archive all your support requests and responses in one place. (Source Code) GPL-2.0 PHP
  • OTOBO - Flexible web-based ticketing system used for Customer Service, Help Desk, IT Service Management. (Demo, Source Code) GPL-3.0 Perl/Docker
  • Request Tracker - An enterprise-grade issue tracking system. (Source Code) GPL-2.0 Perl
  • Roundup Issue Tracker - A simple-to-use and -install issue-tracking system with command-line, web, REST, XML-RPC, and e-mail interfaces. Designed with flexibility in mind - not just another bug tracker. (Source Code) MIT/ZPL-2.0 Python/Docker
  • Trudesk - Trudesk is an open-source help desk/ticketing solution. (Source Code) Apache-2.0 Nodejs/Docker
  • Zammad - Easy to use but powerful open-source support and ticketing system. (Source Code) AGPL-3.0 Ruby/deb

Time Tracking

Time-tracking software is a category of computer software that allows its users to record time spent on tasks or projects.

  • ActivityWatch - An app that automatically tracks how you spend time on your devices. (Source Code) MPL-2.0 Python
  • Kimai - Kimai is a free & open source timetracker. It tracks work time and prints out a summary of your activities on demand. (Demo, Source Code) AGPL-3.0 PHP
  • TimeTagger - An open source time-tracker based on an interactive timeline and powerful reporting. (Demo, Source Code) GPL-3.0 Python
  • Traggo - Traggo is a tag-based time tracking tool. In Traggo there are no tasks, only tagged time spans. (Source Code) GPL-3.0 Docker/Go

URL Shorteners

URL shortening is the action of shortening a URL to make it substantially shorter and still direct to the required page. Before hosting one, please see disadvantages of URL shorteners.

  • Chhoto URL - Simple, lightning-fast URL shortener with no bloat (fork of simply-shorten). MIT Rust/Docker
  • Just Short It! - A KISS, single-user URL shortener that runs in just one container. MIT Docker
  • liteshort - User-friendly, actually lightweight, and configurable URL shortener. MIT Python/deb
  • Lstu - Lightweight URL shortener. WTFPL Perl/Docker
  • Lynx - URL shortener with many functions such as multiple accounts, ShareX support and an attractive but simple interface. (Demo, Source Code) MIT Nodejs/Docker
  • rs-short - A lightweight link shortener written in Rust, with features such as caching, spambot protection and phishing detection. (Demo) MPL-2.0 Rust
  • Shlink - URL shortener with REST API and command line interface. Includes official progressive web application and docker images. (Source Code, Clients) MIT PHP/Docker
  • Simple-URL-Shortener - KISS URL shortener, public or private (with account). Minimalist and lightweight. No dependencies. (Demo) MIT PHP
  • Simply Shorten - A simple URL shortener that just shortens links. MIT Java/Docker
  • YOURLS - YOURLS is a set of PHP scripts that will allow you to run Your Own URL Shortener. Features include password protection, URL customization, bookmarklets, statistics, API, plugins, jsonp. (Source Code) MIT PHP

Video Surveillance

Video surveillance, also known as Closed-circuit television (CCTV), is the use of video cameras for surveillance in areas that require additional security or ongoing monitoring. Related: Media Streaming - Video Streaming

  • Bluecherry - Closed-circuit television (CCTV) software application which supports IP and Analog cameras. (Source Code) GPL-2.0 PHP
  • Frigate - Monitor your security cameras with locally processed AI. (Source Code) MIT Docker/Python/Nodejs
  • Kerberos.io - Kerberos.io is a video surveillance solution, which works with any camera and on every Linux based machine (Raspberry Pi, Docker, Kubernetes cluster). (Demo, Source Code) MIT Docker/K8S
  • SentryShot - Video surveillance management system. GPL-2.0 Docker/Rust
  • Viseron - Self-hosted, local-only NVR and AI Computer Vision software. With features such as object detection, motion detection, face recognition and more, it gives you the power to keep an eye on your home, office or any other place you want to monitor. (Source Code) MIT Docker
  • Viseron - Self-hosted, local-only NVR and AI Computer Vision software. With features such as object detection, motion detection, face recognition and more, it gives you the power to keep an eye on your home, office or any other place you want to monitor. (Source Code) MIT Docker
  • Zoneminder - Closed-circuit television (CCTV) software application which supports IP, USB and Analog cameras. (Source Code) GPL-2.0 PHP/deb

VPN

A virtual private network (VPN) extends a private network across a public network and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network.

Web Servers

Web Servers and Reverse Proxies. A web server is a piece of software and underlying hardware that accepts requests via HTTP (the network protocol created to distribute web content) or its secure variant HTTPS. A Reverse Proxy is a proxy server that appears to any client to be an ordinary web server, but in reality merely acts as an intermediary that forwards requests to one or more ordinary web servers. Related: Proxy

  • Algernon - Small self-contained pure-Go web server with Lua, Markdown, HTTP/2, QUIC, Redis and PostgreSQL support. (Source Code) BSD-3-Clause Go/Docker
  • Apache HTTP Server - Secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards. (Source Code) Apache-2.0 C/deb/Docker
  • BunkerWeb - Next-gen Web Application Firewall (WAF) that will protect your web services. (Demo, Source Code, Clients) AGPL-3.0 deb/Docker/K8S/Python
  • Caddy - Powerful, enterprise-ready, open source web server with automatic HTTPS. (Source Code) Apache-2.0 Go/deb/Docker
  • HAProxy - Very fast and reliable reverse-proxy offering high availability, load balancing, and proxying for TCP and HTTP-based applications. (Source Code) GPL-2.0 C/deb/Docker
  • Jauth - Lightweight SSL/TLS reverse proxy with authorization (via Telegram and SSH) for self-hosted apps. GPL-3.0 Go
  • Lighttpd - Secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments. (Source Code) BSD-3-Clause C/deb/Docker
  • Nginx Proxy Manager - Nginx Proxy Manager is an easy way to accomplish reverse proxying hosts with SSL termination. (Source Code) MIT Nodejs/Docker
  • Nginx - HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server. (Source Code) BSD-2-Clause C/deb/Docker
  • Pomerium - An identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet. (Source Code) Apache-2.0 Go
  • Static Web Server - Cross-platform, high-performance, and asynchronous web server for static file serving. (Source Code) Apache-2.0/MIT Rust/Docker
  • SWAG (Secure Web Application Gateway) - Nginx webserver and reverse proxy with PHP support, built-in Certbot (Let’s Encrypt) client and fail2ban integration. GPL-3.0 Docker
  • Traefik - HTTP reverse proxy and load balancer that makes deploying microservices easy. (Source Code) MIT Go/Docker
  • Varnish - Web application accelerator/caching HTTP reverse proxy. (Source Code) BSD-3-Clause Go/deb/Docker

Wikis

A wiki is a publication collaboratively edited and managed by its own audience directly using a web browser. Related: Note-taking & Editors, Static Site Generators, Knowledge Management Tools See also: Wikimatrix, List of wiki software - Wikipedia, Comparison of wiki software - Wikipedia

  • AmuseWiki - Amusewiki is based on the Emacs Muse markup, remaining mostly compatible with the original implementation. It can work as a read-only site, as a moderated wiki, or as a fully open wiki or even as a private site. (Demo, Source Code) GPL-1.0 Perl/Docker
  • BookStack - BookStack is a simple, self-hosted, easy-to-use platform for organizing and storing information. It allows for documentation to be stored in a book like fashion. (Demo, Source Code) MIT PHP/Docker
  • django-wiki - Wiki system with complex functionality for simple integration and a superb interface. Store your knowledge with style: Use django models. (Demo) GPL-3.0 Python
  • Documize - Modern Docs + Wiki software with built-in workflow, single binary executable, just bring MySQL/Percona. (Source Code) AGPL-3.0 Go
  • Dokuwiki - Easy to use, lightweight, standards-compliant wiki engine with a simple syntax allowing reading the data outside the wiki. All data is stored in plain text files, therefore no database is required. (Source Code) GPL-2.0 PHP
  • Feather Wiki - A lightning fast and infinitely extensible tool for creating personal non-linear notebooks, databases, and wikis that is entirely self-contained, runs in your browser, and is only 58 kilobytes in size. (Demo, Source Code, Clients) AGPL-3.0 Javascript
  • Gitit - Wiki program that stores pages and uploaded files in a git repository, which can then be modified using the VCS command line tools or the wiki’s web interface. GPL-2.0 Haskell
  • Gollum - Simple, Git-powered wiki with a sweet API and local frontend. MIT Ruby
  • Mediawiki - MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. (Demo, Source Code) GPL-2.0 PHP
  • Mycorrhiza Wiki - Filesystem and git-based wiki engine written in Go using Mycomarkup as its primary markup language. (Source Code) AGPL-3.0 Go
  • Otter Wiki - Simple, easy to use wiki software using markdown. MIT Docker
  • Outline - An open, extensible, wiki for your team. (Source Code) BSD-3-Clause Nodejs/Docker
  • Pepperminty Wiki - Complete markdown-powered wiki contained in a single PHP file. (Demo) MPL-2.0 PHP
  • PmWiki - Wiki-based system for collaborative creation and maintenance of websites. GPL-3.0 PHP
  • Raneto - Raneto is an open source Knowledgebase platform that uses static Markdown files to power your Knowledgebase. (Source Code) MIT Nodejs
  • TiddlyWiki - Reusable non-linear personal web notebook. (Source Code) BSD-3-Clause Nodejs
  • Tiki - Wiki CMS Groupware with the most built-in features. (Demo, Source Code) LGPL-2.1 PHP
  • WackoWiki - WackoWiki is a light and easy to install multilingual Wiki-engine. (Source Code) BSD-3-Clause PHP
  • Wiki.js - Modern, lightweight and powerful wiki app using Git and Markdown. (Demo, Source Code) AGPL-3.0 Nodejs/Docker/K8S
  • WikiDocs - A databaseless markdown flat-file wiki engine. (Demo, Source Code) MIT PHP/Docker
  • WiKiss - Wiki, simple to use and install. (Source Code) GPL-2.0 PHP
  • Wikmd - Modern and simple file based wiki that uses Markdown and Git. MIT Python/Docker
  • XWiki - Second generation wiki that allows the user to extend its functionalities with a powerful extension-based architecture. (Demo, Source Code) LGPL-2.1 Java/Docker/deb
  • Zim - Graphical text editor used to maintain a collection of wiki pages. Each page can contain links to other pages, simple formatting and images. (Source Code) GPL-2.0 Python/deb


Selfhosted - Non-Free Softwares

It implements their own licensing with restrictions and grants which you must check on each case. Restrictions may include limits on allowed use of the software, access to the source code, modification and further redistribution. This software can therefore contain anti user-freedom features, such as but not limited to: backdoors, user lock-in, sending personal data to a third party.


Table of contents


Software

Automation

  • Ctfreak - IT task scheduler with mobile-friendly web UI to schedule concurrent, remote and chained execution of Bash / Powershell / SQL scripts, Webhooks, and more. ⊘ Proprietary Unknown
  • CxReports - Reporting and PDF document generation with a user-friendly WYSIWYG template editor, API, automated email delivery, and robust security features. ⊘ Proprietary Docker
  • n8n - Free node based Workflow Automation Tool. Easily automate tasks across different services. (Source Code) Apache-2.0/Commons-Clause Nodejs

Communication - Custom Communication Systems

  • Chaskiq - Full featured live chat, help center and CRM as an alternative to Intercom & Drift, Crisp and others. (Source Code) AGPL-3.0/Commons-Clause Ruby
  • Groupboard - Online whiteboard, audio/video conferencing, screen sharing, shared code editing and optional session recording/playback. ⊘ Proprietary Unknown
  • PrivMX WebMail - Alternative private mail system - web-based, end-to-end encrypted by design, self-hosted, decentralized, uses independent PKI. Easy to install and administrate, freeware, open-source. ⊘ Proprietary PHP
  • Virola Messenger - Instant messaging and collaboration tool with private and group chat rooms, continuous voice and video meetings, files sharing, issue tracking with integrated task board. Alternative to Slack and others. ⊘ Proprietary C++
  • WorkAdventure - Virtual office / virtual conference application presented as a 16-bit RPG video game. (Demo, Source Code) AGPL-3.0/Commons-Clause Docker

Communication - Email - Mailing Lists and Newsletters

  • Sendy - Self-hosted email newsletter application that lets you send bulk emails via Amazon Simple Email Service (SES) or other SMTP services. ⊘ Proprietary PHP

Communication - SIP

  • 3CX - Full-featured PABX system, with call queues, built-in web conferencing, live chat and social media messaging all on one system. ⊘ Proprietary Unknown

Content Management Systems (CMS)

  • CraftCMS - Content-first CMS that aims to make life enjoyable for developers and content managers alike. (Demo, Source Code) ⊘ Proprietary PHP
  • Kirby - File-based CMS. Easy to setup. Easy to use. Flexible as hell. (Source Code) ⊘ Proprietary PHP
  • october - Self-hosted CMS platform based on the Laravel PHP Framework. (Source Code) ⊘ Proprietary PHP

Database Management

  • Cluster Control - Setup many databases in few clicks with monitoring, load balancing and more. ⊘ Proprietary deb/Ansible/Shell/Docker

Document Management - E-books

  • Bookwyrm - Social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. (Source Code) ⊘ Proprietary Python
  • Ubooquity - Free to use, versatile, lightweight, multi-platform, and secure home server for your comic and e-book library. ⊘ Proprietary Java

E-commerce

  • Sharetribe - Open-source platform to create your own peer-to-peer marketplace, also available with SaaS model. (Source Code) ⊘ Proprietary Ruby

File Transfer & Synchronization

  • FileRun - Complete solution for your files with integration with Google and Office. (Demo) ⊘ Proprietary PHP
  • Resilio Sync - Proprietary peer-to-peer file synchronisation tool. ⊘ Proprietary Unknown
  • Yetishare - Powerful file hosting script with support for Amazon S3, Wasabi, Backblaze, local, direct and SFTP storage. (Demo) ⊘ Proprietary PHP

File Transfer - Object Storage & File Servers

Games

  • Cubiks-2048 - Clone of 2048 game in 3D. (Demo) CC-BY-NC-4.0 Javascript
  • untrusted - Unique puzzle game designed for geeks and developers, where you solve the puzzles in the game by reading and writing Javascript. (Demo) CC-BY-NC-SA-3.0 Nodejs

Knowledge Management Tools

  • Wiznote - Manage your knowledge in documents with folders, markdown, full text search and webpage collection support. (Demo, Clients) ⊘ Proprietary Docker

Maps and Global Positioning System (GPS)

  • MapTiler Server - Software for self-hosting of OpenStreetMap vector tiles, satellite imagery, own geodata and data from PostGIS database. ⊘ Proprietary Unknown

Media Streaming - Video Streaming

  • Channels DVR Server - Flexible server providing a whole home self hosted DVR experience for Channels. ⊘ Proprietary Unknown
  • Emby - Home media server supporting both DLNA and DIAL (Chromecast) devices out-of-the-box. ⊘ Proprietary C#
  • Plex - Centralized home media playback system with a powerful central server. ⊘ Proprietary Unknown
  • Subsonic - Web-based media streamer and jukebox. (Demo) ⊘ Proprietary Unknown

Miscellaneous

  • GameVault - Organize, download, and play DRM-free games from your own server, complete with metadata enrichment and user-friendly interface. (Demo, Source Code) CC-BY-NC-SA-4.0 Nodejs/Docker
  • Keygen - Self-hosted software licensing and distribution API. Elastic-2.0 Ruby
  • RemoteUtilities - Remote Utilities is self-hosted remote support software for LAN administration and remote support over the Internet. ⊘ Proprietary Unknown
  • ScreenConnect - Lightning-fast remote support and remote access to connect instantly and solve problems faster. ⊘ Proprietary Unknown

Money, Budgeting & Management

  • Akaunting - Akaunting is a free, online and open source accounting software designed for small businesses and freelancers. (Source Code) BUSL-1.1 PHP
  • Pancake - Online invoicing, project management, time tracking and proposal software. ⊘ Proprietary PHP

Photo and Video Galleries

  • Lomorage - Google photo alternative via simple self-hosting software. Supported clients: iOS, Android, Web, MAC/Windows. Backend can run on Raspberry pi, Armbian, MAC/Windows/Linux. (Source Code) ⊘ Proprietary Go
  • PhotoStructure - All your family’s photos and videos automatically organized into a fun and beautiful website. Runs via Docker, NodeJS, or native desktop installers. ⊘ Proprietary Nodejs
  • Reservo - Scalable image hosting script with support for CDNs, paid account upgrades, advertising spots and drag & drop upload. (Demo) ⊘ Proprietary PHP
  • Single File PHP Gallery - Web gallery in one single PHP file. ⊘ Proprietary PHP

Proxy

  • inlets - Expose your local endpoints to the Internet - with a Kubernetes integration, Docker image and CLI available. (Source Code) ⊘ Proprietary Go/Docker

Recipe Management

  • Tandoor Recipes - Django application to manage, tag and search recipes using either built-in models or external storage providers hosting PDFs, Images or other files. (Demo, Source Code) MIT/Commons-Clause Python/Docker/K8S

Remote Access

  • SparkView - Browser-based remote access solution. No VPN client; just deploy the software in the DMZ. Access VMs, desktops, servers, and apps anytime, anywhere, without complex and costly client rollouts or user management. ⊘ Proprietary Java

Resource Planning

  • YetiForce - Opensource CRM ERP with sales, marketing, accounting, HR, Support, Logistics and GDPR support. (Demo, Source Code) ⊘ Proprietary PHP

Search Engines

Self-hosting Solutions

  • Axigen - Turnkey messaging solution for small & micro businesses, integration projects or test environments. ⊘ Proprietary Unknown
  • Cloudron - Open-core software allowing you to effortlessly self-host web apps on your server. (Demo, Source Code) ⊘ Proprietary Nodejs/Docker
  • Cosmos - Cosmos is a self-hosted platform for running server applications securely and with built-in privacy features. It acts as a secure gateway to your application, as well as a server manager. (Source Code) Apache-2.0/Commons-Clause Docker/Go
  • Easypanel - Modern server control panel powered by Docker. ⊘ Proprietary Docker
  • hMailServer - Open-source e-mail server for Microsoft Windows. (Source Code) ⊘ Proprietary C++
  • Poste.io - Full-featured solution for your Email server. Native implementation of last anti-SPAM methods, webmail and easy administration included. Free tier available. (Demo) ⊘ Proprietary Unknown
  • Umbrel - A beautiful personal server OS for self-hosting. Install on a Raspberry Pi 4 or Ubuntu/Debian. (Source Code) ⊘ Proprietary Nodejs/Docker
  • Unraid - Linux-based operating system designed to run on home media server setups. ⊘ Proprietary Unknown

Software Development - API Management

  • Hook0 - A Webhooks-as-a-service (WaaS) that makes it easy for online products to provide webhooks. Dispatch up to 3,000 events/month with 7 days of history retention for free. (Source Code) SSPL-1.0 Rust/Nodejs/Docker

Software Development - Low Code

  • Budibase - Build and automate internal tools, admin panels, dashboards, CRUD apps, and more, in minutes (alternative to Outsystems, Retool, Mendix, Appian). (Source Code) ⊘ Proprietary Nodejs/Docker/K8S
  • Dify.ai - Build, test and deploy LLM applications. (Source Code) Apache-2.0/Commons-Clause Docker

Software Development - Project Management

  • 92five - Self-hosted project management application. ⊘ Proprietary PHP
  • Active Collab - Project management. ⊘ Proprietary PHP
  • BitBucket Server - Enterprise-level Git solution similar to GitLab. ⊘ Proprietary Java
  • Buddy Enterprise - Git and Continuous Integration/Delivery Platform. ⊘ Proprietary Nodejs/Java
  • Crucible - Peer code review application. ⊘ Proprietary Java
  • Duet - Invoicing and project management with an integrated client portal. (Demo) ⊘ Proprietary PHP
  • Kanban Tool - Advanced Kanban boards with time tracking. ⊘ Proprietary Ruby
  • Kantree - Work management and collaboration. ⊘ Proprietary Python
  • Solo - Free project management app created for freelancers. Create contacts, manage tasks, upload files, track project progress, and keep notes. (Demo) ⊘ Proprietary PHP

Software Development - Testing

  • Bamboo - Continuous integration server. ⊘ Proprietary Java
  • BrowserStack Automate TurboScale - Scalable browser automation grid on your cloud (AWS, GCP and Azure) supporting Selenium and Playwright. ⊘ Proprietary Docker
  • Grai - Automated integration testing. Uses data lineage to statically analyze the impact of a data change across your entire data stack. (Source Code) Elastic-2.0 Docker
  • Moon - Efficient Selenium protocol implementation running everything in Kubernetes or Openshift. ⊘ Proprietary Go
  • Sentry Self-Hosted - Powerful error tracking platform with wide language support and a robust API. (Source Code) BUSL-1.1 Python/Django

Ticketing

  • Deskpro - On-Premise help desk software that includes email, chat, voice & help centre publishing. Full visible source code and API. ⊘ Proprietary Unknown
  • Erxes - Marketing, sales, and customer service platform designed to help businesses attract more engaged customers. (Source Code) AGPL-3.0/Commons-Clause Docker/Nodejs
  • Full Help - Simple, easy to use help desk & knowledge base software. Custom branding, custom themes, restful API, communication channels, multi-company support, multi-language support, and much more! At least 1 new release per month. ⊘ Proprietary PHP
  • JIRA - Professional and extensible issue tracker. ⊘ Proprietary Java
  • Jitbit Helpdesk - Self-hosted help desk software - simple but powerful. (Demo) ⊘ Proprietary .NET
  • SupportPal - Powerful help desk software - easy, fast and intuitive. (Demo) ⊘ Proprietary PHP

Time Tracking

  • Anuko - Simple time and project tracking on a self-hosted basis. SSPL-1.0 PHP
  • Virtual TimeClock - Powerful, easy-to-use time tracking software. (Demo) ⊘ Proprietary Unknown

List of Licenses

HAProxy as an upstream reverse proxy

HAPRoxy ?

HAProxy, or High Availability Proxy is used by RightScale for load balancing in the cloud.Load-balancer servers are also known as front-end servers. Generally, their purpose is to direct users to available application servers.

  • In this guide, we use HAPRoxy to filter the TCP based requests on the basis of SNI to forward that request to its apropriate service

Installation

If you use debian or Ubuntu ditros search Debian Haproxy then you will find the link to install it.

Configuration

Typically, we define a frontend for a specific TCP based protocol like https and apply the configuration. The following conf is just a bootstrap sample to make you familliar with the haproxy.

frontend https
   bind public_ip:443
   mode tcp
   tcp-request inspect-delay 5s
   tcp-request content accept if { req_ssl_hello_type 1 }
   use_backend face if { req_ssl_sni -i yy.xx.ir }
   use_backend face if { req_ssl_sni -i zz.xx.ir }
   use_backend dns if { req_ssl_sni -i tt.xx.ir }
   use_backend blog if { req_ssl_sni -i uu.xx.ir }
   default_backend block

backend block
   mode tcp
   server block1 192.168.1.5:443

backend doh
   mode tcp
   server doh1 192.168.1.6:443

backend dns
   mode tcp
   server dns1 192.168.1.7:3006
   server dns2 192.168.1.8:3006
   
backend face
   mode tcp
   option ssl-hello-chk
   server face1 192.168.1.9:443
   server face2 192.168.1.10:443

backend blog
   mode tcp
   server blog1 192.168.1.11:443
  • For UDP based traffic, I refer you to the original Docs. It contains some pratical examples around proxifying UDP based DNS traffic.
Aug 2, 2024

Let's Deploy TON Site

Installing required tools

Use your personal account on your VPS not the root account. Install the following tools.

wget https://github.com/ton-utils/reverse-proxy/releases/download/v0.3.3/tonutils-reverse-proxy-linux-amd64

chmod +x tonutils-reverse-proxy-linux-amd64
  • then run it with your prefered domain
./tonutils-reverse-proxy-linux-amd64 --domain your-domain.ton

-If you want to change some settings, like proxy pass url open config.json file, edit and restart proxy. Default proxy pass url is http://127.0.0.1:80/

  • It asks for pay the fee and your website will be ready
  • Additionally, you can run with systemd.
Aug 2, 2024

Data

Useful data across the web.

Oct 7, 2024

Subsections of Data

RSS Feeds

#RSS Feeds

A curated list of RSS feeds (with OPML files).

Directory

Country OPML OPML (without category)
🇦🇺 Australia Australia.opml Australia.opml
🇧🇩 Bangladesh Bangladesh.opml Bangladesh.opml
🇧🇷 Brazil Brazil.opml Brazil.opml
🇨🇦 Canada Canada.opml Canada.opml
🇩🇪 Germany Germany.opml Germany.opml
🇪🇸 Spain Spain.opml Spain.opml
🇫🇷 France France.opml France.opml
🇬🇧 United Kingdom United Kingdom.opml United Kingdom.opml
🇭🇰 Hong Kong SAR China Hong Kong SAR China.opml Hong Kong SAR China.opml
🇮🇩 Indonesia Indonesia.opml Indonesia.opml
🇮🇪 Ireland Ireland.opml Ireland.opml
🇮🇳 India India.opml India.opml
🇮🇷 Iran Iran.opml Iran.opml
🇮🇹 Italy Italy.opml Italy.opml
🇯🇵 Japan Japan.opml Japan.opml
🇲🇲 Myanmar (Burma) Myanmar (Burma).opml Myanmar (Burma).opml
🇲🇽 Mexico Mexico.opml Mexico.opml
🇳🇬 Nigeria Nigeria.opml Nigeria.opml
🇵🇭 Philippines Philippines.opml Philippines.opml
🇵🇰 Pakistan Pakistan.opml Pakistan.opml
🇵🇱 Poland Poland.opml Poland.opml
🇷🇺 Russia Russia.opml Russia.opml
🇺🇦 Ukraine Ukraine.opml Ukraine.opml
🇺🇸 United States United States.opml United States.opml
🇿🇦 South Africa South Africa.opml South Africa.opml

Categories

Category OPML OPML (without category)
Android Android.opml Android.opml
Android Development Android Development.opml Android Development.opml
Apple Apple.opml Apple.opml
Architecture Architecture.opml Architecture.opml
Beauty Beauty.opml Beauty.opml
Books Books.opml Books.opml
Business & Economy Business & Economy.opml Business & Economy.opml
Cars Cars.opml Cars.opml
Cricket Cricket.opml Cricket.opml
Interior design Interior design.opml Interior design.opml
DIY DIY.opml DIY.opml
Fashion Fashion.opml Fashion.opml
Food Food.opml Food.opml
Football Football.opml Football.opml
Funny Funny.opml Funny.opml
Gaming Gaming.opml Gaming.opml
History History.opml History.opml
iOS Development iOS Development.opml iOS Development.opml
Movies Movies.opml Movies.opml
Music Music.opml Music.opml
News News.opml News.opml
Personal finance Personal finance.opml Personal finance.opml
Photography Photography.opml Photography.opml
Programming Programming.opml Programming.opml
Science Science.opml Science.opml
Space Space.opml Space.opml
Sports Sports.opml Sports.opml
Startups Startups.opml Startups.opml
Tech Tech.opml Tech.opml
Television Television.opml Television.opml
Tennis Tennis.opml Tennis.opml
Travel Travel.opml Travel.opml
UI / UX UI / UX.opml UI / UX.opml
Web Development Web Development.opml Web Development.opml

Country Sources

🇦🇺 Australia

Source Primary Feed Url All Feeds
Latest News and News Headlines - Daily Telegraph https://www.dailytelegraph.com.au/news/breaking-news/rss https://www.dailytelegraph.com.au/help-rss
Sydney Morning Herald - Latest News https://www.smh.com.au/rss/feed.xml https://www.smh.com.au/rssheadlines
Latest News and News Headlines - Herald Sun https://www.heraldsun.com.au/news/breaking-news/rss http://www.heraldsun.com.au/help-rss
ABC News https://www.abc.net.au/news/feed/1948/rss.xml https://www.abc.net.au/news/topics/
The Age - Latest News https://www.theage.com.au/rss/feed.xml https://www.theage.com.au/rssheadlines
The Courier Mail https://www.couriermail.com.au/rss https://www.couriermail.com.au/help-rss
PerthNow https://www.perthnow.com.au/news/feed https://www.perthnow.com.au/help-rss
The Canberra Times - Local News https://www.canberratimes.com.au/rss.xml
Brisbane Times - Latest News https://www.brisbanetimes.com.au/rss/feed.xml https://www.brisbanetimes.com.au/rssheadlines
Independent Australia http://feeds.feedburner.com/IndependentAustralia
Business News - Latest Headlines https://www.businessnews.com.au/rssfeed/latest.rss
InDaily https://indaily.com.au/feed/
The Mercury https://www.themercury.com.au/rss https://www.themercury.com.au/help-rss
Crikey https://feeds.feedburner.com/com/rCTl https://www.crikey.com.au/feeds/
KUSA - News http://rssfeeds.9news.com/kusa/home&x=1 https://www.9news.com/rss
Michael West https://www.michaelwest.com.au/feed/

🇧🇩 Bangladesh

Source Primary Feed Url All Feeds
The Daily Star https://www.thedailystar.net/frontpage/rss.xml https://www.thedailystar.net/rss
BD24Live.com https://www.bd24live.com/feed
bdnews24.com - Home https://bdnews24.com/?widgetName=rssfeed&widgetId=1150&getXmlFeed=true
Bangla News https://www.banglanews24.com/rss/rss.xml
JUGANTOR https://www.jugantor.com/feed/rss.xml
jagonews24.com - rss Feed https://www.jagonews24.com/rss/rss.xml
kalerkantho Kantho https://www.kalerkantho.com/rss.xml
প্রথম আলো https://www.prothomalo.com/feed/

🇧🇷 Brazil

Source Primary Feed Url All Feeds
Folha de S.Paulo - Em cima da hora - Principal https://feeds.folha.uol.com.br/emcimadahora/rss091.xml https://www1.folha.uol.com.br/feed/
Portal EBC - RSS http://www.ebc.com.br/rss/feed.xml http://www.ebc.com.br/rss
R7 - Notícias https://noticias.r7.com/feed.xml http://www.r7.com/institucional/rss
UOL http://rss.home.uol.com.br/index.xml https://rss.uol.com.br/
The Rio Times https://riotimesonline.com/feed/
Brasil Wire http://www.brasilwire.com/feed/
Jornal de Brasília https://jornaldebrasilia.com.br/feed/

🇨🇦 Canada

Source Primary Feed Url All Feeds
CBC - Top Stories News https://www.cbc.ca/cmlink/rss-topstories https://www.cbc.ca/rss/
CTVNews.ca - Top Stories - Public RSS https://www.ctvnews.ca/rss/ctvnews-ca-top-stories-public-rss-1.822009 https://www.ctvnews.ca/more/rss-feeds-for-ctv-news
https://globalnews.ca/feed/ https://globalnews.ca/pages/feeds/
Financial Post https://business.financialpost.com/feed/
National Post https://nationalpost.com/feed/
Ottawa Citizen https://ottawacitizen.com/feed/
The Province https://theprovince.com/feed/
LaPresse.ca - Actualités https://www.lapresse.ca/actualites/rss https://www.lapresse.ca/faq.php#rss
Toronto Star https://www.thestar.com/content/thestar/feed.RSSManagerServlet.articles.topstories.rss https://www.thestar.com/about/rssfeeds.html
Toronto Sun - RSS Feed https://torontosun.com/category/news/feed https://torontosun.com/sitemap

🇩🇪 Germany

Source Primary Feed Url All Feeds
ZEIT ONLINE - Nachrichten, Hintergründe und Debatten http://newsfeed.zeit.de/index https://www.zeit.de/hilfe/hilfe#rss
FOCUS Online https://rss.focus.de/fol/XML/rss_folnews.xml https://www.focus.de/service/rss/immer-top-informiert-rss-auf-focus-online_aid_13713.html
Aktuell - FAZ.NET https://www.faz.net/rss/aktuell/ https://www.faz.net/faz-net-services/widgets/rss-feed-nichts-verpassen-mit-den-rss-angeboten-von-faz-net-11124617.html
tagesschau.de - Die Nachrichten der ARD http://www.tagesschau.de/xml/rss2 https://www.tagesschau.de/infoservices/rssfeeds/
Deutsche Welle https://rss.dw.com/rdf/rss-en-all https://www.dw.com/en/service/rss/s-31500

🇪🇸 Spain

Source Primary Feed Url All Feeds
The Local https://feeds.thelocal.com/rss/es
EL PAÍS: el periódico global https://feeds.elpais.com/mrss-s/pages/ep/site/elpais.com/portada https://servicios.elpais.com/rss/
España https://rss.elconfidencial.com/espana/ https://www.elconfidencial.com/rss/
ElDiario.es - ElDiario.es https://www.eldiario.es/rss/ https://www.eldiario.es/Feeds.html
Portada // expansion https://e00-expansion.uecdn.es/rss/portada.xml https://www.expansion.com/rss/
El Periódico - portada https://www.elperiodico.com/es/rss/rss_portada.xml https://www.elperiodico.com/es/rss/portada_rss.shtml
huffingtonpost.es https://www.huffingtonpost.es/feeds/index.xml
Euro Weekly News Spain https://www.euroweeklynews.com/feed/
Agencia EFE - www.efe.com - English edition https://www.efe.com/efe/english/4/rss

🇫🇷 France

Source Primary Feed Url All Feeds
france24.com https://www.france24.com/en/rss https://www.france24.com/en/rss-feeds
Mediapart https://www.mediapart.fr/articles/feed
Paris Star https://www.parisstaronline.com/feed
Le Monde.fr - Actualités et Infos en France et dans le monde https://www.lemonde.fr/rss/une.xml https://www.lemonde.fr/actualite-medias/article/2019/08/12/les-flux-rss-du-monde-fr_5498778_3236.html
L’Obs - A la une https://www.nouvelobs.com/a-la-une/rss.xml https://www.nouvelobs.com/rss
Franceinfo - Les Titres https://www.francetvinfo.fr/titres.rss https://www.francetvinfo.fr/rss/
Le Huffington Post https://www.huffingtonpost.fr/feeds/index.xml
La Dépêche du Midi : actualités et info en direct de la région Occitanie et des environs - ladepeche.fr https://www.ladepeche.fr/rss.xml
Ministry for Europe and Foreign Affairs - Actualités https://www.diplomatie.gouv.fr/spip.php?page=backend-fd&lang=en
L'essentiel https://www.sudouest.fr/essentiel/rss.xml https://www.sudouest.fr/rss/
Ouest-France - Actualité https://www.ouest-france.fr/rss-en-continu.xml https://www.ouest-france.fr/services/rss/

🇬🇧 United Kingdom

Source Primary Feed Url All Feeds
BBC News - Home http://feeds.bbci.co.uk/news/rss.xml https://www.bbc.com/news/10628494
World news - The Guardian https://www.theguardian.com/world/rss https://www.theguardian.com/help/feeds
Home - Mail Online https://www.dailymail.co.uk/home/index.rss https://www.dailymail.co.uk/home/rssMenu.html
The Independent UK http://www.independent.co.uk/news/uk/rss https://www.independent.co.uk/service/rss-feeds-775086.html
Daily Express :: News Feed http://feeds.feedburner.com/daily-express-news-showbiz https://www.express.co.uk/feeds

🇭🇰 Hong Kong SAR China

Source Primary Feed Url All Feeds
Hong Kong Free Press HKFP https://www.hongkongfp.com/feed/
The Standard - Latest News https://www.thestandard.com.hk/newsfeed/latest/news.xml
頭條日報 Headline Daily - 頭條網 https://hd.stheadline.com/rss/news/daily/
香港新聞RSS - 香港經濟日報 hket.com https://www.hket.com/rss/hongkong https://www.hket.com/rss
News - South China Morning Post https://www.scmp.com/rss/91/feed https://www.scmp.com/rss
hongkongnews.net latest rss headlines http://feeds.hongkongnews.net/rss/b82693edf38ebff8

🇮🇩 Indonesia

Source Primary Feed Url All Feeds
Republika Online RSS Feed https://www.republika.co.id/rss/
Tribunnews.com https://www.tribunnews.com/rss
Merdeka.com https://www.merdeka.com/feed/
Suara.com https://www.suara.com/rss https://www.suara.com/feed

🇮🇪 Ireland

Source Primary Feed Url All Feeds
TheJournal.ie https://www.thejournal.ie/feed/
All: BreakingNews.ie https://feeds.breakingnews.ie/bntopstories https://www.breakingnews.ie/info/rss/
The42 https://www.the42.ie/feed/
IrishExaminer.com https://feeds.feedburner.com/ietopstories https://www.irishexaminer.com/breakingnews/ireland/syndication-830438.html
IrishCentral.com - Top Stories https://feeds.feedburner.com/IrishCentral
Irish Mirror - Home https://www.irishmirror.ie/?service=rss

🇮🇳 India

Source Primary Feed Url All Feeds
BBC News - India http://feeds.bbci.co.uk/news/world/asia/india/rss.xml
India - The Guardian https://www.theguardian.com/world/india/rss
Times of India https://timesofindia.indiatimes.com/rssfeedstopstories.cms https://timesofindia.indiatimes.com/rss.cms
The Hindu - Home https://www.thehindu.com/feeder/default.rss https://www.thehindu.com/rssfeeds/
NDTV News - Topstories https://feeds.feedburner.com/ndtvnews-top-stories https://www.ndtv.com/rss
India Today - Latest Stories https://www.indiatoday.in/rss/home https://www.indiatoday.in/rss
Front Page - The Indian Express http://indianexpress.com/print/front-page/feed/ https://indianexpress.com/syndication/
Top World News- News18.com https://www.news18.com/rss/world.xml https://www.news18.com/rss/
India News https://www.dnaindia.com/feeds/india.xml https://www.dnaindia.com/feeds
Firstpost India Latest News https://www.firstpost.com/rss/india.xml https://www.firstpost.com/rss
Home Page https://www.business-standard.com/rss/home_page_top_stories.rss https://www.business-standard.com/rss-feeds/listing/
Outlook India https://www.outlookindia.com/rss/main/magazine https://www.outlookindia.com/rssfeed
Free Press Journal https://www.freepressjournal.in/stories.rss
Deccan Chronicle - Latest India news - Breaking news - Hyderabad News - World news - Business news - Politics - Technology news https://www.deccanchronicle.com/rss_feed/
Moneycontrol Latest News http://www.moneycontrol.com/rss/latestnews.xml http://www.moneycontrol.com/india/newsarticle/rssfeeds/rssfeeds.php
Economic Times https://economictimes.indiatimes.com/rssfeedsdefault.cms https://economictimes.indiatimes.com/rss.cms
News, Latest News, Today’s News Headlines, Breaking News, LIVE News - Oneindia https://www.oneindia.com/rss/news-fb.xml https://www.oneindia.com/rss
Scroll.in http://feeds.feedburner.com/ScrollinArticles.rss
The Financial Express https://www.financialexpress.com/feed/ https://www.financialexpress.com/syndication/
Business Line - Home https://www.thehindubusinessline.com/feeder/default.rss https://www.thehindubusinessline.com/rssfeeds/
TechGenyz http://feeds.feedburner.com/techgenyz
Top Stories News - Gujarat Samachar : World’s Leading Gujarati Newspaper https://www.gujaratsamachar.com/rss/top-stories https://www.gujaratsamachar.com/rss
Marathi News: मराठी बातम्या,Latest News in Marathi, Breaking Marathi News, Marathi News Paper - Maharashtra Times https://maharashtratimes.com/rssfeedsdefault.cms https://maharashtratimes.com/rss.cms
Loksattaदेश-विदेश – Loksatta https://www.loksatta.com/desh-videsh/feed/ https://www.loksatta.com/loksatta-rss/
Latest News program News18 Lokmat https://lokmat.news18.com/rss/program.xml https://lokmat.news18.com/rss/
OpIndia https://feeds.feedburner.com/opindia
ThePrint https://theprint.in/feed/
Swarajya https://prod-qt-images.s3.amazonaws.com/production/swarajya/feed.xml
Latest And Breaking Hindi News Headlines, News In Hindi - अमर उजाला हिंदी न्यूज़ - - Amar Ujala https://www.amarujala.com/rss/breaking-news.xml https://www.amarujala.com/rss
Navbharat Times https://navbharattimes.indiatimes.com/rssfeedsdefault.cms https://navbharattimes.indiatimes.com/rss.cms
Patrika : India’s Leading Hindi News Portal http://api.patrika.com/rss/india-news https://www.patrika.com/rss.html
JansattaJansatta https://www.jansatta.com/feed/ https://www.jansatta.com/syndication/
Live Hindustan Rss feed https://feed.livehindustan.com/rss/3127 https://www.livehindustan.com/rss
देश - दैनिक भास्कर https://www.bhaskar.com/rss-feed/1061/ https://www.bhaskar.com/rss
ઈન્ડિયા - દિવ્ય ભાસ્કર https://www.divyabhaskar.co.in/rss-feed/1037/ https://www.divyabhaskar.co.in/rss/

🇮🇷 Iran

Source Primary Feed Url All Feeds
خبرگزاری باشگاه خبرنگاران - آخرین اخبار ایران و جهان - YJC https://www.yjc.ir/fa/rss/allnews https://www.yjc.ir/fa/rss
تابناک - TABNAK https://www.tabnak.ir/fa/rss/allnews https://www.tabnak.ir/fa/rss
خبرگزاری ایسنا - صفحه اصلی -ISNA News Agency https://www.isna.ir/rss https://www.isna.ir/rss-help
خبرگزاری مهر - اخبار ایران و جهان - Mehr News Agency https://www.mehrnews.com/rss https://www.mehrnews.com/rss
خبرگزاری خبرآنلاین - آخرین اخبار ایران و جهان - Khabaronline https://www.khabaronline.ir/rss https://www.khabaronline.ir/rss-help
اخبار ایران و جهان https://www.tasnimnews.com/fa/rss/feed/0/8/0/%D9%85%D9%87%D9%85%D8%AA%D8%B1%DB%8C%D9%86-%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D8%AA%D8%B3%D9%86%DB%8C%D9%85 https://www.tasnimnews.com/fa/rss
عصر ايران https://www.asriran.com/fa/rss/allnews https://www.asriran.com/fa/rss

🇮🇹 Italy

Source Primary Feed Url All Feeds
RSS di - ANSA.it https://www.ansa.it/sito/ansait_rss.xml https://www.ansa.it/sito/static/ansa_rss.html
The Local https://feeds.thelocal.com/rss/it
RSS DiariodelWeb.it https://www.diariodelweb.it/rss/home/ https://www.diariodelweb.it/rss/
Fanpage https://www.fanpage.it/feed/
Libero Quotidiano https://www.liberoquotidiano.it/rss.xml
Il Mattino Web https://www.ilmattino.it/?sez=XML&args&p=search&args[box]=Home&limit=20&layout=rss
Adnkronos - ultimoratop http://rss.adnkronos.com/RSS_PrimaPagina.xml https://www.adnkronos.com/rss
Milan News https://www.milannews.it/rss/ https://www.milannews.it/info_rss/
Internazionale https://www.internazionale.it/sitemaps/rss.xml https://www.internazionale.it/notizie/2014/11/20/sono-tornati-gli-rss
Panorama https://www.panorama.it/feeds/feed.rss
Italy - The Guardian https://www.theguardian.com/world/italy/rss
Repubblica.it > Homepage https://www.repubblica.it/rss/homepage/rss2.0.xml https://www.repubblica.it/static/servizi/rss/index.html
Il Post https://www.ilpost.it/feed/

🇯🇵 Japan

Source Primary Feed Url All Feeds
Japan Times latest articles https://www.japantimes.co.jp/feed/topstories/
Japan Today https://japantoday.com/feed
News On Japan http://www.newsonjapan.com/rss/top.xml
All - Kyodo News+ https://english.kyodonews.net/rss/all.xml
BRIDGE(ブリッジ)テクノロジー&スタートアップ情報 http://feeds.feedburner.com/SdJapan
NYT > Japan https://www.nytimes.com/svc/collections/v1/publish/http://www.nytimes.com/topic/destination/japan/rss.xml
ライブドアニュース - 主要トピックス https://news.livedoor.com/topics/rss/top.xml
朝日新聞デジタル http://rss.asahi.com/rss/asahi/newsheadlines.rdf

🇲🇲 Myanmar (Burma)

Source Primary Feed Url All Feeds
Myanmar Gazette News Media Forum Network http://myanmargazette.net/feed
DVB Multimedia Group http://www.dvb.no/feed
THIT HTOO LWIN (Daily News) http://www.thithtoolwin.com/feeds/posts/default

🇲🇽 Mexico

Source Primary Feed Url All Feeds
Mexico - The Guardian https://www.theguardian.com/world/mexico/rss
Excélsior - RSS https://www.excelsior.com.mx/rss.xml
Reforma https://www.reforma.com/rss/portada.xml https://www.reforma.com/libre/estatico/rss/
Lo último en Vanguardia MX https://vanguardia.com.mx/rss.xml
Portada, El Siglo de Torreón https://www.elsiglodetorreon.com.mx/index.xml https://www.elsiglodetorreon.com.mx/rss/
El Financiero https://www.elfinanciero.com.mx/arc/outboundfeeds/rss/?outputType=xml
ElNorte https://www.elnorte.com/rss/portada.xml https://www.elnorte.com/libre/estatico/rss/
El Informador :: Noticias de Jalisco, México, Deportes & Entretenimiento https://www.informador.mx/rss/ultimas-noticias.xml https://www.informador.mx/pages/rss.html
24 Horas https://www.24-horas.mx/feed/
DEBATE https://www.debate.com.mx/rss/feed.xml
Mexico News Daily https://mexiconewsdaily.com/feed/
El Diario https://diario.mx/jrz/media/sitemaps/rss.xml
8 Columnas https://8columnas.com.mx/feed/
https://www.eluniversal.com.mx/seccion/1671/rss.xml

🇳🇬 Nigeria

Source Primary Feed Url All Feeds
All Content http://saharareporters.com/feeds/latest/feed http://saharareporters.com/rss
Nigeria News Links - Today’s Updates - Nigerian Bulletin https://www.nigerianbulletin.com/forums/-/index.rss
Nigerian News. Latest Nigeria News. Your online Nigerian Newspaper. http://feeds.feedburner.com/Nigerianeye
Legit.ng https://www.legit.ng/rss/all.rss
Latest Nigeria News, Nigerian Newspapers, Politics https://thenationonlineng.net/feed/
Daily Post Nigeria https://dailypost.ng/feed
Premium Times Nigeria https://www.premiumtimesng.com/feed
Information Nigeria https://www.informationng.com/feed
The Guardian Nigeria News – Nigeria and World News https://guardian.ng/feed/
Tribune Online http://tribuneonlineng.com/feed/

🇵🇭 Philippines

Source Primary Feed Url All Feeds
INQUIRER.net https://www.inquirer.net/fullfeed
Interaksyon https://www.interaksyon.com/feed/
philstar.com - RSS Headlines https://www.philstar.com/rss/headlines https://www.philstar.com/rss
BusinessWorld https://www.bworldonline.com/feed/
https://www.sunstar.com.ph/ https://www.sunstar.com.ph/rssFeed/selected https://www.sunstar.com.ph/rss
PhilNews.XYZ https://www.philnews.xyz/feeds/posts/default?alt=rss
Manila Standard https://manilastandard.net/feed/all https://manilastandard.net/rss
GMA News Online / News https://data.gmanews.tv/gno/rss/news/feed.xml https://www.gmanetwork.com/news/rss/
Current PH https://currentph.com/feed/
Top Gear: The Philippine authority on cars and the automotive industry https://www.topgear.com.ph/feed/rss1
Eagle News https://www.eaglenews.ph/feed/
UNBOX PH https://www.unbox.ph/feed/
Tempo – The Nation’s Fastest Growing Newspaper http://tempo.com.ph/feed/
Abante Tonite https://tonite.abante.com.ph/feed/
BusinessMirror https://businessmirror.com.ph/feed/
Latest News - Philippine News Agency https://www.pna.gov.ph/latest.rss
TechPinas : Philippines’ Technology News, Tips and Reviews Blog http://feeds.feedburner.com/Techpinas
BICOL STANDARD - Bicol News - Bicol Newspaper http://www.bicolstandard.com/feeds/posts/default?alt=rss

🇵🇰 Pakistan

Source Primary Feed Url All Feeds
The Express Tribune https://tribune.com.pk/feed/home https://tribune.com.pk/rss/
The Nation - Top Stories https://nation.com.pk/rss/top-stories https://nation.com.pk/rss
قومی خبریں https://jang.com.pk/rss/1/1 https://jang.com.pk/rss
The News International - Pakistan https://www.thenews.com.pk/rss/1/1 https://www.thenews.com.pk/rss
News Blog https://newsnblogs.com/feed/
UrduPoint.com All Urdu News https://www.urdupoint.com/rss/urdupoint.rss https://www.urdupoint.com/rss/
ایکسپریس اردو https://www.express.pk/feed/ https://www.express.pk/rssfeeds/

🇵🇱 Poland

Source Primary Feed Url All Feeds
Najnowsze http://feeds.feedburner.com/wPolitycepl
Newsweek Polska https://www.newsweek.pl/rss.xml
Dziennik.pl Dziennik - dziennik.pl http://rss.dziennik.pl/Dziennik-PL/
www.wirtualnemedia.pl https://www.wirtualnemedia.pl/rss/wirtualnemedia_rss.xml https://www.wirtualnemedia.pl/rss.html
GazetaPrawna.pl - biznes, podatki, prawo, finanse, wiadomości, praca http://rss.gazetaprawna.pl/GazetaPrawna https://www.gazetaprawna.pl/rss/
https://www.rp.pl https://www.rp.pl/rss/1019
Polska Agencja Prasowa SA https://www.pap.pl/rss.xml
RMF24.pl https://www.rmf24.pl/feed https://www.rmf24.pl/kanaly/rss

🇷🇺 Russia

Source Primary Feed Url All Feeds
Lenta.ru : Новости https://lenta.ru/rss
Вести.Ru https://www.vesti.ru/vesti.rss
Газета.Ru - Первая полоса https://www.gazeta.ru/export/rss/first.xml https://www.gazeta.ru/export_news.shtml
Все материалы - Московский Комсомолец https://www.mk.ru/rss/index.xml https://www.mk.ru/rss/
Российская Газета https://rg.ru/xml/index.xml
NEWSru.com :: Главные новости https://rss.newsru.com/top/big/ https://www.newsru.com/rss/
RT - Daily news https://www.rt.com/rss/ https://www.rt.com/rss-feeds/
Meduza.io https://meduza.io/rss/all
Russia Insider Daily Headlines https://russia-insider.com/en/all-content/rss https://russia-insider.com/en/rss_feeds
TASS http://tass.com/rss/v2.xml
The Moscow Times - Independent News From Russia https://www.themoscowtimes.com/rss/news https://www.themoscowtimes.com/page/rss
Газета “Коммерсантъ”. Главное https://www.kommersant.ru/RSS/main.xml https://www.kommersant.ru/rss-list
PravdaReport https://www.pravdareport.com/export.xml

🇺🇦 Ukraine

Source Primary Feed Url All Feeds
News Agency UNIAN https://rss.unian.net/site/news_eng.rss
ТЕЛЕГРАФ - последние новости Украины и мира https://telegraf.com.ua/yandex-feed/
Последние новости на сайте korrespondent.net http://k.img.com.ua/rss/ru/all_news2.0.xml https://korrespondent.net/rss_subscription/
Цензор.НЕТ - Новости https://censor.net.ua/includes/news_ru.xml https://censor.net.ua/feed
Новини на tsn.ua https://tsn.ua/rss/full.rss
Українська правда https://www.pravda.com.ua/rss/ https://www.pravda.com.ua/rss-info/
Гордон - Самые популярные материалы https://gordonua.com/xml/rss_category/top.html https://gordonua.com/rsslist.html
НВ https://nv.ua/rss/all.xml https://nv.ua/rss
Информационное агентство УНИАН https://rss.unian.net/site/news_rus.rss
Еспресо - український погляд на світ! https://espreso.tv/rss
Gazeta.ua https://gazeta.ua/rss
Вести.ua https://vesti.ua/feeds/partners

🇺🇸 United States

Source Primary Feed Url All Feeds
World News - Breaking News, Top Stories https://www.huffpost.com/section/world-news/feed https://www.huffpost.com/syndication
NYT > Top Stories https://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml https://archive.nytimes.com/www.nytimes.com/services/xml/rss/index.html
FOX News http://feeds.foxnews.com/foxnews/latest https://www.foxnews.com/about/rss/
World http://feeds.washingtonpost.com/rss/world https://www.washingtonpost.com/discussions/2018/10/12/washington-post-rss-feeds/
WSJ.com: World News https://feeds.a.dj.com/rss/RSSWorldNews.xml https://www.wsj.com/news/rss-news-and-feeds
World & Nation https://www.latimes.com/world-nation/rss2.0.xml https://www.latimes.com/feeds
CNN.com - RSS Channel - App International Edition http://rss.cnn.com/rss/edition.rss https://edition.cnn.com/services/rss/
Yahoo News - Latest News & Headlines https://news.yahoo.com/rss/mostviewed https://developer.yahoo.com/rss//
US Top News and Analysis https://www.cnbc.com/id/100003114/device/rss/rss.html https://www.cnbc.com/rss-feeds/
Playbook https://rss.politico.com/playbook.xml https://www.politico.com/rss

🇿🇦 South Africa

Source Primary Feed Url All Feeds
SowetanLIVE https://www.sowetanlive.co.za/rss/?publication=sowetan-live https://www.sowetanlive.co.za/rss-feeds/
BusinessTech https://businesstech.co.za/news/feed/
TechCentral https://techcentral.co.za/feed
News24 Top Stories http://feeds.news24.com/articles/news24/TopStories/rss https://www.news24.com/SiteElements/Services/News24-RSS-Feeds-20111202-2
Eyewitness News - Latest News https://ewn.co.za/RSS%20Feeds/Latest%20News https://ewn.co.za/RSSFeeds
The Citizen https://citizen.co.za/feed/
Daily Maverick https://www.dailymaverick.co.za/dmrss/
Moneyweb https://www.moneyweb.co.za/feed/
IOL section feed for News http://rss.iol.io/iol/news https://www.iol.co.za/rss
TimesLIVE https://www.timeslive.co.za/rss/ https://www.timeslive.co.za/rss-feeds/
The South African https://www.thesouthafrican.com/feed/
Axios https://api.axios.com/feed/

Android

Title RSS Feed Url Domain
All About Android (Audio) https://feeds.twit.tv/aaa.xml twit.tv
Android https://blog.google/products/android/rss blog.google
Android https://www.reddit.com/r/android/.rss reddit.com
Android Authority https://www.androidauthority.com/feed androidauthority.com
Android Authority https://www.youtube.com/feeds/videos.xml?user=AndroidAuthority youtube.com
Android Authority Podcast https://androidauthority.libsyn.com/rss androidauthority.com
Android Central - Android Forums, News, Reviews, Help and Android Wallpapers http://feeds.androidcentral.com/androidcentral androidcentral.com
Android Central Podcast http://feeds.feedburner.com/AndroidCentralPodcast androidcentral.com
Android Community https://androidcommunity.com/feed/ androidcommunity.com
Android Police – Android news, reviews, apps, games, phones, tablets http://feeds.feedburner.com/AndroidPolice androidpolice.com
AndroidGuys https://www.androidguys.com/feed androidguys.com
Cult of Android https://www.cultofandroid.com/feed cultofandroid.com
Cyanogen Mods https://www.cyanogenmods.org/feed cyanogenmods.org
Droid Life https://www.droid-life.com/feed droid-life.com
GSMArena.com - Latest articles https://www.gsmarena.com/rss-news-reviews.php3 gsmarena.com
Phandroid http://feeds2.feedburner.com/AndroidPhoneFans phandroid.com
TalkAndroid http://feeds.feedburner.com/AndroidNewsGoogleAndroidForums talkandroid.com
xda-developers https://data.xda-developers.com/portal-feed xda-developers.com

Android Development

Title RSS Feed Url Domain
Android - Buffer Resources https://buffer.com/resources/android/rss/ buffer.com
Android Developers https://www.youtube.com/feeds/videos.xml?user=androiddevelopers youtube.com
Android Developers - Medium https://medium.com/feed/androiddevelopers medium.com
Android Developers Backstage http://feeds.feedburner.com/blogspot/androiddevelopersbackstage androidbackstage.blogspot.com
Android Developers Blog http://feeds.feedburner.com/blogspot/hsDu android-developers.googleblog.com
Android Weekly Archive Feed https://us2.campaign-archive.com/feed?u=887caf4f48db76fd91e20a06d&id=4eb677ad19 us2.campaign-archive.com
Android in Instagram Engineering on Medium https://instagram-engineering.com/feed/tagged/android instagram-engineering.com
Android in MindOrks on Medium https://medium.com/feed/mindorks/tagged/android medium.com
Android in The Airbnb Tech Blog on Medium https://medium.com/feed/airbnb-engineering/tagged/android medium.com
Dan Lew Codes https://blog.danlew.net/rss/ blog.danlew.net
Developing Android Apps https://reddit.com/r/androiddev.rss reddit.com
Fragmented - The Software Podcast https://feeds.simplecast.com/LpAGSLnY fragmentedpodcast.com
Handstand Sam https://handstandsam.com/feed/ handstandsam.com
Jake Wharton https://jakewharton.com/atom.xml jakewharton.com
JetBrains News - JetBrains Blog https://blog.jetbrains.com/blog/feed blog.jetbrains.com
Joe Birch https://joebirch.co/feed joebirch.co
Kotlin https://www.youtube.com/feeds/videos.xml?playlist_id=PLQ176FUIyIUa6SChjajjVc-LMzxWiz6dy youtube.com
Kt. Academy - Medium https://blog.kotlin-academy.com/feed blog.kotlin-academy.com
OkKotlin https://okkotlin.com/rss.xml okkotlin.com
ProAndroidDev - Medium https://proandroiddev.com/feed proandroiddev.com
Public Object https://publicobject.com/rss/ publicobject.com
Saket Narayan https://saket.me/feed/ saket.me
Styling Android http://feeds.feedburner.com/StylingAndroid blog.stylingandroid.com
Talking Kotlin https://feeds.soundcloud.com/users/soundcloud:users:280353173/sounds.rss talkingkotlin.com
The Android Arsenal https://feeds.feedburner.com/Android_Arsenal android-arsenal.com
Zac Sweers https://www.zacsweers.dev/rss/ zacsweers.dev
Zarah Dominguez https://zarah.dev/feed.xml zarah.dev
chRyNaN Codes https://chrynan.codes/rss/ chrynan.codes
droidcon NYC https://www.youtube.com/feeds/videos.xml?channel_id=UCSLXy31j2Z0sdDeeAX5JpPw youtube.com
droidcon SF https://www.youtube.com/feeds/videos.xml?channel_id=UCKubKoe1CBw_-n_GXetEQbg youtube.com
goobar https://goobar.io/feed goobar.io
zsmb.co https://zsmb.co/index.xml zsmb.co

Apple

Title RSS Feed Url Domain
9to5Mac https://9to5mac.com/feed 9to5mac.com
Apple https://www.youtube.com/feeds/videos.xml?user=Apple youtube.com
Apple Newsroom https://www.apple.com/newsroom/rss-feed.rss apple.com
AppleInsider News https://appleinsider.com/rss/news/ appleinsider.com
Cult of Mac https://www.cultofmac.com/feed cultofmac.com
Daring Fireball https://daringfireball.net/feeds/main daringfireball.net
MacRumors https://www.youtube.com/feeds/videos.xml?user=macrumors youtube.com
MacRumors: Mac News and Rumors - Mac Blog http://feeds.macrumors.com/MacRumors-Mac macrumors.com
MacStories https://www.macstories.net/feed macstories.net
Macworld.com https://www.macworld.com/index.rss macworld.com
Marco.org https://marco.org/rss marco.org
OS X Daily http://feeds.feedburner.com/osxdaily osxdaily.com
The Loop https://www.loopinsight.com/feed loopinsight.com
The unofficial Apple community https://www.reddit.com/r/apple/.rss reddit.com
iMore - The #1 iPhone, iPad, and iPod touch blog http://feeds.feedburner.com/TheiPhoneBlog imore.com
r/iPhone https://www.reddit.com/r/iphone/.rss reddit.com

Architecture

Title RSS Feed Url Domain
A Daily Dose of Architecture Books http://feeds.feedburner.com/archidose archidose.blogspot.com
ArchDaily http://feeds.feedburner.com/Archdaily archdaily.com
Archinect - News https://archinect.com/feed/1/news archinect.com
Architectural Digest https://www.architecturaldigest.com/feed/rss architecturaldigest.com
Architectural Digest https://www.youtube.com/feeds/videos.xml?user=ArchitecturalDigest youtube.com
Architecture https://www.reddit.com/r/architecture/.rss reddit.com
Architecture – Dezeen https://www.dezeen.com/architecture/feed/ dezeen.com
CONTEMPORIST https://www.contemporist.com/feed/ contemporist.com
Comments on: https://inhabitat.com/architecture/feed/ inhabitat.com
Design MilkArchitecture – Design Milk https://design-milk.com/category/architecture/feed/ design-milk.com
Journal https://architizer.wpengine.com/feed/ architizer.com
Living Big In A Tiny House https://www.youtube.com/feeds/videos.xml?user=livingbigtinyhouse youtube.com
The Architect’s Newspaper https://archpaper.com/feed archpaper.com
architecture – designboom - architecture & design magazine https://www.designboom.com/architecture/feed/ designboom.com

Beauty

Title RSS Feed Url Domain
Beauty - ELLE https://www.elle.com/rss/beauty.xml/ elle.com
Beauty - Fashionista https://fashionista.com/.rss/excerpt/beauty fashionista.com
Beauty – Indian Fashion Blog https://www.fashionlady.in/category/beauty-tips/feed fashionlady.in
Blog – The Beauty Brains https://thebeautybrains.com/blog/feed/ thebeautybrains.com
DORÉ https://www.wearedore.com/feed wearedore.com
From Head To Toe http://feeds.feedburner.com/frmheadtotoe frmheadtotoe.com
Into The Gloss - Beauty Tips, Trends, And Product Reviews https://feeds.feedburner.com/intothegloss/oqoU intothegloss.com
POPSUGAR Beauty https://www.popsugar.com/beauty/feed popsugar.com
Refinery29 https://www.refinery29.com/beauty/rss.xml refinery29.com
THE YESSTYLIST – Asian Fashion Blog – brought to you by YesStyle.com https://www.yesstyle.com/blog/category/the-beauty-blog/feed/ yesstyle.com
The Beauty Look Book https://thebeautylookbook.com/feed thebeautylookbook.com

Books

Title RSS Feed Url Domain
A year of reading the world https://ayearofreadingtheworld.com/feed/ ayearofreadingtheworld.com
Aestas Book Blog https://aestasbookblog.com/feed/ aestasbookblog.com
BOOK RIOT https://bookriot.com/feed/ bookriot.com
Kirkus Reviews https://www.kirkusreviews.com/feeds/rss/ kirkusreviews.com
Page Array – NewInBooks https://www.newinbooks.com/feed/ newinbooks.com
So many books, so little time https://reddit.com/r/books/.rss reddit.com
Wokeread https://wokeread.home.blog/feed/ wokeread.home.blog

Business & Economy

Title RSS Feed Url Domain
All News https://www.investing.com/rss/news.rss investing.com
Bloomberg Quicktake https://www.youtube.com/feeds/videos.xml?user=Bloomberg youtube.com
Breaking News on Seeking Alpha https://seekingalpha.com/market_currents.xml seekingalpha.com
Business Insider https://www.youtube.com/feeds/videos.xml?user=businessinsider youtube.com
Duct Tape Marketing https://ducttape.libsyn.com/rss ducttapemarketing.com
Economic Times https://economictimes.indiatimes.com/rssfeedsdefault.cms economictimes.indiatimes.com
Forbes - Business https://www.forbes.com/business/feed/ forbes.com
Fortune https://fortune.com/feed fortune.com
HBR IdeaCast http://feeds.harvardbusiness.org/harvardbusiness/ideacast hbr.org
Home Page https://www.business-standard.com/rss/home_page_top_stories.rss business-standard.com
How I Built This with Guy Raz https://feeds.npr.org/510313/podcast.xml npr.org
Startup Stories - Mixergy https://feeds.feedburner.com/Mixergy-main-podcast mixergy.com
The Blog of Author Tim Ferriss https://tim.blog/feed/ tim.blog
The Growth Show http://thegrowthshow.hubspot.libsynpro.com/ hubspot.com
US Top News and Analysis https://www.cnbc.com/id/100003114/device/rss/rss.html cnbc.com
Yahoo Finance https://finance.yahoo.com/news/rssindex finance.yahoo.com

Cars

Title RSS Feed Url Domain
Autoblog https://www.autoblog.com/rss.xml autoblog.com
Autocar India - All Bike Reviews https://www.autocarindia.com/RSS/rss.ashx?type=all_bikes autocarindia.com
Autocar India - All Car Reviews https://www.autocarindia.com/RSS/rss.ashx?type=all_cars autocarindia.com
Autocar India - News https://www.autocarindia.com/RSS/rss.ashx?type=News autocarindia.com
Autocar RSS Feed https://www.autocar.co.uk/rss autocar.co.uk
BMW BLOG https://feeds.feedburner.com/BmwBlog bmwblog.com
Bike EXIF https://www.bikeexif.com/feed bikeexif.com
Car Body Design https://www.carbodydesign.com/feed/ carbodydesign.com
Carscoops https://www.carscoops.com/feed/ carscoops.com
Formula 1 https://www.reddit.com/r/formula1/.rss reddit.com
Jalopnik https://jalopnik.com/rss jalopnik.com
Latest Content - Car and Driver https://www.caranddriver.com/rss/all.xml/ caranddriver.com
Petrolicious https://petrolicious.com/feed petrolicious.com
Section Page News - Automotive News http://feeds.feedburner.com/autonews/AutomakerNews autonews.com
Section Page News - Automotive News http://feeds.feedburner.com/autonews/EditorsPicks autonews.com
Speedhunters http://feeds.feedburner.com/speedhunters speedhunters.com
The Truth About Cars https://www.thetruthaboutcars.com/feed/ thetruthaboutcars.com
The best vintage and classic cars for sale online - Bring a Trailer https://bringatrailer.com/feed/ bringatrailer.com

Cricket

Title RSS Feed Url Domain
BBC Sport - Cricket http://feeds.bbci.co.uk/sport/cricket/rss.xml bbc.co.uk
Can’t Bowl Can’t Throw Cricket Show http://feeds.feedburner.com/cantbowlcantthrow player.whooshkaa.com
Cricbuzz https://www.youtube.com/feeds/videos.xml?channel_id=UCSRQXk5yErn4e14vN76upOw youtube.com
Cricket https://www.reddit.com/r/Cricket/.rss reddit.com
Cricket Unfiltered https://rss.acast.com/cricket-unfiltered piccolopodcasts.com.au
Cricket news from ESPN Cricinfo.com http://www.espncricinfo.com/rss/content/story/feeds/0.xml espncricinfo.com
Cricket - The Guardian https://www.theguardian.com/sport/cricket/rss theguardian.com
Cricket – The Roar https://www.theroar.com.au/cricket/feed/ theroar.com.au
England & Wales Cricket Board https://www.youtube.com/feeds/videos.xml?user=ecbcricket youtube.com
NDTV Sports - Cricket http://feeds.feedburner.com/ndtvsports-cricket ndtv.com
Pakistan Cricket https://www.youtube.com/feeds/videos.xml?channel_id=UCiWrjBhlICf_L_RK5y6Vrxw youtube.com
Sky Sports Cricket Podcast https://www.spreaker.com/show/3387348/episodes/feed spreaker.com
Sri Lanka Cricket https://www.youtube.com/feeds/videos.xml?user=TheOfficialSLC youtube.com
Stumped https://podcasts.files.bbci.co.uk/p02gsrmh.rss bbc.co.uk
Switch Hit Podcast https://feeds.megaphone.fm/ESP9247246951 espn.com
Tailenders https://podcasts.files.bbci.co.uk/p02pcb4w.rss bbc.co.uk
Test Match Special https://podcasts.files.bbci.co.uk/p02nrsl2.rss bbc.co.uk
The Analyst Inside Cricket http://rss.acast.com/theanalystinsidecricket theanalyst.net
The Grade Cricketer https://rss.whooshkaa.com/rss/podcast/id/1308 gradecricketer.club
Wisden https://www.wisden.com/feed wisden.com
Wisden Cricket Weekly http://feeds.soundcloud.com/users/soundcloud:users:341034518/sounds.rss wisden.com
cricket.com.au https://www.youtube.com/feeds/videos.xml?user=cricketaustraliatv youtube.com

Interior design

Title RSS Feed Url Domain
Apartment Therapy- Saving the world, one room at a time https://www.apartmenttherapy.com/design.rss apartmenttherapy.com
Better Living Through Design http://www.betterlivingthroughdesign.com/feed/ betterlivingthroughdesign.com
Blog - decor8 https://www.decor8blog.com/blog?format=rss decor8blog.com
Core77 http://feeds.feedburner.com/core77/blog core77.com
Design MilkInterior Design – Design Milk https://design-milk.com/category/interior-design/feed/ design-milk.com
Fubiz Media http://feeds.feedburner.com/fubiz fubiz.net
Ideal Home https://www.idealhome.co.uk/feed idealhome.co.uk
In My Own Style https://inmyownstyle.com/feed inmyownstyle.com
Inhabitat - Green Design, Innovation, Architecture, Green Building https://inhabitat.com/design/feed/ inhabitat.com
Interior Design (Interior Architecture) https://www.reddit.com/r/InteriorDesign/.rss reddit.com
Interior Design Ideas http://www.home-designing.com/feed home-designing.com
Interior Design Latest https://www.interiordesign.net/rss/ interiordesign.net
Interiors – Dezeen https://www.dezeen.com/interiors/feed/ dezeen.com
Liz Marie Blog https://www.lizmarieblog.com/feed/ lizmarieblog.com
The Design Files - Australia’s most popular design blog.The Design Files - Australia’s most popular design blog. https://thedesignfiles.net/feed/ thedesignfiles.net
The Inspired Room https://theinspiredroom.net/feed/ theinspiredroom.net
Thrifty Decor Chick http://feeds.feedburner.com/blogspot/ZBcZ thriftydecorchick.com
Trendir https://www.trendir.com/feed/ trendir.com
Yanko Design http://feeds.feedburner.com/yankodesign yankodesign.com
Yatzer RSS Feed https://www.yatzer.com/rss.xml yatzer.com
Young House Love https://www.younghouselove.com/feed/ younghouselove.com
decoist https://www.decoist.com/feed/ decoist.com
design – designboom - architecture & design magazine https://www.designboom.com/design/feed designboom.com
sfgirlbybay https://www.sfgirlbybay.com/feed/ sfgirlbybay.com

DIY

Title RSS Feed Url Domain
A Beautiful Mess https://abeautifulmess.com/feed abeautifulmess.com
Apartment Therapy- Saving the world, one room at a time https://www.apartmenttherapy.com/projects.rss apartmenttherapy.com
Blog – Hackaday https://hackaday.com/blog/feed/ hackaday.com
Centsational Style https://centsationalstyle.com/feed/ centsationalstyle.com
Doityourself.com https://www.doityourself.com/feed doityourself.com
Etsy Journal https://blog.etsy.com/en/feed/ blog.etsy.com
How-To Geek https://www.howtogeek.com/feed/ howtogeek.com
IKEA Hackers https://www.ikeahackers.net/feed ikeahackers.net
MUO - Feed https://www.makeuseof.com/feed/ makeuseof.com
Oh Happy Day! http://ohhappyday.com/feed/ ohhappyday.com
WonderHowTo https://www.wonderhowto.com/rss.xml wonderhowto.com

Fashion

Title RSS Feed Url Domain
Fashion - ELLE https://www.elle.com/rss/fashion.xml/ elle.com
Fashion - The Guardian https://www.theguardian.com/fashion/rss theguardian.com
Fashion – Indian Fashion Blog https://www.fashionlady.in/category/fashion/feed fashionlady.in
FashionBeans Men’s Fashion and Style Feed https://www.fashionbeans.com/rss-feed/?category=fashion fashionbeans.com
Fashionista https://fashionista.com/.rss/excerpt/ fashionista.com
NYT > Style https://rss.nytimes.com/services/xml/rss/nyt/FashionandStyle.xml nytimes.com
POPSUGAR Fashion https://www.popsugar.com/fashion/feed popsugar.com
Refinery29 https://www.refinery29.com/fashion/rss.xml refinery29.com
THE YESSTYLIST – Asian Fashion Blog – brought to you by YesStyle.com https://www.yesstyle.com/blog/category/trend-and-style/feed/ yesstyle.com
Who What Wear https://www.whowhatwear.com/rss whowhatwear.com

Food

Title RSS Feed Url Domain
101 Cookbooks https://www.101cookbooks.com/feed 101cookbooks.com
Babish Culinary Universe https://www.youtube.com/feeds/videos.xml?user=bgfilms youtube.com
Bon Appétit https://www.youtube.com/feeds/videos.xml?user=BonAppetitDotCom youtube.com
Chocolate & Zucchini https://cnz.to/feed/ cnz.to
David Lebovitz https://www.davidlebovitz.com/feed/ davidlebovitz.com
Food52 http://feeds.feedburner.com/food52-TheAandMBlog food52.com
Green Kitchen Stories https://greenkitchenstories.com/feed/ greenkitchenstories.com
How Sweet Eats https://www.howsweeteats.com/feed/ howsweeteats.com
Joy the Baker http://joythebaker.com/feed/ joythebaker.com
Kitchn - Inspiring cooks, nourishing homes https://www.thekitchn.com/main.rss thekitchn.com
Laura in the Kitchen https://www.youtube.com/feeds/videos.xml?user=LauraVitalesKitchen youtube.com
Love and Olive Oil https://www.loveandoliveoil.com/feed loveandoliveoil.com
NYT > Food https://rss.nytimes.com/services/xml/rss/nyt/DiningandWine.xml nytimes.com
Oh She Glows https://ohsheglows.com/feed/ ohsheglows.com
Serious Eats https://www.youtube.com/feeds/videos.xml?user=SeriousEats youtube.com
Serious Eats: Recipes http://feeds.feedburner.com/seriouseats/recipes seriouseats.com
Shutterbean http://www.shutterbean.com/feed/ shutterbean.com
Skinnytaste https://www.skinnytaste.com/feed/ skinnytaste.com
Sprouted Kitchen https://www.sproutedkitchen.com/home?format=rss sproutedkitchen.com
Williams-Sonoma Taste https://blog.williams-sonoma.com/feed/ blog.williams-sonoma.com
smitten kitchen http://feeds.feedburner.com/smittenkitchen smittenkitchen.com

Football

Title RSS Feed Url Domain
EFL Championship https://www.reddit.com/r/Championship/.rss?format=xml reddit.com
Football - The People’s Sport https://www.reddit.com/r/football/.rss?format=xml reddit.com
Football News, Live Scores, Results & Transfers - Goal.com https://www.goal.com/feeds/en/news goal.com
Football365 https://www.football365.com/feed football365.com
Soccer News https://www.soccernews.com/feed soccernews.com

Funny

Title RSS Feed Url Domain
AwkwardFamilyPhotos.com https://awkwardfamilyphotos.com/feed/ awkwardfamilyphotos.com
Cracked: All Posts http://feeds.feedburner.com/CrackedRSS cracked.com
Explosm.net http://feeds.feedburner.com/Explosm explosm.net
FAIL Blog http://feeds.feedburner.com/failblog failblog.cheezburger.com
I Can Has Cheezburger? http://feeds.feedburner.com/icanhascheezburger icanhas.cheezburger.com
PHD Comics http://phdcomics.com/gradfeed.php phdcomics.com
Penny Arcade https://www.penny-arcade.com/feed penny-arcade.com
PostSecret https://postsecret.com/feed/?alt=rss postsecret.com
Saturday Morning Breakfast Cereal https://www.smbc-comics.com/comic/rss smbc-comics.com
The Bloggess https://thebloggess.com/feed/ thebloggess.com
The Daily WTF http://syndication.thedailywtf.com/TheDailyWtf thedailywtf.com
The Oatmeal - Comics by Matthew Inman http://feeds.feedburner.com/oatmealfeed theoatmeal.com
The Onion https://www.theonion.com/rss theonion.com
xkcd.com https://xkcd.com/rss.xml xkcd.com

Gaming

Title RSS Feed Url Domain
Escapist Magazine https://www.escapistmagazine.com/v2/feed/ escapistmagazine.com
Eurogamer.net https://www.eurogamer.net/?format=rss eurogamer.net
Gamasutra News http://feeds.feedburner.com/GamasutraNews gamasutra.com
GameSpot - All Content https://www.gamespot.com/feeds/mashup/ gamespot.com
IGN All http://feeds.ign.com/ign/all ign.com
Indie Games Plus https://indiegamesplus.com/feed indiegamesplus.com
Kotaku https://kotaku.com/rss kotaku.com
Makeup and Beauty Blog - Makeup Reviews, Swatches and How-To Makeup https://www.makeupandbeautyblog.com/feed/ makeupandbeautyblog.com
PlayStation.Blog http://feeds.feedburner.com/psblog blog.playstation.com
Polygon -All https://www.polygon.com/rss/index.xml polygon.com
Rock, Paper, Shotgun http://feeds.feedburner.com/RockPaperShotgun rockpapershotgun.com
Steam RSS News Feed https://store.steampowered.com/feeds/news.xml steampowered.com
The Ancient Gaming Noob http://feeds.feedburner.com/TheAncientGamingNoob tagn.wordpress.com
TouchArcade - iPhone, iPad, Android Games Forum https://toucharcade.com/community/forums/-/index.rss toucharcade.com
Xbox’s Major Nelson https://majornelson.com/feed/ majornelson.com
r/gaming https://www.reddit.com/r/gaming.rss reddit.com

History

Title RSS Feed Url Domain
30 For 30 Podcasts https://feeds.megaphone.fm/ESP5765452710 espn.com
Blog Feed https://americanhistory.si.edu/blog/feed americanhistory.si.edu
Dan Carlin’s Hardcore History https://feeds.feedburner.com/dancarlin/history?format=xml dancarlin.com
History in 28-minutes https://www.historyisnowmagazine.com/blog?format=RSS historyisnowmagazine.com
HistoryNet http://www.historynet.com/feed historynet.com
Lore https://feeds.megaphone.fm/lore lorepodcast.com
Revisionist History https://feeds.megaphone.fm/revisionisthistory revisionisthistory.com
The History Reader https://www.thehistoryreader.com/feed/ thehistoryreader.com
Throughline https://feeds.npr.org/510333/podcast.xml npr.org
You Must Remember This https://feeds.megaphone.fm/YMRT7068253588 youmustrememberthispodcast.com
the memory palace http://feeds.thememorypalace.us/thememorypalace thememorypalace.us

iOS Development

Title RSS Feed Url Domain
ALL SHOWS - Devchat.tv https://feeds.feedwrench.com/all-shows-devchattv.rss devchat.tv
Alberto De Bortoli https://albertodebortoli.com/rss/ albertodebortoli.com
Augmented Code https://augmentedcode.io/feed/ augmentedcode.io
Benoit Pasquier - Swift, Data and more https://benoitpasquier.com/index.xml benoitpasquier.com
Fabisevi.ch https://www.fabisevi.ch/feed.xml fabisevi.ch
Mobile A11y https://mobilea11y.com/index.xml mobilea11y.com
More Than Just Code podcast - iOS and Swift development, news and advice https://feeds.fireside.fm/mtjc/rss mtjc.fireside.fm
News - Apple Developer https://developer.apple.com/news/rss/news.rss developer.apple.com
Ole Begemann https://oleb.net/blog/atom.xml oleb.net
Pavel Zak’s dev blog https://nerdyak.tech/feed.xml izakpavel.github.io
Swift by Sundell https://www.swiftbysundell.com/feed.rss swiftbysundell.com
Swift by Sundell https://swiftbysundell.com/feed.rss swiftbysundell.com
SwiftRocks https://swiftrocks.com/rss.xml swiftrocks.com
The Atomic Birdhouse https://atomicbird.com/index.xml atomicbird.com
Under the Radar https://www.relay.fm/radar/feed relay.fm
Use Your Loaf - iOS Development News & Tips https://useyourloaf.com/blog/rss.xml useyourloaf.com
inessential.com https://inessential.com/xml/rss.xml inessential.com
tyler.io https://tyler.io/feed/ tyler.io

Movies

Title RSS Feed Url Domain
/Film https://feeds2.feedburner.com/slashfilm slashfilm.com
Ain’t It Cool News Feed https://www.aintitcool.com/node/feed/ aintitcool.com
ComingSoon.net https://www.comingsoon.net/feed comingsoon.net
Deadline https://deadline.com/feed/ deadline.com
Film School Rejects https://filmschoolrejects.com/feed/ filmschoolrejects.com
FirstShowing.net https://www.firstshowing.net/feed/ firstshowing.net
IndieWire https://www.indiewire.com/feed indiewire.com
Movie News and Discussion https://reddit.com/r/movies/.rss reddit.com
Movies https://www.bleedingcool.com/movies/feed/ bleedingcool.com
The A.V. Club https://film.avclub.com/rss avclub.com
Variety https://variety.com/feed/ variety.com

Music

Title RSS Feed Url Domain
Billboard https://www.billboard.com/articles/rss.xml billboard.com
Consequence http://consequenceofsound.net/feed consequence.net
EDM.com - The Latest Electronic Dance Music News, Reviews & Artists https://edm.com/.rss/full/ edm.com
Metal Injection http://feeds.feedburner.com/metalinjection metalinjection.net
Music Business Worldwide https://www.musicbusinessworldwide.com/feed/ musicbusinessworldwide.com
RSS: News http://pitchfork.com/rss/news pitchfork.com
Song Exploder http://songexploder.net/feed songexploder.net
Your EDM https://www.youredm.com/feed youredm.com

News

Title RSS Feed Url Domain
BBC News - World http://feeds.bbci.co.uk/news/world/rss.xml bbc.co.uk
CNN.com - RSS Channel - World http://rss.cnn.com/rss/edition_world.rss cnn.com
International: Top News And Analysis https://www.cnbc.com/id/100727362/device/rss/rss.html cnbc.com
NDTV News - World-news http://feeds.feedburner.com/ndtvnews-world-news ndtv.com
NYT > World News https://rss.nytimes.com/services/xml/rss/nyt/World.xml nytimes.com
Top stories - Google News https://news.google.com/rss news.google.com
World http://feeds.washingtonpost.com/rss/world washingtonpost.com
World News https://www.reddit.com/r/worldnews/.rss reddit.com
World News Headlines, Latest International News, World Breaking News - Times of India https://timesofindia.indiatimes.com/rssfeeds/296589292.cms timesofindia.indiatimes.com
World news - The Guardian https://www.theguardian.com/world/rss theguardian.com
Yahoo News - Latest News & Headlines https://www.yahoo.com/news/rss yahoo.com

Personal finance

Title RSS Feed Url Domain
Afford Anything https://affordanything.com/feed/ affordanything.com
Blog – Student Loan Hero https://studentloanhero.com/blog/feed studentloanhero.com
Budgets Are Sexy https://feeds2.feedburner.com/budgetsaresexy budgetsaresexy.com
Financial Samurai https://www.financialsamurai.com/feed/ financialsamurai.com
Frugalwoods https://feeds.feedburner.com/Frugalwoods frugalwoods.com
Get Rich Slowly https://www.getrichslowly.org/feed/ getrichslowly.org
Good Financial Cents® https://www.goodfinancialcents.com/feed/ goodfinancialcents.com
I Will Teach You To Be Rich https://www.iwillteachyoutoberich.com/feed/ iwillteachyoutoberich.com
Learn To Trade The Market https://www.learntotradethemarket.com/feed learntotradethemarket.com
Making Sense Of Cents https://www.makingsenseofcents.com/feed makingsenseofcents.com
Millennial Money https://millennialmoney.com/feed/ millennialmoney.com
MintLife Blog https://blog.mint.com/feed/ mint.intuit.com
Money Crashers https://www.moneycrashers.com/feed/ moneycrashers.com
Money Saving Mom® https://moneysavingmom.com/feed/ moneysavingmom.com
Money Under 30 https://www.moneyunder30.com/feed moneyunder30.com
MoneyNing http://feeds.feedburner.com/MoneyNing moneyning.com
MyWifeQuitHerJob.com https://mywifequitherjob.com/feed/ mywifequitherjob.com
Nerd’s Eye View - Kitces.com http://feeds.feedblitz.com/kitcesnerdseyeview&x=1 kitces.com
NerdWallet https://www.nerdwallet.com/blog/feed/ nerdwallet.com
Oblivious Investor https://obliviousinvestor.com/feed/ obliviousinvestor.com
Personal Finance https://reddit.com/r/personalfinance/.rss reddit.com
SavingAdvice.com Blog https://www.savingadvice.com/feed/ savingadvice.com
Side Hustle Nation https://www.sidehustlenation.com/feed sidehustlenation.com
The College Investor https://thecollegeinvestor.com/feed/ cdn.thecollegeinvestor.com
The Dough Roller https://www.doughroller.net/feed/ doughroller.net
The Penny Hoarder https://www.thepennyhoarder.com/feed/ thepennyhoarder.com
Well Kept Wallet https://wellkeptwallet.com/feed/ wellkeptwallet.com
Wise Bread http://feeds.killeraces.com/wisebread wisebread.com

Photography

Title RSS Feed Url Domain
500px https://iso.500px.com/feed/ iso.500px.com
500px: https://500px.com/editors.rss 500px.com
Big Picture https://www.bostonglobe.com/rss/bigpicture bostonglobe.com
Canon Rumors – Your best source for Canon rumors, leaks and gossip https://www.canonrumors.com/feed/ canonrumors.com
Digital Photography School https://feeds.feedburner.com/DigitalPhotographySchool digital-photography-school.com
Light Stalking https://www.lightstalking.com/feed/ lightstalking.com
Lightroom Killer Tips https://lightroomkillertips.com/feed/ lightroomkillertips.com
One Big Photo http://feeds.feedburner.com/OneBigPhoto onebigphoto.com
PetaPixel https://petapixel.com/feed/ petapixel.com
Strobist http://feeds.feedburner.com/blogspot/WOBq strobist.blogspot.com
Stuck in Customs https://stuckincustoms.com/feed/ stuckincustoms.com
The Sartorialist https://feeds.feedburner.com/TheSartorialist thesartorialist.com

Programming

Title RSS Feed Url Domain
Better Programming - Medium https://medium.com/feed/better-programming betterprogramming.pub
Code as Craft https://codeascraft.com/feed/atom/ codeascraft.com
CodeNewbie http://feeds.codenewbie.org/cnpodcast.xml codenewbie.org
Coding Horror https://feeds.feedburner.com/codinghorror blog.codinghorror.com
Complete Developer Podcast https://completedeveloperpodcast.com/feed/podcast/ completedeveloperpodcast.com
Dan Abramov’s Overreacted Blog RSS Feed https://overreacted.io/rss.xml overreacted.io
Developer Tea https://feeds.simplecast.com/dLRotFGk developertea.com
English (US) https://blog.twitter.com/engineering/en_us/blog.rss blog.twitter.com
FLOSS Weekly (Audio) https://feeds.twit.tv/floss.xml twit.tv
Facebook Engineering https://engineering.fb.com/feed/ engineering.fb.com
GitLab https://about.gitlab.com/atom.xml about.gitlab.com
Google Developers Blog http://feeds.feedburner.com/GDBcode developers.googleblog.com
Google TechTalks https://www.youtube.com/feeds/videos.xml?user=GoogleTechTalks youtube.com
HackerNoon.com - Medium https://medium.com/feed/hackernoon medium.com
Hanselminutes with Scott Hanselman https://feeds.simplecast.com/gvtxUiIf hanselminutes.com
InfoQ https://feed.infoq.com infoq.com
Instagram Engineering - Medium https://instagram-engineering.com/feed/ instagram-engineering.com
Java, SQL and jOOQ. https://blog.jooq.org/feed blog.jooq.org
JetBrains Blog https://blog.jetbrains.com/feed blog.jetbrains.com
Joel on Software https://www.joelonsoftware.com/feed/ joelonsoftware.com
LinkedIn Engineering https://engineering.linkedin.com/blog.rss.html engineering.linkedin.com
Martin Fowler https://martinfowler.com/feed.atom martinfowler.com
Netflix TechBlog - Medium https://netflixtechblog.com/feed netflixtechblog.com
Overflow - Buffer Resources https://buffer.com/resources/overflow/rss/ buffer.com
Podcast – Software Engineering Daily https://softwareengineeringdaily.com/category/podcast/feed softwareengineeringdaily.com
Posts on &> /dev/null https://www.thirtythreeforty.net/posts/index.xml thirtythreeforty.net
Prezi Engineering - Medium https://engineering.prezi.com/feed engineering.prezi.com
Programming Throwdown http://feeds.feedburner.com/ProgrammingThrowdown programmingthrowdown.com
Programming – The Crazy Programmer https://www.thecrazyprogrammer.com/category/programming/feed thecrazyprogrammer.com
Robert Heaton - Blog https://robertheaton.com/feed.xml robertheaton.com
Scott Hanselman’s Blog http://feeds.hanselman.com/ScottHanselman hanselman.com
Scripting News http://scripting.com/rss.xml scripting.com
Signal v. Noise https://m.signalvnoise.com/feed/ m.signalvnoise.com
Slack Engineering https://slack.engineering/feed slack.engineering
Software Defined Talk https://feeds.fireside.fm/sdt/rss softwaredefinedtalk.com
Software Engineering Radio - The Podcast for Professional Software Developers http://feeds.feedburner.com/se-radio se-radio.net
SoundCloud Backstage Blog https://developers.soundcloud.com/blog/blog.rss developers.soundcloud.com
Spotify Engineering https://labs.spotify.com/feed/ engineering.atspotify.com
Stack Abuse https://stackabuse.com/rss/ stackabuse.com
Stack Overflow Blog https://stackoverflow.blog/feed/ stackoverflow.blog
The 6 Figure Developer http://6figuredev.com/feed/rss/ 6figuredev.com
The Airbnb Tech Blog - Medium https://medium.com/feed/airbnb-engineering medium.com
The Cynical Developer https://cynicaldeveloper.com/feed/podcast cynical.dev
The GitHub Blog https://github.blog/feed/ github.blog
The PIT Show: Reflections and Interviews in the Tech World https://feeds.transistor.fm/productivity-in-tech-podcast productivityintech.com
The Rabbit Hole: The Definitive Developer’s Podcast http://therabbithole.libsyn.com/rss therabbithole.libsyn.com
The Stack Overflow Podcast https://feeds.simplecast.com/XA_851k3 stackoverflow.blog
The Standup https://feeds.fireside.fm/standup/rss standup.fm
The Women in Tech Show: A Technical Podcast https://thewomenintechshow.com/category/podcast/feed/ thewomenintechshow.com
programming https://www.reddit.com/r/programming/.rss reddit.com

Science

Title RSS Feed Url Domain
60-Second Science http://rss.sciam.com/sciam/60secsciencepodcast scientificamerican.com
BBC News - Science & Environment http://feeds.bbci.co.uk/news/science_and_environment/rss.xml bbc.co.uk
Discovery https://podcasts.files.bbci.co.uk/p002w557.rss bbc.co.uk
FlowingData https://flowingdata.com/feed flowingdata.com
Gastropod https://www.omnycontent.com/d/playlist/aaea4e69-af51-495e-afc9-a9760146922b/2a195077-f014-41d2-8313-ab190186b4c2/277bcd5c-0a05-4c14-8ba6-ab190186b4d5/podcast.rss gastropod.com
Gizmodo https://gizmodo.com/tag/science/rss gizmodo.com
Hidden Brain https://feeds.npr.org/510308/podcast.xml hiddenbrain.org
Invisibilia https://feeds.npr.org/510307/podcast.xml npr.org
Latest Science News – ScienceDaily https://www.sciencedaily.com/rss/all.xml sciencedaily.com
NYT > Science https://rss.nytimes.com/services/xml/rss/nyt/Science.xml nytimes.com
Nature https://www.nature.com/nature.rss feeds.nature.com
Phys.org - latest science and technology news stories https://phys.org/rss-feed/ phys.org
Probably Science https://probablyscience.libsyn.com/rss probablyscience.com
Radiolab http://feeds.wnyc.org/radiolab wnycstudios.org
Reddit Science https://reddit.com/r/science/.rss reddit.com
Sawbones: A Marital Tour of Misguided Medicine https://feeds.simplecast.com/y1LF_sn2 sawbones.simplecast.com
Science Latest https://www.wired.com/feed/category/science/latest/rss wired.com
Science Vs http://feeds.gimletmedia.com/ScienceVs gimletmedia.com
Science-Based Medicine https://sciencebasedmedicine.org/feed/ sciencebasedmedicine.org
Scientific American Content: Global http://rss.sciam.com/ScientificAmerican-Global scientificamerican.com
Shirtloads of Science https://shirtloadsofscience.libsyn.com/rss shirtloadsofscience.libsyn.com
TED Talks Daily (SD video) https://pa.tedcdn.com/feeds/talks.rss ted.com
The Infinite Monkey Cage https://podcasts.files.bbci.co.uk/b00snr0w.rss bbc.co.uk
This Week in Science – The Kickass Science Podcast http://www.twis.org/feed/ twis.org

Space

Title RSS Feed Url Domain
/r/space: news, articles and discussion https://www.reddit.com/r/space/.rss?format=xml reddit.com
NASA Breaking News https://www.nasa.gov/rss/dyn/breaking_news.rss nasa.gov
New Scientist - Space https://www.newscientist.com/subject/space/feed/ newscientist.com
Sky & Telescope https://www.skyandtelescope.com/feed/ skyandtelescope.org
Space - The Guardian https://www.theguardian.com/science/space/rss theguardian.com
Space.com https://www.space.com/feeds/all space.com
SpaceX https://www.youtube.com/feeds/videos.xml?user=spacexchannel youtube.com

Sports

Title RSS Feed Url Domain
BBC Sport - Sport http://feeds.bbci.co.uk/sport/rss.xml bbc.co.uk
Reddit Sports https://www.reddit.com/r/sports.rss reddit.com
Sports News - Latest Sports and Football News - Sky News http://feeds.skynews.com/feeds/rss/sports.xml news.sky.com
Sportskeeda https://www.sportskeeda.com/feed sportskeeda.com
Yahoo! Sports - News, Scores, Standings, Rumors, Fantasy Games https://sports.yahoo.com/rss/ sports.yahoo.com
www.espn.com - TOP https://www.espn.com/espn/rss/news espn.com

Startups

Title RSS Feed Url Domain
AVC https://avc.com/feed/ avc.com
Both Sides of the Table - Medium https://bothsidesofthetable.com/feed bothsidesofthetable.com
Entrepreneur http://feeds.feedburner.com/entrepreneur/latest entrepreneur.com
Feld Thoughts https://feld.com/feed feld.com
Forbes - Entrepreneurs https://www.forbes.com/entrepreneurs/feed/ forbes.com
GaryVee https://www.youtube.com/feeds/videos.xml?user=GaryVaynerchuk youtube.com
Hacker News: Front Page https://hnrss.org/frontpage news.ycombinator.com
Inc.com https://www.inc.com/rss/ inc.com
Inside Intercom https://www.intercom.com/blog/feed intercom.com
Marie Forleo https://www.youtube.com/feeds/videos.xml?user=marieforleo youtube.com
Masters of Scale with Reid Hoffman https://rss.art19.com/masters-of-scale mastersofscale.com
Paul Graham: Essays http://www.aaronsw.com/2002/feeds/pgessays.rss paulgraham.com
Product Hunt — The best new products, every day https://www.producthunt.com/feed producthunt.com
Quick Sprout https://www.quicksprout.com/rss quicksprout.com
Small Business Trends https://feeds2.feedburner.com/SmallBusinessTrends smallbiztrends.com
Smart Passive Income http://feeds.feedburner.com/smartpassiveincome smartpassiveincome.com
Springwise https://www.springwise.com/feed springwise.com
Steve Blank https://steveblank.com/feed/ steveblank.com
The Startup Junkies Podcast https://startupjunkie.libsyn.com/rss startupjunkie.org
The Tim Ferriss Show https://rss.art19.com/tim-ferriss-show tim.blog
This Week in Startups - Video http://feeds.feedburner.com/twistvid thisweekinstartups.com
VentureBeat https://feeds.feedburner.com/venturebeat/SZYF venturebeat.com
blog – Feld Thoughts https://feld.com/archives/tag/blog/feed feld.com

Tech

Title RSS Feed Url Domain
Accidental Tech Podcast https://atp.fm/rss atp.fm
Analog(ue) https://www.relay.fm/analogue/feed relay.fm
Ars Technica http://feeds.arstechnica.com/arstechnica/index arstechnica.com
CNET https://www.youtube.com/feeds/videos.xml?user=CNETTV youtube.com
CNET News https://www.cnet.com/rss/news/ cnet.com
Clockwise https://www.relay.fm/clockwise/feed relay.fm
Gizmodo https://gizmodo.com/rss gizmodo.com
Hacker News https://news.ycombinator.com/rss news.ycombinator.com
Lifehacker https://lifehacker.com/rss lifehacker.com
Linus Tech Tips https://www.youtube.com/feeds/videos.xml?user=LinusTechTips youtube.com
Marques Brownlee https://www.youtube.com/feeds/videos.xml?user=marquesbrownlee youtube.com
Mashable http://feeds.mashable.com/Mashable mashable.com
ReadWrite https://readwrite.com/feed/ readwrite.com
Reply All https://feeds.megaphone.fm/replyall gimletmedia.com
Rocket https://www.relay.fm/rocket/feed relay.fm
Slashdot http://rss.slashdot.org/Slashdot/slashdotMain slashdot.org
Stratechery by Ben Thompson http://stratechery.com/feed/ stratechery.com
TechCrunch http://feeds.feedburner.com/TechCrunch techcrunch.com
The Keyword https://www.blog.google/rss/ blog.google
The Next Web https://thenextweb.com/feed/ thenextweb.com
The Verge https://www.youtube.com/feeds/videos.xml?user=TheVerge youtube.com
The Verge -All Posts https://www.theverge.com/rss/index.xml theverge.com
The Vergecast https://feeds.megaphone.fm/vergecast theverge.com
This Week in Tech (Audio) https://feeds.twit.tv/twit.xml twit.tv
Unbox Therapy https://www.youtube.com/feeds/videos.xml?user=unboxtherapy youtube.com
https://www.engadget.com/ https://www.engadget.com/rss.xml engadget.com

Television

Title RSS Feed Url Domain
TV https://www.bleedingcool.com/tv/feed/ bleedingcool.com
TV Fanatic https://www.tvfanatic.com/rss.xml tvfanatic.com
TVLine https://tvline.com/feed/ tvline.com
Television News and Discussion https://reddit.com/r/television/.rss reddit.com
The A.V. Club https://tv.avclub.com/rss avclub.com
the TV addict http://feeds.feedburner.com/thetvaddict/AXob thetvaddict.com

Tennis

Title RSS Feed Url Domain
BBC Sport - Tennis http://feeds.bbci.co.uk/sport/tennis/rss.xml bbc.co.uk
Essential Tennis Podcast - Instruction, Lessons, Tips https://feed.podbean.com/essentialtennis/feed.xml essentialtennis.podbean.com
Grand Slam Fantasy Tennis http://www.grandslamfantasytennis.com/feed/?x=1 grandslamfantasytennis.com
Tennis - ATP World Tour https://www.atptour.com/en/media/rss-feed/xml-feed atptour.com
Tennis News & Discussion https://www.reddit.com/r/tennis/.rss reddit.com
peRFect Tennis https://www.perfect-tennis.com/feed/ perfect-tennis.com
www.espn.com - TENNIS https://www.espn.com/espn/rss/tennis/news espn.com

Travel

Title RSS Feed Url Domain
Atlas Obscura - Latest Articles and Places https://www.atlasobscura.com/feeds/latest atlasobscura.com
Live Life Travel https://www.livelifetravel.world/feed/ livelifetravel.world
Lonely Planet Travel News https://www.lonelyplanet.com/news/feed/atom/ lonelyplanet.com
NYT > Travel https://rss.nytimes.com/services/xml/rss/nyt/Travel.xml nytimes.com
Nomadic Matt’s Travel Site https://www.nomadicmatt.com/travel-blog/feed/ nomadicmatt.com
Travel - The Guardian https://www.theguardian.com/uk/travel/rss theguardian.com

UI / UX

Title RSS Feed Url Domain
Articles on Smashing Magazine — For Web Designers And Developers https://www.smashingmagazine.com/feed smashingmagazine.com
Boxes and Arrows http://boxesandarrows.com/rss/ boxesandarrows.com
Designer News Feed https://www.designernews.co/?format=rss designernews.co
Inside Design https://www.invisionapp.com/inside-design/feed invisionapp.com
JUST™ Creative https://feeds.feedburner.com/JustCreativeDesignBlog justcreative.com
NN/g latest articles and announcements https://www.nngroup.com/feed/rss/ nngroup.com
UX Blog – UX Studio https://uxstudioteam.com/ux-blog/feed/ uxstudioteam.com
UX Collective - Medium https://uxdesign.cc/feed uxdesign.cc
UX Movement https://uxmovement.com/feed/ uxmovement.com
Usability Geek https://usabilitygeek.com/feed/ usabilitygeek.com
User Experience https://www.reddit.com/r/userexperience/.rss reddit.com

Web Development

Title RSS Feed Url Domain
A List Apart: The Full Feed https://alistapart.com/main/feed/ alistapart.com
CSS-Tricks https://css-tricks.com/feed/ css-tricks.com
Code Wall https://www.codewall.co.uk/feed/ codewall.co.uk
David Walsh Blog https://davidwalsh.name/feed davidwalsh.name
Mozilla Hacks – the Web developer blog https://hacks.mozilla.org/feed/ hacks.mozilla.org
Sink In - Tech and Travel https://gosink.in/rss/ gosink.in
Updates https://developers.google.com/web/updates/rss.xml developers.google.com

With Category and Without category

Feeds in the OPML files in “with category” will have all the feeds wrapped around extra <outline> tag so that they can be imported with the predefined category in the RSS readers which support categorization. If your reader does not support OPML with extra <outline> tag, you can use the opml inside “without category” directory.

Github Repositories

Useful Repositories

A list of Useful GitHub Repositories full of FREE Resources.

Index

API

Repository Description License
GraphQL-Apis 📜 A collective list of public GraphQL APIs MIT
Public-Apis A collective list of free APIs MIT

Artificial Intelligence

Repository Description License
Computer Vision A curated list of awesome computer vision resources CC0-1.0
Machine Learning A curated list of awesome Machine Learning frameworks, libraries and software CC0-1.0
Natural Language Processing 📖 A curated list of resources dedicated to Natural Language Processing (NLP) CC0-1.0
Pytorch A comprehensive list of pytorch related content on github,such as different models,implementations,helper libraries,tutorials etc No License

BackEnd

Repository Description License
GraphQL Awesome list of GraphQL CC0-1.0

Books

Repository Description License
Free OReilly Books Free O Reilly Books No License
Free Programming Books 📚 Freely available programming books CC-BY-4.0
GoBooks List of Golang books CC-BY-4.0
JavaScript 📚 List of books to master JavaScript Development 🚀 No License
Mind Expanding Books 📚 Books everyone should read CC0-1.0
Python Books 📚 Directory of Python books CC-BY-4.0
TypeScript Books :books: The definitive guide to TypeScript and possibly the best TypeScript book 📖. Free and Open Source 🌹 CC-BY-4.0

Career

Repository Description License
Become A Full Stack Web Developer Free resources for learning Full Stack Web Development MIT
Clean Code JavaScript 🛁 Clean Code concepts adapted for JavaScript MIT
Coding Interview University A complete computer science study plan to become a software engineer. CC-BY-SA-4.0
Computer Science (OSSU) 🎓 Path to a free self-taught education in Computer Science! MIT
CS Courses 📚 List of awesome university courses for learning Computer Science! No License
Developer Roadmap Roadmap to becoming a web developer in 2021 Custom
Easy Application Over 400 software engineering companies that are easy to apply to MIT
FrontEnd Developer Interview Questions A list of helpful front-end related questions you can use to interview potential candidates, test yourself or completely ignore MIT
Hiring Without Whiteboards ⭐️ Companies that don’t have a broken hiring process MIT
Interview This An open source list of developer questions to ask prospective employers CC BY-SA 3.0
JavaScript Algorithms 📝 Algorithms and data structures implemented in JavaScript with explanations and links to further readings MIT
Leetcode Patterns A curated list of leetcode questions grouped by their common patterns GPL-3.0

CheatSheets

Repository Description License
Async-JavaScript Cheatsheet for promises and async/await. MIT
Bootstrap 5 An interactive list of Bootstrap 5 classes, variables, and mixins MIT
C++ Modern C++ Cheatsheet No License
Data Science List of Data Science Cheatsheets to rule the world MIT
Docker 🐋 Docker Cheat Sheet 🐋 MIT
Emoji A markdown version emoji cheat sheet MIT
Git and GitHub A list of cool features of Git and GitHub. MIT
Python Comprehensive Python Cheatsheet No License
Vim Shortcuts that will help you to become an advance VIM user. CC-BY-4.0

Cloud

Repository Description License
AWS A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome. CC-BY-4.0

Competitive Programming

Repository Description License
ACM-ICPC Algorithms Algorithms used in Competitive Programming No License
Awesome Competitive Programming A curated list of awesome Competitive Programming, Algorithm and Data Structure resources CC-BY-4.0
Competitive Code A repo for interesting Competitive Coding problems MIT
Competitive Programming Resources Competitive Programming & System Design Resources. MIT

Courses & Certifications

Repository Description License
Awesome learn by playing A curated list of resources that can allow you to learn programming languages by playing games MIT
Free Certifications Curated list of free courses & certifications MIT
GCP Training Labs and demos for courses for GCP Training Apache-2.0

Development

Repository Description License
Beautiful Docs Pointers to useful, well-written, and otherwise beautiful documentation. No License
Design Resources for Developers Curated list of design and UI resources from stock photos, web templates, CSS frameworks, UI libraries, tools and much more MIT
DevYouTubeList List of Development YouTube Channels MIT
Programming Talks Awesome & interesting talks about programming No License

Education

Repository Description License
Math A curated list of awesome mathematics resources CC0-1.0
Project Based Learning Curated list of project-based tutorials MIT

Frameworks

Repository Description License
.NET A collection of awesome .NET libraries, tools, frameworks and software CC0-1.0
CSS List of awesome CSS frameworks CC-BY-4.0
Electron Useful resources for creating apps with Electron CC0-1.0
Laravel A curated list of bookmarks, packages, tutorials, videos and other cool resources from the Laravel ecosystem CC-BY-4.0
NestJS A curated list of awesome things related to NestJS 😎 CC0-1.0
Vue 🎉 A curated list of awesome things related to Vue.js MIT

FrontEnd

Repository Description License
Animate CSS 🍿 A cross-browser library of CSS animations. As easy to use as an easy thing MIT
Front End Web Development This repository contains content which will be helpful in your journey as a front-end Web Developer MIT
Front End Dev Bookmarks Manually curated collection of resources for frontend web developers. CC-BY-SA-4.0
HTML5 📝 A curated list of awesome HTML5 resources MIT
React Components Curated List of React Components & Libraries CC0-1.0

Opportunities & Programs

Repository Description License
Community Writer Programs A list of Developer Community Writer Programs MIT
List-Of-Open-Source-Internships-Programs A curated list of all the open-source internships/Programs No License

Programming Languages

Repository Description License
C A curated list of awesome C frameworks, libraries, resources and other shiny things. Inspired by all the other awesome-… projects out there CC-BY-SA-4.0
C++ A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-… stuff MIT
Go A curated list of awesome Go frameworks, libraries and software MIT
Java A curated list of awesome frameworks, libraries and software for the Java programming language CC-BY-4.0
JavaScript 🐢 A collection of awesome browser-side JavaScript libraries, resources and shiny things CC-BY-4.0
Lua A curated list of quality Lua packages and resources. CC0-1.0
PHP A curated list of amazingly awesome PHP libraries, resources and shiny things WTFPL
Python A curated list of awesome Python frameworks, libraries, software and resources CC-BY-4.0
R A curated list of awesome R packages, frameworks and software CC BY-NC-SA 4.0
Rust A curated list of Rust code and resources CC0-1.0
Shell A curated list of awesome command-line frameworks, toolkits, guides and gizmos CC0-1.0
Swift A collaborative list of awesome Swift libraries and resources CC0-1.0
V A curated list of awesome V frameworks, libraries, software and resources. CC0-1.0

Projects

Repository Description License
50projects50days 50+ mini web projects using HTML, CSS & JS MIT
Build your own X 🤓 Build your own (insert technology here) CC0-1.0
React Projects A collection of projects built on the React library No License
Vanilla Web Projects Mini projects built with HTML5, CSS & JavaScript. No frameworks or libraries No License

Reading List

Repository Description License
EthList The Comprehensive Ethereum Reading List No License
Gopher A curated selection of blog posts on Go Apache-2.0

Security

Repository Description License
Hacking A collection of various awesome lists for hackers, pentesters and security researchers CC0-1.0
Web Security 🐶 A curated list of Web Security materials and resources. CC0-1.0

System Design

Repository Description License
Grokking System Design Systems design is the process of defining the architecture, modules, interfaces, and data for a system to satisfy specified requirements. Systems design could be seen as the application of systems theory to product development. GPL-3.0
System Design Interview System design interview for IT companies No License
System Design Primer Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards. CC-BY-SA-4.0
System Design Resources These are the best resources for System Design on the Internet GPL-3.0

Web

Repository Description License
Proxy List A list of free, public, forward proxy servers. UPDATED DAILY! MIT
Streaming a curated list of awesome streaming frameworks, applications, etc CC-BY-SA-4.0
Trackerslist Updated list of public BitTorrent trackers GPL-2.0
WPO 📝 A curated list of Web Performance Optimization. Everyone can contribute here! MIT

VPN

Everything about VPNs Technologies and tools

Sep 25, 2024

Subsections of VPN

SmartDNS Proxy

SmartDNS

This method is usefule when a service is prohibited in your region/area. Buy a vps a 4$ worth VPS is good enough and it is preferable to use Ubuntu/Debian Images.

  • Install nginx with apt install nginx.
  • Modify the Nginx Config at /etc/nginx/nginx.conf with the following config
worker_processes  auto;
worker_rlimit_nofile 35000;
events {
    worker_connections  15000;
    multi_accept off;
}

http {

     access_log /var/log/nginx/access.log;
     error_log /var/log/nginx/error.log;
     server {
            listen 80 default_server;
            listen [::]:80 default_server;
            resolver 8.8.8.8 ipv6=off;
            location / {
                proxy_pass http://$host$request_uri;
            }
    }

}


stream {
   log_format basic '$remote_addr [$time_local] '
                     '$protocol $status $bytes_sent $bytes_received '
                     '$session_time';

   access_log /var/log/nginx/access.log basic;
   error_log  /var/log/nginx/error.log error;

   server {
        resolver 1.1.1.1 ipv6=off;
        listen 443;
        ssl_preread on;
        proxy_connect_timeout 5s;
        proxy_pass $ssl_preread_server_name:443;
    }
}
  • Download src or prebuilt binaries or packages from smartdns
  • Install it with dpkg command or compile src to get the binary file
  • Use the following config. You can also modify anything you want except the ip addres of the server.
# dns server name, default is host name
# server-name, 
# example:
#   server-name smartdns
#

# whether resolv local hostname to ip address
# resolv-hostname yes

# dns server run user
# user [username]
# example: run as nobody
#   user nobody
#

# Include another configuration options, if -group is specified, only include the rules to specified group.
# conf-file [file] [-group group-name]
# conf-file blacklist-ip.conf
# conf-file whitelist-ip.conf -group office
# conf-file *.conf

# dns server bind ip and port, default dns server port is 53, support binding multi ip and port
# bind udp server
#   bind [IP]:[port][@device] [-group [group]] [-no-rule-addr] [-no-rule-nameserver] [-no-rule-ipset] [-no-speed-check] [-no-cache] [-no-rule-soa] [-no-dualstack-selection]
# bind tcp server
#   bind-tcp [IP]:[port][@device] [-group [group]] [-no-rule-addr] [-no-rule-nameserver] [-no-rule-ipset] [-no-speed-check] [-no-cache] [-no-rule-soa] [-no-dualstack-selection]
# bind tls server
#   bind-tls [IP]:[port][@device] [-group [group]] [-no-rule-addr] [-no-rule-nameserver] [-no-rule-ipset] [-no-speed-check] [-no-cache] [-no-rule-soa] [-no-dualstack-selection]
#   bind-cert-key-file [path to file]
#      tls private key file
#   bind-cert-file [path to file]
#      tls cert file
#   bind-cert-key-pass [password]
#      tls private key password
# bind-https server
#   bind-https [IP]:[port][@device] [-group [group]] [-no-rule-addr] [-no-rule-nameserver] [-no-rule-ipset] [-no-speed-check] [-no-cache] [-no-rule-soa] [-no-dualstack-selection]
# option:
#   -group: set domain request to use the appropriate server group.
#   -no-rule-addr: skip address rule.
#   -no-rule-nameserver: skip nameserver rule.
#   -no-rule-ipset: skip ipset rule or nftset rule.
#   -no-speed-check: do not check speed.
#   -no-cache: skip cache.
#   -no-rule-soa: Skip address SOA(#) rules.
#   -no-dualstack-selection: Disable dualstack ip selection.
#   -no-ip-alias: ignore ip alias.
#   -force-aaaa-soa: force AAAA query return SOA.
#   -force-https-soa: force HTTPS query return SOA.
#   -no-serve-expired: no serve expired.
#   -no-rules: skip all rules.
#   -ipset ipsetname: use ipset rule.
#   -nftset nftsetname: use nftset rule.
# example: 
#  IPV4: 
#    bind :53
#    bind :53@eth0
#    bind :6053 -group office -no-speed-check
#  IPV6:
#    bind [::]:53
#    bind [::]:53@eth0
#    bind-tcp [::]:53
bind <VPS_IPADDRESS>:53

# tcp connection idle timeout
# tcp-idle-time [second]

# dns cache size
# cache-size [number]
#   0: for no cache
#   -1: auto set cache size
# cache-size 32768

# dns cache memory size
# cache-mem-size [size]

# enable persist cache when restart
# cache-persist no

# cache persist file
# cache-file /tmp/smartdns.cache

# cache persist time
# cache-checkpoint-time [second]
# cache-checkpoint-time 86400

# prefetch domain
# prefetch-domain [yes|no]
# prefetch-domain yes

# cache serve expired 
# serve-expired [yes|no]
# serve-expired yes

# cache serve expired TTL
# serve-expired-ttl [num]
# serve-expired-ttl 0

# reply TTL value to use when replying with expired data
# serve-expired-reply-ttl [num]
# serve-expired-reply-ttl 30

# List of hosts that supply bogus NX domain results 
# bogus-nxdomain [ip/subnet]

# List of IPs that will be filtered when nameserver is configured -blacklist-ip parameter
# blacklist-ip [ip/subnet]

# List of IPs that will be accepted when nameserver is configured -whitelist-ip parameter
# whitelist-ip [ip/subnet]

# List of IPs that will be ignored
# ignore-ip [ip/subnet]

# alias of IPs
# ip-alias [ip/subnet] [ip1[,ip2]...]
# ip-alias 192.168.0.1/24 10.9.0.1,10.9.0.2

# speed check mode
# speed-check-mode [ping|tcp:port|none|,]
# example:
#   speed-check-mode ping,tcp:80,tcp:443
#   speed-check-mode tcp:443,ping
#   speed-check-mode none

# force AAAA query return SOA
# force-AAAA-SOA [yes|no]

# force specific qtype return soa
# force-qtype-SOA [-,][qtypeid |...]
# force-qtype-SOA [qtypeid|start_id-end_id|,...]
# force-qtype-SOA 65 28 add type 65,28
# force-qtype-SOA 65,28 add type 65,28
# force-qtype-SOA 65-68 add type 65-68
# force-qtype-SOA -,65-68, clear type 65-68
# force-qtype-SOA - clear all type
force-qtype-SOA 65

# Enable IPV4, IPV6 dual stack IP optimization selection strategy
# dualstack-ip-selection-threshold [num] (0~1000)
# dualstack-ip-allow-force-AAAA [yes|no]
# dualstack-ip-selection [yes|no]
# dualstack-ip-selection no

# edns client subnet
# edns-client-subnet [ip/subnet]
# edns-client-subnet 192.168.1.1/24
# edns-client-subnet 8::8/56

# ttl for all resource record
# rr-ttl: ttl for all record
# rr-ttl-min: minimum ttl for resource record
# rr-ttl-max: maximum ttl for resource record
# rr-ttl-reply-max: maximum reply ttl for resource record
# example:
# rr-ttl 300
# rr-ttl-min 60
# rr-ttl-max 86400
# rr-ttl-reply-max 60

# Maximum number of IPs returned to the client|8|number of IPs, 1~16
# example:
# max-reply-ip-num 1

# Maximum number of queries per second|0|number of queries, 0 means no limit.
# example:
# max-query-limit 65535

# response mode
# response-mode [first-ping|fastest-ip|fastest-response]

# set log level
# log-level: [level], level=off, fatal, error, warn, notice, info, debug
# log-file: file path of log file.
# log-console [yes|no]: output log to console.
# log-syslog [yes|no]: output log to syslog.
# log-size: size of each log file, support k,m,g
# log-num: number of logs, 0 means disable log
log-level info

# log-file /var/log/smartdns/smartdns.log
# log-size 128k
# log-num 2
# log-file-mode [mode]: file mode of log file.

# dns audit
# audit-enable [yes|no]: enable or disable audit.
# audit-enable yes
# audit-SOA [yes|no]: enable or disable log soa result.
# audit-size size of each audit file, support k,m,g
# audit-file /var/log/smartdns-audit.log
# audit-console [yes|no]: output audit log to console.
# audit-syslog [yes|no]: output audit log to syslog.
# audit-file-mode [mode]: file mode of audit file.
# audit-size 128k
# audit-num 2

# Support reading dnsmasq dhcp file to resolve local hostname
# dnsmasq-lease-file /var/lib/misc/dnsmasq.leases

# certificate file
# ca-file [file]
# ca-file /etc/ssl/certs/ca-certificates.crt

# certificate path
# ca-path [path]
# ca-path /etc/ssl/certs

# remote udp dns server list
# server [IP]:[PORT]|URL [-blacklist-ip] [-whitelist-ip] [-check-edns] [-group [group] ...] [-exclude-default-group]
# default port is 53
#   -blacklist-ip: filter result with blacklist ip
#   -whitelist-ip: filter result with whitelist ip,  result in whitelist-ip will be accepted.
#   -check-edns: result must exist edns RR, or discard result.
#   g|-group [group]: set server to group, use with nameserver /domain/group.
#   e|-exclude-default-group: exclude this server from default group.
#   p|-proxy [proxy-name]: use proxy to connect to server.
#   b|-bootstrap-dns: set as bootstrap dns server.
#   -set-mark: set mark on packets.
#   -subnet [ip/subnet]: set edns client subnet.
#   -host-ip [ip]: set dns server host ip.
#   -interface [interface]: set dns server interface.
server 8.8.8.8  -group g1
#server 8.8.8.8 -group g2
# server tls://dns.google:853 
# server https://dns.google/dns-query

# remote tcp dns server list
# server-tcp [IP]:[PORT] [-blacklist-ip] [-whitelist-ip] [-group [group] ...] [-exclude-default-group]
# default port is 53
server-tcp 8.8.8.8 -group g1
#server-tcp 8.8.8.8 -group g2
#server-tcp 18.130.3.145 -group g3
# remote tls dns server list
# server-tls [IP]:[PORT] [-blacklist-ip] [-whitelist-ip] [-spki-pin [sha256-pin]] [-group [group] ...] [-exclude-default-group]
#   -spki-pin: TLS spki pin to verify.
#   -tls-host-verify: cert hostname to verify.
#   -host-name: TLS sni hostname.
#   k|-no-check-certificate: no check certificate.
#   p|-proxy [proxy-name]: use proxy to connect to server.
#   -bootstrap-dns: set as bootstrap dns server.
# Get SPKI with this command:
#    echo | openssl s_client -connect '[ip]:853' | openssl x509 -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64
# default port is 853
# server-tls 8.8.8.8
# server-tls 1.0.0.1

# remote https dns server list
# server-https https://[host]:[port]/path [-blacklist-ip] [-whitelist-ip] [-spki-pin [sha256-pin]] [-group [group] ...] [-exclude-default-group]
#   -spki-pin: TLS spki pin to verify.
#   -tls-host-verify: cert hostname to verify.
#   -host-name: TLS sni hostname.
#   -http-host: http host.
#   k|-no-check-certificate: no check certificate.
#   p|-proxy [proxy-name]: use proxy to connect to server.
#   -bootstrap-dns: set as bootstrap dns server.
# default port is 443
# server-https https://cloudflare-dns.com/dns-query

# socks5 and http proxy list
# proxy-server URL -name [proxy name]
#   URL: socks5://[username:password@]host:port
#        http://[username:password@]host:port
#   -name: proxy name, use with server -proxy [proxy-name]
# example:
#   proxy-server socks5://alireza:[email protected]:2059 -name proxy
#proxy-server http://127.0.0.1:6660 -name proxy

# specific nameserver to domain
# nameserver [/domain/][group|-]
# nameserer group, set the domain name to use the appropriate server group.
#nameserver /chatgpt.com/g1, #Set the domain name to use the appropriate server group.
# nameserver /www.example.com/-, ignore this domain

# expand ptr record from address record
# expand-ptr-from-address yes

# specific address to domain
# address [/domain/][ip1,ip2|-|-4|-6|#|#4|#6]
# address #, block all A and AAAA request.
# address #6, block all AAAA request.
# address -6, allow all AAAA request.
#5.202.100.100,5.202.100.101,185.55.226.26,185.55.225.25,78.157.42.100,78.157.42.101,91.107.164.5
# address /www.example.com/1.2.3.4,5.6.7.8, return multiple ip addresses
# address /www.example.com/-, ignore address, query from upstream, suffix 4, for ipv4, 6 for ipv6, none for all
# address /www.example.com/#, return SOA to client, suffix 4, for ipv4, 6 for ipv6, none for all

# specific cname to domain
# cname /domain/target

# add srv record, support multiple srv record.
# srv-record /domain/[target][,port][,priority][,weight]
# srv-record /_ldap._tcp.example.com/ldapserver.example.com,389
# srv-record /_ldap._tcp.example.com/

# https-record /domain/[target=][,port=][,priority=][,alph=][,ech=][,ipv4hint=][,ipv6hint=]
# https-record noipv4hint,noipv6hint
# https-record /www.example.com/ipv4hint=192.168.1.2

# enable DNS64 feature
# dns64 [ip/subnet]
# dns64 64:ff9b::/96

# enable ipset timeout by ttl feature
# ipset-timeout [yes]

# specific ipset to domain
# ipset [/domain/][ipsetname|#4:v4setname|#6:v6setname|-|#4:-|#6:-]
# ipset [ipsetname|#4:v4setname|#6:v6setname], set global ipset.
# ipset /www.example.com/block, set ipset with ipset name of block. 
# ipset /www.example.com/-, ignore this domain.
# ipset ipsetname, set global ipset.

# add to ipset when ping is unreachable
# ipset-no-speed ipsetname
# ipset-no-speed pass

# enable nftset timeout by ttl feature
# nftset-timeout [yes|no]
# nftset-timeout yes

# add to nftset when ping is unreachable
# nftset-no-speed [#4:ip#table#set,#6:ipv6#table#setv6]
# nftset-no-speed #4:ip#table#set

# enable nftset debug, check nftset setting result, output log when error.
# nftset-debug [yes|no]
# nftset-debug yes

# specific nftset to domain
# nftset [/domain/][#4:ip#table#set,#6:ipv6#table#setv6]
# nftset [#4:ip#table#set,#6:ipv6#table#setv6] set global nftset.
# nftset /www.example.com/ip#table#set, equivalent to 'nft add element ip table set { ... }'
# nftset /www.example.com/-, ignore this domain
# nftset /www.example.com/#6:-, ignore ipv6
# nftset #6:ip#table#set, set global nftset.

# set ddns domain
# ddns-domain domain

# lookup local network hostname or ip address from mdns
# mdns-lookup [yes|no]
# mdns-lookup no

# set hosts file
# hosts-file [file]

# set domain rules
# domain-rules /domain/ [-speed-check-mode [...]]
# rules:
#   [-c] -speed-check-mode [mode]: speed check mode
#                             speed-check-mode [ping|tcp:port|none|,]
#   [-a] -address [address|-]: same as address option
#   [-n] -nameserver [group|-]: same as nameserver option
#   [-p] -ipset [ipset|-]: same as ipset option
#   [-t] -nftset [nftset|-]: same as nftset option
#   [-d] -dualstack-ip-selection [yes|no]: same as dualstack-ip-selection option
#   [-g|-group group-name]: set domain-rules to group.
#   -no-serve-expired: ignore expired domain
#   -delete: delete domain rule
#   -no-ip-alias: ignore ip alias
#   -no-cache: ignore cache

# collection of domains 
# the domain-set can be used with /domain/ for address, nameserver, ipset, etc.
# domain-set -name [set-name] -type list -file [/path/to/file]
#   [-n] -name [set name]: domain set name
#   [-t] -type [list]: domain set type, list only now
#   [-f] -file [path/to/set]: file path of domain set
# 
# example:
domain-set -name sanction -type list -file /etc/smartdns/proxy.list
address /domain-set:sanction/<VPS_IP_ADDRESS>
nameserver /domain-set:sanction/g1
# ipset /domain-set:domain-list/ipset
# domain-rules /domain-set:domain-list/ -speed-check-mode ping

# set ip rules
# ip-rules ip-cidrs [-ip-alias [...]]
# rules:
#   [-c] -ip-alias [ip1,ip2]: same as ip-alias option
#   [-a] -whitelist-ip: same as whitelist-ip option
#   [-n] -blacklist-ip: same as blacklist-ip option
#   [-p] -bogus-nxdomain: same as bogus-nxdomain option
#   [-t] -ignore-ip: same as ignore-ip option

# collection of IPs 
# the ip-set can be used with /ip-cidr/ for ip-alias, ignore-ip, etc.
# ip-set -name [set-name] -type list -file [/path/to/file]
#   [-n] -name [set name]: ip set name
#   [-t] -type [list]: ip set type, list only now
#   [-f] -file [path/to/set]: file path of ip set
# 
# example:
# ip-set -name ip-list -file /etc/smartdns/ip-list.conf
# bogus-nxdomain ip-set:ip-list
# ip-alias ip-set:ip-list 1.2.3.4
# ip-alias ip-set:ip-list ip-set:ip-map-list

# set client rules
# client-rules [ip-cidr|mac|ip-set] [-group [group]] [-no-rule-addr] [-no-rule-nameserver] [-no-rule-ipset] [-no-speed-check] [-no-cache] [-no-rule-soa] [-no-dualstack-selection]
# client-rules option is same as bind option, please see bind option for detail.

# set group rules
# group-begin [group-name]
# group-match [-g|group group-name] [-domain domain] [-client-ip [ip-cidr|mac|ip-set]]
# group-end

# load plugin
# plugin [path/to/file] [args]
# plugin /usr/lib/smartdns/libsmartdns-ui.so --p 8080 -i 0.0.0.0 -r /usr/share/smartdns/wwwroot
  • Create a domain list at this location /etc/smartdns/proxy.list and put the actual domain name any slash or https things line by line, each line just one domain. For instance
asfadfad.com
asfdkanskf.net
.
.
.
.
.
  • Everything is ready just power the smartdns and nginx up ! ;)

DNS and Certificate

Acquiring TLS Certificate and Key

If you want to run a website that supports HTTPS you should get tls certificate for it. I will not delve into the technical things behind the TLS and HTTPS protocol. Just Acquiring Free 3-months certificate.

  • Clone this repo acme.sh and cd to that directory.
  • Run acme.sh --issue --server letsencrypt -d 'qharib.ir' --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
  • Follow the instructions to add the respective TXT record
  • Run again with --renew except the --issue flag
  • It is ready under ~/.acme.sh directory

Running DOH, Plain DNS, and DOT

I use Adguard Home.

  • Run wget --no-verbose -O - https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s -- -v
  • It will download everything that is necessary
  • Just follow the instruction to access the panel on your localhost and modify its settings

Running dns-proxy

We use Adguard Dns-Proxy tool to proxify our dns queries through DOH.

  • Install it from this_link
  • Extract it and run it using the following command or adjust it based on the description of the Project
  • See the complete guide in the project directory, it is thorough and simple ;)
dnsproxy -l <public_ip_of_vps> -p 53 --https-port=443 --tls-crt=/path/crt.crt --tls-key=/path/key.pkcs8.pem -u https://dnsoverhttps.doh/dns-query  -b 8.8.8.8:53

Install Common VPN Protocols

OpenVPN and Wireguard

Use Nyr scripts to fully install and manage users with them. Download the respective clients from the official sources to avoid further problems

Openconnect and L2TP/IPSec

  • First install the Docker based on the DigitalOcean instructions Ubuntu22
  • Run the following commands to run your server, the second command ask for password for your user
docker run --name ocserv --restart always --privileged -p 443:443 -p 443:443/udp -e CA_CN="fqdn.sth" -e CA_ORG="fqdn.sth" -e CA_DAYS=3650 -e SRV_CN=fqdn.sth -e SRV_ORG="fqdn.sth" -e SRV_DAYS=3650 -e NO_TEST_USER=1 -d tommylau/ocserv

docker exec -ti ocserv ocpasswd -c /etc/ocserv/ocpasswd -g "Route,All" tommy 
docker run --name ipsec-vpn-server --restart=always --env-file ./vpn.env  -v /mnt/ikev2-vpn-data:/etc/ipsec.d -v /lib/modules:/lib/modules:ro -p 500:500/udp -p 4500:4500/udp -d --privileged hwdsl2/ipsec-vpn-server
  • put the following in the vpn.env file
VPN_IPSEC_PSK=your_ipsec_pre_shared_key
VPN_USER=your_vpn_username
VPN_PASSWORD=your_vpn_password
  • Use openconnect client and native L2TP/IPSec available on various Operating Systems

How to Run TOR Bridge ?

Installing TOR on Debian Based Distros

  • Install apt-transport-https apt install apt-transport-https
  • Create a new file in /etc/apt/sources.list.d/ named tor.list. Add the following entries
deb     [arch=amd64 signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] https://deb.torproject.org/torproject.org <DISTRIBUTION>/jammy main
deb-src [arch=amd64 signed-by=/usr/share/keyrings/deb.torproject.org-keyring.gpg] https://deb.torproject.org/torproject.org <DISTRIBUTION>/jammy main
  • Then add the gpg key used to sign the packages wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/deb.torproject.org-keyring.gpg >/dev/null
  • Finally Run apt update && apt install tor deb.torproject.org-keyring

Configuring Obfs4 Bridge

  • Clone https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/lyrebird
  • Install gvm https://github.com/jetsung/golang-install and latest golang tools
  • Compile the lyrebird with the instruction provided in its repository then put the binary in /usr/local/bin/ directory
  • Open /etc/tor/torrc file add the following lines
RunAsDaemon 1
ORPort 6889
ExtORPort auto
ExitPolicy reject *:*
BridgeRelay 1
PublishServerDescriptor 0
ServerTransportPlugin obfs4 exec /usr/local/bin/lyrebird
ServerTransportListenAddr obfs4 0.0.0.0:<port>
ContactInfo [email protected]
Nickname FreeBeerPrivate
  • Open /etc/apparmor.d/system_tor and add this line /usr/local/bin/lyrebird ix,
  • Run sudo apparmor_parser -r /etc/apparmor.d/system_tor
  • Restart the tor.service with systemd
  • Obtain fingerprint and the bridge with these two commands cat /var/lib/tor/pt_state/obfs4_bridgeline.txt, cat /var/lib/tor/fingerprint

Configuring WebTunnel Bridge

  • You can create a new tor instance with tor-instances create <name> or replace it with OBFS4
  • Open the instance torrc file or the original torrc file and add the following lines
ORPort 36788
ExtORPort auto
ExitPolicy reject *:*
BridgeRelay 1
PublishServerDescriptor 0
ServerTransportPlugin webtunnel exec /usr/local/bin/webtunnel
ServerTransportListenAddr webtunnel 127.0.0.1:15003
ServerTransportOptions webtunnel url=https://domain.sth:443/<sth>
ContactInfo [email protected]
Nickname sth
  • Like Obfs4 do the following
nano/vi /etc/apparmor.d/system_tor

add this line: /usr/local/bin/webtunnel ix,

sudo apparmor_parser -r /etc/apparmor.d/system_tor
  • install nginx and add a conf like this
server {
    listen [::]:443 ssl http2;
    listen 443 ssl http2;
    server_name domain.sth;
    #ssl on;

    # certificates generated via acme.sh
    ssl_certificate path.crt;
    ssl_certificate_key path.key;

    ssl_session_timeout 15m;

    ssl_protocols TLSv1.2 TLSv1.3;

    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;

    ssl_prefer_server_ciphers off;

    ssl_session_cache shared:MozSSL:50m;
    #ssl_ecdh_curve secp521r1,prime256v1,secp384r1;
    ssl_session_tickets off;

    add_header Strict-Transport-Security "max-age=63072000" always;

    location = /<sth> {
        proxy_pass http://127.0.0.1:15003;
        proxy_http_version 1.1;

        ### Set WebSocket headers ###
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        ### Set Proxy headers ###
        proxy_set_header        Accept-Encoding   "";
        proxy_set_header        Host            $host;
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        add_header              Front-End-Https   on;

        proxy_redirect     off;
        access_log  off;
        error_log off;
    }

}
  • You can put the domain.sth behind CDN or not ;)

Thanks and Enjoy The Bridge

SniProxy

SniProxy

SniProxy based on dnsmasq and nginx It works like shecan.ir in Iran. SniProxy

How to Run ?!

  • Install docker and docker-compose
  • Run with docker-compose up -d
  • Change docker-compose.yml based on your preferences !
  • I try to update the dnsmasq/proxy.conf file based on the internet status of Iran
  • It could be resource intensive task to serve this dns service to many people so bring a powerhouse
  • I tested on a 2gigs 2 cpus vps and It is OK for me, my family, and friends
  • Also dnsmasq is limited to lo interface, localhost
  • Use AdGuard Home to deploy DOT, DOH, and use it with SniProxy
  • I wrote a script to add all sanctioned domains in Iran into multiple files
  • You can use it to update your domains list
  • I have added a hosts file which helps you to block (Ads, Malwares, Porn, Fakenews and Gambling Websites), like pi-hole but along with SniProxy Capability
  • Also you can check Steven Black github repo to change the hosts file based on your preferences

Thanks !

v2ray v2fly Steven Black

Software

Everything about software engineeing and software development.

Aug 27, 2024

Subsections of Software

Java Language Frameworks

Java Language

A curated list of awesome Java frameworks, libraries and software.

Contents

Projects

Bean Mapping

Frameworks that ease bean mapping.

  • dOOv - Provides fluent API for typesafe domain model validation and mapping. It uses annotations, code generation and a type safe DSL to make bean validation and mapping fast and easy.
  • JMapper - Uses byte code manipulation for lightning-fast mapping. Supports annotations and API or XML configuration.
  • MapStruct - Code generator that simplifies mappings between different bean types, based on a convention-over-configuration approach.
  • ModelMapper - Intelligent object mapping library that automatically maps objects to each other.
  • Orika - JavaBean-mapping framework that recursively copies (among other capabilities) data from one object to another.
  • reMap - Lambda and method handle-based mapping which requires code and not annotations if objects have different names.
  • Selma - Annotation processor-based bean mapper.

Build

Tools that handle the build cycle and dependencies of an application.

  • Apache Maven - Declarative build and dependency management that favors convention over configuration. It might be preferable to Apache Ant, which uses a rather procedural approach and can be difficult to maintain.
  • Bazel - Tool from Google that builds code quickly and reliably.
  • Buck - Encourages the creation of small, reusable modules consisting of code and resources.
  • Gradle - Incremental builds programmed via Groovy instead of declaring XML. Works well with Maven’s dependency management.

Bytecode Manipulation

Libraries to manipulate bytecode programmatically.

  • ASM - All-purpose, low-level bytecode manipulation and analysis.
  • Byte Buddy - Further simplifies bytecode generation with a fluent API.
  • bytecode-viewer - Java 8 Jar & Android APK reverse engineering suite. (GPL-3.0-only)
  • Byteman - Manipulate bytecode at runtime via DSL (rules); mainly for testing/troubleshooting. (LGPL-2.1-or-later)
  • cglib - Bytecode generation library.
  • Javassist - Tries to simplify bytecode editing.
  • Maker - Provides low level bytecode generation.
  • Mixin - Manipulate bytecode at runtime using real Java code.
  • Perses - Dynamically injects failure/latency at the bytecode level according to principles of chaos engineering.
  • Recaf - JVM reverse engineering toolkit, essentially an IDE for Java bytecode.

Caching

Libraries that provide caching facilities.

  • cache2k - In-memory high performance caching library.
  • Caffeine - High-performance, near-optimal caching library.
  • Ehcache - Distributed general-purpose cache.
  • Infinispan - Highly concurrent key/value datastore used for caching.

CLI

Libraries for everything related to the CLI.

Argument Parsing

Libraries to assist with parsing command line arguments.

  • Airline - Annotation-based framework for parsing Git-like command-line arguments.
  • JCommander - Command-line argument-parsing framework with custom types and validation via implementing interfaces.
  • jbock - Reflectionless command line parser.
  • JLine - Includes features from modern shells like completion or history.
  • picocli - ANSI colors and styles in usage help with annotation-based POSIX/GNU/any syntax, subcommands, strong typing for both options and positional args.

Text-Based User Interfaces

Libraries that provide TUI frameworks, or building blocks related functions.

  • Jansi - ANSI escape codes to format console output.
  • Jexer - Advanced console (and Swing) text user interface (TUI) library, with mouse-draggable windows, built-in terminal window manager, and sixel image support. Looks like Turbo Vision.
  • Text-IO - Aids the creation of full console-based applications.
  • Lanterna - Easy console text-GUI library, similar to curses. (LGPL-3.0-only)

Cluster Management

Frameworks that can dynamically manage applications inside of a cluster.

  • Apache Aurora - Mesos framework for long-running services and cron jobs.
  • Singularity - Mesos framework that makes deployment and operations easy. It supports web services, background workers, scheduled jobs, and one-off tasks.

Code Analysis

Tools that provide metrics and quality measurements.

  • Checkstyle - Static analysis of coding conventions and standards. (LGPL-2.1-or-later)
  • Error Prone - Catches common programming mistakes as compile-time errors.
  • Error Prone Support - Error Prone extensions: extra bug checkers and a large battery of Refaster templates.
  • Infer - Modern static analysis tool for verifying the correctness of code.
  • jQAssistant - Static code analysis with Neo4J-based query language. (GPL-3.0-only)
  • NullAway - Eliminates NullPointerExceptions with low build-time overhead.
  • PMD - Source code analysis for finding bad coding practices.
  • p3c - Provides Alibaba’s coding guidelines for PMD, IDEA and Eclipse.
  • RefactorFirst - Identifies and prioritizes God Classes and Highly Coupled classes.
  • SonarJava - Static analyzer for SonarQube & SonarLint. (LGPL-3.0-only)
  • Spoon - Library for analyzing and transforming Java source code.
  • Spotbugs - Static analysis of bytecode to find potential bugs. (LGPL-2.1-only)

Code Coverage

Frameworks and tools that enable code coverage metrics collection for test suites.

  • Clover - Relies on source-code instrumentation instead of bytecode instrumentation.
  • Cobertura - Relies on offline (or static) bytecode instrumentation and class loading to collect code coverage metrics. (GPL-2.0-only)
  • JaCoCo - Framework that enables collection of code coverage metrics, using both offline and runtime bytecode instrumentation.

Code Generators

Tools that generate patterns for repetitive code in order to reduce verbosity and error-proneness.

  • ADT4J - JSR-269 code generator for algebraic data types.
  • Auto - Generates factory, service, and value classes.
  • Avaje Http Server - Generates Lightweight JAX-RS style http servers using Javalin or Helidon (Nima) SE.
  • Bootify ![c] - Browser-based Spring Boot app generation with JPA model and REST API.
  • FreeBuilder - Automatically generates the Builder pattern.
  • Geci - Discovers files that need generated code, updates automatically and writes to the source with a convenient API.
  • Immutables - Annotation processors to generate simple, safe and consistent value objects.
  • JavaPoet - API to generate source files.
  • JHipster - Yeoman source code generator for Spring Boot and AngularJS.
  • Joda-Beans - Small framework that adds queryable properties to Java, enhancing JavaBeans.
  • JPA Buddy ![c] - Plugin for IntelliJ IDEA. Provides visual tools for generating JPA entities, Spring Data JPA repositories, Liquibase changelogs and SQL scripts. Offers automatic Liquibase/Flyway script generation by comparing model to DB, and reverse engineering JPA entities from DB tables.
  • Lombok - Code generator that aims to reduce verbosity.
  • Record-Builder - Companion builder class, withers and templates for Java records.
  • Telosys - Simple and light code generator available as an Eclipse Plugin and also as a CLI.

Compiler-compiler

Frameworks that help to create parsers, interpreters or compilers.

  • ANTLR - Complex full-featured framework for top-down parsing.
  • JavaCC - Parser generator that generates top-down parsers. Allows lexical state switching and permits extended BNF specifications.
  • JFlex - Lexical analyzer generator.

Computer Vision

Libraries which seek to gain high level information from images and videos.

  • BoofCV - Library for image processing, camera calibration, tracking, SFM, MVS, 3D vision, QR Code and much more.
  • ImageJ - Medical image processing application with an API.
  • JavaCV - Java interface to OpenCV, FFmpeg, and much more.

Configuration

Libraries that provide external configuration.

  • avaje config - Loads yaml and properties files, supports dynamic configuration, plugins, file-watching and config event listeners.
  • centraldogma - Highly-available version-controlled service configuration repository based on Git, ZooKeeper and HTTP/2.
  • config - Configuration library supporting Java properties, JSON or its human optimized superset HOCON.
  • Configurate - Configuration library with support for various configuration formats and transformations.
  • Curator Framework - High-level API for Apache ZooKeeper.
  • dotenv - Twelve-factor configuration library which uses environment-specific files.
  • Externalized Properties - Lightweight yet powerful configuration library which supports resolution of properties from external sources and an extensible post-processing/conversion mechanism.
  • Gestalt - Gestalt offers a comprehensive solution to the challenges of configuration management. It allows you to source configuration data from multiple inputs, merge them intelligently, and present them in a structured, type-safe manner.
  • ini4j - Provides an API for handling Windows’ INI files.
  • KAConf - Annotation-based configuration system for Java and Kotlin.
  • microconfig - Configuration system designed for microservices which helps to separate configuration from code. The configuration for different services can have common and specific parts and can be dynamically distributed.
  • owner - Reduces boilerplate of properties.

Constraint Satisfaction Problem Solver

Libraries that help with implementing optimization and satisfiability problems.

  • Choco - Off-the-shelf constraint satisfaction problem solver that uses constraint programming techniques.
  • JaCoP - Includes an interface for the FlatZinc language, enabling it to execute MiniZinc models. (AGPL-3.0)
  • OptaPlanner - Business planning and resource scheduling optimization solver.
  • Timefold - Flexible solver with Spring/Quarkus support and quickstarts for the Vehicle Routing Problem, Maintenance Scheduling, Employee Shift Scheduling and much more.

CSV

Frameworks and libraries that simplify reading/writing CSV data.

  • FastCSV - Performance-optimized, dependency-free and RFC 4180 compliant.
  • jackson-dataformat-csv - Jackson extension for reading and writing CSV.
  • opencsv - Simple CSV parser.
  • Super CSV - Powerful CSV parser with support for Dozer, Joda-Time and Java 8.
  • uniVocity-parsers - One of the fastest and most feature-complete parsers. Also comes with parsers for TSV and fixed-width records.

Data Structures

Efficient and specific data structures.

  • Apache Avro - Data interchange format with dynamic typing, untagged data, and absence of manually assigned IDs.
  • Apache Orc - Fast and efficient columnar storage format for Hadoop-based workloads.
  • Apache Parquet - Columnar storage format based on assembly algorithms from Google’s paper on Dremel.
  • Apache Thrift - Data interchange format that originated at Facebook.
  • Big Queue - Fast and persistent queue based on memory-mapped files.
  • HyperMinHash-java - Probabilistic data structure for computing union, intersection, and set cardinality in loglog space.
  • Persistent Collection - Persistent and immutable analogue of the Java Collections Framework.
  • Protobuf - Google’s data interchange format.
  • RoaringBitmap - Fast and efficient compressed bitmap.
  • SBE - Simple Binary Encoding, one of the fastest message formats around.
  • Tape - Lightning-fast, transactional, file-based FIFO.
  • Wire - Clean, lightweight protocol buffers.

Database

Everything that simplifies interactions with the database.

  • Apache Calcite - Dynamic data management framework. It contains many of the pieces that comprise a typical database management system.
  • Apache Drill - Distributed, schema on-the-fly, ANSI SQL query engine for Big Data exploration.
  • Apache Phoenix - High-performance relational database layer over HBase for low-latency applications.
  • ArangoDB - ArangoDB Java driver.
  • Chronicle Map - Efficient, in-memory (opt. persisted to disk), off-heap key-value store.
  • Debezium - Low latency data streaming platform for change data capture.
  • druid - High-performance, column-oriented, distributed data store.
  • eXist - NoSQL document database and application platform. (LGPL-2.1-only)
  • FlexyPool - Brings metrics and failover strategies to the most common connection pooling solutions.
  • Flyway - Simple database migration tool.
  • H2 - Small SQL database notable for its in-memory functionality.
  • HikariCP - High-performance JDBC connection pool.
  • HSQLDB - HyperSQL 100% Java database.
  • JDBI - Convenient abstraction of JDBC.
  • Jedis - Small client for interaction with Redis, with methods for commands.
  • Jest - Client for the Elasticsearch REST API.
  • jetcd - Client library for etcd.
  • Jinq - Typesafe database queries via symbolic execution of Java 8 Lambdas (on top of JPA or jOOQ).
  • jOOQ - Generates typesafe code based on SQL schema.
  • Leaf - Distributed ID generate service.
  • Lettuce - Lettuce is a scalable Redis client for building non-blocking Reactive applications.
  • Liquibase - Database-independent library for tracking, managing and applying database schema changes.
  • MapDB - Embedded database engine that provides concurrent collections backed on disk or in off-heap memory.
  • MariaDB4j - Launcher for MariaDB that requires no installation or external dependencies.
  • Modality - Lightweight ORM with database reverse engineering features.
  • OpenDJ - LDAPv3 compliant directory service, developed for the Java platform, providing a high performance, highly available, and secure store for the identities.
  • Querydsl - Typesafe unified queries.
  • QueryStream - Build JPA Criteria queries using a Stream-like API.
  • QuestDB - High-performance SQL database for time series. Supports InfluxDB line protocol, PostgreSQL wire protocol, and REST.
  • Realm - Mobile database to run directly inside phones, tablets or wearables.
  • Redisson - Allows for distributed and scalable data structures on top of a Redis server.
  • requery - Modern, lightweight but powerful object mapping and SQL generator. Easily map to or create databases, or perform queries and updates from any Java-using platform.
  • Speedment - Database access library that utilizes Java 8’s Stream API for querying.
  • Spring Data JPA MongoDB Expressions - Allows you to use MongoDB query language to query your relational database.
  • Trino - Distributed SQL query engine for big data.
  • Vibur DBCP - JDBC connection pool library with advanced performance monitoring capabilities.
  • Xodus - Highly concurrent transactional schema-less and ACID-compliant embedded database.
  • CosId - Universal, flexible, high-performance distributed ID generator.

Date and Time

Libraries related to handling date and time.

  • iCal4j - Parse and build iCalendar RFC 5545 data models.
  • Jollyday - Determines the holidays for a given year, country/name and eventually state/region.
  • ThreeTen-Extra - Additional date-time classes that complement those in JDK 8.
  • Time4J - Advanced date and time library. (LGPL-2.1-only)

Dependency Injection

Libraries that help to realize the Inversion of Control paradigm.

  • Apache DeltaSpike - CDI extension framework.
  • Avaje Inject - Microservice-focused compile-time injection framework without reflection.
  • Dagger - Compile-time injection framework without reflection.
  • Feather - Ultra-lightweight, JSR-330-compliant dependency injection library.
  • Governator - Extensions and utilities that enhance Google Guice.
  • Guice - Lightweight and opinionated framework that completes Dagger.
  • HK2 - Lightweight and dynamic dependency injection framework.
  • JayWire - Lightweight dependency injection framework. (LGPL-3.0-only)

Development

Augmentation of the development process at a fundamental level.

  • AspectJ - Seamless aspect-oriented programming extension.
  • DCEVM - JVM modification that allows unlimited redefinition of loaded classes at runtime. (GPL-2.0-only)
  • Faux Pas - Library that simplifies error handling by circumventing the issue that none of the functional interfaces in the Java Runtime is allowed by default to throw checked exceptions.
  • HotswapAgent - Unlimited runtime class and resource redefinition. (GPL-2.0-only)
  • JavaParser - Parse, modify and generate Java code.
  • JavaSymbolSolver - Symbol solver.
  • Manifold - Re-energizes Java with powerful features like type-safe metaprogramming, structural typing and extension methods.
  • NoException - Allows checked exceptions in functional interfaces and converts exceptions to Optional return.
  • SneakyThrow - Ignores checked exceptions without bytecode manipulation. Can also be used inside Java 8 stream operations.
  • Tail - Enable infinite recursion using tail call optimization.

Distributed Applications

Libraries and frameworks for writing distributed and fault-tolerant applications.

  • Apache Geode - In-memory data management system that provides reliable asynchronous event notifications and guaranteed message delivery.
  • Apache Storm - Realtime computation system.
  • Apache ZooKeeper - Coordination service with distributed configuration, synchronization, and naming registry for large distributed systems.
  • Atomix - Fault-tolerant distributed coordination framework.
  • Axon - Framework for creating CQRS applications.
  • Dropwizard Circuit Breaker - Circuit breaker design pattern for Dropwizard. (GPL-2.0-only)
  • Failsafe - Simple failure handling with retries and circuit breakers.
  • Hazelcast - Highly scalable in-memory datagrid with a free open-source version.
  • JGroups - Toolkit for reliable messaging and cluster creation.
  • Quasar - Lightweight threads and actors for the JVM.
  • resilience4j - Functional fault tolerance library.
  • OpenIG - High-performance reverse proxy server with specialized session management and credential replay functionality.
  • ScaleCube Services - Embeddable Cluster-Membership library based on SWIM and gossip protocol.
  • Zuul - Gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

Distributed Transactions

Distributed transactions provide a mechanism for ensuring consistency of data updates in the presence of concurrent access and partial failures.

  • Atomikos - Provides transactions for REST, SOA and microservices with support for JTA and XA.
  • Bitronix - Simple but complete implementation of the JTA 1.1 API.
  • Narayana - Provides support for traditional ACID and compensation transactions, also complies with JTA, JTS and other standards. (LGPL-2.1-only)
  • Seata - Delivers high performance and easy to use distributed transaction services under a microservices architecture.

Distribution

Tools that handle the distribution of applications in native formats.

  • Artipie - Binary artifact management toolkit which hosts them on the file system or S3.
  • Boxfuse ![c] - Deployment of JVM applications to AWS using the principles of immutable infrastructure.
  • Capsule - Simple and powerful packaging and deployment. A fat JAR on steroids, or a “Docker for Java” that supports JVM-optimized containers.
  • Central Repository - Largest binary component repository available as a free service to the open-source community. Default used by Apache Maven, and available in all other build tools.
  • Cloudsmith ![c] - Fully managed package management SaaS with support for Maven/Gradle/SBT with a free tier.
  • Getdown - System for deploying Java applications to end-user computers and keeping them up to date. Developed as an alternative to Java Web Start.
  • IzPack - Setup authoring tool for cross-platform deployments.
  • JavaPackager - Maven and Gradle plugin which provides an easy way to package Java applications in native Windows, macOS or GNU/Linux executables, and generate installers for them.
  • jDeploy - Deploy desktop apps as native Mac, Windows or Linux bundles.
  • jlink.online - Builds optimized runtimes over HTTP.
  • Nexus ![c] - Binary management with proxy and caching capabilities.
  • packr - Packs JARs, assets and the JVM for native distribution on Windows, Linux and macOS.
  • really-executable-jars-maven-plugin - Maven plugin for making self-executing JARs.

Document Processing

Libraries that assist with processing office document formats.

  • Apache POI - Supports OOXML (XLSX, DOCX, PPTX) as well as OLE2 (XLS, DOC or PPT).
  • documents4j - API for document format conversion using third-party converters such as MS Word.
  • docx4j - Create and manipulate Microsoft Open XML files.
  • fastexcel - High performance library to read and write large Excel (XLSX) worksheets.
  • zerocell - Annotation-based API for reading data from Excel sheets into POJOs with focus on reduced overhead.

Financial

Libraries related to the financial domain.

  • Cassandre - Trading bot framework.
  • Parity - Platform for trading venues.
  • Philadelphia - Low-latency financial information exchange.
  • Square - Integration with the Square API.
  • Stripe - Integration with the Stripe API.
  • ta4j - Library for technical analysis.

Formal Verification

Formal-methods tools: proof assistants, model checking, symbolic execution, etc.

  • CATG - Concolic unit testing engine. Automatically generates unit tests using formal methods.
  • Checker Framework - Pluggable type systems. Includes nullness types, physical units, immutability types and more. (GPL-2.0-only WITH Classpath-exception-2.0)
  • Daikon - Detects likely program invariants and generates JML specs based on those invariants.
  • Java Path Finder (JPF) - JVM formal verification tool containing a model checker and more. Created by NASA.
  • JMLOK 2.0 - Detects inconsistencies between code and JML specification through feedback-directed random tests generation, and suggests a likely cause for each nonconformance detected. (GPL-3.0-only)
  • KeY - Formal software development tool that aims to integrate design, implementation, formal specification, and formal verification of object-oriented software as seamlessly as possible. Uses JML for specification and symbolic execution for verification. (GPL-2.0-or-later)
  • OpenJML - Translates JML specifications into SMT-LIB format and passes the proof problems implied by the program to backend solvers. (GPL-2.0-only)

Functional Programming

Libraries that facilitate functional programming.

  • Cyclops - Monad and stream utilities, comprehensions, pattern matching, functional extensions for all JDK collections, future streams, trampolines and much more.
  • derive4j - Java 8 annotation processor and framework for deriving algebraic data types constructors, pattern-matching and morphisms. (GPL-3.0-only)
  • Fugue - Functional extensions to Guava.
  • Functional Java - Implements numerous basic and advanced programming abstractions that assist composition-oriented development.
  • jOOλ - Extension to Java 8 that aims to fix gaps in lambda by providing numerous missing types and a rich set of sequential Stream API additions.
  • protonpack - Collection of stream utilities.
  • StreamEx - Enhances Java 8 Streams.
  • Vavr - Functional component library that provides persistent data types and functional control structures.

Game Development

Frameworks that support the development of games.

  • FXGL - JavaFX Game Development Framework.
  • JBox2D - Port of the renowned C++ 2D physics engine.
  • jMonkeyEngine - Game engine for modern 3D development.
  • libGDX - All-round cross-platform, high-level framework.
  • Litiengine - AWT-based, lightweight 2D game engine.
  • LWJGL - Robust framework that abstracts libraries like OpenGL/CL/AL.
  • Mini2Dx - Beginner-friendly, master-ready framework for rapidly prototyping and building 2D games.
  • Void2D - High-level 2D game engine with built-in physics based on Swing.

Geospatial

Libraries for working with geospatial data and algorithms.

  • Apache SIS - Library for developing geospatial applications.
  • ArcGIS Maps SDK for Java ![c] - JavaFX library for adding mapping and GIS functionality to desktop apps.
  • Geo - GeoHash utilities in Java.
  • GeoTools - Library that provides tools for geospatial data. (LGPL-2.1-only)
  • GraphHopper - Road-routing engine. Used as a Java library or standalone web service.
  • H2GIS - Spatial extension of the H2 database. (LGPL-3.0-only)
  • Jgeohash - Library for using the GeoHash algorithm.
  • Mapsforge - Map rendering based on OpenStreetMap data. (LGPL-3.0-only)
  • Spatial4j - General-purpose spatial/geospatial library.

GUI

Libraries to create modern graphical user interfaces.

  • JavaFX - Successor of Swing.
  • Scene Builder - Visual layout tool for JavaFX applications.
  • SnapKit - Modern Java UI library for both desktop and web.
  • SWT - Graphical widget toolkit.

High Performance

Everything about high-performance computation, from collections to specific libraries.

  • Agrona - Data structures and utility methods that are common in high-performance applications.
  • Disruptor - Inter-thread messaging library.
  • Eclipse Collections - Collections framework inspired by Smalltalk.
  • fastutil - Fast and compact type-specific collections.
  • HPPC - Primitive collections.
  • JCTools - Concurrency tools currently missing from the JDK.
  • Koloboke - Carefully designed extension of the Java Collections Framework with primitive specializations and more.

HTTP Clients

Libraries that assist with creating HTTP requests and/or binding responses.

  • Apache HttpComponents - Toolset of low-level Java components focused on HTTP and associated protocols.
  • Async Http Client - Asynchronous HTTP and WebSocket client library.
  • Avaje Http Client - Wrapper on JDK 11’s HttpClient that adds Feign-like interface among other enhancements.
  • Feign - HTTP client binder inspired by Retrofit, JAXRS-2.0, and WebSocket.
  • Google HTTP Client - Pluggable HTTP transport abstraction with support for java.net.HttpURLConnection, Apache HTTP Client, Android, Google App Engine, XML, Gson, Jackson and Protobuf.
  • methanol - HTTP client extensions library.
  • Retrofit - Typesafe REST client.
  • Ribbon - Client-side IPC library that is battle-tested in the cloud.
  • Riptide - Client-side response routing for Spring’s RestTemplate.
  • unirest-java - Simplified, lightweight HTTP client library.

Hypermedia Types

Libraries that handle serialization to hypermedia types.

  • hate - Builds hypermedia-friendly objects according to HAL specification.
  • JSON-LD - JSON-LD implementation.
  • Siren4J - Library for the Siren specification.

IDE

Integrated development environments that try to simplify several aspects of development.

  • Eclipse - Established open-source project with support for lots of plugins and languages.
  • IntelliJ IDEA ![c] - Supports many JVM languages and provides good options for Android development. The commercial edition targets the enterprise sector.
  • jGRASP - Created to provide software visualizations that work in conjunction with the debugger such as Control Structure Diagrams, UML class diagrams and Object Viewer.
  • NetBeans - Provides integration for several Java SE and EE features, from database access to HTML5.
  • SnapCode - Modern IDE for Java running in the browser, focused on education.
  • Visual Studio Code - Provides Java support for lightweight projects with a simple, modern workflow by using extensions from the internal marketplace.

Imagery

Libraries that assist with the creation, evaluation or manipulation of graphical images.

  • Imgscalr - Simple, efficient and hardware-accelerated image-scaling library implemented in pure Java 2D.
  • Tess4J - JNA wrapper for Tesseract OCR API.
  • Thumbnailator - High-quality thumbnail generation library.
  • TwelveMonkeys - Collection of plugins that extend the number of supported image file formats.
  • ZXing - Multi-format 1D/2D barcode image processing library.
  • image-comparison - Library that compares 2 images with the same sizes and shows the differences visually by drawing rectangles. Some parts of the image can be excluded from the comparison.

Introspection

Libraries that help make the Java introspection and reflection API easier and faster to use.

  • ClassGraph - ClassGraph (formerly FastClasspathScanner) is an uber-fast, ultra-lightweight, parallelized classpath scanner and module scanner for Java, Scala, Kotlin and other JVM languages.
  • jOOR - jOOR stands for jOOR Object Oriented Reflection. It is a simple wrapper for the java.lang.reflect package.
  • Mirror - Mirror was created to bring light to a simple problem, usually named ReflectionUtil, which is on almost all projects that rely on reflection to do advanced tasks.
  • Objenesis - Allows dynamic instantiation without default constructor, e.g. constructors which have required arguments, side effects or throw exceptions.
  • ReflectASM - ReflectASM is a very small Java library that provides high performance reflection by using code generation.
  • Reflections - Reflections scans your classpath, indexes the metadata, allows you to query it on runtime and may save and collect that information for many modules within your project.

Job Scheduling

Libraries for scheduling background jobs.

  • JobRunr - Job scheduling library which utilizes lambdas for fire-and-forget, delayed and recurring jobs. Guarantees execution by single scheduler instance using optimistic locking. Has features for persistence, minimal dependencies and is embeddable.
  • Quartz - Feature-rich, open source job scheduling library that can be integrated within virtually any Java application.
  • Sundial - Lightweight framework to simply define jobs, define triggers and start the scheduler.
  • Wisp - Simple library with minimal footprint and straightforward API.
  • db-scheduler - Persistent and cluster-friendly scheduler.
  • easy-batch - Set up batch jobs with simple processing pipelines. Records are read in sequence from a data source, processed in pipeline and written in batches to a data sink.
  • shedlock - Makes sure that your scheduled tasks are executed at most once at the same time. If a task is being executed on one node, it acquires a lock which prevents execution of the same task from another node or thread.

JSON

Libraries for serializing and deserializing JSON to and from Java objects.

  • Avaje Jsonb - Reflection-free Json binding via source code generation with Jackson-like annotations.
  • DSL-JSON - JSON library with advanced compile time databinding.
  • Genson - Powerful and easy-to-use Java-to-JSON conversion library.
  • Gson - Serializes objects to JSON and vice versa. Good performance with on-the-fly usage.
  • HikariJSON - High-performance JSON parser, 2x faster than Jackson.
  • jackson-modules-java8 - Set of Jackson modules for Java 8 datatypes and features.
  • Jackson-datatype-money - Open-source Jackson module to support JSON serialization and deserialization of JavaMoney data types.
  • Jackson - Similar to GSON, but offers performance gains if you need to instantiate the library more often.
  • JSON-io - Convert Java to JSON. Convert JSON to Java. Pretty print JSON. Java JSON serializer.
  • jsoniter - Fast and flexible library with iterator and lazy parsing API.
  • LoganSquare - JSON parsing and serializing library based on Jackson’s streaming API. Outperforms GSON & Jackson’s library.
  • Moshi - Modern JSON library, less opinionated and uses built-in types like List and Map.
  • Yasson - Binding layer between classes and JSON documents similar to JAXB.
  • fastjson - Very fast processor with no additional dependencies and full data binding.
  • Jolt - JSON to JSON transformation tool.
  • JsonPath - Extract data from JSON using XPATH-like syntax.
  • JsonSurfer - Streaming JsonPath processor dedicated to processing big and complicated JSON data.

JVM and JDK

Current implementations of the JVM/JDK.

  • Adopt Open JDK - Community-driven OpenJDK builds, including both HotSpot and OpenJ9.
  • Avian - JVM with JIT, AOT modes and iOS port.
  • Corretto - No-cost, multiplatform, production-ready distribution of OpenJDK by Amazon. (GPL-2.0-only WITH Classpath-exception-2.0)
  • Dragonwell8 - Downstream version of OpenJDK optimized for online e-commerce, financial, logistics applications.
  • Graal - Polyglot embeddable JVM. (GPL-2.0-only WITH Classpath-exception-2.0)
  • Liberica JDK - Built from OpenJDK, thoroughly tested and passed the JCK. (GPL-2.0-only WITH Classpath-exception-2.0)
  • OpenJ9 - High performance, enterprise-calibre, flexibly licensed, openly-governed cross-platform JVM extending and augmenting the runtime technology components from the Eclipse OMR and OpenJDK project.
  • Open JDK - Open JDK community home. (GPL-2.0-only WITH Classpath-exception-2.0)
  • ParparVM - VM with non-blocking, concurrent GC for iOS. (GPL-2.0-only WITH Classpath-exception-2.0)
  • RedHat Open JDK - RedHat’s OpenJDK distribution. (GPL-2.0-only WITH Classpath-exception-2.0)
  • SAP Machine - SAP’s no-cost, rigorously tested and JCK-verified OpenJDK friendly fork. (GPL-2.0-only WITH Classpath-exception-2.0)
  • Zulu - OpenJDK builds for Windows, Linux, and macOS. (GPL-2.0-only WITH Classpath-exception-2.0)
  • Microsoft JDK - Microsoft Build of OpenJDK, Free, Open Source, Freshly Brewed!

Logging

Libraries that log the behavior of an application.

  • Apache Log4j 2 - Complete rewrite with a powerful plugin and configuration architecture.
  • Echopraxia - API designed around structured logging, rich context, and conditional logging. There are Logback and Log4J2 implementations, but Echopraxia’s API is completely dependency-free, meaning it can be implemented with any logging API.
  • Graylog - Open-source aggregator suited for extended role and permission management. (GPL-3.0-only)
  • Kibana - Analyzes and visualizes log files. Some features require payment.
  • Logback - Robust logging library with interesting configuration options via Groovy.
  • Logbook - Extensible, open-source library for HTTP request and response logging.
  • Logstash - Tool for managing log files.
  • p6spy - Enables logging for all JDBC transactions without changes to the code.
  • SLF4J - Abstraction layer/simple logging facade.
  • tinylog - Lightweight logging framework with static logger class.
  • OpenTracing Toolbox - Collection of libraries that build on top of OpenTracing and provide extensions and plugins to existing instrumentations.

Machine Learning

Tools that provide specific statistical algorithms for learning from data.

  • Apache Flink - Fast, reliable, large-scale data processing engine.
  • Apache Mahout - Scalable algorithms focused on collaborative filtering, clustering and classification.
  • DatumBox - Provides several algorithms and pre-trained models for natural language processing.
  • Deeplearning4j - Distributed and multi-threaded deep learning library.
  • DJL - High-level and engine-agnostic framework for deep learning.
  • H2O ![c] - Analytics engine for statistics over big data.
  • Intelligent java - Seamlessly integrate with remote deep learning and language models programmatically.
  • JSAT - Algorithms for pre-processing, classification, regression, and clustering with support for multi-threaded execution. (GPL-3.0-only)
  • m2cgen - CLI tool to transpile models into native code.
  • Neureka - A lightweight, platform independent, OpenCL accelerated nd-array/tensor library.
  • oj! Algorithms - High-performance mathematics, linear algebra and optimisation needed for data science, machine learning and scientific computing.
  • Oryx 2 - Framework for building real-time, large-scale machine learning applications. Includes end-to-end applications for collaborative filtering, classification, regression, and clustering.
  • Siddhi - Cloud native streaming and complex event processing engine.
  • Smile - Statistical Machine Intelligence and Learning Engine provides a set of machine learning algorithms and a visualization library.
  • Tribuo - Provides tools for classification, regression, clustering, model development and interfaces with other libraries such as scikit-learn, pytorch and TensorFlow.
  • Weka - Collection of algorithms for data mining tasks ranging from pre-processing to visualization. (GPL-3.0-only)

Messaging

Tools that help send messages between clients to ensure protocol independency.

  • Aeron - Efficient, reliable, unicast and multicast message transport.
  • Apache ActiveMQ - Message broker that implements JMS and converts synchronous to asynchronous communication.
  • Apache Camel - Glues together different transport APIs via Enterprise Integration Patterns.
  • Apache Kafka - High-throughput distributed messaging system.
  • Apache Pulsar - Distributed pub/sub-messaging system.
  • Apache RocketMQ - Fast, reliable, and scalable distributed messaging platform.
  • Apache Qpid - Apache Qpid makes messaging tools that speak AMQP and support many languages and platforms.
  • AutoMQ - AutoMQ is a cloud-native, serverless reinvented Kafka that is easily scalable, manage-less and cost-effective.
  • Deezpatch - Simple, lightweight, and performant dispatch library for decoupling messages (requests and events) and message handlers.
  • EventBus - Simple publish/subscribe event bus.
  • Hermes - Fast and reliable message broker built on top of Kafka.
  • JeroMQ - Implementation of ZeroMQ.
  • Nakadi - Provides a RESTful API on top of Kafka.
  • RabbitMQ Java client - RabbitMQ client.
  • Smack - Cross-platform XMPP client library.
  • NATS client - NATS client.

Microservice

Tools for creating and managing microservices.

  • ActiveRPC - Lightweight and fast library for complex high-load distributed applications and Memcached-like solutions.
  • Apollo - Libraries for writing composable microservices.
  • Armeria - Asynchronous RPC/REST client/server library built on top of Java 8, Netty, HTTP/2, Thrift and gRPC.
  • consul-api - Client for the Consul API: a distributed, highly available and datacenter-aware registry/discovery service.
  • Eureka - REST-based service registry for resilient load balancing and failover.
  • Helidon - Two-style approach for writing microservices: Functional-reactive and as an implementation of MicroProfile.
  • JDA - Wrapping of the Discord REST API and its WebSocket events.
  • KeenType - Modernized version of a Java-based implementation of the New Typesetting System, which was heavily based on Donald E. Knuth’s original TeX.
  • kubernetes-client - Client provides access to the full Kubernetes & OpenShift REST APIs via a fluent DSL.
  • Micronaut - Modern full-stack framework with focus on modularity, minimal memory footprint and startup time.
  • Nacos - Dynamic service discovery, configuration and service management platform for building cloud native applications.
  • OpenAI-Java - Java libraries for using OpenAI’s GPT-3 API.
  • Quarkus - Kubernetes stack tailored for the HotSpot and Graal VM.
  • Sentinel - Flow control component enabling reliability, resilience and monitoring for microservices.

Miscellaneous

Everything else.

  • AWS SDK for Java 2.0 - Wrapper around AWS’ API.
  • CQEngine - Ultra-fast, SQL-like queries on Java collections.
  • Design Patterns - Implementation and explanation of the most common design patterns.
  • FF4J - Feature Flags for Java.
  • FizzBuzz Enterprise Edition - No-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes. (No explicit license)
  • IP2Location.io Java SDK - Wrapper for the IP2Location.io Geolocation API and the IP2WHOIS domain WHOIS API.
  • ISBN core - A small library that contains a representation object of ISBN-10 and ISBN-13 and tools to parse, validate and format one.
  • J2ObjC - Java-to-Objective-C translator for porting Android libraries to iOS.
  • JBake - Static website generator.
  • JBot - Framework for building chatbots. (GPL-3.0-only)
  • JCuda - JCuda offers Java bindings for CUDA and CUDA-related libraries.
  • Jimfs - In-memory file system.
  • JObfuscator![c] - Source code obfuscator.
  • Joda-Money - Basic currency and money classes and algorithms not provided by the JDK.
  • jOOX - Simple wrapper for the org.w3c.dom package, to allow for fluent XML document creation and manipulation with an API inspired by jQuery.
  • JPad - Snippet runner.
  • jsweet - Source transpiler to TypeScript/JavaScript.
  • Maven Wrapper - Analogue of Gradle Wrapper for Maven, allows building projects without installing maven.
  • Membrane Service Proxy - Open-source, reverse-proxy framework.
  • MinimalFTP - Lightweight, small and customizable FTP server.
  • LittleProxy - High performance HTTP proxy atop Netty’s event-based networking library.
  • Modern Java - A Guide to Java 8 - Popular Java 8 guide.
  • Modernizer - Detect uses of legacy Java APIs.
  • OctoLinker - Browser extension which allows to navigate through code on GitHub more efficiently.
  • OpenRefine - Tool for working with messy data: cleaning, transforming, extending it with web services and linking it to databases.
  • PipelinR - Small utility library for using handlers and commands with pipelines.
  • Polyglot for Maven - Extensions for Maven 3.3.1+ that allows writing the POM model in dialects other than XML.
  • RR4J - RR4J is a tool that records java bytecode execution and later allows developers to replay locally.
  • Simple Java Mail - Mailing with a clean and fluent API.
  • Smooks - Framework for fragment-based message processing. (Apache-2.0 OR LGPL-3.0-or-later)
  • Svix - Library for the Svix API to send webhooks and verify signatures.
  • Togglz - Implementation of the Feature Toggles pattern.
  • TypeTools - Tools for resolving generic types.
  • XMLBeam - Processes XML by using annotations or XPath within code.
  • yGuard - Obfuscation via renaming and shrinking.

Mobile Development

Tools for creating or managing mobile applications.

  • Codename One - Cross-platform solution for writing native mobile apps. (GPL-2.0-only WITH Classpath-exception-2.0)
  • MobileUI - Cross-platform framework for developing mobile apps with native UI in Java and Kotlin.
  • Multi-OS Engine - Open-source, cross-platform engine to develop native mobile (iOS, Android, etc.) apps.

Monitoring

Tools that observe/monitor applications in production by providing telemetry.

  • Automon - Combines the power of AOP with monitoring and/or logging tools.
  • Datadog ![c] - Modern monitoring & analytics.
  • Dropwizard Metrics - Expose metrics via JMX or HTTP and send them to a database.
  • Failsafe Actuator - Out of the box monitoring of Failsafe Circuit Breaker in Spring-Boot environment.
  • Glowroot - Open-source Java APM.
  • HertzBeat - Real-time monitoring system with custom-monitor and agentless.
  • hippo4j - Dynamic and observable thread pool framework.
  • inspectIT - Captures detailed run-time information via hooks that can be changed on the fly. It supports tracing over multiple systems via the OpenTracing API and can correlate the data with end user monitoring.
  • Instrumental ![c] - Real-time Java application performance monitoring. A commercial service with free development accounts.
  • Jaeger client - Jaeger client.
  • JavaMelody - Performance monitoring and profiling.
  • jmxtrans - Connect to multiple JVMs and query them for their attributes via JMX. Its query language is based on JSON, which allows non-Java programmers to access the JVM attributes. Supports different output writes, including Graphite, Ganglia, and StatsD.
  • Jolokia - JMX over REST.
  • Micrometer - Vendor-neutral metrics/observability facade for the most popular metrics/observability libraries.
  • Micrometer Tracing - Vendor-neutral distributed tracing facade for the most popular tracer libraries.
  • nudge4j - Remote developer console from the browser for Java 8 via bytecode injection.
  • Pinpoint - Open-source APM tool.
  • Prometheus - Provides a multi-dimensional data model, DSL, autonomous server nodes and much more.
  • Sentry ![c] - Integration with Sentry, an application error tracking and performance analysis platform.
  • SPM ![c] - Performance monitor with distributing transaction tracing for JVM apps.
  • Stagemonitor - Open-source performance monitoring and transaction tracing for JVM apps.
  • Sysmon - Lightweight platform monitoring tool for Java VMs.
  • zipkin - Distributed tracing system which gathers timing data needed to troubleshoot latency problems in microservice architectures.

Native

For working with platform-specific native libraries.

  • Aparapi - Converts bytecode to OpenCL which allows execution on GPUs.
  • JavaCPP - Provides efficient and easy access to native C++.
  • JNA - Work with native libraries without writing JNI. Also provides interfaces to common system libraries.
  • JNR - Work with native libraries without writing JNI. Also provides interfaces to common system libraries. Same goals as JNA, but faster, and serves as the basis for the upcoming Project Panama.

Natural Language Processing

Libraries that specialize in processing text.

  • CogCompNLP - Provides common annotators for plain text input. (Research and Academic Use License)
  • CoreNLP - Provides a set of fundamental tools for tasks like tagging, named entity recognition, and sentiment analysis. (GPL-3.0-or-later)
  • DKPro - Collection of reusable NLP tools for linguistic pre-processing, machine learning, lexical resources, etc.
  • LingPipe - Toolkit for tasks ranging from POS tagging to sentiment analysis.

Networking

Libraries for building network servers.

  • Commons-networking - Client for server-sent events (SSE).
  • Comsat - Integrates standard Java web-related APIs with Quasar fibers and actors.
  • Dubbo - High-performance RPC framework.
  • Grizzly - NIO framework. Used as a network layer in Glassfish.
  • gRPC - RPC framework based on protobuf and HTTP/2.
  • KryoNet - Provides a clean and simple API for efficient TCP and UDP client/server network communication using NIO and Kryo.
  • MINA - Abstract, event-driven async I/O API for network operations over TCP/IP and UDP/IP via Java NIO.
  • Netty - Framework for building high-performance network applications.
  • Drift - Easy-to-use, annotation-based library for creating Thrift clients and serializable types.
  • ServiceTalk - Framework built on Netty with APIs tailored to specific protocols and support for multiple programming paradigms.
  • sshj - Programmatically use SSH, SCP or SFTP.
  • TLS Channel - Implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS.
  • Undertow - Web server providing both blocking and non-blocking APIs based on NIO. Used as a network layer in WildFly. (LGPL-2.1-only)
  • urnlib - Represent, parse and encode URNs, as in RFC 2141. (GPL-3.0-only)
  • Fluency - High throughput data ingestion logger to Fluentd and Fluent Bit.

ORM

APIs that handle the persistence of objects.

  • Apache Cayenne - Provides a clean, static API for data access. Also includes a GUI Modeler for working with database mappings, and DB reverse engineering and generation.
  • Doma - Database access framework that verifies and generates source code at compile time using annotation processing as well as native SQL templates called two-way SQL.
  • Ebean - Provides simple and fast data access.
  • EclipseLink - Supports a number of persistence standards: JPA, JAXB, JCA and SDO.
  • Hibernate - Robust and widely used, with an active community. (LGPL-2.1-only)
  • MyBatis - Couples objects with stored procedures or SQL statements.
  • ObjectiveSql - ActiveRecord ORM for rapid development and convention over configuration.
  • Permazen - Language-natural persistence layer.
  • SimpleFlatMapper - Simple database and CSV mapper.

PaaS

Java platform as a service.

PDF

Tools to help with PDF files.

  • Apache FOP - Creates PDFs from XSL-FO.
  • Apache PDFBox - Toolbox for creating and manipulating PDFs.
  • Dynamic Jasper - Abstraction layer to JasperReports. (LGPL-3.0-only)
  • DynamicReports - Simplifies JasperReports. (LGPL-3.0-only)
  • Eclipse BIRT - Report engine for creating PDF and other formats (DOCX, XLSX, HTML, etc) using Eclipse-based visual editor.
  • flyingsaucer - XML/XHTML and CSS 2.1 renderer. (LGPL-2.1-or-later)
  • iText ![c] - Creates PDF files programmatically.
  • JasperReports - Complex reporting engine. (LGPL-3.0-only)
  • Open HTML to PDF - Properly supports modern PDF standards based on flyingsaucer and Apache PDFBox.
  • OpenPDF - Open-source iText fork. (LGPL-3.0-only & MPL-2.0)
  • Tabula - Extracts tables from PDF files.

Performance analysis

Tools for performance analysis, profiling and benchmarking.

  • fastThread ![c] - Analyze and visualize thread dumps with a free cloud-based upload interface.
  • GCeasy ![c] - Tool to analyze and visualize GC logs. It provides a free cloud-based upload interface.
  • honest-profiler - Low-overhead, bias-free sampling profiler.
  • jHiccup - Logs and records platform JVM stalls.
  • JITWatch - Analyze the JIT compiler optimisations made by the HotSpot JVM.
  • JMH - Harness for building, running, and analysing nano/micro/milli/macro benchmarks written in Java and other languages targeting the JVM. (GPL-2.0 only WITH Classpath-exception-2.0)
  • LatencyUtils - Utilities for latency measurement and reporting.

Platform

Frameworks that are suites of multiple libraries encompassing several categories.

Apache Commons

  • BCEL - Byte Code Engineering Library - analyze, create, and manipulate Java class files.
  • BeanUtils - Easy-to-use wrappers around the Java reflection and introspection APIs.
  • BeanUtils2 - Redesign of Commons BeanUtils.
  • BSF - Bean Scripting Framework - interface to scripting languages, including JSR-223.
  • Chain - Chain of Responsibility pattern implementation.
  • ClassScan - Find Class interfaces, methods, fields, and annotations without loading.
  • CLI - Command-line arguments parser.
  • CLI2 - Redesign of Commons CLI.
  • Codec - General encoding/decoding algorithms, e.g. phonetic, base64 or URL.
  • Collections - Extends or augments the Java Collections Framework.
  • Compress - Defines an API for working with tar, zip and bzip2 files.
  • Configuration - Reading of configuration/preferences files in various formats.
  • Convert - Commons-Convert aims to provide a single library dedicated to the task of converting an object of one type to another.
  • CSV - Component for reading and writing comma separated value files.
  • Daemon - Alternative invocation mechanism for unix-daemon-like java code.
  • DBCP - Database connection pooling services.
  • DbUtils - JDBC helper library.
  • Digester - XML-to-Java-object mapping utility.
  • Email - Library for sending e-mail from Java.
  • Exec - API for dealing with external process execution and environment management in Java.
  • FileUpload - File upload capability for your servlets and web applications.
  • Finder - Java library inspired by the UNIX find command.
  • Flatfile - Java library for working with flat data structures.
  • Functor - Function that can be manipulated as an object, or an object representing a single, generic function.
  • Graph - General purpose graph APIs and algorithms.
  • I18n - Adds the feature of localized message bundles that consist of one or many localized texts that belong together.
  • Id - Id is a component used to generate identifiers.
  • Imaging - Image library.
  • IO - Collection of I/O utilities.
  • Javaflow - Continuation implementation to capture the state of the application.
  • JCI - Java Compiler Interface.
  • JCS - Java Caching System.
  • Jelly - XML based scripting and processing engine.
  • Jexl - Expression language which extends the Expression Language of the JSTL.
  • JNet - JNet allows to use dynamically register url stream handlers through the java.net API.
  • JXPath - Utilities for manipulating Java Beans using the XPath syntax.
  • Lang - Provides extra functionality for classes in java.lang.
  • Logging - Wrapper around a variety of logging API implementations.
  • Math - Lightweight, self-contained mathematics and statistics components.
  • Monitoring - Monitoring aims to provide a simple but extensible monitoring solution for Java applications.
  • Nabla - Nabla provides automatic differentiation classes that can generate derivative of any function implemented in the Java language.
  • Net - Collection of network utilities and protocol implementations.
  • OGNL - Object-graph navigation language.
  • OpenPGP - Interface to signing and verifying data using OpenPGP.
  • Performance - Small framework for microbenchmark clients, with implementations for Commons DBCP and Pool.
  • Pipeline - Provides a set of pipeline utilities designed around work queues that run in parallel to sequentially process data objects.
  • Pool - Generic object pooling component.
  • Proxy - Library for creating dynamic proxies.
  • RDF - Common implementation of RDF 1.1 that could be implemented by systems on the JVM.
  • RNG - Commons Rng provides implementations of pseudo-random numbers generators.
  • SCXML - Implementation of the State Chart XML specification aimed at creating and maintaining a Java SCXML engine.
  • Validator - Framework to define validators and validation rules in an xml file.
  • VFS - Virtual File System component for treating files, FTP, SMB, ZIP and such like as a single logical file system.
  • Weaver - Provides an easy way to enhance (weave) compiled bytecode.

Other

  • CUBA Platform - High-level framework for developing enterprise applications with a rich web interface, based on Spring, EclipseLink and Vaadin.
  • Light-4J - Fast, lightweight and productive microservices framework with built-in security.
  • Orienteer - Open-source business application platform for rapid configuration/development of CRM, ERP, LMS and other applications.
  • Spring - Provides many packages for dependency injection, aspect-oriented programming, security, etc.

Processes

Libraries that help the management of operating system processes.

  • ch.vorburger.exec - Convenient API around Apache Commons Exec.
  • zt-exec - Provides a unified API to Apache Commons Exec and ProcessBuilder.
  • zt-process-killer - Stops processes started from Java or the system processes via PID.

Reactive libraries

Libraries for developing reactive applications.

  • Akka - Toolkit and runtime for building concurrent, distributed, fault-tolerant and event-driven applications.
  • Reactive Streams - Provides a standard for asynchronous stream processing with non-blocking backpressure.
  • Reactor - Library for building reactive fast-data applications.
  • RxJava - Allows for composing asynchronous and event-based programs using observable sequences.
  • vert.x - Polyglot event-driven application framework.

REST Frameworks

Frameworks specifically for creating RESTful services.

  • Dropwizard - Opinionated framework for setting up modern web applications with Jetty, Jackson, Jersey and Metrics.
  • Elide - Opinionated framework for JSON- or GraphQL-APIs based on a JPA data model.
  • Jersey - JAX-RS reference implementation.
  • Microserver - Convenient, extensible microservices plugin system for Spring & Spring Boot. With more than 30 plugins and growing, it supports both micro-monolith and pure microservices styles.
  • Rapidoid - Simple, secure and extremely fast framework consisting of an embedded HTTP server, GUI components and dependency injection.
  • rest.li - Framework for building robust, scalable RESTful architectures using typesafe bindings and asynchronous, non-blocking IO with an end-to-end developer workflow that promotes clean practices, uniform interface design and consistent data modeling.
  • RESTEasy - Fully certified and portable implementation of the JAX-RS specification.
  • RestExpress - Thin wrapper on the JBoss Netty HTTP stack that provides scaling and performance.
  • Restlet Framework - Pioneering framework with powerful routing and filtering capabilities, and a unified client and server API.
  • Spark - Sinatra inspired framework.
  • Crnk - Implementation of the JSON API specification to build resource-oriented REST endpoints with sorting, filtering, paging, linking, object graphs, type-safety, bulk updates, integrations and more.
  • springdoc-openapi - Automates the generation of API documentation using Spring Boot projects.
  • Swagger - Standard, language-agnostic interface to REST APIs.

Science

Libraries for scientific computing, analysis and visualization.

  • BioJava - Facilitates processing biological data by providing algorithms, file format parsers, sequencing and 3D visualization commonly used in bioinformatics.
  • Chart-FX - Scientific charting library with focus on performance optimised real-time data visualisation at 25 Hz update rates for large data sets.
  • DataMelt - Environment for scientific computation, data analysis and data visualization. (GPL-3.0-or-later)
  • Erdos - Modular, light and easy graph framework for theoretic algorithms.
  • GraphStream - Library for modeling and analyzing dynamic graphs.
  • JFreeChart - 2D chart library for Swing, JavaFX and server-side applications. (LGPL-2.1-only)
  • JGraphT - Graph library that provides mathematical graph-theory objects and algorithms.
  • JGraphX - Library for visualizing (mainly Swing) and interacting with node-edge graphs.
  • LogicNG - Library for creating, manipulating and solving Boolean and Pseudo-Boolean formulas.
  • Mines Java Toolkit - Library for geophysical scientific computation, visualization and digital signal analysis.
  • Morpheus - Provides a versatile two-dimensional memory efficient tabular data structure called a DataFrame to enable efficient in-memory analytics for scientific computing on the JVM.
  • Orekit - A low level space flight dynamics library providing basic elements (orbits, dates, attitude, frames…) and various algorithms (conversions, propagations, pointing…) to handle them.
  • Orson-Charts - Generates a wide variety of 3D charts that can be displayed with Swing and JavaFX or exported to PDF, SVG, PNG and JPEG. (GPL-3.0-only)
  • Tablesaw - Includes a data-frame, an embedded column store, and hundreds of methods to transform, summarize, or filter data.
  • XChart - Light-weight library for plotting data. Many customizable chart types are available.

Engines that index documents for search and analysis.

  • Apache Lucene - High-performance, full-featured, cross-platform, text search engine library.
  • Apache Solr - Enterprise search engine optimized for high-volume traffic.
  • Elasticsearch - Distributed, multitenant-capable, full-text search engine with a RESTful web interface and schema-free JSON documents.
  • Indexer4j - Simple and light full text indexing and searching library.

Security

Libraries that handle security, authentication, authorization or session management.

  • Apache Shiro - Performs authentication, authorization, cryptography and session management.
  • Bouncy Castle - All-purpose cryptographic library and JCA provider offering a wide range of functions, from basic helpers to PGP/SMIME operations.
  • DependencyCheck - Detects publicly disclosed vulnerabilities contained within a project’s dependencies.
  • Cryptomator - Multiplatform, transparent, client-side encryption of files in the cloud. (GPL-3.0-only)
  • Hdiv - Runtime application that repels application security risks included in the OWASP Top 10, including SQL injection, cross-site scripting, cross-site request forgery, data tampering, and brute force attacks.
  • jjwt - JSON web token for Java and Android.
  • jwt-java - Easily create and parse JSON Web Tokens and create customized JWT validators using a fluent API.
  • Jwks RSA - JSON Web Key Set parser.
  • Kalium - Binding for the Networking and Cryptography (NaCl) library.
  • Keycloak - Integrated SSO and IDM for browser apps and RESTful web services.
  • Keywhiz - System for distributing and managing secrets.
  • Nbvcxz - Advanced password strength estimation.
  • OACC - Provides permission-based authorization services.
  • OpenAM - Access management solution that includes authentication, SSO, authorization, federation, entitlements and web services security.
  • OTP-Java - One-time password generator library according to RFC 4226 (HOTP) and RFC 6238 (TOTP).
  • pac4j - Security engine.
  • Passay - Enforce password policy by validating candidate passwords against a configurable rule set.
  • Password4j - User-friendly cryptographic library that supports Argon2, Bcrypt, Scrypt, PBKDF2 and various other cryptographic hash functions.
  • SecurityBuilder - Fluent Builder API for JCA and JSSE classes and especially X.509 certificates.
  • SSLContext-Kickstart - High-level SSL context builder for configuring HTTP clients with SSL/TLS.
  • Themis - Multi-platform high-level cryptographic library provides easy-to-use encryption for protecting sensitive data: secure messaging with forward secrecy, secure data storage (AES256GCM); suits for building end-to-end encrypted applications.
  • Tink - Provides a simple and misuse-proof API for common cryptographic tasks.
  • Topaz - Fine-grained authorization for applications with support for RBAC, ABAC, and ReBAC.

Serialization

Libraries that handle serialization with high efficiency.

  • FlatBuffers - Memory-efficient serialization library that can access serialized data without unpacking and parsing it.
  • FST - JDK-compatible, high-performance object graph serialization.
  • Fury - Blazing fast object graph serialization framework powered by JIT and zero-copy.
  • Kryo - Fast and efficient object graph serialization framework.
  • MessagePack - Efficient binary serialization format.
  • PHP Serializer - Serializing objects in the PHP serialization format.

Server

Servers specifically used to deploy applications.

  • Apache Tomcat - Robust, all-round server for Servlet and JSP.
  • Apache TomEE - Tomcat plus Java EE.
  • Jetty - Provides a Web server and javax.servlet container, plus support for HTTP/2, WebSocket, OSGi, JMX, JNDI, JAAS and many other integrations.
  • nanohttpd - Tiny, easily embeddable HTTP server.
  • WildFly - Formerly known as JBoss and developed by Red Hat with extensive Java EE support. (LGPL-2.1-only)

Template Engine

Tools that substitute expressions in a template.

  • Freemarker - Library to generate text output (HTML web pages, e-mails, configuration files, source code, etc.) based on templates and changing data.
  • Handlebars.java - Logicless and semantic Mustache templates.
  • Jade4J - Implementation of Pug (formerly known as Jade).
  • Jamal - Extendable template engine embedded into Maven/JavaDoc, supporting multiple extensions (Groovy, Ruby, JavaScript, JShell, PlantUml) with support for snippet handling.
  • jstachio - Typesafe Mustache templating engine.
  • jte - Compiles to classes, and uses an easy syntax, several features to make development easier and provides fast execution and a small footprint.
  • Jtwig - Modular, configurable and fully tested template engine.
  • Pebble - Inspired by Twig and separates itself with its inheritance feature and its easy-to-read syntax. It ships with built-in autoescaping for security and it includes integrated support for internationalization.
  • Rocker - Optimized, memory efficient and speedy template engine producing statically typed, plain objects.
  • StringTemplate - Template engine for generating source code, web pages, emails, or any other formatted text output.
  • Thymeleaf - Aims to be a substitute for JSP and works for XML files.

Testing

Tools that test from model to the view.

Asynchronous

Tools that simplify testing asynchronous services.

  • Awaitility - DSL for synchronizing asynchronous operations.
  • ConcurrentUnit - Toolkit for testing multi-threaded and asynchronous applications.
  • GreenMail - In-memory email server for integration testing. Supports SMTP, POP3 and IMAP including SSL. (GPL-2.0-only)
  • Hoverfly Java - Native bindings for Hoverfly, a proxy which allows you to simulate HTTP services.
  • Karate - DSL that combines API test-automation, mocks and performance-testing making testing REST/HTTP services easy.
  • REST Assured - DSL for easy testing of REST/HTTP services.
  • WebTau - Test across REST-API, Graph QL, Browser, Database, CLI and Business Logic with consistent set of matchers and concepts.

BDD

Testing for the software development process that emerged from TDD and was heavily influenced by DDD and OOAD.

  • Cucumber - Provides a way to describe features in a plain language which customers can understand.
  • Cukes-REST - Collection of Gherkin steps for REST-service testing using Cucumber.
  • J8Spec - Follows a Jasmine-like syntax.
  • JBehave - Extensively configurable framework that describes stories.
  • JGiven - Provides a fluent API which allows for simpler composition.
  • Lamdba Behave - Aims to provide a fluent API to write tests in long and descriptive sentences that read like plain English.
  • Serenity BDD - Automated Acceptance testing and reporting library that works with Cucumber, JBehave and JUnit to make it easier to write high quality executable specifications.

Fixtures

Everything related to the creation and handling of random data.

  • Beanmother - Sets up beans from YAML fixtures.
  • Datafaker - Modern fake data generator forked from Java Faker.
  • Fixture Factory - Generates fake objects from a template.
  • jFairy - Fake data generator.
  • Instancio - Automates data setup in unit tests by generating fully-populated, reproducible objects. Includes JUnit 5 extension.
  • Randomized Testing - JUnit test runner and plugins for running JUnit tests with pseudo-randomness.
  • Java Faker - Port of Ruby’s fake data generator.
  • Mockneat - Another fake data generator.

Frameworks

Provide environments to run tests for a specific use case.

  • ArchUnit - Test library for specifying and asserting architecture rules.
  • Apache JMeter - Functional testing and performance measurements.
  • Arquillian - Integration and functional testing platform for Java EE containers.
  • Citrus - Integration testing framework that focuses on both client- and server-side messaging.
  • Gatling - Load testing tool designed for ease of use, maintainability and high performance.
  • JUnit - Common testing framework.
  • jqwik - Engine for property-based testing built on JUnit 5.
  • Pact JVM - Consumer-driven contract testing.
  • PIT - Fast mutation-testing framework for evaluating fault-detection abilities of existing JUnit or TestNG test suites.

Matchers

Libraries that provide custom matchers.

  • AssertJ - Fluent assertions that improve readability.
  • Hamcrest - Matchers that can be combined to create flexible expressions of intent.
  • JSONAssert - Simplifies testing JSON strings.
  • JsonUnit - Library that simplifies JSON comparison in tests.
  • Truth - Google’s fluent assertion and proposition framework.
  • XMLUnit - Simplifies testing for XML output.

Miscellaneous

Other stuff related to testing.

  • ConsoleCaptor - Captures console output for unit testing purposes.
  • junit-dataprovider - TestNG-like data provider/runner for JUnit.
  • LogCaptor - Captures log entries for unit testing purposes.
  • log-capture - Captures log entries and provides assertions for unit and integration testing.
  • Mutability Detector - Reports whether instances of a given class are immutable.
  • pojo-tester - Automatically performs tests on basic POJO methods. (LGPL-3.0-only)
  • raml-tester - Tests if a request/response matches a given RAML definition.
  • Selfie - Snapshot testing (inline and on disk).
  • TestContainers - Provides throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.

Mocking

Tools which mock collaborators to help testing single, isolated units.

  • JMockit - Integration testing, API mocking and faking, and code coverage.
  • Mockito - Mocking framework that lets you write tests with a clean and simple API.
  • MockServer - Allows mocking of systems integrated with HTTPS.
  • Moco - Concise web services for stubs and mocks.
  • PowerMock - Mocks static methods, constructors, final classes and methods, private methods, and removal of static initializers.
  • WireMock - Stubs and mocks web services.
  • EasyMock - EasyMock is a Java library that provides an easy way to use Mock Objects in unit testing.

Utility

Libraries which provide general utility functions.

  • Arthas - Allows to troubleshoot production issues for applications without modifying code or restarting servers.
  • bucket4j - Rate limiting library based on token-bucket algorithm.
  • cactoos - Collection of object-oriented primitives.
  • Chocotea - Generates postman collection, environment and integration tests from java code.
  • CRaSH - Provides a shell into a JVM that’s running CRaSH. Used by Spring Boot and others. (LGPL-2.1-or-later)
  • Dex - Java/JavaFX tool capable of powerful ETL and data visualization.
  • dregex - Regular expression engine that uses deterministic finite automata. It supports some Perl-style features and yet retains linear matching time, and also offers set operations.
  • Embulk - Bulk data loader that helps data transfer between various databases, storages, file formats, and cloud services.
  • fswatch - Micro library to watch for directory file system changes, simplifying java.nio.file.WatchService.
  • Gephi - Cross-platform for visualizing and manipulating large graph networks. (GPL-3.0-only)
  • Guava - Collections, caching, primitives support, concurrency libraries, common annotations, string processing, I/O, and more.
  • JADE - Framework and environment for building and debugging multi-agent systems. (LGPL-2.0-only)
  • Java Diff Utils - Utilities for text or data comparison and patching.
  • JavaVerbalExpressions - Library that helps with constructing difficult regular expressions.
  • JGit - Lightweight, pure Java library implementing the Git version control system.
  • JKScope - Java scope functions inspired by Kotlin.
  • minio-java - Provides simple APIs to access any Amazon S3-compatible object storage server.
  • Protégé - Provides an ontology editor and a framework to build knowledge-based systems.
  • Semver4j - Lightweight library that helps you handling semantic versioning with different modes.
  • Underscore-java - Port of Underscore.js functions.

Version Managers

Utilities that help create the development shell environment and switch between different Java versions.

  • jabba - Java Version Manager inspired by nvm. Supports macOS, Linux and Windows.
  • jenv - Java Version Manager inspired by rbenv. Can configure globally or per project. Tested on Debian and macOS.
  • SDKMan - Java Version Manager inspired by RVM and rbenv. Supports UNIX-based platforms and Windows.

Web Crawling

Libraries that analyze the content of websites.

  • Apache Nutch - Highly extensible, highly scalable web crawler for production environments.
  • Crawler4j - Simple and lightweight web crawler.
  • jsoup - Scrapes, parses, manipulates and cleans HTML.
  • StormCrawler - SDK for building low-latency and scalable web crawlers.
  • webmagic - Scalable crawler with downloading, url management, content extraction and persistent.

Web Frameworks

Frameworks that handle the communication between the layers of a web application.

  • ActiveJ - Lightweight asynchronous framework built from the ground up for developing high-performance web applications.
  • Apache Tapestry - Component-oriented framework for creating dynamic, robust, highly scalable web applications.
  • Apache Wicket - Component-based web application framework similar to Tapestry, with a stateful GUI.
  • Blade - Lightweight, modular framework that aims to be elegant and simple.
  • Bootique - Minimally opinionated framework for runnable apps.
  • Firefly - Asynchronous framework for rapid development of high-performance web application.
  • Javalin - Microframework for web applications.
  • Jooby - Scalable, fast and modular micro-framework that offers multiple programming models.
  • Ninja - Full-stack web framework.
  • Pippo - Small, highly modularized, Sinatra-like framework.
  • Play - Built on Akka, it provides predictable and minimal resource consumption (CPU, memory, threads) for highly-scalable applications in Java and Scala.
  • PrimeFaces - JSF framework with both free and commercial/support versions and frontend components.
  • Ratpack - Set of libraries that facilitate fast, efficient, evolvable and well-tested HTTP applications.
  • Takes - Opinionated web framework which is built around the concepts of True Object-Oriented Programming and immutability.
  • Vaadin - Full-stack open-source Java framework that simplifies web app development. Build complex, interactive applications with Java alone, and enhance with TypeScript and React components, without needing deep JavaScript, CSS, or HTML expertise.

Workflow Orchestration Engines

  • Cadence - Stateful code platform from Uber.
  • flowable - Compact and efficient workflow and business process management platform.
  • Temporal - Microservice orchestration platform, forked from Cadence but gRPC based.

Resources

Communities

Active discussions.

Frontends

Websites that provide a frontend for this list. Please note, there won’t be an official website. We don’t associate with a particular website and everybody is allowed to create one.

Influential Books

Books that made a big impact and are still worth reading.

Podcasts and Screencasts

Something to look at or listen to while programming.

People

Twitter

Active accounts to follow. Descriptions from Twitter.

  • Adam Bien - Freelance author, JavaOne Rockstar speaker, consultant, Java Champion.
  • Aleksey Shipilëv - Performance geek, benchmarking czar, concurrency bug hunter.
  • Antonio Goncalves - Java Champion, JUG Leader, Devoxx France, Java EE 6/7, JCP, Author.
  • Arun Gupta - Java Champion, JavaOne Rockstar, JUG Leader, Devoxx4Kids-er, VP of Developer Advocacy at Couchbase.
  • Brian Goetz - Java Language Architect at Oracle.
  • Bruno Borges - Product Manager/Java Jock at Oracle.
  • Chris Engelbert - Open Source Enthusiast, Speaker, Developer, Developer Advocacy at TimescaleDB.
  • Chris Richardson - Software architect, consultant, and serial entrepreneur, Java Champion, JavaOne Rock Star, *POJOs in Action- author.
  • Ed Burns - Consulting Member of the Technical Staff at Oracle.
  • Eugen Paraschiv - Author of the Spring Security Course.
  • Heinz Kabutz - Java Champion, speaker, author of The Java Specialists’ Newsletter, concurrency performance expert.
  • Holly Cummins - Technical Lead of IBM London’s Bluemix Garage, Java Champion, developer, author, JavaOne rockstar.
  • James Weaver - Java/JavaFX/IoT developer, author and speaker.
  • Java EE - Official Java EE Twitter account.
  • Java Magazine - Official Java Magazine account.
  • Java - Official Java Twitter account.
  • Javin Paul - Well-known Java blogger.
  • Josh Long - Spring Advocate at Pivotal, author of O’Reilly’s Cloud Native Java- and Building Microservices with Spring Boot, JavaOne Rock Star.
  • Lukas Eder - Java Champion, speaker, Founder and CEO Data Geekery (jOOQ).
  • Mani Sarkar - Java champion, Polyglot, Software Crafter involved with @graalvm, AI/ML/DL, Data Science, Developer communities, speaker & blogger. Creator of couple of awesome lists like this one.
  • Mario Fusco - RedHatter, JUG coordinator, frequent speaker and author.
  • Mark Heckler - Pivotal Principal Technologist and Developer Advocate, conference speaker, published author, and Java Champion, focusing on Internet of Things and the cloud.
  • Mark Reinhold - Chief Architect, Java Platform Group, Oracle.
  • Markus Eisele - Java EE evangelist, Red Hat.
  • Martijn Verburg - London JUG co-leader, speaker, author, Java Champion and much more.
  • Martin Thompson - Pasty faced performance gangster.
  • Monica Beckwith - Performance consultant, JavaOne Rock Star.
  • OpenJDK - Official OpenJDK account.
  • Peter Lawrey - Peter Lawrey, Java performance expert.
  • Randy Shoup - Stitch Fix VP Engineering, speaker, JavaOne Rock Star.
  • Reza Rahman - Java EE/GlassFish/WebLogic evangelist, author, speaker, open source hacker.
  • Sander Mak - Java Champion, author.
  • Simon Maple - Java Champion, VirtualJUG founder, LJC leader, RebelLabs author.
  • Spencer Gibb - Software Engineer, Dad, Geek, Co-founder and Lead of Spring Cloud Core @pivotal.
  • Stephen Colebourne - Java Champion, speaker.
  • Trisha Gee - Java Champion and speaker.
  • Venkat Subramaniam - Author, University of Houston professor, MicroSoft MVP award recipient, JavaOne Rock Star, Java Champion.
  • Vlad Mihalcea - Java Champion working on Hypersistence Optimizer, database aficionado, author of High-Performance Java Persistence book.

Other

  • Groundbreakers - Oracle ACEs, Groundbreaker Ambassadors and Java Champions.

Websites

Sites to read.

Go Language

Go Language

Go language frameworks and tools

Contents

Actor Model

Libraries for building actor-based programs.

  • Ergo - An actor-based Framework with network transparency for creating event-driven architecture in Golang. Inspired by Erlang.
  • Goakt - Fast and Distributed Actor framework using protocol buffers as message for Golang.
  • Hollywood - Blazingly fast and light-weight Actor engine written in Golang.
  • ProtoActor - Proto Actor - Ultra fast distributed actors for Go, C# and Java/Kotlin.

Artificial Intelligence

Libraries for building programs that leverage AI.

  • fun - The simplest but powerful way to use large language models (LLMs) in Go.
  • langchaingo - LangChainGo is a framework for developing applications powered by language models.
  • LocalAI - Open Source OpenAI alternative, self-host AI models.
  • Ollama - Run large language models locally.
  • OllamaFarm - Manage, load-balance, and failover packs of Ollamas

Audio and Music

Libraries for manipulating audio.

  • flac - Native Go FLAC encoder/decoder with support for FLAC streams.
  • gaad - Native Go AAC bitstream parser.
  • GoAudio - Native Go Audio Processing Library.
  • gosamplerate - libsamplerate bindings for go.
  • id3v2 - ID3 decoding and encoding library for Go.
  • malgo - Mini audio library.
  • minimp3 - Lightweight MP3 decoder library.
  • Oto - A low-level library to play sound on multiple platforms.
  • PortAudio - Go bindings for the PortAudio audio I/O library.

Authentication and OAuth

Libraries for implementing authentication schemes.

  • authboss - Modular authentication system for the web. It tries to remove as much boilerplate and “hard things” as possible so that each time you start a new web project in Go, you can plug it in, configure it, and start building your app without having to build an authentication system each time.
  • branca - branca token specification implementation for Golang 1.15+.
  • casbin - Authorization library that supports access control models like ACL, RBAC, and ABAC.
  • cookiestxt - provides a parser of cookies.txt file format.
  • go-guardian - Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication that supports LDAP, Basic, Bearer token, and Certificate based authentication.
  • go-jose - Fairly complete implementation of the JOSE working group’s JSON Web Token, JSON Web Signatures, and JSON Web Encryption specs.
  • gologin - chainable handlers for login with OAuth1 and OAuth2 authentication providers.
  • gorbac - provides a lightweight role-based access control (RBAC) implementation in Golang.
  • gosession - This is quick session for net/http in GoLang. This package is perhaps the best implementation of the session mechanism, or at least it tries to become one.
  • goth - provides a simple, clean, and idiomatic way to use OAuth and OAuth2. Handles multiple providers out of the box.
  • jeff - Simple, flexible, secure, and idiomatic web session management with pluggable backends.
  • jwt - Lightweight JSON Web Token (JWT) library.
  • jwt - Safe, simple, and fast JSON Web Tokens for Go.
  • jwt-auth - JWT middleware for Golang http servers with many configuration options.
  • jwt-go - A full featured implementation of JSON Web Tokens (JWT). This library supports the parsing and verification as well as the generation and signing of JWTs.
  • jwx - Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies
  • keto - Open Source (Go) implementation of “Zanzibar: Google’s Consistent, Global Authorization System”. Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.
  • loginsrv - JWT login microservice with pluggable backends such as OAuth2 (Github), htpasswd, osiam.
  • oauth2 - Successor of goauth2. Generic OAuth 2.0 package that comes with JWT, Google APIs, Compute Engine, and App Engine support.
  • oidc - Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
  • openfga - Implementation of fine-grained authorization based on the “Zanzibar: Google’s Consistent, Global Authorization System” paper. Backed by CNCF.
  • osin - Golang OAuth2 server library.
  • otpgen - Library to generate TOTP/HOTP codes.
  • otpgo - Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.
  • paseto - Golang implementation of Platform-Agnostic Security Tokens (PASETO).
  • permissions2 - Library for keeping track of users, login states, and permissions. Uses secure cookies and bcrypt.
  • scope - Easily Manage OAuth2 Scopes In Go.
  • scs - Session Manager for HTTP servers.
  • securecookie - Efficient secure cookie encoding/decoding.
  • session - Go session management for web servers (including support for Google App Engine - GAE).
  • sessions - Dead simple, highly performant, highly customizable sessions service for go http servers.
  • sessionup - Simple, yet effective HTTP session management and identification package.
  • sjwt - Simple jwt generator and parser.

Blockchain

Tools for building blockchains.

  • cometbft - A distributed, Byzantine fault-tolerant, deterministic state machine replication engine. It is a fork of Tendermint Core and implements the Tendermint consensus algorithm.
  • cosmos-sdk - A Framework for Building Public Blockchains in the Cosmos Ecosystem.
  • go-ethereum - Official Go implementation of the Ethereum protocol.
  • gosemble - A Go-based framework for building Polkadot/Substrate-compatible runtimes.
  • gossamer - A Go implementation of the Polkadot Host.
  • kubo - A blockchain framework implemented in Go. It provides content-addressable storage which can be used for decentralized storage in DApps. It is based on the IPFS protocol.
  • lnd - A complete implementation of a Lighting Network node.
  • solana-go - Go library to interface with Solana JSON RPC and WebSocket interfaces.
  • tendermint - High-performance middleware for transforming a state machine written in any programming language into a Byzantine Fault Tolerant replicated state machine using the Tendermint consensus and blockchain protocols.

Bot Building

Libraries for building and working with bots.

  • bot - Zero-dependencies Telegram Bot library with additional UI components
  • echotron - An elegant and concurrent library for Telegram Bots in Go.
  • ephemeral-roles - A Discord bot for managing ephemeral roles based upon voice channel member presence.
  • go-chat-bot - IRC, Slack & Telegram bot written in Go.
  • go-joe - A general-purpose bot library inspired by Hubot but written in Go.
  • go-sarah - Framework to build a bot for desired chat services including LINE, Slack, Gitter, and more.
  • go-tg - Generated from official docs Go client library for accessing Telegram Bot API, with batteries for building complex bots included.
  • go-tgbot - Pure Golang Telegram Bot API wrapper, generated from swagger file, session-based router, and middleware.
  • go-twitch-irc - Library to write bots for twitch.tv chat
  • Golang CryptoTrading Bot - A golang implementation of a console-based trading bot for cryptocurrency exchanges.
  • govkbot - Simple Go VK bot library.
  • hanu - Framework for writing Slack bots.
  • Kelp - official trading and market-making bot for the Stellar DEX. Works out-of-the-box, written in Golang, compatible with centralized exchanges and custom trading strategies.
  • larry - Larry 🐦 is a really simple Twitter bot generator that tweets random repositories from Github built in Go.
  • margelet - Framework for building Telegram bots.
  • micha - Go Library for Telegram bot api.
  • olivia - A chatbot built with an artificial neural network.
  • slack-bot - Ready to use Slack Bot for lazy developers: Custom commands, Jenkins, Jira, Bitbucket, Github…
  • slacker - Easy to use framework to create Slack bots.
  • slackscot - Another framework for building Slack bots.
  • tbot - Telegram bot server with API similar to net/http.
  • telebot - Telegram bot framework is written in Go.
  • telego - Telegram Bot API library for Golang with full one-to-one API implementation.
  • telegram-bot-api - Simple and clean Telegram bot client.
  • teleterm - Telegram Bot Exec Terminal Command.
  • Tenyks - Service oriented IRC bot using Redis and JSON for messaging.
  • wayback - A bot for Telegram, Mastodon, Slack, and other messaging platforms archives webpages.

Build Automation

Libraries and tools help with build automation.

  • 1build - Command line tool to frictionlessly manage project-specific commands.
  • air - Air - Live reload for Go apps.
  • anko - Simple application watcher for multiple programming languages.
  • gaper - Builds and restarts a Go project when it crashes or some watched file changes.
  • gilbert - Build system and task runner for Go projects.
  • gob - Gradle/Maven like build tool for Go projects.
  • goyek - Create build pipelines in Go.
  • mage - Mage is a make/rake-like build tool using Go.
  • mmake - Modern Make.
  • realize - Go build a system with file watchers and live to reload. Run, build and watch file changes with custom paths.
  • Task - simple “Make” alternative.
  • taskctl - Concurrent task runner.
  • xc - Task runner with README.md defined tasks, executable markdown.

Command Line

Advanced Console UIs

Libraries for building Console Applications and Console User Interfaces.

  • asciigraph - Go package to make lightweight ASCII line graph ╭┈╯ in command line apps with no other dependencies.
  • aurora - ANSI terminal colors that support fmt.Printf/Sprintf.
  • box-cli-maker - Make Highly Customized Boxes for your CLI.
  • bubble-table - An interactive table component for bubbletea.
  • bubbles - TUI components for bubbletea.
  • bubbletea - Go framework to build terminal apps, based on The Elm Architecture.
  • cfmt - Contextual fmt inspired by bootstrap color classes.
  • cfmt - Simple and convenient formatted stylized output fully compatible with fmt library.
  • chalk - Intuitive package for prettifying terminal/console output.
  • colourize - Go library for ANSI colour text in terminals.
  • crab-config-files-templating - Dynamic configuration file templating tool for kubernetes manifest or general configuration files.
  • ctc - The non-invasive cross-platform terminal color library does not need to modify the Print method.
  • go-ataman - Go library for rendering ANSI colored text templates in terminals.
  • go-colorable - Colorable writer for windows.
  • go-colortext - Go library for color output in terminals.
  • go-isatty - isatty for golang.
  • go-palette - Go library that provides elegant and convenient style definitions using ANSI colors. Fully compatible & wraps the fmt library for nice terminal layouts.
  • go-prompt - Library for building a powerful interactive prompt, inspired by python-prompt-toolkit.
  • gocui - Minimalist Go library aimed at creating Console User Interfaces.
  • gommon/color - Style terminal text.
  • gookit/color - Terminal color rendering tool library, support 16 colors, 256 colors, RGB color rendering output, compatible with Windows.
  • lipgloss - Declaratively define styles for color, format and layout in the terminal.
  • marker - Easiest way to match and mark strings for colorful terminal outputs.
  • mpb - Multi progress bar for terminal applications.
  • progressbar - Basic thread-safe progress bar that works in every OS.
  • pterm - A library to beautify console output on every platform with many combinable components.
  • simpletable - Simple tables in a terminal with Go.
  • spinner - Go package to easily provide a terminal spinner with options.
  • tabby - A tiny library for super simple Golang tables.
  • table - Small library for terminal color based tables.
  • tabular - Print ASCII tables from command line utilities without the need to pass large sets of data to the API.
  • termbox-go - Termbox is a library for creating cross-platform text-based interfaces.
  • termdash - Go terminal dashboard based on termbox-go and inspired by termui.
  • termenv - Advanced ANSI style & color support for your terminal applications.
  • termui - Go terminal dashboard based on termbox-go and inspired by blessed-contrib.
  • uilive - Library for updating terminal output in real time.
  • uiprogress - Flexible library to render progress bars in terminal applications.
  • uitable - Library to improve readability in terminal apps using tabular data.
  • yacspin - Yet Another CLi Spinner package, for working with terminal spinners.

Standard CLI

Libraries for building standard or basic Command Line applications.

  • acmd - Simple, useful, and opinionated CLI package in Go.
  • argparse - Command line argument parser inspired by Python’s argparse module.
  • argv - Go library to split command line string as arguments array using the bash syntax.
  • carapace - Command argument completion generator for spf13/cobra.
  • carapace-bin - Multi-shell multi-command argument completer.
  • carapace-spec - Define simple completions using a spec file.
  • climax - Alternative CLI with “human face”, in spirit of Go command.
  • clîr - A Simple and Clear CLI library. Dependency free.
  • cmd - Extends the standard flag package to support sub commands and more in idiomatic way.
  • cmdr - A POSIX/GNU style, getopt-like command-line UI Go library.
  • cobra - Commander for modern Go CLI interactions.
  • command-chain - A go library for configure and run command chains - such as pipelining in unix shells.
  • commandeer - Dev-friendly CLI apps: sets up flags, defaults, and usage based on struct fields and tags.
  • complete - Write bash completions in Go + Go command bash completion.
  • Dnote - A simple command line notebook with multi-device sync.
  • elvish - An expressive programming language and a versatile interactive shell.
  • env - Tag-based environment configuration for structs.
  • flag - Simple but powerful command line option parsing library for Go supporting subcommand.
  • flaggy - A robust and idiomatic flags package with excellent subcommand support.
  • flagvar - A collection of flag argument types for Go’s standard flag package.
  • go-andotp - A CLI program to encrypt/decrypt andOTP files. Can be used as a library as well.
  • go-arg - Struct-based argument parsing in Go.
  • go-commander - Go library to simplify CLI workflow.
  • go-flags - go command line option parser.
  • go-getoptions - Go option parser inspired by the flexibility of Perl’s GetOpt::Long.
  • gocmd - Go library for building command line applications.
  • hiboot cli - cli application framework with auto configuration and dependency injection.
  • job - JOB, make your short-term command as a long-term job.
  • kingpin - Command line and flag parser supporting sub commands (superseded by kong; see below).
  • liner - Go readline-like library for command-line interfaces.
  • mcli - A minimal but very powerful cli library for Go.
  • mitchellh/cli - Go library for implementing command-line interfaces.
  • mkideal/cli - Feature-rich and easy to use command-line package based on golang struct tags.
  • mow.cli - Go library for building CLI applications with sophisticated flag and argument parsing and validation.
  • ops - Unikernel Builder/Orchestrator.
  • pflag - Drop-in replacement for Go’s flag package, implementing POSIX/GNU-style –flags.
  • readline Shell library with modern and easy to use UI features.
  • sand - Simple API for creating interpreters and so much more.
  • sflags - Struct based flags generator for flag, urfave/cli, pflag, cobra, kingpin, and other libraries.
  • strumt - Library to create prompt chain.
  • subcmd - Another approach to parsing and running subcommands. Works alongside the standard flag package.
  • survey - Build interactive and accessible prompts with full support for windows and posix terminals.
  • teris-io/cli - Simple and complete API for building command line interfaces in Go.
  • ts - Timestamp convert & compare tool.
  • ukautz/clif - Small command line interface framework.
  • urfave/cli - Simple, fast, and fun package for building command line apps in Go (formerly codegangsta/cli).
  • version - Collects and displays CLI version information in multiple formats along with upgrade notice.
  • wlog - Simple logging interface that supports cross-platform color and concurrency.
  • wmenu - Easy to use menu structure for cli applications that prompt users to make choices.

Configuration

Libraries for configuration parsing.

  • aconfig - Simple, useful and opinionated config loader.
  • bcl - BCL is a configuration language similar to HCL.
  • cleanenv - Minimalistic configuration reader (from files, ENV, and wherever you want).
  • config - Cloud native application configuration. Bind ENV to structs in only two lines.
  • config - configure your app using file, environment variables, or flags in two lines of code
  • configuration - Library for initializing configuration structs from env variables, files, flags and ‘default’ tag.
  • configure - Provides configuration through multiple sources, including JSON, flags and environment variables.
  • configuro - opinionated configuration loading & validation framework from ENV and Files focused towards 12-Factor compliant applications.
  • confiq - Structured data format to config struct decoder library for Go - supporting multiple data formats
  • confita - Load configuration in cascade from multiple backends into a struct.
  • conflate - Library/tool to merge multiple JSON/YAML/TOML files from arbitrary URLs, validation against a JSON schema, and application of default values defined in the schema.
  • env - Parse environment variables to Go structs (with defaults).
  • env - A lightweight package for loading environment variables into structs.
  • env - An environment utility package with support for unmarshaling into structs
  • envconfig - Read your configuration from environment variables.
  • envh - Helpers to manage environment variables.
  • fig - Tiny library for reading configuration from a file and from environment variables (with validation & defaults).
  • genv - Read environment variables easily with dotenv support.
  • go-array - A Go package that read or set data from map, slice or json.
  • go-aws-ssm - Go package that fetches parameters from AWS System Manager - Parameter Store.
  • go-cfg - The library provides a unified way to read configuration data into a structure from various sources, such as env, flags, and configuration files (.json, .yaml, .toml, .env).
  • go-conf - Simple library for application configuration based on annotated structs. It supports reading the configuration from environment variables, config files and command line parameters.
  • go-ini - A Go package that marshals and unmarshals INI-files.
  • go-ssm-config - Go utility for loading configuration parameters from AWS SSM (Parameter Store).
  • go-up - A simple configuration library with recursive placeholders resolution and no magic.
  • GoCfg - Config manager with Struct Tags based contracts, custom value providers, parsers, and documentation generation. Customizable yet simple.
  • goConfig - Parses a struct as input and populates the fields of this struct with parameters from command line, environment variables and configuration file.
  • godotenv - Go port of Ruby’s dotenv library (Loads environment variables from .env).
  • gofigure - Go application configuration made easy.
  • GoLobby/Config - GoLobby Config is a lightweight yet powerful configuration manager for the Go programming language.
  • gone/jconf - Modular JSON configuration. Keep your config structs along with the code they configure and delegate parsing to submodules without sacrificing full config serialization.
  • gonfig - Tag-based configuration parser which loads values from different providers into typesafe struct.
  • gookit/config - application config manage(load,get,set). support JSON, YAML, TOML, INI, HCL. multi file load, data override merge.
  • harvester - Harvester, an easy to use static and dynamic configuration package supporting seeding, env vars and Consul integration.
  • hjson - Human JSON, a configuration file format for humans. Relaxed syntax, fewer mistakes, more comments.
  • hocon - Configuration library for working with the HOCON(a human-friendly JSON superset) format, supports features like environment variables, referencing other values, comments and multiple files.
  • ingo - Flags persisted in an ini-like config file.
  • ini - Go package to read and write INI files.
  • ini - INI Parser & Write Library, Unmarshal to Struct, Marshal to Json, Write File, watch file.
  • joshbetz/config - Small configuration library for Go that parses environment variables, JSON files, and reloads automatically on SIGHUP.
  • kelseyhightower/envconfig - Go library for managing configuration data from environment variables.
  • koanf - Light weight, extensible library for reading config in Go applications. Built in support for JSON, TOML, YAML, env, command line.
  • konf - The simplest API for reading/watching config from file, env, flag and clouds (e.g. AWS, Azure, GCP).
  • konfig - Composable, observable and performant config handling for Go for the distributed processing era.
  • kong - Command-line parser with support for arbitrarily complex command-line structures and additional sources of configuration such as YAML, JSON, TOML, etc (successor to kingpin).
  • mini - Golang package for parsing ini-style configuration files.
  • nasermirzaei89/env - Simple useful package for read environment variables.
  • nfigure - Per-library struct-tag based configuration from command lines (Posix & Go-style); environment, JSON, YAML
  • onion - Layer based configuration for Go, Supports JSON, TOML, YAML, properties, etcd, env, and encryption using PGP.
  • piper - Viper wrapper with config inheritance and key generation.
  • sonic - A blazingly fast JSON serializing & deserializing library.
  • store - Lightweight configuration manager for Go.
  • swap - Instantiate/configure structs recursively, based on build environment. (YAML, TOML, JSON and env).
  • typenv - Minimalistic, zero dependency, typed environment variables library.
  • uConfig - Lightweight, zero-dependency, and extendable configuration management.
  • viper - Go configuration with fangs.
  • xdg - Go implementation of the XDG Base Directory Specification and XDG user directories.
  • xdg - Cross platform package that follows the XDG Standard.
  • yamagiconf - The “safe subset” of YAML for Go configs.

Continuous Integration

Tools for help with continuous integration.

  • Bencher - A suite of continuous benchmarking tools designed to catch performance regressions in CI.
  • CDS - Enterprise-Grade CI/CD and DevOps Automation Open Source Platform.
  • dot - A minimal, local first continuous integration system that uses Docker to run jobs concurrently in stages.
  • drone - Drone is a Continuous Integration platform built on Docker, written in Go.
  • go-beautiful-html-coverage - A GitHub Action to track code coverage in your pull requests, with a beautiful HTML preview, for free.
  • go-fuzz-action - Use Go 1.18’s built-in fuzz testing in GitHub Actions.
  • go-semver-release - Automate the semantic versioning of Git repositories.
  • go-test-coverage - Tool and GitHub action which reports issues when test coverage is below set threshold.
  • gomason - Test, Build, Sign, and Publish your go binaries from a clean workspace.
  • gotestfmt - go test output for humans.
  • goveralls - Go integration for Coveralls.io continuous code coverage tracking system.
  • overalls - Multi-Package go project coverprofile for tools like goveralls.
  • roveralls - Recursive coverage testing tool.
  • woodpecker - Woodpecker is a community fork of the Drone CI system.

CSS Preprocessors

Libraries for preprocessing CSS files.

  • gcss - Pure Go CSS Preprocessor.
  • go-libsass - Go wrapper to the 100% Sass compatible libsass project.

Data Integration Frameworks

Frameworks for performing ELT / ETL

  • Benthos - A message streaming bridge between a range of protocols.
  • CloudQuery - A high-performance ELT data integration framework with pluggable architecture.
  • omniparser - A versatile ETL library that parses text input (CSV/txt/JSON/XML/EDI/X12/EDIFACT/etc) in streaming fashion and transforms data into JSON output using data-driven schema.

Data Structures and Algorithms

Bit-packing and Compression

  • bingo - Fast, zero-allocation, lexicographical-order-preserving packing of native types to bytes.
  • binpacker - Binary packer and unpacker helps user build custom binary stream.
  • bit - Golang set data structure with bonus bit-twiddling functions.
  • crunch - Go package implementing buffers for handling various datatypes easily.
  • go-ef - A Go implementation of the Elias-Fano encoding.
  • roaring - Go package implementing compressed bitsets.

Bit Sets

  • bitmap - Dense, zero-allocation, SIMD-enabled bitmap/bitset in Go.
  • bitset - Go package implementing bitsets.

Bloom and Cuckoo Filters

  • bloom - Go package implementing Bloom filters.
  • bloom - Bloom filters implemented in Go.
  • bloom - Golang Bloom filter implementation.
  • bloomfilter - Yet another Bloomfilter implementation in Go, compatible with Java’s Guava library.
  • boomfilters - Probabilistic data structures for processing continuous, unbounded streams.
  • cuckoo-filter - Cuckoo filter: a comprehensive cuckoo filter, which is configurable and space optimized compared with other implements, and all features mentioned in original paper are available.
  • cuckoofilter - Cuckoo filter: a good alternative to a counting bloom filter implemented in Go.
  • ring - Go implementation of a high performance, thread safe bloom filter.

Data Structure and Algorithm Collections

  • algorithms - Algorithms and data structures.CLRS study.
  • go-datastructures - Collection of useful, performant, and thread-safe data structures.
  • gods - Go Data Structures. Containers, Sets, Lists, Stacks, Maps, BidiMaps, Trees, HashSet etc.
  • gostl - Data structure and algorithm library for go, designed to provide functions similar to C++ STL.

Iterators

  • goterator - Iterator implementation to provide map and reduce functionalities.
  • iter - Go implementation of C++ STL iterators and algorithms.

Maps

See also Database for more complex key-value stores, and Trees for additional ordered map implementations.

  • cmap - a thread-safe concurrent map for go, support using interface{} as key and auto scale up shards.
  • dict - Python-like dictionaries (dict) for Go.
  • goradd/maps - Go 1.18+ generic map interface for maps; safe maps; ordered maps; ordered, safe maps; etc.

Miscellaneous Data Structures and Algorithms

  • concurrent-writer - Highly concurrent drop-in replacement for bufio.Writer.
  • conjungo - A small, powerful and flexible merge library.
  • count-min-log - Go implementation Count-Min-Log sketch: Approximately counting with approximate counters (Like Count-Min sketch but using less memory).
  • fsm - Finite-State Machine package.
  • genfuncs - Go 1.18+ generics package inspired by Kotlin’s Sequence and Map.
  • go-generics - Generic slice, map, set, iterator, and goroutine utilities.
  • go-geoindex - In-memory geo index.
  • go-rampart - Determine how intervals relate to each other.
  • go-rquad - Region quadtrees with efficient point location and neighbour finding.
  • go-tuple - Generic tuple implementation for Go 1.18+.
  • go18ds - Go Data Structures using Go 1.18 generics.
  • gofal - fractional api for Go.
  • gogu - A comprehensive, reusable and efficient concurrent-safe generics utility functions and data structures library.
  • gota - Implementation of dataframes, series, and data wrangling methods for Go.
  • hide - ID type with marshalling to/from hash to prevent sending IDs to clients.
  • hilbert - Go package for mapping values to and from space-filling curves, such as Hilbert and Peano curves.
  • hyperloglog - HyperLogLog implementation with Sparse, LogLog-Beta bias correction and TailCut space reduction.
  • plinko - A finite state machine and workflow orchestrator that compiles for fast execution, easy debugging, auto-generated documentation. Includes advanced features such as side-effect hooks.
  • quadtree - Generic, zero-alloc, 100%-test covered quadtree.
  • slices - Functions that operate on slices; like package strings but adapted to work with slices.
  • slices - Pure, generic functions for slices.

Nullable Types

  • nan - Zero allocation Nullable structures in one library with handy conversion functions, marshallers and unmarshallers.
  • null - Nullable Go types that can be marshalled/unmarshalled to/from JSON.
  • typ - Null Types, Safe primitive type conversion and fetching value from complex structures.

Queues

  • deque - A highly optimized double-ended queue.
  • deque - Fast ring-buffer deque (double-ended queue).
  • goconcurrentqueue - Concurrent FIFO queue.
  • memlog - An easy to use, lightweight, thread-safe and append-only in-memory data structure inspired by Apache Kafka.
  • queue - Multiple thread-safe, generic queue implementations for Go.

Sets

  • dsu - Disjoint Set data structure implementation in Go.
  • golang-set - Thread-Safe and Non-Thread-Safe high-performance sets for Go.
  • goset - A useful Set collection implementation for Go.
  • set - Simple set data structure implementation in Go using LinkedHashMap.

Text Analysis

  • bleve - Modern text indexing library for go.
  • go-adaptive-radix-tree - Go implementation of Adaptive Radix Tree.
  • go-edlib - Go string comparison and edit distance algorithms library (Levenshtein, LCS, Hamming, Damerau levenshtein, Jaro-Winkler, etc.) compatible with Unicode.
  • levenshtein - Levenshtein distance and similarity metrics with customizable edit costs and Winkler-like bonus for common prefix.
  • levenshtein - Implementation to calculate levenshtein distance in Go.
  • mspm - Multi-String Pattern Matching Algorithm for information retrieval.
  • parsefields - Tools for parse JSON-like logs for collecting unique fields and events.
  • ptrie - An implementation of prefix tree.
  • trie - Trie implementation in Go.

Trees

  • hashsplit - Split byte streams into chunks, and arrange chunks into trees, with boundaries determined by content, not position.
  • merkle - Space-efficient computation of Merkle root hashes and inclusion proofs.
  • skiplist - Very fast Go Skiplist implementation.
  • skiplist - Skiplist implementation in Go.
  • treap - Persistent, fast ordered map using tree heaps.
  • treemap - Generic key-sorted map using a red-black tree under the hood.

Pipes

  • ordered-concurrently - Go module that processes work concurrently and returns output in a channel in the order of input.
  • parapipe - FIFO Pipeline which parallels execution on each stage while maintaining the order of messages and results.
  • pipeline - An implementation of pipelines with fan-in and fan-out.

Database

Caches

Data stores with expiring records, in-memory distributed data stores, or in-memory subsets of file-based databases.

  • 2q - 2Q in-memory cache implementation.
  • bcache - Eventually consistent distributed in-memory cache Go library.
  • BigCache - Efficient key/value cache for gigabytes of data.
  • cache - In-memory key:value store with expiration time, 0 dependencies, <100 LoC, 100% coverage.
  • cache2go - In-memory key:value cache which supports automatic invalidation based on timeouts.
  • cachego - Golang Cache component for multiple drivers.
  • clusteredBigCache - BigCache with clustering support and individual item expiration.
  • coherence-go-client - Full implementation of Oracle Coherence cache API for Go applications using gRPC as network transport.
  • couchcache - RESTful caching micro-service backed by Couchbase server.
  • EchoVault - Embeddable Distributed in-memory data store compatible with Redis clients.
  • fastcache - fast thread-safe inmemory cache for big number of entries. Minimizes GC overhead.
  • GCache - Cache library with support for expirable Cache, LFU, LRU and ARC.
  • gdcache - A pure non-intrusive cache library implemented by golang, you can use it to implement your own distributed cache.
  • go-cache - A flexible multi-layer Go caching library to deal with in-memory and shared cache by adopting Cache-Aside pattern.
  • go-freelru A GC-less, fast and generic LRU hashmap library with optional locking, sharding, eviction and expiration.
  • go-mcache - Fast in-memory key:value store/cache library. Pointer caches.
  • gocache - A complete Go cache library with multiple stores (memory, memcache, redis, …), chainable, loadable, metrics cache and more.
  • gocache - A data race free Go ache library with high performance and auto pruge functionality
  • groupcache - Groupcache is a caching and cache-filling library, intended as a replacement for memcached in many cases.
  • icache - A High Performance, Generic, thread-safe, zero-dependency cache package.
  • imcache - A generic in-memory cache Go library. It supports expiration, sliding expiration, max entries limit, eviction callbacks and sharding.
  • nscache - A Go caching framework that supports multiple data source drivers.
  • otter - A high performance lockless cache for Go. Many times faster than Ristretto and friends.
  • remember-go - A universal interface for caching slow database queries (backed by redis, memcached, ristretto, or in-memory).
  • sturdyc - A caching library with advanced concurrency features designed to make I/O heavy applications robust and highly performant.
  • theine - High performance, near optimal in-memory cache with proactive TTL expiration and generics.
  • timedmap - Map with expiring key-value pairs.
  • ttlcache - An in-memory cache with item expiration and generics.
  • ttlcache - In-memory key value storage with TTL for each record.

Databases Implemented in Go

  • badger - Fast key-value store in Go.
  • bbolt - An embedded key/value database for Go.
  • Bitcask - Bitcask is an embeddable, persistent and fast key-value (KV) database written in pure Go with predictable read/write performance, low latency and high throughput thanks to the bitcask on-disk layout (LSM+WAL).
  • buntdb - Fast, embeddable, in-memory key/value database for Go with custom indexing and spatial support.
  • clover - A lightweight document-oriented NoSQL database written in pure Golang.
  • cockroach - Scalable, Geo-Replicated, Transactional Datastore.
  • Coffer - Simple ACID key-value database that supports transactions.
  • column - High-performance, columnar, embeddable in-memory store with bitmap indexing and transactions.
  • CovenantSQL - CovenantSQL is a SQL database on blockchain.
  • Databunker - Personally identifiable information (PII) storage service built to comply with GDPR and CCPA.
  • dgraph - Scalable, Distributed, Low Latency, High Throughput Graph Database.
  • diskv - Home-grown disk-backed key-value store.
  • dolt - Dolt – It’s Git for Data.
  • dtf - A distributed transaction manager. Support XA, TCC, SAGA, Reliable Messages.
  • eliasdb - Dependency-free, transactional graph database with REST API, phrase search and SQL-like query language.
  • godis - A Golang implemented high-performance Redis server and cluster.
  • goleveldb - Implementation of the LevelDB key/value database in Go.
  • hare - A simple database management system that stores each table as a text file of line-delimited JSON.
  • immudb - immudb is a lightweight, high-speed immutable database for systems and applications written in Go.
  • influxdb - Scalable datastore for metrics, events, and real-time analytics.
  • ledisdb - Ledisdb is a high performance NoSQL like Redis based on LevelDB.
  • levigo - Levigo is a Go wrapper for LevelDB.
  • libradb - LibraDB is a simple database with less than 1000 lines of code for learning.
  • LinDB - LinDB is a scalable, high performance, high availability distributed time series database.
  • lotusdb - Fast k/v database compatible with lsm and b+tree.
  • Milvus - Milvus is a vector database for embedding management, analytics and search.
  • moss - Moss is a simple LSM key-value storage engine written in 100% Go.
  • nutsdb - Nutsdb is a simple, fast, embeddable, persistent key/value store written in pure Go. It supports fully serializable transactions and many data structures such as list, set, sorted set.
  • objectbox-go - High-performance embedded Object Database (NoSQL) with Go API.
  • pebble - RocksDB/LevelDB inspired key-value database in Go.
  • piladb - Lightweight RESTful database engine based on stack data structures.
  • pogreb - Embedded key-value store for read-heavy workloads.
  • prometheus - Monitoring system and time series database.
  • pudge - Fast and simple key/value store written using Go’s standard library.
  • regatta - Fast, simple, geo-distributed KV store built for cloud native era.
  • rosedb - An embedded k-v database based on LSM+WAL, supports string, list, hash, set, zset.
  • rotom - A tiny Redis server built with Golang, compatible with RESP protocols.
  • rqlite - The lightweight, distributed, relational database built on SQLite.
  • tempdb - Key-value store for temporary items.
  • tidb - TiDB is a distributed SQL database. Inspired by the design of Google F1.
  • tiedot - Your NoSQL database powered by Golang.
  • unitdb - Fast timeseries database for IoT, realtime messaging applications. Access unitdb with pubsub over tcp or websocket using github.com/unit-io/unitd application.
  • Vasto - A distributed high-performance key-value store. On Disk. Eventual consistent. HA. Able to grow or shrink without service interruption.
  • VictoriaMetrics - fast, resource-effective and scalable open source time series database. May be used as long-term remote storage for Prometheus. Supports PromQL.

Database Schema Migration

  • atlas - A Database Toolkit. A CLI designed to help companies better work with their data.
  • avro - Discover SQL schemas and convert them to AVRO schemas. Query SQL records into AVRO bytes.
  • bytebase - Safe database schema change and version control for DevOps teams.
  • darwin - Database schema evolution library for Go.
  • dbmate - A lightweight, framework-agnostic database migration tool.
  • go-fixtures - Django style fixtures for Golang’s excellent built-in database/sql library.
  • go-pg-migrate - CLI-friendly package for go-pg migrations management.
  • go-pg-migrations - A Go package to help write migrations with go-pg/pg.
  • goavro - A Go package that encodes and decodes Avro data.
  • godfish - Database migration manager, works with native query language. Support for cassandra, mysql, postgres, sqlite3.
  • goose - Database migration tool. You can manage your database’s evolution by creating incremental SQL or Go scripts.
  • gorm-seeder - Simple database seeder for Gorm ORM.
  • gormigrate - Database schema migration helper for Gorm ORM.
  • libschema - Define your migrations separately in each library. Migrations for open source libraries. MySQL & PostgreSQL.
  • migrate - Database migrations. CLI and Golang library.
  • migrator - Dead simple Go database migration library.
  • migrator - MySQL database migrator designed to run migrations to your features and manage database schema update with intuitive go code.
  • schema - Library to embed schema migrations for database/sql-compatible databases inside your Go binaries.
  • skeema - Pure-SQL schema management system for MySQL, with support for sharding and external online schema change tools.
  • soda - Database migration, creation, ORM, etc… for MySQL, PostgreSQL, and SQLite.
  • sql-migrate - Database migration tool. Allows embedding migrations into the application using go-bindata.
  • sqlize - Database migration generator. Allows generate sql migration from model and existing sql by differ them.

Database Tools

  • chproxy - HTTP proxy for ClickHouse database.
  • clickhouse-bulk - Collects small inserts and sends big requests to ClickHouse servers.
  • dbbench - Database benchmarking tool with support for several databases and scripts.
  • dg - A fast data generator that produces CSV files from generated relational data.
  • dynago - Simplify working with AWS DynamoDB.
  • go-mysql - Go toolset to handle MySQL protocol and replication.
  • gorm-multitenancy - Multi-tenancy support for GORM managed databases.
  • hasql - Library for accessing multi-host SQL database installations.
  • octillery - Go package for sharding databases ( Supports every ORM or raw SQL ).
  • onedump - Database backup from different drivers to different destinations with one command and configuration.
  • pgtimetable - Advanced scheduling for PostgreSQL.
  • pgweb - Web-based PostgreSQL database browser.
  • prep - Use prepared SQL statements without changing your code.
  • pREST - Simplify and accelerate development, ⚡ instant, realtime, high-performance on any Postgres application, existing or new.
  • rdb - Redis RDB file parser for secondary development and memory analysis.
  • rwdb - rwdb provides read replica capability for multiple database servers setup.
  • vitess - vitess provides servers and tools which facilitate scaling of MySQL databases for large scale web services.
  • wescale - WeScale is a database proxy designed to enhance the scalability, performance, security, and resilience of your applications.

SQL Query Builders

Libraries for building and using SQL.

  • bqb - Lightweight and easy to learn query builder.
  • buildsqlx - Go database query builder library for PostgreSQL.
  • builq - Easily build SQL queries in Go.
  • dbq - Zero boilerplate database operations for Go.
  • Dotsql - Go library that helps you keep sql files in one place and use them with ease.
  • gendry - Non-invasive SQL builder and powerful data binder.
  • godbal - Database Abstraction Layer (dbal) for go. Support SQL builder and get result easily.
  • goqu - Idiomatic SQL builder and query library.
  • gosql - SQL Query builder with better null values support.
  • Hotcoal - Secure your handcrafted SQL against injection.
  • igor - Abstraction layer for PostgreSQL that supports advanced functionality and uses gorm-like syntax.
  • jet - Framework for writing type-safe SQL queries in Go, with ability to easily convert database query result into desired arbitrary object structure.
  • ormlite - Lightweight package containing some ORM-like features and helpers for sqlite databases.
  • ozzo-dbx - Powerful data retrieval methods as well as DB-agnostic query building capabilities.
  • qry - Tool that generates constants from files with raw SQL queries.
  • sg - A SQL Gen for generating standard SQLs(supports: CRUD) written in Go.
  • sq - Type-safe SQL builder and struct mapper for Go.
  • sqlc - Generate type-safe code from SQL.
  • sqlf - Fast SQL query builder.
  • sqlingo - A lightweight DSL to build SQL in Go.
  • sqrl - SQL query builder, fork of Squirrel with improved performance.
  • Squalus - Thin layer over the Go SQL package that makes it easier to perform queries.
  • Squirrel - Go library that helps you build SQL queries.
  • xo - Generate idiomatic Go code for databases based on existing schema definitions or custom queries supporting PostgreSQL, MySQL, SQLite, Oracle, and Microsoft SQL Server.

Database Drivers

Interfaces to Multiple Backends

  • cayley - Graph database with support for multiple backends.
  • dsc - Datastore connectivity for SQL, NoSQL, structured files.
  • dynamo - A simple key-value abstraction to store algebraic and linked-data data types at AWS storage services: AWS DynamoDB and AWS S3.
  • go-transaction-manager - Transaction manager with multiple adapters (sql, sqlx, gorm, mongo, …) controls transaction boundaries.
  • gokv - Simple key-value store abstraction and implementations for Go (Redis, Consul, etcd, bbolt, BadgerDB, LevelDB, Memcached, DynamoDB, S3, PostgreSQL, MongoDB, CockroachDB and many more).

Relational Database Drivers

  • avatica - Apache Avatica/Phoenix SQL driver for database/sql.
  • bgc - Datastore Connectivity for BigQuery for go.
  • firebirdsql - Firebird RDBMS SQL driver for Go.
  • go-adodb - Microsoft ActiveX Object DataBase driver for go that uses database/sql.
  • go-mssqldb - Microsoft MSSQL driver for Go.
  • go-oci8 - Oracle driver for go that uses database/sql.
  • go-sql-driver/mysql - MySQL driver for Go.
  • go-sqlite3 - SQLite3 driver for go that uses database/sql.
  • godror - Oracle driver for Go, using the ODPI-C driver.
  • gofreetds - Microsoft MSSQL driver. Go wrapper over FreeTDS.
  • KSQL - A Simple and Powerful Golang SQL Library
  • pgx - PostgreSQL driver supporting features beyond those exposed by database/sql.
  • pig - Simple pgx wrapper to execute and scan query results easily.
  • pq - Pure Go Postgres driver for database/sql.
  • Sqinn-Go - SQLite with pure Go.
  • sqlhooks - Attach hooks to any database/sql driver.
  • surrealdb.go - SurrealDB Driver for Go.
  • ydb-go-sdk - native and database/sql driver YDB (Yandex Database)

NoSQL Database Drivers

  • aerospike-client-go - Aerospike client in Go language.
  • arangolite - Lightweight golang driver for ArangoDB.
  • asc - Datastore Connectivity for Aerospike for go.
  • forestdb - Go bindings for ForestDB.
  • go-couchbase - Couchbase client in Go.
  • go-mongox - A Go Mongo library based on the official driver, featuring streamlined document operations, generic binding of structs to collections, built-in CRUD, aggregation, automated field updates, struct validation, hooks, and plugin-based programming.
  • go-pilosa - Go client library for Pilosa.
  • go-rejson - Golang client for redislabs’ ReJSON module using Redigo golang client. Store and manipulate structs as JSON objects in redis with ease.
  • gocb - Official Couchbase Go SDK.
  • gocosmos - REST client and standard database/sql driver for Azure Cosmos DB.
  • gocql - Go language driver for Apache Cassandra.
  • godis - redis client implement by golang, inspired by jedis.
  • godscache - A wrapper for the Google Cloud Platform Go Datastore package that adds caching using memcached.
  • gomemcache - memcache client library for the Go programming language.
  • gomemcached - A binary Memcached client for Go with support for sharding using consistent hashing, along with SASL.
  • gorethink - Go language driver for RethinkDB.
  • goriak - Go language driver for Riak KV.
  • Kivik - Kivik provides a common Go and GopherJS client library for CouchDB, PouchDB, and similar databases.
  • mgm - MongoDB model-based ODM for Go (based on official MongoDB driver).
  • mgo - (unmaintained) MongoDB driver for the Go language that implements a rich and well tested selection of features under a very simple API following standard Go idioms.
  • mongo-go-driver - Official MongoDB driver for the Go language.
  • neo4j - Neo4j Rest API Bindings for Golang.
  • Neo4j-GO - Neo4j REST Client in golang.
  • neoism - Neo4j client for Golang.
  • qmgo - The MongoDB driver for Go. It‘s based on official MongoDB driver but easier to use like Mgo.
  • redeo - Redis-protocol compatible TCP servers/services.
  • redigo - Redigo is a Go client for the Redis database.
  • redis - Redis client for Golang.
  • rueidis - Fast Redis RESP3 client with auto pipelining and server-assisted client side caching.
  • xredis - Typesafe, customizable, clean & easy to use Redis client.

Search and Analytic Databases

  • clickhouse-go - ClickHouse SQL client for Go with a database/sql compatibility.
  • elastic - Elasticsearch client for Go.
  • elasticsql - Convert sql to elasticsearch dsl in Go.
  • elastigo - Elasticsearch client library.
  • go-elasticsearch - Official Elasticsearch client for Go.
  • goes - Library to interact with Elasticsearch.
  • skizze - probabilistic data-structures service and storage.

Date and Time

Libraries for working with dates and times.

  • approx - A Duration extension supporting parsing/printing durations in days, weeks and years.
  • carbon - A simple, semantic and developer-friendly golang package for datetime.
  • carbon - Simple Time extension with a lot of util methods, ported from PHP Carbon library.
  • cronrange - Parses Cron-style time range expressions, checks if the given time is within any ranges.
  • date - Augments Time for working with dates, date ranges, time spans, periods, and time-of-day.
  • dateparse - Parse date’s without knowing format in advance.
  • durafmt - Time duration formatting library for Go.
  • feiertage - Set of functions to calculate public holidays in Germany, incl. specialization on the states of Germany (Bundesländer). Things like Easter, Pentecost, Thanksgiving…
  • go-anytime - Parse dates/times like “next dec 22nd at 3pm” and ranges like “from today until next thursday” without knowing the format in advance.
  • go-datebin - A simple datetime parse pkg.
  • go-persian-calendar - The implementation of the Persian (Solar Hijri) Calendar in Go (golang).
  • go-str2duration - Convert string to duration. Support time.Duration returned string and more.
  • go-sunrise - Calculate the sunrise and sunset times for a given location.
  • go-week - An efficient package to work with ISO8601 week dates.
  • gostradamus - A Go package for working with dates.
  • iso8601 - Efficiently parse ISO8601 date-times without regex.
  • kair - Date and Time - Golang Formatting Library.
  • now - Now is a time toolkit for golang.
  • strftime - C99-compatible strftime formatter.
  • timespan - For interacting with intervals of time, defined as a start time and a duration.
  • timeutil - Useful extensions (Timedelta, Strftime, …) to the golang’s time package.
  • tuesday - Ruby-compatible Strftime function.

Distributed Systems

Packages that help with building Distributed Systems.

  • arpc - More effective network communication, support two-way-calling, notify, broadcast.
  • bedrock - Provides a minimal, modular and composable foundation for quickly developing services and more use case specific frameworks in Go.
  • capillaries - distributed batch data processing framework.
  • celeriac - Library for adding support for interacting and monitoring Celery workers, tasks and events in Go.
  • consistent - Consistent hashing with bounded loads.
  • consistenthash - Consistent hashing with configurable replicas.
  • dht - BitTorrent Kademlia DHT implementation.
  • digota - grpc ecommerce microservice.
  • dot - distributed sync using operational transformation/OT.
  • doublejump - A revamped Google’s jump consistent hash.
  • dragonboat - A feature complete and high performance multi-group Raft library in Go.
  • Dragonfly - Provide efficient, stable and secure file distribution and image acceleration based on p2p technology to be the best practice and standard solution in cloud native architectures.
  • drmaa - Job submission library for cluster schedulers based on the DRMAA standard.
  • dynamolock - DynamoDB-backed distributed locking implementation.
  • dynatomic - A library for using DynamoDB as an atomic counter.
  • emitter-io - High performance, distributed, secure and low latency publish-subscribe platform built with MQTT, Websockets and love.
  • evans - Evans: more expressive universal gRPC client.
  • failured - adaptive accrual failure detector for distributed systems.
  • flowgraph - flow-based programming package.
  • gleam - Fast and scalable distributed map/reduce system written in pure Go and Luajit, combining Go’s high concurrency with Luajit’s high performance, runs standalone or distributed.
  • glow - Easy-to-Use scalable distributed big data processing, Map-Reduce, DAG execution, all in pure Go.
  • gmsec - A Go distributed systems development framework.
  • go-doudou - A gossip protocol and OpenAPI 3.0 spec based decentralized microservice framework. Built-in go-doudou cli focusing on low-code and rapid dev can power up your productivity.
  • go-health - Library for enabling asynchronous dependency health checks in your service.
  • go-jump - Port of Google’s “Jump” Consistent Hash function.
  • go-kit - Microservice toolkit with support for service discovery, load balancing, pluggable transports, request tracking, etc.
  • go-micro - A distributed systems development framework.
  • go-mysql-lock - MySQL based distributed lock.
  • go-pdu - A decentralized identity-based social network.
  • go-sundheit - A library built to provide support for defining async service health checks for golang services.
  • go-zero - A web and rpc framework. It’s born to ensure the stability of the busy sites with resilient design. Builtin goctl greatly improves the development productivity.
  • gorpc - Simple, fast and scalable RPC library for high load.
  • grpc-go - The Go language implementation of gRPC. HTTP/2 based RPC.
  • hprose - Very newbility RPC Library, support 25+ languages now.
  • jsonrpc - The jsonrpc package helps implement of JSON-RPC 2.0.
  • jsonrpc - JSON-RPC 2.0 HTTP client implementation.
  • Kitex - A high-performance and strong-extensibility Golang RPC framework that helps developers build microservices. If the performance and extensibility are the main concerns when you develop microservices, Kitex can be a good choice.
  • Kratos - A modular-designed and easy-to-use microservices framework in Go.
  • liftbridge - Lightweight, fault-tolerant message streams for NATS.
  • lura - Ultra performant API Gateway framework with middlewares.
  • micro - A distributed systems runtime for the cloud and beyond.
  • mochi mqtt - Fully spec compliant, embeddable high-performance MQTT v5/v3 broker for IoT, smarthome, and pubsub.
  • NATS - Lightweight, high performance messaging system for microservices, IoT, and cloud native systems.
  • outboxer - Outboxer is a go library that implements the outbox pattern.
  • pglock - PostgreSQL-backed distributed locking implementation.
  • pjrpc - Golang JSON-RPC Server-Client with Protobuf spec.
  • raft - Golang implementation of the Raft consensus protocol, by HashiCorp.
  • raft - Go implementation of the Raft consensus protocol, by CoreOS.
  • rain - BitTorrent client and library.
  • redis-lock - Simplified distributed locking implementation using Redis.
  • resgate - Realtime API Gateway for building REST, real time, and RPC APIs, where all clients are synchronized seamlessly.
  • ringpop-go - Scalable, fault-tolerant application-layer sharding for Go applications.
  • rpcx - Distributed pluggable RPC service framework like alibaba Dubbo.
  • Semaphore - A straightforward (micro) service orchestrator.
  • sleuth - Library for master-less p2p auto-discovery and RPC between HTTP services (using ZeroMQ).
  • sponge - A distributed development framework that integrates automatic code generation, gin and grpc frameworks, base development frameworks.
  • Tarmac - Framework for writing functions, microservices, or monoliths with WebAssembly
  • Temporal - Durable execution system for making code fault-tolerant and simple.
  • torrent - BitTorrent client package.
  • trpc-go - The Go language implementation of tRPC, which is a pluggable, high-performance RPC framework.

Dynamic DNS

Tools for updating dynamic DNS records.

  • DDNS - Personal DDNS client with Digital Ocean Networking DNS as backend.
  • dyndns - Background Go process to regularly and automatically check your IP Address and make updates to (one or many) Dynamic DNS records for Google domains whenever your address changes.
  • GoDNS - A dynamic DNS client tool, supports DNSPod & HE.net, written in Go.

Email

Libraries and tools that implement email creation and sending.

  • chasquid - SMTP server written in Go.
  • douceur - CSS inliner for your HTML emails.
  • email - A robust and flexible email library for Go.
  • email-verifier - A Go library for email verification without sending any emails.
  • go-dkim - DKIM library, to sign & verify email.
  • go-email-normalizer - Golang library for providing a canonical representation of email address.
  • go-email-validator - Modular email validator for syntax, disposable, smtp, etc… checking.
  • go-imap - IMAP library for clients and servers.
  • go-mail - A simple Go library for sending mails in Go.
  • go-message - Streaming library for the Internet Message Format and mail messages.
  • go-premailer - Inline styling for HTML mail in Go.
  • go-simple-mail - Very simple package to send emails with SMTP Keep Alive and two timeouts: Connect and Send.
  • Hectane - Lightweight SMTP client providing an HTTP API.
  • hermes - Golang package that generates clean, responsive HTML e-mails.
  • Maddy - All-in-one (SMTP, IMAP, DKIM, DMARC, MTA-STS, DANE) email server
  • mailchain - Send encrypted emails to blockchain addresses written in Go.
  • mailgun-go - Go library for sending mail with the Mailgun API.
  • MailHog - Email and SMTP testing with web and API interface.
  • Mailpit - Email and SMTP testing tool for developers.
  • mailx - Mailx is a library that makes it easier to send email via SMTP. It is an enhancement of the golang standard library net/smtp.
  • SendGrid - SendGrid’s Go library for sending email.
  • smtp - SMTP server protocol state machine.
  • smtpmock - Lightweight configurable multithreaded fake SMTP server. Mimic any SMTP behaviour for your test environment.
  • truemail-go - Configurable Golang email validator/verifier. Verify email via Regex, DNS, SMTP and even more.

Embeddable Scripting Languages

Embedding other languages inside your go code.

  • anko - Scriptable interpreter written in Go.
  • binder - Go to Lua binding library, based on gopher-lua.
  • cel-go - Fast, portable, non-Turing complete expression evaluation with gradual typing.
  • ecal - A simple embeddable scripting language which supports concurrent event processing.
  • expr - Expression evaluation engine for Go: fast, non-Turing complete, dynamic typing, static typing.
  • gentee - Embeddable scripting programming language.
  • gisp - Simple LISP in Go.
  • go-duktape - Duktape JavaScript engine bindings for Go.
  • go-lua - Port of the Lua 5.2 VM to pure Go.
  • go-php - PHP bindings for Go.
  • go-python - naive go bindings to the CPython C-API.
  • goal - An embeddable scripting array language.
  • goja - ECMAScript 5.1(+) implementation in Go.
  • golua - Go bindings for Lua C API.
  • gopher-lua - Lua 5.1 VM and compiler written in Go.
  • gval - A highly customizable expression language written in Go.
  • metacall - Cross-platform Polyglot Runtime which supports NodeJS, JavaScript, TypeScript, Python, Ruby, C#, WebAssembly, Java, Cobol and more.
  • ngaro - Embeddable Ngaro VM implementation enabling scripting in Retro.
  • prolog - Embeddable Prolog.
  • purl - Perl 5.18.2 embedded in Go.
  • starlark-go - Go implementation of Starlark: Python-like language with deterministic evaluation and hermetic execution.
  • starlet - Go wrapper for starlark-go that simplifies script execution, offers data conversion, and useful Starlark libraries and extensions.
  • tengo - Bytecode compiled script language for Go.
  • Wa/凹语言 - The Wa Programming Language embedded in Go.

Error Handling

Libraries for handling errors.

  • emperror - Error handling tools and best practices for Go libraries and applications.
  • eris - A better way to handle, trace, and log errors in Go. Compatible with the standard error library and github.com/pkg/errors.
  • errlog - Hackable package that determines responsible source code for an error (and some other fast-debugging features). Pluggable to any logger in-place.
  • errors - Drop-in replacement for the standard library errors package and github.com/pkg/errors. Provides various error handling primitives.
  • errors - Simple golang error handling with classification primitives.
  • errors - The most simple error wrapper with awesome performance and minimal memory overhead.
  • errors - Providing errors with a stack trace and optional structured details. Compatible with github.com/pkg/errors API but does not use it internally.
  • errors - Drop-in replacement for builtin Go errors. This is a minimal error handling package with custom error types, user friendly messages, Unwrap & Is. With very easy to use and straightforward helper functions.
  • errors - Go error library with error portability over the network.
  • errorx - A feature rich error package with stack traces, composition of errors and more.
  • exception - A simple utility package for exception handling with try-catch in Golang.
  • Falcon - A Simple Yet Highly Powerful Package For Error Handling.
  • Fault - An ergonomic mechanism for wrapping errors in order to facilitate structured metadata and context for error values.
  • go-multierror - Go (golang) package for representing a list of errors as a single error.
  • oops - Error handling with context, stack trace and source fragments.
  • tracerr - Golang errors with stack trace and source fragments.

File Handling

Libraries for handling files and file systems.

  • afero - FileSystem Abstraction System for Go.
  • afs - Abstract File Storage (mem, scp, zip, tar, cloud: s3, gs) for Go.
  • baraka - A library to process http file uploads easily.
  • bigfile - A file transfer system, support to manage files with http api, rpc call and ftp client.
  • checksum - Compute message digest, like MD5, SHA256, SHA1, CRC or BLAKE2s, for large files.
  • copy - Copy directory recursively.
  • flop - File operations library which aims to mirror feature parity with GNU cp.
  • gdu - Disk usage analyzer with console interface.
  • go-csv-tag - Load csv file using tag.
  • go-decent-copy - Copy files for humans.
  • go-exiftool - Go bindings for ExifTool, the well-known library used to extract as much metadata as possible (EXIF, IPTC, …) from files (pictures, PDF, office, …).
  • go-gtfs - Load gtfs files in go.
  • gofs - A cross-platform real-time file synchronization tool out of the box.
  • gut/yos - Simple and reliable package for file operations like copy/move/diff/list on files, directories and symbolic links.
  • higgs - A tiny cross-platform Go library to hide/unhide files and directories.
  • iso9660 - A package for reading and creating ISO9660 disk images
  • notify - File system event notification library with simple API, similar to os/signal.
  • opc - Load Open Packaging Conventions (OPC) files for Go.
  • parquet - Read and write parquet files.
  • pathtype - Treat paths as their own type instead of using strings.
  • pdfcpu - PDF processor.
  • skywalker - Package to allow one to concurrently go through a filesystem with ease.
  • stl - Modules to read and write STL (stereolithography) files. Concurrent algorithm for reading.
  • todotxt - Go library for Gina Trapani’s todo.txt files, supports parsing and manipulating of task lists in the todo.txt format.
  • vfs - A pluggable, extensible, and opinionated set of filesystem functionality for Go across a number of filesystem types such as os, S3, and GCS.

Financial

Packages for accounting and finance.

  • accounting - money and currency formatting for golang.
  • ach - A reader, writer, and validator for Automated Clearing House (ACH) files.
  • bbgo - A crypto trading bot framework written in Go. Including common crypto exchange API, standard indicators, back-testing and many built-in strategies.
  • currency - Handles currency amounts, provides currency information and formatting.
  • currency - High performant & accurate currency computation package.
  • decimal - Arbitrary-precision fixed-point decimal numbers.
  • decimal - Immutable decimal numbers with panic-free arithmetic.
  • fpdecimal - Fast and precise serialization and arithmetic for small fixed-point decimals
  • fpmoney - Fast and simple ISO4217 fixed-point decimal money.
  • go-finance - Library of financial functions for time value of money (annuities), cash flow, interest rate conversions, bonds and depreciation calculations.
  • go-finance - Module to fetch exchange rates, check VAT numbers via VIES and check IBAN bank account numbers.
  • go-finnhub - Client for stock market, forex and crypto data from finnhub.io. Access real-time financial market data from 60+ stock exchanges, 10 forex brokers, and 15+ crypto exchanges.
  • go-money - Implementation of Fowler’s Money pattern.
  • go-nowpayments - Library for the crypto NOWPayments API.
  • money - Immutable monetary amounts and exchange rates with panic-free arithmetic.
  • ofxgo - Query OFX servers and/or parse the responses (with example command-line client).
  • orderbook - Matching Engine for Limit Order Book in Golang.
  • payme - QR code generator (ASCII & PNG) for SEPA payments.
  • sleet - One unified interface for multiple Payment Service Providers (PsP) to process online payment.
  • swift - Offline validity check of IBAN (International Bank Account Number) and retrieval of BIC (for some countries).
  • techan - Technical analysis library with advanced market analysis and trading strategies.
  • ticker - Terminal stock watcher and stock position tracker.
  • transaction - Embedded transactional database of accounts, running in multithreaded mode.
  • vat - VAT number validation & EU VAT rates.

Forms

Libraries for working with forms.

  • bind - Bind form data to any Go values.
  • binding - Binds form and JSON data from net/http Request to struct.
  • checker - Checker helps validating user input through rules defined in struct tags or directly through functions.
  • conform - Keeps user input in check. Trims, sanitizes & scrubs data based on struct tags.
  • form - Decodes url.Values into Go value(s) and Encodes Go value(s) into url.Values. Dual Array and Full map support.
  • formam - decode form’s values into a struct.
  • forms - Framework-agnostic library for parsing and validating form/JSON data which supports multipart forms and files.
  • gbind - Bind data to any Go value. Can use built-in and custom expression binding capabilities; supports data validation
  • gorilla/csrf - CSRF protection for Go web applications & services.
  • httpin - Decode an HTTP request into a custom struct, including querystring, forms, HTTP headers, etc.
  • nosurf - CSRF protection middleware for Go.
  • qs - Go module for encoding structs into URL query parameters.
  • queryparam - Decode url.Values into usable struct values of standard or custom types.

Functional

Packages to support functional programming in Go.

  • fp-go - Collection of Functional Programming helpers powered by Golang 1.18+ generics.
  • fpGo - Monad, Functional Programming features for Golang.
  • fuego - Functional Experiment in Go.
  • go-functional - Functional programming in Go using generics
  • go-underscore - Useful collection of helpfully functional Go collection utilities.
  • gofp - A lodash like powerful utility library for Golang.
  • mo - Monads and popular FP abstractions, based on Go 1.18+ Generics (Option, Result, Either…).
  • underscore - Functional programming helpers for Go 1.18 and beyond.
  • valor - Generic option and result types that optionally contain a value.

Game Development

Awesome game development libraries.

  • Azul3D - 3D game engine written in Go.
  • Ebitengine - dead simple 2D game engine in Go.
  • ecs - Build your own Game-Engine based on the Entity Component System concept in Golang.
  • engo - Engo is an open-source 2D game engine written in Go. It follows the Entity-Component-System paradigm.
  • fantasyname - Fantasy names generator.
  • g3n - Go 3D Game Engine.
  • go-astar - Go implementation of the A* path finding algorithm.
  • go-sdl2 - Go bindings for the Simple DirectMedia Layer.
  • go3d - Performance oriented 2D/3D math package for Go.
  • gonet - Game server skeleton implemented with golang.
  • goworld - Scalable game server engine, featuring space-entity framework and hot-swapping.
  • grid - Generic 2D grid with ray-casting, shadow-casting and path finding.
  • Harfang3D - 3D engine for the Go language, works on Windows and Linux (Harfang on Go.dev).
  • Leaf - Lightweight game server framework.
  • nano - Lightweight, facility, high performance golang based game server framework.
  • Oak - Pure Go game engine.
  • Pitaya - Scalable game server framework with clustering support and client libraries for iOS, Android, Unity and others through the C SDK.
  • Pixel - Hand-crafted 2D game library in Go.
  • prototype - Cross-platform (Windows/Linux/Mac) library for creating desktop games using a minimal API.
  • raylib-go - Go bindings for raylib, a simple and easy-to-use library to learn videogames programming.
  • termloop - Terminal-based game engine for Go, built on top of Termbox.
  • tile - Data-oriented and cache-friendly 2D Grid library (TileMap), includes pathfinding, observers and import/export.

Generators

Tools that generate Go code.

  • convergen - Feature rich type-to-type copy code generator.
  • copygen - Generate type-to-type and type-based code without reflection.
  • generis - Code generation tool providing generics, free-form macros, conditional compilation and HTML templating.
  • go-enum - Code generation for enums from code comments.
  • go-linq - .NET LINQ-like query methods for Go.
  • goderive - Derives functions from input types.
  • gotype - Golang source code parsing, usage like reflect package.
  • goverter - Generate converters by defining an interface.
  • GoWrap - Generate decorators for Go interfaces using simple templates.
  • interfaces - Command line tool for generating interface definitions.
  • jennifer - Generate arbitrary Go code without templates.
  • oapi-codegen - This package contains a set of utilities for generating Go boilerplate code for services based on OpenAPI 3.0 API definitions.
  • typeregistry - A library to create type dynamically.

Geographic

Geographic tools and servers

  • geoos - A library provides spatial data and geometric algorithms.
  • geoserver - geoserver Is a Go Package For Manipulating a GeoServer Instance via the GeoServer REST API.
  • gismanager - Publish Your GIS Data(Vector Data) to PostGIS and Geoserver.
  • godal - Go wrapper for GDAL.
  • H3 - Go bindings for H3, a hierarchical hexagonal geospatial indexing system.
  • H3 GeoJSON - Conversion utilities between H3 indexes and GeoJSON.
  • H3GeoDist - Distribution of Uber H3geo cells by virtual nodes.
  • mbtileserver - A simple Go-based server for map tiles stored in mbtiles format.
  • osm - Library for reading, writing and working with OpenStreetMap data and APIs.
  • pbf - OpenStreetMap PBF golang encoder/decoder.
  • S2 geojson - Convert geojson to s2 cells & demonstrating some S2 geometry features on map.
  • S2 geometry - S2 geometry library in Go.
  • simplefeatures - simplesfeatures is a 2D geometry library that provides Go types that model geometries, as well as algorithms that operate on them.
  • Tile38 - Geolocation DB with spatial index and realtime geofencing.
  • Web-Mercator-Projection A project to easily use and convert LonLat, Point and Tile to display info, markers, etc, in a map using the Web Mercator Projection.
  • WGS84 - Library for Coordinate Conversion and Transformation (ETRS89, OSGB36, NAD83, RGF93, Web Mercator, UTM).

Go Compilers

Tools for compiling Go to other languages.

  • c2go - Convert C code to Go code.
  • c4go - Transpile C code to Go code.
  • esp32 - Transpile Go into Arduino code.
  • f4go - Transpile FORTRAN 77 code to Go code.
  • gopherjs - Compiler from Go to JavaScript.
  • tardisgo - Golang to Haxe to CPP/CSharp/Java/JavaScript transpiler.

Goroutines

Tools for managing and working with Goroutines.

  • ants - A high-performance and low-cost goroutine pool in Go.
  • artifex - Simple in-memory job queue for Golang using worker-based dispatching.
  • async - An asynchronous task package with async/await style for Go.
  • async - An alternative sync library for Go (Future, Promise, Locks).
  • async - A safe way to execute functions asynchronously, recovering them in case of panic.
  • async-job - AsyncJob is an asynchronous queue job manager with light code, clear and speed.
  • breaker - Flexible mechanism to make execution flow interruptible.
  • channelify - Transform your function to return channels for easy and powerful parallel processing.
  • conc - conc is your toolbelt for structured concurrency in go, making common tasks easier and safer.
  • concurrency-limiter - Concurrency limiter with support for timeouts, dynamic priority and context cancellation of goroutines.
  • conexec - A concurrent toolkit to help execute funcs concurrently in an efficient and safe way. It supports specifying the overall timeout to avoid blocking and uses goroutine pool to improve efficiency.
  • cyclicbarrier - CyclicBarrier for golang.
  • execpool - A pool built around exec.Cmd that spins up a given number of processes in advance and attaches stdin and stdout to them when needed. Very similar to FastCGI or Apache Prefork MPM but works for any command.
  • flowmatic - Structured concurrency made easy.
  • go-accumulator - Solution for accumulation of events and their subsequent processing.
  • go-actor - A tiny library for writing concurrent programs using actor model.
  • go-floc - Orchestrate goroutines with ease.
  • go-flow - Control goroutines execution order.
  • go-tools/multithreading - Manage a pool of goroutines using this lightweight library with a simple API.
  • go-trylock - TryLock support on read-write lock for Golang.
  • go-waitgroup - Like sync.WaitGroup with error handling and concurrency control.
  • go-workerpool - Inspired from Java Thread Pool, Go WorkerPool aims to control heavy Go Routines.
  • go-workers - Easily and safely run workers for large data processing pipelines.
  • goccm - Go Concurrency Manager package limits the number of goroutines that allowed to run concurrently.
  • gohive - A highly performant and easy to use Goroutine pool for Go.
  • gollback - asynchronous simple function utilities, for managing execution of closures and callbacks.
  • gowl - Gowl is a process management and process monitoring tool at once. An infinite worker pool gives you the ability to control the pool and processes and monitor their status.
  • goworker - goworker is a Go-based background worker.
  • gowp - gowp is concurrency limiting goroutine pool.
  • gpool - manages a resizeable pool of context-aware goroutines to bound concurrency.
  • grpool - Lightweight Goroutine pool.
  • hands - A process controller used to control the execution and return strategies of multiple goroutines.
  • Hunch - Hunch provides functions like: All, First, Retry, Waterfall etc., that makes asynchronous flow control more intuitive.
  • kyoo - Provides an unlimited job queue and concurrent worker pools.
  • neilotoole/errgroup - Drop-in alternative to sync/errgroup, limited to a pool of N worker goroutines.
  • nursery - Structured concurrency in Go.
  • oversight - Oversight is a complete implementation of the Erlang supervision trees.
  • parallel-fn - Run functions in parallel.
  • pond - Minimalistic and High-performance goroutine worker pool written in Go.
  • pool - Limited consumer goroutine or unlimited goroutine pool for easier goroutine handling and cancellation.
  • rill - Go concurrency with channel transformations. No boilerplate, type safety, batching and error handling.
  • routine - routine is a ThreadLocal for go library. It encapsulates and provides some easy-to-use, non-competitive, high-performance goroutine context access interfaces, which can help you access coroutine context information more gracefully.
  • routine - go routine control with context, support: Main, Go, Pool and some useful Executors.
  • semaphore - Semaphore pattern implementation with timeout of lock/unlock operations based on channel and context.
  • semaphore - Fast resizable semaphore implementation based on CAS (faster than channel-based semaphore implementations).
  • stl - Software transactional locks based on Software Transactional Memory (STM) concurrency control mechanism.
  • threadpool - Golang threadpool implementation.
  • tunny - Goroutine pool for golang.
  • worker-pool - goworker is a Go simple async worker pool.
  • workerpool - Goroutine pool that limits the concurrency of task execution, not the number of tasks queued.

GUI

Libraries for building GUI Applications.

Toolkits

  • app - Package to create apps with GO, HTML and CSS. Supports: MacOS, Windows in progress.
  • Cogent Core - A framework for building 2D and 3D apps that run on macOS, Windows, Linux, iOS, Android, and the web.
  • DarwinKit - Build native macOS applications using Go.
  • energy - Cross-platform based on LCL(Native System UI Control Library) and CEF(Chromium Embedded Framework) (Windows/ macOS / Linux)
  • fyne - Cross platform native GUIs designed for Go based on Material Design. Supports: Linux, macOS, Windows, BSD, iOS and Android.
  • gio - Gio is a library for writing cross-platform immediate mode GUI-s in Go. Gio supports all the major platforms: Linux, macOS, Windows, Android, iOS, FreeBSD, OpenBSD and WebAssembly.
  • go-gtk - Go bindings for GTK.
  • go-sciter - Go bindings for Sciter: the Embeddable HTML/CSS/script engine for modern desktop UI development. Cross platform.
  • Goey - Cross platform UI toolkit aggregator for Windows / Linux / Mac. GTK, Cocoa, Windows API
  • goradd/html5tag - Library for outputting HTML5 tags.
  • gotk3 - Go bindings for GTK3.
  • gowd - Rapid and simple desktop UI development with GO, HTML, CSS and NW.js. Cross platform.
  • qt - Qt binding for Go (support for Windows / macOS / Linux / Android / iOS / Sailfish OS / Raspberry Pi).
  • Spot - Reactive, cross-platform desktop GUI toolkit.
  • ui - Platform-native GUI library for Go. Cross platform.
  • unison - A unified graphical user experience toolkit for Go desktop applications. macOS, Windows, and Linux are supported.
  • Wails - Mac, Windows, Linux desktop apps with HTML UI using built-in OS HTML renderer.
  • walk - Windows application library kit for Go.
  • webview - Cross-platform webview window with simple two-way JavaScript bindings (Windows / macOS / Linux).

Interaction

  • AppIndicator Go - Go bindings for libappindicator3 C library.
  • gosx-notifier - OSX Desktop Notifications library for Go.
  • mac-activity-tracker - OSX library to notify about any (pluggable) activity on your machine.
  • mac-sleep-notifier - OSX Sleep/Wake notifications in golang.
  • robotgo - Go Native cross-platform GUI system automation. Control the mouse, keyboard and other.
  • systray - Cross platform Go library to place an icon and menu in the notification area.
  • trayhost - Cross-platform Go library to place an icon in the host operating system’s taskbar.
  • zenity - Cross-platform Go library and CLI to create simple dialogs that interact graphically with the user.

Hardware

Libraries, tools, and tutorials for interacting with hardware.

  • arduino-cli - Official Arduino CLI and library. Can run standalone, or be incorporated into larger Go projects.
  • emgo - Go-like language for programming embedded systems (e.g. STM32 MCU).
  • ghw - Golang hardware discovery/inspection library.
  • go-osc - Open Sound Control (OSC) bindings for Go.
  • go-rpio - GPIO for Go, doesn’t require cgo.
  • goroslib - Robot Operating System (ROS) library for Go.
  • joystick - a polled API to read the state of an attached joystick.
  • sysinfo - A pure Go library providing Linux OS / kernel / hardware system information.

Images

Libraries for manipulating images.

  • bild - Collection of image processing algorithms in pure Go.
  • bimg - Small package for fast and efficient image processing using libvips.
  • cameron - An avatar generator for Go.
  • canvas - Vector graphics to PDF, SVG or rasterized image.
  • color-extractor - Dominant color extractor with no external dependencies.
  • darkroom - An image proxy with changeable storage backends and image processing engines with focus on speed and resiliency.
  • draft - Generate High Level Microservice Architecture diagrams for GraphViz using simple YAML syntax.
  • geopattern - Create beautiful generative image patterns from a string.
  • gg - 2D rendering in pure Go.
  • gift - Package of image processing filters.
  • gltf - Efficient and robust glTF 2.0 reader, writer and validator.
  • go-cairo - Go binding for the cairo graphics library.
  • go-gd - Go binding for GD library.
  • go-nude - Nudity detection with Go.
  • go-webcolors - Port of webcolors library from Python to Go.
  • go-webp - Library for encode and decode webp pictures, using libwebp.
  • gocv - Go package for computer vision using OpenCV 3.3+.
  • goimagehash - Go Perceptual image hashing package.
  • goimghdr - The imghdr module determines the type of image contained in a file for Go.
  • govatar - Library and CMD tool for generating funny avatars.
  • govips - A lightning fast image processing and resizing library for Go.
  • gowitness - Screenshoting webpages using go and headless chrome on command line.
  • gridder - A Grid based 2D Graphics library.
  • image2ascii - Convert image to ASCII.
  • imagick - Go binding to ImageMagick’s MagickWand C API.
  • imaginary - Fast and simple HTTP microservice for image resizing.
  • imaging - Simple Go image processing package.
  • imagor - Fast, secure image processing server and Go library, using libvips.
  • img - Selection of image manipulation tools.
  • ln - 3D line art rendering in Go.
  • mergi - Tool & Go library for image manipulation (Merge, Crop, Resize, Watermark, Animate).
  • mort - Storage and image processing server written in Go.
  • mpo - Decoder and conversion tool for MPO 3D Photos.
  • picfit - An image resizing server written in Go.
  • pt - Path tracing engine written in Go.
  • rez - Image resizing in pure Go and SIMD.
  • scout - Scout is a standalone open source software solution for DIY video security.
  • smartcrop - Finds good crops for arbitrary images and crop sizes.
  • steganography - Pure Go Library for LSB steganography.
  • stegify - Go tool for LSB steganography, capable of hiding any file within an image.
  • svgo - Go Language Library for SVG generation.
  • tga - Package tga is a TARGA image format decoder/encoder.
  • transformimgs - Transformimgs resizes and optimises images for Web using next-generation formats.
  • webp-server - Simple and minimal image server capable of storing, resizing, converting and caching images.

IoT (Internet of Things)

Libraries for programming devices of the IoT.

  • connectordb - Open-Source Platform for Quantified Self & IoT.
  • devices - Suite of libraries for IoT devices, experimental for x/exp/io.
  • ekuiper - Lightweight data stream processing engine for IoT edge.
  • eywa - Project Eywa is essentially a connection manager that keeps track of connected devices.
  • flogo - Project Flogo is an Open Source Framework for IoT Edge Apps & Integration.
  • gatt - Gatt is a Go package for building Bluetooth Low Energy peripherals.
  • gobot - Gobot is a framework for robotics, physical computing, and the Internet of Things.
  • huego - An extensive Philips Hue client library for Go.
  • iot - IoT is a simple framework for implementing a Google IoT Core device.
  • mainflux - Industrial IoT Messaging and Device Management Server.
  • periph - Peripherals I/O to interface with low-level board facilities.
  • sensorbee - Lightweight stream processing engine for IoT.
  • shifu - Kubernetes native IoT development framework.
  • smart-home - Software package for IoT automation.

Job Scheduler

Libraries for scheduling jobs.

  • Cadence-client - A framework for authoring workflows and activities running on top of the Cadence orchestration engine made by Uber.
  • cdule - Job scheduler library with database support
  • cheek - A simple crontab like scheduler that aims to offer a KISS approach to job scheduling.
  • clockwerk - Go package to schedule periodic jobs using a simple, fluent syntax.
  • cronticker - A ticker implementation to support cron schedules.
  • Dagu - No-code workflow executor. it executes DAGs defined in a simple YAML format.
  • go-cron - Simple Cron library for go that can execute closures or functions at varying intervals, from once a second to once a year on a specific date and time. Primarily for web applications and long running daemons.
  • go-dag - A framework developed in Go that manages the execution of workflows described by directed acyclic graphs.
  • go-quartz - Simple, zero-dependency scheduling library for Go.
  • gocron - Easy and fluent Go job scheduling. This is an actively maintained fork of jasonlvhit/gocron.
  • goflow - A simple but powerful DAG scheduler and dashboard.
  • gron - Define time-based tasks using a simple Go API and Gron’s scheduler will run them accordingly.
  • gronx - Cron expression parser, task runner and daemon consuming crontab like task list.
  • JobRunner - Smart and featureful cron job scheduler with job queuing and live monitoring built in.
  • jobs - Persistent and flexible background jobs library.
  • leprechaun - Job scheduler that supports webhooks, crons and classic scheduling.
  • sched - A job scheduler with the ability to fast-forward time.
  • scheduler - Cronjobs scheduling made easy.
  • tasks - An easy to use in-process scheduler for recurring tasks in Go.

JSON

Libraries for working with JSON.

  • ajson - Abstract JSON for golang with JSONPath support.
  • ask - Easy access to nested values in maps and slices. Works in combination with encoding/json and other packages that “Unmarshal” arbitrary data into Go data-types.
  • dynjson - Client-customizable JSON formats for dynamic APIs.
  • ej - Write and read JSON from different sources succinctly.
  • epoch - Contains primitives for marshaling/unmarshalling Unix timestamp/epoch to/from build-in time.Time type in JSON.
  • fastjson - Fast JSON parser and validator for Go. No custom structs, no code generation, no reflection.
  • gabs - For parsing, creating and editing unknown or dynamic JSON in Go.
  • gjo - Small utility to create JSON objects.
  • GJSON - Get a JSON value with one line of code.
  • go-jsonerror - Go-JsonError is meant to allow us to easily create json response errors that follow the JsonApi spec.
  • go-respond - Go package for handling common HTTP JSON responses.
  • gojmapr - Get simple struct from complex json by json path.
  • gojq - JSON query in Golang.
  • gojson - Automatically generate Go (golang) struct definitions from example JSON.
  • htmljson - Rich rendering of JSON as HTML in Go.
  • JayDiff - JSON diff utility written in Go.
  • jettison - Fast and flexible JSON encoder for Go.
  • jscan - High performance zero-allocation JSON iterator.
  • JSON-to-Go - Convert JSON to Go struct.
  • JSON-to-Proto - Convert JSON to Protobuf online.
  • json2go - Advanced JSON to Go struct conversion. Provides package that can parse multiple JSON documents and create struct to fit them all.
  • jsonapi-errors - Go bindings based on the JSON API errors reference.
  • jsoncolor - Drop-in replacement for encoding/json that outputs colorized JSON.
  • jsondiff - JSON diff library for Go based on RFC6902 (JSON Patch).
  • jsonf - Console tool for highlighted formatting and struct query fetching JSON.
  • jsongo - Fluent API to make it easier to create Json objects.
  • jsonhal - Simple Go package to make custom structs marshal into HAL compatible JSON responses.
  • jsonhandlers - JSON library to expose simple handlers that lets you easily read and write json from various sources.
  • jsonic - Utilities to handle and query JSON without defining structs in a type safe manner.
  • jsonvalue - A fast and convenient library for unstructured JSON data, replacing encoding/json.
  • jzon - JSON library with standard compatible API/behavior.
  • kazaam - API for arbitrary transformation of JSON documents.
  • mapslice-json - Go MapSlice for ordered marshal/ unmarshal of maps in JSON.
  • marshmallow - Performant JSON unmarshalling for flexible use cases.
  • mp - Simple cli email parser. It currently takes stdin and outputs JSON.
  • OjG - Optimized JSON for Go is a high performance parser with a variety of additional JSON tools including JSONPath.
  • omg.jsonparser - Simple JSON parser with validation by condition via golang struct fields tags.
  • ujson - Fast and minimal JSON parser and transformer that works on unstructured JSON.
  • vjson - Go package for validating JSON objects with declaring a JSON schema with fluent API.

Logging

Libraries for generating and working with log files.

  • distillog - distilled levelled logging (think of it as stdlib + log levels).
  • glg - glg is simple and fast leveled logging library for Go.
  • glo - PHP Monolog inspired logging facility with identical severity levels.
  • glog - Leveled execution logs for Go.
  • go-cronowriter - Simple writer that rotate log files automatically based on current date and time, like cronolog.
  • go-log - A logging library with stack traces, object dumping and optional timestamps.
  • go-log - Simple and configurable Logging in Go, with level, formatters and writers.
  • go-log - Log lib supports level and multi handlers.
  • go-log - Log4j implementation in Go.
  • go-logger - Simple logger of Go Programs, with level handlers.
  • gomol - Multiple-output, structured logging for Go with extensible logging outputs.
  • gone/log - Fast, extendable, full-featured, std-lib source compatible log library.
  • httpretty - Pretty-prints your regular HTTP requests on your terminal for debugging (similar to http.DumpRequest).
  • journald - Go implementation of systemd Journal’s native API for logging.
  • kemba - A tiny debug logging tool inspired by debug, great for CLI tools and applications.
  • log - An O(1) logging system that allows you to connect one log to multiple writers (e.g. stdout, a file and a TCP connection).
  • log - Structured logging package for Go.
  • log - Simple, configurable and scalable Structured Logging for Go.
  • log - Structured log interface for Go cleanly separates logging facade from its implementation.
  • log - Simple leveled logging wrapper around standard log package.
  • log - A simple logging framework out of the box.
  • log-voyage - Full-featured logging saas written in golang.
  • log15 - Simple, powerful logging for Go.
  • logdump - Package for multi-level logging.
  • logex - Golang log lib, supports tracking and level, wrap by standard log lib.
  • logger - Minimalistic logging library for Go.
  • logo - Golang logger to different configurable writers.
  • logrus - Structured logger for Go.
  • logrusiowriter - io.Writer implementation using logrus logger.
  • logrusly - logrus plug-in to send errors to a Loggly.
  • logur - An opinionated logger interface and collection of logging best practices with adapters and integrations for well-known libraries (logrus, go-kit log, zap, zerolog, etc).
  • logutils - Utilities for slightly better logging in Go (Golang) extending the standard logger.
  • logxi - 12-factor app logger that is fast and makes you happy.
  • lumberjack - Simple rolling logger, implements io.WriteCloser.
  • mlog - Simple logging module for go, with 5 levels, an optional rotating logfile feature and stdout/stderr output.
  • noodlog - Parametrized JSON logging library which lets you obfuscate sensitive data and marshal any kind of content. No more printed pointers instead of values, nor escape chars for the JSON strings.
  • onelog - Onelog is a dead simple but very efficient JSON logger. It is the fastest JSON logger out there in all scenarios. Also, it is one of the logger with the lowest allocation.
  • ozzo-log - High performance logging supporting log severity, categorization, and filtering. Can send filtered log messages to various targets (e.g. console, network, mail).
  • phuslu/log - High performance structured logging.
  • pp - Colored pretty printer for Go language.
  • rollingwriter - RollingWriter is an auto-rotate io.Writer implementation with multi policies to provide log file rotation.
  • seelog - Logging functionality with flexible dispatching, filtering, and formatting.
  • slf4g - Simple Logging Facade for Golang: Simple structured logging; but powerful, extendable and customizable, with huge amount of learnings from decades of past logging frameworks.
  • slog - Lightweight, configurable, extensible logger for Go.
  • slog-formatter - Common formatters for slog and helpers to build your own.
  • slog-multi - Chain of slog.Handler (pipeline, fanout…).
  • slogor - A colorful slog handler.
  • spew - Implements a deep pretty printer for Go data structures to aid in debugging.
  • sqldb-logger - A logger for Go SQL database driver without modify existing *sql.DB stdlib usage.
  • stdlog - Stdlog is an object-oriented library providing leveled logging. It is very useful for cron jobs.
  • structy/log - A simple to use log system, minimalist but with features for debugging and differentiation of messages.
  • tail - Go package striving to emulate the features of the BSD tail program.
  • tint - A slog.Handler that writes tinted logs.
  • xlog - Plugin architecture and flexible log system for Go, with level ctrl, multiple log target and custom log format.
  • xlog - Structured logger for net/context aware HTTP handlers with flexible dispatching.
  • xylog - Leveled and structured logging, dynamic fields, high performance, zone management, simple configuration, and readable syntax.
  • yell - Yet another minimalistic logging library.
  • zap - Fast, structured, leveled logging in Go.
  • zax - Integrate Context with Zap logger, which leads to more flexibility in Go logging.
  • zerolog - Zero-allocation JSON logger.
  • zkits-logger - A powerful zero-dependency JSON logger.
  • zl - High Developer Experience, zap based logger. It offers rich functionality but is easy to configure.

Machine Learning

Libraries for Machine Learning.

  • bayesian - Naive Bayesian Classification for Golang.
  • CloudForest - Fast, flexible, multi-threaded ensembles of decision trees for machine learning in pure Go.
  • ddt - Dynamic decision tree, create trees defining customizable rules.
  • eaopt - An evolutionary optimization library.
  • evoli - Genetic Algorithm and Particle Swarm Optimization library.
  • fonet - A Deep Neural Network library written in Go.
  • go-cluster - Go implementation of the k-modes and k-prototypes clustering algorithms.
  • go-deep - A feature-rich neural network library in Go.
  • go-fann - Go bindings for Fast Artificial Neural Networks(FANN) library.
  • go-featureprocessing - Fast and convenient feature processing for low latency machine learning in Go.
  • go-galib - Genetic Algorithms library written in Go / golang.
  • go-pr - Pattern recognition package in Go lang.
  • gobrain - Neural Networks written in go.
  • godist - Various probability distributions, and associated methods.
  • goga - Genetic algorithm library for Go.
  • GoLearn - General Machine Learning library for Go.
  • golinear - liblinear bindings for Go.
  • GoMind - A simplistic Neural Network Library in Go.
  • goml - On-line Machine Learning in Go.
  • gonet - Neural Network for Go.
  • Goptuna - Bayesian optimization framework for black-box functions written in Go. Everything will be optimized.
  • goRecommend - Recommendation Algorithms library written in Go.
  • gorgonia - graph-based computational library like Theano for Go that provides primitives for building various machine learning and neural network algorithms.
  • gorse - An offline recommender system backend based on collaborative filtering written in Go.
  • goscore - Go Scoring API for PMML.
  • gosseract - Go package for OCR (Optical Character Recognition), by using Tesseract C++ library.
  • hugot - Huggingface transformer pipelines for golang with onnxruntime.
  • libsvm - libsvm golang version derived work based on LIBSVM 3.14.
  • m2cgen - A CLI tool to transpile trained classic ML models into a native Go code with zero dependencies, written in Python with Go language support.
  • neat - Plug-and-play, parallel Go framework for NeuroEvolution of Augmenting Topologies (NEAT).
  • neural-go - Multilayer perceptron network implemented in Go, with training via backpropagation.
  • ocrserver - A simple OCR API server, seriously easy to be deployed by Docker and Heroku.
  • onnx-go - Go Interface to Open Neural Network Exchange (ONNX).
  • probab - Probability distribution functions. Bayesian inference. Written in pure Go.
  • randomforest - Easy to use Random Forest library for Go.
  • regommend - Recommendation & collaborative filtering engine.
  • shield - Bayesian text classifier with flexible tokenizers and storage backends for Go.
  • tfgo - Easy to use Tensorflow bindings: simplifies the usage of the official Tensorflow Go bindings. Define computational graphs in Go, load and execute models trained in Python.
  • Varis - Golang Neural Network.

Messaging

Libraries that implement messaging systems.

  • ami - Go client to reliable queues based on Redis Cluster Streams.
  • amqp - Go RabbitMQ Client Library.
  • APNs2 - HTTP/2 Apple Push Notification provider for Go — Send push notifications to iOS, tvOS, Safari and OSX apps.
  • Asynq - A simple, reliable, and efficient distributed task queue for Go built on top of Redis.
  • Beaver - A real time messaging server to build a scalable in-app notifications, multiplayer games, chat apps in web and mobile apps.
  • Bus - Minimalist message bus implementation for internal communication.
  • Centrifugo - Real-time messaging (Websockets or SockJS) server in Go.
  • Chanify - A push notification server send message to your iOS devices.
  • Commander - A high-level event driven consumer/producer supporting various “dialects” such as Apache Kafka.
  • Confluent Kafka Golang Client - confluent-kafka-go is Confluent’s Golang client for Apache Kafka and the Confluent Platform.
  • dbus - Native Go bindings for D-Bus.
  • drone-line - Sending Line notifications using a binary, docker or Drone CI.
  • emitter - Emits events using Go way, with wildcard, predicates, cancellation possibilities and many other good wins.
  • event - Implementation of the pattern observer.
  • EventBus - The lightweight event bus with async compatibility.
  • gaurun-client - Gaurun Client written in Go.
  • Glue - Robust Go and Javascript Socket Library (Alternative to Socket.io).
  • go-eventbus - Simple Event Bus package for Go.
  • Go-MediatR - A library for handling mediator patterns and simplified CQRS patterns within an event-driven architecture, inspired by csharp MediatR library.
  • go-mq - RabbitMQ client with declarative configuration.
  • go-notify - Native implementation of the freedesktop notification spec.
  • go-nsq - the official Go package for NSQ.
  • go-res - Package for building REST/real-time services where clients are synchronized seamlessly, using NATS and Resgate.
  • go-socket.io - socket.io library for golang, a realtime application framework.
  • go-vitotrol - Client library to Viessmann Vitotrol web service.
  • Gollum - A n:m multiplexer that gathers messages from different sources and broadcasts them to a set of destinations.
  • golongpoll - HTTP longpoll server library that makes web pub-sub simple.
  • gopush-cluster - gopush-cluster is a go push server cluster.
  • gorush - Push notification server using APNs2 and google GCM.
  • gosd - A library for scheduling when to dispatch a message to a channel.
  • guble - Messaging server using push notifications (Google Firebase Cloud Messaging, Apple Push Notification services, SMS) as well as websockets, a REST API, featuring distributed operation and message-persistence.
  • hare - A user friendly library for sending messages and listening to TCP sockets.
  • hub - A Message/Event Hub for Go applications, using publish/subscribe pattern with support for alias like rabbitMQ exchanges.
  • jazz - A simple RabbitMQ abstraction layer for queue administration and publishing and consuming of messages.
  • machinery - Asynchronous task queue/job queue based on distributed message passing.
  • mangos - Pure go implementation of the Nanomsg (“Scalability Protocols”) with transport interoperability.
  • melody - Minimalist framework for dealing with websocket sessions, includes broadcasting and automatic ping/pong handling.
  • Mercure - Server and library to dispatch server-sent updates using the Mercure protocol (built on top of Server-Sent Events).
  • messagebus - messagebus is a Go simple async message bus, perfect for using as event bus when doing event sourcing, CQRS, DDD.
  • NATS Go Client - Lightweight and high performance publish-subscribe and distributed queueing messaging system - this is the Go library.
  • nsq-event-bus - A tiny wrapper around NSQ topic and channel.
  • oplog - Generic oplog/replication system for REST APIs.
  • pubsub - Simple pubsub package for go.
  • Quamina - Fast pattern-matching for filtering messages and events.
  • rabbitroutine - Lightweight library that handles RabbitMQ auto-reconnect and publishing retries. The library takes into account the need to re-declare entities in RabbitMQ after reconnection.
  • rabbus - A tiny wrapper over amqp exchanges and queues.
  • rabtap - RabbitMQ swiss army knife cli app.
  • RapidMQ - RapidMQ is a lightweight and reliable library for managing of the local messages queue.
  • Ratus - Ratus is a RESTful asynchronous task queue server.
  • redisqueue - redisqueue provides a producer and consumer of a queue that uses Redis streams.
  • rmqconn - RabbitMQ Reconnection. Wrapper over amqp.Connection and amqp.Dial. Allowing to do a reconnection when the connection is broken before forcing the call to the Close () method to be closed.
  • sarama - Go library for Apache Kafka.
  • Uniqush-Push - Redis backed unified push service for server-side notifications to mobile devices.
  • Watermill - Working efficiently with message streams. Building event driven applications, enabling event sourcing, RPC over messages, sagas. Can use conventional pub/sub implementations like Kafka or RabbitMQ, but also HTTP or MySQL binlog.
  • zmq4 - Go interface to ZeroMQ version 4. Also available for version 3 and version 2.

Microsoft Office

  • unioffice - Pure go library for creating and processing Office Word (.docx), Excel (.xlsx) and Powerpoint (.pptx) documents.

Microsoft Excel

Libraries for working with Microsoft Excel.

  • excelize - Golang library for reading and writing Microsoft Excel™ (XLSX) files.
  • exl - Excel binding to struct written in Go.(Only supports Go1.18+)
  • go-excel - A simple and light reader to read a relate-db-like excel as a table.
  • goxlsxwriter - Golang bindings for libxlsxwriter for writing XLSX (Microsoft Excel) files.
  • xlsx - Library to simplify reading the XML format used by recent version of Microsoft Excel in Go programs.
  • xlsx - Fast and safe way to read/update your existing Microsoft Excel files in Go programs.

Miscellaneous

Dependency Injection

Libraries for working with dependency injection.

  • alice - Additive dependency injection container for Golang.
  • boot-go - Component-based development with dependency injection using reflections for Go developers.
  • cosban/di - A code generation based dependency injection wiring tool.
  • di - A dependency injection container for go programming language.
  • dig - A reflection based dependency injection toolkit for Go.
  • dingo - A dependency injection toolkit for Go, based on Guice.
  • do - A dependency injection framework based on Generics.
  • fx - A dependency injection based application framework for Go (built on top of dig).
  • gocontainer - Simple Dependency Injection Container.
  • goioc/di - Spring-inspired Dependency Injection Container.
  • GoLobby/Container - GoLobby Container is a lightweight yet powerful IoC dependency injection container for the Go programming language.
  • gontainer - A dependency injection service container for Go projects.
  • gontainer/gontainer - A YAML-based Dependency Injection container for GO. It supports dependencies’ scopes, and auto-detection of circular dependencies. Gontainer is concurrent-safe.
  • google/wire - Automated Initialization in Go.
  • HnH/di - DI container library that is focused on clean API and flexibility.
  • kinit - Customizable dependency injection container with the global mode, cascade initialization and panic-safe finalization.
  • kod - A generics based dependency injection framework for Go.
  • linker - A reflection based dependency injection and inversion of control library with components lifecycle support.
  • nject - A type safe, reflective framework for libraries, tests, http endpoints, and service startup.
  • ore - Lightweight, generic & simple dependency injection (DI) container.
  • wire - Strict Runtime Dependency Injection for Golang.

Project Layout

Unofficial set of patterns for structuring projects.

  • ardanlabs/service - A starter kit for building production grade scalable web service applications.
  • cookiecutter-golang - A Go application boilerplate template for quick starting projects following production best practices.
  • go-blueprint - Allows users to spin up a quick Go project using a popular framework.
  • go-module - Template for a typical module written on Go.
  • go-sample - A sample layout for Go application projects with the real code.
  • go-starter - An opinionated production-ready RESTful JSON backend template, highly integrated with VSCode DevContainers.
  • go-todo-backend - Go Todo Backend example using modular project layout for product microservice.
  • gobase - A simple skeleton for golang application with basic setup for real golang application.
  • golang-standards/project-layout - Set of common historical and emerging project layout patterns in the Go ecosystem. Note: despite the org-name they do not represent official golang standards, see this issue for more information. Nonetheless, some may find the layout useful.
  • golang-templates/seed - Go application GitHub repository template.
  • insidieux/inizio - Golang project layout generator with plugins.
  • modern-go-application - Go application boilerplate and example applying modern practices.
  • nunu - Nunu is a scaffolding tool for building Go applications.
  • pagoda - Rapid, easy full-stack web development starter kit built in Go.
  • scaffold - Scaffold generates a starter Go project layout. Lets you focus on business logic implemented.
  • wangyoucao577/go-project-layout - Set of practices and discussions on how to structure Go project layout.

Strings

Libraries for working with strings.

  • bexp - Go implementation of Brace Expansion mechanism to generate arbitrary strings.
  • caps - A case conversion library.
  • go-formatter - Implements replacement fields surrounded by curly braces {} format strings.
  • gobeam/Stringy - String manipulation library to convert string to camel case, snake case, kebab case / slugify etc.
  • strutil - String utilities.
  • sttr - cross-platform, cli app to perform various operations on string.
  • xstrings - Collection of useful string functions ported from other languages.

Uncategorized

These libraries were placed here because none of the other categories seemed to fit.

  • anagent - Minimalistic, pluggable Golang evloop/timer handler with dependency-injection.
  • antch - A fast, powerful and extensible web crawling & scraping framework.
  • archiver - Library and command for making and extracting .zip and .tar.gz archives.
  • autoflags - Go package to automatically define command line flags from struct fields.
  • avgRating - Calculate average score and rating based on Wilson Score Equation.
  • banner - Add beautiful banners into your Go applications.
  • base64Captcha - Base64captch supports digit, number, alphabet, arithmetic, audio and digit-alphabet captcha.
  • basexx - Convert to, from, and between digit strings in various number bases.
  • battery - Cross-platform, normalized battery information library.
  • bitio - Highly optimized bit-level Reader and Writer for Go.
  • browscapgo - GoLang Library for Browser Capabilities Project.
  • captcha - Package captcha provides an easy to use, unopinionated API for captcha generation.
  • common - A library for server framework.
  • conv - Package conv provides fast and intuitive conversions across Go types.
  • datacounter - Go counters for readers/writer/http.ResponseWriter.
  • faker - Fake data generator.
  • faker - Random fake data and struct generator for Go.
  • ffmt - Beautify data display for Humans.
  • gatus - Automated service health dashboard.
  • go-commandbus - A slight and pluggable command-bus for Go.
  • go-commons-pool - Generic object pool for Golang.
  • go-openapi - Collection of packages to parse and utilize open-api schemas.
  • go-resiliency - Resiliency patterns for golang.
  • go-unarr - Decompression library for RAR, TAR, ZIP and 7z archives.
  • goenum - A common enumeration struct based on generics and reflection that allows you to quickly define enumerations and use a set of useful default methods.
  • gofakeit - Random data generator written in go.
  • gommit - Analyze git commit messages to ensure they follow defined patterns.
  • gopsutil - Cross-platform library for retrieving process and system utilization(CPU, Memory, Disks, etc).
  • gosh - Provide Go Statistics Handler, Struct, Measure Method.
  • gosms - Your own local SMS gateway in Go that can be used to send SMS.
  • gotoprom - Type-safe metrics builder wrapper library for the official Prometheus client.
  • gountries - Package that exposes country and subdivision data.
  • gtree - Provide CLI, Package and Web for tree output and directories creation from Markdown or programmatically.
  • health - A simple and flexible health check library for Go.
  • health - Easy to use, extensible health check library.
  • healthcheck - An opinionated and concurrent health-check HTTP handler for RESTful services.
  • hostutils - A golang library for packing and unpacking FQDNs list.
  • indigo - Distributed unique ID generator of using Sonyflake and encoded by Base58.
  • lk - A simple licensing library for golang.
  • llvm - Library for interacting with LLVM IR in pure Go.
  • metrics - Library for metrics instrumentation and Prometheus exposition.
  • morse - Library to convert to and from morse code.
  • numa - NUMA is a utility library, which is written in go. It help us to write some NUMA-AWARED code.
  • openapi - OpenAPI 3.x parser.
  • pdfgen - HTTP service to generate PDF from Json requests.
  • persian - Some utilities for Persian language in go.
  • sandid - Every grain of sand on earth has its own ID.
  • shellwords - A Golang library to manipulate strings according to the word parsing rules of the UNIX Bourne shell.
  • shortid - Distributed generation of super short, unique, non-sequential, URL friendly IDs.
  • shoutrrr - Notification library providing easy access to various messaging services like slack, mattermost, gotify and smtp among others.
  • sitemap-format - A simple sitemap generator, with a little syntactic sugar.
  • stateless - A fluent library for creating state machines.
  • stats - Monitors Go MemStats + System stats such as Memory, Swap and CPU and sends via UDP anywhere you want for logging etc…
  • turtle - Emojis for Go.
  • url-shortener - A modern, powerful, and robust URL shortener microservice with mysql support.
  • VarHandler - Generate boilerplate http input and output handling.
  • varint - A faster varying length integer encoder/decoder than the one provided in the standard library.
  • xdg - FreeDesktop.org (xdg) Specs implemented in Go.
  • xkg - X Keyboard Grabber.
  • xz - Pure golang package for reading and writing xz-compressed files.

Natural Language Processing

Libraries for working with human languages.

See also Text Processing and Text Analysis.

Language Detection

  • detectlanguage - Language Detection API Go Client. Supports batch requests, short phrase or single word language detection.
  • getlang - Fast natural language detection package.
  • guesslanguage - Functions to determine the natural language of a unicode text.
  • lingua-go - An accurate natural language detection library, suitable for long and short text alike. Supports detecting multiple languages in mixed-language text.
  • whatlanggo - Natural language detection package for Go. Supports 84 languages and 24 scripts (writing systems e.g. Latin, Cyrillic, etc).

Morphological Analyzers

  • go-stem - Implementation of the porter stemming algorithm.
  • go2vec - Reader and utility functions for word2vec embeddings.
  • golibstemmer - Go bindings for the snowball libstemmer library including porter 2.
  • gosentiwordnet - Sentiment analyzer using sentiwordnet lexicon in Go.
  • govader - Go implementation of VADER Sentiment Analysis.
  • govader-backend - Microservice implementation of GoVader.
  • kagome - JP morphological analyzer written in pure Go.
  • libtextcat - Cgo binding for libtextcat C library. Guaranteed compatibility with version 2.2.
  • nlp - Extract values from strings and fill your structs with nlp.
  • nlp - Go Natural Language Processing library supporting LSA (Latent Semantic Analysis).
  • paicehusk - Golang implementation of the Paice/Husk Stemming Algorithm.
  • porter - This is a fairly straightforward port of Martin Porter’s C implementation of the Porter stemming algorithm.
  • porter2 - Really fast Porter 2 stemmer.
  • RAKE.go - Go port of the Rapid Automatic Keyword Extraction Algorithm (RAKE).
  • snowball - Snowball stemmer port (cgo wrapper) for Go. Provides word stem extraction functionality Snowball native.
  • spaGO - Self-contained Machine Learning and Natural Language Processing library in Go.
  • spelling-corrector - A spelling corrector for the Spanish language or create your own.

Slugifiers

  • go-slugify - Make pretty slug with multiple languages support.
  • slug - URL-friendly slugify with multiple languages support.
  • Slugify - Go slugify application that handles string.

Tokenizers

  • gojieba - This is a Go implementation of jieba which a Chinese word splitting algorithm.
  • gotokenizer - A tokenizer based on the dictionary and Bigram language models for Golang. (Now only support chinese segmentation)
  • gse - Go efficient text segmentation; support english, chinese, japanese and other.
  • MMSEGO - This is a GO implementation of MMSEG which a Chinese word splitting algorithm.
  • prose - Library for text processing that supports tokenization, part-of-speech tagging, named-entity extraction, and more. English only.
  • segment - Go library for performing Unicode Text Segmentation as described in Unicode Standard Annex #29
  • sentences - Sentence tokenizer: converts text into a list of sentences.
  • shamoji - The shamoji is word filtering package written in Go.
  • stemmer - Stemmer packages for Go programming language. Includes English and German stemmers.
  • textcat - Go package for n-gram based text categorization, with support for utf-8 and raw text.

Translation

  • ctxi18n - Context aware i18n with a short and consise API, pluralization, interpolation, and fs.FS support. YAML locale definitions are based on Rails i18n.
  • go-i18n - Package and an accompanying tool to work with localized text.
  • go-mystem - CGo bindings to Yandex.Mystem - russian morphology analyzer.
  • go-pinyin - CN Hanzi to Hanyu Pinyin converter.
  • go-words - A words table and text resource library for Golang projects.
  • gotext - GNU gettext utilities for Go.
  • iuliia-go - Transliterate Cyrillic → Latin in every possible way.
  • spreak - Flexible translation and humanization library for Go, based on the concepts behind gettext.
  • t - Another i18n pkg for golang, which follows GNU gettext style and supports .po/.mo files: t.T (gettext), t.N (ngettext), etc. And it contains a cmd tool xtemplate, which can extract messages as a pot file from text/html template.

Transliteration

  • enca - Minimal cgo bindings for libenca, which detects character encodings.
  • go-unidecode - ASCII transliterations of Unicode text.
  • gounidecode - Unicode transliterator (also known as unidecode) for Go.
  • transliterator - Provides one-way string transliteration with supporting of language-specific transliteration rules.

Networking

Libraries for working with various layers of the network.

  • arp - Package arp implements the ARP protocol, as described in RFC 826.
  • buffstreams - Streaming protocolbuffer data over TCP made easy.
  • canopus - CoAP Client/Server implementation (RFC 7252).
  • cidranger - Fast IP to CIDR lookup for Go.
  • dhcp6 - Package dhcp6 implements a DHCPv6 server, as described in RFC 3315.
  • dns - Go library for working with DNS.
  • dnsmonster - Passive DNS Capture/Monitoring Framework.
  • easytcp - A light-weight TCP framework written in Go (Golang), built with message router. EasyTCP helps you build a TCP server easily fast and less painful.
  • ether - Cross-platform Go package for sending and receiving ethernet frames.
  • ethernet - Package ethernet implements marshaling and unmarshalling of IEEE 802.3 Ethernet II frames and IEEE 802.1Q VLAN tags.
  • event - Simple I/O event notification library written in Golang.
  • fasthttp - Package fasthttp is a fast HTTP implementation for Go, up to 10 times faster than net/http.
  • fortio - Load testing library and command line tool, advanced echo server and web UI. Allows to specify a set query-per-second load and record latency histograms and other useful stats and graph them. Tcp, Http, gRPC.
  • ftp - Package ftp implements a FTP client as described in RFC 959.
  • ftpserverlib - Fully featured FTP server library.
  • fullproxy - A fully featured scriptable and daemon configurable proxy and pivoting toolkit with SOCKS5, HTTP, raw ports and reverse proxy protocols.
  • fwdctl - A simple and intuitive CLI to manage IPTables forwards in your Linux server.
  • gaio - High performance async-io networking for Golang in proactor mode.
  • gev - gev is a lightweight, fast non-blocking TCP network library based on Reactor mode.
  • gldap - gldap provides an ldap server implementation and you provide handlers for its ldap operations.
  • gmqtt - Gmqtt is a flexible, high-performance MQTT broker library that fully implements the MQTT protocol V3.1.1.
  • gnet - gnet is a high-performance, lightweight, non-blocking, event-driven networking framework written in pure Go.
  • gnet - gnet is a high-performance networking framework,especially for game servers.
  • gNxI - A collection of tools for Network Management that use the gNMI and gNOI protocols.
  • go-getter - Go library for downloading files or directories from various sources using a URL.
  • go-multiproxy - Library for making HTTP requests through a pool of proxies offering fault tolerance, load balancing, automatic retries, cookie management, and more, via http.Get/Post replacement or http.Client RoundTripper drop-in
  • go-powerdns - PowerDNS API bindings for Golang.
  • go-sse - Go client and server implementation of HTML server-sent events.
  • go-stun - Go implementation of the STUN client (RFC 3489 and RFC 5389).
  • gobgp - BGP implemented in the Go Programming Language.
  • gopacket - Go library for packet processing with libpcap bindings.
  • gopcap - Go wrapper for libpcap.
  • goshark - Package goshark use tshark to decode IP packet and create data struct to analyse packet.
  • gosnmp - Native Go library for performing SNMP actions.
  • gotcp - Go package for quickly writing tcp applications.
  • grab - Go package for managing file downloads.
  • graval - Experimental FTP server framework.
  • gws - High-Performance WebSocket Server & Client With AsyncIO Supporting .
  • HTTPLab - HTTPLabs let you inspect HTTP requests and forge responses.
  • httpproxy - HTTP proxy handler and dialer.
  • iplib - Library for working with IP addresses (net.IP, net.IPNet), inspired by python ipaddress and ruby ipaddr
  • jazigo - Jazigo is a tool written in Go for retrieving configuration for multiple network devices.
  • kcp-go - KCP - Fast and Reliable ARQ Protocol.
  • kcptun - Extremely simple & fast udp tunnel based on KCP protocol.
  • lhttp - Powerful websocket framework, build your IM server more easily.
  • linkio - Network link speed simulation for Reader/Writer interfaces.
  • llb - It’s a very simple but quick backend for proxy servers. Can be useful for fast redirection to predefined domain with zero memory allocation and fast response.
  • mdns - Simple mDNS (Multicast DNS) client/server library in Golang.
  • mqttPaho - The Paho Go Client provides an MQTT client library for connection to MQTT brokers via TCP, TLS or WebSockets.
  • natiu-mqtt - A dead-simple, non-allocating, low level implementation of MQTT well suited for embedded systems.
  • nbio - Pure Go 1000k+ connections solution, support tls/http1.x/websocket and basically compatible with net/http, with high-performance and low memory cost, non-blocking, event-driven, easy-to-use.
  • net - This repository holds supplementary Go networking libraries.
  • netpoll - A high-performance non-blocking I/O networking framework, which focused on RPC scenarios, developed by ByteDance.
  • NFF-Go - Framework for rapid development of performant network functions for cloud and bare-metal (former YANFF).
  • packet - Send packets over TCP and UDP. It can buffer messages and hot-swap connections if needed.
  • peerdiscovery - Pure Go library for cross-platform local peer discovery using UDP multicast.
  • portproxy - Simple TCP proxy which adds CORS support to API’s which don’t support it.
  • publicip - Package publicip returns your public facing IPv4 address (internet egress).
  • quic-go - An implementation of the QUIC protocol in pure Go.
  • raw - Package raw enables reading and writing data at the device driver level for a network interface.
  • sdns - A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy.
  • sftp - Package sftp implements the SSH File Transfer Protocol as described in https://filezilla-project.org/specs/draft-ietf-secsh-filexfer-02.txt.
  • ssh - Higher-level API for building SSH servers (wraps crypto/ssh).
  • sslb - It’s a Super Simples Load Balancer, just a little project to achieve some kind of performance.
  • stun - Go implementation of RFC 5389 STUN protocol.
  • tcpserver - Go library for building tcp servers faster.
  • tcpack - tcpack is an application protocol based on TCP to Pack and Unpack bytes stream in go program.
  • tspool - A TCP Library use worker pool to improve performance and protect your server.
  • tun2socks - A pure go implementation of tun2socks powered by gVisor TCP/IP stack.
  • utp - Go uTP micro transport protocol implementation.
  • vssh - Go library for building network and server automation over SSH protocol.
  • water - Simple TUN/TAP library.
  • webhooked - A webhook receiver on steroids: handle, secure, format and store a Webhook payload has never been easier.
  • webrtc - A pure Go implementation of the WebRTC API.
  • winrm - Go WinRM client to remotely execute commands on Windows machines.
  • xtcp - TCP Server Framework with simultaneous full duplex communication, graceful shutdown, and custom protocol.

HTTP Clients

Libraries for making HTTP requests.

  • fast-shot - Hit your API targets with rapid-fire precision using Go’s fastest and simple HTTP Client.
  • gentleman - Full-featured plugin-driven HTTP client library.
  • go-cleanhttp - Get easily stdlib HTTP client, which does not share any state with other clients.
  • go-http-client - Make http calls simply and easily.
  • go-otelroundtripper - Go http.RoundTripper that emits open telemetry metrics for HTTP requests.
  • go-req - Declarative golang HTTP client.
  • go-retryablehttp - Retryable HTTP client in Go.
  • go-zoox/fetch - A Powerful, Lightweight, Easy Http Client, inspired by Web Fetch API.
  • grequests - A Go “clone” of the great and famous Requests library.
  • heimdall - An enhanced http client with retry and hystrix capabilities.
  • httpretry - Enriches the default go HTTP client with retry functionality.
  • pester - Go HTTP client calls with retries, backoff, and concurrency.
  • req - Simple Go HTTP client with Black Magic (Less code and More efficiency).
  • request - HTTP client for golang. If you have experience about axios or requests, you will love it. No 3rd dependency.
  • requests - HTTP requests for Gophers. Uses context.Context and doesn’t hide the underlying net/http.Client, making it compatible with standard Go APIs. Also includes testing tools.
  • resty - Simple HTTP and REST client for Go inspired by Ruby rest-client.
  • rq - A nicer interface for golang stdlib HTTP client.
  • sling - Sling is a Go HTTP client library for creating and sending API requests.

OpenGL

Libraries for using OpenGL in Go.

  • gl - Go bindings for OpenGL (generated via glow).
  • glfw - Go bindings for GLFW 3.
  • go-glmatrix - Go port of glMatrix library.
  • goxjs/gl - Go cross-platform OpenGL bindings (OS X, Linux, Windows, browsers, iOS, Android).
  • goxjs/glfw - Go cross-platform glfw library for creating an OpenGL context and receiving events.
  • mathgl - Pure Go math package specialized for 3D math, with inspiration from GLM.

ORM

Libraries that implement Object-Relational Mapping or datamapping techniques.

  • bob - SQL query builder and ORM/Factory generator for Go. Successor of SQLBoiler.
  • bun - SQL-first Golang ORM. Successor of go-pg.
  • cacheme - Schema based, typed Redis caching/memoize framework for Go.
  • CQL - Built on top of GORM, adds compile-time verified queries based on auto-generated code.
  • ent - An entity framework for Go. Simple, yet powerful ORM for modeling and querying data.
  • go-dbw - A simple package that encapsulates database operations.
  • go-firestorm - A simple ORM for Google/Firebase Cloud Firestore.
  • go-sql - A easy ORM for mysql.
  • go-sqlbuilder - A flexible and powerful SQL string builder library plus a zero-config ORM.
  • go-store - Simple and fast Redis backed key-value store library for Go.
  • golobby/orm - Simple, fast, type-safe, generic orm for developer happiness.
  • GORM - The fantastic ORM library for Golang, aims to be developer friendly.
  • gormt - Mysql database to golang gorm struct.
  • gorp - Go Relational Persistence, ORM-ish library for Go.
  • grimoire - Grimoire is a database access layer and validation for golang. (Support: MySQL, PostgreSQL and SQLite3).
  • lore - Simple and lightweight pseudo-ORM/pseudo-struct-mapping environment for Go.
  • marlow - Generated ORM from project structs for compile time safety assurances.
  • pop/soda - Database migration, creation, ORM, etc… for MySQL, PostgreSQL, and SQLite.
  • Prisma - Prisma Client Go, Typesafe database access for Go.
  • reform - Better ORM for Go, based on non-empty interfaces and code generation.
  • rel - Modern Database Access Layer for Golang - Testable, Extendable and Crafted Into a Clean and Elegant API.
  • SQLBoiler - ORM generator. Generate a featureful and blazing-fast ORM tailored to your database schema.
  • upper.io/db - Single interface for interacting with different data sources through the use of adapters that wrap mature database drivers.
  • XORM - Simple and powerful ORM for Go. (Support: MySQL, MyMysql, PostgreSQL, Tidb, SQLite3, MsSql and Oracle).
  • Zoom - Blazing-fast datastore and querying engine built on Redis.

Package Management

Official tooling for dependency and package management

  • go modules - Modules are the unit of source code interchange and versioning. The go command has direct support for working with modules, including recording and resolving dependencies on other modules.

Official experimental tooling for package management

  • dep - Go dependency tool.
  • vgo - Versioned Go.

Unofficial libraries for package and dependency management.

  • glide - Manage your golang vendor and vendored packages with ease. Inspired by tools like Maven, Bundler, and Pip.
  • godep - dependency tool for go, godep helps build packages reproducibly by fixing their dependencies.
  • gom - Go Manager - bundle for go.
  • goop - Simple dependency manager for Go (golang), inspired by Bundler.
  • gop - Build and manage your Go applications out of GOPATH.
  • gopm - Go Package Manager.
  • govendor - Go Package Manager. Go vendor tool that works with the standard vendor file.
  • gpm - Barebones dependency manager for Go.
  • gup - Update binaries installed by “go install”.
  • johnny-deps - Minimal dependency version using Git.
  • modgv - Converts ‘go mod graph’ output into Graphviz’s DOT language.
  • mvn-golang - plugin that provides way for auto-loading of Golang SDK, dependency management and start build environment in Maven project infrastructure.
  • nut - Vendor Go dependencies.
  • VenGO - create and manage exportable isolated go virtual environments.

Performance

  • go-instrument - Automatically add spans to all methods and functions.
  • jaeger - A distributed tracing system.
  • pixie - No instrumentation tracing for Golang applications via eBPF.
  • profile - Simple profiling support package for Go.
  • statsviz - Live visualization of your Go application runtime statistics.
  • tracer - Simple, lightweight tracing.

Query Language

  • api-fu - Comprehensive GraphQL implementation.
  • dasel - Query and update data structures using selectors from the command line. Comparable to jq/yq but supports JSON, YAML, TOML and XML with zero runtime dependencies.
  • gojsonq - A simple Go package to Query over JSON Data.
  • goven - A drop-in query language for any database schema.
  • gqlgen - go generate based graphql server library.
  • grapher - A GraphQL field builder utilizing Go generics with extra utilities and features.
  • graphql - graphql parser + utilities.
  • graphql - GraphQL server with a focus on ease of use.
  • graphql-go - Implementation of GraphQL for Go.
  • gws - Apollos’ “GraphQL over Websocket” client and server implementation.
  • jsonpath - A query library for retrieving part of JSON based on JSONPath syntax.
  • jsonql - JSON query expression library in Golang.
  • jsonslice - Jsonpath queries with advanced filters.
  • mql - Model Query Language (mql) is a query language for your database models.
  • rql - Resource Query Language for REST API.
  • rqp - Query Parser for REST API. Filtering, validations, both AND, OR operations are supported directly in the query.
  • straf - Easily Convert Golang structs to GraphQL objects.

Resource Embedding

  • debme - Create an embed.FS from an existing embed.FS subdirectory.
  • esc - Embeds files into Go programs and provides http.FileSystem interfaces to them.
  • fileb0x - Simple tool to embed files in go with focus on “customization” and ease to use.
  • go-resources - Unfancy resources embedding with Go.
  • go.rice - go.rice is a Go package that makes working with resources such as HTML, JS, CSS, images, and templates very easy.
  • mule - Embed external resources like images, movies … into Go source code to create single file binaries using go generate. Focused on simplicity.
  • packr - The simple and easy way to embed static files into Go binaries.
  • rebed - Recreate folder structures and files from Go 1.16’s embed.FS type
  • statics - Embeds static resources into go files for single binary compilation + works with http.FileSystem + symlinks.
  • statik - Embeds static files into a Go executable.
  • templify - Embed external template files into Go code to create single file binaries.
  • vfsgen - Generates a vfsdata.go file that statically implements the given virtual filesystem.

Science and Data Analysis

Libraries for scientific computing and data analyzing.

  • assocentity - Package assocentity returns the average distance from words to a given entity.
  • bradleyterry - Provides a Bradley-Terry Model for pairwise comparisons.
  • calendarheatmap - Calendar heatmap in plain Go inspired by Github contribution activity.
  • chart - Simple Chart Plotting library for Go. Supports many graphs types.
  • dataframe-go - Dataframes for machine-learning and statistics (similar to pandas).
  • decimal - Package decimal implements arbitrary-precision decimal floating-point arithmetic.
  • evaler - Simple floating point arithmetic expression evaluator.
  • ewma - Exponentially-weighted moving averages.
  • geom - 2D geometry for golang.
  • go-dsp - Digital Signal Processing for Go.
  • go-estimate - State estimation and filtering algorithms in Go.
  • go-gt - Graph theory algorithms written in “Go” language.
  • godesim - Extended/multivariable ODE solver framework for event-based simulations with simple API.
  • goent - GO Implementation of Entropy Measures.
  • gograph - A golang generic graph library that provides mathematical graph-theory and algorithms.
  • gohistogram - Approximate histograms for data streams.
  • gonum - Gonum is a set of numeric libraries for the Go programming language. It contains libraries for matrices, statistics, optimization, and more.
  • gonum/plot - gonum/plot provides an API for building and drawing plots in Go.
  • goraph - Pure Go graph theory library(data structure, algorithm visualization).
  • gosl - Go scientific library for linear algebra, FFT, geometry, NURBS, numerical methods, probabilities, optimisation, differential equations, and more.
  • GoStats - GoStats is an Open Source GoLang library for math statistics mostly used in Machine Learning domains, it covers most of the Statistical measures functions.
  • graph - Library of basic graph algorithms.
  • jsonl-graph - Tool to manipulate JSONL graphs with graphviz support.
  • ode - Ordinary differential equation (ODE) solver which supports extended states and channel-based iteration stop conditions.
  • orb - 2D geometry types with clipping, GeoJSON and Mapbox Vector Tile support.
  • pagerank - Weighted PageRank algorithm implemented in Go.
  • piecewiselinear - Tiny linear interpolation library.
  • PiHex - Implementation of the “Bailey-Borwein-Plouffe” algorithm for the hexadecimal number Pi.
  • rootfinding - root-finding algorithms library for finding roots of quadratic functions.
  • sparse - Go Sparse matrix formats for linear algebra supporting scientific and machine learning applications, compatible with gonum matrix libraries.
  • stats - Statistics package with common functions missing from the Golang standard library.
  • streamtools - general purpose, graphical tool for dealing with streams of data.
  • TextRank - TextRank implementation in Golang with extendable features (summarization, weighting, phrase extraction) and multithreading (goroutine) support.
  • triangolatte - 2D triangulation library. Allows translating lines and polygons (both based on points) to the language of GPUs.

Security

Libraries that are used to help make your application more secure.

  • acmetool - ACME (Let’s Encrypt) client tool with automatic renewal.
  • acopw-go - Small cryptographically secure password generator package for Go.
  • acra - Network encryption proxy to protect database-based applications from data leaks: strong selective encryption, SQL injections prevention, intrusion detection system.
  • age - A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
  • argon2-hashing - light wrapper around Go’s argon2 package that closely mirrors with Go’s standard library Bcrypt and simple-scrypt package.
  • argon2pw - Argon2 password hash generation with constant-time password comparison.
  • autocert - Auto provision Let’s Encrypt certificates and start a TLS server.
  • BadActor - In-memory, application-driven jailer built in the spirit of fail2ban.
  • beelzebub - A secure low code honeypot framework, leveraging AI for System Virtualization.
  • booster - Fast initramfs generator with full-disk encryption support.
  • Cameradar - Tool and library to remotely hack RTSP streams from surveillance cameras.
  • certificates - An opinionated tool for generating tls certificates.
  • CertMagic - Mature, robust, and powerful ACME client integration for fully-managed TLS certificate issuance and renewal.
  • Coraza - Enterprise-ready, modsecurity and OWASP CRS compatible WAF library.
  • dongle - A simple, semantic and developer-friendly golang package for encoding&decoding and encryption&decryption.
  • encid - Encode and decode encrypted integer IDs.
  • firewalld-rest - A rest application to dynamically update firewalld rules on a linux server.
  • go-generate-password - Password generator that can be used on the cli or as a library.
  • go-htpasswd - Apache htpasswd Parser for Go.
  • go-password-validator - Password validator based on raw cryptographic entropy values.
  • go-peer - A software library for creating secure and anonymous decentralized systems.
  • go-yara - Go Bindings for YARA, the “pattern matching swiss knife for malware researchers (and everyone else)”.
  • goArgonPass - Argon2 password hash and verification designed to be compatible with existing Python and PHP implementations.
  • goSecretBoxPassword - A probably paranoid package for securely hashing and encrypting passwords.
  • Interpol - Rule-based data generator for fuzzing and penetration testing.
  • lego - Pure Go ACME client library and CLI tool (for use with Let’s Encrypt).
  • luks.go - Pure Golang library to manage LUKS partitions.
  • memguard - A pure Go library for handling sensitive values in memory.
  • multikey - An n-out-of-N keys encryption/decryption framework based on Shamir’s Secret Sharing algorithm.
  • nacl - Go implementation of the NaCL set of API’s.
  • optimus-go - ID hashing and Obfuscation using Knuth’s Algorithm.
  • passlib - Futureproof password hashing library.
  • passwap - Provides a unified implementation between different password hashing algorithms
  • secret - Prevent your secrets from leaking into logs, std* etc.
  • secure - HTTP middleware for Go that facilitates some quick security wins.
  • secureio - An keyexchanging+authenticating+encrypting wrapper and multiplexer for io.ReadWriteCloser based on XChaCha20-poly1305, ECDH and ED25519.
  • simple-scrypt - Scrypt package with a simple, obvious API and automatic cost calibration built-in.
  • ssh-vault - encrypt/decrypt using ssh keys.
  • sslmgr - SSL certificates made easy with a high level wrapper around acme/autocert.
  • teler-waf - teler-waf is a Go HTTP middleware that provide teler IDS functionality to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate into existing Go applications.
  • themis - high-level cryptographic library for solving typical data security tasks (secure data storage, secure messaging, zero-knowledge proof authentication), available for 14 languages, best fit for multi-platform apps.

Serialization

Libraries and tools for binary serialization.

  • asn1 - Asn.1 BER and DER encoding library for golang.
  • bambam - generator for Cap’n Proto schemas from go.
  • bel - Generate TypeScript interfaces from Go structs/interfaces. Useful for JSON RPC.
  • binstruct - Golang binary decoder for mapping data into the structure.
  • cbor - Small, safe, and easy CBOR encoding and decoding library.
  • colfer - Code generation for the Colfer binary format.
  • csvutil - High Performance, idiomatic CSV record encoding and decoding to native Go structures.
  • elastic - Convert slices, maps or any other unknown value across different types at run-time, no matter what.
  • fixedwidth - Fixed-width text formatting (UTF-8 supported).
  • fwencoder - Fixed width file parser (encoding and decoding library) for Go.
  • go-capnproto - Cap’n Proto library and parser for go.
  • go-codec - High Performance, feature-Rich, idiomatic encode, decode and rpc library for msgpack, cbor and json, with runtime-based OR code-generation support.
  • go-csvlib - High level and rich functionalities CSV serialization/deserialization library.
  • go-lctree - Provides a CLI and primitives to serialize and deserialize LeetCode binary trees.
  • gogoprotobuf - Protocol Buffers for Go with Gadgets.
  • goprotobuf - Go support, in the form of a library and protocol compiler plugin, for Google’s protocol buffers.
  • gotiny - Efficient Go serialization library, gotiny is almost as fast as serialization libraries that generate code.
  • jsoniter - High-performance 100% compatible drop-in replacement of “encoding/json”.
  • mapstructure - Go library for decoding generic map values into native Go structures.
  • phpsessiondecoder - GoLang library for working with PHP session format and PHP Serialize/Unserialize functions.
  • pletter - A standard way to wrap a proto message for message brokers.
  • structomap - Library to easily and dynamically generate maps from static structures.
  • unitpacking - Library to pack unit vectors into as fewest bytes as possible.

Server Applications

  • algernon - HTTP/2 web server with built-in support for Lua, Markdown, GCSS and Amber.
  • Caddy - Caddy is an alternative, HTTP/2 web server that’s easy to configure and use.
  • consul - Consul is a tool for service discovery, monitoring and configuration.
  • cortex-tenant - Prometheus remote write proxy that adds add Cortex tenant ID header based on metric labels.
  • devd - Local webserver for developers.
  • discovery - A registry for resilient mid-tier load balancing and failover.
  • dudeldu - A simple SHOUTcast server.
  • dummy - Run mock server based off an API contract with one command.
  • Easegress - A cloud native high availability/performance traffic orchestration system with observability and extensibility.
  • etcd - Highly-available key value store for shared configuration and service discovery.
  • Euterpe - Self-hosted music streaming server with built-in web UI and REST API.
  • Fider - Fider is an open platform to collect and organize customer feedback.
  • Flagr - Flagr is an open-source feature flagging and A/B testing service.
  • flipt - A self contained feature flag solution written in Go and Vue.js
  • go-feature-flag - A simple, complete and lightweight self-hosted feature flag solution 100% Open Source.
  • go-proxy-cache - Simple Reverse Proxy with Caching, written in Go, using Redis.
  • gondola - A YAML based golang reverse proxy.
  • jackal - An XMPP server written in Go.
  • lets-proxy2 - Reverse proxy for handle https with issue certificates in fly from lets-encrypt.
  • minio - Minio is a distributed object storage server.
  • Moxy - Moxy is a simple mocker and proxy application server, you can create mock endpoints as well as proxy requests in case no mock exists for the endpoint.
  • nginx-prometheus - Nginx log parser and exporter to Prometheus.
  • nsq - A realtime distributed messaging platform.
  • pocketbase - PocketBase is a realtime backend in 1 file consisting of embedded database (SQLite) with realtime subscriptions, built-in auth management and much more.
  • protoxy - A proxy server that converts JSON request bodies to Protocol Buffers.
  • psql-streamer - Stream database events from PostgreSQL to Kafka.
  • riemann-relay - Relay to load-balance Riemann events and/or convert them to Carbon.
  • RoadRunner - High-performance PHP application server, load-balancer and process manager.
  • SFTPGo - Fully featured and highly configurable SFTP server with optional FTP/S and WebDAV support. It can serve local filesystem and Cloud Storage backends such as S3 and Google Cloud Storage.
  • simple-jwt-provider - Simple and lightweight provider which exhibits JWTs, supports login, password-reset (via mail) and user management.
  • Trickster - HTTP reverse proxy cache and time series accelerator.
  • Wish - Make SSH apps, just like that!

Stream Processing

Libraries and tools for stream processing and reactive programming.

  • go-streams - Go stream processing library.
  • goio - An implementation of IO, Stream, Fiber for Golang, inspired by awesome Scala libraries cats and fs2.
  • machine - Go library for writing and generating stream workers with built in metrics and traceability.
  • stream - Go Stream, like Java 8 Stream: Filter/Map/FlatMap/Peek/Sorted/ForEach/Reduce…

Template Engines

Libraries and tools for templating and lexing.

  • ego - Lightweight templating language that lets you write templates in Go. Templates are translated into Go and compiled.
  • extemplate - Tiny wrapper around html/template to allow for easy file-based template inheritance.
  • fasttemplate - Simple and fast template engine. Substitutes template placeholders up to 10x faster than text/template.
  • gomponents - HTML 5 components in pure Go, that look something like this: func(name string) g.Node { return Div(Class("headline"), g.Textf("Hi %v!", name)) }.
  • gospin - Article spinning and spintax/spinning syntax engine, useful for A/B, testing pieces of text/articles and creating more natural conversations.
  • got - A Go code generator inspired by Hero and Fasttemplate. Has include files, custom tag definitions, injected Go code, language translation, and more.
  • goview - Goview is a lightweight, minimalist and idiomatic template library based on golang html/template for building Go web application.
  • jet - Jet template engine.
  • liquid - Go implementation of Shopify Liquid templates.
  • maroto - A maroto way to create PDFs. Maroto is inspired in Bootstrap and uses gofpdf. Fast and simple.
  • pongo2 - Django-like template-engine for Go.
  • quicktemplate - Fast, powerful, yet easy to use template engine. Converts templates into Go code and then compiles it.
  • raymond - Complete handlebars implementation in Go.
  • Razor - Razor view engine for Golang.
  • Soy - Closure templates (aka Soy templates) for Go, following the official spec.
  • sprout - Useful template functions for Go templates.
  • tbd - A really simple way to create text templates with placeholders - exposes extra builtin Git repo metadata.
  • templ - A HTML templating language that has great developer tooling.

Testing

Libraries for testing codebases and generating test data.

Testing Frameworks

  • apitest - Simple and extensible behavioural testing library for REST based services or HTTP handlers that supports mocking external http calls and rendering of sequence diagrams.
  • arch-go - Architecture testing tool for Go projects.
  • assert - Basic Assertion Library used along side native go testing, with building blocks for custom assertions.
  • baloo - Expressive and versatile end-to-end HTTP API testing made easy.
  • be - The minimalist generic test assertion library.
  • biff - Bifurcation testing framework, BDD compatible.
  • charlatan - Tool to generate fake interface implementations for tests.
  • commander - Tool for testing cli applications on windows, linux and osx.
  • cupaloy - Simple snapshot testing addon for your test framework.
  • dbcleaner - Clean database for testing purpose, inspired by databasecleaner in Ruby.
  • dft - Lightweight, zero dependency docker containers for testing (or more).
  • dsunit - Datastore testing for SQL, NoSQL, structured files.
  • embedded-postgres - Run a real Postgres database locally on Linux, OSX or Windows as part of another Go application or test.
  • endly - Declarative end to end functional testing.
  • fixenv - Fixture manage engine, inspired by pytest fixtures.
  • fluentassert - Extensible, type-safe, fluent assertion Go library.
  • flute - HTTP client testing framework.
  • frisby - REST API testing framework.
  • gherkingen - BDD boilerplate generator and framework.
  • ginkgo - BDD Testing Framework for Go.
  • gnomock - integration testing with real dependencies (database, cache, even Kubernetes or AWS) running in Docker, without mocks.
  • go-carpet - Tool for viewing test coverage in terminal.
  • go-cmp - Package for comparing Go values in tests.
  • go-hit - Hit is an http integration test framework written in golang.
  • go-mutesting - Mutation testing for Go source code.
  • go-mysql-test-container - Golang MySQL testcontainer to help with MySQL integration testing.
  • go-snaps - Jest-like snapshot testing in Golang.
  • go-testdeep - Extremely flexible golang deep comparison, extends the go testing package.
  • go-testpredicate - Test predicate style assertions library with extensive diagnostics output.
  • go-vcr - Record and replay your HTTP interactions for fast, deterministic and accurate tests.
  • goblin - Mocha like testing framework of Go.
  • goc - Goc is a comprehensive coverage testing system for The Go Programming Language.
  • gocheck - More advanced testing framework alternative to gotest.
  • GoConvey - BDD-style framework with web UI and live reload.
  • gocrest - Composable hamcrest-like matchers for Go assertions.
  • godog - Cucumber BDD framework for Go.
  • gofight - API Handler Testing for Golang Router framework.
  • gogiven - YATSPEC-like BDD testing framework for Go.
  • gomatch - library created for testing JSON against patterns.
  • gomega - Rspec like matcher/assertion library.
  • Gont - Go network testing toolkit for testing building complex network topologies using Linux namespaces.
  • gospecify - This provides a BDD syntax for testing your Go code. It should be familiar to anybody who has used libraries such as rspec.
  • gosuite - Brings lightweight test suites with setup/teardown facilities to testing by leveraging Go1.7’s Subtests.
  • got - An enjoyable golang test framework.
  • gotest.tools - A collection of packages to augment the go testing package and support common patterns.
  • Hamcrest - fluent framework for declarative Matcher objects that, when applied to input values, produce self-describing results.
  • httpexpect - Concise, declarative, and easy to use end-to-end HTTP and REST API testing.
  • is - Professional lightweight testing mini-framework for Go.
  • jsonassert - Package for verifying that your JSON payloads are serialized correctly.
  • omg.testingtools - The simple library for change a values of private fields for testing.
  • restit - Go micro framework to help writing RESTful API integration test.
  • schema - Quick and easy expression matching for JSON schemas used in requests and responses.
  • stop-and-go - Testing helper for concurrency.
  • testcase - Idiomatic testing framework for Behavior Driven Development.
  • testcerts - Dynamically generate self-signed certificates and certificate authorities within your test functions.
  • testcontainers-go - A Go package that makes it simple to create and clean up container-based dependencies for automated integration/smoke tests. The clean, easy-to-use API enables developers to programmatically define containers that should be run as part of a test and clean up those resources when the test is done.
  • testfixtures - A helper for Rails’ like test fixtures to test database applications.
  • Testify - Sacred extension to the standard go testing package.
  • testsql - Generate test data from SQL files before testing and clear it after finished.
  • testza - Full-featured test framework with nice colorized output.
  • trial - Quick and easy extendable assertions without introducing much boilerplate.
  • Tt - Simple and colorful test tools.
  • wstest - Websocket client for unit-testing a websocket http.Handler.

Mock

  • counterfeiter - Tool for generating self-contained mock objects.
  • genmock - Go mocking system with code generator for building calls of the interface methods.
  • go-localstack - Tool for using localstack in AWS testing.
  • go-sqlmock - Mock SQL driver for testing database interactions.
  • go-txdb - Single transaction based database driver mainly for testing purposes.
  • gock - Versatile HTTP mocking made easy.
  • gomock - Mocking framework for the Go programming language.
  • govcr - HTTP mock for Golang: record and replay HTTP interactions for offline testing.
  • hoverfly - HTTP(S) proxy for recording and simulating REST/SOAP APIs with extensible middleware and easy-to-use CLI.
  • httpmock - Easy mocking of HTTP responses from external resources.
  • minimock - Mock generator for Go interfaces.
  • mockery - Tool to generate Go interfaces.
  • mockhttp - Mock object for Go http.ResponseWriter.
  • mooncake - A simple way to generate mocks for multiple purposes.
  • moq - Utility that generates a struct from any interface. The struct can be used in test code as a mock of the interface.
  • timex - A test-friendly replacement for the native time package.
  • xgo - A general pureposed function mocking library.

Fuzzing and delta-debugging/reducing/shrinking

  • go-fuzz - Randomized testing system.
  • gofuzz - Library for populating go objects with random values.
  • Tavor - Generic fuzzing and delta-debugging framework.

Selenium and browser control tools

  • cdp - Type-safe bindings for the Chrome Debugging Protocol that can be used with browsers or other debug targets that implement it.
  • chromedp - a way to drive/test Chrome, Safari, Edge, Android Webviews, and other browsers supporting the Chrome Debugging Protocol.
  • ggr - a lightweight server that routes and proxies Selenium WebDriver requests to multiple Selenium hubs.
  • playwright-go - browser automation library to control Chromium, Firefox and WebKit with a single API.
  • rod - A Devtools driver to make web automation and scraping easy.
  • selenoid - alternative Selenium hub server that launches browsers within containers.

Fail injection

Text Processing

Libraries for parsing and manipulating texts.

See also Natural Language Processing and Text Analysis.

Formatters

  • address - Handles address representation, validation and formatting.
  • align - A general purpose application that aligns text.
  • bytes - Formats and parses numeric byte values (10K, 2M, 3G, etc.).
  • go-fixedwidth - Fixed-width text formatting (encoder/decoder with reflection).
  • go-humanize - Formatters for time, numbers, and memory size to human readable format.
  • gotabulate - Easily pretty-print your tabular data with Go.
  • textwrap - Wraps text at end of lines. Implementation of textwrap module from Python.

Markup Languages

  • bafi - Universal JSON, BSON, YAML, XML translator to ANY format using templates.
  • bbConvert - Converts bbCode to HTML that allows you to add support for custom bbCode tags.
  • blackfriday - Markdown processor in Go.
  • go-output-format - Output go structures into multiple formats (YAML/JSON/etc) in your command line app.
  • go-toml - Go library for the TOML format with query support and handy cli tools.
  • goldmark - A Markdown parser written in Go. Easy to extend, standard (CommonMark) compliant, well structured.
  • goq - Declarative unmarshalling of HTML using struct tags with jQuery syntax (uses GoQuery).
  • html-to-markdown - Convert HTML to Markdown. Even works with entire websites and can be extended through rules.
  • htmlquery - An XPath query package for HTML, lets you extract data or evaluate from HTML documents by an XPath expression.
  • htmlyaml - Rich rendering of YAML as HTML in Go
  • htree - Traverse, navigate, filter, and otherwise process trees of html.Node objects.
  • mxj - Encode / decode XML as JSON or map[string]interface{}; extract values with dot-notation paths and wildcards. Replaces x2j and j2x packages.
  • toml - TOML configuration format (encoder/decoder with reflection).

Parsers/Encoders/Decoders

  • allot - Placeholder and wildcard text parsing for CLI tools and bots.
  • codetree - Parses indented code (python, pixy, scarlet, etc.) and returns a tree structure.
  • commonregex - A collection of common regular expressions for Go.
  • did - DID (Decentralized Identifiers) Parser and Stringer in Go.
  • doi - Document object identifier (doi) parser in Go.
  • editorconfig-core-go - Editorconfig file parser and manipulator for Go.
  • encdec - Package provides a generic interface to encoders and decoders.
  • go-fasttld - High performance effective top level domains (eTLD) extraction module.
  • go-nmea - NMEA parser library for the Go language.
  • go-querystring - Go library for encoding structs into URL query parameters.
  • go-vcard - Parse and format vCard.
  • godump - Pretty print any GO variable with ease, an alternative to Go’s fmt.Printf("%#v").
  • gofeed - Parse RSS and Atom feeds in Go.
  • gographviz - Parses the Graphviz DOT language.
  • gonameparts - Parses human names into individual name parts.
  • ltsv - High performance LTSV (Labeled Tab Separated Value) reader for Go.
  • normalize - Sanitize, normalize and compare fuzzy text.
  • parseargs-go - string argument parser that understands quotes and backslashes.
  • parth - URL path segmentation parsing.
  • prattle - Scan and parse LL(1) grammars simply and efficiently.
  • sdp - SDP: Session Description Protocol [RFC 4566].
  • sh - Shell parser and formatter.
  • tokenizer - Parse any string, slice or infinite buffer to any tokens.
  • when - Natural EN and RU language date/time parser with pluggable rules.
  • xj2go - Convert xml or json to go struct.

Regular Expressions

  • genex - Count and expand Regular Expressions into all matching Strings.
  • go-wildcard - Simple and lightweight wildcard pattern matching.
  • goregen - Library for generating random strings from regular expressions.
  • regroup - Match regex expression named groups into go struct using struct tags and automatic parsing.
  • rex - Regular expressions builder.

Sanitation

Scrapers

  • colly - Fast and Elegant Scraping Framework for Gophers.
  • dataflowkit - Web scraping Framework to turn websites into structured data.
  • go-recipe - A package for scraping recipes from websites.
  • GoQuery - GoQuery brings a syntax and a set of features similar to jQuery to the Go language.
  • gospider - A simple golang spider/scraping framework,build a spider in 3 lines. migrated from goribot
  • pagser - Pagser is a simple, extensible, configurable parse and deserialize html page to struct based on goquery and struct tags for golang crawler.
  • Tagify - Produces a set of tags from given source.
  • walker - Seamlessly fetch paginated data from any source. Simple and high performance API scraping included.
  • xurls - Extract urls from text.

RSS

  • podcast - iTunes Compliant and RSS 2.0 Podcast Generator in Golang

Utility/Miscellaneous

  • go-runewidth - Functions to get fixed width of the character or string.
  • go-zero-width - Zero-width character detection and removal for Go.
  • kace - Common case conversions covering common initialisms.
  • petrovich - Petrovich is the library which inflects Russian names to given grammatical case.
  • radix - Fast string sorting algorithm.
  • TySug - Alternative suggestions with respect to keyboard layouts.
  • w2vgrep - A semantic grep tool using word embeddings to find semantically similar matches. For example, searching for “death” will find “dead”, “killing”, “murder”.

Third-party APIs

Libraries for accessing third party APIs.

Utilities

General utilities and tools to make your life easier.

  • apm - Process manager for Golang applications with an HTTP API.
  • backscanner - A scanner similar to bufio.Scanner, but it reads and returns lines in reverse order, starting at a given position and going backward.
  • blank - Verify or remove blanks and whitespace from strings.
  • bleep - Perform any number of actions on any set of OS signals in Go.
  • boilr - Blazingly fast CLI tool for creating projects from boilerplate templates.
  • changie - Automated changelog tool for preparing releases with lots of customization options.
  • chyle - Changelog generator using a git repository with multiple configuration possibilities.
  • circuit - An efficient and feature complete Hystrix like Go implementation of the circuit breaker pattern.
  • circuitbreaker - Circuit Breakers in Go.
  • clipboard - 📋 cross-platform clipboard package in Go.
  • clockwork - A simple fake clock for golang.
  • cmd - Library for executing shell commands on osx, windows and linux.
  • command - Command pattern for Go with thread safe serial and parallel dispatcher.
  • config-file-validator - Cross Platform tool to validate configuration files.
  • contextplus - Package contextplus provide more easy to use functions for contexts.
  • cookie - Cookie struct parsing and helper package.
  • copy - Package for fast copying structs of different types.
  • copy-pasta - Universal multi-workstation clipboard that uses S3 like backend for the storage.
  • countries - Full implementation of ISO-3166-1, ISO-4217, ITU-T E.164, Unicode CLDR and IANA ccTLD standards.
  • countries - All you need when you are working with countries in Go.
  • create-go-app - A powerful CLI for create a new production-ready project with backend (Golang), frontend (JavaScript, TypeScript) & deploy automation (Ansible, Docker) by running one command.
  • cryptgo - Crytpgo is a TUI based application written purely in Go to monitor and observe cryptocurrency prices in real time!
  • ctop - Top-like interface (e.g. htop) for container metrics.
  • ctxutil - A collection of utility functions for contexts.
  • cvt - Easy and safe convert any value to another type.
  • dbt - A framework for running self-updating signed binaries from a central, trusted repository.
  • Death - Managing go application shutdown with signals.
  • Deepcopier - Simple struct copying for Go.
  • delve - Go debugger.
  • dive - A tool for exploring each layer in a Docker image.
  • dlog - Compile-time controlled logger to make your release smaller without removing debug calls.
  • EaseProbe - A simple, standalone, and lightWeight tool that can do health/status checking daemon, support HTTP/TCP/SSH/Shell/Client/… probes, and Slack/Discord/Telegram/SMS… notification.
  • equalizer - Quota manager and rate limiter collection for Go.
  • ergo - The management of multiple local services running over different ports made easy.
  • evaluator - Evaluate an expression dynamically based on s-expression. It’s simple and easy to extend.
  • Failsafe-go - Fault tolerance and resilience patterns for Go.
  • filetype - Small package to infer the file type checking the magic numbers signature.
  • filler - small utility to fill structs using “fill” tag.
  • filter - provide filtering, sanitizing, and conversion of Go data.
  • fzf - Command-line fuzzy finder written in Go.
  • generate - runs go generate recursively on a specified path or environment variable and can filter by regex.
  • ghokin - Parallelized formatter with no external dependencies for gherkin (cucumber, behat…).
  • git-time-metric - Simple, seamless, lightweight time tracking for Git.
  • gitbatch - manage your git repositories in one place.
  • gitcs - Git Commits Visualizer, CLI tool to visualize your Git commits on your local machine.
  • go-actuator - Production ready features for Go based web frameworks.
  • go-astitodo - Parse TODOs in your GO code.
  • go-bind-plugin - go:generate tool for wrapping symbols exported by golang plugins (1.8 only).
  • go-bsdiff - Pure Go bsdiff and bspatch libraries and CLI tools.
  • go-clip - A minimalistic clipboard manager for Mac.
  • go-convert - Package go-convert enables you to convert a value into another type.
  • go-countries - Lightweight lookup over ISO-3166 codes.
  • go-dry - DRY (don’t repeat yourself) package for Go.
  • go-funk - Modern Go utility library which provides helpers (map, find, contains, filter, chunk, reverse, …).
  • go-health - Health package simplifies the way you add health check to your services.
  • go-httpheader - Go library for encoding structs into Header fields.
  • go-lambda-cleanup - A CLI for removing unused or previous versions of AWS Lambdas.
  • go-lock - go-lock is a lock library implementing read-write mutex and read-write trylock without starvation.
  • go-pattern-match - A Pattern matching library inspired by ts-pattern.
  • go-pkg - A go toolkit.
  • go-problemdetails - Go package for working with Problem Details.
  • go-qr - A native, high-quality and minimalistic QR code generator.
  • go-rate - Timed rate limiter for Go.
  • go-sitemap-generator - XML Sitemap generator written in Go.
  • go-trigger - Go-lang global event triggerer, Register Events with an id and trigger the event from anywhere from your project.
  • go-type - Library providing Go types for store/validation and transfer of ISO-4217, ISO-3166, and other types.
  • goback - Go simple exponential backoff package.
  • goctx - Get your context value with high performance.
  • godaemon - Utility to write daemons.
  • godropbox - Common libraries for writing Go services/applications from Dropbox.
  • gofn - High performance utility functions written using Generics for Go 1.18+.
  • gohper - Various tools/modules help for development.
  • golarm - Fire alarms with system events.
  • golog - Easy and lightweight CLI tool to time track your tasks.
  • gopencils - Small and simple package to easily consume REST APIs.
  • goplaceholder - a small golang lib to generate placeholder images.
  • goreadability - Webpage summary extractor using Facebook Open Graph and arc90’s readability.
  • goreleaser - Deliver Go binaries as fast and easily as possible.
  • goreporter - Golang tool that does static analysis, unit testing, code review and generate code quality report.
  • goseaweedfs - SeaweedFS client library with almost full features.
  • gostrutils - Collections of string manipulation and conversion functions.
  • gotenv - Load environment variables from .env or any io.Reader in Go.
  • goval - Evaluate arbitrary expressions in Go.
  • gpath - Library to simplify access struct fields with Go’s expression in reflection.
  • graterm - Provides primitives to perform ordered (sequential/concurrent) GRAceful TERMination (aka shutdown) in Go application.
  • grofer - A system and resource monitoring tool written in Golang!
  • gubrak - Golang utility library with syntactic sugar. It’s like lodash, but for golang.
  • handy - Many utilities and helpers like string handlers/formatters and validators.
  • hostctl - A CLI tool to manage /etc/hosts with easy commands.
  • htcat - Parallel and Pipelined HTTP GET Utility.
  • hub - wrap git commands with additional functionality to interact with github from the terminal.
  • hystrix-go - Implements Hystrix patterns of programmer-defined fallbacks aka circuit breaker.
  • immortal - *nix cross-platform (OS agnostic) supervisor.
  • intrinsic - Use x86 SIMD without writing any assembly code.
  • jsend - JSend’s implementation written in Go.
  • jump - Jump helps you navigate faster by learning your habits.
  • just - Just a collection of useful functions for working with generic data structures.
  • koazee - Library inspired in Lazy evaluation and functional programming that takes the hassle out of working with arrays.
  • lancet - A comprehensive, efficient, and reusable util function library of go.
  • lets-go - Go module that provides common utilities for Cloud Native REST API development. Also contains AWS Specific utilities.
  • limiters - Rate limiters for distributed applications in Golang with configurable back-ends and distributed locks.
  • lo - A Lodash like Go library based on Go 1.18+ Generics (map, filter, contains, find…)
  • loncha - A high-performance slice Utilities.
  • lrserver - LiveReload server for Go.
  • mani - CLI tool to help you manage multiple repositories.
  • mc - Minio Client provides minimal tools to work with Amazon S3 compatible cloud storage and filesystems.
  • mergo - Helper to merge structs and maps in Golang. Useful for configuration default values, avoiding messy if-statements.
  • mimemagic - Pure Go ultra performant MIME sniffing library/utility.
  • mimesniffer - A MIME type sniffer for Go.
  • mimetype - Package for MIME type detection based on magic numbers.
  • minify - Fast minifiers for HTML, CSS, JS, XML, JSON and SVG file formats.
  • minquery - MongoDB / mgo.v2 query that supports efficient pagination (cursors to continue listing documents where we left off).
  • moldova - Utility for generating random data based on an input template.
  • mole - cli app to easily create ssh tunnels.
  • mongo-go-pagination - Mongodb Pagination for official mongodb/mongo-go-driver package which supports both normal queries and Aggregation pipelines.
  • mssqlx - Database client library, proxy for any master slave, master master structures. Lightweight and auto balancing in mind.
  • multitick - Multiplexor for aligned tickers.
  • myhttp - Simple API to make HTTP GET requests with timeout support.
  • netbug - Easy remote profiling of your services.
  • nfdump - Read nfdump netflow files.
  • nostromo - CLI for building powerful aliases.
  • objwalker - Walk by go objects with reflection.
  • okrun - go run error steamroller.
  • olaf - Twitter Snowflake implemented in Go.
  • onecache - Caching library with support for multiple backend stores (Redis, Memcached, filesystem etc).
  • panicparse - Groups similar goroutines and colorizes stack dump.
  • pattern-match - Pattern matching library.
  • peco - Simplistic interactive filtering tool.
  • pgo - Convenient functions for PHP community.
  • pm - Process (i.e. goroutine) manager with an HTTP API.
  • pointer - Package pointer contains helper routines for simplifying the creation of optional fields of basic type.
  • ptr - Package that provide functions for simplified creation of pointers from constants of basic types.
  • rclient - Readable, flexible, simple-to-use client for REST APIs.
  • reflectutils - Helpers for working with reflection: struct tag parsing; recursive walking; fill value from string.
  • remote-touchpad - Control mouse and keyboard from a smartphone.
  • repeat - Go implementation of different backoff strategies useful for retrying operations and heartbeating.
  • request - Go HTTP Requests for Humans™.
  • rerun - Recompiling and rerunning go apps when source changes.
  • rest-go - A package that provide many helpful methods for working with rest api.
  • retry - The most advanced functional mechanism to perform actions repetitively until successful.
  • retry - A simple but highly configurable retry package for Go.
  • retry - Simple and easy retry mechanism package for Go.
  • retry - A pretty simple library to ensure your work to be done.
  • retry-go - Simple library for retry mechanism.
  • retry-go - Retrying made simple and easy for golang.
  • robustly - Runs functions resiliently, catching and restarting panics.
  • rospo - Simple and reliable ssh tunnels with embedded ssh server in Golang.
  • scan - Scan golang sql.Rows directly to structs, slices, or primitive types.
  • scan - Scan sql rows into any type powered by generics.
  • scany - Library for scanning data from a database into Go structs and more.
  • serve - A static http server anywhere you need.
  • set - Performant and flexible struct mapping and loose type conversion.
  • shutdown - App shutdown hooks for os.Signal handling.
  • silk - Read silk netflow files.
  • slice - Type-safe functions for common Go slice operations.
  • sliceconv - Slice conversion between primitive types.
  • slicer - Makes working with slices easier.
  • sorty - Fast Concurrent / Parallel Sorting.
  • sqlx - provides a set of extensions on top of the excellent built-in database/sql package.
  • sshman - SSH Manager for authorizedkeys files on multiple remote servers.
  • statiks - Fast, zero-configuration, static HTTP filer server.
  • Storm - Simple and powerful toolkit for BoltDB.
  • structs - Implement simple functions to manipulate structs.
  • throttle - Throttle is an object that will perform exactly one action per duration.
  • tik - Simple and easy timing wheel package for Go.
  • tome - Tome was designed to paginate simple RESTful APIs.
  • toolbox - Slice, map, multimap, struct, function, data conversion utilities. Service router, macro evaluator, tokenizer.
  • ugo - ugo is slice toolbox with concise syntax for Go.
  • UNIS - Common Architecture™ for String Utilities in Go.
  • upterm - A tool for developers to share terminal/tmux sessions securely over the web. It’s perfect for remote pair programming, accessing computers behind NATs/firewalls, remote debugging, and more.
  • usql - usql is a universal command-line interface for SQL databases.
  • util - Collection of useful utility functions. (strings, concurrency, manipulations, …).
  • watchhttp - Run command periodically and expose latest STDOUT or its rich delta as HTTP endpoint.
  • wifiqr - Wi-Fi QR Code Generator.
  • wuzz - Interactive cli tool for HTTP inspection.
  • xferspdy - Xferspdy provides binary diff and patch library in golang.
  • yogo - Check yopmail mails from command line.

UUID

Libraries for working with UUIDs.

  • fastuuid - Fast generate UUIDv4 as string or bytes.
  • goid - Generate and Parse RFC4122 compliant V4 UUIDs.
  • gouid - Generate cryptographically secure random string IDs with just one allocation.
  • nanoid - A tiny and efficient Go unique string ID generator.
  • sno - Compact, sortable and fast unique IDs with embedded metadata.
  • ulid - Go implementation of ULID (Universally Unique Lexicographically Sortable Identifier).
  • uniq - No hassle safe, fast unique identifiers with commands.
  • uuid - Generate, encode, and decode UUIDs v1 with fast or cryptographic-quality random node identifier.
  • uuid - Implementation of Universally Unique Identifier (UUID). Supports both creation and parsing of UUIDs. Actively maintained fork of satori uuid.
  • uuid - Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
  • wuid - An extremely fast globally unique number generator.
  • xid - Xid is a globally unique id generator library, ready to be safely used directly in your server code.

Validation

Libraries for validation.

  • checkdigit - Provide check digit algorithms (Luhn, Verhoeff, Damm) and calculators (ISBN, EAN, JAN, UPC, etc.).
  • go-validator - Validation library using Generics.
  • gody - :balloon: A lightweight struct validator for Go.
  • govalid - Fast, tag-based validation for structs.
  • govalidator - Validators and sanitizers for strings, numerics, slices and structs.
  • govalidator - Validate Golang request data with simple rules. Highly inspired by Laravel’s request validation.
  • hvalid hvalid is a lightweight validation library written in Go language. It provides a custom validator interface and a series of common validation functions to help developers quickly implement data validation.
  • jio - jio is a json schema validator similar to joi.
  • ozzo-validation - Supports validation of various data types (structs, strings, maps, slices, etc.) with configurable and extensible validation rules specified in usual code constructs instead of struct tags.
  • validate - Go package for data validation and filtering. support validate Map, Struct, Request(Form, JSON, url.Values, Uploaded Files) data and more features.
  • validate - This package provides a framework for writing validations for Go applications.
  • validator - Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving.
  • Validator - A lightweight model validator written in Go.Contains VFs:Min, Max, MinLength, MaxLength, Length, Enum, Regex.
  • valix Go package for validating requests

Version Control

Libraries for version control.

  • cli - An open-source GitLab command line tool bringing GitLab’s cool features to your command line.
  • froggit-go - Froggit-Go is a Go library, allowing to perform actions on VCS providers.
  • gh - Scriptable server and net/http middleware for GitHub Webhooks.
  • git2go - Go bindings for libgit2.
  • githooks - Per-repo and shared Git hooks with version control and auto update.
  • go-git - highly extensible Git implementation in pure Go.
  • go-vcs - manipulate and inspect VCS repositories in Go.
  • hercules - gaining advanced insights from Git repository history.
  • hgo - Hgo is a collection of Go packages providing read-access to local Mercurial repositories.

Video

Libraries for manipulating video.

  • gmf - Go bindings for FFmpeg av* libraries.
  • go-astiav - Better C bindings for ffmpeg in GO.
  • go-astisub - Manipulate subtitles in GO (.srt, .stl, .ttml, .webvtt, .ssa/.ass, teletext, .smi, etc.).
  • go-astits - Parse and demux MPEG Transport Streams (.ts) natively in GO.
  • go-m3u8 - Parser and generator library for Apple m3u8 playlists. Actively maintained version of quangngotan95/go-m3u8 with improvements and latest HLS playlist parsing compatibility.
  • go-mpd - Parser and generator library for MPEG-DASH manifest files.
  • goav - Comprehensive Go bindings for FFmpeg.
  • gortsplib - Pure Go RTSP server and client library.
  • gst - Go bindings for GStreamer.
  • libgosubs - Subtitle format support for go. Supports .srt, .ttml, and .ass.
  • libvlc-go - Go bindings for libvlc 2.X/3.X/4.X (used by the VLC media player).
  • m3u8 - Parser and generator library of M3U8 playlists for Apple HLS.
  • v4l - Video capture library for Linux, written in Go.

Web Frameworks

Full stack web frameworks.

  • aah - Scalable, performant, rapid development Web framework for Go.
  • Aero - High-performance web framework for Go, reaches top scores in Lighthouse.
  • Air - An ideally refined web framework for Go.
  • anoweb - The lightweight and powerful web framework using the new way for Go.Another go the way.
  • appy - An opinionated productive web framework that helps scaling business easier.
  • Atreugo - High performance and extensible micro web framework with zero memory allocations in hot paths.
  • Banjo - Very simple and fast web framework for Go.
  • Beego - beego is an open-source, high-performance web framework for the Go programming language.
  • Buffalo - Bringing the productivity of Rails to Go!
  • Confetti Framework - Confetti is a Go web application framework with an expressive, elegant syntax. Confetti combines the elegance of Laravel and the simplicity of Go.
  • Don - A highly performant and simple to use API framework.
  • Echo - High performance, minimalist Go web framework.
  • Fastschema - A flexible Go web framework and Headless CMS.
  • Fiber - An Express.js inspired web framework build on Fasthttp.
  • Fireball - More “natural” feeling web framework.
  • Flamingo - Framework for pluggable web projects. Including a concept for modules and offering features for DI, Configareas, i18n, template engines, graphql, observability, security, events, routing & reverse routing etc.
  • Flamingo Commerce - Providing e-commerce features using clean architecture like DDD and ports and adapters, that you can use to build flexible e-commerce applications.
  • Fuego - The framework for busy Go developers! Web framework generating OpenAPI 3 spec from source code.
  • Gearbox - A web framework written in Go with a focus on high performance and memory optimization.
  • Gin - Gin is a web framework written in Go! It features a martini-like API with much better performance, up to 40 times faster. If you need performance and good productivity.
  • Ginrpc - Gin parameter automatic binding tool,gin rpc tools.
  • Gizmo - Microservice toolkit used by the New York Times.
  • go-json-rest - Quick and easy way to setup a RESTful JSON API.
  • go-rest - Small and evil REST framework for Go.
  • Goa - Goa provides a holistic approach for developing remote APIs and microservices in Go.
  • goa - goa is just like koajs for golang, it is a flexible, light, high-performance and extensible web framework based on middleware.
  • GoFr - Gofr is an opinionated microservice development framework.
  • GoFrame - GoFrame is a modular, powerful, high-performance and enterprise-class application development framework of Golang.
  • golamb - Golamb makes it easier to write API endpoints for use with AWS Lambda and API Gateway.
  • Golax - A non Sinatra fast HTTP framework with support for Google custom methods, deep interceptors, recursion and more.
  • Golf - Golf is a fast, simple and lightweight micro-web framework for Go. It comes with powerful features and has no dependencies other than the Go Standard Library.
  • Gondola - The web framework for writing faster sites, faster.
  • Gone - A lightweight dependency injection and web framework inspired by Spring.
  • gongular - Fast Go web framework with input mapping/validation and (DI) Dependency Injection.
  • GoTuna - Minimalistic web framework for Go with mux router, middlewares, sessions, templates, embedded views and static files.
  • goweb - Web framework with routing, websockets, logging, middleware, static file server (optional gzip), and automatic TLS.
  • Goyave - Feature-complete REST API framework aimed at clean code and fast development, with powerful built-in functionalities.
  • Hertz - A high-performance and strong-extensibility Go HTTP framework that helps developers build microservices.
  • hiboot - hiboot is a high performance web application framework with auto configuration and dependency injection support.
  • Huma - Framework for modern REST/GraphQL APIs with built-in OpenAPI 3, generated documentation, and a CLI.
  • Lit - Highly performant declarative web framework for Golang, aiming for simplicity and quality of life.
  • Macaron - Macaron is a high productive and modular design web framework in Go.
  • mango - Mango is a modular web-application framework for Go, inspired by Rack, and PEP333.
  • Microservice - The framework for the creation of microservices, written in Golang.
  • neo - Neo is minimal and fast Go Web Framework with extremely simple API.
  • patron - Patron is a microservice framework following best cloud practices with a focus on productivity.
  • Pnutmux - Pnutmux is a powerful Go web framework that uses regex for matching and handling HTTP requests. It offers features such as CORS handling, structured logging, URL parameters extraction, middlewares, and concurrency limiting.
  • Pulse - Pulse is an HTTP web framework written in Go (Golang)
  • Resoursea - REST framework for quickly writing resource based services.
  • REST Layer - Framework to build REST/GraphQL API on top of databases with mostly configuration over code.
  • Revel - High-productivity web framework for the Go language.
  • rex - Rex is a library for modular development built upon gorilla/mux, fully compatible with net/http.
  • rk-boot - A bootstrapper library for building enterprise go microservice with Gin and gRPC quickly and easily.
  • rux - Simple and fast web framework for build golang HTTP applications.
  • tango - Micro & pluggable web framework for Go.
  • tigertonic - Go framework for building JSON web services inspired by Dropwizard.
  • uAdmin - Fully featured web framework for Golang, inspired by Django.
  • utron - Lightweight MVC framework for Go(Golang).
  • vox - A golang web framework for humans, inspired by Koa heavily.
  • WebGo - A micro-framework to build web apps; with handler chaining, middleware and context injection. With standard library compliant HTTP handlers(i.e. http.HandlerFunc).
  • YARF - Fast micro-framework designed to build REST APIs and web services in a fast and simple way.
  • Yokai - Simple, modular, and observable Go framework for backend applications.

Middlewares

Actual middlewares

  • client-timing - An HTTP client for Server-Timing header.
  • CORS - Easily add CORS capabilities to your API.
  • echo-middleware - Middleware for Echo framework with logging and metrics.
  • formjson - Transparently handle JSON input as a standard form POST.
  • go-fault - Fault injection middleware for Go.
  • go-server-timing - Add/parse Server-Timing header.
  • Limiter - Dead simple rate limit middleware for Go.
  • ln-paywall - Go middleware for monetizing APIs on a per-request basis with the Lightning Network (Bitcoin).
  • mid - Miscellaneous HTTP middleware features: idiomatic error return from handlers; receive/respond with JSON data; request tracing; and more.
  • rk-gin - Middleware for Gin framework with logging, metrics, auth, tracing etc.
  • rk-grpc - Middleware for gRPC with logging, metrics, auth, tracing etc.
  • Tollbooth - Rate limit HTTP request handler.
  • XFF - Handle X-Forwarded-For header and friends.

Libraries for creating HTTP middlewares

  • alice - Painless middleware chaining for Go.
  • catena - http.Handler wrapper catenation (same API as “chain”).
  • chain - Handler wrapper chaining with scoped data (net/context-based “middleware”).
  • gores - Go package that handles HTML, JSON, XML and etc. responses. Useful for RESTful APIs.
  • interpose - Minimalist net/http middleware for golang.
  • mediary - add interceptors to http.Client to allow dumping/shaping/tracing/… of requests/responses.
  • muxchain - Lightweight middleware for net/http.
  • negroni - Idiomatic HTTP middleware for Golang.
  • render - Go package for easily rendering JSON, XML, and HTML template responses.
  • renderer - Simple, lightweight and faster response (JSON, JSONP, XML, YAML, HTML, File) rendering package for Go.
  • rye - Tiny Go middleware library (with canned Middlewares) that supports JWT, CORS, Statsd, and Go 1.7 context.
  • stats - Go middleware that stores various information about your web application.

Routers

  • alien - Lightweight and fast http router from outer space.
  • bellt - A simple Go HTTP router.
  • Bone - Lightning Fast HTTP Multiplexer.
  • Bxog - Simple and fast HTTP router for Go. It works with routes of varying difficulty, length and nesting. And he knows how to create a URL from the received parameters.
  • chi - Small, fast and expressive HTTP router built on net/context.
  • fasthttprouter - High performance router forked from httprouter. The first router fit for fasthttp.
  • FastRouter - a fast, flexible HTTP router written in Go.
  • goblin - A golang http router based on trie tree.
  • gocraft/web - Mux and middleware package in Go.
  • Goji - Goji is a minimalistic and flexible HTTP request multiplexer with support for net/context.
  • GoLobby/Router - GoLobby Router is a lightweight yet powerful HTTP router for the Go programming language.
  • goroute - Simple yet powerful HTTP request multiplexer.
  • GoRouter - GoRouter is a Server/API micro framework, HTTP request router, multiplexer, mux that provides request router with middleware supporting net/context.
  • gowww/router - Lightning fast HTTP router fully compatible with the net/http.Handler interface.
  • httprouter - High performance router. Use this and the standard http handlers to form a very high performance web framework.
  • httptreemux - High-speed, flexible tree-based HTTP router for Go. Inspiration from httprouter.
  • lars - Is a lightweight, fast and extensible zero allocation HTTP router for Go used to create customizable frameworks.
  • mux - Powerful URL router and dispatcher for golang.
  • nchi - chi-like router built on httprouter with dependency injection based middleware wrappers
  • ngamux - Simple HTTP router for Go.
  • ozzo-routing - An extremely fast Go (golang) HTTP router that supports regular expression route matching. Comes with full support for building RESTful APIs.
  • pure - Is a lightweight HTTP router that sticks to the std “net/http” implementation.
  • Siesta - Composable framework to write middleware and handlers.
  • vestigo - Performant, stand-alone, HTTP compliant URL Router for go web applications.
  • violetear - Go HTTP router.
  • xmux - High performance muxer based on httprouter with net/context support.
  • xujiajun/gorouter - A simple and fast HTTP router for Go.

WebAssembly

  • dom - DOM library.
  • Extism Go SDK - Universal, cross-language WebAssembly framework for building plug-in systems and polyglot apps.
  • go-canvas - Library to use HTML5 Canvas, with all drawing within go code.
  • tinygo - Go compiler for small places. Microcontrollers, WebAssembly, and command-line tools. Based on LLVM.
  • vert - Interop between Go and JS values.
  • wasmbrowsertest - Run Go WASM tests in your browser.
  • webapi - Bindings for DOM and HTML generated from WebIDL.

Windows

  • d3d9 - Go bindings for Direct3D9.
  • go-ole - Win32 OLE implementation for golang.
  • gosddl - Converter from SDDL-string to user-friendly JSON. SDDL consist of four part: Owner, Primary Group, DACL, SACL.

XML

Libraries and tools for manipulating XML.

  • XML-Comp - Simple command line XML comparer that generates diffs of folders, files and tags.
  • xml2map - XML to MAP converter written Golang.
  • xmlwriter - Procedural XML generation API based on libxml2’s xmlwriter module.
  • xpath - XPath package for Go.
  • xquery - XQuery lets you extract data from HTML/XML documents using XPath expression.
  • zek - Generate a Go struct from XML.

Zero Trust

Libraries and tools to implement Zero Trust architectures.

  • Cosign - Container Signing, Verification and Storage in an OCI registry.
  • in-toto - Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.
  • Spiffe-Vault - Utilizes Spiffe JWT authentication with Hashicorp Vault for secretless authentication.
  • Spire - SPIRE (the SPIFFE Runtime Environment) is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms.

Code Analysis

Source code analysis tools, also known as Static Application Security Testing (SAST) Tools.

  • apicompat - Checks recent changes to a Go project for backwards incompatible changes.
  • asty - Converts golang AST to JSON and JSON to AST.
  • blanket - blanket is a tool that helps you catch functions which don’t have direct unit tests in your Go packages.
  • ChainJacking - Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack.
  • Chronos - Detects race conditions statically
  • dupl - Tool for code clone detection.
  • errcheck - Errcheck is a program for checking for unchecked errors in Go programs.
  • gcvis - Visualise Go program GC trace data in real time.
  • go-checkstyle - checkstyle is a style check tool like java checkstyle. This tool inspired by java checkstyle, golint. The style referred to some points in Go Code Review Comments.
  • go-cleanarch - go-cleanarch was created to validate Clean Architecture rules, like a The Dependency Rule and interaction between packages in your Go projects.
  • go-critic - source code linter that brings checks that are currently not implemented in other linters.
  • go-mod-outdated - An easy way to find outdated dependencies of your Go projects.
  • go-outdated - Console application that displays outdated packages.
  • goast-viewer - Web based Golang AST visualizer.
  • goimports - Tool to fix (add, remove) your Go imports automatically.
  • golang-ifood-sdk - iFood API SDK.
  • golangci-lint – A fast Go linters runner. It runs linters in parallel, uses caching, supports yaml config, has integrations with all major IDE and has dozens of linters included.
  • golines - Formatter that automatically shortens long lines in Go code.
  • GoPlantUML - Library and CLI that generates text plantump class diagram containing information about structures and interfaces with the relationship among them.
  • goreturns - Adds zero-value return statements to match the func return types.
  • gostatus - Command line tool, shows the status of repositories that contain Go packages.
  • lint - Run linters as part of go test.
  • php-parser - A Parser for PHP written in Go.
  • revive – ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint.
  • staticcheck - staticcheck is go vet on steroids, applying a ton of static analysis checks you might be used to from tools like ReSharper for C#.
  • testifylint – A linter that checks usage of github.com/stretchr/testify.
  • tickgit - CLI and go package for surfacing code comment TODOs (in any language) and applying a git blameto identify the author.
  • todocheck - Static code analyser which links TODO comments in code with issues in your issue tracker.
  • unconvert - Remove unnecessary type conversions from Go source.
  • usestdlibvars - A linter that detect the possibility to use variables/constants from the Go standard library.
  • vacuum - An ultra-super-fast, lightweight OpenAPI linter and quality checking tool.
  • validate - Automatically validates struct fields with tags.

Editor Plugins

Plugin for text editors and IDEs.

  • coc-go language server extension for Vim/Neovim - This plugin adds gopls features to Vim/Neovim.
  • Go Doc - A Visual Studio Code extension for showing definition in output and generating go doc.
  • Go plugin for JetBrains IDEs - Go plugin for JetBrains IDEs.
  • go-language-server - A wrapper to turn the VSCode go extension into a language server supporting the language-server-protocol.
  • go-mode - Go mode for GNU/Emacs.
  • go-plus - Go (Golang) Package For Atom That Adds Autocomplete, Formatting, Syntax Checking, Linting and Vetting.
  • gocode - Autocompletion daemon for the Go programming language.
  • goimports-reviser - Formatting tool for imports.
  • goprofiling - This extension adds benchmark profiling support for the Go language to VS Code.
  • GoSublime - Golang plugin collection for the text editor SublimeText 3 providing code completion and other IDE-like features.
  • gounit-vim - Vim plugin for generating Go tests based on the function’s or method’s signature.
  • theia-go-extension - Go language support for the Theia IDE.
  • vim-compiler-go - Vim plugin to highlight syntax errors on save.
  • vim-go - Go development plugin for Vim.
  • vscode-go - Extension for Visual Studio Code (VS Code) which provides support for the Go language.
  • Watch - Runs a command in an acme win on file changes.

Go Generate Tools

  • envdoc - generate documentation for environment variables from Go source files.
  • generic - flexible data type for Go.
  • genny - Elegant generics for Go.
  • gocontracts - brings design-by-contract to Go by synchronizing the code with the documentation.
  • godal - Generate orm models corresponding to golang by specifying sql ddl file, which can be used by gorm.
  • gonerics - Idiomatic Generics in Go.
  • gotests - Generate Go tests from your source code.
  • gounit - Generate Go tests using your own templates.
  • hasgo - Generate Haskell inspired functions for your slices.
  • options-gen - Functional options described by Dave Cheney’s post “Functional options for friendly APIs”.
  • re2dfa - Transform regular expressions into finite state machines and output Go source code.
  • sqlgen - Generate gorm, xorm, sqlx, bun, sql code from SQL file or DSN.
  • TOML-to-Go - Translates TOML into a Go type in the browser instantly.
  • xgen - XSD (XML Schema Definition) parser and Go/C/Java/Rust/TypeScript code generator.

Go Tools

  • colorgo - Wrapper around go command for colorized go build output.
  • decouple - Find “overspecified” function parameters that could be generalized with interface types.
  • depth - Visualize dependency trees of any package by analyzing imports.
  • docs - Automatically generate RESTful API documentation for GO projects - aligned with Open API Specification standard.
  • go-callvis - Visualize call graph of your Go program using dot format.
  • go-size-analyzer - Analyze and visualize the size of dependencies in compiled Golang binaries, providing insight into their impact on the final build.
  • go-swagger - Swagger 2.0 implementation for go. Swagger is a simple yet powerful representation of your RESTful API.
  • godbg - Implementation of Rusts dbg! macro for quick and easy debugging during development.
  • gomodrun - Go tool that executes and caches binaries included in go.mod files.
  • gotemplate.io - Online tool to preview text/template templates live.
  • gotestdox - Show Go test results as readable sentences.
  • gothanks - GoThanks automatically stars your go.mod github dependencies, sending this way some love to their maintainers.
  • igo - An igo to go transpiler (new language features for Go language!)
  • modver - Compare two versions of a Go module to check the version-number change required (major, minor, or patchlevel), according to semver rules.
  • OctoLinker - Navigate through go files efficiently with the OctoLinker browser extension for GitHub.
  • richgo - Enrich go test outputs with text decorations.
  • roumon - Monitor current state of all active goroutines via a command line interface.
  • rts - RTS: response to struct. Generates Go structs from server responses.
  • textra - Extract Go struct field names, types and tags for filtering and exporting.
  • typex - Examine Go types and their transitive dependencies, alternatively export results as TypeScript value objects (or types) declaration.

Software Packages

Software written in Go.

DevOps Tools

  • abbreviate - abbreviate is a tool turning long strings in to shorter ones with configurable separators, for example to embed branch names in to deployment stack IDs.
  • aptly - aptly is a Debian repository management tool.
  • aurora - Cross-platform web-based Beanstalkd queue server console.
  • awsenv - Small binary that loads Amazon (AWS) environment variables for a profile.
  • Balerter - A self-hosted script-based alerting manager.
  • Blast - A simple tool for API load testing and batch jobs.
  • bombardier - Fast cross-platform HTTP benchmarking tool.
  • bosun - Time Series Alerting Framework.
  • cassowary - Modern cross-platform HTTP load-testing tool written in Go.
  • Ddosify - High-performance load testing tool, written in Golang.
  • decompose - tool to generate and process Docker containers connections graphs.
  • DepCharge - Helps orchestrating the execution of commands across the many dependencies in larger projects.
  • Docker - Open platform for distributed applications for developers and sysadmins.
  • docker-go-mingw - Docker image for building Go binaries for Windows with MinGW toolchain.
  • Dockerfile-Generator - A go library and an executable that produces valid Dockerfiles using various input channels.
  • dogo - Monitoring changes in the source file and automatically compile and run (restart).
  • drone-jenkins - Trigger downstream Jenkins jobs using a binary, docker or Drone CI.
  • drone-scp - Copy files and artifacts via SSH using a binary, docker or Drone CI.
  • Dropship - Tool for deploying code via cdn.
  • easyssh-proxy - Golang package for easy remote execution through SSH and SCP downloading via ProxyCommand.
  • fac - Command-line user interface to fix git merge conflicts.
  • Flannel - Flannel is a network fabric for containers, designed for Kubernetes.
  • Fleet device management - Lightweight, programmable telemetry for servers and workstations.
  • gaia - Build powerful pipelines in any programming language.
  • ghorg - Quickly clone an entire org/users repositories into one directory - Supports GitHub, GitLab, Gitea, and Bitbucket.
  • Gitea - Fork of Gogs, entirely community driven.
  • gitea-github-migrator - Migrate all your GitHub repositories, issues, milestones and labels to your Gitea instance.
  • go-furnace - Hosting solution written in Go. Deploy your Application with ease on AWS, GCP or DigitalOcean.
  • go-rocket-update - A simple way to make self updating Go applications - Supports Github and Gitlab.
  • go-selfupdate - Enable your Go applications to self update.
  • gobrew - gobrew lets you easily switch between multiple versions of go.
  • gobrew - Go version manager. Super simple tool to install and manage Go versions. Install go without root. Gobrew doesn’t require shell rehash.
  • godbg - Web-based gdb front-end application.
  • Gogs - A Self Hosted Git Service in the Go Programming Language.
  • gonative - Tool which creates a build of Go that can cross compile to all platforms while still using the Cgo-enabled versions of the stdlib packages.
  • govvv - “go build” wrapper to easily add version information into Go binaries.
  • gox - Dead simple, no frills Go cross compile tool.
  • goxc - build tool for Go, with a focus on cross-compiling and packaging.
  • grapes - Lightweight tool designed to distribute commands over ssh with ease.
  • GVM - GVM provides an interface to manage Go versions.
  • Hey - Hey is a tiny program that sends some load to a web application.
  • httpref - httpref is a handy CLI reference for HTTP methods, status codes, headers, and TCP and UDP ports.
  • jcli - Jenkins CLI allows you manage your Jenkins as an easy way.
  • k3d - Little helper to run CNCF’s k3s in Docker.
  • k3s - Lightweight Kubernetes.
  • k6 - A modern load testing tool, using Go and JavaScript.
  • kala - Simplistic, modern, and performant job scheduler.
  • kcli - Command line tool for inspecting kafka topics/partitions/messages.
  • kind - Kubernetes IN Docker - local clusters for testing Kubernetes.
  • ko - Command line tool for building and deploying Go applications on Kubernetes
  • kool - Command line tool for managing Docker environments as an easy way.
  • kubeblocks - KubeBlocks is an open-source control plane that runs and manages databases, message queues and other data infrastructure on K8s.
  • kubernetes - Container Cluster Manager from Google.
  • kubeshark - API traffic analyzer for Kubernetes, inspired by Wireshark, purposely built for Kubernetes.
  • KubeVela - Cloud native application delivery.
  • KubeVPN - KubeVPN offers a Cloud-Native Dev Environment that seamlessly connects to your Kubernetes cluster network.
  • KusionStack - A unified programmable configuration techstack to deliver modern app in ‘platform as code’ and ‘infra as code’ approach.
  • kwatch - Monitor & detect crashes in your Kubernetes(K8s) cluster instantly.
  • lstags - Tool and API to sync Docker images across different registries.
  • lwc - A live-updating version of the UNIX wc command.
  • manssh - manssh is a command line tool for managing your ssh alias config easily.
  • Mantil - Go specific framework for building serverless applications on AWS that enables you to focus on pure Go code while Mantil takes care of the infrastructure.
  • minikube - Run Kubernetes locally.
  • Moby - Collaborative project for the container ecosystem to assemble container-based systems.
  • Mora - REST server for accessing MongoDB documents and meta data.
  • ostent - collects and displays system metrics and optionally relays to Graphite and/or InfluxDB.
  • Packer - Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.
  • Pewpew - Flexible HTTP command line stress tester.
  • PipeCD - A GitOps-style continuous delivery platform that provides consistent deployment and operations experience for any applications.
  • podinfo - Podinfo is a tiny web application made with Go that showcases best practices of running microservices in Kubernetes. Podinfo is used by CNCF projects like Flux and Flagger for end-to-end testing and workshops.
  • Pomerium - Pomerium is an identity-aware access proxy.
  • Rodent - Rodent helps you manage Go versions, projects and track dependencies.
  • s3-proxy - S3 Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth).
  • s3gof3r - Small utility/library optimized for high speed transfer of large objects into and out of Amazon S3.
  • s5cmd - Blazing fast S3 and local filesystem execution tool.
  • Scaleway-cli - Manage BareMetal Servers from Command Line (as easily as with Docker).
  • script - Making it easy to write shell-like scripts in Go for DevOps and system administration tasks.
  • sg - Benchmarks a set of HTTP endpoints (like ab), with possibility to use the response code and data between each call for specific server stress based on its previous response.
  • skm - SKM is a simple and powerful SSH Keys Manager, it helps you to manage your multiple SSH keys easily!
  • StatusOK - Monitor your Website and REST APIs.Get Notified through Slack, E-mail when your server is down or response time is more than expected.
  • tau - Easily build Cloud Computing Platforms with features like Serverless WebAssembly Functions, Frontend Hosting, CI/CD, Object Storage, K/V Database, and Pub-Sub Messaging.
  • terraform-provider-openapi - Terraform provider plugin that dynamically configures itself at runtime based on an OpenAPI document (formerly known as swagger file) containing the definitions of the APIs exposed.
  • tf-profile - Profiler for Terraform runs. Generate global stats, resource-level stats or visualizations.
  • tlm - Local cli copilot, powered by CodeLLaMa
  • traefik - Reverse proxy and load balancer with support for multiple backends.
  • trubka - A CLI tool to manage and troubleshoot Apache Kafka clusters with the ability of generically publishing/consuming protocol buffer and plain text events to/from Kafka.
  • uTask - Automation engine that models and executes business processes declared in yaml.
  • Vegeta - HTTP load testing tool and library. It’s over 9000!
  • wait-for - Wait for something to happen (from the command line) before continuing. Easy orchestration of Docker services and other things.
  • webhook - Tool which allows user to create HTTP endpoints (hooks) that execute commands on the server.
  • Wide - Web-based IDE for Teams using Golang.
  • winrm-cli - Cli tool to remotely execute commands on Windows machines.

Other Software

  • Better Go Playground - Go playground with syntax highlight, code completion and other features.
  • blocky - Fast and lightweight DNS proxy as ad-blocker for local network with many features.
  • borg - Terminal based search engine for bash snippets.
  • boxed - Dropbox based blog engine.
  • Cherry - Tiny webchat server in Go.
  • Circuit - Circuit is a programmable platform-as-a-service (PaaS) and/or Infrastructure-as-a-Service (IaaS), for management, discovery, synchronization and orchestration of services and hosts comprising cloud applications.
  • Comcast - Simulate bad network connections.
  • confd - Manage local application configuration files using templates and data from etcd or consul.
  • crawley - Web scraper/crawler for cli.
  • croc - Easily and securely send files or folders from one computer to another.
  • Documize - Modern wiki software that integrates data from SaaS tools.
  • dp - Through SDK for data exchange with blockchain, developers can get easy access to DAPP development.
  • drive - Google Drive client for the commandline.
  • Duplicacy - A cross-platform network and cloud backup tool based on the idea of lock-free deduplication.
  • fjira - A fuzzy-search based terminal UI application for Attlasian Jira
  • Gebug - A tool that makes debugging of Dockerized Go applications super easy by enabling Debugger and Hot-Reload features, seamlessly.
  • gfile - Securely transfer files between two computers, without any third party, over WebRTC.
  • Go Package Store - App that displays updates for the Go packages in your GOPATH.
  • go-peerflix - Video streaming torrent client.
  • goblin - Golang binaries in a curl, built by goblins.
  • GoBoy - Nintendo Game Boy Color emulator written in Go.
  • gocc - Gocc is a compiler kit for Go written in Go.
  • GoDocTooltip - Chrome extension for Go Doc sites, which shows function description as tooltip at function list.
  • Gokapi - Lightweight server to share files, which expire after a set amount of downloads or days. Similar to Firefox Send, but without public upload.
  • GoLand - Full featured cross-platform Go IDE.
  • GoNB - Interactive Go programming with Jupyter Notebooks (also works in VSCode, Binder and Google’s Colab).
  • Gor - Http traffic replication tool, for replaying traffic from production to stage/dev environments in real-time.
  • Guora - A self-hosted Quora like web application written in Go.
  • hoofli - Generate PlantUML diagrams from Chrome or Firefox network inspections.
  • hotswap - A complete solution to reload your go code without restarting your server, interrupting or blocking any ongoing procedure.
  • hugo - Fast and Modern Static Website Engine.
  • ide - Browser accessible IDE. Designed for Go with Go.
  • ipe - Open source Pusher server implementation compatible with Pusher client libraries written in GO.
  • joincap - Command-line utility for merging multiple pcap files together.
  • JuiceFS - Distributed POSIX file system built on top of Redis and AWS S3.
  • Juju - Cloud-agnostic service deployment and orchestration - supports EC2, Azure, Openstack, MAAS and more.
  • Leaps - Pair programming service using Operational Transforms.
  • lgo - Interactive Go programming with Jupyter. It supports code completion, code inspection and 100% Go compatibility.
  • limetext - Lime Text is a powerful and elegant text editor primarily developed in Go that aims to be a Free and open-source software successor to Sublime Text.
  • LiteIDE - LiteIDE is a simple, open source, cross-platform Go IDE.
  • mockingjay - Fake HTTP servers and consumer driven contracts from one configuration file. You can also make the server randomly misbehave to help do more realistic performance tests.
  • myLG - Command Line Network Diagnostic tool written in Go.
  • naclpipe - Simple NaCL EC25519 based crypto pipe tool written in Go.
  • Neo-cowsay - 🐮 cowsay is reborn. for a New Era.
  • nes - Nintendo Entertainment System (NES) emulator written in Go.
  • Orbit - A simple tool for running commands and generating files from templates.
  • peg - Peg, Parsing Expression Grammar, is an implementation of a Packrat parser generator.
  • Plik - Plik is a temporary file upload system (Wetransfer like) in Go.
  • portal - Portal is a quick and easy command-line file transfer utility from any computer to another.
  • protoncheck - ProtonMail module for waybar/polybar/yabar/i3blocks.
  • restic - De-duplicating backup program.
  • sake - sake is a command runner for local and remote hosts.
  • scc - Sloc Cloc and Code, a very fast accurate code counter with complexity calculations and COCOMO estimates.
  • Seaweed File System - Fast, Simple and Scalable Distributed File System with O(1) disk seek.
  • shell2http - Executing shell commands via http server (for prototyping or remote control).
  • Snitch - Simple way to notify your team and many tools when someone has deployed any application via Tsuru.
  • sonic - Sonic is a Go Blogging Platform. Simple and Powerful.
  • Stack Up - Stack Up, a super simple deployment tool - just Unix - think of it like ‘make’ for a network of servers.
  • stew - An independent package manager for compiled binaries.
  • syncthing - Open, decentralized file synchronization tool and protocol.
  • tcpdog - eBPF based TCP observability.
  • tcpprobe - TCP tool for network performance and path monitoring, including socket statistics.
  • term-quiz - Quizzes for your terminal.
  • toxiproxy - Proxy to simulate network and system conditions for automated tests.
  • tsuru - Extensible and open source Platform as a Service software.
  • vaku - CLI & API for folder-based functions in Vault like copy, move, and search.
  • vFlow - High-performance, scalable and reliable IPFIX, sFlow and Netflow collector.
  • Wave Terminal - Wave is an open-source, AI-native terminal built for seamless developer workflows with inline rendering, a modern UI, and persistent sessions.
  • wellington - Sass project management tool, extends the language with sprite functions (like Compass).
  • woke - Detect non-inclusive language in your source code.
  • yai - AI powered terminal assistant.
  • zs - an extremely minimal static site generator.

Resources

Where to discover new Go libraries.

Benchmarks

Conferences

E-Books

E-books for purchase

Free e-books

Gophers

Meetups

Add the group of your city/country here (send PR)

Style Guides

Social Media

Twitter

Reddit

Websites

Tutorials

Guided Learning

System Design

System Design Resources

This repository contains resources to learn System Design concepts and prepare for interviews.

📌 System Design Key Concepts

🛠️ System Design Building Blocks

⚖️ System Design Tradeoffs

🖇️ System Design Architectural Patterns

✅ How to Answer a System Design Interview Problem

Read the Full Article

💻 System Design Interview Problems

Easy

Medium

Hard

📚 Books

📺 YouTube Channels

📜 Must-Read Engineering Articles

🗞️ Must-Read Distributed Systems Papers

AI Tools

AI Tools

Contents

Text

Models

  • OpenAI API - OpenAI’s API provides access to GPT-3 and GPT-4 models, which performs a wide variety of natural language tasks, and Codex, which translates natural language to code.
  • Gopher - Gopher by DeepMind is a 280 billion parameter language model.
  • OPT - Open Pretrained Transformers (OPT) by Facebook is a suite of decoder-only pre-trained transformers. Announcement. OPT-175B text generation hosted by Alpa.
  • Bloom - BLOOM by Hugging Face is a model similar to GPT-3 that has been trained on 46 different languages and 13 programming languages. #opensource
  • LLaMA - A foundational, 65-billion-parameter large language model by Meta. #opensource
  • Llama 2 - The next generation of Meta’s open source large language model. #opensource
  • Claude 3 - Talk to Claude, an AI assistant from Anthropic.
  • Vicuna-13B - An open-source chatbot trained by fine-tuning LLaMA on user-shared conversations collected from ShareGPT.
  • Stable Beluga - A finetuned LLamma 65B model
  • Stable Beluga 2 - A finetuned LLamma2 70B model
  • GPT-4o Mini - Review on Altern - Advancing cost-efficient intelligence

Chatbots

  • ChatGPT - reviews - ChatGPT by OpenAI is a large language model that interacts in a conversational way.
  • Bing Chat - reviews - A conversational AI language model powered by Microsoft Bing.
  • Gemini - reviews - An experimental AI chatbot by Google, powered by the LaMDA model.
  • Character.AI - reviews - Character.AI lets you create characters and chat to them.
  • ChatPDF - reviews - Chat with any PDF.
  • ChatSonic - reviews - An AI-powered assistant that enables text and image creation.
  • Phind - reviews - Phind is an intelligent search engine and assistant for programmers. Phind is smart enough to proactively ask you questions to clarify its assumptions and to browse the web (or your codebase) when it needs additional context. With our new VS Code extension.
  • Tiledesk - reviews - Open-source LLM-enabled no-code chatbot development framework. Design, test and launch your flows on all your channels in minutes.
  • AICamp - reviews - ChatGPT for Teams

Search engines

  • Kazimir.ai - A search engine designed to search AI-generated images.
  • Perplexity AI - AI powered search tools.
  • Metaphor - Language model powered search.
  • Phind - AI-based search engine.
  • You.com - A search engine built on AI that provides users with a customized search experience while keeping their data 100% private.
  • Komo AI - An AI based Search engine which responses quick and short answers.
  • Telborg - AI for Climate Research, with data exclusively from governments, international institutions and companies.
  • MemFree - Open Source Hybrid AI Search Engine, Instantly Get Accurate Answers from the Internet, Bookmarks, Notes, and Docs

Local search engines

  • privateGPT - Ask questions to your documents without an internet connection, using the power of LLMs.
  • quivr - Dump all your files and chat with it using your generative AI second brain using LLMs & embeddings.

Writing assistants

For a more complete list of AI writing assistants visit: Awesome AI Writing

  • Jasper - Create content faster with artificial intelligence.
  • Compose AI - Compose AI is a free Chrome extension that cuts your writing time by 40% with AI-powered autocompletion.
  • Rytr - Rytr is an AI writing assistant that helps you create high-quality content.
  • wordtune - Personal writing assistant.
  • HyperWrite - HyperWrite helps you write with confidence and get your work done faster from idea to final draft.
  • Moonbeam - Better blogs in a fraction of the time.
  • copy.ai - Write better marketing copy and content with AI.
  • Anyword - Anyword’s AI writing assistant generates effective copy for anyone.
  • Contenda - Create the content your audience wants, from content you’ve already made.
  • Hypotenuse AI - Turn a few keywords into original, insightful articles, product descriptions and social media copy.
  • Lavender - Lavender email assistant helps you get more replies in less time.
  • Lex - A word processor with artificial intelligence baked in, so you can write faster.
  • Jenni - Jenni is the ultimate writing assistant that saves you hours of ideation and writing time.
  • LAIKA - LAIKA trains an artificial intelligence on your own writing to create a personalised creative partner-in-crime.
  • QuillBot - AI-powered paraphrasing tool.
  • Postwise - Write tweets, schedule posts and grow your following using AI.
  • Copysmith - AI content creation solution for Enterprise & eCommerce.
  • Yomu - AI writing assistant for students and academics.
  • Listomatic - Free and fully configurable real estate listing description generator.
  • Quick Creator - SEO-Optimized Blog platform powered by AI.
  • Telborg - Write a high-quality first draft on any Climate topic in minutes
  • Dittto.ai - Fix your hero copy with an AI trained on top SaaS websites.
  • PulsePost - AI writer that Auto Publishes to your own website

ChatGPT extensions

  • Gist AI - ChatGPT-powered free Summarizer for Websites, YouTube and PDF.
  • WebChatGPT - Augment your ChatGPT prompts with relevant results from the web.
  • GPT for Sheets and Docs - ChatGPT extension for Google Sheets and Google Docs.
  • YouTube Summary with ChatGPT - Use ChatGPT to summarize YouTube videos.
  • ChatGPT Prompt Genius - Discover, share, import, and use the best prompts for ChatGPT & save your chat history locally.
  • ChatGPT for Search Engines - Display ChatGPT response alongside Google, Bing, and DuckDuckGo search results.
  • ShareGPT - Share your ChatGPT conversations and explore conversations shared by others.
  • Merlin - ChatGPT Plus extension on all websites.
  • ChatGPT Writer - Generate entire emails and messages using ChatGPT AI.
  • ChatGPT for Jupyter - Add various helper functions in Jupyter Notebooks and Jupyter Lab, powered by ChatGPT.
  • editGPT - Easily proofread, edit, and track changes to your content in chatGPT.
  • Chatbot UI - An open source ChatGPT UI. Source code.
  • Forefront - A Better ChatGPT Experience.
  • AI Character for GPT - One click to curate AI chatbot, including ChatGPT, Google Bard to improve AI responses.

Productivity

  • Mem - Mem is the world’s first AI-powered workspace that’s personalized to you. Amplify your creativity, automate the mundane, and stay organized automatically.
  • Taskade - Outline tasks, notes, generated structured lists and mind maps with Taskade AI.
  • Notion AI - Write better, more efficient notes and docs.
  • Nekton AI - Automate your workflows with AI. Describe your workflows step by step in plain language.
  • Elephas - Personal AI writing assistant for the Mac.
  • Lemmy - Autonomous AI Assistant for Work.
  • Google Sheets Formula Generator - Forget about frustrating formulas in Google Sheets.
  • CreateEasily - Free speech-to-text tool for content creators that accurately transcribes audio & video files up to 2GB.
  • aiPDF - The most advanced AI document assistant
  • Summary With AI - Summarize any long PDF with AI. Comprehensive summaries using information from all pages of a document.
  • Emilio - Stop drowning in emails - Emilio prioritizes and automates your email, saving 60% of your time
  • Pieces - AI-enabled productivity tool designed to supercharge developer efficiency,with an on-device copilot that helps capture, enrich, and reuse useful materials, streamline collaboration, and solve complex problems through a contextual understanding of dev workflow
  • Huntr AI Resume Builder - Craft the perfect resume, with a little help from AI. Huntr’s customizable AI Resume Builder will help you craft a well-written, ATS-friendly resume to help you land more interviews.
  • Chat With PDF by Copilot.us - An AI app that enables dialogue with PDF documents, supporting interactions with multiple files simultaneously through language models.
  • Recall - Summarize Anything, Forget Nothing
  • Talently AI - An Al interviewer that conducts live, conversational interviews and gives real-time evaluations to effortlessly identify top performers and scale your recruitment process.

Meeting assistants

  • Otter.ai - A meeting assistant that records audio, writes notes, automatically captures slides, and generates summaries.
  • Cogram - Cogram takes automatic notes in virtual meetings and identifies action items.
  • Sybill - Sybill generates summaries of sales calls, including next steps, pain points and areas of interest, by combining transcript and emotion-based insights.
  • Loopin AI - Loopin is a collaborative meeting workspace that not only enables you to record, transcribe & summaries meetings using AI, but also enables you to auto-organise meeting notes on top of your calendar.

Academia

  • Elicit - Elicit uses language models to help you automate research workflows, like parts of literature review.
  • genei - Summarise academic articles in seconds and save 80% on your research times.
  • Explainpaper - A better way to read academic papers. Upload a paper, highlight confusing text, get an explanation.
  • Galactica - A large language model for science. Can summarize academic literature, solve math problems, generate Wiki articles, write scientific code, annotate molecules and proteins, and more. Model API.
  • Consensus - Consensus is a search engine that uses AI to find answers in scientific research.
  • Sourcely - Academic Citation Finding Tool with AI

Customer Support

  • SiteGPT - Make AI your expert customer support agent.
  • GPTHelp.ai - ChatGPT for your website / AI customer support chatbot.
  • SiteSpeakAI - Automate your customer support with AI.
  • Dear AI - Supercharge Customer Services and boost sales with AI Chatbot.
  • Inline Help - Answer customer questions before they ask
  • Aidbase - AI-Powered Support for your SaaS startup.

Other text generators

Developer tools

  • co:here - Cohere provides access to advanced Large Language Models and NLP tools.
  • Haystack - A framework for building NLP applications (e.g. agents, semantic search, question-answering) with language models.
  • Keploy - Open source Tool for converting user traffic to Test Cases and Data Stubs.
  • LangChain - A framework for developing applications powered by language models.
  • gpt4all - A chatbot trained on a massive collection of clean assistant data including code, stories, and dialogue.
  • LMQL - LMQL is a query language for large language models.
  • LlamaIndex - A data framework for building LLM applications over external data.
  • Phoenix - Open-source tool for ML observability that runs in your notebook environment, by Arize. Monitor and fine-tune LLM, CV, and tabular models.
  • Prediction Guard - Seamlessly integrate private, controlled, and compliant Large Language Models (LLM) functionality.
  • Portkey - Full-stack LLMOps platform to monitor, manage, and improve LLM-based apps.
  • OpenAI Downtime Monitor - Free tool that tracks API uptime and latencies for various OpenAI models and other LLM providers.
  • ChatWithCloud - CLI allowing you to interact with AWS Cloud using human language inside your Terminal.
  • SinglebaseCloud - AI-powered backend platform with Vector DB, DocumentDB, Auth, and more to speed up app development.
  • Maxim AI - A generative AI evaluation and observability platform, empowering modern AI teams to ship products with quality, reliability, and speed.
  • Wordware - A web-hosted IDE where non-technical domain experts work with AI Engineers to build task-specific AI agents. It approaches prompting as a new programming language rather than low/no-code blocks.

Code

  • GitHub Copilot - GitHub Copilot uses the OpenAI Codex to suggest code and entire functions in real-time, right from your editor.
  • OpenAI Codex - An AI system by OpenAI that translates natural language to code.
  • Ghostwriter - An AI-powered pair programmer by Replit.
  • Amazon CodeWhisperer - Build applications faster with the ML-powered coding companion.
  • tabnine - Code faster with whole-line & full-function code completions.
  • Stenography - Automatic code documentation.
  • Mintlify - AI powered documentation writer.
  • Debuild - AI-powered low-code tool for web apps.
  • AI2sql - With AI2sql, engineers and non-engineers can easily write efficient, error-free SQL queries without knowing SQL.
  • CodiumAI - With CodiumAI, you get non-trivial tests suggested right inside your IDE, so you stay confident when you push.
  • PR-Agent - AI-powered tool for automated PR analysis, feedback, suggestions, and more.
  • MutableAI - AI Accelerated Software Development.
  • TurboPilot - A self-hosted copilot clone that uses the library behind llama.cpp to run the 6 billion parameter Salesforce Codegen model in 4 GB of RAM.
  • GPT-Code UI - An open-source implementation of OpenAI’s ChatGPT Code interpreter.
  • MetaGPT - The Multi-Agent Framework: Given one line Requirement, return PRD, Design, Tasks, Repo
  • Marblism - Generate a SaaS boilerplate from a prompt.
  • MutahunterAI - Accelerate developer productivity and code security with our open-source AI.

Image

Models

  • DALL·E 2 - DALL·E 2 by OpenAI is a new AI system that can create realistic images and art from a description in natural language.
  • Stable Diffusion - Stable Diffusion by Stability AI is a state-of-the-art text-to-image model that generates images from text. #opensource
  • Midjourney - Midjourney is an independent research lab exploring new mediums of thought and expanding the imaginative powers of the human species.
  • Imagen - Imagen by Google is a text-to-image diffusion model with an unprecedented degree of photorealism and a deep level of language understanding.
  • Make-A-Scene - Make-A-Scene by Meta is a multimodal generative AI method puts creative control in the hands of people who use it by allowing them to describe and illustrate their vision through both text descriptions and freeform sketches.
  • DragGAN - Drag Your GAN: Interactive Point-based Manipulation on the Generative Image Manifold. -Canva - Generate and Edit your Pictures with the help of AI

Services

  • Craiyon - Craiyon, formerly DALL-E mini, is an AI model that can draw images from any text prompt.
  • DreamStudio - DreamStudio is an easy-to-use interface for creating images using the Stable Diffusion image generation model.
  • Artbreeder - Artbreeder is a new type of creative tool that empowers users creativity by making it easier to collaborate and explore.
  • GauGAN2 - GauGAN2 is a robust tool for creating photorealistic art using a combination of words and drawings since it integrates segmentation mapping, inpainting, and text-to-image production in a single model.
  • Magic Eraser - Remove unwanted things from images in seconds.
  • Imagine by Magic Studio - A tool by Magic Studio that let’s you express yourself by just describing what’s on your mind.
  • Alpaca - Stable Diffusion Photoshop plugin.
  • Patience.ai - Patience.ai is an app for creating images with Stable Diffusion, a cutting-edge AI developed by Stability.AI.
  • GenShare - Generate art in seconds for free. Own and share what you create. A multimedia generative studio, democratizing design and creativity.
  • Playground AI - Playground AI is a free-to-use online AI image creator. Use it to create art, social media posts, presentations, posters, videos, logos and more.
  • Pixelz AI Art Generator - Pixelz AI Art Generator enables you to create incredible art from text. Stable Diffusion, CLIP Guided Diffusion & PXL·E realistic algorithms available.
  • modyfi - The image editor you’ve always wanted. AI-powered creative tools in your browser. Real-time collaboration.
  • Ponzu - Ponzu is your free AI logo generator. Build your brand with creatively designed logos in seconds, using only your imagination.
  • PhotoRoom - Create product and portrait pictures using only your phone. Remove background, change background and showcase products.
  • Avatar AI - Create your own AI-generated avatars.
  • ClipDrop - Create professional visuals without a photo studio, powered by stability.ai.
  • Lensa - An all-in-one image editing app that includes the generation of personalized avatars using Stable Diffusion.
  • RunDiffusion - Cloud-based workspace for creating AI-generated art.
  • Human Generator - AI generator or realistic looking photos of humans.
  • VectorArt.ai - Create vector images with AI.
  • StockPhotoAI.net - Great stock photos, made for you.
  • Room Reinvented - Transform your room effortlessly with Room Reinvented! Upload a photo and let AI create over 30 stunning interior styles. Elevate your space today.
  • Gensbot - Gensbot uses AI to craft personalised printed merchandise. One prompt creates one unique product to fit your needs.
  • PlantPhotoAI - free AI-generated plant images

Graphic design

  • Brandmark - AI-based logo design tool.
  • Gamma - Create beautiful presentations and webpages with none of the formatting and design work.
  • Microsoft Designer - Stunning designs in a flash.
  • SVGStud.io - AI-based SVG Generation and Semantic Seach

Image libraries

  • Lexica - Stable Diffusion search engine.
  • Libraire - The largest library of AI-generated images.
  • KREA - Explore millions of AI-generated images and create collections of prompts. Featuring Stable Diffusion generations.
  • OpenArt - Search 10M+ of prompts, and generate AI art via Stable Diffusion, DALL·E 2.
  • Phygital - Built-in templates for generating or editing any pictures. Moreover, you can create your own design.
  • Canva - Generating AI Images.

Model libraries

Stable Diffusion resources

Video

  • RunwayML - Magical AI tools, realtime collaboration, precision editing, and more. Your next-generation content creation suite.
  • Synthesia - Create videos from plain text in minutes.
  • Rephrase AI - Rephrase’s technology enables hyper-personalized video creation at scale that drive engagement and business efficiencies.
  • Hour One - Turn text into video, featuring virtual presenters, automatically.
  • D-ID - Create and interact with talking avatars at the touch of a button.
  • ShortVideoGen - Create short videos with audio using text prompts.
  • Clipwing - A tool for cutting long videos into dozens of short clips.
  • Recast Studio - AI powered podcast marketing assistant.
  • Based AI - AI Intuitive Interface for Video creating

Animation

Audio

Phone Calls

  • AICaller.io - AICaller is a simple-to-use automated bulk calling solution that uses the latest Generative AI technology to trigger phone calls for you and get things done. It can do things like lead qualification, data gathering over phone calls, and much more. It comes with a powerful API, low cost pricing and free trial.
  • Cald.ai - AI based calling agents for outbound and inbound phone calls.

Speech

  • Eleven Labs - AI voice generator.
  • Resemble AI - AI voice generator and voice cloning for text to speech.
  • WellSaid - Convert text to voice in real time.
  • Play.ht - AI Voice Generator. Generate realistic Text to Speech voice over online with AI. Convert text to audio.
  • Coqui - Generative AI for Voice.
  • podcast.ai - A podcast that is entirely generated by artificial intelligence, powered by Play.ht text-to-voice AI.
  • VALL-E X - A cross-lingual neural codec language model for cross-lingual speech synthesis.
  • TorToiSe - A multi-voice text-to-speech system trained with an emphasis on quality. #opensource
  • Bark - A transformer-based text-to-audio model. #opensource

Music

  • Harmonai - We are a community-driven organization releasing open-source generative audio tools to make music production more accessible and fun for everyone.
  • Mubert - A royalty-free music ecosystem for content creators, brands and developers.
  • MusicLM - A model by Google Research for generating high-fidelity music from text descriptions.

Other

  • Taranify - Using AI, Taranify finds you Spotify playlists, Netflix shows, Books & Foods you’d enjoy when you don’t exactly know what you want.
  • Diagram - Magical new ways to design products.
  • PromptBase - A marketplace for buying and selling quality prompts for DALL·E, GPT-3, Midjourney, Stable Diffusion.
  • This Image Does Not Exist - Test your ability to tell if an image is human or computer generated.
  • Have I Been Trained? - Check if your image has been used to train popular AI art models.
  • AI Dungeon - A text-based adventure-story game you direct (and star in) while the AI brings it to life.
  • Clickable - Generate ads in seconds with AI. Beautiful, brand-consistent, and highly converting ads for all marketing channels.
  • Scale Spellbook - Build, compare, and deploy large language model apps with Scale Spellbook.
  • Scenario - AI-generated gaming assets.
  • Teleprompter - An on-device AI for your meetings that listens to you and makes charismatic quote suggestions.
  • FinChat - Using AI, FinChat generates answers to questions about public companies and investors.
  • Petals - BitTorrent style platform for running AI models in a distributed way.
  • Shotstack Workflows - No-code, automation workflow tool for building Generative AI media applications.
  • Aispect - New way to experience events.
  • PressPulse AI - Get personalized media coverage leads every morning.
  • GummySearch - AI-based customer research via Reddit. Discover problems to solve, sentiment on current solutions, and people who want to buy your product.
  • Taplio - The all-in-one, AI-powered LinkedIn tool.
  • PromptPal - Search for prompts and bots, then use them with your favorite AI. All in one place.
  • FairyTailAI - Personalized bedtime story generator
  • Myriad - Scale your content creation and get the best writing from ChatGPT, Copilot, and other AIs. Build and fine-tune prompts for any kind of content, from long-form to ads and email.
  • GradGPT - AI tools to simplify college applications. Review applications, draft essays, find universities and requirements and more.
  • Code to Flow - Visualize, Analyze, and Understand Your Code flow. Turn Code into Interactive Flowcharts with AI. Simplify Complex Logic Instantly.
  • AI-Flow - Connect multiple AI models easily.
  • Architecture Helper - Analyze any building architecture, and generate your own custom styles, in seconds.
  • Interviews Chat - Your Personal Interview Prep & Copilot
  • Context Data - Data Processing & ETL infrastructure for Generative AI applications
  • ezJobs - Automated job search and applications
  • Compass - AI driven answers to SaaS research questions
  • Adon AI - CV screening automation and blind CV generator, AI backed ATS
  • Persuva - Persuva is the AI-driven platform to create persuasive, high-converting ad copy at scale.
  • Interview Solver - Ace your live coding interviews with our AI Copilot

Learning resources

Learn AI free

Machine Learning

Deep Learning

NVIDIA Platform Extensions

ONION

Everything about onions domains inside TOR network.

Aug 15, 2024

Subsections of ONION

Onion Links

Onion Links


Disclaimer

I only provide information about what exists on the dark web as informative/educational purposes only. I have listed many onion links that are still up and running with a legitimate purpose.

Few onion links might be a scam, phishing, or contain illegal activities like drugs, weapons, illegal markets, fraudulent services, stolen data, etc., and many more. These activities may involve you at risk in danger by unknowingly. Kindly be aware of such activities which may take you and put yourself under risk.

I am not involved in any practices like described above and if you wish to surf the dark web you are the only solely responsible for your activity. Any misleads or dealing with illegal markets accessed by you will end up in a bad situation.

Know your risk before opening any onion links, if you the link is legal then you can enjoy surfing and know more about the dark web or else learn about dark web before accessing it. Use a good VPN to stay away from danger and your risk factor will be very less.

Just download the Tor Browser from its original page; https://www.torproject.org

This product is made independently of Tor® anonymity software and makes no warranties about quality, suitability, or anything else from the Tor Project.

For acquiring additional onion links

  • DarkWebLinks - http://dwltorbltw3tdjskxn23j2mwz2f4q25j4ninl5bdvttiy4xb6cqzikid.onion

Marketplaces

Established

Established Darknet markets that have been operating for a while

  • AlphaBay - http://alphabay522szl32u4ci5e3iokdsyth56ei7rwngr2wm7i5jo54j2eid.onion
    • Originally shut down in 2017, it was re-opened by a former original AlphaBay admin. They’ve been down for some time now, so it’s starting to look not very good, but let’s hope it’s not an exit scam or a seizure
  • Monopoly Market - http://monopolydc6hvkh425ov6xolmgx62q2tgown55zvhpngh75tz5xkzfyd.onion
    • Probably the only marketplace that doesn’t require you to create an account to use it
  • Dark0de - http://darkoddrkj3gqz7ke7nyjfkh7o72hlvr44uz5zl2xrapna4tribuorqd.onion
    • Same as with Monopoly, since White House retired, it is now one of the largest marketplaces
  • Versus Market - http://pqqmr3p3tppwqvvapi6fa7jowrehgd36ct6lzr26qqormaqvh6gt4jyd.onion
  • ToRReZ Market - http://yxuy5oau7nugw4kpb4lclrqdbixp3wvc4iuiad23ebyp2q3gx7rtrgqd.onion
  • ASAP Market - http://ASAP2u4pvplnkzl7ecle45wajojnftja45wvovl3jrvhangeyq67ziid.onion
  • Archetype Market - http://4pt4axjgzmm4ibmxplfiuvopxzf775e5bqseyllafcecryfthdupjwyd.onion
  • Vice City - http://vice2e3gr3pmaikukidllstulxvkb7a247gkguihzvyk3gqwdpolqead.onion
    • Pretty ugly design if I’m being honest, but it seems to work okay
  • Tor2Door - http://t2didmjqj7yqzlc44oiqmwr3u62xdg4pvzfrtxdy2wsewgrt2zelwhyd.onion
  • Revolution - http://2b4z3y7fq45kafqy4ygweaz5k4culbbwj6nwfvgdutltlxelurxhd6yd.onion
  • Tor Market - http://rrlm2f22lpqgfhyydqkxxzv6snwo5qvc2krjt2q557l7z4te7fsvhbid.onion
  • Cartel Market - http://mgybzfrldjn5drzv537skh7kgwgbq45dwha67r4elda4vl7m6qul5xqd.onion

New markets

New and upcoming markets

  • Bohemia - http://bohemiaobko4cecexkj5xmlaove6yn726dstp5wfw4pojjwp6762paqd.onion
    • Wanted to make an account, but it’s just so slow I gave up

Defunct markets

Markets that shut down or got busted

  • White House Market - http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion
    • Even though they announced they’ll be retiring, they shut down only a week after the announcement

Forums

  • dread - http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion
    • Reddit for the darknet
  • EndChan - http://enxx3byspwsdo446jujc52ucy2pf5urdbhqw3kbsfhlfjwmbpj5smdad.onion
    • 4chan-style discussion board

Search engines

  • Kilos - http://mlyusr6htlxsyc7t2f4z53wdxh3win7q3qpxcrbam6jf3dmua7tnzuyd.onion
    • Search engine and a bunch of other stuff

Email Providers

Commercial TOR markets

Email Providers (Tor Hidden Service)

Tor project

Markets

Privacy chat, mail, file upload

Hosting

Forums and News

Archives

Leaks

How to access dark net?

To enter darknet, download Tor Browser. It’s a modified Firefox that allows access to the dark web and is configured for higher security.

You may get Tor Browser for Windows, Linux, Mac OS and Android here:

https://www.torproject.org/download/

For iOS the recommended browser is Onion Browser:

https://onionbrowser.com/

Alternatively you can use Brave Browser. It supports Tor and Onion protocols. It’s simple to use, and avaible on both desktop and mobile devices

https://brave.com/download/

Is it legal to enter dark web?

Using Tor is legal in most countries. It’s illegal to perform certain activities, depending on your residency these may include: buying or selling drugs, weapons, counterfeit money, abusive materials etc.

What is darknet?

The Web consists of three large areas:

  • surface web (often called clearnet, cleannet) — publicly accessible resources, e.g. search engines, news, social media that can be indexed by search engines
  • deep web — resources not indexed by search engines, because they are protected by password or stored behind public services, e.g. companies internal platforms, medical records, research papers, legal documents
  • dark web — resources that can be accessed only with specific software, they are not accessible from standard web browser, e.g. whistleblowers secure drops, secret communication channels for activist, journalists, human rights activists but also many illegal marketplaces and shops

What is Tor?

Tor (The Onion Router) is an open-source software that bounces Internet traffic through a worldwide network consisting of almost million relays in order to hide user’s location and protect him against surveillance or traffic analysis. Tor makes more difficult to trace Internet activity: websites visits, online posts, instant messages and other communication forms.

How Tor works?

Your traffic passes through 3 intermediate nodes before reaching destination. Each of the 3 nodes has separate layer of encryption and nobody who watches your connection can read what you send and where.

Tor layers

  • Guard node — knows your IP address but doesn’t know where you connect to and what you send to destination
  • Middle node — immediate layer between guard node and exit node
  • Exit node — knows destination but doesn’t know who you are

What are hidden services?

Hidden services are accessible only within Tor network. Their domain names end with .onion. They are not indexed by any public search engine. The only way to enter .onion sites is to know equal address. You can find some example deep web links in table above.

How to find hidden services

There are many tor link lists, wikis and catalogues where you can find addresses to .onion sites. There are also many link lists in clearnet but majority of them is not updated and most links do not work. It’s standard that hidden services work for small amount of time and dissappear forever.

This github page is maintained by voluteers, that makes this page get updated more often - to provide better access to information.

There are some darknet search engines mostly created by amateurs and they are very limited due to hidden services nature.

Before accessing any darknet site, make sure that it’s legal in your country to browse content that they contain.

Who created Tor?

The idea of onion routing was created in 1995 at the U.S. Naval Research Lab by David Goldschlag, Mike Reed and Paul Syverson in effect of a research to find a way to create Internet connections that don’t reveal who is talking to whom. The reason was to protect US intelligence communications online.

In early 2000s, Roger Dingledine (MIT graduate) with Paul Syverson began working on the onion routing project created at Naval Research Lab. To distinguish their work from other efforts, they named the project Tor (The Onion Routing).

Tor was oficially deployed in October 2002 and its source code was released under a free and open software license. In December 2006 computer scientists Roger Dingledine, Nick Mathewson and five others founded The Tor Project research-education nonprofit organization that is responsible for maintaining the software.

Tor is supported by US government, many NGOs, private foundations, research institutions, private companies and over 20,000 personal donations from people from around the World.

Onion Links 5

Darkweb-Onion-Links

A collection of important onion sites that you can leverage for surfing across Deep and Darkweb and gather relevant intelligence to improve your organization defences and security controls. You can use this tool improve Mean-Time-To-Detect (MTTD) and Mean-Time-To-Respond (MTTR) to cyber security incidents

Disclaimer (ACCESSING DARKWEB IS HIGHLY RISKY)

This information is for informative, educational and research purpose only. This information can be used for intelligence gathering for your incident investigations and for the purpose of securing your organization. The motive of providing this information is to share intelligence and secure organizations from cyber threats. Do not utilize this information for illegal, unauthorized, and unlawful activities. You are solely responsible for your actions.

Caution (ACCESSING DARKWEB IS HIGHLY RISKY):

  • Accessing dark web without proper expertise and precaution can be dangerous.
  • Protecting yourself and your identity is extremely important before accessing darkweb.
  • Maintain utmost anonymity as possible
  • Do not enter Dark web world with negligence
  • Gain knowledge and understanding of how dark web operate prior to accessing these links.

Tips to Access Deep/Dark Web Safely (No Guarantee)

How to Access the DarkWeb

Darkweb sites are designed in a way that they cannot be accessed through normal web browsers like Chrome or Firefox. You can use these browsers to access the Onion sites.

Search Engines

Marketplaces

Social Networking

Government

News & Publications

Blogs

Narcotics

Tech

Ransomware Sites

Chat Rooms

hacking Services:

Onion Links 4

Onion Links


Disclaimer

I only provide information about what exists on the dark web as informative/educational purposes only. I have listed many onion links that are still up and running with a legitimate purpose.

Few onion links might be a scam, phishing, or contain illegal activities like drugs, weapons, illegal markets, fraudulent services, stolen data, etc., and many more. These activities may involve you at risk in danger by unknowingly. Kindly be aware of such activities which may take you and put yourself under risk.

I am not involved in any practices like described above and if you wish to surf the dark web you are the only solely responsible for your activity. Any misleads or dealing with illegal markets accessed by you will end up in a bad situation.

Know your risk before opening any onion links, if you the link is legal then you can enjoy surfing and know more about the dark web or else learn about dark web before accessing it. Use a good VPN to stay away from danger and your risk factor will be very less.


ToC


Blogs

Alexander Færøy

Ctrl blog

Dropsafe | Alec Muffett

Kushal Das

Michael Altfield

Ming Di Leom

Nick Frichette

Shen’s Essays


Civil Society and Community

Privacy International

Riseup Home

Riseup Onion Index

Systemli Home

Systemli Onion Index

WikiFesad

decoded.legal


Education

BBC Learning English

BBC Learning English: Mandarin


Government

US Central Intelligence Agency


News

BBC

Bellingcat

Bellingcat | es

Bellingcat | fr

Bellingcat | ru

Bellingcat | ua

Deutsche Welle

-see language index in titlebar-

ProPublica

Radio Free Europe | RFERL

-https://www.rfa.org/about/releases/mirror_websites-04172020105949.html-

The Guardian

The Intercept

The New York Times

Voice of America | VOA

Yahoo News

:arrow_up: return to top index


News BBC World Service

BBC News /afaanoromoo | Afaan Oromoo

BBC News /afrique | Afrique

BBC News /amharic | አማርኛ

BBC News /arabic | عربي

BBC News /azeri | Azərbaycanca

BBC News /bengali | বাংলা

BBC News /burmese | မြန်မာ

BBC News /gahuza | Gahuza

BBC News /gujarati | ગુજરાતી

BBC News /hausa | Hausa

BBC News /hindi | हिंदी

BBC News /igbo | Ìgbò

BBC News /indonesia | Indonesia

BBC News /korean | 코리아

BBC News /kyrgyz | Кыргыз КызMATы

BBC News /marathi | मराठी

BBC News /mundo | Mundo

BBC News /nepali | नेपाली

BBC News /pashto | پښتو

BBC News /persian | فارسی

BBC News /pidgin | Pidgin

BBC News /portuguese | Brasil

BBC News /punjabi | ਪੰਜਾਬੀ

BBC News /russian | Русская служба

BBC News /serbian/cyr | на српском

BBC News /serbian/lat | na srpskom

BBC News /sinhala | සිංහල

BBC News /somali | Somali

BBC News /swahili | Swahili

BBC News /tamil | தமிழ்

BBC News /telugu | తెలుగు

BBC News /thai | ไทย

BBC News /tigrinya | ትግርኛ

BBC News /turkce | Türkçe

BBC News /ukrainian | Україна

BBC News /urdu | اردو

BBC News /uzbek | O’zbek

BBC News /vietnamese | Tiếng Việt

BBC News /yoruba | Yorùbá

BBC News /zhongwen/simp | 中文

BBC News /zhongwen/trad | 中文

BBC News | In Your Language

-language index-

:arrow_up: return to top index


News Deutsche Welle World

Deutsche Welle Albanian | Shqip

Deutsche Welle Amharic | አማርኛ

Deutsche Welle Arabic | العربية

Deutsche Welle Bengali | বাংলা

Deutsche Welle Bosnian | B/H/S

Deutsche Welle Bulgarian | Български

Deutsche Welle Chinese (Simplified) | 简

Deutsche Welle Chinese (Traditional) | 繁

Deutsche Welle Croatian | Hrvatski

Deutsche Welle Dari | دری

Deutsche Welle English | English

Deutsche Welle French | Français

Deutsche Welle German | Deutsch

Deutsche Welle Greek | Ελληνικά

Deutsche Welle Hausa | Hausa

Deutsche Welle Hindi | हिन्दी

Deutsche Welle Indonesian | Indonesia

Deutsche Welle Kiswahili | Kiswahili

Deutsche Welle Macedonian | Македонски

Deutsche Welle Pashto | پښتو

Deutsche Welle Persian | فارسی

Deutsche Welle Polish | Polski

Deutsche Welle Portuguese | Português do Brasil

Deutsche Welle Portuguese | Português para África

-cannot find top-page redirect-

Deutsche Welle Romanian | Română

Deutsche Welle Russian | Русский

Deutsche Welle Serbian | Српски/Srpski

Deutsche Welle Spanish | Español

Deutsche Welle Turkish | Türkçe

Deutsche Welle Ukrainian | Українська

Deutsche Welle Urdu | اردو

:arrow_up: return to top index


News RFERL & VOA

RFERL azatliq | Азатлык хәбәрләре

RFERL currenttime.tv | Настоящее Время

RFERL europalibera md | Europa Liberă

RFERL europalibera ro | Europa Liberă

RFERL farda | رادیو فردا

RFERL idelreal | Idel Реалии

RFERL kavkazr | Кавказ Реалии

RFERL krymr ktat | Qırım Aqiqat

RFERL krymr ru | Крым Реалии

RFERL krymr ua | Крим Реалії

RFERL radiomarsho | Маршо Радион

RFERL severreal | Сибирь Реалии

RFERL sibreal | Сибирь Реалии

RFERL svaboda | Радыё Свабода

VOA russian | Голоса Америки

VOA turkish | Amerika’nın Sesi

:arrow_up: return to top index


Search Engines

Brave Search

-works fine, but seems to block curl / upness-tester; ignore status codes below-

DuckDuckGo Search

:arrow_up: return to top index


Social Networks

Facebook

Facebook Mobile

Reddit

Twitter

:arrow_up: return to top index


Tech and Software

Ablative Hosting

DEF CON Groups

DEF CON Home

DEF CON Media

Debian Onion Index

Hardened BSD Onion Index

Impreza Hosting

OnionShare

Qubes OS

Tor Project Home

Tor Project Onion Index

-everything tor-related-

Whonix Forums

Whonix Home

keybase.io

:arrow_up: return to top index


Web and Internet

Archive Today

Cloudflare Public DNS 1.1.1.1

HARICA Certificate Authority

Protonmail

:arrow_up: return to top index


SecureDrop

2600: The Hacker Quarterly

-via: https://securedrop.org/api/v1/directory/-

Aftenposten AS

-via: https://securedrop.org/api/v1/directory/-

Aftonbladet

-via: https://securedrop.org/api/v1/directory/-

Al Jazeera Media Network

-via: https://securedrop.org/api/v1/directory/-

Apache

-via: https://securedrop.org/api/v1/directory/-

Bloomberg Industry Group

-via: https://securedrop.org/api/v1/directory/-

Bloomberg News

-via: https://securedrop.org/api/v1/directory/-

CBC

-via: https://securedrop.org/api/v1/directory/-

CNN

-via: https://securedrop.org/api/v1/directory/-

DR - Danish Broadcasting Corporation

-via: https://securedrop.org/api/v1/directory/-

Dagbladet

-via: https://securedrop.org/api/v1/directory/-

Der Spiegel

-via: https://securedrop.org/api/v1/directory/-

Financial Times

-via: https://securedrop.org/api/v1/directory/-

Forbes

-via: https://securedrop.org/api/v1/directory/-

Forbidden Stories

-via: https://securedrop.org/api/v1/directory/-

Greekleaks

-via: https://securedrop.org/api/v1/directory/-

Institute for Quantitative Social Science at Harvard University

-via: https://securedrop.org/api/v1/directory/-

NOYB

-via: https://securedrop.org/api/v1/directory/-

NRK

-via: https://securedrop.org/api/v1/directory/-

New York Times

POLITICO

Public Intelligence

Stefania Maurizi

Süddeutsche Zeitung

TV2 Denmark

Taz

-via: https://securedrop.org/api/v1/directory/-

TechCrunch

-via: https://securedrop.org/api/v1/directory/-

The Economist

-via: https://securedrop.org/api/v1/directory/-

The Globe and Mail

-via: https://securedrop.org/api/v1/directory/-

The Guardian

-via: https://securedrop.org/api/v1/directory/-

The Intercept

-via: https://securedrop.org/api/v1/directory/-

The Washington Post

-via: https://securedrop.org/api/v1/directory/-

Toronto Star

-via: https://securedrop.org/api/v1/directory/-

Whistleblower Aid

-via: https://securedrop.org/api/v1/directory/-


Onion Links 3

Onion Links


Disclaimer

I only provide information about what exists on the dark web as informative/educational purposes only. I have listed many onion links that are still up and running with a legitimate purpose.

Few onion links might be a scam, phishing, or contain illegal activities like drugs, weapons, illegal markets, fraudulent services, stolen data, etc., and many more. These activities may involve you at risk in danger by unknowingly. Kindly be aware of such activities which may take you and put yourself under risk.

I am not involved in any practices like described above and if you wish to surf the dark web you are the only solely responsible for your activity. Any misleads or dealing with illegal markets accessed by you will end up in a bad situation.

Know your risk before opening any onion links, if you the link is legal then you can enjoy surfing and know more about the dark web or else learn about dark web before accessing it. Use a good VPN to stay away from danger and your risk factor will be very less.

Darkweb-Onion-Links

A collection of important onion sites that you can leverage for surfing across Deep and Darkweb and gather relevant intelligence to improve your organization defences and security controls. You can use this tool improve Mean-Time-To-Detect (MTTD) and Mean-Time-To-Respond (MTTR) to cyber security incidents

Caution (ACCESSING DARKWEB IS HIGHLY RISKY):

  • Accessing dark web without proper expertise and precaution can be dangerous.
  • Protecting yourself and your identity is extremely important before accessing darkweb.
  • Maintain utmost anonymity as possible
  • Do not enter Dark web world with negligence
  • Gain knowledge and understanding of how dark web operate prior to accessing these links.

Tips to Access Deep/Dark Web Safely (No Guarantee)

How to Access the DarkWeb

Darkweb sites are designed in a way that they cannot be accessed through normal web browsers like Chrome or Firefox. You can use these browsers to access the Onion sites.

Search Engines

Marketplaces

Social Networking

Government

News & Publications

Blogs

Tech

Ransomware Sites

Chat Rooms

hacking Services:

Onion Links 2

Onion Links


Disclaimer

I only provide information about what exists on the dark web as informative/educational purposes only. I have listed many onion links that are still up and running with a legitimate purpose.

Few onion links might be a scam, phishing, or contain illegal activities like drugs, weapons, illegal markets, fraudulent services, stolen data, etc., and many more. These activities may involve you at risk in danger by unknowingly. Kindly be aware of such activities which may take you and put yourself under risk.

I am not involved in any practices like described above and if you wish to surf the dark web you are the only solely responsible for your activity. Any misleads or dealing with illegal markets accessed by you will end up in a bad situation.

Know your risk before opening any onion links, if you the link is legal then you can enjoy surfing and know more about the dark web or else learn about dark web before accessing it. Use a good VPN to stay away from danger and your risk factor will be very less.

Table Of Contents


Recommended Sites

Official Tor Sites

Introduction Points

Dark Web Guides

sites about the dark web and how to use it properly

Tor Scam Lists

sites that help people avoid scams on the dark web, as they are VERY common

Search Engines

services that allow you to find .onion sites, just like google would on the clearweb

.onion links providing lists for .onion links, like search Engines

Monitors

sites that monitor popular dark web sites to see if they are online or not

Financial Services

–ONLY– BUY FROM TRUSTED -VENDORS- TO AVOID GETTING –SCAMMED– –ALWAYS– VERIFY PGP KEYS OF -.ONION LINKS- & -BITCOIN WALLETS- BEFORE BUYING, you can quickly do it here –ALWAYS– MIX YOUR BITCOINS BEFORE BUYING –I AM NOT RESPONSIBLE IF YOU GET SCAMMED–

Verify Legit Darkweb Vendors & Markets Via These Sites

Bitcoin Mixers

Credit Cards

CryptoCurrency

Commercial Services

–ONLY– BUY FROM TRUSTED -VENDORS- TO AVOID GETTING –SCAMMED– –ALWAYS– VERIFY PGP KEYS OF -.ONION LINKS- & -BITCOIN WALLETS- BEFORE BUYING, you can quickly do it here –ALWAYS– MIX YOUR BITCOINS BEFORE BUYING –I AM NOT RESPONSIBLE IF YOU GET SCAMMED–

Verify Legit Darkweb Vendors & Markets Via These Sites

Electronics

Multipurpose

Miscellaneous

Non-Commercial Services

Email

Hosting

File Sharing

Security And Privacy

Music

Multipurpose

Miscellaneous

Social

Networks

Forums

Chat

Chans

IRC

Blogs

Political Movements

Conventions

News

Miscellaneous

Books

Hacking

Games

Uncategorized

Dark Web Scam

Possible Dark Web Scam Links

! Title: Dark Web Anti-Scam Filters
! Description: uBlock Origin filter designed to block scams on the dark web.
Use CTRL + F to search. Insert onion link (without http:// part) or name in the search bar. 
If you think there is a site that is a scam or want to remove a false positive from the list,
then please contact the owners of the scam lists and not me,
I only update them according to what the scam lists say. 
You can find their respective emails at the very bottom of the list,
as well as links to their clearweb/darkweb sites.
! Version: 2.1.2
! Expires: 1 day
! License: https://creativecommons.org/licenses/by/3.0/
!-------------------------------------------------------------!
!---------------------------- NoScam -------------------------!
!-------------------------------------------------------------!
||stackublfq5ipqlj.onion
||silkroad4n7fwsrw.onion
||sgkvfgvtxjzvbadm.onion
||bankors4d5cdq2tq.onion
||plasticzxmw4gepd.onion
||applekpoykqqdjo5.onion
||snovzruogrfrh252.onion
||oqrz7kprdoxd7734.onion
||arcbaciyv5xwguic.onion
||3twqowj7hetz3dwf.onion
||vgw2tqqp622wbtm7.onion
||y2vrbi2eg6hpghmt.onion
||hqcarderxnmfndxk.onion
||rosnerqw5bcwfpfb.onion
||horizontjsecs65q.onion
||fusionvlc7cvltmy.onion
||mlj4iyalawb2ve2u.onion
||empererwidlf7kmb.onion
||moneytkfgglev7nr.onion
||cckingdomtmf7w7l.onion
||dark73adlkrgr6u7.onion
||queeniooaa7sziqo.onion
||gmarketmtv62pdkp.onion
||sharkjo6ramnxc6s.onion
||ccbay3yanmktpr3s.onion
||galaxyaonv32reim.onion
||6yid7vhjltxgefhm.onion
||krushux2j2feimt6.onion
||lordpay3t52brqwf.onion
||queencdcguevwedi.onion
||s7ccy6bman4zb6lh.onion
||footballsge4ocq3.onion
||vqbintgn7d2l7z43.onion
||prepaid3jdde64ro.onion
||choicecbtavv4cax.onion
||matchfixube5iwgs.onion
||xmatchesfmhuzgfb.onion
||gutprintbqe72yuy.onion
||fakenotefzutekmq.onion
||gbpoundzv2ot73eh.onion
||mo4moybqbtmdex44.onion
||777o6suetmexlesv.onion
||moneydtbosp6ygfx.onion
||rjye7v2fnxe5ou6o.onion
||blackph5fuiz72bf.onion
||pumpdumppqgxwu4k.onion
||cww3ggjgpw56wter.onion
||22ppp3cboaonwjwl.onion
||moneycvbr2ihsv3j.onion
||bnwcards4xuwihpj.onion
||btcmultiimolu2fo.onion
||ccppshopsndysr45.onion
||ccsalewb7nujwnks.onion
||clonedusbmna6mmw.onion
||clonexp3j3qdjdvp.onion
||tei5mg2z36lyq7jd.onion
||cvendorzr7w3gdtq.onion
||financo6ytrzaoqg.onion
||jeuzg7g3xkslpf6k.onion
||un62d2ywi33bho53.onion
||easycoinsayj7p5l.onion
||2k3wty376idyonjt.onion
||safepayjlz76pnix.onion
||qr5rw75na7gipe62.onion
||efb6om7tze6aab25.onion
||bucepafkui6lyblt.onion
||7uxohh5bat7kouex.onion
||bitcardsqucnyfv2.onion
||kryptocg6rptq3wd.onion
||dcm6xhlrfyaek4si.onion
||2222ppclgy2amp23.onion
||r26liax2opq7knn3.onion
||32orihrbrhpk5x6o.onion
||usjudr3c6ez6tesi.onion
||htqhl25peesc3lrm.onion
||medusas6rqee6x6e.onion
||azworldjqhsr4pd5.onion
||hbetshipq5yhhrsd.onion
||mesc5wozvbdqbh2y.onion
||sn2vwdleom47kzqp.onion
||ju5iiyel2glsu3mh.onion
||amgic2ym32odxor2.onion
||escrowkaw72yld57.onion
||ugtech6yot3p5n3u.onion
||cashoutxdrebmlj2.onion
!-------------------------------------------------------------!
!------------------------- Tor Scam List ---------------------!
!-------------------------------------------------------------!
||trnf7mcbf6ko6h6w.onion
||64fgu54a3tlsgptx.onion
||uqzht2vfz5moumdd.onion
||cr567grrbfpsyrz6.onion
||cashgodr53umth4z.onion
||fp5xenfxy7o5a2vq.onion
||owsb6hydgnalalht.onion
||nlsx24j23uyyqct7.onion
||netauth3qialu2ha.onion
||escrow43eaperqie.onion
||5xxqhn7qbtug7cag.onion
||sf6pmq4fur5c22hu.onion
||h4y5xramfiooe3mz.onion
||applei7nkshrsnih.onion
||bestshop3neaglxk.onion
||tbaown3pd2sfidwx.onion
||mghreb4l5hdhiytu.onion
||stppd5as5x4hxs45.onion
||safepayab3enffl2.onion
||marketdftsaewyfx.onion
||zzq7gpluliw6iq7l.onion
||midcity7ccxtrzhn.onion
||countfe766hqe4qd.onion
||limaconzruthefg4.onion
||aqdkw4qjwponmlt3.onion
||bestshop5zc7t3mf.onion
||newshit5g5lc5coc.onion
||ppccpzam4nurujzv.onion
||xsqp76ka66qgue2s.onion
||w2k5fbvvlfoi62tw.onion
||topbtc.torpress2sarn7xw.onion
||jmkxdr4djc3cpsei.onion
||hcutffpecnc44vef.onion
||25ffhnaechrbzwf3.onion
||ppcwp.torpress2sarn7xw.onion
||qkj4drtgvpm7eecl.onion
||ts4cwattzgsiitv7.onion
||cashoutsdkyirll4.onion
||easyvisa5i67p2hc.onion
||nql7pv7k32nnqor2.onion
||rtwtyinmq4wzzl6d.onion
||65px7xq64qrib2fx.onion
||nh5hqktdhe2gogsb.onion
||ab2moc6ot2wkvua7.onion
||djn4mhmbbqwjiq2v.onion
||agarthazdeeoph2a.onion
||o6maqsjp23l2i45w.onion
||mjturxqbtbncbv6i.onion
||lecards.torpress2sarn7xw.onion
||ugtechlr4a6x5eab.onion
||ugtech3haoipeh3s.onion
||newpdsuslmzqazvr.onion
||bankrollc2qbvqn3.onion
||avituul2qflk55yd.onion
||ubivqf757ysk53t7.onion
||35flmpspwpnarbos.onion
||upv3wvf6sikfiluy.onion
||emufy7tn3dhg45wp.onion
||gunshopzpqbe4kgl.onion
||bankcrpbhxfnmmd6.onion
||3xyzrjb72jzmshoq.onion
||xdsa5xcrrrxxxolc.onion
||fusifrndcjrcewvm.onion
||eushopsprwnxudic.onion
||dreamrvfuqrpzn4q.onion
||jlshyuiizag3m4hp.onion
||ccshophv5gxsge6o.onion
||mescrowbshprfzgg.onion
||debankckcgq2exv5.onion
||gc4youec2ulsdkbs.onion
||4yjes6zfucnh7vcj.onion
||4lq4prlyxiifarmj.onion
||3cash3sze3jcvvox.onion
||or7amhxzp7jc77xr.onion
||5jqvh54jxaftdav6.onion
||xduacuj2tz4z23l6.onion
||multidxltunesmv6.onion
||empirembpcpuelxd.onion
||mikffhylznwnc25o.onion
||ccbay2jxd5dcobl2.onion
||ccbay4wqgbxa2igl.onion
||ccbay5gv4az6ewgv.onion
||fzbsxc4xa4w4tgzufa3knvuerjhmgvbnrd7igye5ot5mfywuiu3h3bad.onion
||zvvtba2a37mcydnntjkzy26lrv3y5elfyotr4glujkaaanyz5a4uerqd.onion
||avn3xbtzud7bp75pjl42px6xkpj5vyiymnnz4htonlzcnm2uwcfcflyd.onion
||ck73ugjvx5a4wkhsmrfvwhlrq7evceovbsb7tvaxilpahybdokbyqcqd.onion
||k35yauzkptmemr5nbwhyigihw2tfcytbvm4fq2yzfzyzi2nwh7ty7xyd.onion
!-------------------------------------------------------------!
!----------------------- Tor Scam List v2 --------------------!
!-------------------------------------------------------------!
||cn56mmvuv6toexq3.onion
||6thhimkhby4az3vz.onion
||bfgsu4uktbrbue3p.onion
||slwc4j5wkn3yyo5j.onion
||oazis64odog3oorh.onion
||applexgrqv3ihh6f.onion
||cmhqrgwwpaxcquxp.onion
||onionw75v3imttfa.onion
||countercedyd3fbc.onion
||armoryetem5mclq4.onion
||mescrowvbbfqihed.onion
||rsescrowtybxf43d.onion
||escrow26gdxwbzjb.onion
||darkma35pkdraq2b.onion
||hacker3r3cbxxbni.onion
||h4gca3vb6v37awux.onion
||z57whuq7jaqgmh6d.onion
||waltcard74gwxkwj.onion
||gdaqpaukrkqwjop6.onion
||undrol7rt4yu5zzd.onion
||paypalmkwfrikwlw.onion
||ppcentrend4erspk.onion
||nare7pqnmnojs2pg.onion
||silkroad7rn2puhj.onion
||silkdljpnclgdc2eecu5k3b55d5nikky7r4ljmpgapr5rnzeupsgbzid.onion
||zrgv5miyjb4pdxaxyicbkp74hdxjdks44ahls5qiqr7puwa7qgjz45qd.onion
||ca3sii6jljzxqtwa4y3tunww5nfevwolrhn3cowzoobpciofldkdksqd.onion
||pdixgp5s27jkd26pc2oenismtlumi7cbkywanlzvf62kcau6ro4hbsad.onion
||vk5akdnqjyupp34lpz65oj4pomlu3jxz663tp4xmxnz22crt2qpojtid.onion
||7j5c24itghnglnodmlg76j6dxo64hn5sgtrm7q7z4pv4hoexemr2pmid.onion
||qeybpwjb7qn2ws2dein5zvsqgxral3shzsobgypzom4oihqfdlvl4uid.onion
||wth474sv6ct4glwiowjipvr6ydeg6tbxlenxqibe5vno7ivmeqlumnid.onion
!-------------------------------------------------------------!
!--------------------------- Tor Links -----------------------!
!-------------------------------------------------------------!
||hidden24vowyrcic.onion
||tj2djlce6qtevcai.onion
||stacvvulbayktqlf.onion
||vzmvmmaldx3h7vx6.onion
||bithackm5geoeeuu.onion
||midnightkt43f3fk.onion
||paxromanadfudhte.onion
||lmoney4rw45hrqfm.onion
||zw5atj5ckiw6rh46.onion
||alphac5biyz7adb4.onion
||deepmartyqzffl5n.onion
||deepmart55jnyjvd.onion
||deepmarbql25sagu.onion
||cccentersemzrqne.onion
||ccenter3wl2ojn7r.onion
||cccetxnsai5dfm3t.onion
||5p32k6mwxbmvqbgwepssmuxluiodr5qtulw73pe3yekkbymk6hwcujyd.onion
||ksotfkmgxgcoj4tp.onion
||p4mvyqmtczqnor5k.onion
||yuul2gjh6lntsrya.onion
||e3u7bcsaitpvos5p.onion
||imp65lw565mim4wa.onion
||imperia6tjbaa2lt.onion
||hhhzuo2aqjb6qzlk.onion
||imperiali5phcpa3.onion
!-------------------------------------------------------------!
!--------------------------- UnderDir ------------------------!
!-------------------------------------------------------------!
||underdj5pebcmfqf.onion
||undedfdvagdsov4z.onion
||undeqvfyhefptjtc.onion
||z5taguvepvuevyp3.onion
||linkdih75f4psumn.onion
||linkdchaw32pg5ju.onion
||linkdt43zhpn4zic.onion
||linkdaliqdmt6qqg.onion
||linkddxacu7dehai.onion
||linkd4izufb4qzqm.onion
||linkd3q4qudvpctn.onion
||linkd4j64dc4grf2.onion
||auutwvpmfqfsmcen.onion
||4om2jscnc2e3vpie.onion
||jwyngqi6njcgsgbb.onion
||2222222dfa7e7pmc.onion
||2222222pass6qkkw.onion
||2222222sgsxom6o3.onion
||22222224t2y6otrx.onion
||2222222sfqnrbpzi.onion
||2222222q6hohtan2.onion
||2222222mienbekqf.onion
||2222222wxkqnjz25.onion
||22222225lbh45mmt.onion
||jvhp2iv7vfwuurva.onion
||hackfbqeihaagbff.onion
||2rgxdk7qtawadebofm6jurur5v5ee26o23uwvbmit23uhsledpy6cbyd.onion
||5crsrbqukiefmkrv.onion
||3idjhshoxzqm5nuz.onion
||3ljugjydhuwr6fux.onion
||fobgemanrtpvbxok.onion
||22222222gkxknocu.onion
||37nj3wqjq4pxt6tgb4yfhejgd5k6yhfu3wp7dtbi6hgsdxkpj6rhhsid.onion
||3zopytflp2tat7aq.onion
||3qjxmxweyvpnfczm.onion
||zkqsx2wbxusrefjw.onion
||iinjakjk2ydhj7al.onion
!-------------------------------------------------------------!
!---------------------- Dark Web Magazine --------------------!
!-------------------------------------------------------------!
||deepmarticgyp6if.onion
||deepmartrigqwenz.onion
||deepmartmfvbijza.onion
||deepmarbaaaiwpph.onion
||deepmar57fbonfiw.onion
||hidden24tha4plsx.onion
||hiddenmark43cbxd.onion
||hiddenmagmteisz2.onion
||hidden24qtvlgaxp.onion
||nu5grt6sqv4imico.onion
||nu5grt6sxtkep757.onion
||tenebra5nlfxplf5.onion
||d6icqld2aunwupgp.onion
||2tq6nz2a3ijn4yhh.onion
||statv2gccyh7roto.onion
||alimic5a3ecaeywv.onion
||neweram2ko7qacon.onion
||6qdvcew6jhxifqge.onion
||bmarketyyx64v54x.onion
||lg7iwjj3ajzz2cmd.onion
||a534p6bdxbf2niq7.onion
||hqcards3mrbxrfak.onion
||oz2l3ihpg6j5vxkb.onion
||hlpg5p2rc3uou7wr.onion
||c2qzddqjccyy4qem.onion
||2ljfiwqcup2kc3u3.onion
||ebkjlvge7furmo6y.onion
||bnrusds5aw6b3iul.onion
||tj2dl4f4piiyke4i.onion
||alphaca4pxfzfyvm.onion
||xilliayhoiuv5qmk.onion
||2pneiouz2aj27kjs.onion
||itilyljv4vf6qgqm.onion
||lox7ibfj7e3pw3c6.onion
||cashyjun2yp4tiub.onion
||fmp2arn5ftrxzoba.onion
||prepaidojhtmroco.onion
||ub2fkkeeyl3jgwwz.onion
||o3fkhst6gymb6duo.onion
||carddumpa36spoya.onion
||jokerooxzda6ruf4.onion
||caworldwyrxypvqm.onion
||zenithccalwhzy26.onion
||ecashpkvsc2qroz6.onion
||deepointokustfwk.onion
||qdoqihbtet5jt5qx.onion
||blackccyuvti57v7.onion
||dark2w4t34jlb5nt.onion
||j7cd2za5dxcw4uan.onion
||cardshopffielsxi.onion
||darkrawbz4fkib2c.onion
||lordpg3nluytdenw.onion
||travelziverr35bk.onion
||paypal6qqdpo2jhc.onion
||paypalp2l6xiemsy.onion
||easyppslbft37xq7.onion
||45l7ejfvg6tocxjg.onion
||ioqkxhnm3uivbtth.onion
||22222222ss554wof.onion
||g5b5erkjomqen6nm.onion
||22227zvkbytnwlrt.onion
||7yrwexuvl2horzr2.onion
||buygc467q5ez2fg7.onion
||debitcards.torpress2sarn7xw.onion
||vend2qz3bva3jhol.onion
||vendor5in7aid2nb.onion
||cccenterjb27ubnm.onion
||cccenterse4ofwp6.onion
||3223onhiaeolkhbe.onion
||3s7hfvharztoevy5zpbq6jk7rzvwvvviqz45v6cxq2kovq4yfxxq4sqd.onion
||aestjoovxnehn5mlcnhvmyarl3oyozmqbxvmtppl65j67jazz5yu66qd.onion
||7g6osvevkboz5ce3ytn42tefk2bzrzp53ugqapdrzwcjhuxfv6yup7yd.onion
||7b4vsorl3pjq5f4fqy2dmsqlbgqy7gbgb7wvnggjfpcudmbh4hhkawad.onion
||mzeh627q7bmzsoxozampnsstkfnby2zvm3y73qcsy43n3eaveehqjoyd.onion
||w7syjbv4tqzudakassr6yzuxsmtdovihlwedwzvz4x7a7tzpjgtoqjqd.onion
||srwmltrmx5uy3j74adakpixaptlr2lie42cshrlglsyy2mml24hcs4id.onion
||4jnwltgnjvb44xh4jzfqe2tlq37bkyknnnhpx4ia4yyz5qgbpamvntqd.onion
||bestcc5xpfjihry2nlc25pj5ujxzrezrjh4egzugvs3u2eopjk5u5zid.onion
||nu25zvegynpgpgbywuudtov7g37h2jsxfa2avz5dyqx32kmqzsp2qjyd.onion
||fiw27htrk5av3bnhfjtl23dn62fa6e3rwlhtvkimthy46jbuxuy3jdyd.onion
||darkf2d7zte4t7ys.onion
||dumpscciolcwmacb.onion
||2222222mm67h6ypm.onion
||3ld7ttejt76spqxv.onion
||buyccvhbq25t5l3y.onion
||hcutffpxiq6zdpqm.onion
||amazonhh6bvisfdl.onion
||ppccpzamw4qb3yji.onion
||accsaphx55wcxaxd.onion
||netauth3iph4qwjd.onion
||bankors4spr7ohze.onion
||wc5ab2qgobwlb7mp54dbxkf2dvjstftj2b6uwfadvawng4liyiuiusad.onion
||fcq6zs5hhvbxdqb6.onion
||nkq6572rde7s73pemuo6fxz3elcu5xczfin3qy3eo36apakrqbevzdid.onion
||54ce5x7l4m3t2spm.onion
||p2rkdistflgo3eqx.onion
||stacaqsyrzfg4jos.onion
||stacnb5bmdtzysww.onion
||stacithgj4xrdolk.onion
||stacaqpfbfiz54sq.onion
||stacwitkktemyvgs.onion
||stacps5rb3dwzmju.onion
||stacixwftmr27igr.onion
||staco3a37yho7sox.onion
||premiumd7ww5c43q.onion
||premiumruzgaamwt.onion
||ccqvend6aq5wig35.onion
||fasttruunhj4agjl.onion
||bitccmch47v3xypb.onion
||westernu7e5v6qez.onion
||3vfws2yqv4wii54e.onion
||bnrub6cwicyu7snv.onion
||ccaz3dzqrouqshop.onion
||hbl6udan73w7qbjdey6chsu5gq5ehrfqbb73jq726kj3khnev2yarlid.onion
||moneyfa6bic6gmxd.onion
||thebank33vuixg66.onion
||loobucks2fmgyivu.onion
||cardccgwbm5xob4e.onion
||card2v6wbr2cuyrh.onion
||crspseme2b55ztlf7nqylxvunl6aqnu26pdurodltldjsekzbkrcsuad.onion
||e3bv6gcn3qjpg4kfi4qy3t7z3hzm2eoyv7o5lua2goaz6dv44f3yukyd.onion
||nobleco6f77cs2h6.onion
||enxlsmjhbv2wn67j.onion
||phyqslpwbkodrwd7.onion
||r5nwehhbbtp4rrg3.onion
||torcvvq44o7ofjuu.onion
||pdf6uqyd4nxmghgw.onion
||d5ubjv46kownm4jl.onion
||aannwx6fzpwniruq.onion
||transferiwon44pq.onion
||toringei5vt4sfk7.onion
||tj2d2hizwtbialiv.onion
||mpm3oc6m2dy3jjho63syrjbdtyixwxgbwmsyc24r66uazgqhbz4y2nid.onion
||xf3mt5ev4brqmfrh.onion
||precardsn7zl3n6x.onion
||ppcentznbskgodcp.onion
||bitshopotisgandd.onion
||cardp2rckmuocccy.onion
||cenn5byalpdhx4c5mrs722tzttjkrkxzdpspri3y4fscv3lrqy6ob3yd.onion
||acardsavkhwfreuq.onion
||id5fh5dfrdzrxkro.onion
||uujpz6aszhnrxyix.onion
||instapayickpt3tu.onion
||r4zbmobyalfzfejwxu2633qfr6nx62khkdznqwlpc5ozkhadxpe5edqd.onion
||hdvs2bh7mq357tj4.onion
||oldecr7kb3zho273rqeye6mwk4cwpl644s6cciiqk7zf7anpao2ntvyd.onion
||ccguruetr5jwye5g.onion
||xb635ncim63dlahg.onion
||sbxxtg7qehc6wvhl.onion
||morhx3irxknskwu5.onion
||ewad7i7uw2deouyg.onion
||bnruxuk34pu5l37h.onion
||3gs7lq52ccbqvdu3kf7m7ilbasjqhsegmb2rnvu4zjfx7lf27oz7ytyd.onion
||ccmen5ivf6em3m3s.onion
||h7hsn3g7ebub3opewsxtcjfsstyy3s4kvtphxwmv5lvwq5lrtazit2yd.onion
||countuwelx4r7qi5.onion
||countrfoioed4ckx.onion
||en35tuzqmn4lofbk.onion
||fakeidskhfik46ux.onion
||6c3qzz4q7jvnzoxg.onion
||passporxakpmzurx.onion
||o6klk2vxlpunyqt6.onion
||y3fpieiezy2sin4a.onion
||ukpasspprmwaqrsd.onion
||7n535arkbmecbw62wy7h2acvze3wqejk3ekazzk44ibriz55itcs37ad.onion
||abbujjh5vqtq77wg.onion
||cfactoryxecooa6l.onion
||rocksolidyyacwsa.onion
||rocksolyis6cxkyy.onion
||rsescrow5zcepqjh.onion
||escrown4d564qtgz.onion
||escrow5jkmjpxprw.onion
||sgjfdl42o6565wli.onion
||2hftxvyft7dl3fk2.onion
||mescrowy4dr6xqh5.onion
||mescynls2xqjqeoc.onion
||mescrowsi3yjswh2.onion
||sblqp5utjj3bu2ec.onion
||sblqlbzrejulqzsi.onion
||tm47kmrvlxuibig7.onion
||apmqltpmgmpqwqwt.onion
||2uyiwmcn4wudbzcj.onion
||safebtck4qejiero.onion
||bitpw7stentgch5y.onion
||52jiu6jc6isptocs.onion
||6qkockkyu3ln3twr.onion
||safepayt2nt56gy4.onion
||ohift5o756azx327ihkkytajdixynoibwj47sfebkral47uttffl7nyd.onion
||safepayren6pt7fj.onion
||btcasiah5fa5mhkp.onion
||btcaiysn5azhuwi7.onion
||e64qidckaxijfm6l.onion
||ygqevii2umdcvk5z4k2pqxhpynpgix63dl5prcslz4gggph5ea63qrqd.onion
||lrcnreaelox6ccu6qnr77jlz5vbsba2davmtncb6plpklkpgrlhx2sad.onion
||3bd7kkf7xm2fcthbm6ynqwg6i5crl46o4hfmllbgtkpwhlzkbdsju6id.onion
||vfh3tsbizlsirnxg73ebrf2fuuud62oben7rijm7kzhfg43de6ecoiyd.onion
||qovaihss3wzf4zo2ns7tckvrm7cfkl5rfgbjmk6vim2a7eufvrlbqwyd.onion
||escrowq5tus5jpgw.onion
||bescrowwc3nlocsb.onion
||vnidbxx3zaa2ksva.onion
||6q5mipksw3qe5cqxxfmjg2gorzwlctbbmdjiub2iwxiu6zxse5bwvaid.onion
||bbbitgkcgods6tlt.onion
||btcdepowt7qahs6z.onion
||btcdepouvsdohehn.onion
||7i42x3kjxjldvcqw.onion
||ib62tqf55t7f34ay7fhspcgk2a43pjkwquegwkhcewivratwg2oy3mad.onion
||2mbag6csiomy2e7l.onion
||lockerpwpshriwam.onion
||escrow5go6vopjjg.onion
||okjh4irka63gweyk2fjpciro7wvhfiujsst7fxopjielb7xzcaaomsyd.onion
||vgnuhmuj6aex2ycc.onion
||22escrowkxy56tvd.onion
||escrowytu7s7rlqn.onion
||5xbpc5qu4jx4e2eo.onion
||ps66utstlfojv3nv.onion
||hpumcyqddysk54ejprdadm5hczqaeavqt6ygfnikcuwqa7u75z5vmtid.onion
||middle2d7bkn7mdy.onion
||weedway2vlaj37gy.onion
||ausbulkdoxtv4tkt.onion
||weedu6vbqo45xrjt.onion
||v4t3ogtrdoe6ozkn.onion
||quality2ui4uooym.onion
||z7kd7qa7lndx67v5.onion
||crimen6nxejwy2f2.onion
||kbvbh4kdddiha2ht.onion
||nnipbjberqh6lpvt.onion
||fzqnrlcvhkgbdwx5.onion
||v4t3rb4gpei5vixb.onion
||darkmambawopntdk.onion
||darkmambazsmnkjo.onion
||swkcw6eudl7lciek.onion
||assassinuyy7h425.onion
||blkmobbzqjhpn232.onion
||ygrqgcnoodnqdmlc.onion
||zsyvom262oiaoc6es7bgg66xieyil6nqkh7jn5ntraghpqgudbcl3vad.onion
||4tvzeuakkunuvbmf.onion
||camorrau23edy436.onion
||2ogmrlfzdthnwkez.onion
||nfs6e454oyvajfro.onion
||hacker5quf443wtg4n7hi6m3l4xpcyasknjvhhrb6pcbgakhu7bblhad.onion
||brohoodahjzxriv7.onion
||hackerrljqhmq6jb.onion
||xhackergnluw32xz.onion
||4u7aueoex3gv2ybl.onion
||hack5xpgngf2frll.onion
||gnshpojuxrioibud.onion
||weapon5cd6o72mny.onion
||luckp47s6xhz26rn.onion
||3n3w4m56atug7osb.onion
||applestor7qfi636.onion
||electronz2gpfyz5.onion
||rjb2zyzskm7he5pd.onion
||tfwdi3izigxllure.onion
||applesf6emggp2pz.onion
||etrrdbuorwng2hkw.onion
||bitstorenctdwhmo.onion
||isto66yzdrjlvnig.onion
||mobil7rab6nuf7vx.onion
||iphonegwasqieryi.onion
||etronix47auvlmt7.onion
||markethh52nfbvxy.onion
||dewzrshlaw7e2hev.onion
||bitmixergv5vvbza.onion
||cleancoikmh6uamc.onion
||loundryslz2venqx.onion
||ow24et3tetp6tvmk.onion
||ujnkg4uirpaiqejr.onion
||hdwikiueikaeviwk.onion
||ndntmfusjmj6tkpl.onion
||z6ttukngw2hlok2u.onion
||he22pncoselnm54h.onion
||z2hjm7uhwisw5jm5.onion
||yip2pklv6nivtzrq.onion
||4r4zaei5qa7qq5ha.onion
||trstxp6ljtdyy275.onion
||djx6idjhk5yumfn2.onion
||4gj66ltkilkyutyw.onion
||virus323mhjmnav2.onion
||virush6axb3bkhpe.onion
||virushb3ve5ymaue.onion
!-------------------------------------------------------------!
!------------------------ Miscellaneous ----------------------!
!-------------------------------------------------------------!
||vu2wohoog2bytxgr.onion
||2kka4f23pcxgqkpv.onion
||3dbr5t4pygahedms.onion
||hiddenmarketplace.org

Dark Web AdBlock

! Title: Dark Web AdBlock Filters
! Description: AdBlock filters for tor network (dark web),
only use if you browse the tor network,
make sure cosmetic filtering is enabled in uBlock Origin for it to work properly.
! Version: 2.2.0
! Expires: 1 day
! License: http://creativecommons.org/licenses/by/3.0/
!-------------------------------------------------------------!
!----------------------------- Ads ---------------------------!
!-------------------------------------------------------------!
! Dark Web Links - bznjtqphs2lp4xdd.onion
||bznjtqphs2lp4xdd.onion/images/1.png
! 4/15/20 - Onion Center Search Engine - http://oikgfwfqmqkph4rl.onion
oikgfwfqmqkph4rl.onion###content > center
oikgfwfqmqkph4rl.onion##.adSpace2
oikgfwfqmqkph4rl.onion##.adSpace3
! 4/15/2020 - OnionLand Search - 3bbad7fauom4d6sgppalyqddsqbf5u5p56b5k5uk2zxsy3d6ey2jobad.onion
3bbad7fauom4d6sgppalyqddsqbf5u5p56b5k5uk2zxsy3d6ey2jobad.onion##.col-sm-12
! 4/15/2020 - Tor66 - tor66sezptuu2nta.onion
tor66sezptuu2nta.onion##center:nth-of-type(2)
tor66sezptuu2nta.onion##center:nth-of-type(3)
tor66sezptuu2nta.onion##center:nth-of-type(4)
tor66sezptuu2nta.onion##center:nth-of-type(5)
tor66sezptuu2nta.onion##center:nth-of-type(6)
tor66sezptuu2nta.onion##center:nth-of-type(7)
tor66sezptuu2nta.onion##center:nth-of-type(8)
tor66sezptuu2nta.onion##center:nth-of-type(9)
tor66sezptuu2nta.onion##center:nth-of-type(10)
tor66sezptuu2nta.onion##center:nth-of-type(11)
tor66sezptuu2nta.onion##center:nth-of-type(12)
tor66sezptuu2nta.onion##center:nth-of-type(13)
! 4/15/2020 - Torch: Tor Search - xmh57jrzrnw6insl.onion
||area23wa3d32yygu.onion/delivery/list_banners/1/FP$subdocument
! 4/15/2020 - Tordex - tordex7iie7z2wcg.onion
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(2)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(3)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(4)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(5)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(6)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(7)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(8)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(9)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(10)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(11)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(12)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(13)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(14)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(15)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(16)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(17)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(18)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(19)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(20)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(21)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(22)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(23)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(24)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(25)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(26)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(27)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(28)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(29)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(30)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(31)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(32)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(33)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(34)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(35)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(36)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(37)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(38)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(39)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(40)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(41)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(42)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(43)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(44)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(45)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(46)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(47)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(48)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(49)
tordex7iie7z2wcg.onion##div.mb-1:nth-of-type(50)
! 4/15/2020 - Torgle - torglejzid2cyoqt.onion
torglejzid2cyoqt.onion##.mt-5.text-center.col-md-9
! 4/15/2020 - VisiTOR - visitorfi5kl7q7i.onion
visitorfi5kl7q7i.onion##body > div:nth-of-type(1)
visitorfi5kl7q7i.onion##div.item:nth-of-type(3)
visitorfi5kl7q7i.onion##div.item:nth-of-type(4)
visitorfi5kl7q7i.onion##div.item:nth-of-type(5)
! 4/15/2020 - The Light Hidden Wiki cbo7whgxo2dnplgz.onion
cbo7whgxo2dnplgz.onion##div#p-tb.portlet:nth-of-type(7) > h3
cbo7whgxo2dnplgz.onion##div#p-tb.portlet:nth-of-type(7)
! 4/15/2020 Hidden Links - wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion
wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion##h6.friends:nth-of-type(2)
wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion##div.friend-list:nth-of-type(2)
wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion##h6.friends:nth-of-type(1)
wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion##div.friend-list:nth-of-type(1)
! 4/15/20 - The Hidden Wiki / Deep Web Onion List - ndntmfusjmj6tkpl.onion
ndntmfusjmj6tkpl.onion##p:nth-of-type(5)
ndntmfusjmj6tkpl.onion##p:nth-of-type(7)
ndntmfusjmj6tkpl.onion###sidebar-inner > center
ndntmfusjmj6tkpl.onion##p:nth-of-type(9)
ndntmfusjmj6tkpl.onion##p:nth-of-type(10)
! 4/15/2020 - Tor Links - torlinkswwqg3lwt.onion
torlinkswwqg3lwt.onion###t > tbody > tr:nth-of-type(1) > td > center
! 4/15/2020 - TorLinks v3 - tor3ypms2vlohh2e.onion
tor3ypms2vlohh2e.onion##[href="http://hdwikiueikaeviwk.onion/"]
! 4/15/20 - Onion Links Directory - http://aaalinktbyhxngho.onion
aaalinktbyhxngho.onion##div.container:nth-child(3) > div.row:nth-child(3) > div.side:first-child > div.sidebar_banner:last-child
aaalinktbyhxngho.onion##div.container:nth-child(3) > div.header:first-child > div.header_banner:last-child > div > a > img
! 4/15/2020 - Onion List - onionailnm7t3437.onion
onionailnm7t3437.onion##.c-con
onionailnm7t3437.onion##.advertising
! 4/15/2020 - Link Direction - linkdire62kbkigq.onion
linkdire62kbkigq.onion##.box
! HD Wiki - 4/15/2020 - hdwikiueikaeviwk.onion
hdwikiueikaeviwk.onion###dokuwiki__top > div:nth-of-type(2)
! 4/15/2020 - Best Deep Web - bestdeepweb.com
bestdeepweb.com##p:nth-of-type(2)
bestdeepweb.com##div.moduletable:nth-of-type(4) > div:nth-of-type(1)
bestdeepweb.com##div.moduletable:nth-of-type(5) > div:nth-of-type(1)
bestdeepweb.com##div.moduletable:nth-of-type(6) > div:nth-of-type(1)
bestdeepweb.com##div.moduletable:nth-of-type(7) > div:nth-of-type(1)
bestdeepweb.com##div.moduletable:nth-of-type(8) > div:nth-of-type(1)
! 4/15/2020  - Raptor - raptortiabg7uyez.onion
raptortiabg7uyez.onion##p:nth-of-type(2)
raptortiabg7uyez.onion##body > [href="http://silkroadxjzvoyxh.onion/"]
raptortiabg7uyez.onion##body > [href="http://tapeucwutvne7l5o.onion/"]
raptortiabg7uyez.onion##p:nth-of-type(4)
! 4/15/2020 - Deep Web Links - deep-weblinks.com
deep-weblinks.com##.site-header > .wrap
deep-weblinks.com###custom_html-16 > .widget-wrap.widget_text > .custom-html-widget.textwidget
deep-weblinks.com##p:nth-of-type(10)
deep-weblinks.com##p:nth-of-type(20)
deep-weblinks.com##p:nth-of-type(25)
deep-weblinks.com##p:nth-of-type(349)
! 4/15/2020 - CodeDir - 67xkew7pvctdcj526yl7gl6pc6e2dwqwx3ugbe67g2hfjdnbwjd7euad.onion
67xkew7pvctdcj526yl7gl6pc6e2dwqwx3ugbe67g2hfjdnbwjd7euad.onion##center:nth-of-type(2)
! 4/15/2020 - Recon - reconponydonugup.onion
reconponydonugup.onion##.banner-section
! 4/15/20 - Secmail - secmailw453j7piv.onion
secmailw453j7piv.onion##div:nth-of-type(2)
secmailw453j7piv.onion##body > table:nth-of-type(1) > tbody > tr:nth-of-type(2) > td:nth-of-type(2)
giyzk7o6dcunb2ry.onion##body > table:nth-of-type(1) > tbody > tr:nth-of-type(2) > td:nth-of-type(2)
giyzk7o6dcunb2ry.onion##div:nth-of-type(2)
||secmailw453j7piv.onion/src/ads/*$subdocument,1p
||secmailw453j7piv.onion/src/login.php/images/backg.png$image
||giyzk7o6dcunb2ry.onion/src/ads/*$subdocument,1p
||giyzk7o6dcunb2ry.onion/src/login.php/images/backg.png$image
! 4/15/2020 - Flashlight - kxojy6ygju4h6lwn.onion
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(1)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(2)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(3)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(4)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(5)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(6)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(7)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(8)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(9)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(10)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(11)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(13)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(14)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(15)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(16)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(17)
kxojy6ygju4h6lwn.onion##div.clearfix.sb-widget:nth-of-type(18)
kxojy6ygju4h6lwn.onion##.bottom-ad-section
! 4/15/2020 - OnionThumbs - othumbs53mh65hxc.onion
othumbs53mh65hxc.onion##body > center > div.MainAdverTiseMentDiv:nth-of-type(1)
othumbs53mh65hxc.onion##center > div:nth-of-type(3)
othumbs53mh65hxc.onion##div.MainAdverTiseMentDiv:nth-of-type(4)
othumbs53mh65hxc.onion##center > center > .MainAdverTiseMentDiv
othumbs53mh65hxc.onion##.hoOcbG0CqpjS-bg
othumbs53mh65hxc.onion###EPxdU9xTuRWk
! 4/15/2020 - Instantgrams - y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion
y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion##div.mb-2:nth-of-type(2)
y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion##div.mb-2:nth-of-type(3)
y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion##div.mb-2:nth-of-type(4)
y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion##div.mb-2:nth-of-type(6)
y4w6wobb66qbolcru7obrqu2763gctj6kls5tpvkjt42is4uzplnqzad.onion##div.mb-2:nth-of-type(8)
! 4/15/2020 - Hidden Answers - answerszuvs3gg2l64e6hmnryudl5zgrmwm3vh65hzszdghblddvfiqd.onion
answerszuvs3gg2l64e6hmnryudl5zgrmwm3vh65hzszdghblddvfiqd.onion##.qa-sidepanel > div:nth-of-type(2)
! 4/15/2020 - The Onion Web - onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion
onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion##.w-article-list-num > .widget
onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion##div.header-pob:nth-of-type(14)
onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion##aside.sidebar.ddwnews-sidebar-small:nth-of-type(2) > .theiaStickySidebar
onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion##.do-space-bg.do-space
! 4/15/2020 - Tape - tapeucwutvne7l5o.onion
tapeucwutvne7l5o.onion##.p-b-30.bn-lg-sidebar.col-xs-12.col-sm-12
! 4/15/2020 - DNMLive - dnmliveahwgu7nvu.onion
dnmliveahwgu7nvu.onion###slider
! 4/19/2020 - Tormax - tormaxunodsbvtgo.onion
tormaxunodsbvtgo.onion###banners
! 4/19/2020 - Onion Links Directory - aaalinkdbpopbfax.onion
aaalinkdbpopbfax.onion##.header_banner > div
aaalinkdbpopbfax.onion##.sidebar_banner
! 4/23/2020 - Uncensored Hidden Wiki - z5taguvepvuevyp3.onion
z5taguvepvuevyp3.onion##table#mp-upper:nth-of-type(2) > tbody > tr > td.MainPageBG:nth-of-type(2)
! 5/25/2020 http://multivacigqzqqon.onion
multivacigqzqqon.onion##div.Input:nth-of-type(3) > p:nth-of-type(1)
multivacigqzqqon.onion##p:nth-of-type(2)
multivacigqzqqon.onion##p:nth-of-type(3)
multivacigqzqqon.onion##[src="img/paid/5b8fc5641b244.gif"]
multivacigqzqqon.onion##[href="http://young64ispejbqrl.onion"]
multivacigqzqqon.onion##[href="#"]
!-------------------------------------------------------------!
!------------------------- Annoyances ------------------------!
!-------------------------------------------------------------!
! 4/15/2020 - Start [Wizardry & Steamwork] - kaarvixjxfdy2wv2.onion
kaarvixjxfdy2wv2.onion##.plugin_wrap.wrap_centeralign
! 4/15/2020  - Best Deep Web - bestdeepweb.com
bestdeepweb.com##.fade-header-website

Raw Links

All provided links in txt format

       ____        _                _      _       _
      / __ \      (_)              | |    (_)     | |
     | |  | |_ __  _  ___  _ __    | |     _ _ __ | | _____
     | |  | | '_ \| |/ _ \| '_ \   | |    | | '_ \| |/ / __|
  _  | |__| | | | | | (_) | | | |  | |____| | | | |   <\__ \
 (_)  \____/|_| |_|_|\___/|_| |_|  |______|_|_| |_|_|\_\___/

[==================================================]
       I n t r o d u c t i o n   P o i n t s
[==================================================]
-------------------------
     Dark Web Guides
-------------------------
The Way Into The Dark Web: http://guideyeb5ew6plwj.onion/
The Way Into The Dark Web: http://f2fv76wtuwdvbpci.onion/
Owledge: http://owlzyj4to3l5daq6edgsgp5z4lh4tzlnms4z6jv6xdtkily77j4b3byd.onion/
The Dark Web Pug (Outdated): http://thedarkwebpugv5m.onion/
-------------------------
     Tor Scam Lists
-------------------------
Dark.Fail: http://darkfailllnkf4vf.onion/
NoScam: http://noscamomtq5kauyu.onion/
Scam List Of Tor 1: http://ba7fsz4656jjxs3p.onion/
Scam List Of Tor 1: http://vzii5edzuyvjb4kf.onion/
Scam List Of Tor 1: http://wua54ku5ixg72qas.onion/
Scam List Of Tor 1: http://r33ar5ezvrigo7p5.onion/
Scam List Of Tor 1: http://pag7cizw7yi4teop.onion/
Scam List Of Tor 1: http://ny24l7k4tnvqie6j.onion/
Scam List Of Tor 1: http://z6xo2uug7nw6oof2.onion/
Scam List Of Tor 1: http://lbrenhktrm33342a.onion/
Scam List Of Tor 1: http://254fxqpk7m2k5pah.onion/
Scam List Of Tor 1: http://mu667ri3fiac4dba.onion/
Scam List Of Tor 1: http://2qv5vlqtjwaub6ub.onion/
Scam List Of Tor 1: http://jgbhzkuksu43brgq.onion/
Scam List Of Tor 1: http://da6u6fqyevtkdzei.onion/
Scam List Of Tor 1: http://fezxztzfgy5bqbnt.onion/
Scam List Of Tor 1: http://v3kdes4p6wazs3zq.onion/
Scam List Of Tor 1: http://w4d3exd5fgii6jj2.onion/
Scam List Of Tor 1: http://oe2tpx5rnzpyxobp.onion/
Scam List Of Tor 1: http://qomo6udnlvekysvm.onion/
Scam List Of Tor 1: http://2eofubmy3gvr3sr5.onion/
Scam List Of Tor 1: http://6jc2l3xdvfyzw5qw.onion/
Scam List Of Tor 1: http://6modvohqhaioqq3e.onion/
Scam List Of Tor 1: http://frqj2noku3ymbcob.onion/
Scam List Of Tor 1: http://g6syrj4tifdznptd.onion/
Scam List Of Tor 1: http://jabtshi2mr3klw4h.onion/
Scam List Of Tor 1: http://n443zdedizjdev7j.onion/
Scam List Of Tor 1: http://pq5sw6nmhxentueq.onion/
Scam List Of Tor 1: http://qevbxwqkpzv3bg5f.onion/
Scam List Of Tor 1: http://tfv4pasrmo3n7kmf.onion/
Scam List Of Tor 1: http://vgv76dcdoj2rlm24.onion/
Scam List Of Tor 1: http://y2fagcdnexoqxfmu.onion/
Scam List Of Tor 1: http://7dxbj6einldsp5ig.onion/
Scam List Of Tor 1: http://7l7dakrz2nabo4jz.onion/
Scam List Of Tor 1: http://bmfkvejunpuqdxjx.onion/
Scam List Of Tor 1: http://gttfi6vyzs33nrqe.onion/
Scam List Of Tor 2: http://rap7gypjs4v6a7ax.onion/
Scam List Of Tor 2: http://roey5smpp67p4fxq.onion/
Scam List Of Tor 2: http://y7zigmjrpm2pkgzi.onion/
Scam List Of Tor 2: http://jancwqly2wrh35ab.onion/
Scam List Of Tor 3: http://mi325vr3yhtlptho42mkaup4loyesnzfmx7simiw2f5gxrbrqeonh4id.onion/
DarkGuard: http://guardday6e5nxblpojbhmx5ws2avautr7eswu3qg7gynh52rh744anyd.onion/
-------------------------
     Search Engines
-------------------------
Ahmia: http://msydqstlz2kzerdg.onion/
BTDigg: http://btdiggwzoyrwwbiv.onion/
Candle: http://gjobqjj7wyczbqie.onion/
Dark Web Links: http://jdpskjmgy6kk4urv.onion/
DuckDuckGo: http://3g2upl4pq6kufc4m.onion/
Evo Search: http://evo7no6twwwrm63c.onion/
Excavator: http://2fd6cemt4gmccflhm6imvdfvli3nf7zn6rfrwpsy7uhxrgbypvwf5fad.onion/
Google.Onion: http://ggonionvhfq7brmj.onion/
Grams: http://grams7ebnju7gwjl.onion/
Haystak: http://haystakvxad7wbk5.onion/
I2P Search: http://i2psesltivefcujc.onion/
MultiVAC: http://multivacigqzqqon.onion/
Not Evil: http://hss3uro2hsxfogfq.onion/
Onion Bag: http://onionbagy25be2bg.onion/
Onion Center: http://oikgfwfqmqkph4rl.onion/
Onion Search Engine: http://onionf4j3fwqpeo5.onion/
Onion Search Engine: http://5u56fjmxu63xcmbk.onion/
Onion Search Service: http://oss7wrm7xvoub77o.onion/
OnionLand Search Engine: http://3bbaaaccczcbdddz.onion/
Phobos: http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion/
SearX: http://5plvrsgydwy2sgce.onion/
Start: http://kaarvixjxfdy2wv2.onion/
Tor66: http://tor66sezptuu2nta.onion/
Tor66: http://tor77orrbgejplwp.onion/
Tormax: http://tormaxunodsbvtgo.onion/
Torrentz 2: http://torrentzwealmisr.onion/
Tor Search: http://torsearchruby56z.onion/
Tor Search Engine: http://searchcoaupi3csb.onion/
Tor Search Engine 2: http://searcherc3uwk535.onion/
Torch: http://xmh57jrzrnw6insl.onion/
Torch: http://26ozf35d2rwtmqbk.onion/
Tordex: http://tordex7iie7z2wcg.onion/
Torgle: http://torglejzid2cyoqt.onion/
Tornet: http://tgs5dkeqkg5hrjjk.onion/
VisiTOR: http://visitorfi5kl7q7i.onion/
-------------------------
   Wikis / Link Lists
-------------------------
The Hidden Wiki 1: http://hiddenwiki7wiyzr.onion/
The Hidden Wiki 2: http://nqigfqrxnkwcqmiq.onion/
The Hidden Wiki 3: http://hwikim2v2jscf5tgpcfgkfxjyrfmgs4vwr2raqayt4uzfde6w4dutiqd.onion/
The Hidden Wiki 4: http://ndntmfusjmj6tkpl.onion/
The Hidden Wiki 5: http://wikitorcwogtsifs.onion/
The Hidden Wiki 6: http://zqktlwi4fecvo6ri.onion/
The Hidden Wiki 6: http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/
The Hidden Wiki 7: http://hdwikihod77v6fas.onion/
The Hidden Wiki 8: http://wikitjerrta4qgz4.onion/
The Hidden Wiki 9: http://hwikis25cffertqe.onion/
The Light Hidden Wiki: http://cbo7whgxo2dnplgz.onion/
Hidden Wiki Fresh: http://ujnkg4uirpaiqejr.onion/
Hidden Wiki Fresh 2020: http://wikikbig7ni573g5.onion/
Hidden Wiki Fresh 2020: http://hdwf22kgyrnpmq5f.onion/
Hidden Wiki Fresh 2020: http://hdwikiueikaeviwk.onion/
Hidden Links: http://wclekwrf2aclunlmuikf2bopusjfv66jlhwtgbiycy5nw524r6ngioid.onion/
Tor Links v1: http://torlinkbgs6aabns.onion/
Tor Links v1.5: http://torlinkyrd26ovflctq7j3edrcamticj2tikyjghbehnow73av2dtmqd.onion/
Tor Links v2: http://torlinkglejjnyof.onion/
Tor Links v3: http://tor3ypms2vlohh2e.onion/
Tor Links 2: http://torlinkswwqg3lwt.onion/
LinkDir: http://linkdir7ekbalksw.onion/
Link Direction: http://linkdire62kbkigq.onion/
Onion List: http://onionailnm7t3437.onion/
Onion List 2: http://jh32yv5zgayyyts3.onion/
Onion Links: http://onionlinksv3zit3.onion/
Onion Links Directory: http://aaalinktbyhxngho.onion/
Onion Links Directory: http://linkdir5vglxf6by.onion/
Dark Net Links: http://aetmdmazqr5hacyus5iw3foutnj5swzuj3kjyk2hwoxve2pkgilcjkqd.onion/
HD Wiki: http://hdwikicorldcisiy.onion/
UnderDir: http://underdj5ziov3ic7.onion/
OnionDir: http://dirnxxdraygbifgc.onion/
OnionTree: http://onions53ehmf4q75.onion/
OnionList: http://u5gnv57w3wimlrmr.onion/
Onion List 2: http://onionvdyiweqdlta.onion/
Tor Wiki: http://torwikignoueupfm.onion/
Wiki Link: http://wikilink77h7lrbi.onion/
Oni-Dir: http://directory4ichoxb.onion/
Paul's Onion List: http://linkdnwzr3lpx6xq.onion/
DeepLink: http://deeplinkdeatbml7.onion/
Fresh Onion Link List 2019: http://tecjjcyooceyhwyhyhyjmfpnq2c4wxhaxclwqyq6cvpigbqqizf3drqd.onion/
Dark Web Links 2017: http://wiki5kauuihowqi5.onion/
Project PM: http://projpmcxufvim7be.onion/
Raptor: http://raptortiabg7uyez.onion/
Grams Wiki: http://uepurdryqkrheiqs.onion/
Uncensored Onion List: http://list4ywgch4gsd56.onion/
Dir: http://5kgkvealcpsrgsfmxo4fssmr7zcemq7zp5qfvsuppnio5cr6harqq2id.onion/
OnionDir: http://oniot2zvfczp4lpc.onion/
-------------------------
        Monitors
-------------------------
DarkEye: http://t7tb43a7gvl6wb7j.onion/
DarkEye: http://darkeyepxw7cuu2cppnjlgqaav6j42gyt43clcn4vjjf7llfyly5cxid.onion/
Onion Scanner: http://4r4zaei5qa7qq5ha.onion/
CodeDir: http://67xkew7pvctdcj526yl7gl6pc6e2dwqwx3ugbe67g2hfjdnbwjd7euad.onion/
[==================================================]
        F i n a n c i a l   S e r v i c e s
[==================================================]
-------------------------
    Bitcoin Mixers
-------------------------
Helix Light: http://mixerrzbgcknjzk4.onion/
Smart Mixer: http://smrtmxdxognxhv64.onion/
Onion Wallet: http://ow24et3tetp6tvmk.onion/
-------------------------
      Credit Cards
-------------------------
Bitcards: http://bitccsaxbrxb6iiv.onion/
EasyCards: http://hlpg5p2rc3uou7wr.onion/
Hidden Financial Services: http://morhx3irxknskwu5.onion/
Stack Of DW: http://stacvvulbayktqlf.onion/
La Casa De Papel: http://vljrafgxx4gjozn5.onion/
-------------------------
     Cryptocurrency
-------------------------
AgoraDesk: http://agoradeska6jfxpf.onion/
We Buy Bitcoins: http://jzn5w5pac26sqef4.onion/
[==================================================]
       C o m m e r c i a l   S e r v i c e s
[==================================================]
-------------------------
      Electronics
-------------------------
Z33Shop: http://2wkwv7m4hetvqo3d.onion/
Apples 4 Bitcoin: http://tfwdi3izigxllure.onion/
Mobile Store: http://mobil7rab6nuf7vx.onion/
-------------------------
     Miscellaneous
-------------------------
Resell Shop: http://g2rvhyzcapyxswgu.onion/
[==================================================]
   N o n - C o m m e r c i a l   S e r v i c e s
[==================================================]
-------------------------
         Email
-------------------------
ProtonMail: http://protonirockerxow.onion/
SecMail: http://secmailw453j7piv.onion/
SecMail: http://giyzk7o6dcunb2ry.onion/
EludeMail: http://eludemaillhqfkh5.onion/
Dark Net Mail Exchange: http://hxuzjtocnzvv5g2rtg2bhwkcbupmk7rclb6lly3fo4tvqkk5oyrv3nid.onion/
RiseUp: http://zsolxunfmbfuq7wf.onion/
CockMail: http://cockmailwwfvrtqj.onion/
Daniel's Email Hosting: http://danielas3rtn54uwmofdo3x2bsdifr47huasnmbgqzfrec5ubupvtpid.onion/
Mail2Tor: http://mail2tor2zyjdctd.onion/
TorBox: http://torbox3uiot6wchz.onion/
Underwood's Mail: http://underwood2hj3pwd.onion/
OnionMail: http://p6x47b547s2fkmj3.onion/
GuerrillaMail: http://grrmailb3fxpjbwm.onion/
-------------------------
        Hosting
-------------------------
SporeStak: http://spore64i5sofqlfz5gq2ju4msgzojjwifls7rok2cti624zyq3fcelad.onion/
Albative Hosting: http://hzwjmjimhr7bdmfv2doll4upibt5ojjmpo3pbp5ctwcg37n3hyk7qzid.onion/
Prometheus: http://prometh5th5t5rfd.onion/
Freedom Hosting Reloaded: http://fhostingineiwjg6cppciac2bemu42nwsupvvisihnczinok362qfrqd.onion/
TorVPS: http://torvps7kzis5ujfz.onion/
OneHost: http://q3lgwxinynjxkor6wghr6hrhlix7fquja3t25phbagqizkpju36fwdyd.onion/
Kowloon Hosting: http://kowloon5aibdbege.onion/
RealHost: http://ezuwnhj5j6mtk4xr.onion/
TorPress: http://torpress2sarn7xw.onion/
0xacab: http://wmj5kiic7b6kjplpbvwadnht2nh2qnkbnqtcv3dyvpqtz7ssbssftxid.onion/
-------------------------
      File Hosting
-------------------------
SecureDrop: http://secrdrop5wyphb5x.onion/
Matrix Image Hosting: http://matrixtxri745dfw.onion/
Image Hosting: http://twlba5j7oo5g4kj5.onion/
PopFiles: http://popfilesxuru7lsr.onion/
FileDropper: http://dropperibhaerr2m.onion/
BlackCloud: http://bcloud2suoza3ybr.onion/
Just Upload Stuff: http://jusfileobjorolmq.onion/
Crypto Uploader: http://cryptoupei2am6si.onion/
CryptoFile: http://ec7yptcpai4dtebe.onion/
Felixxx: http://felixxxboni3mk4a.onion/
ZeroBin: http://zerobinqmdqd236y.onion/
OnionPaste: http://pastmo4ixjkacqqv.onion/
DeepPaste: http://depastedihrn3jtw.onion/
Tor Pastebin: http://postits4tga4cqts.onion/
The Pirate Bay: http://piratebayztemzmv.onion/
The Pirate Bay: http://piratebaymbf3ul7.onion/
Torrent Galaxy: http://galaxy2gchufcb3z.onion/
Torrent Paradise: http://r5n26fdanb4i522h.onion/
IPA Hosting: http://ipahostyyez3loer.onion/
Intel Repository: http://intel5vmppiwc4u6l5bisfdv7sazzlacrqcuze4wxqdavd5kltxru7qd.onion/
Intel Exchange: http://intelex7ny6coqno.onion/
Anodex: http://anodex.oniichanylo2tsi4.onion/
Free Stuff: http://zodiaczgi6edcl6nc22ylrlzavwmfqhzol4kyejos3lkn4bmum5ux3id.onion/
-------------------------
   Security & Privacy
-------------------------
PrivacyTools: http://privacy2zbidut4m4jyj3ksdqidzkw3uoip2vhvhbvwxbqux5xy5obyd.onion/
Debain Security Team: http://ynvs3km32u33agwq.onion/
GNUPG: http://ic6au7wa3f6naxjq.onion/
Whonix OS: http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/
Qubes OS: http://qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/
ExpressVPN: http://expressobutiolem.onion/
MullvadVPN: http://xcln5hkbriyklr6n.onion/
Private Internet Access: http://piavpnaymodqeuza.onion/
Keybase: http://keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion/
Keybase: http://fncuwbiisyh6ak3i.onion/
Sonar: http://kcxb2moqaw76xrhv.onion/
Stem: http://vt5hknv6sblkgf22.onion/
Universal Encoding Tool: http://usegafl7jdygvjcm5velj4mopbcdlxtxeob2xi5hcskm5w46chxipoqd.onion/
AspireCrypt: http://j36f2zfz7v3neai7.onion/
PrivacyBox: http://2h3xkc7wmxthijqb.onion/
ServNet: http://servnetshsztndci.onion/
Anonymous FTP Client: http://wtutoxfznz45gf6c.onion/
CGI Proxy: http://x5yd2gfthlfgdqjg.onion/
-------------------------
          Music
-------------------------
Deep Web Radio: http://76qugh5bey5gum7l.onion/
HFS: http://wuvdsbmbwyjzsgei.onion/
Black Jesus: http://niggervteelq47id.onion/
Used2Now: http://used2now7fin3qse.onion/
Stream: http://streamtmr46ysxw6.onion/
-------------------------
      Multipurpose
-------------------------
Volatile: http://vola7ileiax4ueow.onion/
Kaizushi's Little Onion Service: http://kaizushih5iec2mxohpvbt5uaapqdnbluaasa2cmsrrjtwrbx46cnaid.onion/
The Kingdom Of God: http://xt6zo6bcjbrrjyvr.onion/
-------------------------
     Miscellaneous
-------------------------
Simple Bookmarks: http://afajj7x4zfl2d3fc2u7uzxp4iwf4r2kucr5on24xk2hwrssoj7yivhid.onion/
AdHook: http://adhook6u2wrwdhlb.onion/
OnionThumbs: http://othumbs53mh65hxc.onion/
4Chan Archives: http://ydt6jy2ng3s3xg2e.onion/
4Chan Archives: http://oweeh6jcqx3aoey2.onion/
Debain Package Tracker: http://2qlvvvnhqyda2ahd.onion/
[==================================================]
                    S o c i a l
[==================================================]
-------------------------
        Networks
-------------------------
Dread: http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/
Facebook: http://facebookcorewwwi.onion/
Connect: http://connectkjsazkwud.onion/
Galaxy3: http://galaxy3m2mn5iqtn.onion/
Nitter: http://3nzoldnxplag42gqjs23xvghtzf6t6yzssrtytnntc6ppc7xxuoneoad.onion/
Raddle: http://lfbg75wjgi4nzdio.onion/
OnionTube: http://tubef7zilcjhme2g.onion/
Cave Tor: http://cavetord6bosm3sl.onion/
Dark Quora: http://quorambidnvcon7l.onion/
Bibliogram: http://rlp5gt4d7dtkok3yaogocbcvrs2tdligjrxipsamztjq4wwpxzjeuxqd.onion/
Invidious: http://kgg2m7yk5aybusll.onion/
The Permanent Booru: http://vsdfdtkr5mh6y33p.onion/
The Permanent Booru: http://owmvhpxyisu6fgd7r2fcswgavs7jly4znldaey33utadwmgbbp4pysad.onion/
-------------------------
         Forums
-------------------------
Kiwi Farms: http://uquusqsaaad66cvub4473csdu4uu7ahxou3zqc35fpw5d4ificedzyqd.onion/
Torum: http://torum43tajnrxritn4iumy75giwb5yfw6cjq2czjikhtcac67tfif2yd.onion/
Onionland: http://onionlandbakyt3j.onion/
Darknet Avengers: http://avengersdutyk3xf.onion/
Hidden Answers: http://answerszuvs3gg2l64e6hmnryudl5zgrmwm3vh65hzszdghblddvfiqd.onion/
Envoy: http://envoys5appps3bin.onion/
Hermes: http://hermesibuzda3rtv.onion/
SuprBay: http://suprbayoubiexnmp.onion/
HM: http://wtj5psom5zufu4yo.onion/
AnonGTS: http://ocu3errhpxppmwpr.onion/
NZ Darknet Market: http://nz53a6eqr3jchq5g.onion/
The Hub: http://thehub7xbw4dc5r2.onion/
The Hub: http://thehubpkeu7x6ddq5tc4gali6ldsi4ly6bqlhsid7pztwhbirahu6vqd.onion/
The Hub: http://thehub5himseelprs44xzgfrb4obgujkqwy5tzbsh5yttebqhaau23yd.onion/
The Hub: http://thehubdpfbw54ujdgwdhvgsaicvtc5jz4ncthfcbriny2dzsimlifoqd.onion/
The Hub: http://thehube5dbng3dwww4fhbiihruloenvh66536cot3wrpc4hvhm2bdayd.onion/
The Hub: http://thehubeebh6z6pqdy4wmxdd6d45gmchjm3xe5sdppadna7m3qtmksmid.onion/
The Hub: http://thehuboy27kracz6sdql2r7c324vrs5aok2e33gorrikccaqhvzfcvad.onion/
Thunder's Place: http://thundersplv36ecb.onion/
-------------------------
          Chat
-------------------------
Chat With Strangers: http://tetatl6umgbmtv27.onion/
Ableonion: http://notbumpz34bgbz4yfdigxvd6vzwtxc3zpt5imukgl6bvip2nikdmdaad.onion/
Hidden Chat: http://hiddendsw3qqh2if.onion/
EvilChat: http://evilchatxp24s7vb.onion/
Daniel's Chat: http://danschat356lctri3zavzh6fbxg2a7lo6z3etgkctzzpspewu7zdsaqd.onion/
BlackHat Chat: http://blkh4ylofapg42tj6ht565klld5i42dhjtysvsnnswte4xt4uvnfj5qd.onion/
Enforcer's Chat: http://pkgdherwvzn5qjzb6ypygmsyl2xrkbvznisjv675bly4dcbjznstdxid.onion/chat.php
Torichat: http://hss33mlbykbsxmug.onion:1488/
-------------------------
          Chans
-------------------------
9chan: http://ninechnjd5aaxfbcsszlbr4inp7qjsficep4hiffh4jbzovpt2ok3cad.onion/
16chan: http://47s7obvdgdpj6fkc.onion/
EndChan: http://s6424n4x4bsmqs27.onion/
EndChan: http://enxx3byspwsdo446jujc52ucy2pf5urdbhqw3kbsfhlfjwmbpj5smdad.onion/
Ni-Chan: http://nichank62kpkrxvg.onion/
Ni-Chan: http://bp4hx2biztixaw5o.onion/
TorChan: http://zw3crggtadila2sg.onion/imageboard/
BalkanChan: http://26yukmkrhmhfg6alc56oexe7bcrokv4rilwpfwgh2u6bsbkddu55h4ad.onion/
JulayWorld: http://bhlnasxdkbaoxf4gtpbhavref7l2j3bwooes77hqcacxztkindztzrad.onion/
Waifuist: http://waifuwyuu7fqlf2haidb3izomxyhxme2mk4kdlibdiwgmzelt2iorxyd.onion/
LoliFox: http://wn3ghyuon5eaqyxi7yauald3d53gsxrkanzpu2qdyc54vobif2qutsid.onion/
Smug Loli: http://bhm5koavobq353j54qichcvzr6uhtri6x4bjjy4xkybgvxkzuslzcqid.onion/
-------------------------
          IRC
-------------------------
OnionCommunity: http://communpfaucdnxei.onion/
OnionCommunity: http://chatobbpwe37uhar.onion/
Infantile: http://infantilefb6ovh4.onion/
-------------------------
          Blogs
-------------------------
The Asocial: http://asocialfz7ncw5ui.onion/
Go Beyond: http://potatoynwcg34xyodol6p6hvi5e4xelxdeowsl5t2daxywepub32y7yd.onion/
You Broke The Internet: http://cheettyiapsyciew.onion/
Superkuh: http://superkuhbitj6tul.onion/
Onion Soup: http://soupksx6vqh3ydda.onion/
Chown: http://y3jzukyhsjymr4dp.onion/
Bluish Coder: http://mh7mkfvezts5j6yu.onion/
Cyrus's Blog: http://cyruservvvklto2l.onion/
Lion Meadow: http://liongrasr5uy5roo.onion/
Untitled Blog: http://n3ip6btaskerrbyg.onion/
MagusNet: http://tghtnwsywvvhromy.onion/
MagusNet: http://wx3wmh767azjjl4v.onion/
MagusNet: http://q2uftrjiuegl4ped.onion/
MagusNet: http://3mrdrr2gas45q6hp.onion/
-------------------------
   Political Movements
-------------------------
Crypto Party: http://crypty22ijtotell.onion/
Crypto Party: http://cpartywvpihlabsy.onion/
Code Green: http://pyl7a4ccwgpxm6rd.onion/
Anarplex: http://anarplexqtbch57j.onion/
-------------------------
      Conventions
-------------------------
InfoCon: http://w27irt6ldaydjoacyovepuzlethuoypazhhbot6tljuywy52emetn7qd.onion/
DeepSec: http://kwv7z64xyiva22fw.onion/
[==================================================]
                      N e w s
[==================================================]
The New York Times: http://nytimes3xbfgragh.onion/
BBC: http://bbcnewsv2vjtpsuy.onion/
BBC: http://s5rhoqqosmcispfb.onion/
ProPublica: http://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/
BuzzFeed: http://bfnews3u2ox4m4ty.onion/
Mascherari Press: http://7tm2lzezyjwtpn2s.onion/
The Onion Web: http://onionwsoiu53xre32jwve7euacadvhprq2jytfttb55hrbo3execodad.onion/
Tape: http://tapeucwutvne7l5o.onion/
Darknet Live: http://darkzzx4avcsuofgfez5zq75cqc4mprjvfqywo45dfcaxrwqg6qrlfid.onion/
Flashlight: http://kxojy6ygju4h6lwn.onion/
Tor Magazine: http://t4tyrhxbxb2c2wra.onion/
Dark Web Link: http://dwlonion3o3pjqsl.onion/
The Dark Web Journal: http://tdwj7xgc5s2k6bmv.onion/
DNMLive: http://dnmliveahwgu7nvu.onion/
Dimension X: http://uo57sqpw4h3g3y3w2j346vxidgcv2iwfaxeyt3ww3tzkj2i5k7a5tpqd.onion/
Deep Web Feed: http://deepfeedingbliob.onion/
Onion News: http://newsiiwanaduqpre.onion/
Onion News: http://t4is3dhdc2jd4yhw.onion/
Soylent News: http://7rmath4ro2of2a42.onion/
S.Dock: http://yip2pklv6nivtzrq.onion/
[==================================================]
             M i s c e l l a n e o u s
[==================================================]
-------------------------
          Books
-------------------------
Imperial Library Of Trantor: http://xfmro77i3lixucja.onion/
Calibre Web: https://5h5ps743nnqsjq4l.onion/
Dark Books Library: http://hoagnooxlabpxd4ieqtn6pblk4324evslb24gmjktjbhzdmxst5trrad.onion/
Thomas Paine - Common Sense: http://duskgytldkxiuqc6.onion/comsense.html
The Federalist Papers: http://duskgytldkxiuqc6.onion/fedpapers/federa00.htm
-------------------------
         Hacking
-------------------------
0Day Today: http://mvfjfugdwgc5uwho.onion/
HackTown: http://hacktownpagdenbb.onion/
Hack Tools: http://5yh4qmygx72tl65u.onion/
Hackerplace: http://hackerw6dcplg3ej.onion/
Bugged Planet: http://6sgjmi53igmg7fm7.onion/
VertexNet: http://mb4z3nlfyrcjnoqf.onion/
Hacking Guides: http://3pr5shyfw6exyc2kboea5xi5guj5mf5enwy5pgcfwoycolawuw6lhzid.onion/
Hacking Library: http://putahwusckamzvezhq3a4y3ewdhln6qfimlmx3gdbuhxvia4uloyvkad.onion/
-------------------------
         Games
-------------------------
Euro Buk Simulator 2014: http://hg5km4y37lgir6r3.onion/
Matrix: http://matrix4ozv2gicar.onion/
-------------------------
      Uncategorized
-------------------------
IIT Underground: http://62gs2n5ydnyffzfy.onion/
Beneath Virginia Tech: http://74ypjqjwf6oejmax.onion/
Psychonaut Wiki: http://psychonaut3z5aoz.onion/
PopFur: http://vj5pbopejlhcbz4n.onion/
How Will You Tell The World: http://rjzdqt4z3z3xo73h.onion/
[==================================================]
    O t h e r   O n i o n   L i n k   L i s t s
[==================================================]
List Of Onion Services: https://www.wikiwand.com/en/List_of_Tor_onion_services
Dark Web Secrets: https://secretsdeepweb.blogspot.com/
Best Dark Web Links 2020: https://bestdeepweb.com/deepweb-links-2020
Dark Web Links: https://deep-weblinks.com/deep-web-links/
Huge Collection Of Dark Web Links: https://haxf4rall.com/2017/11/12/deep-web-onion-links/
100 Working Dark Web Links: https://haxf4rall.com/2016/11/06/100-working-deep-web-onion-and-dark-web-links/
Dark Web Sites: https://web.archive.org/web/20161120201931/http://deepwebsites.net/
100 Working Dark Web Links: https://cybarrior.com/blog/2019/04/30/100-working-deep-web-onion-and-dark-web-links/
Compilation Of Onion Links (2015): https://pastebin.com/JfmSVf6e
3000 Onion Links: https://pastebin.com/L2HiViHf
Deep Web Links: https://deepweblinks.org/

Onion Links

Onion Links


Disclaimer

I only provide information about what exists on the dark web as informative/educational purposes only. I have listed many onion links that are still up and running with a legitimate purpose.

Few onion links might be a scam, phishing, or contain illegal activities like drugs, weapons, illegal markets, fraudulent services, stolen data, etc., and many more. These activities may involve you at risk in danger by unknowingly. Kindly be aware of such activities which may take you and put yourself under risk.

I am not involved in any practices like described above and if you wish to surf the dark web you are the only solely responsible for your activity. Any misleads or dealing with illegal markets accessed by you will end up in a bad situation.

Know your risk before opening any onion links, if you the link is legal then you can enjoy surfing and know more about the dark web or else learn about dark web before accessing it. Use a good VPN to stay away from danger and your risk factor will be very less.

Just download the Tor Browser from its original page; https://www.torproject.org

This product is made independently of Tor® anonymity software and makes no warranties about quality, suitability, or anything else from the Tor Project.

Onion Links V3

Chat

Email

Forums/Chans

Search Engine

Library

Wiki/İndex/Blogs/News

Upload/File/Data Remover

https://darkweblink.com http://dwltorbltw3tdjskxn23j2mwz2f4q25j4ninl5bdvttiy4xb6cqzikid.onion/

Ming Di Leoms Blog

https://xw226dvxac7jzcpsf4xb64r4epr6o5hgn46dxlqk7gnjptakik6xnzqd.onion/

riseup

http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion/

STRYKER POPPOOB

http://vfdvqflzfgwnejh6rrzjnuxvbnpgjr4ursv4moombwyauot5c2z6ebid.onion/

keysopenpgporg

http://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion/

Everest Ransomware Group

http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/

systemli org

http://7sk2kov2xwx6cbc32phynrifegg6pklmzs7luwcggtzrnlsolxxuyfyd.onion/

MARSEILLE INFOS AUTONOMES


Sigsum

https://er3n3jnvoyj2t37yngvzr35b6f4ch5mgzl3i6qlkvyhzmaxo62nlqmqd.onion/

mastodon

http://fbbtyosausdfn3ogl66spqj5prnu3tscokaijcimd3hwszoe5hc4r4yd.onion/

FLASHLIGHT

http://ovgl57qc3a5abwqgdhdtssvmydr6f6mjz6ey23thwy63pmbxqmi45iid.onion/

Find Your Onion

http://fyonionq6mktpre6ustimnlqxbl5g757khnbgpyxt46lxx7umcy6ptid.onion/

RAMBLE

http://rambleeeqrhty6s5jgefdfdtc6tfgg4jj6svr4jpgk4wjtg3qshwbaad.onion/

Secret-Chat

http://mute36pglo7mp5efzry5buqvn7dzlzhdbbksy7le3mz4ii4v6aganwid.onion/

Internet Killers

http://killerord6ztyuaav3s4xp6i4halek3dxxvboscgej57my5nl2fp2kqd.onion/

Mail2Tor

http://mail2torjgmxgexntbrmhvgluavhj7ouul5yar6ylbvjkxwqf6ixkwyd.onion/

Email Anonim

http://anonimjjzzccjgmxgowzgbp3eocjljdxz2lban7ozwmdrudopezvugqd.onion

DNMX email

http://hxuzjtocnzvv5g2rtg2bhwkcbupmk7rclb6lly3fo4tvqkk5oyrv3nid.onion/

Dark Army Hacking Group

http://darkarmy5dhdw5jbml2mitgpaorzdiubxxiq5tdzsqidz55kygsrz7id.onion/

TARD ZONE

http://retardidy7pvg5pu3vrum4lhc6w57ioeaudftc735xtgjlkse7elqnqd.onion/

HeLL Forum

http://hell2ker5i3xsy6szrl2pulaqo3jhcz6pt7ffdxtuqjqiycvmlkcddqd.onion/

DarkWebBusiness

http://n2etofsu3q5cg6da44jzvaawiap7s3ougtuu4mmrahgizqgio3a4ssqd.onion/

PhotoDark

http://photodakj4vrljvu55bf6s7acpdbzvtvxpkd65gp6jbhquhbsvebodqd.onion/

Foxdick Chan

http://rcuhe6pk7mbmsjk7bwyja5etvjhjvzmc724rnf3piamemvawoi44z7qd.onion/

Radio Free Asia

https://rfaorg4ob4vj6n45djaaxkkxye4wiwimucbkvzvdsvwf3ebw2ale77yd.onion

Hidden Corner

http://hidcorktriskdf6rz7xsgobe77a6mekyfjmc3byg5cpwvge32i5iqvad.onion/

Holy Bible Aionian Edition

http://sy3tqe5tvukyk35kbqx4v3xjj5jxkrvrcdno4c4neg5kymz3zb5avzqd.onion/

The Stock Insiders

http://thestock6nonb74owd6utzh4vld3xsf2n2fwxpwywjgq7maj47mvwmid.onion/

Blender Dumbass

http://ttauyzmy4kbm5yxpujpnahy7uxwnb32hh3dja7uda64vefpkomf3s4yd.onion/

DigDeeper

http://us63bgjkxwpyrpvsqom6kw3jcy2yujbplkhtzt64yykt42ne2ms7p4yd.onion/

http://bbng47x4sdy3fralpblqcvgmzmlljah72vys6ip2wtzu6wnorggartyd.onion/

BoysLand 2

http://ygx5ek4op42ljsxcbg6jsx4k255eggn3cj65z5xkf4iei5frwvvkr6yd.onion/

Third Eye

http://ncc3uu62rc4oacmlfkkxetwn3lgkgq7f65lkg6uedsl7xvbyaljiiead.onion/

0shi

http://5ety7tpkim5me6eszuwcje7bmy25pbtrjtue7zkqqgziljwqy3rrikqd.onion/

remote ip

http://bru56n3gn4gqbkgs4gf2b6i2lgz4emw67kzneamfvinbm3qf4fza7vad.onion/

Cucumber

http://nrud2lfujxlaw4wk2w5bllngqalmnui5rzktqklvvjd6rwek5yhhydqd.onion/

Hidden Violence

http://ao5zixnmkaydkt3rkxuvi5g6knyywreiu7lpqjv3hpjt7g2z675pzsid.onion/

HD wiki

http://dizqjnlw2wo7j3fu7j745izzkpeaalxulypuwobpuiev3ut24hga6qad.onion/

0ut3r Space

http://reycdxyc24gf7jrnwutzdn3smmweizedy7uojsa7ols6sflwu25ijoyd.onion/

voaturk

https://www.voaturkqgmfs6ufdxthgkboec6fsadctaacqceksiji25r4id2xdl2ad.onion/

S Config

http://xjfbpuj56rdazx4iolylxplbvyft2onuerjeimlcqwaihp3s6r4xebqd.onion

ZeroBin

http://zerobinftagjpeeebbvyzjcqyjpmjvynj5qlexwyxe7l3vqejxnqv5qd.onion

Onni Forums

http://onnii6niq53gv3rvjpi7z5axkasurk2x5w5lwliep4qyeb2azagxn4qd.onion/

http://onnimu5istptashw65gzzwu7lmqnelbffdcmrufm52h327he6te4ysqd.onion/

http://onnin36kbcwchiacwjhl57m7wylygmulmlazpfg3qupucgjgq7blldid.onion/

http://envoyyvazgz2wbkq65md7dcqsgmujmgksowhx2446yep7tgnpfvlxbqd.onion/

Codex Onion İndex

https://codexygpw5vdngnjflqlznr65ltfl7r3pxswphbzl6yywn3l7ew5nkqd.onion

Russian Community

http://commudazrdyhbullltfdy222krfjhoqzizks5ejmocpft3ijtxq5khqd.onion/

suprbay

http://suprbaydvdcaynfo4dgdzgxb4zuso7rftlil5yg5kqjefnw4wq4ulcad.onion/

ni chan

http://plnemlsyla6h5t3nuoz2algzmy635ceuendnjwsmhwn2os5fxahshiad.onion/

Germania Forum

http://germania7zs27fu3gi76wlr5rd64cc2yjexyzvrbm4jufk7pibrpizad.onion/

CYBERCARDERS

http://hqvv7qwjs72kh65qsmwj3ifwtdgewiiiip62rkvmaq6q7zhhqrta2wid.onion/

ransomexx2

http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/

DARK LEAK MARKET

http://4eqjmxcalg5wel3p2wko4mewy3dxhkp2epsgtr4ds5ufxvu4rzv6hbqd.onion/

Imperial Library

http://kx5thpx2olielkihfyo4jgjqfb7zx7wxr3sd4xzt26ochei4m6f7tayd.onion/

MAT2

http://liqr2cbsjzxmpw6savgh274tuzl34x6cd56h7m7ceatnrokveffm66ad.onion/

rss bridge

http://kf5waqrpn3vlk3fw7hs7fvy2uaa5snvtrnpss7lfbypb3ag2u7fuqoyd.onion/

DEEPEST DARKEST SECRETS

http://txxt.anonblogd4pcarck2ff6qlseyawjljaatp6wjq6rqpet2wfuoom42kyd.onion/

Daniel Winzen Site

https://danielas3rtn54uwmofdo3x2bsdifr47huasnmbgqzfrec5ubupvtpid.onion

Black Cloud

http://bcloudwenjxgcxjh6uheyt72a5isimzgg4kv5u74jb2s22y3hzpwh6id.onion/

nitterqwikspace

http://qwikxx2erhx6qrymued6ox2qkf2yeogjwypqvzoif4fqkljixasr6oid.onion/

educate

http://educate6mw6luxyre24uq3ebyfmwguhpurx7ann635llidinfvzmi3yd.onion/

CL0PLEAKS

http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/

Satoshi Box

http://satoshinrwezrmas2f2epg2mhlm4nefnl5fbbkatml3yhffyzq2ayyad.onion/

BreachForums

http://breachedu76kdyavc6szj6ppbplfqoz3pgrk3zw57my4vybgblpfeayd.onion/

OnionWallet

http://zwf5i7hiwmffq2bl7euedg6y5ydzze3ljiyrjmm7o42vhe7ni56fm7qd.onion/

Personality Demo

http://gsyorszxsxt57kwa5hnmqvgqu22en6rgif37uormbu6nafdxja62p5qd.onion/

TOR66

http://tor66sewebgixwhcqfnp5inzp5x5uohhdy3kvtnyfxc2e5mxiuh34iid.onion/

Tortorgo

http://tortorgohr62yxcizqpcpvwxupivwepkzl24cwkt4nnnkflvg7qraayd.onion/

File sharing

http://filesharehk7dfa4dcomiw36ycq54koe57cgwksksq3p7kxim4fozyid.onion/

InfoCon

http://w27irt6ldaydjoacyovepuzlethuoypazhhbot6tljuywy52emetn7qd.onion/

DEFCON

http://g7ejphhubv5idbbu3hb3wawrs5adw7tkx7yjabnf65xtzztgg4hcsqqd.onion/

Brains Club

http://briansclcfyc5oe34hgxnn3akr4hzshy3edpwxsilvbsojp2gwxr57qd.onion

Marxists Internet Archive

http://marxists3va6eopxoeiegih3iyex2zg3tmace7afbxjqlabmranzjjad.onion/

NO TO CHINA

http://tirxscsg3pcenlff67ecn2kb3jfv3ori7bgwryyn7btktohfdkms2cyd.onion/

Secret HIDDED Group

http://devilqyh54mkpin4s2hpqsxowj3ogorolaoigh4kepawyi5njsuvc6qd.onion/

MadIRC

http://wbi67emmdx6i6rcr6nnk3hco3nrvdc2juxrbvomvt6nze5afjz6pgtad.onion/

Ableonion

http://notbumpz34bgbz4yfdigxvd6vzwtxc3zpt5imukgl6bvip2nikdmdaad.onion/

Cracking Island

http://cisland46psf56panbm2japxoxeguqekmataim54kn2ysucnk3yo7eyd.onion/

The Secret Story Archive

http://tssa3yo5xfkcn4razcnmdhw5uxshx6zwzngwizpyf7phvea3gccrqbad.onion/

True Tube 54

http://trutube54vqa3baer2kc7aggfc5qstxkgcmzm4qxxzfaxdsihu3znzid.onion/

Created4Health

http://f7rkl2pb2uwyyrw3mgaxstwig3nhpl25fhjdvoultpn4j56n3vkbgkad.onion/

Tor Specifications

http://i3xi5qxvbrngh3g6o7czwjfxwjzigook7zxzjmgwg5b7xnjcn5hzciad.onion/

Level C

http://conet72gphb3524hwjshszuogongo5yzmgcdw7342rulwpuezzc3gzyd.onion/

Data Leak DAIXIN Team

http://7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion/

AnonLeaks Drop Whistleblower Plattform

http://3w63t4tdhijukufciaefkzjpgt7tjejbnubwckxvtdeuhesbgarc5vqd.onion

AnonLeaks Fileshare

http://lu4aakwcq2b5dgqufc464fireyxvjb7o2rcwmojtjwuxlmwcyi345gyd.onion/

leaklook

http://leaklook7mhf6yfp6oyoyoe6rk7gmpuv2wdk5hgwhtu2ym5f4zvit7yd.onion

Leaked Password Database

http://breachdbsztfykg2fdaq2gnqnxfsbj5d35byz3yzj73hazydk4vq72qd.onion/

Based Cooking

http://wpzzhvw6q32pneau3rzsa5h7tzl7fgswya3cgtmu5rpesd725bii3cad.onion/

The Cavern

http://vpocsdxjwaodp73xm65pscydeidt3uap2lftcuuhxpznjigtuzx5pqad.onion/

SPYGAME

http://spygame5awoookfmfhda7jfqimwyfxicjkn3wc4v3oozyno7sqv2axid.onion/

Beyond the Styx

http://o455kwz35ukwqp5zpqa3fs4vi44mhyeliiadpgjb4ele2qlyucjxtrid.onion

Weird Wild Web

http://6hn4h63uroy22hbt5wn4e2a7ob2kfq6obwwgfxysgicwtukqiqrhzeyd.onion

http://5n4qdkw2wavc55peppyrelmb2rgsx7ohcb2tkxhub2gyfurxulfyd3id.onion

Babuk - Leaks site

http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/

knowledge

http://owlzyj4to3l5daq6edgsgp5z4lh4tzlnms4z6jv6xdtkily77j4b3byd.onion/beginner-guides/

XSS

http://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion

Dark [Dot] Direct

http://dddirectinfv3htc4vl6mied5lpaatora7mmqkcf3sfjrx37fajigmyd.onion/

Image Hosting

http://uoxqi4lrfqztugili7zzgygibs4xstehf5hohtkpyqcoyryweypzkwid.onion/

Bisq Wiki

http://s3p666he6q6djb6u3ekjdkmoyd77w63zq6gqf6sde54yg6bdfqukz2qd.onion

DankRabb1t Chat

http://drc5nsfrndvr4zro5tpz3iwk5omrwpszq75upbxrmkfkpny5yrt4gfyd.onion/

THEEND

http://theendgtso35ir6ngdtyhgtjhhbbprmkzl74gt5nyeu3ocr34sfa67yd.onion/

RABBIT HOLE (Kiwi IRC)

http://34vnln24rlakgbk6gpityvljieayyw7q4bhdbbgs6zp2v5nbh345zgad.onion/

FRENSCHAN

http://u2ljln34n55et3xp2wiewybvwr74p4rmcsf2zrravtqj3turtbyjd4id.onion/

Refuge Forum

http://refuge3noitqegmmjericvur54ihyj7tsfyfwdblitaeaqu2koi7iuqd.onion

Endchan

http://enxx3byspwsdo446jujc52ucy2pf5urdbhqw3kbsfhlfjwmbpj5smdad.onion/

Invidious

http://ng27owmagn5amdm7l5s3rsqxwscl5ynppnis5dqcasogkyxcfqn7psid.onion/

Ahmia

http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/

Z-Library

http://loginzlib2vrak5zzpcocc3ouizykn6k5qecgj2tzlnab5wcbqhembyd.onion/

Just Another Library

http://libraryfyuybp7oyidyya3ah5xvwgyx6weauoini7zyz555litmmumad.onion/

HIDDEN BITCOIN WIKI

http://4wqk5mz57fgtwfgpevj3e6ri42o4ln3qoyzcqtipvrdah7qalnhxwkqd.onion/

TOR SCAM LIST

http://jt3it42syepkpcplixdxcnv2vz53cpk27lek2pptqlgrnqyb7cuqojqd.onion

8chan

http://4usoivrpy52lmc4mgn2h34cmfiltslesthr56yttv2pxudd3dapqciyd.onion/

Dread

http://g66ol3eb5ujdckzqqfmjsbpdjufmjd5nsgdipvxmsh7rckzlhywlzlqd.onion/

Darkfail

http://darkfailenbsdla5mal2mxn2uz66od5vtzd5qozslagrfzachha3f3id.onion/

Shadow Wiki

http://zsxjtsgzborzdllyp64c6pwnjz5eic76bsksbxzqefzogwcydnkjy3yd.onion/

http://s4k4ceiapwwgcm3mkb6e4diqecpo7kvdnfr5gg7sph7jjppqkvwwqtyd.onion/

Shadow Forum

http://w4ljqtyjnxinknz4hszn4bsof7zhfy5z2h4srfss4vvkoikiwz36o3id.onion/

TorrentGalaxy

http://galaxy3yrfbwlwo72q3v2wlyjinqr2vejgpkxb22ll5pcpuaxlnqjiid.onion/

DarkNetLive

http://darknetlidvrsli6iso7my54rjayjursyw637aypb6qambkoepmyq2yd.onion/

HiddenAnswers

http://7eoz4h2nvw4zlr7gvlbutinqqpm546f5egswax54az6lt2u7e3t6d7yd.onion/

DeepAnswers

http://deepa2kol4ur4wkzpmjf5rf7lvsflzisslnrnr2n7goaebav4j6w7zyd.onion/

DarkForest

http://dkforestseeaaq2dqz2uflmlsybvnq2irzn4ygyvu53oazyorednviid.onion/

Breaking Bad

http://bbzzzsvqcrqtki6umym6itiixfhni37ybtt7mkbjyxn2pgllzxf2qgyd.onion/

Genesis

http://dydaofm5uefuulnzb63uh6coodgbxlgndk4eosoopbekebttkdxshlyd.onion

MonopolyMarket

http://n7arfmj2ycewhreuctme5yrm2qjxrcguwhtvbgyv3qsgsjckafl6wjyd.onion

Hidden Wiki

http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_Page

AnonBlogs

http://anonblogd4pcarck2ff6qlseyawjljaatp6wjq6rqpet2wfuoom42kyd.onion/

OnionMail

http://pflujznptk5lmuf6xwadfqy6nffykdvahfbljh7liljailjbxrgvhfid.onion/

Zlibrary Articles

http://articles24t2d47kb6rbabobokvrnymh2smkleosntcu6qxou6sxewyd.onion

ProtonMail

http://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion

BlackHatChat

http://blkhatjxlrvc5aevqzz5t6kxldayog6jlx5h7glnu44euzongl4fh5ad.onion

Site TOR URL
Facebook facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion
Twitter twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion
Reddit reddittorjg6rue252oqsxryoxengawnmo46qy4kyii5wtqnwfj4ooad.onion
Breaking Bad Forum bbzzzsvqcrqtki6umym6itiixfhni37ybtt7mkbjyxn2pgllzxf2qgyd.onion
DuckDuckGo duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
Pro Publica p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion
Hidden wiki wikiv2z7bogl633j4ok2fs3a3ht5f45gpjtiasmqwuxacclxek4u47qd.onion

Commercial TOR markets

Site URL in TOR (OnionV3 Link)
Horizon CARDS cards7ndxk4fuctkgwmeq46gx6bhzt57sg4l2nbwa2p3vjnvq4trhkad.onion
Chemi5 chemi5wtn2hs27wlwgaosi663wswrutofqzhvrjb2ogtxpb42gezebqd.onion
GiftTo(r) giftto33ep564ztvpc6652xt4vkupphghcvtxqwpxi6gq5k2fmjd4zid.onion
Apple World applbwku7dfadkfkumiojsbxekuiafpr44idl7bxb2xll6neykvx35id.onion
MoneYUU moneyuu7hga6jpcfbamefsjwkv3bez3b3hkczpfzjb5zneunpqdh2uyd.onion
Paypal World payplb3mm5bdkns6v7xou7xeefcl5bqedofcpnd462rw4gm4xbbwfpad.onion
Kingz Service kingz3mfshjqfij3pkjq2fkknjqb6dhdvctmfc6bnstla7ms6vjyjgid.onion
E M P I R E empirebhczt2s4yprurhtqvkvnt6rvxqlaxfyniqec643vird7gi7cid.onion
Account Store accountmwyiilytqztx6s45k5a6ud57x3gzmtumljheym5lqwelapaid.onion
Hackerpass hackeoyrzjy3ob4cdr2q56bgp7cpatruphcxvgbfsiw6zeqcc36e4ryd.onion
NVIDIA Parts market nvidialkagnt37uon4hnwkz7xruhlpipeaz6j6zlugqf4mlpdfp6hgqd.onion
WeedX weeeedxejprore6lprzg5xwgkujwi27yk6vdj2qtizxoxm7dqe52vaid.onion

Email Providers (Tor Hidden Service)

Provider Tor Link
Dark Net Mail eXchange dnmxjaitaiafwmss2lx7tbs5bv66l7vjdmb5mtb3yqpxqhk3it5zivad.onion
ProtonMail protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
TorMail tormailpout6wplxlrkkhjj2ra7bmqaij5iptdmhhnnep3r6f27m2yid.onion
TorBox torbox36ijlcevujx7mjb4oiusvwgvmue7jfn2cvutwa6kl6to3uyqad.onion
Site Dark web link
Blockchair block explorer blkchairbknpn73cfjhevhla7rkp4ed5gg2knctvv7it4lioy22defid.onion
Wasabi wallet wasabiukrxmkdgve5kynjztuovbg43uxcbcxn6y2okcrsg7gb6jdmbad.onion
Mempool.space mempoolhqx4isw62xs7abwphsq7ldayuidyx2v2oethdhhj6mlo2r6ad.onion
Monero Official monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion

FREE DATA

  • Data.gov Home - Data.gov data.gov data.gov

  • Schema.org - Schema.org

Schema.org is a set of extensible schemas that enables webmasters to embed structured data on their web pages for use by search engines and other applications. schema.org schema.org

  • The World Factbook - The World Factbook

CIA’s World Factbook is your authoritative source on the world’s countries, territories, oceans, and more. Explore world facts at your fingertips. www.cia.gov www.cia.gov

  • Data.gov Home - Data.gov

data.gov data.gov

  • data.worldbank.org

World Bank Open Data Free and open access to global development data data.worldbank.org data.worldbank.org

  • datahub.io

DataHub - a complete solution for Open Data Platforms, Data Catalogs, Data Lakes and Data Management. DataHub is an open source, mature, fully-featured and production ready. Trusted by governments, startups, nonprofits and the Fortune 500. datahub.io datahub.io

OSINt

Everything about Open-Source Intelligence TTPs.

Subsections of OSINT

Android Sec

Android Security

A collection of Android security-related resources.

Tools

Online Analyzers

Static Analysis Tools

  • Androwarn - detect and warn the user about potential malicious behaviors developed by an Android application.
  • ApkAnalyser
  • APKInspector
  • Droid Intent Data Flow Analysis for Information Leakage
  • DroidLegacy
  • FlowDroid
  • Android Decompiler – not free
  • PSCout - A tool that extracts the permission specification from the Android OS source code using static analysis
  • Amandroid
  • SmaliSCA - Smali Static Code Analysis
  • CFGScanDroid - Scans and compares CFG against CFG of malicious applications
  • Madrolyzer - extracts actionable data like C&C, phone number etc.
  • SPARTA - verifies (proves) that an app satisfies an information-flow security policy; built on the Checker Framework
  • ConDroid - Performs a combination of symbolic + concrete execution of the app
  • DroidRA
  • RiskInDroid - A tool for calculating the risk of Android apps based on their permissions, with an online demo available.
  • SUPER - Secure, Unified, Powerful and Extensible Rust Android Analyzer
  • ClassyShark - Standalone binary inspection tool which can browse any Android executable and show important info.
  • StaCoAn - Cross-platform tool which aids developers, bug-bounty hunters, and ethical hackers in performing static code analysis on mobile applications. This tool was created with a big focus on usability and graphical guidance in the user interface.
  • JAADAS - Joint intraprocedural and interprocedural program analysis tool to find vulnerabilities in Android apps, built on Soot and Scala
  • Quark-Engine - An Obfuscation-Neglect Android Malware Scoring System
  • One Step Decompiler - Android APK Decompilation for the Lazy
  • APKLeaks - Scanning APK file for URIs, endpoints & secrets.
  • Mobile Audit - Web application for performing Static Analysis and detecting malware in Android APKs.
  • Smali CFG generator
  • Several tools from PSU

App Vulnerability Scanners

  • QARK - QARK by LinkedIn is for app developers to scan apps for security issues
  • AndroBugs
  • Nogotofail
  • Devknox - IDE plugin to build secure Android apps. Not maintained anymore.

Dynamic Analysis Tools

  • Android DBI frameowork
  • Androl4b- A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
  • House- House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
  • Mobile-Security-Framework MobSF - Mobile Security Framework is an intelligent, all-in-one open-source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
  • AppUse – custom build for penetration testing
  • Droidbox
  • Drozer
  • Xposed - equivalent of doing Stub-based code injection but without any modifications to the binary
  • Inspeckage - Android Package Inspector - dynamic analysis with API hooks, start unexported activities, and more. (Xposed Module)
  • Android Hooker - Dynamic Java code instrumentation (requires the Substrate Framework)
  • ProbeDroid - Dynamic Java code instrumentation
  • DECAF - Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
  • CuckooDroid - Android extension for Cuckoo sandbox
  • Mem - Memory analysis of Android (root required)
  • Crowdroid – unable to find the actual tool
  • AuditdAndroid – android port of auditd, not under active development anymore
  • Android Security Evaluation Framework - not under active development anymore
  • Aurasium – Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor.
  • Android Linux Kernel modules
  • Appie - Appie is a software package that has been pre-configured to function as an Android Pentesting Environment. It is completely portable and can be carried on a USB stick or smartphone. This is a one-stop answer for all the tools needed in Android Application Security Assessment and an awesome alternative to existing virtual machines.
  • StaDynA - a system supporting security app analysis in the presence of dynamic code update features (dynamic class loading and reflection). This tool combines static and dynamic analysis of Android applications in order to reveal the hidden/updated behavior and extend static analysis results with this information.
  • DroidAnalytics - incomplete
  • Vezir Project - Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
  • MARA - Mobile Application Reverse Engineering and Analysis Framework
  • Taintdroid - requires AOSP compilation
  • ARTist - a flexible open-source instrumentation and hybrid analysis framework for Android apps and Android’s Java middleware. It is based on the Android Runtime’s (ART) compiler and modifies code during on-device compilation.
  • Android Malware Sandbox
  • AndroPyTool - a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android app analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard, or VirusTotal analysis.
  • Runtime Mobile Security (RMS) - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
  • PAPIMonitor – PAPIMonitor (Python API Monitor for Android apps) is a Python tool based on Frida for monitoring user-select APIs during the app execution.
  • Android_application_analyzer - The tool is used to analyze the content of the Android application in local storage.
  • Decompiler.com - Online APK and Java decompiler
  • Android Tamer - Virtual / Live Platform for Android Security Professionals
  • Android Malware Analysis Toolkit - (Linux distro) Earlier it use to be an online analyzer
  • Android Reverse Engineering – ARE (android reverse engineering) not under active development anymore
  • ViaLab Community Edition
  • Mercury
  • Cobradroid – custom image for malware analysis

Reverse Engineering

Fuzz Testing

App Repackaging Detectors

  • FSquaDRA - a tool for the detection of repackaged Android applications based on app resources hash comparison.

Market Crawlers

Misc Tools

Vulnerable Applications for practice

Academic/Research/Publications/Books

Research Papers

Books

Others

Exploits/Vulnerabilities/Bugs

List

Malware

Bounty Programs

How to report Security issues

App Sec

AppSec

A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes.

Maintained by Paragon Initiative Enterprises with contributions from the application security and developer communities. We also have other community projects which might be useful for tomorrow’s application security experts.

If you are an absolute beginner to the topic of software security, you may benefit from reading A Gentle Introduction to Application Security.

Application Security Learning Resources

General

Articles

How to Safely Generate a Random Number (2014)

Released: February 25, 2014

Advice on cryptographically secure pseudo-random number generators.

Salted Password Hashing - Doing it Right (2014)

Released: August 6, 2014

A post on Crackstation, a project by Defuse Security

A good idea with bad usage: /dev/urandom (2014)

Released: May 3, 2014

Mentions many ways to make /dev/urandom fail on Linux/BSD.

Why Invest in Application Security? (2015)

Released: June 21, 2015

Running a business requires being cost-conscious and minimizing unnecessary spending. The benefits of ensuring in the security of your application are invisible to most companies, so often times they neglect to invest in secure software development as a cost-saving measure. What these companies don’t realize is the potential cost (both financial and to brand reputation) a preventable data compromise can incur.

The average data breach costs millions of dollars in damage.

Investing more time and personnel to develop secure software is, for most companies, worth it to minimize this unnecessary risk to their bottom line.

Be wary of one-time pads and other crypto unicorns (2015)

Released: March 25, 2015

A *must-read- for anyone looking to build their own cryptography features.

Books

Web Application Hacker’s Handbook (2011)

Released: September 27, 2011

Great introduction to Web Application Security; though slightly dated.

Cryptography Engineering (2010)

Released: March 15, 2010

Develops a sense of professional paranoia while presenting crypto design techniques.

Securing DevOps (2018)

Released: March 1, 2018

Securing DevOps explores how the techniques of DevOps and Security should be applied together to make cloud services safer. This introductory book reviews state of the art practices used in securing web applications and their infrastructure, and teaches you techniques to integrate security directly into your product.

Gray Hat Python: Programming for Hackers and Reverse Engineers (2009)

Released: May 3, 2009

The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities (2006)

Released: November 30, 2006

C Interfaces and Implementations: Techniques for Creating Reusable Software (1996)

Released: August 30, 1996

Reversing: Secrets of Reverse Engineering (2005)

Released: April 15, 2005

JavaScript: The Good parts (2008)

Released: May 1, 2008

Windows Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition (2007)

Released: June 17, 2007

The Mac Hacker’s Handbook (2009)

Released: March 3, 2009

Released: August 22, 2008

Internetworking with TCP/IP Vol. II: ANSI C Version: Design, Implementation, and Internals (3rd Edition) (1998)

Released: June 25, 1998

Network Algorithmics,: An Interdisciplinary Approach to Designing Fast Networked Devices (2004)

Released: December 29, 2004

Computation Structures (MIT Electrical Engineering and Computer Science) (1989)

Released: December 13, 1989

Surreptitious Software: Obfuscation, Watermarking, and Tamperproofing for Software Protection (2009)

Released: August 3, 2009

Secure Programming HOWTO (2015)

Released: March 1, 2015

Security Engineering - Second Edition (2008)

Released: April 14, 2008

Bulletproof SSL and TLS (2014)

Released: August 1, 2014

Holistic Info-Sec for Web Developers (Fascicle 0) (2016)

Released: September 17, 2016

The first part of a three part book series providing broad and in-depth coverage on what web developers and architects need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises.

Holistic Info-Sec for Web Developers (Fascicle 1)

The second part of a three part book series providing broad and in-depth coverage on what web developers and architects need to know in order to create robust, reliable, maintainable and secure software, VPS, networks, cloud and web applications, that are delivered continuously, on time, with no nasty surprises.

Classes

Offensive Computer Security (CIS 4930) FSU

A vulnerability research and exploit development class by Owen Redwood of Florida State University.

Be sure to check out the lectures!

Hack Night

Developed from the materials of NYU Poly’s old Penetration Testing and Vulnerability Analysis course, Hack Night is a sobering introduction to offensive security. A lot of complex technical content is covered very quickly as students are introduced to a wide variety of complex and immersive topics over thirteen weeks.

Websites

Hack This Site!

Learn about application security by attempting to hack this website.

Enigma Group

Where hackers and security experts come to train.

Web App Sec Quiz

Self-assessment quiz for web application security

SecurePasswords.info

Secure passwords in several languages/frameworks.

Security News Feeds Cheat-Sheet

A list of security news sources.

Open Security Training

Video courses on low-level x86 programming, hacking, and forensics.

MicroCorruption

Capture The Flag - Learn Assembly and Embedded Device Security

The Matasano Crypto Challenges

A series of programming exercises for teaching oneself cryptography by Matasano Security. The introduction by Maciej Ceglowski explains it well.

PentesterLab

PentesterLab provides free Hands-On exercises and a bootcamp to get started.

Juice Shop

An intentionally insecure Javascript Web Application.

Supercar Showdown

How to go on the offence before online attackers do.

OWASP NodeGoat

Purposly vulnerable to the OWASP Top 10 Node.JS web application, with tutorials, security regression testing with the OWASP Zap API, docker image. With several options to get up and running fast.

Securing The Stack

Bi-Weekly Appsec Tutorials

OWASP ServerlessGoat

OWASP ServerlessGoat is a deliberately insecure realistic AWS Lambda serverless application, maintained by OWASP and created by PureSec. You can install WebGoat, learn about the vulnerabilities, how to exploit them, and how to remediate each issue. The project also includes documentation explaining the issues and how they should be remediated with best-practices.

Blogs

Crypto Fails

Showcasing bad cryptography

NCC Group - Blog

The blog of NCC Group, formerly Matasano, iSEC Partners, and NGS Secure.

Scott Helme

Learn about security and performance.

Cossack Labs blog (2018)

Released: July 30, 2018

Blog of cryptographic company that makes open-source libraries and tools, and describes practical data security approaches for applications and infrastructures.

Wiki pages

OWASP Top Ten Project

The top ten most common and critical security vulnerabilities found in web applications.

Tools

Qualys SSL Labs

The infamous suite of SSL and TLS tools.

securityheaders.io

Quickly and easily assess the security of your HTTP response headers.

report-uri.io

A free CSP and HPKP reporting service.

clickjacker.io

Test and learn Clickjacking. Make clickjacking PoC, take screenshot and share link. You can test HTTPS, HTTP, intranet & internal sites.

AWS Lambda

Tools

PureSec FunctionShield

FunctionShield is a 100% free AWS Lambda security and Google Cloud Functions security library that equips developers with the ability to easily enforce strict security controls on serverless runtimes.

Android

Books and ebooks

SEI CERT Android Secure Coding Standard (2015)

Released: February 24, 2015

A community-maintained Wiki detailing secure coding standards for Android development.

C

Books and ebooks

SEI CERT C Coding Standard (2006)

Released: May 24, 2006

A community-maintained Wiki detailing secure coding standards for C programming.

Defensive Coding: A Guide to Improving Software Security by the Fedora Security Team (2022)

Released: May 23, 2022

Provides guidelines for improving software security through secure coding. Covers common programming languages and libraries, and focuses on concrete recommendations.

C++

Books and ebooks

SEI CERT C++ Coding Standard (2006)

Released: July 18, 2006

A community-maintained Wiki detailing secure coding standards for C++ programming.

C Sharp

Books and ebooks

Security Driven .NET (2015)

Released: July 14, 2015

An introduction to developing secure applications targeting version 4.5 of the .NET Framework, specifically covering cryptography and security engineering topics.

Clojure

Repositories

Clojure OWASP (2020)

Released: May 5, 2020

Repository with Clojure examples of OWASP top 10 vulnerabilities.

Go

Articles

Memory Security in Go - spacetime.dev (2017)

Released: August 3, 2017

A guide to managing sensitive data in memory.

Java

Books and ebooks

SEI CERT Java Coding Standard (2007)

Released: January 12, 2007

A community-maintained Wiki detailing secure coding standards for Java programming.

Secure Coding Guidelines for Java SE (2014)

Released: April 2, 2014

Secure Java programming guidelines straight from Oracle.

Node.js

Articles

Node.js Security Checklist - Rising Stack Blog (2015)

Released: October 13, 2015

Covers a lot of useful information for developing secure Node.js applications.

Awesome Electron.js hacking & pentesting resources (2020)

Released: June 17, 2020

A curated list of resources to secure Electron.js-based applications.

Books and ebooks

Essential Node.js Security (2017)

Released: July 19, 2017

Hands-on and abundant with source code for a practical guide to Securing Node.js web applications.

Training

Security Training by ^Lift Security

Learn from the team that spearheaded the Node Security Project

Security Training from BinaryMist

We run many types of info-sec security training, covering Physical, People, VPS, Networs, Cloud, Web Applications. Most of the content is sourced from the book series Kim has been working on for several years. More info can be found here

PHP

Articles

It’s All About Time (2014)

Released: November 28, 2014

A gentle introduction to timing attacks in PHP applications

Secure Authentication in PHP with Long-Term Persistence (2015)

Released: April 21, 2015

Discusses password policies, password storage, “remember me” cookies, and account recovery.

20 Point List For Preventing Cross-Site Scripting In PHP (2013)

Released: April 22, 2013

Padriac Brady’s advice on building software that isn’t vulnerable to XSS

25 PHP Security Best Practices For Sys Admins (2011)

Released: November 23, 2011

Though this article is a few years old, much of its advice is still relevant as we veer around the corner towards PHP 7.

PHP data encryption primer (2014)

Released: June 16, 2014

@timoh6 explains implementing data encryption in PHP

Preventing SQL Injection in PHP Applications - the Easy and Definitive Guide (2014)

Released: May 26, 2014

*TL;DR- - don’t escape, use prepared statements instead!

You Wouldn’t Base64 a Password - Cryptography Decoded (2015)

Released: August 7, 2015

A human-readable overview of commonly misused cryptography terms and fundamental concepts, with example code in PHP.

If you’re confused about cryptography terms, start here.

A Guide to Secure Data Encryption in PHP Applications (2015)

Released: August 2, 2015

Discusses the importance of end-to-end network-layer encryption (HTTPS) as well as secure encryption for data at rest, then introduces the specific cryptography tools that developers should use for specific use cases, whether they use libsodium, Defuse Security’s secure PHP encryption library, or OpenSSL.

The 2018 Guide to Building Secure PHP Software (2017)

Released: December 12, 2017

This guide should serve as a complement to the e-book, PHP: The Right Way, with a strong emphasis on security and not general PHP programmer topics (e.g. code style).

Books and ebooks

Securing PHP: Core Concepts

*Securing PHP: Core Concepts- acts as a guide to some of the most common security terms and provides some examples of them in every day PHP.

Using Libsodium in PHP Projects

You shouldn’t need a Ph.D in Applied Cryptography to build a secure web application. Enter libsodium, which allows developers to develop fast, secure, and reliable applications without needing to know what a stream cipher even is.

Useful libraries

defuse/php-encryption

Symmetric-key encryption library for PHP applications. (*Recommended- over rolling your own!)

ircmaxell/password_compat

If you’re using PHP 5.3.7+ or 5.4, use this to hash passwords

ircmaxell/RandomLib

Useful for generating random strings or numbers

thephpleague/oauth2-server

A secure OAuth2 server implementation

paragonie/random_compat

PHP 7 offers a new set of CSPRNG functions: random_bytes() and random_int(). This is a community effort to expose the same API in PHP 5 projects (forward compatibility layer). Permissively MIT licensed.

psecio/gatekeeper

A secure authentication and authorization library that implements Role-Based Access Controls and Paragon Initiative Enterprises’ recommendaitons for secure “remember me” checkboxes.

openwall/phpass

A portable public domain password hashing framework for use in PHP applications.

Websites

websec.io

*websec.io- is dedicated to educating developers about security with topics relating to general security fundamentals, emerging technologies and PHP-specific information

Blogs

Paragon Initiative Enterprises Blog

The blog of our technology and security consulting firm based in Orlando, FL

ircmaxell’s blog

A blog about PHP, Security, Performance and general web application development.

Pádraic Brady’s Blog

Pádraic Brady is a Zend Framework security expert

Mailing lists

Securing PHP Weekly

A weekly newsletter about PHP, security, and the community.

Perl

Books and ebooks

SEI CERT Perl Coding Standard (2011)

Released: January 10, 2011

A community-maintained Wiki detailing secure coding standards for Perl programming.

Python

Books and ebooks

Python chapter of Fedora Defensive Coding Guide

Lists standard library features that should be avoided, and references sections of other chapters that are Python-specific.

Black Hat Python: Python Programming for Hackers and Pentesters

Black Hat Python by Justin Seitz from NoStarch Press is a great book for the offensive security minds

Violent Python

Violent Python shows you how to move from a theoretical understanding of offensive computing concepts to a practical implementation.

Websites

OWASP Python Security Wiki (2014)

Books and ebooks

Secure Ruby Development Guide (2014)

Capture The Flag

Capture The Flag

A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place. It takes time to build up collection of tools used in CTF and remember them all. This repo helps to keep all these scattered tools at one place.

Contents

Create

Tools used for creating CTF challenges

Forensics

Tools used for creating Forensics challenges

Platforms

Projects that can be used to host a CTF

  • CTFd - Platform to host jeopardy style CTFs from ISISLab, NYU Tandon.
  • echoCTF.RED - Develop, deploy and maintain your own CTF infrastructure.
  • FBCTF - Platform to host Capture the Flag competitions from Facebook.
  • Haaukins- A Highly Accessible and Automated Virtualization Platform for Security Education.
  • HackTheArch - CTF scoring platform.
  • Mellivora - A CTF engine written in PHP.
  • MotherFucking-CTF - Badass lightweight plaform to host CTFs. No JS involved.
  • NightShade - A simple security CTF framework.
  • OpenCTF - CTF in a box. Minimal setup required.
  • PicoCTF - The platform used to run picoCTF. A great framework to host any CTF.
  • PyChallFactory - Small framework to create/manage/package jeopardy CTF challenges.
  • RootTheBox - A Game of Hackers (CTF Scoreboard & Game Manager).
  • Scorebot - Platform for CTFs by Legitbs (Defcon).
  • SecGen - Security Scenario Generator. Creates randomly vulnerable virtual machines.

Steganography

Tools used to create stego challenges

Check solve section for steganography.

Web

Tools used for creating Web challenges

JavaScript Obfustcators

Solve

Tools used for solving CTF challenges

Attacks

Tools used for performing various kinds of attacks

  • Bettercap - Framework to perform MITM (Man in the Middle) attacks.
  • Yersinia - Attack various protocols on layer 2.

Crypto

Tools used for solving Crypto challenges

  • CyberChef - Web app for analysing and decoding data.
  • FeatherDuster - An automated, modular cryptanalysis tool.
  • Hash Extender - A utility tool for performing hash length extension attacks.
  • padding-oracle-attacker - A CLI tool to execute padding oracle attacks.
  • PkCrack - A tool for Breaking PkZip-encryption.
  • QuipQuip - An online tool for breaking substitution ciphers or vigenere ciphers (without key).
  • RSACTFTool - A tool for recovering RSA private key with various attack.
  • RSATool - Generate private key with knowledge of p and q.
  • XORTool - A tool to analyze multi-byte xor cipher.

Bruteforcers

Tools used for various kind of bruteforcing (passwords etc.)

  • Hashcat - Password Cracker
  • Hydra - A parallelized login cracker which supports numerous protocols to attack
  • John The Jumbo - Community enhanced version of John the Ripper.
  • John The Ripper - Password Cracker.
  • Nozzlr - Nozzlr is a bruteforce framework, trully modular and script-friendly.
  • Ophcrack - Windows password cracker based on rainbow tables.
  • Patator - Patator is a multi-purpose brute-forcer, with a modular design.
  • Turbo Intruder - Burp Suite extension for sending large numbers of HTTP requests

Exploits

Tools used for solving Exploits challenges

  • DLLInjector - Inject dlls in processes.
  • libformatstr - Simplify format string exploitation.
  • Metasploit - Penetration testing software.
  • one_gadget - A tool to find the one gadget execve('/bin/sh', NULL, NULL) call.
    • gem install one_gadget
  • Pwntools - CTF Framework for writing exploits.
  • Qira - QEMU Interactive Runtime Analyser.
  • ROP Gadget - Framework for ROP exploitation.
  • V0lt - Security CTF Toolkit.

Forensics

Tools used for solving Forensics challenges

  • Aircrack-Ng - Crack 802.11 WEP and WPA-PSK keys.
    • apt-get install aircrack-ng
  • Audacity - Analyze sound files (mp3, m4a, whatever).
    • apt-get install audacity
  • Bkhive and Samdump2 - Dump SYSTEM and SAM files.
    • apt-get install samdump2 bkhive
  • CFF Explorer - PE Editor.
  • Creddump - Dump windows credentials.
  • DVCS Ripper - Rips web accessible (distributed) version control systems.
  • Exif Tool - Read, write and edit file metadata.
  • Extundelete - Used for recovering lost data from mountable images.
  • Fibratus - Tool for exploration and tracing of the Windows kernel.
  • Foremost - Extract particular kind of files using headers.
    • apt-get install foremost
  • Fsck.ext4 - Used to fix corrupt filesystems.
  • Malzilla - Malware hunting tool.
  • NetworkMiner - Network Forensic Analysis Tool.
  • PDF Streams Inflater - Find and extract zlib files compressed in PDF files.
  • Pngcheck - Verifies the integrity of PNG and dump all of the chunk-level information in human-readable form.
    • apt-get install pngcheck
  • ResourcesExtract - Extract various filetypes from exes.
  • Shellbags - Investigate NT_USER.dat files.
  • Snow - A Whitespace Steganography Tool.
  • USBRip - Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux.
  • Volatility - To investigate memory dumps.
  • Wireshark - Used to analyze pcap or pcapng files

Registry Viewers

  • OfflineRegistryView - Simple tool for Windows that allows you to read offline Registry files from external drive and view the desired Registry key in .reg file format.
  • Registry Viewer® - Used to view Windows registries.

Networking

Tools used for solving Networking challenges

  • Masscan - Mass IP port scanner, TCP port scanner.
  • Monit - A linux tool to check a host on the network (and other non-network activities).
  • Nipe - Nipe is a script to make Tor Network your default gateway.
  • Nmap - An open source utility for network discovery and security auditing.
  • Wireshark - Analyze the network dumps.
    • apt-get install wireshark
  • Zeek - An open-source network security monitor.
  • Zmap - An open-source network scanner.

Reversing

Tools used for solving Reversing challenges

  • Androguard - Reverse engineer Android applications.
  • Angr - platform-agnostic binary analysis framework.
  • Apk2Gold - Yet another Android decompiler.
  • ApkTool - Android Decompiler.
  • Barf - Binary Analysis and Reverse engineering Framework.
  • Binary Ninja - Binary analysis framework.
  • BinUtils - Collection of binary tools.
  • BinWalk - Analyze, reverse engineer, and extract firmware images.
  • Boomerang - Decompile x86/SPARC/PowerPC/ST-20 binaries to C.
  • ctf_import – run basic functions from stripped binaries cross platform.
  • cwe_checker - cwe_checker finds vulnerable patterns in binary executables.
  • demovfuscator - A work-in-progress deobfuscator for movfuscated binaries.
  • Frida - Dynamic Code Injection.
  • GDB - The GNU project debugger.
  • GEF - GDB plugin.
  • Ghidra - Open Source suite of reverse engineering tools. Similar to IDA Pro.
  • Hopper - Reverse engineering tool (disassembler) for OSX and Linux.
  • IDA Pro - Most used Reversing software.
  • Jadx - Decompile Android files.
  • Java Decompilers - An online decompiler for Java and Android APKs.
  • Krakatau - Java decompiler and disassembler.
  • Objection - Runtime Mobile Exploration.
  • PEDA - GDB plugin (only python2.7).
  • Pin - A dynamic binary instrumentaion tool by Intel.
  • PINCE - GDB front-end/reverse engineering tool, focused on game-hacking and automation.
  • PinCTF - A tool which uses intel pin for Side Channel Analysis.
  • Plasma - An interactive disassembler for x86/ARM/MIPS which can generate indented pseudo-code with colored syntax.
  • Pwndbg - A GDB plugin that provides a suite of utilities to hack around GDB easily.
  • radare2 - A portable reversing framework.
  • Triton - Dynamic Binary Analysis (DBA) framework.
  • Uncompyle - Decompile Python 2.7 binaries (.pyc).
  • WinDbg - Windows debugger distributed by Microsoft.
  • Xocopy - Program that can copy executables with execute, but no read permission.
  • Z3 - A theorem prover from Microsoft Research.

JavaScript Deobfuscators

  • Detox - A Javascript malware analysis tool.
  • Revelo - Analyze obfuscated Javascript code.

SWF Analyzers

  • RABCDAsm - Collection of utilities including an ActionScript 3 assembler/disassembler.
  • Swftools - Collection of utilities to work with SWF files.
  • Xxxswf - A Python script for analyzing Flash files.

Services

Various kind of useful services available around the internet

  • CSWSH - Cross-Site WebSocket Hijacking Tester.
  • Request Bin - Lets you inspect http requests to a particular url.

Steganography

Tools used for solving Steganography challenges

  • AperiSolve - Aperi’Solve is a platform which performs layer analysis on image (open-source).
  • Convert - Convert images b/w formats and apply filters.
  • Exif - Shows EXIF information in JPEG files.
  • Exiftool - Read and write meta information in files.
  • Exiv2 - Image metadata manipulation tool.
  • Image Steganography - Embeds text and files in images with optional encryption. Easy-to-use UI.
  • Image Steganography Online - This is a client-side Javascript tool to steganographically hide images inside the lower “bits” of other images
  • ImageMagick - Tool for manipulating images.
  • Outguess - Universal steganographic tool.
  • Pngtools - For various analysis related to PNGs.
    • apt-get install pngtools
  • SmartDeblur - Used to deblur and fix defocused images.
  • Steganabara - Tool for stegano analysis written in Java.
  • SteganographyOnline - Online steganography encoder and decoder.
  • Stegbreak - Launches brute-force dictionary attacks on JPG image.
  • StegCracker - Steganography brute-force utility to uncover hidden data inside files.
  • stegextract - Detect hidden files and text in images.
  • Steghide - Hide data in various kind of images.
  • StegOnline - Conduct a wide range of image steganography operations, such as concealing/revealing files hidden within bits (open-source).
  • Stegsolve - Apply various steganography techniques to images.
  • Zsteg - PNG/BMP analysis.

Web

Tools used for solving Web challenges

  • BurpSuite - A graphical tool to testing website security.
  • Commix - Automated All-in-One OS Command Injection and Exploitation Tool.
  • Hackbar - Firefox addon for easy web exploitation.
  • OWASP ZAP - Intercepting proxy to replay, debug, and fuzz HTTP requests and responses
  • Postman - Add on for chrome for debugging network requests.
  • Raccoon - A high performance offensive security tool for reconnaissance and vulnerability scanning.
  • SQLMap - Automatic SQL injection and database takeover tool. pip install sqlmap
  • W3af - Web Application Attack and Audit Framework.
  • XSSer - Automated XSS testor.

Resources

Where to discover about CTF

Operating Systems

Penetration testing and security lab Operating Systems

Malware analysts and reverse-engineering

Starter Packs

Collections of installer scripts, useful tools

  • CTF Tools - Collection of setup scripts to install various security research tools.
  • LazyKali - A 2016 refresh of LazyKali which simplifies install of tools and configuration.

Tutorials

Tutorials to learn how to play CTFs

Wargames

Always online CTFs

  • Backdoor - Security Platform by SDSLabs.
  • Crackmes - Reverse Engineering Challenges.
  • CryptoHack - Fun cryptography challenges.
  • echoCTF.RED - Online CTF with a variety of targets to attack.
  • Exploit Exercises - Variety of VMs to learn variety of computer security issues.
  • Exploit.Education - Variety of VMs to learn variety of computer security issues.
  • Gracker - Binary challenges having a slow learning curve, and write-ups for each level.
  • Hack The Box - Weekly CTFs for all types of security enthusiasts.
  • Hack This Site - Training ground for hackers.
  • Hacker101 - CTF from HackerOne
  • Hacking-Lab - Ethical hacking, computer network and security challenge platform.
  • Hone Your Ninja Skills - Web challenges starting from basic ones.
  • IO - Wargame for binary challenges.
  • Microcorruption - Embedded security CTF.
  • Over The Wire - Wargame maintained by OvertheWire Community.
  • PentesterLab - Variety of VM and online challenges (paid).
  • PicoCTF - All year round ctf game. Questions from the yearly picoCTF competition.
  • PWN Challenge - Binary Exploitation Wargame.
  • Pwnable.kr - Pwn Game.
  • Pwnable.tw - Binary wargame.
  • Pwnable.xyz - Binary Exploitation Wargame.
  • Reversin.kr - Reversing challenge.
  • Ringzer0Team - Ringzer0 Team Online CTF.
  • Root-Me - Hacking and Information Security learning platform.
  • ROP Wargames - ROP Wargames.
  • SANS HHC - Challenges with a holiday theme released annually and maintained by SANS.
  • SmashTheStack - A variety of wargames maintained by the SmashTheStack Community.
  • Viblo CTF - Various amazing CTF challenges, in many different categories. Has both Practice mode and Contest mode.
  • VulnHub - VM-based for practical in digital security, computer application & network administration.
  • W3Challs - A penetration testing training platform, which offers various computer challenges, in various categories.
  • WebHacking - Hacking challenges for web.

Self-hosted CTFs

Websites

Various general websites about and on CTF

Wikis

Various Wikis available for learning about CTFs

Writeups Collections

Collections of CTF write-ups

  • 0e85dc6eaf - Write-ups for CTF challenges by 0e85dc6eaf
  • Captf - Dumped CTF challenges and materials by psifertex.
  • CTF write-ups (community) - CTF challenges + write-ups archive maintained by the community.
  • CTFTime Scrapper - Scraps all writeup from CTF Time and organize which to read first.
  • HackThisSite - CTF write-ups repo maintained by HackThisSite team.
  • Mzfr - CTF competition write-ups by mzfr
  • pwntools writeups - A collection of CTF write-ups all using pwntools.
  • SababaSec - A collection of CTF write-ups by the SababaSec team
  • Shell Storm - CTF challenge archive maintained by Jonathan Salwan.
  • Smoke Leet Everyday - CTF write-ups repo maintained by SmokeLeetEveryday team.

OSINT Collections

Index

AIBreaches & LeaksReconProductivityFile UploadToolsetTop Search EnginesWhoisSource CodesDomain / IP / DNSMalwareDatasetGeoIoTDarknetCryptocurrencyUsernameEmailPhoneSocial MediaFacebookTwitterYoutubeInstagramRedditLinkedInGoogleDiscordTwitchTelegramSnapchatTikTokSteamSearch EngineNewsClubhouseBotAnalysisBlogThrowaway ContactID GeneratorEmulatorHash RecoveryDownloaderPrivacy / SecuritySecure CommunicationResourcesThreat IntelIdentity ResolutionPeopleGoogle CSERadioOpen DirectoryMapsData DumpInformantPublic RecordGovernmentImage and Audio

Breaches and Leaks

  • greynoise - Search for IPs, Tags, CVEs, vpn, dns…
  • Dehashed - You can search for your email if its leak in some databases of anything..
  • HaveIbeenPwned? - check if your email address is in a data breach
  • ScamSearch - search to find phone, email, profile if is tobe a scammer.
  • Intelligence X - Intelligence X is a search engine and data archive. · The search works with selectors, i.e. specific search terms such as email addresses, domains, URLs, IPs…
  • spycloud - put your mail in YOUR-MAIL.
  • weleakinfo - We Leak Info - Leaked Dehashed Databases, search for leaks.
  • breachdirectory - CHECK IF YOUR EMAIL OR USERNAME WAS COMPROMISED
  • leakcheck - Find out if your credentials have been compromised

Basic OSINT

Data Leak, scam, username, domain, social

  • Lampyre - Data analysis & osint tool, obtain, visualize and analyze data in one place to see what other’s can’t.
  • OffshoreLeaks - find out who’s behind offshore companies.
  • WorldWide OSINT Map - gather basic info around the world.
  • WhatsMyName - This tool allow to enumerate usernames across many websites.
  • os-surveillance - Gather real-time intelligence from Social media, Cameras, Internet of Things or Crimes and Amber Alerts In addition search for Wifi networks and look for planes, vessels, trains and city traffic
  • Chiasmodon - Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.
  • Tookie-osint - Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
  • dangerzone - Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs
  • COMB - the largest dataset of leaked credentials (emails, usernames, and passwords)

AI

AI tools/Site

  • Decktopus - Create beautiful & professional presentations in just minutes.
  • Monica - Monica is a ChatGPT copilot in Chrome, who can help you: Summarize articles, Translate text, Define words
  • Poised - It’s a personal communication coach that gives real-time feedback to help you speak with more energy, clarity, & confidence.
  • StockimgAI - This AI tool helps you create beautiful images for your brand, such as: Logos, Wallpaper, Book covers.
  • ChatPDF - Upload a PDF and ask it questions. It’s simple, straightforward, and great to learn information from
  • SheetplusAI - Excel & Google spreadsheets are incredibly tedious work. Luckily, this AI tool will write the formulas for you. Sheets+ can save you 80% of your time by translating text into formulas.
  • 10web - Fill out a short questionnaire about your business, and 10Web will build an entire Wordpress website for you.
  • AgentGPT - AutoGPT’s are all the rage right now, and this is among the best ones out there. ive your agent a goal and it’ll autonomously give itself tasks, browse the web, and execute it for you.
  • LonardoAI - Leonardo.ai is a website for a company that offers AI-powered image and video editing tools. The website is designed with a sleek and modern look, featuring a black and white color scheme with pops of orange.
  • Adobe FireFly - A tool from adobe to generate Images from text prompt with added customization.
  • Groq - Fastest LLM Model

⇧ Top

Recon

Tools for Image/Audio/Video/Doc reconnaissance

  • FOCA - Tool to find metadata and hidden information in the documents.
  • FaceCheck - Upload a face of a person of interest and discover their social media profiles, appearances in blogs, video, and news websites.
  • Osmedeus - Osmedeus is a Workflow Engine for Offensive Security. It was designed to build a foundation with the capability and flexibility that allows you to build your own reconnaissance system and run it on a large number of targets.
  • log4j-scan - A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

⇧ Top

PRODUCTIVITY

  • unfurl - Break down url into pieces and find out what each thing do.
  • Wolfram|Alpha - solve mathematical Equations
  • Cryptpad.fr - Flagship instance of CryptPad, the end-to-end encrypted and open-source collaboration suite. Administered by the CryptPad development team.
  • Recontool.org - Recon tools
  • MindMup 2 - Create MindMap online
  • Dotspotter - Discover the tracking dots on a scanned document. Upload an image (600 dpi) of your print out. Dottspotter will try to detect the yellow dot code (MIC)
  • Encrypted Pastebin - Pre-Internet Encryption for Text
  • PrivateBin - PrivateBin is a minimalist, open source online pastebin where the server has zero knowledge of pasted data
  • Bin.disroot.org - same as PrivateBin
  • Framadrop - site closed
  • Pad.riseup.net - Etherpad is a software libre web application that allows for real-time group collaboration of text documents. Riseup does not store IP addresses, we require https, and pads are automatically destroyed after 60 days of inactivity
  • EtherCalc - EtherCalc is a web spreadsheet.
  • Proofread Bot - Proofread Bot gives you unlimited simple punctuation, style and grammar checks. For advanced checks (including plagiarism, comma splices, tenses….)
  • Write.as - Write.as is the easiest way to publish your writing on the web
  • Cryptee - A private home for all your digital belongings
  • dudle - Create Poll
  • Airborn.io - Create encrypted documents
  • ZOOM URL Generator - Create Zoom meeting url
  • Tor2web - Tor is a software project that lets you anonymously browse the Internet. Tor2web is a project to let Internet users access Tor Onion Services without using Tor Browser
  • archive.is - Archive.today is a time capsule for web pages! It takes a ‘snapshot’ of a webpage that will always be online even if the original page disappears
  • Wayback Machine - Internet archive of everything
  • waybackpy - Python package that interfaces with the Internet Archive’s Wayback Machine APIs. Archive pages and retrieve archived pages easily.
  • CachedPages - A cached page is a snapshot or a version of a web page saved at a specific time and stored by a web server as a backup copy.
  • Google Cached Pages of Any Website - The Google Cache Browser for any page on Internet
  • Oldweb.today - see old web browser
  • Unpaywall - Read research papers for free paywall on millions of peer-reviewed journal articles. It’s fast, free, and legal
  • DeepL - DeepL translate
  • Project CSV - view/modify csv files
  • CSV to HTML - convert csv file to html
  • Monaco Editor - Online IDE
  • Online FlowChart Editor - Generation of diagrams like flowcharts or sequence diagrams from text in a similar manner as markdown
  • Markdown Editor - Markdown editor
  • SQL Editor - sql editor
  • SQLite Viewer - drop sqlite file and view content, sqlite viewer
  • OCR Text Extractor - OCR text extractor from png, jpeg, webp and pdf
  • Wetranscriber - A free, simple and efficient transcription platform for individuals or teams
  • Tophonetics.com - This online converter of English text to IPA phonetic transcription will translate your English text into its phonetic transcription using the International Phonetic Alphabet.
  • Google Translate - Google Translator
  • Multi Translate
  • Yandex.Translate - translator from yandex
  • Bing Microsoft Translator - translator from microsoft
  • Reverso - Enjoy cutting-edge AI-powered translation from Reverso in 25+ languages including Arabic, Chinese, Italian, Portuguese, Dutch, Hebrew, Turkish, and Polish
  • Translate -
  • text to speech online - text to speech translator online
  • TTSReader - Read out loud webpages, texts, pdf’s and ebooks with natural sounding voices
  • Online Sequencer - is an online music sequencer. Make tunes in your browser and share them with friends
  • FetchRSS - generate RSS out of anything
  • Sci-hub - the first pirate website in the world to provide mass and public access to tens of millions of research papers
  • Libgen.fun - Free Book site to download
  • Z-lib.org - The world’s largest ebook library
  • PDF Drive - PDF Drive is your search engine for PDF files.
  • arXiv.org - arXiv is a free distribution service and an open-access archive for 2,142,712 scholarly articles in the fields of physics, mathematics, computer science, quantitative biology, quantitative finance, statistics, electrical engineering and systems science, and economics
  • bioRxiv.org - The preprint server for biology
  • Project Gutenberg - Gutenberg is a library of over 60,000 free eBooks
  • Trantor.is - There are 1479512 books on the library.
  • Shadowlibraries.github.io - A Pirate Library Archive
  • Editor.typely.com - Free online proofreading and essay editor

⇧ Top

FILE UPLOAD

  • MEGA - Secure Cloud Storage and Communication Privacy by Design Get 20GB of storage for free.
  • transfer.sh -
  • Upload | Disroot - Lufi - Encrypted temporary file upload service
  • Chibisafe.moe - Blazing fast file uploader. For real A modern and self-hosted file upload service that can handle anything you throw at it
  • Bunker.is -
  • Send - Send lets you share files with end-to-end encryption and a link that automatically expires upload upto 2GB
  • Zz.fo -
  • Upload files to IPFS from Browser - decentralize file shearing
  • BlackHole - BlackHole is a file transfer application built on top of blockchain for the new internet. You can share any super security file with ease and be sure the data is yours forever. You can use BlackHole for free, with no storage or bandwidth limit, but for files bigger than 512 MB

⇧ Top

TOOLSET

  • bgp.tools - BGP.tools is a website that provides a collection of tools and utilities related to the Border Gateway Protocol (BGP), which is the protocol used for routing Internet traffic between autonomous systems (ASes).
  • Seekr - All-In-One OSINT tool with neat web interface
  • CyberChef - Ecode/Decode strings
  • mitaka - A browser extension for OSINT search
  • pywhat - The easiest way to identify anything
  • theHarvester - theHarvester is a very simple, yet effective tool designed to be used in the early stages of a penetration test. Use it for open source intelligence gathering and helping to determine a company’s external threat landscape on the internet. The tool gathers emails, names, subdomains, IPs, and URLs using multiple public data sources
  • Online Tools - A tool to encode,decode,hash,file hash etc.
  • Graphviz Online - create svg graph
  • CodePen - CodePen is a social development environment. At its heart, it allows you to write code in the browser, and see the results of it as you build. A useful and liberating online code editor for developers of any skill, and particularly empowering for people learning to code. We focus primarily on front-end languages like HTML, CSS, JavaScript, and preprocessing syntaxes that turn into those things.
  • Diceware Generator - Diceware is used to generate cryptographically strong passphrases. Don’t let that frighten you away though, a passphrase is just a password made of words you can remember.
  • Checkphish.ai - Free URL scanner to detect phishing and fraudulent sites
  • x86 and x64 Intel Assembler - This tool takes x86 or x64 assembly instructions and converts them to their binary representation (machine code). It can also go the other way, taking a hexadecimal string of machine code and transforming it into a human-readable representation of the instructions. It uses GCC and objdump behind the scenes.
  • Big Number Calculator - Online big number calculator.
  • Text and File Hash Calculator - This page lets you hash ASCII text or a file with many different hash algorithms. Checksums are commonly used to verify the integrety of data. The most common use is to verify that a file has been downloaded without error. The data you enter here is 100% private, neither the data nor hash values are ever recorded.
  • HTML Sanitizer Tool - This tool will take your text and convert all the special characters to their proper HTML codes, so you can paste text with special characters or HTML code onto your website. It has been carefully designed so that the HTML produced by this tool looks and behaves exactly like the original text does in a text editor
  • URL Decoder/Encoder - encode/decode URL in url form.
  • ODA - The Online Disassembler - A lightweight, online service for when you don’t have the time, resources, or requirements to use a heavier-weight alternative. Explore executables by dissecting its sections, strings, symbols, raw hex and machine level instructions.
  • Disasm.pro - A realtime assembler/disassembler (formerly known as disasm.ninja)
  • Fotor - Online image editor remove bg, crop, edit…
  • Decompiler.com - online decompiler for java, apk, lua ….
  • Google Colaboratory - Colab, or “Colaboratory”, allows you to write and execute Python in your browser, with Zero configuration required Access to GPUs free of charge Easy sharing.
  • Compiler Explorer - Run compilers interactively from your web browser and interact with the assembly
  • HTML editor - Online HTML editor
  • Online Color Picker - Online color picker in HSL, Hex code, RGB, HSV
  • Convert text to image file - Generate online free an image from text (words) you supply. Then download your image file or link to it on our system. You can have text up to 500 characters; size (width/height): between 10 and 1500 pixels; format: one of several popular formats - GIF, JPEG or PNG; font: the size of your letters in a range from 6pt to 54pt (6 point to 54 point); colors: the forecolor (color of the letters in your text) and backcolor (background color behind the letters)
  • relational algebra calculator - If you want to learn SQL you take a database system and try some queries. But if you want to learn relational algebra what do you use? Pen and paper? The relational algebra calculator helps you learn relational algebra (RelAlg) by executing it.
  • Data Structure : Infix Postfix Prefix - Converter & Evaluator - This is a simple infix to prefix or postfix Converter.
  • RSA encryption, decryption and prime calculator - RSA encryption, decryption and prime calculator
  • Tools.digitalmethods.net - The Search Engine Scraper allows you to scrape the search results for a given search query, and has as output a list of results the search engine returned for the query
  • Steganography Online - Steganography is a process which can encode message in image. In this site just upload a image then enter a text and hit encode to encode message.
  • Torrent to Magnet - Convert .torrent file to magnet URI’s just drop the file
  • Anonymous YouTube Playlists - A simple tool for generating a YouTube playlist that isn’t tied to an account
  • Vega Editor - create pie, charts and more through your browser
  • DISA Code Template Generator - To purpose of this generator is to quickly create the content for all the separate five files you need to create a template DISA integration. Almost everything can be keyed from a single name: the name of the plugin
  • Canary Tokens -You’ll be familiar with web bugs, the transparent images which track when someone opens an email. They work by embedding a unique URL in a page’s image tag, and monitoring incoming GET requests. Canarytokens helps track activity and actions on your network.
  • explainshell.com - write down a command-line to see the help text that matches each argument
  • ShowTheDocs - showthedocs is a documentation browser that finds the relevant docs for your code. It works by parsing the code and connecting parts of it to their explanation in the docs
  • osint-cli-tool-skeleton - OSINT cli tool skeleton
  • Wifispc.com - Free map of Wi-Fi passwords anywhere you go!
  • Wiman - Seamless connections to millions mobile Free WiFi hotspots.

⇧ Top

THROWAWAY CONTACT/Temporary contact

  • 10minutemail.com - Disposable mail for 10 min.
  • AnonAddy - Anonymous Email Forwarding Create Unlimited Email Aliases For Free and best part Its OpenSource
  • SimpleLogin - Receive and send emails anonymously
  • MailDrop - Save your inbox from spam. Use Maildrop when you don’t want to give out your real address No signup required - Maildrop is free for anyone to use when you need a quick, disposable email address.
  • Send text free - Send text online without worrying about phone bills. Free SMS to hundreds of GSM operators worldwide
  • SendaText - SENDaTEXT allows you to send free text and SMS from your computer or smartphone. All you need to use SENDaTEXT is a standard web browser and internet. You can now send free text online from your computer or smartphone. No need to sign up. No need to make any payment. Send a text now!
  • Free Fax -Send faxes for free to anywhere in the U.S. and Canada Or, Send an International Fax
  • Receive SMS Online - On this site you will find some numbers you can send SMS text messages to and the messages will show up on the web.
  • Receive-sms-now.com -
  • Receive SMS Online - receive sms online
  • Receive SMS Online for FREE - Free SMS Verification Receive SMS Online Verify your SMS received from any place in the World. The messages will show up on the webpage.
  • Smstome.com - Virtual Temporary and Disposable Phone Numbers
  • Amazon SNS - Amazon Simple Notification Service (SNS) sends notifications two ways, A2A and A2P. A2A provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications. These applications include Amazon Simple Queue Service (SQS), Amazon Kinesis Data Firehose, AWS Lambda, and other HTTPS endpoints. A2P functionality lets you send messages to your customers with SMS texts, push notifications, and email. 
  • Twilio - api for sms services

⇧ Top

ID GENERATOR

  • Username Generator - Random username generator tool
  • Fake Name Generator - Randomly Generated Identity
  • Resume Generator - With this AI resume generator, we wanted you to try and see best resumes you can ever think of building. The AI often goes haywire when writing a resume content - both credit and criticism goes to TextgenRNN.
  • International Name Generator - random name generator
  • Windows Phone IMEI Generator - Windows Phone IMEI Generator
  • IMEI Number Generator - fake IMEI number generator
  • US SSN / Driver License / State ID / Passport / Tax ID Generator - US SSN / Driver License (DL) / State ID / Passport / Tax ID Generator
  • Washington State Driver’s License Generator - Washington State Driver’s License Generator
  • Fake Drivers License Generator - Get a false authorized Driver’s License to fool your college friends and gain popularity using the Fake Driver License Generator. Use this tool for legal purposes only until you get an original one
  • This Rental Does Not Exist - Rental Does not Exist
  • Face Photo Generator - random Photo generator
  • Random Face Generator - Want to make your profile more attractive to boost your account reach? Then try our Random Face Generator Tool. It lets you select your favorite image among the variety of options
  • Credit Card Generator - Fake credit card number generator
  • PIC/CIC Code Database - A PIC or CIC code is a 4-digit prefix that identifies a long distance carrier in North America or the Caribbean to a LEC. The LEC uses the code to properly route the call.
  • SIN Generator - Canadian Social Insurance Number (SIN)
  • ABA Generator - ABA/Routing Number Validator
  • VIN Generator - Vehicle Identification Number
  • NINO Generator - UK National Insurance Number (NINO)
  • SSN Generator - US Social Security Number (SSN)
  • IID Generator by Georgy Bunin - Israel ID generator and validator
  • GUID/UUID and short GUID generator - GUID/UUID and short GUID generator
  • Nano ID CC - Nano ID is a library for generating random IDs. Likewise UUID, there is a probability of duplicate IDs. However, this probability is extremely small.
  • Generate SA ID Numbers - Generate (Fake) South-African ID Numbers
  • Decoding Social Security Numbers - Decoding Social Security Numbers in One Step
  • Encoding and Decoding Driver’s License Numbers - Encoding and Decoding Driver’s License Numbers in One Step
  • Dating Profile Generator - The aim of Dating Profile Generator is to help you fill that all-important free text field on online dating sites. Give us a feel for the kind of person that you are, and we’ll write a description of you in the tone we think you’d take if you bothered to write it yourself
  • Fake Identity ID Random Name Generator - Generate a random character with a fake name for games, novels, or alter ego avatars of yourself. Create a new virtual disposable identity instantly. Note that characters are not totally random: they are statistically adjusted, so that you can generate a credible population of realistic virtual people.
  • Fake Company Name Generator - Random Company Name Generator tool is designed to gratify the entrepreneur’s needs. Generate catchy brand names within seconds for your new startups using our tool.
  • Twitter Profile Generator - If you want to have an attractive profile to gain more followers, then use our Fake Twitter Profile Generator tool. It lets you create a fake Twitter profile with a false number of followers and posts.
  • Fake Tiktok Profile Generator - Who doesn’t love to have a huge number of followers and posts on the popular social media platform TikTok? Everybody loves to. One may create a fake TikTok profile with a higher follower count using our Fake Tiktok Profile Generator tool.
  • Fake Youtube Channel Generator - d you ever wish to become a YouTuber with a large number of subscribers? Well, dreams do come true. By using the Fake Youtube Channel Generator tool, you may create a fake youtube channel with an attractive channel name and several subscribers.
  • Resume Builder - simple resume builder
  • Fake Generator Tools - Here are a list of tools that can help you create fake identities, fake emails, fake credit cards, fake driver’s license, and a fake company.

⇧ Top

EMULATOR

  • Kasm - Streaming containerized apps and desktops to end-users. The Workspaces platform provides enterprise-class orchestration, data loss prevention, and web streaming technology to enable the delivery of containerized workloads to your browser.
  • Bluestacks - Android emulator
  • Genymotion - Android Virtual Devices for all your team, project, development & testing needs
  • PrimeOS - PrimeOS, the ideal Android based OS for mobile games on PC/Laptop
  • BigNox - NoxPlayer, the perfect Android emulator to play mobile games on PC
  • Memuplay.com - The most powerful android emulator enjoy ultimate mobile gaming experience on PC
  • Ldplayer.net - Your Best Partner for Mobile Games

⇧ Top

HASH RECOVERY

  • CrackStation - CrackStation uses massive pre-computed lookup tables to crack password hashes. These tables store a mapping between the hash of a password, and the correct password for that hash. The hash values are indexed so that it is possible to quickly search the database for a given hash.
  • Hashmob Community - We want to elevate password research and recovery to new heights. Passwords chosen by users are fundamentally flawed, and the best way to make users choose better passwords is showing them that Cryptographic methods - regardless of strength - are not enough to protect them. Their passwords themselves must be strong enough to withstand even the most rigorous of attacks. HashMob wants to provide a platform for users to collaborate together so that password research can be improved upon and trends can be discovered. We aggregate data and publish statistics, wordlists, rules, resources, tutorials, guides, and other things that researchers and penetration testers can use to further improve themselves
  • Hashes.com - Hashes.com is a hash lookup service. This allows you to input an MD5, SHA-1, Vbulletin, Invision Power Board, MyBB, Bcrypt, Wordpress, SHA-256, SHA-512, MYSQL5 etc hash and search for its corresponding plaintext (“found”) in our database of already-cracked hashes
  • Online Password Hash Crack - Cloud-based service that attempts to recover passwords (hashes, WPA dumps, Office, PDF, iTunes Backup, Archives) obtained in a legal way (pentest, audit,..).
  • Md5 Decrypt & Encrypt - encrypt decrypt md5 hashes
  • MD5 reverse lookup - MD5 conversion and reverse lookup
  • Ultimate Hashing - [En|De]crypt Hash — Generate hash out of the string and lookup (unhash) for hash value in our pre-computed hash-tables
  • Hashes.org Dead!

⇧ Top

DOWNLOADER

  • yt-dlp - Command-line program to download videos from YouTube.com and other video sites
  • Media-downloader.net -
  • Imgur Album Downloader - A Pure client-side webapp to download entire or parts of Imgur albums.
  • Export Comments - Easily exports all comments from your social media posts to Excel file.
  • Image Extractor - Extract Images From any public website by using a virtual browser
  • Loader.to - YouTube MP3 Playlist Downloader Online
  • Commentexporter.com - Export and save facebook comment to your computer. Nested comment supported. Enter your “Post URL” to export
  • Twitch Tools - This tool lets you view the followers on any Twitch account.
  • Link Gopher - Link Gopher is a simple extension to extract links from Firefox or Google Chrome. It extracts all links from web page (including embedded links), sorts them, removes duplicates, and displays them in a new tab for copy and paste into other systems. Also, Link Gopher does the same for unique domains.
  • Page Links Extractor Tool - Pagelink Extractor scans the entire web page and lists down all hyperlinks on the website. It is useful for research purpose and uses regex to extract the link. It will be regularly updated.
  • Online Tool to Extract Links from any Web Page - This tool will parse the html of a website and extract links from the page. The hrefs or “page links” are displayed in plain text for easy copying or review.

⇧ Top

PRIVACY / SECURITY

  • The Hitchhiker’s Guide to Online Anonymity - The Hitchhiker’s Guide to Online Anonymity
  • Privacy Guides - The guide to restoring your online privacy.
  • Surveillance Self-Defense - Surveillance Self-Defense Tips, Tools and How-tos for Safer Online Communications
  • Consumer Reports Security Planner - Keep Your Data Secure With a Personalized Plan Cut down on data collection and protect your sensitive personal information, health data, and geolocation. Answer a few simple questions to get customized recommendations to help you
  • Security in a Box - digital security tools and tactics
  • PRISM Break - opt out of global data survelliance programs like PRISM, XKeyscore and Tempora
  • Security First - Umbrella - Umbrella is the only security handbook you’ll ever need in a free, open source app. It’s up-to-date information you can trust. And it’s always in your pocket
  • Matweb.info - Remove Metadata The file you see is just the tip of the iceberg. Remove the hidden metadata with MAT2
  • Metacleaner.com - MetaCleaner helps you stay anonymous Clean your files MetaData online
  • Image Scrubber - This is a tool for anonymizing photographs taken at protests. It will remove identifying metadata (Exif data) from photographs, and also allow you to selectively blur parts of the image to cover faces and other identifiable information
  • View Exif data online, remove Exif online - View and remove Exif online
  • Bitcoinprivacy.guide - Bitcoin privacy guide a beginners guide to Bitcoin privacy
  • LocalBitcoins - Buy and Sell Bitcoin Everywhere
  • Localmonero.co - Buy Monero.Sell Monero.Cash or online.Anywhere.
  • Paxful - Trade Bitcoin with Paxful.
  • Speech Jammer - Audio jammers are popular tools used during confidential meetings. They produce a unique sound for masking and protecting conversations from external listening devices, such as a smartphone running an audio recording app, hidden in one of your guests’ pocket
  • Stutterbox - A speech jammer is a device that inhibits a user from speaking in coherent sentences due to the user hearing their own voice played back to them with a slight delay.
  • StegOnline - A web-based, enhanced and open-source port of StegSolve. Upload any image file, and the relevant options will be displayed.
  • WhatsMyName - This tool allows you to enumerate usernames across many websites, just enter username and this tool show you how many websites have that username.
  • ScamSearch - Find your scammer online & report them. Don’t let them get away. Search by Profile Picture, Email, Username, Pseudo Name, Phone Number, crypto address or website

⇧ Top

SECURE COMMUNICATION

  • Signal - Signal is a simple, powerful, and secure messenger like whatsapp but opensource
  • Element - Secure communication and collaboration
  • Briar - Peer-to-peer encrypted messaging and forums
  • Jami.net - Share, freely and privately
  • Jitsi Meet - start and join meetings for free No account needed
  • Rocket.Chat - We use communication platforms on a daily basis to collaborate with colleagues, other companies, customers and communities. Most of them give you very little in terms of control and customizations; except Rocket.Chat.
  • Wire - Modern day communication meets the most advanced security and superior user experience. Protect your privacy and data like never before. START FOR FREE
  • Telegram - Telegram is a cloud-based mobile and desktop messaging app with a focus on security and speed.
  • Brave Talk - unlinited private video calls, right in your browser. No app required
  • The Tor Project - Protect yourself against tracking, surveillance, and censorship.
  • Brave Browser - Browse privately. Search privately. And ditch Big Tech.
  • Psiphon - Secure and high-performance, Psiphon provides open access to the uncensored internet for millions of people around the world
  • ProtonVPN - High-speed Swiss VPN that safeguards your privacy.
  • hide.me VPN - hide.me VPN is trusted by more than 25 million users globally because of its simplicity, privacy features & speed.
  • AdGuard VPN - Use any browser or app and never worry about your anonymity again. The entire world is at your fingertips with AdGuard VPN.
  • I2P - The Invisible Internet Project (I2P) is a fully encrypted private network layer that has been developed with privacy and security by design in order to provide protection for your activity, location and your identity. The software ships with a router that connects you to the network and applications for sharing, communicating and building.
  • VPN Services - Find a no-logging VPN operator who isn’t out to sell or read your web traffic.
  • Browser Recommendations - These are our currently recommended desktop web browsers and configurations for standard/non-anonymous browsing. If you need to browse the internet anonymously, you should use Tor instead. In general, we recommend keeping your browser extensions to a minimum; they have privileged access within your browser, require you to trust the developer, can make you stand out, and weaken site isolation.

⇧ Top

RESOURCES

⇧ Top

WEATHER

⇧ Top

World clock

  • Los Angeles (United States): 3:16
  • Houston (United States): 5:16
  • New York (United States): 6:16
  • London (United Kingdom): 11:16
  • Berlin (Germany): 12:16
  • Cairo (Egypt): 12:16
  • Tehran (Iran): 14:46
  • New Delhi (India): 15:46
  • Hong Kong: 18:16
  • Japan: 19:16
  • Sydney (Australia): 20:16

⇧ Top

THREAT INTEL

⇧ Top

OTHER

  • https://cryptome.wikileaks.org/ - WikiLeaks is a multi-national media organization and associated library. It was founded by its publisher Julian Assange in 2006.
  • Nextstrain - Real-time tracking of pathogen evolution ; pathogen genome data

IDENTITY RESOLUTION

  • Clearbit - Clearbit is the first HubSpot Native Data Provider. Enrich your records, score and route instantly
  • FullContact API - We provide the data + intelligence you need in your platforms to accurately identify people and optimize experiences—while putting privacy and security first
  • Aeroleads.com - Search database of 500 Million Business Emails, 120M Personal Emails and 20M Phone Numbers

⇧ Top

  • SynapsInt - Synapsint is a 100% free service, the data that is presented for each search is the result of consulting different intelligence services, search engines, datasets, etc. You will find a lot of information related to a domain, a IP Address or to an ASN. Information like metatags, web site records, ISP, virus analysis, open ports, vulnerabilities, subdomains, location, network, WHOIS, DNS records, technologies used, pastes, social media accounts, blacklisted IP, links and other stuff, also you can know if an URL belongs to a phishing site.
  • InfoTracer - Instant Public Records Search Contact Info, Criminal Records, Arrests, Assets, Social Profiles & More
  • MetaDefender - Find threats in File, url, ip addr, hash ….
  • Username Search - Find someone by username or email on Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs. 600+ sites Supported! Largest Reverse User Search Online
  • SpyTox - Find people, personal info & phone numbers
  • Effect Group - Open Source Research Platform: Our open Source Research Platform allows journalists, lawyers, private investigators and more to find information on people that is openly available on the web
  • osrframework - OSRFramework, the Open Sources Research Framework is a AGPLv3+ project by i3visio focused on providing API and tools to perform more accurate online researches.
  • Google Custom Search - google custom search engine
  • OSINT Search Engine - custom search engine
  • LinkScope - LinkScope allows you to perform online investigations by representing information as discrete pieces of data, called Entities.
  • IOA - The Information Operation Archive hosts publicly available and rigorously attributed datapoints from known Information Operations on social media platforms.

⇧ Top

PEOPLE

  • IDCrawl - People Search a friend, relative, yourself, or someone else you may know (US ONLY).
  • WebMii - people search engine
  • TruePeopleSearch - people search
  • Free People Search - Police Records, Background Checks, Social Media, Photos, Assets, Contact Information and Much More! (us only)
  • Yandex People Search - Yandex people search engine
  • FamilyTree - 404
  • fastpeoplesearch - Find a person by name, phone number, or street address.
  • TruePeopleSearch - 404
  • People Search - Use the best people search tools to find someone’s contact information. Find a person’s street address, phone number or email address.
  • People Search Engine - people search engine
  • Dating Sites Search Engine - custom dating sites search engine
  • 192 - Search for People, Businesses & Places in the UK
  • International - Find a business or an individual in the world
  • People search Tool - A custom OSINT tool can help you to effectively search for people on the internet.
  • PeekYou - PeekYou is a free people search engine site that places people at the center of the Internet. It lets you discover the people most important and relevant to your life.
  • White Pages - Find people, contact info & background checks
  • New Canada 411 - people search for canada
  • 411 - people search for canada
  • TruthFinder - Social Media, Photos, Police Records, Background Checks, Civil Judgments, Contact Information and Much More! (US)
  • zaba search - Free People Search and Public Information Search Engine! (US)
  • Thats them - Free People Search Engine Find Addresses, Phones, Emails, and Much More
  • People search - Fast People Search Contact Information & Public Records
  • Free People Search -
  • Gofindwho.com - 404
  • xlek - USA Data Search Search Public Data Instantly
  • Ufind.name - free people search

⇧ Top

USERNAME

  • WhatsMyName Web - username search
  • Username Checker - Social media username checker. Gather information on the taken username and get a summary of who the person is.
  • Username Search - Uncover social media profiles and real people behind a username
  • maigret - Maigret collect a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages
  • sherlock - Hunt down social media accounts by username across social networks
  • socialscan - socialscan offers accurate and fast checks for email address and username usage on online platforms.
  • socid-extractor - Extract information about a user from profile webpages / API responses and save it in machine-readable format.
  • social-analyzer - Social-Analyzer - API, CLI & Web App for analyzing & finding a person’s profile across social media websites. It includes different string analysis and detection modules, you can choose which combination of modules to use during the investigation process.
  • KnowEm - KnowEm allows you to check for the use of your brand, product, personal name or username instantly on over 500 popular and emerging social media websites
  • Check Usernames - Check the use of your brand or username on 160 Social Networks
  • Username Checker - Check Your Desired Usernames Across 70+ Popular Social Network Sites
  • Namechk - With Namechk, you can check the availability of a username or domain name within seconds
  • Lullar Com - Profile search by email, username or first name
  • OSINT Toolkit
  • Username search tool - username search with customization
  • snoop - Snoop Project One of the most promising OSINT tools to search for nicknames. Over 4000+ sites (THE BEST ONE)

⇧ Top

EMAIL

  • Email Lookup - The ultimate OSINT tool for email and phone reverse lookup
  • holehe - holehe allows you to check if the mail is used on different sites like twitter, instagram , snapchat and will retrieve information on sites with the forgotten password function.
  • Infoga - 404
  • Trumail - Purchase by emailable.
  • Email Verifier - Verify any email address with the most complete email checker.
  • Reverse Whois - Allow you to find domain names owned by an email address
  • Email Dossier - check if email address is valid or not.
  • Email Format - find the email address formats in use at thousands of companies.
  • Email Header Analyzer - Email headers are present on every email you receive via the Internet and can provide valuable diagnostic information like hop delays, anti-spam results and more. If you need help getting copies of your email headers
  • E-mail search tool - Email search tool - Research on email addresses
  • Proofy - Email address verifier, or email checker, is a tool that can clean your email list from temporary or invalid emails.
  • Email Permutator - create unique email address of given info
  • Phonebook.cz - Phonebook lists all domains, email addresses, or URLs for the given input domain. You are searching 121 billion records.
  • Email Breach Analysis - Use this free service to check if an email address is in any hacked data from known database breaches. Get a summary of what specific information may be at risk, critical personal identity alerts, a relative exposure rating and more. Results are shown immediately - no verification, upgrades or extra steps are required.
  • Emailrep.io - check email reputation
  • Email Finder - 404
  • EmailHarvester - A tool to retrieve Domain email addresses from Search Engines
  • h8mail - Email OSINT and password breach hunting. Use h8mail to find passwords through different breach and reconnaissance services, or using your local data
  • WhatBreach - OSINT tool to find breached emails, databases, pastes, and relevant information
  • email2phonenumber - A OSINT tool to obtain a target’s phone number just by having his email address
  • buster - An advanced tool for email reconnaissance
  • Anymailfinder.com - Find the email address of a person by entering their name and the company name or domain.
  • SimpleMail - A simple API to send transactional emails to users, without needing to worry about SMTP, templates, etc..
  • Protonmail - Proton Mail is a Swiss end-to-end encrypted email service
  • Tuta - Tuta is the world’s most secure email service, easy to use and private by design.
  • Predicta Search - Get the digital footprint from an email or phone number

⇧ Top

PHONE

  • PhoneInfoga - PhoneInfoga is one of the most advanced tools to scan international phone numbers. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number, then search for footprints on search engines to try to find the VoIP provider or identify the owner.
  • Phonerator - An advanced valid phone number generator.
  • Reverse Phone Lookup - Find out who’s behind the phone: Reverse phone lookup made easy
  • Nuwber - to find phone numbers, addresses, police records, social profiles and much more.
  • ignorant - ignorant allows you to check if a phone is used on different sites like snapchat.
  • Validnumber.com - Valid Number offers a free reverse phone lookup service to let you identify a caller associated with any 10-digit phone number from the US and Canada.
  • NumLookup - NumLookup can be used to perform a completely free reverse phone lookup for any phone number
  • Reverse Phone Lookup - Look up names, addresses, phone numbers, or emails and anonymously discover information about yourself, family, friends, or old schoolmates.
  • Phone Number Lookup Tool - Phone Number Lookup will check if the given number is valid.
  • SYNC.me - you can search a number here. truecaller alternative
  • OpenCelliD - The world’s largest Open Database of Cell Towers
  • Find GSM base stations cell id coordinates - DEAD
  • Moriarty-Project - Moriarty Project is a powerful web based phone number investigation tool. It has 6 features and it allows you to choose either all features, or the features you like
  • Phone Scoop - Search for phones by specs and features
  • GSM Arena - NEWS about Mobile phones, updates, launches etc
  • Oldphonebook.com - search a large selection from the past 20 years of USA phone listing
  • carrier lookup - Look Up A Cell Phone Carrier Right Now For Free!
  • Free Reverse Phone Lookup - free reverse lookup search and more

⇧ Top

SOCIAL MEDIA

  • Who posted what? - whopostedwhat.com is a non public Facebook keyword search for people who work in the public interest. It allows you to search keywords on specific dates.
  • SOCMINT - some of the best tools
  • SocialMap - World map of social media.
  • Vimeo search tool - on Vimeo . Quickly search for videos, people, channels and groups
  • Kribrum.io - NOTE: IF YOU FIND OUT IST’S WORKING LET ME KNOW-
  • Social Search Engine - Search social information from multiple social networking sites including Facebook, Twitter, Steemit, Google Plus, Blogspot, LinkedIn and more at same time.
  • Instagram, Reddit & Snapchat - search people, posts …
  • Google to search profiles on Dribbble - Dribbble is good for finding front end developers, graphic designers, illustrators, typographers, logo designers, and other creative types.

⇧ Top

FACEBOOK

⇧ Top

TWITTER

  • BirdHunt - BirdHunt will show you all tweets within the chosen geographic location
  • Nitter - Alternative Twitter front-end
  • Twitter Search Engine - custom search engine for twitter
  • Twitter Photo Search - custom search engine for twitter
  • twint - Twint is an advanced Twitter scraping tool written in Python that allows for scraping Tweets from Twitter profiles without using Twitter’s API.
  • Tweet Archive Search - custom search engine for twitter
  • Twitter Advanced Search - search with additional filters
  • Twitter search tool - create advanced search queries within Twitter. In addition, we refer you to useful tools that allow you to analyze and monitoran account on Twitter
  • Google to search profiles on Twitter - Easily use Google to search profiles on X (Twitter)
  • Search Twitter Bios and Profiles - 404
  • The one million tweet map - create map of tweets from hashtag, username, keywords.
  • Tweet Binder - Free Twitter Hashtag Analytics of up to 200 posts from the last 7 days.
  • Thread Reader - Thread Reader helps you read and share Twitter threads easily!
  • Search Twitter Users - 404
  • Getdewey.co - Save your favorite X (Twitter) and Bluesky bookmarks in one place
  • geosocial footprint - GeoSocial Footprint: A geosocial footprint is the combined bits of location information that a user divulges through social media, which ultimately forms the users location “footprint”. For Twitter.com users, this footprint is created from GPS enabled tweets, social check-ins, natural language location searching (geocoding), and profile harvesting.
  • Twitter Analytics - Looking for someone in the United States? Our free people search engine finds social media profiles, public records, and more!
  • getdaytrends - Twitter trends worldwide
  • Twitter Trending Hashtags and Topics - Trendsmap has been providing unique and powerful analytical and visualisation tools to analyse Twitter data. With the demise of Twitter, we are now providing access to over ten years historical data
  • Socialbearing - Insights & analytics for tweets & timelines
  • SocialData API - SocialData is an unofficial Twitter API that allows scraping tweets, user profiles, lists and Twitter spaces without using Twitter’s API.

⇧ Top

YOUTUBE

  • yt-dlp - Youtube downloader with additional features.
  • Location Search - Search YouTube by location for geotagged videos. Find videos near you or anywhere in the world.
  • YouTube Metadata Bulk - Metadata bulk grabs details about multiple YouTube videos, a playlist’s videos, or a channel’s public videos.
  • Hadzy.com - Search, sort and analyze youtube comments
  • Youtube channel ID - Find YouTube Channel ID, and related channel information and statistics.
  • Extract Meta Data YouTube - Youtube DataViewer
  • Youtube Geo Search Tool - a simple model of how News organizations could use Google APIs to help find citizen journalism on YouTube. It uses YouTube and Google APIs to generate location based search results which are stack ranked by upload time.
  • Yout - search for something in the search bar, click your video, and then record it as a Mp3 (Audio), you can toggle to Mp4 (Video), or Gif (Image) if you want those instead.
  • YouTube Comment Finder - Search for a video, channel or VideoID
  • Youtube, Periscope, Twitch & Dailymotion - general search tool for youtube
  • Unlistedvideos.com - A website for submitting, searching for, and watching unlisted YouTube videos.
  • Youtube Comments Downloader - Effortlessly export comments from YouTube videos, live streams, shorts, and community posts. Perfect for YouTubers, social media managers, researchers [PAID]
  • ActiveTK - This web application allows you to search for Youtube videos by the number of views or likes.
  • youtubetranscript - Extremely fast free online service for converting YouTube videos to text. Not perfect quality, but quite acceptable and very fast.

⇧ Top

REDDIT

  • Reveddit.com - Reveal Reddit’s secretly removed content. Search by username or subreddit
  • Karma Decay - 404
  • redditsfinder - Archive a reddit user’s post history. Formatted overview of a profile, JSON containing every post, and picture downloads.
  • SocialGrep - Search reddit posts and comments. Advanced filters via date, score, subreddit, keywords, website urls and more. All searches can be exported via csv or json.
  • Redective - Redective works in realtime by querying reddit each time you do a search
  • Reddit_Persona - A Python module to extract personality insights, sentiment & keywords from reddit accounts.
  • Reddit Downloader - Download media from reddit like image, audio, video.
  • Reddit Search Engine - custom google search for reddit
  • Reddit Search Engine - custom google search for reddit
  • Reddit User Analyser - Analyse a Reddit user by username
  • reddit search - 500
  • RedditMetis - See statistics for your Reddit account
  • Search Reddit Comments by User - Search through comments of a particular reddit user. Just enter the username and a search query
  • Reddit Investigator - 404
  • Pushshift API Guide - The pushshift.io Reddit API was designed and created by the /r/datasets mod team to help provide enhanced functionality and search capabilities for searching Reddit comments and submissions.

⇧ Top

LINKEDIN

  • LinkedIn Search - Easily use Google to search profiles on LinkedIn
  • LinkedIn Search Engine - custom google search for linkedin
  • LinkedIn Email Reverse Lookup - chrome extention for linkedin Simply provide an email address which is of interest to you and click Search. If a match is found the name, profile id, username will be returned as well as the profile image if one exists.
  • Proxycurl - Pull rich data about people and companies

GOOGLE

⇧ Top

DISCORD

  • Discord User Search - 502
  • Discord Me - Public Discord Servers and Bots
  • Discord History Tracker - Discord History Tracker lets you save chat history in your servers, groups, and private conversations, and view it offline.
  • DiscordOSINT - This repository contains useful resources to conduct research and OSINT investigations on Discord accounts ,servers and bots
  • DiscordServers - Public Discord servers you may like
  • DISBOARD - Disboard is the place where you can list/find Discord servers.
  • Discord ID Lookup - Unofficial discord lookup
  • Discord Bots - Find the best Discord Bots, Apps and Servers with our Discord Bot List, including the top music and economy apps.
  • Discord Bots - Explore millions of Discord Bots
  • Discord Bots - This site is a list of publicly available Discord bots, intended to accompany the Discord Bots, Discord server. The bots presented here are created and maintained by community members and serve all kinds of purposes

⇧ Top

TWITCH

⇧ Top

INSTAGRAM

  • InstaHunt - InstaHunt shows you Instagram places and posts surrounding the chosen geographic location
  • Instagram Deep Photo Search Engine - custom instagram deep photo search
  • Instagram analyzer and viewer - Reviwu is a platform for reviewing influencers, i.e., popular Instagram, YouTube, TikTok and OnlyFans content creators. Today, many influencers delete and block everything that does not suit them, which creates a false image of everyone liking and supporting them. Reviwu allows you to give your honest opinion and to review the chosen influencer in a neutral place without fear of censorship
  • Find Instagram User ID - Find Instagram User ID
  • Instagram User ID - Find any Instagram User ID by Instagram username.
  • instalooter - InstaLooter is a program that can download any picture or video associated from an Instagram profile, without any API access
  • instaloader - Download pictures (or videos) along with their captions and other metadata from Instagram.
  • osi.ig - Information Gathering Instagram.
  • Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
  • SoIG - OSINT Tool gets a range of information from an Instagram account
  • yesitsme - Simple OSINT script to find Instagram profiles by name and e-mail/phone

⇧ Top

TELEGRAM

⇧ Top

SNAPCHAT

  • Snap Map - World map of snap just tap on location and watch
  • Snapdex - 404
  • Snapchat User Search - 503
  • SnapScraper - SnapScraper is an open source intelligence tool which enables users to download media uploaded to Snapchat’s Snap Map using a set of latitude and longitiude co-ordinates.
  • snapmap-archiver - Download all Snapmaps content from a specific location.

TIKTOK

⇧ Top

STEAM

CLUBHOUSE

⇧ Top

BOT

  • Bot Sentinel Dashboard ‹ Bot Sentinel - Bot Sentinel to help fight disinformation and targeted harassment. We believe Twitter users should be able to engage in healthy online discourse without inauthentic accounts, toxic trolls, foreign countries, and organized groups manipulating the conversation.
  • Botometer by OSoMe - a centralized place to share annotated datasets of Twitter social bots. We also provide list of available tools on bot detection.
  • FollowerAudit - Check fake followers and analyze the followers of any X (Twitter) account
  • Twitter Bot Checker - Find Twitter bots and check your friends and followers’ authenticity, and be safe!

⇧ Top

ANALYTICS

  • SEO Resources Search Engine - custom google search
  • Hashatit - Everywhere on social media, content is being generated at unheard of speeds. Hashtags help you navigate the ever-expanding internet, and HASHATIT keeps you on top of hashtags.
  • Social Mentions - Maintaining an excellent reputation is crucial for any company, no matter its size. Start your mentions monitoring right now and grow safely.
  • Social Trends - Find top social posts, statuses, photos and videos, which were recently published about specific topic.
  • Semrush - Do SEO, content marketing, competitor research, PPC and social media marketing from just one platform.
  • Network Tool - The Network Tool generates an interactive network to explore how information spreads across Twitter using the OSoMe data archive. You may search the archive using a single hashtag or comma-separated list of hashtags. The timespan between start and end dates cannot exceed 30 days.
  • Trends Tool - Analyze the volume of tweets with a given hashtag or URL over a given period of time using OSoMe data.

⇧ Top

BLOG

⇧ Top

NEWS

  • News Search Engine - custom google search for news only results
  • Mailing List Archives Search Engine - custom google search for mailing list archives of news
  • Google News - google news feed around the world
  • News Search - Upstract is the ultimate attempt in delivering the entire Internet on a single page search the news
  • Welcome to Dealstrap! - Find Breaking news around the world
  • Beautiful News - A collection of good news, positive trends, uplifting statistics and facts — all beautifully visualized by Information is Beautiful.
  • GoodGopher.com - GoodGopher is the world’s first privacy-protected search engine that filters our corporate propaganda and government disinformation for those searching for information and news on liberty, natural healing, central banks, food freedom, advanced science and a multitude of other topics no longer allowed in NSA-controlled search engines.
  • Newsnow - NewsNow: The Independent News Discovery Platform for UK,US,CA
  • Mereku.com - 404
  • Newspapers.com - The largest online newspaper archive, established in 2012. Used by millions for genealogy and family history, historical research, crime investigations, journalism, and entertainment. Search for obituaries, marriage announcements, birth announcements, social pages, national and local news articles, sports, advertisements, entertainment, fashion and lifestyle pages, comics, and more.
  • Talkwalker - Best free and easy alternative to Google Alerts Talkwalker Alerts monitors every single mention of your brand, products, and keywords across the internet - including news platforms, blogs, forums, websites, and even Twitter (X).
  • Google Alerts - Monitor the web for interesting new content create an email alert about any topic in mind
  • Hoaxy: How claims spread online - Visualize the spread of information on Twitter
  • Snopes - The definitive fact-checking site and reference source for urban legends, folklore, myths, rumors, and misinformation.
  • ReviewMeta - ReviewMeta analyzes Amazon product reviews and filters out reviews that our algorithm detects may be unnatural.
  • Verification Handbook - Need to learn new data skills, increase your data journalism knowledge or advance your career?
  • Truth or Fiction - Truth or Fiction? – Seeking truth, exposing fiction
  • Debunking False Stories Archives - FactCheck.org is one of several organizations working with Facebook to debunk misinformation shared on the social media network
  • Fact-Checking - The Reporters’ Lab is a center for journalism research in the Sanford School of Public Policy at Duke University. Our core projects focus on fact-checking, but we also do occasional research about trust in the news media and other topics.

⇧ Top

SEARCH ENGINES

  • Google Advanced Search - its like filter particular information according to needs
  • Bing - microsoft’s Bing search engine
  • Yandex - Yandex search engine
  • MetaGer: Privacy Protected Search - MetaGer is different from other search engines. This is reflected not only in our public good orientation and focus on privacy, Possibility of creating a personal blacklist Function of the search in the search Advertising-free search possible Integration of search engine projects like YaCy The only German search engine that combines results from several large web indexes
  • Duck Duck Go - Search and browse more privately with the DuckDuckGo. Unlike Chrome and other browsers, we don’t track you
  • Search Engines Index - Search Engines in all countries in the world
  • carrot2 - Carrot2 organizes your search results into topics. With an instant overview of what’s available, you will quickly find what you’re looking for
  • Qwant - The search engine that respects your privacy
  • Startpage - A safer way to search and browse online without personal data collection, tracking or targeting.
  • Mailing List Search - custom google mailing list search
  • swisscows - anonymous search engine protects the privacy of our users when searching and from inappropriate content when finding it. We do not use cookies or other tracking technologies, with us each search query remains anonymous and each user a guest without a user profile.
  • Crossref - Search the metadata of journal articles, books, standards, datasets & more
  • Brave - Brave search engine
  • Mojeek - Mojeek is a growing independent search engine which does not track you.
  • Yahoo Search - Yahoo search engine
  • Baidu - chaina’s search engine
  • Ecosia - a search engine used its revenue to plant trees around the World
  • Dogpile - Dogpile is a metasearch engine for information on the World Wide Web that fetches results from Google, Yahoo!, Yandex, Bing, and other popular search engines, including those from audio and video content providers such as Yahoo
  • Zoo Search - Metacrawler is a type of search engine that aggregates results from multiple sources, such as other search engines and specialized web directories, and presents them in a unified format.
  • App Store and iTunes search engine - Experience the App Store and iTunes Anywhere
  • Ask - a search engine cum news feed
  • ZorexEye - ZorexEye is a search engine that helps you find direct download links for premium apps, software, books and other files for free with the help of AI and Google’s Database.
  • keys.openpgp.org - The keys.openpgp.org server is a public service for the distribution and discovery of OpenPGP-compatible keys, commonly referred to as a “keyserver”.
  • MIT PGP Key Server - pgp key server by MIT
  • Ipfs-search.com - Temporary Suspended
  • Debate.cards - Search engine for finding and downloading debate evidence
  • Argumentsearch.com - allows to search for natural-language arguments in large document collections. Neural networks find and summarize the pros and cons of your topic in real time
  • Meganzsearch.com - Mega.nz File Search Engine Search File. Search Movies. Search Music. Search Application. Search Document. More Search
  • Engine.presearch.org - Presearch is a community-powered, decentralized search engine that provides better results while protecting your privacy and rewarding you when you search.
  • Blockscan.com - Blockscan, the search engine for the decentralized web
  • Publc.com - PUBLC is more open and collaborative search engine enhanced by cutting edge AI technology, that empowers its users and revolutionizes the way people share, discover and monetize the content of the web
  • CachedViews.com - Cached view of any page on Internet through multiple cached sources.
  • MAC Address Lookup - Find the vendor name of a device by entering an OUI or a MAC address
  • sploitus - Sploitus is a everyday tool that helps security researchers find exploits and tools.
  • Vulmon - Search anything related to vulnerabilities on Vulmon, from products to vulnerability types. Start your journey to free vulnerability intelligence.
  • Vulnerability & Exploit Database - Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review.
  • Google Hacking Database - The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers.
  • Google & Bing - Google has a large library of search operators that can help with internet-based research, below is just a selection of them.
  • Boardreader - Forum Search - connecting communities through search
  • Libgen.rs - largest Book library FREE
  • Stacksearch - 404
  • SearchTempest - All of Facebook Marketplace, craigslist & more in one search.
  • 2lingual - 2lingual makes it easy to Google Search in 2 languages. Get Google Search Results alongside Google Cross Language Search Results. In addition, a Query Translation Option can be activated or deactivated for Google Cross Language Searches.
  • Milled - The search engine for ecommerce emails
  • btdig - BTDigg is the BitTorrent DHT search engine.
  • Osint Open Source Projects - The Top 23 Osint Open Source Projects
  • Monster Crawler Search - Monster Crawler combines the power of all the leading search engines together in one search box to deliver the best combined results. This is what we call metasearch. The process is more efficient and yields many more relevant results.
  • Arabo.com - The Arab Middle East Search Engine & Directory
  • Google Scholar - Google Scholar provides a simple way to broadly search for scholarly literature. From one place, you can search across many disciplines and sources: articles, theses, books, abstracts and court opinions, from academic publishers, professional societies, online repositories, universities and other web sites. Google Scholar helps you find relevant work across the world of scholarly research.
  • Million Short - web search engine that allows you to filter and refine your search results set. Million Short makes it easy to discover sites that just don’t make it to the top of the search engine results for whatever reason – whether it be poor SEO, new site, small marketing budget, or competitive keywords. The Million Short technology gives users access to the wealth of untapped information on the web.
  • BeVigil - Instantly find the risk score of any app The internet’s first and only security search engine for mobile apps
  • WordPress.com - search millions of blogs
  • Octosearch.dootech.com - Helps you search the repositories starred by people you follow on Github
  • Search craigslist - All of Craigslist pages with simple click Searchcraigslist is a classified ad search engine for Craigslist nationwid
  • Public AWS S3 & Azure Search - Search Public Buckets
  • Public Buckets - Find public buckets on AWS S3 & Azure Blob by a keyword
  • Search Atlas - Visualizing Divergent Search Results Across Geopolitical Borders
  • Dorki - A partially free online tool that allows to collect search results from different search engines (Alexandria, Yahoo, Wikispecies, Yep, Wiby etc) and export them to JSON/TXT.
  • Hackxy - cybersecurity search engine for ctf write and bugbounty reports

⇧ Top

GOOGLE CSE

custom made google search engine for perticular fields

⇧ Top

IMAGES and Audio

Image

  • Google Images - Google image search
  • Yandex Images - Yandex Image search
  • Bing Images - Bing Image search
  • See it, search it - Bing visualsearch, search whats on a image
  • Images Search Engine - custom google image search engine
  • miniPaint - Online paint and image editor
  • PimEyes - Face Search Engine Reverse Image Search
  • TinEye - Reverse Image Search Find where images appear online
  • Findclone - Let’s help you find your double.
  • Image Raider - Image Raider is our reverse image search tool for completing individual searches. When you upload an image to this page, we’ll scour the internet to find its source and all of the other pages where it has been posted.
  • same.energy - Same Energy is a visual search engine. You can use it to find beautiful art, photography, decoration ideas, or anything else.
  • Baidu - chaina’s Baidu Image search engine
  • Yahoo Image Search- Yahoo Image Search engine
  • Photo Album Finder - custom google search photo album finder
  • MyHeritage Photo Enhancer - Upgrade your photos automatically with the world’s best machine learning technology. Faces will become more pronouncer! It enhance blury photos
  • SVG Editor - SVGEdit is a fast, web-based, JavaScript-driven SVG drawing editor that works in any modern browser.
  • Neural network image super-resolution and enhancement - Make your pics high resolution - HD, 4k and beyond. Enlarge and sharpen photos for printing and web in a single click.
  • Pixsy - Find and fight image theft Take back control of your images. See where & how your images are being used online!
  • FotoForensics - FotoForensics provides budding researchers and professional investigators access to cutting-edge tools for digital photo forensics.
  • image identify - The Wolfram Language Image Identification Project
  • EXIF Data Viewer - EXIF is short for Exchangeable Image File, a format that is a standard for storing interchange information in digital photography image files using JPEG compression. Almost all new digital cameras use the EXIF annotation, storing information on the image such as shutter speed, exposure compensation, F number, what metering system was used, if a flash was used, ISO number, date and time the image was taken, whitebalance, auxiliary lenses that were used and resolution. Some images may even store GPS information so you can easily see where the images were taken!
  • Background Removal Tool - Remove a background and replace it with a transparent, solid color or background image with just a few clicks!
  • Museo - Museo is a visual search engine that connects you with the Art Institute of Chicago, the Rijksmuseum, the Harvard Art Museums, the Minneapolis Institute of Art, the The Cleveland Museum of Art, and the New York Public Library Digital Collection
  • Diff Checker - Find the difference between pictures or other images! Enter two images and the difference will show up below
  • Forensically - Forensically is a set of free tools for digital image forensics. It includes clone detection, error level analysis, meta data extraction and more.
  • Pictriev - Find look-alike celebrities on the web using the face recognition.
  • WhatTheFont - Instant font identification powered by the world’s largest collection of fonts, Identify font in given image
  • Sogou -
  • Pixabay - Free Image gallery
  • picarta.ai - find where a photo has been taken using AI
  • []

Music

  • Free Music Search - To see Musgle in action just type a song title, or the artist name, or both in a search bar and hit ‘Enter’ - you will be redirected to the Google page with relevant search results
  • Search for Music Using Your Voice - Search for Music Using Your Voice by Singing or Humming, View Music Videos, Join Fan Clubs, Share with Friends, Be Discovered and Much More For Free!
  • Listen Notes - Search the whole Internet’s podcasts. Curate your own podcast playlists. Listen on your favorite podcast player apps.
  • Discover Podcasts Here! - PodSearch is the easiest way to discover podcasts on your favorite topics. Listen to short show samples, learn more about the show and hosts

⇧ Top

LICENSE PLATE/VIN/VEHICLE

  • Plate Recognizer - Automatic License Plate Recognition software that works in all environments, optimized for your location
  • License Plates of the World - License plates of the world
  • VIN decoder - VIN decoder is intended to provide detailed information about a vehicle’s history, specifications, and ownership based on its unique 17-character identifier.
  • Poctra.com - Poctra is salvage car auction archive from US and EU markets.
  • FAXVIN - Vehicle History Reports
  • AutoCheck - FREE Vehicle Search: Enter a VIN or Plate
  • VINCheck® - NICB’s VINCheck is a free lookup service provided to the public to assist in determining if a vehicle may have a record of an insurance theft claim, and has not been recovered, or has ever been reported as a salvage vehicle by participating NICB member insurance companies.
  • Nomerogram.ru - In Numberogram, you can break the car for free on the state room. Vin is not needed. We are looking for photos of cars in social networks and the Internet, in addition to the photo we know runs and prices, we find on the public. taxi number, dtp and accidents.
  • 🚗License Plates in Canada 🇨🇦
  • Vehical Info - 404
  • CarInfo - Get Your Vehicle Details by RC

⇧ Top

FLIGHT TRACKER

  • FlightAirMap - Real or virtual flights are displayed in real-time on a 2D or 3D map. Airports are also available on map. Statistics for pilots and/or owners are generated.
  • ADS-B Exchange - ADS-B Exchange - track aircraft live
  • Icarus.flights - Icarus Flights is a tool for analyzing uncensored aircraft activity data and tracing global aircraft ownership records
  • FlightAware - As the leader in providing advanced, accurate, actionable data and insights that inform every aviation decision, FlightAware is Central to Aviation
  • Flightradar24 - Live Flight Tracker - Real-Time Flight Tracker Map
  • Live Air Traffic Control - Live Air traffic form thir headsets
  • Planespotters.net - Aviation Photos, Airline Fleets and more
  • Skyscanner - Millions of cheap flights, hotels & cars. One simple search.
  • RadarBox - RadarBox is a flight tracking company that displays aircraft & flight information in real-time on a map. RadarBox offers flight data such as latitude and longitude positions, origins and destinations, flight numbers, aircraft types, altitudes, headings and speeds
  • FlightAirMap - Real or virtual flights are displayed in real-time on a 2D or 3D map. Airports are also available on map. Statistics for pilots and/or owners are generated.

⇧ Top

MARITIME

⇧ Top

OPEN DIRECTORY

  • FilePhish - A simple Google query builder for document file discovery
  • Open Directory Finder - This small Program allows you to find open directories on the web. This program uses Google advance search. Can find any video, audio or other files
  • Opendirsearch.abifog.com - Find open directories with this tool. It uses google’s engine for the actual search.
  • Archive-it.org - a digital library of Internet sites and other cultural artifacts in digital form. Like a paper library, we provide free access to researchers, historians, scholars, people with print disabilities, and the general public
  • Odcrawler.xyz - A search engine for open directories. Find millions of publicly available files!
  • Google Docs CSE - custom google search engine for documents search
  • Documents Search Engine - custom google search
  • Cybersec Documents Search Engine - custom google search
  • GoogleDrive Search Engine - custom google search
  • SlideShare Search Engine - custom google search
  • Document Search - To use the document search tools, please insert a name or company into the relevant boxes
  • Pdfsearch.io - Document Search Engine - browse more than 18 million document
  • awesome-public-datasets - A topic-centric list of HQ open datasets.
  • Drivesearch.kwebpia.net - You can quickly and easily search for videos, lyrics, songs, knowledge, medical, science associated with the file. Supports the following topics: Google Drvie, Google Docs, All web search, Video, Lyrics, Knowledge, Movie, Health, Medical, Science, Pandora, Last.fm, SoundCloud…
  • Filepursuit.com - Search the web for files, videos, audios, eBooks & much more
  • Open Directory Search - Open Directory Search Portal
  • LENDX - All over the world, people like you and me connect their computers to the internet. Some of those users allow their computers to operate as servers (for hosting their websites and such). Those websites have folders that contain the images, documents and text that makeup the website’s content. These folders are the directory of the website. In that directory, those users can store any files and any data they wish to put there. Lendx simply allows you to access this data.
  • Direct Download Almost Anything - Get direct download links for almost anything.

⇧ Top

DATASET

  • Datasetsearch.research.google.com - Dataset Search is a search engine for datasets. Using a simple keyword search, users can discover datasets hosted in thousands of repositories across the Web.
  • Databasd - is a search engine to find open datasets. The search technology leverages alien artifical intelligence (AAI) to conduct predictive bloackchain data analysis
  • Data.gov - Here you will find data, tools, and resources to conduct research, develop web and mobile applications, design data visualizations, and more.
  • data.world - The Data Catalog Platform
  • BigQuery public datasets - A public dataset is any dataset that is stored in BigQuery and made available to the general public through the Google Cloud Public Dataset Program
  • DSC Data Science Search Engine - Data Science Central is the industry’s leading online resource for data practitioners. From Statistics and Analytics to Machine Learning and AI, Data Science Central provides a community experience that includes a rich editorial platform, social interaction, forum-based support, and the latest information on technology, tools, trends, and careers
  • Datasetlist.com - A list of machine learning datasets from across the web.
  • Search Datasets - Build elegant data-driven sites with markdown & deploy in seconds.
  • Opensanctions.org - OpenSanctions helps investigators find leads, allows companies to manage risk and enables technologists to build data-driven products
  • Kaggle - Join over 17M+ machine learners to share, stress test, and stay up-to-date on all the latest ML techniques and technologies. Discover a huge repository of community-published models, data & code for your next project

⇧ Top

SOURCE CODES

⇧ Top

WHOIS

  • WHOIS Service - search any ip address
  • Whois Search - Verisign’s Whois tool allows users to look up records in the registry database for all registered .com, .net, .name, .cc and .edu domain names.
  • Who.is - WHOIS Search, Domain Name, Website, and IP Tools
  • Whoxy - whoxy domain search engine
  • Whois History - Lets you see all the historical WHOIS records of a domain name

⇧ Top

DOMAIN / IP / DNS

#####URL’s

  • dnslytics - search for domain IPv4, IPv6 or Provider
  • dnstwist - scan phishing domain
  • SecurityTrails - search for domain, IPs, keyword or Hostname
  • Shodan - Shodan is a search engine that lets users search for various types of servers connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.
  • Internetdb.shodan.io - The InternetDB API provides a fast way to see the open ports for an IP address. It gives a quick, at-a-glance view of the type of device that is running behind an IP address to help you make decisions based on the open ports.
  • GreyNoise Intelligence - GreyNoise identifies internet scanners and common business activity in your security events so you can make confident decisions, faster. Whether you use our Visualizer, API, or integrate GreyNoise data into your security tools, find what’s important in your security logs and get back to business.
  • FOFA -
  • zoomeye - ZoomEye is a freemium online tool aimed to help aid cybersecurity in the areas of reconnaissance and threat evaluation.
  • Censys - is a web-based search platform for assessing attack surface for Internet connected devices. The tool can be used not only to identify Internet connected assets and Internet of Things/Industrial Internet of Things (IoT/IIoT), but Internet-connected industrial control systems and platforms.
  • ViewDNS.info - Reverse IP Lookup Find all sites hosted on a given server. Domain / IP. Reverse Whois Lookup Find domain names owned by an individual or company.
  • Internet Census 2012 - Overview of 180 Billion service probe records from May to December 2012.
  • ONYPHE - ONYPHE is an Attack Surface Management & Attack Surface Discovery solution built as a Cyber Defense Search Engine. We scan the entire Internet and Dark Web for exposed assets and crawl the links just like a Web search engine. Our data is searchable with a Web form or directly from our numerous APIs.
  • IPLeak -
  • Robtex - Robtex is used for various kinds of research of IP numbers, Domain names, etc
  • Wappalyzer - Instantly reveal the technology stack of any website, such as CMS, ecommerce platform or payment processor, as well as company and contact details.
  • photon - Incredibly fast crawler designed for OSINT.
  • Technology Lookup - Technology stack checker tool. Check out the technologies used on any website.
  • BuiltWith Technology Lookup - Find out what websites are Built With
  • OSINT.SH - All in one Information Gathering Tools
  • Nmap Checker Tool - Online Free Hacking Tools - ShadowCrypt
  • Free online network tools - Free online network tools - traceroute, nslookup, dig, whois lookup, ping - IPv6
  • Google Transparency Report - HTTPS encryption on the web report
  • Certificate Search - Find information about the target assets from their SSL certificate
  • CRT - certificate search
  • LeakIX - This project goes around the Internet and finds services to index them.
  • URL and website scanner - urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates.
  • dnsdumpster - DNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
  • Domain Codex - private investigation search, legal and case research, IP & Digital piracy..
  • SimilarWeb - SimilarWeb is a tool that estimates the total amount of traffic different websites get. It allows you to see competitors’ top traffic sources, broken down into six major categories, including referring sites, social traffic, and top search keywords
  • IP search - Network Entity Reputation Database - The NERD system gathers data about sources of cyber threats from a number of sources and builds a constantly-updated database of the known malicious network entities (currently only IP addresses).
  • Reverse Domain - Allow you to find domain names by a keyword
  • IANA — Root Zone Database - The Root Zone Database represents the delegation details of top-level domains, including gTLDs such as .com, and country-code TLDs such as .uk. As the manager of the DNS root zone, we are responsible for coordinating these delegations in accordance with our policies and procedures.
  • Punkspider - Searching for vulnerable websites is coming back soon! Are you new to web security and have no idea what the heck we’re talking about
  • metabigor - OSINT tools and more but without API key
  • urldna - Gather info about URL: ssl cert, ip, header, metadat …

⇧ Top

MALWARE

  • Malpedia - Malpedia is to provide a resource for rapid identification and actionable context when investigating malware. Openness to curated contributions shall ensure an accountable level of quality in order to foster meaningful and reproducible research.
  • Interactive Online Malware Analysis Sandbox - check malware for free. With our online malware analysis tools you can research malicious files and URLs and get result with incredible
  • Free Automated Malware Analysis Service - This is a free malware analysis service for the community that detects and analyzes unknown threats using a unique Hybrid Analysis technology.
  • VirusTotal - Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.
  • Maltiverse - We are here to help companies to adopt quality Threat Intelligence in a simple, quick and effective way
  • Malware News Search - custom google search for malware news
  • AlienVault Open Threat Exchange - The World’s First Truly Open Threat Intelligence Community · Gain FREE access to over 20 million threat indicators contributed daily
  • Jotti’s malware scan - Jotti’s malware scan is a free service that lets you scan suspicious files with several anti-virus programs. You can submit up to 5 files at the same time. There is a 250MB limit per file. Please be aware that no security solution offers 100% protection, not even when it uses several anti-virus engines
  • IObit Cloud - IObit Cloud is an advanced automated threat analysis system. We use the latest Cloud Computing technology and Heuristic Analyzing mechanic to analyze the behavior of spyware, adware, trojans, keyloggers, bots, worms, hijackers and other security-related risks in a fully automated mode.
  • theZoo - A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
  • Vx-underground.org - vx-underground also known as VXUG, is an educational website about malware and cybersecurity. It claims to have the largest online repository of malware.
  • aptnotes/data - APTnotes is a repository of publicly-available papers and blogs (sorted by year) related to malicious campaigns/activity/software that have been associated with vendor-defined APT (Advanced Persistent Threat) groups and/or tool-sets.
  • exploit-database-papers - The legacy Exploit Database paper repository

⇧ Top

IoT

  • Webcam Search Engine - custom google search for webcams search
  • Insecam - Live cameras directory
  • Camhacker.com - Finds thousands of public live webcam streams and unprotected security cameras from all over the world.
  • EarthCam - Providing a virtual window to the world, viewers can freely explore the globe from unparalleled vantage points, such as the torch balcony of the Statue of Liberty, which has been closed to the public since 1916. EarthCam.com derives revenue from advertising and licensing of its proprietary webcam content.
  • Airport Webcams - LIVE Airport Webcams From Around The World
  • The Webcam Network - Most webcam-directories offer listings of places where webcams are located
  • Webcams Abroad live images - Webcams Abroad is a fast growing international directory with webcams all over the world.
  • WEBCAM LIVE - search live webcams
  • city-webcams.com - local webcams and live streaming from around the world
  • thingful - Thingful.net is a search engine for the Internet of Things, providing a unique geographical index of real-time data from connected objects around the world, including energy, radiation, weather, and air quality devices as well as seismographs, iBeacons, ships, aircraft and even animal trackers.
  • Live World Webcam - LiveWorldWebcam.net, search engine of thousands of live webcams from around the world!
  • Webcamtaxi - Webcamtaxi is a platform for live streaming HD webcams from around the globe that will give you the opportunity to travel live online and discover new and distant places. If you are passionate about travelling, we are the right choice for you.
  • Explorecams.com - search engine allows you to search through thousands of images that people took on a specific digital cameras and compatible lenses, so you know what to expect from your next gear purchase.
  • Opentopia - free live webcams
  • WorldCam - webcams form around the world
  • Hawaii Traffic Cameras - hawaii tarffic cameras
  • Toronto area Live Traffic Cams
  • Lake County Fire Cameras
  • VDOT Traffic Cams
  • Lubbock Live Traffic Cameras
  • Hong Kong Traffic Data & Cams
  • Baton Rouge Traffic Cams

⇧ Top

RADIO

⇧ Top

RESOLVERS

REAL ESTATE

  • PrimeLocation - find homes to buy or rent
  • Realtor - find estate by school, address or zip
  • rehold - Rehold Has the Most Extensive Database and Reverse Address Directory in the USA
  • Zillow - Recommendations are based on your location and search activity, such as the homes you’ve viewed and saved and the filters you’ve used. We use this information to bring similar homes to your attention
  • Zoopla - Find homes to buy or rent and check house prices
  • homemetry - Homemetry is an all-in-one real estate information site that provides a comprehensive overview of homes for sale, apartments for rent, markets, trends and neighborhood insights to help you make the right decisions on exactly what, when and where to buy, sell or rent.
  • Explore Canada’s Real Estate Market - Explore Canada’s Real Estate Market

⇧ Top

[CAN] CORPORATION

⇧ Top

MAPS

  • Google Maps - google map
  • Bing Maps - microsoft bing map
  • Yandex.Maps - yandex map
  • Mapillary - Access street-level imagery and map data from all over the world. Fill in the gaps by capturing coverage yourself.
  • Geonarrative.com - Explore remote-sensing satellites that have orbited our Earth for 50 years.
  • Waze - Navigation and map
  • 百度地图 - baidu map
  • DigitalGlobe - 404
  • MapQuest - find driving directions, maps, live traffic updates and road conditions. Find nearby businesses, restaurants and hotels. Explore!
  • OpenStreetMap - OpenStreetMap is a free, open geographic database updated and maintained by a community of volunteers via open collaboration. Contributors collect data from surveys, trace from aerial imagery and also import from other freely licensed geodata sources.
  • ArcGIS Wildfire Map - This is a map of US wildfire locations (active/recent) and other sources of information related to wildfires.
  • Living Atlas of the World | ArcGIS - ArcGIS Living Atlas of the World
  • FIRMS - Global Fire information for Resource management system
  • COVID-19 Map - covid-19 cases world map
  • Ukraine Interactive map - Live Universal Awareness Map, is an internet service to monitor and indicate activities on online geographic maps, particularly of locations with ongoing armed conflict in ukraine russia
  • Israel-Palestine - Live Universal Awareness Map, is an internet service to monitor and indicate activities on online geographic maps, particularly of locations with ongoing armed conflict in israel palestine
  • Satellites.pro - satellite world map
  • Military bases around the world. - uMap - Militarty bases around the world
  • Wikimapia - Wikimapia is an online editable map - you can describe any place on Earth. Or just surf the map discovering tonns of already marked places
  • Map of Syrian Civil War - syrian civil war map
  • Windy - wind map weather forecast
  • Gpx File Editor - gpx.studio is a free online GPX viewer and editor which allows visualize multiple traces, edit traces, edit waypoints and more.
  • fgdc_gp_demos’s public fiddles -
  • KartaView - Collect and share street level imagery from around the world to an open repository, available to everyone.
  • Google Map Search Engine - custom google search for google search
  • Power Plants in the United States - map of power plants in the United States using data from the U.S. Energy Information Administration and U.S. Environmental Protection Agency
  • UK Onshore Oil and Gas Activity - 404
  • Walmart Store Status - walmart store location map
  • MODIS Wildfire - a Live Feeds layer showing Thermal activity detected by the MODIS sensors on the NASA Aqua and Terra satellites during the last 48 hours.
  • Earthquake Watch - Earthquake watch
  • Earth - live wind
  • US Labor Strike Map - US labor strike map
  • Active Agency Map - The following is a list of public safety agencies that have joined Neighbors by Ring. This map is updated regularly.
  • Ukraine Live Cams - Live cams from Ukraine
  • Live map of London Underground trains - Live london underground train map
  • TfL JamCams - Trafic cams from London
  • atlas.co - a tool for visualising geodata
  • felt - create map-based visualizations

⇧ Top

GEO

  • GeoSpy - Photo location prediction using AI
  • GEOINT - every tools you need for geographical data gathering
  • GeoNames - The GeoNames geographical database covers all countries and contains over eleven million placenames that are available for download free of charge.
  • Geoseer.net - Search over 3.5 million distinct spatial GIS WMS, WCS, WMTS datasests hosted on over 40k live services from around the world.
  • GeoINT Search - coustom google search for geographical related search queries.
  • GeoIP Tracker tool - Got an intruder in your network? Want to know where the intruder is from? Use this tool. Geo IP tracker uses geographical location technology and utilizes public records to track down the location of the IP address. It may not be accurate, but it will give you idea of IP addresses whereabouts.
  • Earth Engine Dataset - Earth Engine’s public data archive includes more than forty years of historical imagery and scientific datasets, updated and expanded daily.
  • GeoPlatform Portal - The Geospatial Platform is a cross-agency collaborative effort and Shared Service that embodies the principles and spirit of Open Government, emphasizing government-to-citizen communication, accountability, and transparency.
  • FAO Map Catalog
  • geocreepy - A Geolocation OSINT Tool. Offers geolocation information gathering through social networking platforms.
  • US Crisis Monitor - The United States Crisis Monitor provides in-depth coverage of demonstration and political violence trends across the US
  • Toronto Live - toronto live ; like public schools, traffic, bike share, ttc.
  • Residential Fire Fatalities in Indiana
  • geoprotests API - Query protests worldwide and visualize them using spatial aggregations.
  • geoint-py - A bunch of geospatial intelligence workflows implemented using Python

⇧ Top

CRYPTOCURRENCY

  • Cryptocurrency Alerting - Real-time customizable price alert for cryptocurrencies, coins, stocks with many way to receive alert email, telegram, discord.
  • Bitcoin Explorer - Bitcoin’s blockchain is a publicly accessible ledger that records all transactions made with the cryptocurrency Bitcoin. It utilizes a decentralized network of computers (nodes) to maintain a chronological series of data blocks that are secured using cryptographic principles, ensuring the integrity and verifiability of each transaction.
  • Ethereum Block Explorer - Etherscan is the leading block explorer and search, API & analytics platform for Ethereum
  • Flowscan.org
  • Bitcoin Forums Search Engine - custom google search for bitcoin
  • Blockchain Explorer - Blockchain.com is a cryptocurrency financial services company. The company began as the first Bitcoin blockchain explorer in 2011 and later created a cryptocurrency wallet that accounted for 28% of bitcoin transactions between 2012 and 2020
  • Blockcypher - Find info that other block explorers don’t have, search the block chain.
  • Addresschecker.eu
  • Coinwink.com - Track important price changes of your favorite cryptocurrencies with the help of Coinwink crypto alerts

⇧ Top

DARKNET

⇧ Top

DATA DUMP

  • Have I been pwned - check if your email address is in a data breach
  • DeepSearch
  • Personal Data Leak Checker - Find out if your email, phone number or related personal information might have fallen into the wrong hands.
  • DDoSecrets - Distributed Denial of Secrets (DDoSecrets) is a non-profit journalist organization focused on publishing, archiving and analyzing public interest information, creating news coverage from around the world. DDoSecrets specializes in large datasets that have been leaked or hacked, and in verifying and researching the data while protecting sources
  • Leakedpassword.com - Find out if a password hack has exposed your password to the world.
  • DeHashed - Have you been compromised? DeHashed provides free deep-web scans and protection against credential leaks
  • Snusbase - Enhance the security of your personal accounts, as well as those of your employees and loved ones, by proactively monitoring the exposure of your online identities.
  • Ashley Madison hacked email checker - Was your profile compromised in the Ashley Madison hack
  • Search Ashley Madison Leaked Data - Search Ashley Madison Leaked Data
  • Sony Archives - You will find this data in there .onion site

⇧ Top

EXTREMIST / FAR-RIGHT

  • Unicorn Riot: Discord Leaks - Unicorn Riot obtained hundreds of thousands of messages from white supremacist and neo-nazi Discord chat servers after Charlottesville. Unicorn Riot Discord Leaks opens far-right activity centers to public scrutiny through data journalism.
  • Data | DDoSecrets Search - DDoSecrets is a non-profit journalist organization focused on publishing, archiving and analyzing public interest information, creating news coverage from around the world. DDoSecrets specializes in large datasets that have been leaked or hacked, and in verifying and researching the data while protecting sources. Founded in 2018, it has published over 100 million files from nearly 60 countries, worked with hundreds of outlets and half a dozen cross-border collaborations.
  • Adatascientist - exploring how money and ideas move around
  • Parler Capitol Videos - What Parler Saw During the Attack on the Capitol
  • Project Whispers - whispers data leak
  • 4chansearch.org - news search
  • archived.moe - archive data
  • Extremist Profiles - extremist file
  • Database of suspected terrorists - NSAT&T is an independent, non-government organization and is in no way affiliated with any branch of any government or any company that provides telephone or telegraph communications services
  • TSA No-Fly List - No fly list
  • RAND - RAND is a research organization that develops solutions to public policy challenges to help make communities throughout the world safer and more secure, healthier and more prosperous.
  • Global Terrorism Database - The Global Terrorism Database™ (GTD) is an open-source database including information on terrorist events around the world from 1970 through 2020 (with annual updates planned for the future). Unlike many other event databases, the GTD includes systematic data on domestic as well as international terrorist incidents that have occurred during this time period and now includes more than 200,000 cases.
  • Sanctions List Search - Sanctions List Search
  • Trump Twitter Archive - trump twitter archive
  • OFAC Sanctioned Search Engine - custom google search for OFAC Sanction search
  • INFORMNAPALM - InformNapalm volunteer intelligence community presents its interactive database, mapping Russian aggression against Ukraine as well as Georgia and Syria. More than 2000 OSINT investigations performed by InformNapalm
  • gogettr - Extraction tool for GETTR, a “non-bias [sic] social network.”
  • FBI Most Wanted Search Engine - custom google search engine for FBI most wanted list
  • Interpol Most Wanted Search Engine - costom google search for Interpol most wanted list
  • Europol Most Wanted Search Engine - custom google search for Europol most wnated list

⇧ Top

FINANCE

  • Greylist Trace - enterprise risk management and asset tracing
  • Tradint Research Tool - This tool enables users to conduct a full-scale Tradint (Trade Intelligence) investigation using the best tools and methods.
  • analytics-engine - An environment of open source services used for market analysis
  • Ppp.adatascienti.st - ppp load search
  • CoVi Analytics - At CoVi Analytics, we create easy-to-use tools (Apps) specifically for the operations team to help streamline operations, enhance efficiency, and empower growth through tech-driven solutions that simplify business activities, automate operations and deliver greater insights
  • Search Our PPP Loan Database - ppp load database search
  • Search for Investment Fund Documents - File, disclose and search for issuer information in Canada’s capital markets

⇧ Top

BUSINESS

⇧ Top

POLICE / LE / FED

⇧ Top

INFORMANT

  • WhosaRat.com - Largest online database of Police informants and corrupt Police/Agents
  • Snitch List - Your public blog diary where you can write about anything and anyone. You are anonymous to the world but yet your blogs matter.(archive of Sniitch) for site click Here
  • Goldensnitches - 500

RESIDENT DATABASE

⇧ Top

PUBLIC RECORDS

⇧ Top

GOVERNMENT

⇧ Top

ONLYFANS

OSINT Tools

OSINT Tools Collection

OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts

https://github.com/LinaYorda/OSINTko

CyberPunkOS is a virtual machine that incorporates several tools for Open Source Intelligence (OSINT) to dismantle Fake News

https://github.com/cyberpunkOS/CyberPunkOS

Chiasmodon 🥷🏼

Command line #osint toolkit for domain information gathering. Partly free. https://github.com/chiasmod0n/chiasmodon

One-click face swap

This software is designed to contribute positively to the AI-generated media industry, assisting artists with tasks like character animation and models for clothing.

https://github.com/s0md3v/roop

Short OSINT automation courses, each of which requires only one hour of reading to learn:

Linux for OSINT. 21-day

https://github.com/cipher387/linux-for-OSINT-21-day

Python for OSINT. 21-day

https://github.com/cipher387/python-for-OSINT-21-days

Alfred is a advanced OSINT information gathering tool that finds social media accounts based on inputs

https://github.com/Alfredredbird/alfred

Prying Deep - An OSINT tool to collect intelligence on the dark web.

https://github.com/iudicium/pryingdeep

https://github.com/AnonCatalyst/Ominis-Osint

Cheat Sheet - OSINT 🕵🏽‍♂️

https://piratemoo.gitbook.io/moo/moosint/osint

An online tool to visualize the relationships of different entry points in an investigation (domain, email, phone, person etc). Extreme simplified analog of Maltego.

https://app.netlas.io/asd/

Social Media #OSINT Tools Collection 👨🏽‍💻

🔗https://github.com/osintambition/Social-Media-OSINT-Tools-Collection

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes.

https://github.com/shadawck/awesome-anti-forensic

OSINT Toolkit is a full-stack web application designed to assist security analysts in their work

https://github.com/dev-lu/osint_toolkit

imago-forensics 🕵️

Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. https://github.com/redaelli/imago-forensics

🕵️ Collection of 4000+ OSINT resources

https://metaosint.github.io/table/

Avilla Forensics 3.0 / Tool for pollice investigation forensics Whatsapp-Signal other poppular apps message

https://github.com/AvillaDaniel/AvillaForensics

BBHTv2

A single script for all the tools you need for bug bounty. Thanks to the original creator of bbhtv1 for the idea » https://github.com/nahamsec

One-Liner Install curl https://raw.githubusercontent.com/unethicalnoob/BBHTv2/master/bbhtv2.sh | sudo bash

Tools OSINT/FORENSICS MOBILE

Features

https://github.com/CScorza/OSINT-FORENSICS-MOBILE

Forensic Copy Acquisition and Analysis Tools

https://github.com/CScorza/Analisi-Digital-Forense

Useful Extensions for OSINT

https://github.com/CScorza/EstensioniChromeOSINT

So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.

https://github.com/OhShINT/ohshint.gitbook.io

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

https://github.com/cloudtracer/ThreatPinchLookup

A tool to quickly identify relevant, publicly-available open source intelligence (“OSINT”) tools and resources, saving valuable time during investigations, research, and analysis.

https://github.com/MetaOSINT/MetaOSINT.github.io

Geospatial Intelligence Library

This repository contains a curated list of open source intelligence tools and resources focused on geolocation and chronolocation. A bookmark version of the most recent iteration of the following recourses is also available. https://github.com/cartographia/geospatial-intelligence-library

Protintelligence is a Python script for the Cyber Community. It also uses NeutrOSINT made by Kr0wZ. Will help you get info on Protonmail accounts and users, ProtonVPN IP adresses, ProtonMail users’ PGP Keys, Digital Footprints left by the ProtonMail user on the Clear and Dark Web

https://github.com/C3n7ral051nt4g3ncy/Prot1ntelligence

https://github.com/C3n7ral051nt4g3ncy/OSINT_Inception-links

Bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.

https://github.com/Bevigil/BeVigil-OSINT-CLI

cURL Tool Usage for OSINT (Open-Source Intelligence)

https://github.com/C3n7ral051nt4g3ncy/cURL_for_OSINT

Social Analyzer - API, CLI, and Web App for analyzing & finding a person’s profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process.

https://github.com/qeeqbox/social-analyzer

Complete list of sites where you can download the Distros that may be useful to those who are about to or are already in an advanced state in the context of OSINT, Penetration Testing, Digital Forensics and therefore also of Information Security.

https://github.com/CScorza/DistroForensics

A set of social media OSINT tools that I use when participating in Trace Labs Search Party CTF

https://github.com/LinaYorda/OSINTtools

About

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices https://github.com/jfarley248/MEAT

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

https://github.com/den4uk/andriller

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.

https://github.com/m8sec/CrossLinked

OSINT ADVANCING YOUR EMAIL INVESTIGATIONS USING IKY

https://github.com/kennbroorg/iKy

OSINT automation for hackers.

https://github.com/blacklanternsecurity/bbot

Citizen Intelligence Agency, open-source intelligence (OSINT) project

https://github.com/Hack23/cia

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

https://github.com/jfarley248/MEAT

Simple Imager has been created for performing live acquisition of Windows based systems in a forensically sound manner

https://github.com/QXJ6YW4/SimpleImager

Autoexif want to remove sensitive data from photos or even view it? use autoexif to easily help you do that no more remembering syntaxs, -note: this is now merged into snd and phisherprice

https://github.com/SirCryptic/autoexif

Sabonis, a Digital Forensics and Incident Response pivoting tool

https://github.com/thedfirofficer/sabonis

Scraping LegiFrance naturalisation decrees for fun and OSINT profit

https://github.com/vadimkantorov/natudump

An OSINT tool to search for accounts by username in social networks

https://github.com/p1ngul1n0/blackbird

Ransomware groups posts

https://github.com/privtools/ransomposts

Public release of Telepathy, an OSINT toolkit for investigating Telegram chats.

https://github.com/jordanwildon/Telepathy

An Open Source Intelligence Framework to investigate and keep track of the investigation of a certain individual

https://github.com/MustafaAP/pinosint

OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited.

https://github.com/narkopolo/fb_friend_list_scraper

🕵️‍♂️ Offensive Google framework.

https://github.com/mxrch/GHunt

Docker image for osint

https://github.com/Vault-Cyber-Security/osint

Python Pentester Tool - easily add/create plugins, available in command line tool and module.

https://github.com/HarryLudemann/Ngoto

Exif Looter:– ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap.

https://github.com/aydinnyunus/exifLooter

This tool gives information about the phone number that you entered.

https://github.com/AzizKpln/Moriarty-Project

List of OSINT resources

https://github.com/romz0mbie/OSINT-Lists

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target’s server and by means of advanced Google searches (Google Dorking).

https://github.com/m3n0sd0n4ld/GooFuzz

The best tools and resources for forensic analysis

https://github.com/HSNHK/Computer-forensics

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

https://github.com/smicallef/spiderfoot

Hayabusa

Hayabusa is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs written in Rust. : https://github.com/Yamato-Security/hayabusa

Awesome forensics

A curated list of awesome forensic analysis tools and resources. : https://github.com/patronuscode/awesome-forensics

MVT

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.: https://github.com/mvt-project/mvt

FireFox Security Researcher

Configure FireFox with Security and Intelligance features for OSINT and Security Investigations. https://github.com/simeononsecurity/FireFox-Security-Researcher

Iris Web

Collaborative Incident Response platform. : https://github.com/dfir-iris/iris-web

Offensive OSINT Blog

https://www.offensiveosint.io/

Judge Jury and Executable

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL. : https://github.com/AdamWhiteHat/Judge-Jury-and-Executable

Forensics Tools

A list of free and open forensics analysis tools and other resources. : https://github.com/mesquidar/ForensicsTools

Commit-stream

OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API. : https://github.com/x1sec/commit-stream

Quidam

Quidam allows you to retrieve information thanks to the forgotten password function of some sites.: https://github.com/megadose/Quidam

Quidam maltego transform

https://github.com/megadose/quidam-maltego

OnionSearch

OnionSearch is a script that scrapes urls on different .onion search engines. : https://github.com/megadose/OnionSearch

Linux explorer

Easy-to-use live forensics toolbox for Linux endpoints. : https://github.com/intezer/linux-explorer

DaProfiler

DaProfiler allows you to get emails, social medias, adresses, works and more on your target using web scraping and google dorking techniques, based in France Only. The particularity of this program is its ability to find your target’s e-mail adresses.: https://github.com/daprofiler/DaProfiler

Collection OSINT resources and tools

So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools.: https://github.com/OhShINT/ohshint.gitbook.io

A repository with information related to differnet resources, tools and techniques related with Cloud OSINT. : https://github.com/7WaySecurity/cloud_osint

Forensics Toolkit for image ,audio,network and disk image analyis.

Major tools used for Digital Forensic Investigation, includes tools used for Image, Audio, Memory, Network and Disk Image data analysis. Helpful resource for CTF Challenges. : https://github.com/karthik997/Forensic_Toolkit

Rapid7 OSINT

All the tools you need to make your own mind up from the Open Data Sets.: https://github.com/tg12/rapid7_OSINT

Mihari

A tool for OSINT based threat hunting. : https://github.com/ninoseki/mihari

TRACEE

Tracee: Runtime Security and Forensics using eBPF. : https://github.com/aquasecurity/tracee

Tlosint live

Trace Labs OSINT Linux Distribution based on Kali.: https://github.com/tracelabs/tlosint-live

gOSINT

OSINT Swiss Army Knife https://github.com/Nhoya/gOSINT

Karma v2

K𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence. : (OSINT) Automated Reconnaissance (framework) https://github.com/Dheerajmadhukar/karma_v2

Secure ELF

Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools. : https://github.com/elfmaster/libelfmaster

Toutatis

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more. : https://github.com/megadose/toutatis

Octosuite

Octosuite :– Advanced Github OSINT Framework. : https://github.com/rly0nheart/octosuite

Should i trust

OSINT tool to evaluate the trustworthiness of a company. : https://github.com/ericalexanderorg/should-i-trust

Forensix

Google Chrome forensic tool to process, analyze and visualize browsing artifacts. : https://github.com/ChmaraX/forensix

Sub3suite

A free, open source, cross platform Intelligence gathering tool. : https://github.com/3nock/sub3suite

Live Forensicator

Powershell Script to aid Incidence Response and Live Forensics: https://github.com/Johnng007/Live-Forensicator

Profil3r

OSINT tool that allows you to find a person’s accounts and emails + breached emails: https://github.com/Greyjedix/Profil3r

Infoooze

Infoooze is an Open-source intelligence (OSINT) tool in NodeJs. It provides various modules that allow efficient searches. : https://github.com/7ORP3DO/infoooze

Oblivion

Oblivion is a tool focused in real time monitoring of new data leaks, notifying if the credentials of the user has been leak out. It’s possible too verify if any credential of user has been leak out before. : https://github.com/loseys/Oblivion/tree/0f5619ecba6a9b1ebc6dc6f4988ef6c542bf8ca3

Mr.Holmes

🔍 A Complete Osint Tool : https://github.com/Lucksi/Mr.Holmes

AVOSINT

A tool to search Aviation-related intelligence from public sources. : https://github.com/n0skill/AVOSINT

Darvester

PoC OSINT Discord user and guild information harvester : https://github.com/V3ntus/darvester

Ghost Recon

An OSINT framework updated weekly, wich with you can search on precise targets, with a lot of features like person search, criminal search, or social media scanning with eamail/phone, and ip changer. : https://github.com/DR34M-M4K3R/GhostRecon

Collector

Collector is a tool for osint (open source intelligence). : https://github.com/galihap76/collector

Twayback

Automate downloading archived deleted ets.: https://github.com/Mennaruuk/twayback

Opensquat

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting. : https://github.com/atenreiro/opensquat

Telegram Trilateration

Proof of concept for abusing Telegram’s “People Near Me” feature and tracking people’s location: https://github.com/jkctech/Telegram-Trilateration

Telegram Nearby Map

Discover the location of nearby Telegram users 📡🌍 : https://github.com/tejado/telegram-nearby-map

Holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function. https://github.com/megadose/holehe

Holehe Maltego Transform

https://github.com/megadose/holehe-maltego

Terra

OSINT Tool on Twitter and Instagram. : https://github.com/xadhrit/terra

Prosint

ProtOSINT is a Python script that helps you investigate Protonmail accounts and ProtonVPN IP addresses https://github.com/pixelbubble/ProtOSINT

Toolkit

A toolkit for the post-mortem examination of Docker containers from forensic HDD copies https://github.com/docker-forensics-toolkit/toolkit

iOS Frequent Locations Dumper

Dump the iOS Frequent Location binary plist files https://github.com/mac4n6/iOS-Frequent-Locations-Dumper

Whapa

Whapa is a set of graphical forensic tools to analyze whatsapp from Android and soon iOS devices. All the tools have been written in Python 3.8 and have been tested on linux, windows and macOS systems. https://github.com/B16f00t/whapa

Kupa3

Tracking the trackers. Draw connections between scripts and domains on website. https://github.com/woj-ciech/kupa3

Abuse Insight

To extract the usernames attempted by a compromised host. This information is obtained from Abuse IP DB, reports’ comments. : https://github.com/west-wind/abuse-insights

Octosuite

Advanced Github OSINT Framework : https://github.com/rly0nheart/octosuite

Kamerka Gui

Ultimate Internet of Things/Industrial Control Systems reconnaissance tool. https://github.com/woj-ciech/Kamerka-GUI

Social Path

Track users across social media platform https://github.com/woj-ciech/SocialPath

Osint stuff tool collection

A collection of several hundred online tools for OSINT https://github.com/cipher387/osint_stuff_tool_collection

Teler

Real-time HTTP Intrusion Detection. : https://github.com/kitabisa/teler

ArreStats

A Search Tool created to explore the FBI’s nj arrest file. Created For Hack Jersey 2.0 https://github.com/CarlaAstudillo/ArreStats

OSINT JUMP

This virtual machine image is intended for open source offensive reconnaissance. The iso image of the kali linux NetInstall operating system is taken as a basis. Other required packages were installed manually. The image includes the following packages.: https://github.com/delikely/OSINT-JUMP

Infoga

Infoga - Collection of information by e-mail https://github.com/m4ll0k/Infoga

Crime data explorer

Chief report of the FBI crime data explorer project https://github.com/18F/crime-data-explorer

PDFMtEd

Pdfmted (PDF Metadata Editor) is a set of tools designed to simplify work with pdf metadata on Linux. The utilities hosted in this repository are graphic interfaces for the wonderful exiftool of Phil Harvey. https://github.com/glutanimate/PDFMtEd

Audio metadata

Extract Metadata from several audio containers https://github.com/tmont/audio-metadata

Gesmask

Information gathering tool - OSINT https://github.com/twelvesec/gasmask

Check ifemail exists

Check if there is an e-mail address without sending any email. Use Telnet. https://github.com/amaurymartiny/check-if-email-exists

App Metadata

Provides Metadata extraction for IOS, Android and windows packages. https://github.com/Microsoft/app-metadata

ANDROPHSY

An Open-Source Mobile Forensic Research Tool for android platform https://github.com/scorelab/ANDROPHSY

RdpCacheStitcher

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. - https://github.com/BSI-Bund/RdpCacheStitcher

Androidqf

Androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise. - https://github.com/botherder/androidqf

IPED

IPED is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners. - https://github.com/sepinf-inc/IPED

Turbinia

Automation and automation of digital forensic tools https://github.com/google/turbinia

Chrome Extractor

Script that will extract all the passwords stored from your Google Chrome Database and will keep them in Chrome. Txt txt txt txt txt txt txt txt txt https://github.com/D4Vinci/Chrome-Extractor

Firefox Decrypt

Firefox decrypt is a tool to extract passwords from Mozilla Profiles (Firefox / Thunderbird / Seabird) https://github.com/unode/firefox_decrypt

Ip Geolocation

Recover information from ip geolocation https://github.com/maldevel/IPGeoLocation

Cameradar

Cameradar hacks its way into RTSP videosurveillance cameras https://github.com/Ullaakut/cameradar

Power Forensic

Powerforensics is a framework for forensic analysis of live records https://github.com/Invoke-IR/PowerForensics

Face Recognition

The World’s simplest facial recognition api for python and the command line https://github.com/ageitgey/face_recognition

OSINT Tools 1

Awesome OSINT

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence community (IC), the term “open” refers to overt, publicly available sources (as opposed to covert or clandestine sources).

This list is to help all of those who are into Cyber Threat Intellience (CTI), threat hunting, or OSINT. From beginners to advanced.

Happy hacking and hunting 🧙‍♂️

📖 Table of Contents

Contributing

Please read CONTRIBUTING if you wish to add tools or resources. Feel free to help 🥰 us grow this list with great resources.

Credits

This list was taken partially taken from i-inteligence’s OSINT Tools and Resources Handbook.

Thanks to our main contributors jivoi EK_ & spmedia

The main search engines used by users.

  • Aol - The web for America.
  • Ask - Ask something and get a answer.
  • Bing - Microsoft´s search engine.
  • Brave - a private, independent, and transparent search engine.
  • DuckDuckGo - an Internet search engine that emphasizes protecting searchers’ privacy.
  • Goodsearch - a search engine for shopping deals online.
  • Google Search - Most popular search engine.
  • Instya - You can searching shopping sites, dictionaries, answer sites, news, images, videos and much more.
  • Impersonal.me
  • Lycos - A search engine for pictures, videos, news and products.
  • Mojeek - A growing independent search engine which does not track you.
  • Search.com - Search the Web by searching the best engines from one place.
  • SurfCanyon - a real-time contextual search technology that observes user behavior in order to disambiguate intent “on the fly,” and then automatically bring forward to page one relevant results that might otherwise have remain buried.
  • Wolfram Alpha - Wolfram Alpha is a computational knowledge engine (answer engine) developed by Wolfram Alpha. It will compute expert-level answers using Wolfram’s breakthrough algorithms, knowledgebase and AI technology.
  • Yahoo! Search - The search engine that helps you find exactly what you’re looking for.
  • YOU - AI search engine.

Main National Search Engines

Localized search engines by country.

Lesser known and used search engines.

Specialty Search Engines

Search engines for specific information or topics.

Visual Search and Clustering Search Engines

Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.

Find websites that are similar. Good for business competition research.

Search for data located on PDFs, Word documents, presentation slides, and more.

Search for all kind of files.

Pastebins

Find information that has been uploaded to Pastebin & alternative pastebin-type sites

Search by website source code

  • AnalyzeID - Find Other Websites Owned By The Same Person
  • Code Finder - The ultimate search engine for finding GitHub repositories
  • grep.app - Searches code from the entire github public repositories for a given specific string or using regular expression.
  • NerdyData - Search engine for source code.
  • PublicWWW
  • Reposearch
  • SearchCode - Help find real world examples of functions, API’s and libraries across 10+ sources.
  • SourceGraph - Search code from millions of open source repositories.

Major Social Networks

Real-Time Search, Social Media Search, and General Social Media Tools

Social Media Tools

Twitter

Facebook

Instagram

  • Iconosquare
  • Osintgram - Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname.
  • Picodash - Find Instagram Target Audience and Influencers
  • Sterra - Instagram OSINT tool to export and analyse followers | following with their details
  • Toutatis - a tool that allows you to extract information from instagrams accounts such as s, phone numbers and more

Pinterest

Reddit

Tools to help discover more about a reddit user or subreddit.

  • Imgur - The most popular image hosting website used by redditors.
  • Mostly Harmless - Mostly Harmless looks up the page you are currently viewing to see if it has been submitted to reddit.
  • Reddit Archive - Historical archives of reddit posts.
  • Reddit Suite - Enhances your reddit experience.
  • Reddit User Analyser - reddit user account analyzer.
  • Subreddits - Discover new subreddits.
  • Reddit Comment Search - Analyze a reddit users by comment history.
  • Universal Scammer List - This acts as the website-portion for the subreddit /r/universalscammerlist. That subreddit, in conjuction with this website and a reddit bot, manages a list of malicious reddit accounts and minimizes the damage they can deal. This list is referred to as the “USL” for short.
  • Reddit Comment Lookup - Search for reddit comments by reddit username.

VKontakte

Perform various OSINT on Russian social media site VKontakte.

Tumblr

LinkedIn

  • FTL - Browser plugin that finds emails of people’s profiles in LinkedIn.

Telegram

  • Telegago - A Google Advanced Search specifically for finding public and private Telegram Channels and Chatrooms.
  • Telegram Nearby Map - Webapp based on OpenStreetMap and the official Telegram library to find the position of nearby users.

Username Check

  • Blackbird - Search a username across over 500+ websites.
  • CheckUser - search username across social networks
  • Digital Footprint Check - Check for registered username on 100s of sites for free.
  • IDCrawl - Search for a username in popular social networks.
  • Maigret - Collect a dossier on a person by username.
  • Name Chk - Check over 30 domains and more than 90 social media account platforms.
  • Name Checkr - checks a domain and username across many platforms.
  • Name Checkup - is a search tool that allows you to check the avilability of a givrn username from all over the social media. Inaddition it also sllows you to check the avilability of a given domain name.
  • NameKetchup - checks domain name and username in popular social media sites and platforms.
  • NexFil - checks username from almost all social network sites.
  • Seekr A multi-purpose all in one toolkit for gathering and managing OSINT-Data with a neat web-interface. Can be used for note taking and username checking.
  • Sherlock - Search for a username in multiple platforms/websites.
  • Snoop - Search for a nickname on the web (OSINT world)
  • User Search - Find someone by username, email, phone number or picture across Social Networks, Dating Sites, Forums, Crypto Forums, Chat Sites and Blogs, 3000+ sites Supported!
  • User Searcher - User-Searcher is a powerful and free tool to help you search username in 2000+ websites.
  • WhatsMyName - check for usernames across many different platforms.

People Investigations

  • 192 (UK) - Search by person, business, address. Limited free info, premium data upsell.
  • 411 (US) - Search by person, phone number, address, and business. Limited free info, premium data upsell.
  • Ancestry - Premium data, free trial with credit card.
  • BeenVerified
  • Black Book Online - Free. Nationwide directory of public record lookups.
  • Canada411 - Search by person, phone number, and business. Free.
  • Classmates - High-school focused people search. Free acounts allow creating a profile and viewing other members. Premium account required to contact other members.
  • CrunchBase - Business information database, with a focus on investment, acquisition, and executive data. Ancillary focus on market research and connecting founders and investors.
  • FaceCheck.ID - Search the internet by face.
  • Family Search - Popular genealogy site. Free, but registration requried. Funded by The Church Of Jesus Christ of Latter-day Saints.
  • FamilyTreeNow - Research family and geneology, no registration required, can search addresses, phone numbers, and email addresses as well as associations.
  • Federal Bureau of Prisons - Inmate Locator (US) - Search federal inmates incarcerated from 1982 to the present.
  • Fold3 (US Military Records) - Search military records. Search filters limited with free access. Premium access requires subscription.
  • Genealogy Bank - Premium data, free trial with credit card.
  • Genealogy Links - Genealogy directory with over 50K links.
  • Homemetry - Reverse address search and allows searching for properties for sale/rent.
  • JailBase - is an information site that allows you to search for arrested persons you might know, and even get notified if someone you know gets arrested.
  • Judyrecords - Free. Nationwide search of 400 million+ United States court cases.
  • Kompass - Business directory and search.
  • Mugshots
  • OpenSanctions - Information on sanctions and public office holders.
  • Reunion - People search. Limited free info, premium data upsell.
  • SearchBug - People search. Limited free info, premium data upsell.
  • Spokeo - People search. Limited free info, premium data upsell.
  • The National Archives (UK) - Search UK national archives.
  • UniCourt - Limited free searches, premium data upsell. Nationwide search of 100 million+ United States court cases.
  • VineLink - Inmate search and notification service for victims of crime, linked to multiple correctional facilities’ booking systems in the U.S.
  • Voter Records - Free political research tool to study more than 100 Million US voter records.
  • White Pages (US) - People search. Limited free info, premium data upsell.
  • ZabaSearch

Email Search / Email Check

  • DeHashed - DeHashed helps prevent ATO with our extensive data set & breach notification solution. Match employee and consumer logins against the world’s largest repository of aggregated publicly available assets leaked from third-party breaches. Secure passwords before criminals can abuse stolen information, and protect your enterprise.
  • Email Address Validator - Improve deliverability, reduce bounce rates, prevent fraud and minimize funnel leaks.
  • Email Format - is a website that allows you to find email address formats used by different companies.
  • Email Permutator - a powerful tool designed to aid professionals in generating a range of potential email addresses for a specific contact.
  • EmailHippo - is an email address verification platform that will check whether a given email address exist or not.
  • Ghunt - Investigate Google emails and documents.
  • Gitrecon - Node.js tool to scan GitHub repositories for exposed email addresses and names.
  • h8mail - Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email.
  • Have I Been Pwned - Search across multiple data breaches to see if your email address has been compromised.
  • Holehe - allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
  • Hunter - Hunter lets you find email addresses in seconds and connect with the people that matter for your business.
  • LeakCheck - Data Breach Search Engine with 7.5B+ entries collected from more than 3000 databases. Search by e-mail, username, keyword, password or corporate domain name.
  • MailTester - hunt for emails and improve your email deliverability
  • mxtoolbox - Free online tools to investigate/troubleshoot email server issues.
  • Peepmail - is a tool that allows you to discover business email addresses for users, even if their email address may not be publicly available or shared.
  • Pipl - a provider of identity solutions.
  • Reacher - Real-time email verification API, written in Rust, 100% open-source.
  • Snov.io - Find email addresses on any website.
  • ThatsThem - Reverse Email Lookup.
  • Toofr - Find Anyone’s Email Address in Seconds.
  • Verify Email - The fastest and most accurate email verification tool.
  • VoilaNorbert - Find anyone’s contact information for lead research or talent acquisition.

Phone Number Research

  • CallerID Test - Get caller ID and telco carrier information back from a phone number.
  • EmobileTracker.com - a service specifically designed to Track Mobile Number, Location on Google Map including information such as the owner’s Name,Location,Country,Telecom provider.
  • FreeCarrierLookup - enter a phone number and we’ll return the carrier name and whether the number is wireless or landline. We also return the email-to-SMS and email-to-MMS gateway addresses for USA and Canadian- phone numbers.
  • Infobel - Search 164+ million records across 73 countries for companies and individuals. Find places, local service providers, their contact details, reviews, opening hours and more.
  • Phone Validator - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
  • PhoneInfoga - Advanced information gathering & OSINT framework for phone numbers.
  • Reverse Phone Check - Look up names, addresses, phone numbers, or emails and anonymously discover information about yourself, family, friends, or old schoolmates. Powered by infotracer.com
  • Reverse Phone Lookup - Detailed information about phone carrier, region, service provider, and switch information.
  • Spy Dialer - Get the voicemail of a cell phone & owner name lookup.
  • Sync.ME - a caller ID and spam blocker app.
  • Truecaller - Global reverse phone number search.
  • Twilio - Look up a phone numbers carrier type, location, etc. Twilio offers free accounts that come with credits you can use with their API. Each lookup is only ~$0.01-$0.02 typically on US and CAN numbers.

Vehicle / Automobile Research

  • FaxVIN - Vehicle History Reports. A license plate lookup tool that returns info like VIN, make & model of vehicle, age, and numerous other details.
  • EpicVIN - Vehicle reports are compiled from various data sources, including historical accident records from state agencies and other entities like NMVTIS. License plate lookup that returns VIN and car millage.

Company Research

Job Search Resources

Q&A Sites

Domain and IP Research

Keywords Discovery and Research

Web History and Website Capture

Language Tools

Image Analysis

Video Search and Other Video Tools

  • Bing Videos
  • Clarify
  • Clip Blast
  • DailyMotion
  • Deturl - Download a YouTube video from any web page.
  • DownloadHealper - Download any video from any websites, it just works!
  • Earthcam - EarthCam is the leading network of live streaming webcams for tourism and entertainment.
  • Filmot - Search within YouTube subtitles. Indexing over 573 million captions across 528 million videos and 45 million channels.
  • Find YouTube Video - Searches currently 5 YouTube archives for specific videos by ID, which is really useful for finding deleted or private YouTube videos.
  • Frame by Frame - Browser plugin that allows you to watch YouTube videos frame by frame.
  • Geosearch
  • Insecam - Live cameras directory
  • Internet Archive: Open Source Videos
  • Metacafe
  • Metatube
  • Tubuep - Downloads online videos via yt-dlp, then reuploads them to the Internet Archive for preservation. Note: if you would like to archive comments too, you need to install version 0.0.33 and use the –get-comments flag, however you will still have the new yt-dlp fixes and features, but existing tubeup bugs cannot be fixed, unless you do manual work.
  • Veoh
  • Video Stabilization Methods
  • Vimeo
  • Yahoo Video Search
  • YouTube Data Viewer
  • YouTube Geofind
  • YouTube Metadata
  • YouTube
  • yt-dlp - Downloads videos from almost any online platform, along with information, thumbnails, subtitles, descriptions, and comments (comments only on a select few sites like Youtube and a few small sites). If a site is not supported, or a useful or crucial piece of metadata, including comments, is missing, create an issue.

Academic Resources and Grey Literature

Geospatial Research and Mapping Tools

News

News Digest and Discovery Tools

Fact Checking

Data and Statistics

Web Monitoring

Browsers

Offline Browsing

VPN Services

Infographics and Data Visualization

Social Network Analysis

Privacy and Encryption Tools

DNS

  • Amass - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
  • Columbus Project - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
  • findsubdomains - Automatically scans different sources to collect as many subdomains as can. Validate all the data through various tools and services to provide correct results without waiting.

Maritime

  • VesselFinder - a FREE AIS vessel tracking web site. VesselFinder displays real time ship positions and marine traffic detected by global AIS network.

Other Tools

  • Barcode Reader - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
  • Belati - Belati - The Traditional Swiss Army Knife For OSINT. Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose.
  • BeVigil-CLI - A unified command line interface and python library for using BeVigil OSINT API to search for assets such as subdomains, URLs, applications indexed from mobile applications.
  • CantHide - CantHide finds previous locations by looking at a given social media account.
  • CrowdSec - An open source, free, and collaborative IPS/IDS software written in Go, able to analyze visitor behavior & provide an adapted response to all kinds of attacks.
  • Datasploit - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
  • Discoshell - A simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others
  • DuckDuckGo URL scraper - A simple DuckDuckGo URL scraper.
  • eScraper - Grab product descriptions, prices, image
  • FOCA - Tool to find metadata and hidden information in the documents.
  • Glit - Retrieve all mails of users related to a git repository, a git user or a git organization.
  • Greynoise - “Anti-Threat Intelligence” Greynoise characterizes the background noise of the internet, so the user can focus on what is actually important.
  • Hunchly - Hunchly is a web capture tool designed specifically for online investigations.
  • Intrigue Core - Framework for attack surface discovery.
  • LinkScope Client - LinkScope Client Github repository.
  • LinkScope - LinkScope is an open source intelligence (OSINT) graphical link analysis tool and automation platform for gathering and connecting information for investigative tasks.
  • Maltego - Maltego is an open source intelligence (OSINT) and graphical link analysis tool for gathering and connecting information for investigative tasks.
  • OpenRefine - Free & open source power tool for working with messy data and improving it.
  • Orbit - Draws relationships between crypto wallets with recursive crawling of transaction history.
  • OSINT Framework - Web based framework for OSINT.
  • OSINT-Tool - A browser extension that gives you access to a suite of OSINT utilities (Dehashed, Epieos, Domaintools, Exif data, Reverse image search, etc) directly on any webpage you visit.
  • OSINT.SH - Information Gathering Toolset.
  • OsintStalker - Python script for Facebook and geolocation OSINT.
  • Outwit - Find, grab and organize all kinds of data and media from online sources.
  • Photon - Crawler designed for OSINT
  • Pown Recon - Target reconnaissance framework powered by graph theory.
  • pygreynoise - Greynoise Python Library
  • QuickCode - Python and R data analysis environment.
  • SecApps Recon - Information gathering and target reconnaissance tool and UI.
  • SerpApi - Scrapes Google search and 25+ search engines with ease and retruns a raw JSON. Supports 10 API wrappers.
  • SerpScan - Powerful PHP script designed to allow you to leverage the power of dorking straight from the comfort of your command line. Analyzes data from Google, Bing, Yahoo, Yandex, and Badiu.
  • sn0int - Semi-automatic OSINT framework and package manager.
  • SpiderFoot - SpiderFoot Github repository.
  • SpiderFoot - SpiderFoot is an open source intelligence (OSINT) automation platform with over 200 modules for threat intelligence, attack surface monitoring, security assessments and asset discovery.
  • SpiderSuite - An advance, cross-platform, GUI web security crawler.
  • Sub3 Suite - A research-grade suite of tools for intelligence gathering & target mapping with both active and passive(100+ modules) intelligence gathering capabilities.
  • The Harvester - Gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
  • Zen - Find email addresses of Github users urls and other data effortlessly

Threat Intelligence

  • GitGuardian - Public GitHub Monitoring - Monitor public GitHub repositories in real time. Detect secrets and sensitive information to prevent hackers from using GitHub as a backdoor to your business.
  • OnionScan - Free and open source tool for investigating the Dark Web. Its main goal is to help researchers and investigators monitor and track Dark Web sites.
  • OTX AlienVault - Open Threat Exchange is the neighborhood watch of the global intelligence community. It enables private companies, independent security researchers, and government agencies to openly collaborate and share the latest information about emerging threats, attack methods, and malicious actors, promoting greater security across the entire community.
  • REScure Threat Intel Feed - REScure is an independent threat intelligence project which we undertook to enhance our understanding of distributed systems, their integration, the nature of threat intelligence and how to efficiently collect, store, consume, distribute it.

OSINT Videos

OSINT Blogs

Other Resources

Social Engineering Tools

Social Engineering

=============== A curated list of social engineering resources. Those resources and tools are intended only for cybersecurity professional, penetration testers and educational use in a controlled environment.

Table of Contents

  1. Online Courses
  2. Capture the Flag
  3. Psychology Books
  4. Books
  5. Documentation
  6. Tools
  7. Miscellaneus
  8. OSINT

Online Courses

Capture the Flag

Social-Engineer.com - The SECTF, DEFCON

Psychology Books

Most of these books covers the basics of psychology useful for a social engineer.

Social Engineering Books

COMMUNITIES

Abstract Security - community od Discord that is focused around Physical Security and it has many members that are in the buissness of Physical Security.

Documentation

Social Engineer resources

  • The Social-Engineer portal - Everything you need to know as a social engineer is in this site. You will find podcasts, resources, framework, informations about next events, blog ecc…

  • Layer 8 conference and podcast - Conference and podcast that is focused on OSINT and Social Engineering.

Tools

Useful tools

  • Tor - The free software for enabling onion routing online anonymity
  • SET - The Social-Engineer Toolkit from TrustedSec

Phishing tools

  • Gophish - Open-Source Phishing Framework
  • King Phisher - Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.
  • wifiphisher - Automated phishing attacks against Wi-Fi networks
  • PhishingFrenzy - Phishing Frenzy is an Open Source Ruby on Rails application that is leveraged by penetration testers to manage email phishing campaigns.
  • Evilginx2 - MITM attack framework used for phishing credentials and session cookies from any Web service
  • Lucy Phishing Server - (commercial) tool to perform security awareness trainings for employees including custom phishing campaigns, malware attacks etc. Includes many useful attack templates as well as training materials to raise security awareness.

Miscellaneous

Slides

Videos

Articles

Movies

OSINT

OSINT Resources

OSINT Tools

  • XRay - XRay is a tool for recon, mapping and OSINT gathering from public networks.
  • Buscador - A Linux Virtual Machine that is pre-configured for online investigators
  • Maltego - Proprietary software for open source intelligence and forensics, from Paterva.
  • theHarvester - E-mail, subdomain and people names harvester
  • creepy - A geolocation OSINT tool
  • exiftool.rb - A ruby wrapper of the exiftool, a open-source tool used to extract metadata from files.
  • metagoofil - Metadata harvester
  • Google Hacking Database - a database of Google dorks; can be used for recon
  • Google-Dorks - Common google dorks and others you prolly don’t know
  • GooDork - Command line go0gle dorking tool
  • dork-cli - Command-line Google dork tool.
  • Shodan - Shodan is the world’s first search engine for Internet-connected devices
  • recon-ng - A full-featured Web Reconnaissance framework written in Python
  • github-dorks - CLI tool to scan github repos/organizations for potential sensitive information leak
  • vcsmap - A plugin-based tool to scan public version control systems for sensitive information
  • Spiderfoot - multi-source OSINT automation tool with a Web UI and report visualizations
  • DataSploit - OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes.
  • snitch - information gathering via dorks
  • Geotweet_GUI - Track geographical locations of tweets and then export to google maps.

Contribution

Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕). Please check the Contributing Guidelines for more details.

License

License

Creative Commons License Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License

OSINT Tools 2

Start

shodan

ip-test

Virtual Host Finding

dns

DNS public name server

internet-search-engine-discovery

subdomain-enumeration

Exception(web) subdomain enumeration

Find subdomain on GitHub

Find subdomain from Official DoD(Depart of Defence) website

dns-bruteforce

osint

  • DarkScrape - OSINT Tool For Scraping Dark Websites
  • virustotal - Analyze suspicious files and URLs to detect types of malware, automatically share them with the security community
  • RED_HAWK - All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
  • siteindices - siteindices
  • udork.sh
  • fav-up
  • testssl - Testing TLS/SSL encryption anywhere on any port
  • bbtz
  • sonar search
  • notify - Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.
  • email finder
  • analytics relationships
  • mapcidr
  • ppfuzz
  • cloud-detect
  • interactsh
  • bbrf
  • spiderfoot - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
  • visualsitemapper - free service that can quickly show an interactive visual map of your site.
  • jwt - JWT.IO allows you to decode, verify and generate JWT. Gain control over your JWTs
  • bgp.he - Internet Backbone and Colocation Provider
  • spyse - Find any Internet asset by digital fingerprints
  • whoxy - whois database

http-probing

subdomain-takeover

  • subjack - Subdomain Takeover tool written in Go
  • SubOver - A Powerful Subdomain Takeover Tool
  • autoSubTakeover - A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.
  • NSBrute - Python utility to takeover domains vulnerable to AWS NS Takeover
  • can-i-take-over-xyz - “Can I take over XYZ?” — a list of services and how to claim (sub)domains with dangling DNS records.
  • Can-I-take-over-xyz-v2 - V2
  • cnames - take a list of resolved subdomains and output any corresponding CNAMES en masse.
  • subHijack - Hijacking forgotten & misconfigured subdomains
  • tko-subs - A tool that can help detect and takeover subdomains with dead DNS records
  • HostileSubBruteforcer - This app will bruteforce for exisiting subdomains and provide information if the 3rd party host has been properly setup.
  • second-order - Second-order subdomain takeover scanner
  • takeover - A tool for testing subdomain takeover possibilities at a mass scale.

web-screenshot

  • EyeWitness - EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  • aquatone - Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface.
  • screenshoteer - Make website screenshots and mobile emulations from the command line.
  • gowitness - gowitness - a golang, web screenshot utility using Chrome Headless
  • WitnessMe - Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
  • eyeballer - Convolutional neural network for analyzing pentest screenshots
  • scrying - A tool for collecting RDP, web and VNC screenshots all in one place
  • Depix - Recovers passwords from pixelized screenshots
  • httpscreenshot - HTTPScreenshot is a tool for grabbing screenshots and HTML of large numbers of websites.

cms-enumeration

  • ObserverWard - Cross platform community web fingerprint identification tool AEM
  • aem-hacker
  • cmseek - CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
  • webanlyze - Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.
  • whatweb - Next generation web scanner
  • wappalyzer - wappalyzer website
  • wappalyzer cli - Identify technology on websites.
  • build with
  • build with cli - BuiltWith API client
  • backlinkwatch - Website for backlink finding
  • retirejs -scanner detecting the use of JavaScript libraries with known vulnerabilities

automation

  • inventory - Asset inventory on public bug bounty programs.
  • bugradar - Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.
  • wapiti-scanner - Scan your website
  • nuclei - Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.
  • Nuclei-Templates-Collection - Nuclei templates collection
  • the-nuclei-templates - Nuclei templates written by us.
  • scant3r - ScanT3r - Module based Bug Bounty Automation Tool
  • Sn1per - Automated pentest framework for offensive security experts
  • metasploit-framework - Metasploit Framework
  • nikto - Nikto web server scanner
  • arachni - Web Application Security Scanner Framework
  • jaeles - The Swiss Army knife for automated Web Application Testing
  • retire.js - scanner detecting the use of JavaScript libraries with known vulnerabilities
  • Osmedeus - Fully automated offensive security framework for reconnaissance and vulnerability scanning
  • getsploit - Command line utility for searching and downloading exploits
  • flan - A pretty sweet vulnerability scanner
  • Findsploit - Find exploits in local and online databases instantly
  • BlackWidow - A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
  • backslash-powered-scanner - Finds unknown classes of injection vulnerabilities
  • Eagle - Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
  • cariddi - Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more…
  • kenzer - automated web assets enumeration & scanning
  • ReScue - An automated tool for the detection of regexes’ slow-matching vulnerabilities.

ile upload scanner

  • fuxploider - File upload vulnerability scanner and exploitation tool.

Network Scanner

  • openvas - Free software implementation of the popular Nessus vulnerability assessment system.
  • vuls - Agentless vulnerability scanner for GNU/Linux and FreeBSD, written in Go.
  • nexpose - Commercial vulnerability and risk management assessment engine that integrates with Metasploit, sold by Rapid7.
  • nessus - Commercial vulnerability management, configuration, and compliance assessment platform, sold by Tenable.

wordpress

joomla

drupal

  • droopescan - A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

cloud-enumeration

Buckets

  • S3Scanner - Scan for open AWS S3 buckets and dump the contents
  • AWSBucketDump - Security Tool to Look For Interesting Files in S3 Buckets
  • CloudScraper - CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
  • s3viewer - Publicly Open Amazon AWS S3 Bucket Viewer
  • festin - FestIn - S3 Bucket Weakness Discovery
  • s3reverse - The format of various s3 buckets is convert in one format. for bugbounty and security testing.
  • mass-s3-bucket-tester - This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable
  • S3BucketList - Firefox plugin that lists Amazon S3 Buckets found in requests
  • dirlstr - Finds Directory Listings or open S3 buckets from a list of URLs
  • Burp-AnonymousCloud - Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
  • kicks3 - S3 bucket finder from html,js and bucket misconfiguration testing tool
  • 2tearsinabucket - Enumerate s3 buckets for a specific target.
  • s3_objects_check - Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  • s3tk - A security toolkit for Amazon S3
  • CloudBrute - Awesome cloud enumerator
  • s3cario - This tool will get the CNAME first if it’s a valid Amazon s3 bucket and if it’s not, it will try to check if the domain is a bucket name.
  • S3Cruze - All-in-one AWS S3 bucket tool for pentesters.

github-secrets

  • githacker
  • git-hound
  • gh-dork - Github dorking tool
  • gitdorker - A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
  • github-endpoints
  • git-secrets - Prevents you from committing secrets and credentials into git repositories
  • gitleaks - Scan git repos (or files) for secrets using regex and entropy
  • truffleHog - Searches through git repositories for high entropy strings and secrets, digging deep into commit history
  • gitGraber - gitGraber: monitor GitHub to search and find sensitive data in real time for different online services
  • talisman - By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.
  • GitGot - Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
  • git-all-secrets - A tool to capture all the git secrets by leveraging multiple open source git searching tools
  • github-search - Tools to perform basic search on GitHub.
  • git-vuln-finder - Finding potential software vulnerabilities from git commit messages
  • commit-stream - #OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API
  • gitrob - Reconnaissance tool for GitHub organizations
  • repo-supervisor - Scan your code for security misconfiguration, search for passwords and secrets.
  • GitMiner - Tool for advanced mining for content on Github
  • shhgit - Ah shhgit! Find GitHub secrets in real time
  • detect-secrets - An enterprise friendly way of detecting and preventing secrets in code.
  • rusty-hog - A suite of secret scanners built in Rust for performance. Based on TruffleHog
  • whispers - Identify hardcoded secrets and dangerous behaviours
  • yar - Yar is a tool for plunderin’ organizations, users and/or repositories.
  • dufflebag - Search exposed EBS volumes for secrets
  • secret-bridge - Monitors Github for leaked secrets
  • earlybird - EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.

GitHub dork wordlist

Git

  • GitTools - A repository with 3 tools for pwn’ing websites with .git repositories available
  • gitjacker - Leak git repositories from misconfigured websites
  • git-dumper - A tool to dump a git repository from a website
  • GitHunter - A tool for searching a Git repository for interesting content
  • dvcs-ripper - Rip web accessible (distributed) version control systems: SVN/GIT/HG…

email-hunting

data-breach

web-wayback

  • waymore - Find way more from the Wayback Machine!
  • sigurlfind3r - A passive reconnaissance tool for known URLs discovery - it gathers a list of URLs passively using various online sources
  • waybackurls - Fetch all the URLs that the Wayback Machine knows about for a domain
  • gau - Fetch known URLs from AlienVault’s Open Threat Exchange, the Wayback Machine, and Common Crawl.
  • gauplus - A modified version of gau
  • waybackpy - Wayback Machine API Python interfaces and CLI tool.
  • chronos - Extract pieces of info from a web page’s Wayback Machine history

Replace parameter value

  • bhedak - A replacement of “qsreplace”, accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.

Find reflected params

  • gxss - A tool to check a bunch of URLs that contain reflecting params.
  • freq - This is go CLI tool for send fast Multiple get HTTP request.
  • bxss - A Blind XSS Injector tool

Find js file from waybackurls.txt

Automatic put parameter value

Declutters url lists

ports-scanning

  • masscan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
  • RustScan - The Modern Port Scanner
  • naabu - A fast port scanner written in go with focus on reliability and simplicity.
  • nmap - Nmap - the Network Mapper. Github mirror of official SVN repository.
  • sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • ScanCannon - Combines the speed of masscan with the reliability and detailed enumeration of nmap
  • unimap

Brute-Forcing from Nmap output

waf

  • wafw00f
  • cf-check
  • w3af - w3af: web application attack and audit framework, the open source web vulnerability scanner.

Waf bypass

  • bypass-firewalls-by-DNS-history - Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
  • CloudFail - Utilize misconfigured DNS and old database records to find hidden IP’s behind the CloudFlare network
  • gobuster - Directory/File, DNS and VHost busting tool written in Go
  • recursebuster - rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
  • feroxbuster - A fast, simple, recursive content discovery tool written in Rust.
  • dirsearch - Web path scanner
  • dirsearch - A Go implementation of dirsearch.
  • filebuster - An extremely fast and flexible web fuzzer
  • dirstalk - Modern alternative to dirbuster/dirb
  • dirbuster-ng - dirbuster-ng is C CLI implementation of the Java dirbuster tool
  • gospider - Gospider - Fast web spider written in Go
  • hakrawler - Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Fuzzing

  • ffuf - Fast web fuzzer written in Go
  • wfuzz - Web application fuzzer
  • fuzzdb - Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  • IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
  • fuzz.txt - Potentially dangerous files
  • fuzzilli - A JavaScript Engine Fuzzer
  • fuzzapi - Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
  • qsfuzz - qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

hidden-file-or-directory

18-03-22

JS

  • linx - Reveals invisible links within JavaScript files
  • diffJs - Tool for monitoring changes in javascript files on WebApps for reconnaissance.
  • scripthunter - Tool to find JavaScript files on Websites

Metadata

  • exiftool - ExifTool meta information reader/writer

  • earlybird - EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.

  • DumpsterDiver - Tool to search secrets in various filetypes.

  • ChopChop - ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

  • gospider - Fast web spider written in Go

  • gobuster - Directory/File, DNS and VHost busting tool written in Go

  • janusec

  • source leak hacker

  • favfreak

  • jwsxploiter - A tool to test security of json web token

  • bfac - BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application’s source code.

  • jsearch

  • linkfinder - A python script that finds endpoints in JavaScript files

  • secretfinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

  • jsa

  • JSParser - A python 2.7 script using Tornado and JSBeautifier to parse relative URLs from JavaScript files. Useful for easily discovering AJAX requests when performing security research or bug bounty hunting.

parameter-finder

  • paramspider - Mining parameters from dark corners of Web Archives
  • parameth - This tool can be used to brute discover GET and POST parameters
  • param-miner - This extension identifies hidden, unlinked parameters. It’s particularly useful for finding web cache poisoning vulnerabilities.
  • ParamPamPam - This tool for brute discover GET and POST parameters.
  • Arjun - HTTP parameter discovery suite.

Dlelte Duplicate from waybacks

  • dpfilter - BugBounty , sort and delete duplicates param value without missing original value

bypass-forbidder-directory

  • dirdar - DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it
  • 4-ZERO-3 - 403/401 Bypass Methods
  • byp4xx - Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.
  • 403bypasser - 403bypasser automates techniques used to bypass access control restrictions on target pages. This tool will continue to be developed, contributions are welcome.

wordlists-payloads

  • bruteforce-lists - Some files for bruteforcing certain things.

  • CheatSheetSeries - The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  • Bug-Bounty-Wordlists - A repository that includes all the important wordlists used while bug hunting.

  • seclists - SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  • Payload Box - Attack payloads only 📦

  • awesome-wordlists - A curated list wordlists for bruteforcing and fuzzing

  • Fuzzing-wordlist - fuzzing-wordlists

  • Web-Attack-Cheat-Sheet - Web Attack Cheat Sheet

  • payloadsallthethings - A list of useful payloads and bypass for Web Application Security and Pentest/CT

  • pentestmonkey - Taking the monkey work out of pentesting

  • STOK suggest

Exceptional

miscellaneous

social-engineering

  • social-engineer-toolkit - The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Uncategorized

  • JSONBee - A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
  • CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
  • bountyplz - Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  • awesome-vulnerable-apps - Awesome Vulnerable Applications
  • XFFenum - X-Forwarded-For [403 forbidden] enumeration

scripts


API_key

  • keyhacks - Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they’re valid.
  • gmapsapiscanner - Used for determining whether a leaked/found Google Maps API Key is vulnerable to unauthorized access by other applications or not.

Code_review

  • phpvuln - 🕸️ Audit tool to find common vulnerabilities in PHP source code

log-file-analyze

programs

  • disclose -Open-source vulnerability disclosure and bug bounty program database.
  • bug bounty dork - List of Google Dorks for sites that have responsible disclosure program / bug bounty program
  • crunchbase - Discover innovative companies and the people behind them
  • bounty-targets-data - This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
  • Vdps_are_love - This repo is made for those hunters who love to hunt on VDP programs. List of Vdp programs which are not affiliated with known bug bounty platforms such as HackerOne or Bugcrowd.
  • chaos - We actively collect and maintain internet-wide assets’ data, this project is meant to enhance research and analyse changes around DNS for better insights.
  • bug-bounty-list - The most comprehensive, up to date crowdsourced list of bug bounty and security vulnerability disclosure programs from across the web curated by the hacker community.

burp-suite-extesion

Burp suite pro

  • Burp-Suite - || Activate Burp Suite Pro with Loader and Key-Generator ||

DOS


Websocket

  • STEWS - A Security Tool for Enumerating WebSockets

Smart-Contract

  • mythril - Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.

OSINT-Forensic Tools

Digital Forensic

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

Tools

System/Digital Image

  • Afflib : An extensible open format for the storage of disk images and related forensic.information.
  • Air-Imager : A GUI front-end to dd/dc3dd designed for easily creating forensic images.
  • Bmap-tools : Tool for copying largely sparse files using information from a block map file.
  • dd : The dd command allows you to copy all or part of a disk.
    • Dc3dd : A patched version of dd that includes a number of features useful for computer forensics.
    • Dcfldd : DCFL (DoD Computer Forensics Lab), a dd replacement with hashing.
  • ddrescue : GNU data recovery tool.
  • Dmg2img : A CLI tool to uncompress Apple’s compressed DMG files to the HFS+ IMG format.
  • Frida : Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
    • Fridump : A universal memory dumper using Frida.
  • Imagemounter : Command line utility and Python package to ease the (un)mounting of forensic disk images.

Recovering tool / Memory Extraction

  • Extundelete : Utility for recovering deleted files from ext2, ext3 or ext4 partitions by parsing the journal.
  • Foremost : A console program to recover files based on their headers, footers, and internal data structures.
  • MagicRescue : Find and recover deleted files on block devices.
  • MemDump : Dumps system memory to stdout, skipping over holes in memory maps.
  • MemFetch : Simple utility that can be used to dump process memory of any userspace process running on the system without affecting its execution.
  • Mxtract : Memory Extractor & Analyzer.
  • Recoverjpeg : Recover jpegs from damaged devices.
  • SafeCopy : A disk data recovery tool to extract data from damaged media.
  • Scrounge-Ntfs : Data recovery program for NTFS file systems.
  • TestDisk & PhotoRec : TestDisk checks the partition and boot sectors of your disks. It is very useful in recovering lost partitions. PhotoRec is file data recovery software designed to recover lost pictures from digital camera memory or even hard disks. It has been extended to search also for non audio/video headers.

Analysis / Gathering tool (Know your ennemies)

  • Autopsy : The forensic browser. A GUI for the Sleuth Kit.
  • Bulk-extractor : Bulk Email and URL extraction tool.
  • captipper : Malicious HTTP traffic explorer tool.
  • Chromefreak : A Cross-Platform Forensic Framework for Google Chrome.
  • SkypeFreak : A Cross Platform Forensic Framework for Skype.
  • Dumpzilla : A forensic tool for firefox.
  • Emldump : Analyze MIME files.
  • Galleta : Examine the contents of the IE’s cookie files for forensic purposes.
  • Guymager : A forensic imager for media acquisition.
  • Indxparse : A Tool suite for inspecting NTFS artifacts.
  • IOSforensic : iOS forensic tool.
  • IPBA2 : IOS Backup Analyzer.
  • Iphoneanalyzer : Allows you to forensically examine or recover date from in iOS device.
  • LiMEaide : Remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
  • MboxGrep : A small, non-interactive utility that scans mail folders for messages matching regular expressions. It does matching against basic and extended POSIX regular expressions, and reads and writes a variety of mailbox formats.
  • Mobiusft : An open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions.
  • Naft : Network Appliance Forensic Toolkit.
    Networkminer A Network Forensic Analysis Tool for advanced Network Traffic Analysis, sniffer and packet analyzer.
  • Nfex : A tool for extracting files from the network in real-time or post-capture from an offline tcpdump pcap savefile.
  • Ntdsxtract [windows]: Active Directory forensic framework.
  • Pasco : Examines the contents of Internet Explorer’s cache files for forensic purposes. |
  • PcapXray : Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
  • ReplayProxy : Forensic tool to replay web-based attacks (and also general HTTP traffic) that were captured in a pcap file.
  • Pdfbook-analyzer : Utility for facebook memory forensics.
  • Pdfid : Scan a file to look for certain PDF keywords.
  • PdfResurrect : A tool aimed at analyzing PDF documents.
  • Peepdf : A Python tool to explore PDF files in order to find out if the file can be harmful or not.
  • Pev : Command line based tool for PE32/PE32+ file analysis.
  • Rekall : Memory Forensic Framework.
  • Recuperabit : A tool for forensic file system reconstruction.
  • Rifiuti2 : A rewrite of rifiuti, a great tool from Foundstone folks for analyzing Windows Recycle Bin INFO2 file.
  • Rkhunter : Checks machines for the presence of rootkits and other unwanted tools.
  • Sleuthkit : A library and collection of command line digital forensics tools that allow you to investigate volume and file system data.
  • Swap-digger : A tool used to automate Linux swap analysis during post-exploitation or forensics.
  • Vinetto : A forensics tool to examine Thumbs.db files.
  • Volafox : macOS Memory Analysis Toolkit.
  • Volatility : Advanced memory forensics framework.
  • Xplico : Internet Traffic Decoder. Network Forensic Analysis Tool (NFAT).

Data tampering

  • Exiftool : Reader and rewriter of EXIF informations that supports raw files.
  • Exiv2 : Exif, Iptc and XMP metadata manipulation library and tools.
  • nTimetools : Timestomper and Timestamp checker with nanosecond accuracy for NTFS volumes.
  • Scalpel : An open source data carving tool.
  • SetMace : Manipulate timestamps on NTFS.

Hiding process

  • Harness : Execute ELFs in memory.
  • Unhide : A forensic tool to find processes hidden by rootkits, LKMs or by other techniques.
  • Kaiser : File-less persistence, attacks and anti-forensic capabilities (Windows 7 32-bit).
  • Papa Shango : Inject code into running processes with ptrace().
  • Saruman : ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection).

Cleaner / Data Destruction / Wiping / FileSystem

  • BleachBit : System cleaner for Windows and Linux.
  • ChainSaw : ChainSaw automates the process of shredding log files and bash history from a system. It is a tool that cleans up the bloody mess you left behind when you went for a stroll behind enemy lines.
  • Clear-EventLog : Powershell Command. Clears all entries from specified event logs on the local or remote computers.
  • DBAN : Darik’s Boot and Nuke (“DBAN”) is a self-contained boot image that securely wipes the hard disks of most computers. DBAN is appropriate for bulk or emergency data destruction.
  • delete-self-poc : A way to delete a locked file, or current running executable, on disk.
  • Forensia : Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
  • Hdparm : get/set hard disk parameters.
  • LogKiller : Clear all your logs in linux/windows servers.
  • Meterpreter > clearev : The meterpreter clearev command will clear the Application, System, and Security logs on a Windows system.
  • NTFS-3G : NTFS-3G Safe Read/Write NTFS Driver.
  • Nuke My LUKS : Network panic button designed to overwrite with random data the LUKS header of computers in a LAN.
  • Permanent-Eraser : Secure file erasing utility for macOS.
  • Shred : Overwrite a file to hide its contents, and optionally delete it.
  • Silk-guardian : An anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
  • Srm : Srm is a command-line compatible rm which overwrites file contents before unlinking.
  • Wipe : A Unix tool for secure deletion.
  • Wipedicks : Wipe files and drives securely with randoms ASCII dicks.
  • wiper : Toolkit to perform secure destruction of sensitive virtual data, temporary files and swap memories.

Password and Login

  • chntpw : Offline NT Password Editor - reset passwords in a Windows NT SAM user database file.
  • lazagne : An open source application used to retrieve lots of passwords stored on a local computer.
  • Mimipenguin : A tool to dump the login password from the current linux user.

Encryption / Obfuscation

  • BurnEye : ELF encryption program.
  • cryptsetup : Utility used to conveniently set up disk encryption based on the DMCrypt kernel module.
    • cryptsetup-nuke-password : Configure a special “nuke password” that can be used to destroy the encryption keys required to unlock the encrypted partitions.
  • ELFcrypt : ELF crypter.
  • FreeOTFE : A free “on-the-fly” transparent disk encryption program for PC & PDAs.
  • Midgetpack : Midgetpack is a multiplatform secure ELF packer.
  • panic_bcast : Decentralized opsec panic button operating over UDP broadcasts and HTTP. Provides automatic ejection of encrypted drives as a safe-measure against cold-boot attacks.
  • Sherlocked : Universal script packer– transforms any type of script into a protected ELF executable, encrypted with anti-debugging.
    • suicideCrypt : A toolset for creating cryptographically strong volumes that destroy themselves upon tampering (event) or via issued command.
  • Tchunt-ng : Reveal encrypted files stored on a filesystem.
  • TrueHunter : Detect TrueCrypt containers using a fast and memory efficient approach.

Policies / Logging (Event) / Monitoring

  • Auditpol : Displays information about and performs functions to manipulate audit policies in Windows.
  • evtkit : Fix acquired .evt - Windows Event Log files (Forensics) [windows]
  • Grokevt : A collection of scripts built for reading Windows® NT/2K/XP/2K eventlog files. [windows]
  • Lfle : Recover event log entries from an image by heurisitically looking for record structures.
  • python-evtx : A tool to parse the Windows XML Event Log (EVTX) format.
  • USBGuard : Software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system).
  • wecutil : Enables you to create and manage subscriptions to events that are forwarded from remote computers. The remote computer must support the WS-Management protocol. [windows]
  • Wevtutil : Enables you to retrieve information about event logs and publishers. You can also use this command to install and uninstall event manifests, to run queries, and to export, archive, and clear logs (windows server).

Steganography

  • AudioStego : Hides text or files inside audio files and retrieve them automatically.
  • ChessSteg : Steganography in chess games.
  • Cloakify : Transforms any filetype into a list of harmless-looking strings. This lets you hide the file in plain sight, and transfer the file without triggering alerts.
  • Jsteg : jsteg is a package for hiding data inside jpeg files.
  • Mp3nema : A tool aimed at analyzing and capturing data that is hidden between frames in an MP3 file or stream, otherwise noted as “out of band” data.
  • PacketWhisper : Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography.
  • steg86 : Format-agnostic steganographic tool for x86 and AMD64 binaries. You can use it to hide information in compiled programs, regardless of executable format (PE, ELF, Mach-O, raw, &c).
  • steganography : Simple C++ Image Steganography tool to encrypt and hide files insde images using Least-Significant-Bit encoding.
  • Steganography : Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences.
  • StegaStamp : Invisible Hyperlinks in Physical Photographs.
  • StegCloak : Hide secrets with invisible characters in plain text securely using passwords.
  • Stegdetect : Automated tool for detecting steganographic content in images.
  • StegFS : A FUSE based steganographic file system.
  • Steghide : Steganography program that is able to hide data in various kinds of image- and audio-files.
  • Stegify : Go tool for LSB steganography, capable of hiding any file within an image.
  • Stego : stego is a steganographic swiss army knife.
    • StegoGAN : A tool for creating steganographic images using adversarial training.
  • stego-toolkit : This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms.
  • StegoVeritas : Yet another Stego Tool.
  • tweetable-polyglot-png : Pack up to 3MB of data into a tweetable PNG polyglot file.

Malware / AV

  • Malheur : A tool for the automatic analyze of malware behavior.
  • MalwareDetect : Submits a file’s SHA1 sum to VirusTotal to determine whether it is a known piece of malware.

OS/VM

  • HiddenVM : Use any desktop OS without leaving a trace.
  • Tails : portable operating system that protects against surveillance and censorship.

Hardware

  • BusKill : BusKill is an hardware and software project that uses a hardware tripwire/dead-man-switch to trigger a computer to lock or shutdown if the user is physically separated from their machine.
  • Day Tripper : Hide-My-Windows Laser Tripwire.
  • DoNotDisturb : Security tool for macOS that aims to detect unauthorized physical access to your laptop.
  • Silk Guardian : Anti-forensic kill-switch that waits for a change on your usb ports and then wipes your ram, deletes precious files, and turns off your computer.
  • USB Kill : Anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
  • USB Death : Anti-forensic tool that writes udev rules for known usb devices and do some things at unknown usb insertion or specific usb device removal.
  • xxUSBSentinel : Windows anti-forensics USB monitoring tool.

Android App

  • Lockup : A proof-of-concept Android application to detect and defeat some of the Cellebrite UFED forensic toolkit extraction techniques.
  • Ripple : A “panic button” app for triggering a “ripple effect” across apps that are set up to respond to panic events.

OSINT-Forensic Tools 2

Forensics

Curated list of awesome free (mostly open source) forensic analysis tools and resources.


Collections

Tools

Distributions

Frameworks

  • :star:Autopsy - SleuthKit GUI
  • dexter - Dexter is a forensics acquisition framework designed to be extensible and secure
  • dff - Forensic framework
  • Dissect - Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
  • hashlookup-forensic-analyser - A tool to analyse files from a forensic acquisition to find known/unknown hashes from hashlookup API or using a local Bloom filter.
  • IntelMQ - IntelMQ collects and processes security feeds
  • Kuiper - Digital Investigation Platform
  • Laika BOSS - Laika is an object scanner and intrusion detection system
  • PowerForensics - PowerForensics is a framework for live disk forensic analysis
  • TAPIR - TAPIR (Trustable Artifacts Parser for Incident Response) is a multi-user, client/server, incident response framework
  • :star: The Sleuth Kit - Tools for low level forensic analysis
  • turbinia - Turbinia is an open-source framework for deploying, managing, and running forensic workloads on cloud platforms
  • IPED - Indexador e Processador de Evidências Digitais - Brazilian Federal Police Tool for Forensic Investigations
  • Wombat Forensics - Forensic GUI tool

Live Forensics

  • grr - GRR Rapid Response: remote live forensics for incident response
  • Linux Expl0rer - Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask
  • mig - Distributed & real time digital forensics at the speed of the cloud
  • osquery - SQL powered operating system analytics
  • POFR - The Penguin OS Flight Recorder collects, stores and organizes for further analysis process execution, file access and network/socket endpoint data from the Linux Operating System.
  • UAC - UAC (Unix-like Artifacts Collector) is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

IOC Scanner

  • Fastfinder - Fast customisable cross-platform suspicious file finder. Supports md5/sha1/sha256 hashes, literal/wildcard strings, regular expressions and YARA rules
  • Fenrir - Simple Bash IOC Scanner
  • Loki - Simple IOC and Incident Response Scanner
  • Redline - Free endpoint security tool from FireEye
  • THOR Lite - Free IOC and YARA Scanner
  • recon - Performance oriented file finder with support for SQL querying, index and analyze file metadata with support for YARA.

Acquisition

  • Acquire - Acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container
  • artifactcollector - A customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
  • ArtifactExtractor - Extract common Windows artifacts from source images and VSCs
  • AVML - A portable volatile memory acquisition tool for Linux
  • Belkasoft RAM Capturer - Volatile Memory Acquisition Tool
  • DFIR ORC - Forensics artefact collection tool for systems running Microsoft Windows
  • FastIR Collector - Collect artifacts on windows
  • FireEye Memoryze - A free memory forensic software
  • FIT - Forensic acquisition of web pages, emails, social media, etc.
  • ForensicMiner - A PowerShell-based DFIR automation tool, for artifact and evidence collection on Windows machines.
  • LiME - Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, formerly called DMD
  • Magnet RAM Capture / DumpIt - A free imaging tool designed to capture the physical memory
  • SPECTR3 - Acquire, triage and investigate remote evidence via portable iSCSI readonly access
  • unix_collector - A live forensic collection script for UNIX-like systems as a single script.
  • Velociraptor - Velociraptor is a tool for collecting host based state information using Velocidex Query Language (VQL) queries
  • WinTriage - Wintriage is a live response tool that extracts Windows artifacts. It must be executed with local or domain administrator privileges and recommended to be done from an external drive.

Imaging

  • dc3dd - Improved version of dd
  • dcfldd - Different improved version of dd (this version has some bugs!, another version is on github adulau/dcfldd)
  • FTK Imager - Free imageing tool for windows
  • :star: Guymager - Open source version for disk imageing on linux systems

Carving

  • bstrings - Improved strings utility
  • bulk_extractor - Extracts information such as email addresses, creditcard numbers and histrograms from disk images
  • floss - Static analysis tool to automatically deobfuscate strings from malware binaries
  • :star: photorec - File carving tool
  • swap_digger - A bash script used to automate Linux swap analysis, automating swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, etc.

Memory Forensics

  • inVtero.net - High speed memory analysis framework developed in .NET supports all Windows x64, includes code integrity and write support
  • KeeFarce - Extract KeePass passwords from memory
  • MemProcFS - An easy and convenient way of accessing physical memory as files a virtual file system.
  • Rekall - Memory Forensic Framework
  • volatility - The memory forensic framework
  • VolUtility - Web App for Volatility framework

Network Forensics

  • Kismet - A passive wireless sniffer
  • NetworkMiner - Network Forensic Analysis Tool
  • Squey - Logs/PCAP visualization software designed to detect anomalies and weak signals in large amounts of data.
  • :star: WireShark - A network protocol analyzer

Windows Artifacts

  • Beagle - Transform data sources and logs into graphs
  • Blauhaunt - A tool collection for filtering and visualizing logon events
  • FRED - Cross-platform microsoft registry hive editor
  • Hayabusa - A a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  • LastActivityView - LastActivityView by Nirsoftis a tool for Windows operating system that collects information from various sources on a running system, and displays a log of actions made by the user and events occurred on this computer.
  • LogonTracer - Investigate malicious Windows logon by visualizing and analyzing Windows event log
  • PyShadow - A library for Windows to read shadow copies, delete shadow copies, create symbolic links to shadow copies, and create shadow copies
  • python-evt - Pure Python parser for classic Windows Event Log files (.evt)
  • RegRipper3.0 - RegRipper is an open source Perl tool for parsing the Registry and presenting it for analysis
  • RegRippy - A framework for reading and extracting useful forensics data from Windows registry hives

NTFS/MFT Processing

OS X Forensics

Mobile Forensics

  • Andriller - A software utility with a collection of forensic tools for smartphones
  • ALEAPP - An Android Logs Events and Protobuf Parser
  • ArtEx - Artifact Examiner for iOS Full File System extractions
  • iLEAPP - An iOS Logs, Events, And Plists Parser
  • iOS Frequent Locations Dumper - Dump the contents of the StateModel#.archive files located in /private/var/mobile/Library/Caches/com.apple.routined/
  • MEAT - Perform different kinds of acquisitions on iOS devices
  • MobSF - An automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
  • OpenBackupExtractor - An app for extracting data from iPhone and iPad backups.

Docker Forensics

Internet Artifacts

  • ChromeCacheView - A small utility that reads the cache folder of Google Chrome Web browser, and displays the list of all files currently stored in the cache
  • chrome-url-dumper - Dump all local stored infromation collected by Chrome
  • hindsight - Internet history forensics for Google Chrome/Chromium
  • IE10Analyzer - This tool can parse normal records and recover deleted records in WebCacheV01.dat.
  • unfurl - Extract and visualize data from URLs
  • WinSearchDBAnalyzer - This tool can parse normal records and recover deleted records in Windows.edb.

Timeline Analysis

  • DFTimewolf - Framework for orchestrating forensic collection, processing and data export using GRR and Rekall
  • :star: plaso - Extract timestamps from various files and aggregate them
  • Timeline Explorer - Timeline Analysis tool for CSV and Excel files. Built for SANS FOR508 students
  • timeliner - A rewrite of mactime, a bodyfile reader
  • timesketch - Collaborative forensic timeline analysis

Disk image handling

  • Disk Arbitrator - A Mac OS X forensic utility designed to help the user ensure correct forensic procedures are followed during imaging of a disk device
  • imagemounter - Command line utility and Python package to ease the (un)mounting of forensic disk images
  • libewf - Libewf is a library and some tools to access the Expert Witness Compression Format (EWF, E01)
  • PancakeViewer - Disk image viewer based in dfvfs, similar to the FTK Imager viewer
  • xmount - Convert between different disk image formats

Decryption

Management

  • Catalyst - Catalyst is an open source security automation and ticket system
  • dfirtrack - Digital Forensics and Incident Response Tracking application, track systems
  • Incidents - Web application for organizing non-trivial security investigations. Built on the idea that incidents are trees of tickets, where some tickets are leads
  • iris - Collaborative Incident Response platform

Picture Analysis

  • Ghiro - A fully automated tool designed to run forensics analysis over a massive amount of images
  • sherloq - An open-source digital photographic image forensic toolset

Metadata Forensics

  • ExifTool by Phil Harvey
  • FOCA - FOCA is a tool used mainly to find metadata and hidden information in the documents

Steganography

  • Sonicvisualizer
  • Steghide - is a steganography program that hides data in various kinds of image and audio files
  • Wavsteg - is a steganography program that hides data in various kinds of image and audio files
  • Zsteg - A steganographic coder for WAV files

Learn Forensics

CTFs and Challenges

Resources

Web

Blogs

Books

more at Recommended Readings by Andrew Case

File System Corpora

Other

Labs

  • BlueTeam.Lab - Blue Team detection lab created with Terraform and Ansible in Azure.

Security Tools

Security

A collection of software, libraries, documents, books, resources and cool stuff about security.


Network

Network architecture

  • Network-segmentation-cheat-sheet - This project was created to publish the best practices for segmentation of the corporate network of any company. In general, the schemes in this project are suitable for any company.

Scanning / Pentesting

  • OpenVAS - OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
  • Metasploit Framework - A tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
  • Kali - Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. Kali Linux is preinstalled with numerous penetration-testing programs, including nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper (a password cracker), and Aircrack-ng (a software suite for penetration-testing wireless LANs).
  • tsurugi - heavily customized Linux distribution that designed to support DFIR investigations, malware analysis and OSINT activities. It is based on Ubuntu 20.04(64-bit with a 5.15.12 custom kernel)
  • pig - A Linux packet crafting tool.
  • scapy - Scapy: the python-based interactive packet manipulation program & library.
  • Pompem - Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases: Exploit-db, 1337day, Packetstorm Security…
  • Nmap - Nmap is a free and open source utility for network discovery and security auditing.
  • Amass - Amass performs DNS subdomain enumeration by scraping the largest number of disparate data sources, recursive brute forcing, crawling of web archives, permuting and altering names, reverse DNS sweeping and other techniques.
  • Anevicon - The most powerful UDP-based load generator, written in Rust.
  • Finshir - A coroutines-driven Low & Slow traffic generator, written in Rust.
  • Legion - Open source semi-automated discovery and reconnaissance network penetration testing framework.
  • Sublist3r - Fast subdomains enumeration tool for penetration testers
  • RustScan - Faster Nmap scanning with Rust. Take a 17 minute Nmap scan down to 19 seconds.
  • Boofuzz - Fuzzing engine and fuzz testing framework.
  • monsoon - Very flexible and fast interactive HTTP enumeration/fuzzing.
  • Netz- Discover internet-wide misconfigurations, using zgrab2 and others.
  • Deepfence ThreatMapper - Apache v2, powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
  • Deepfence SecretScanner - Find secrets and passwords in container images and file systems.
  • Cognito Scanner - CLI tool to pentest Cognito AWS instance. It implements three attacks: unwanted account creation, account oracle and identity pool escalation

Monitoring / Logging

  • BoxyHQ - Open source API for security and compliance audit logging.
  • justniffer - Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all “intercepted” files from the HTTP traffic.
  • httpry - httpry is a specialized packet sniffer designed for displaying and logging HTTP traffic. It is not intended to perform analysis itself, but to capture, parse, and log the traffic for later analysis. It can be run in real-time displaying the traffic as it is parsed, or as a daemon process that logs to an output file. It is written to be as lightweight and flexible as possible, so that it can be easily adaptable to different applications.
  • ngrep - ngrep strives to provide most of GNU grep’s common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
  • passivedns - A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring (NSM) and general digital forensics. PassiveDNS sniffs traffic from an interface or reads a pcap-file and outputs the DNS-server answers to a log file. PassiveDNS can cache/aggregate duplicate DNS answers in-memory, limiting the amount of data in the logfile without loosing the essens in the DNS answer.
  • sagan - Sagan uses a ‘Snort like’ engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc).
  • ntopng - Ntopng is a network traffic probe that shows the network usage, similar to what the popular top Unix command does.
  • Fibratus - Fibratus is a tool for exploration and tracing of the Windows kernel. It is able to capture the most of the Windows kernel activity - process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and much more. Fibratus has a very simple CLI which encapsulates the machinery to start the kernel event stream collector, set kernel event filters or run the lightweight Python modules called filaments.
  • opensnitch - OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
  • wazuh - Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of monitoring file system changes, system calls and inventory changes.
  • Matano: Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.
  • Falco - The cloud-native runtime security project and de facto Kubernetes threat detection engine now part of the CNCF.
  • VAST - Open source security data pipeline engine for structured event data, supporting high-volume telemetry ingestion, compaction, and retrieval; purpose-built for security content execution, guided threat hunting, and large-scale investigation.
  • Substation - Substation is a cloud native data pipeline and transformation toolkit written in Go.

IDS / IPS / Host IDS / Host IPS

  • Snort - Snort is a free and open source network intrusion prevention system (NIPS) and network intrusion detection system (NIDS)created by Martin Roesch in 1998. Snort is now developed by Sourcefire, of which Roesch is the founder and CTO. In 2009, Snort entered InfoWorld’s Open Source Hall of Fame as one of the “greatest [pieces of] open source software of all time”.
  • Zeek - Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
    • zeek2es - An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek’s TSV logs!
  • DrKeithJones.com - A blog on cyber security and network security monitoring.
  • OSSEC - Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems, including Linux, MacOS, Solaris, HP-UX, AIX and Windows. Plenty of reasonable documentation. Sweet spot is medium to large deployments.
  • Suricata - Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by the OISF and its supporting vendors.
  • Security Onion - Security Onion is a Linux distro for intrusion detection, network security monitoring, and log management. It’s based on Ubuntu and contains Snort, Suricata, Zeek, OSSEC, Sguil, Squert, Snorby, ELSA, Xplico, NetworkMiner, and many other security tools. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!
  • sshwatch - IPS for SSH similar to DenyHosts written in Python. It also can gather information about attacker during the attack in a log.
  • Stealth - File integrity checker that leaves virtually no sediment. Controller runs from another machine, which makes it hard for an attacker to know that the file system is being checked at defined pseudo random intervals over SSH. Highly recommended for small to medium deployments.
  • AIEngine - AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDS(Network Intrusion Detection System) functionality, DNS domain classification, network collector, network forensics and many others.
  • Denyhosts - Thwart SSH dictionary based attacks and brute force attacks.
  • Fail2Ban - Scans log files and takes action on IPs that show malicious behavior.
  • SSHGuard - A software to protect services in addition to SSH, written in C
  • Lynis - an open source security auditing tool for Linux/Unix.
  • CrowdSec - CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on Fail2Ban’s philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors. CrowdSec is engineered for modern Cloud / Containers / VM based infrastructures (by decoupling detection and remediation). Once detected, you can remedy threats with various bouncers (firewall block, nginx http 403, Captchas, etc.) while the aggressive IPs can be sent to CrowdSec for curation before being shared among all users to further strengthen the community
  • wazuh - Wazuh is a free and open source XDR platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Great tool foor all kind of deployments, it includes SIEM capabitilies (indexing + searching + WUI).

Honey Pot / Honey Net

  • awesome-honeypots - The canonical awesome honeypot list.
  • HoneyPy - HoneyPy is a low to medium interaction honeypot. It is intended to be easy to: deploy, extend functionality with plugins, and apply custom configurations.
  • Conpot - ICS/SCADA Honeypot. Conpot is a low interactive server side Industrial Control Systems honeypot designed to be easy to deploy, modify and extend. By providing a range of common industrial control protocols we created the basics to build your own system, capable to emulate complex infrastructures to convince an adversary that he just found a huge industrial complex. To improve the deceptive capabilities, we also provided the possibility to server a custom human machine interface to increase the honeypots attack surface. The response times of the services can be artificially delayed to mimic the behaviour of a system under constant load. Because we are providing complete stacks of the protocols, Conpot can be accessed with productive HMI’s or extended with real hardware. Conpot is developed under the umbrella of the Honeynet Project and on the shoulders of a couple of very big giants.
  • Amun - Amun Python-based low-interaction Honeypot.
  • Glastopf - Glastopf is a Honeypot which emulates thousands of vulnerabilities to gather data from attacks targeting web applications. The principle behind it is very simple: Reply the correct response to the attacker exploiting the web application.
  • Kippo - Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
  • Kojoney - Kojoney is a low level interaction honeypot that emulates an SSH server. The daemon is written in Python using the Twisted Conch libraries.
  • HonSSH - HonSSH is a high-interaction Honey Pot solution. HonSSH will sit between an attacker and a honey pot, creating two separate SSH connections between them.
  • Bifrozt - Bifrozt is a NAT device with a DHCP server that is usually deployed with one NIC connected directly to the Internet and one NIC connected to the internal network. What differentiates Bifrozt from other standard NAT devices is its ability to work as a transparent SSHv2 proxy between an attacker and your honeypot. If you deployed an SSH server on Bifrozt’s internal network it would log all the interaction to a TTY file in plain text that could be viewed later and capture a copy of any files that were downloaded. You would not have to install any additional software, compile any kernel modules or use a specific version or type of operating system on the internal SSH server for this to work. It will limit outbound traffic to a set number of ports and will start to drop outbound packets on these ports when certain limits are exceeded.
  • HoneyDrive - HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to analyze, visualize and process the data it can capture, such as Kippo-Graph, Honeyd-Viz, DionaeaFR, an ELK stack and much more. Lastly, almost 90 well-known malware analysis, forensics and network monitoring related tools are also present in the distribution.
  • Cuckoo Sandbox - Cuckoo Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment.
  • T-Pot Honeypot Distro - T-Pot is based on the network installer of Ubuntu Server 16/17.x LTS. The honeypot daemons as well as other support components being used have been containerized using docker. This allows us to run multiple honeypot daemons on the same network interface while maintaining a small footprint and constrain each honeypot within its own environment. Installation over vanilla Ubuntu - T-Pot Autoinstall - This script will install T-Pot 16.04/17.10 on a fresh Ubuntu 16.04.x LTS (64bit). It is intended to be used on hosted servers, where an Ubuntu base image is given and there is no ability to install custom ISO images. Successfully tested on vanilla Ubuntu 16.04.3 in VMware.

Full Packet Capture / Forensic

  • tcpflow - tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis and debugging. Each TCP flow is stored in its own file. Thus, the typical TCP flow will be stored in two files, one for each direction. tcpflow can also process stored ’tcpdump’ packet flows.
  • Deepfence PacketStreamer - High-performance remote packet capture and collection tool, distributed tcpdump for cloud native environments.
  • Xplico - The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is an open source Network Forensic Analysis Tool (NFAT).
  • Moloch - Moloch is an open source, large scale IPv4 packet capturing (PCAP), indexing and database system. A simple web interface is provided for PCAP browsing, searching, and exporting. APIs are exposed that allow PCAP data and JSON-formatted session data to be downloaded directly. Simple security is implemented by using HTTPS and HTTP digest password support or by using apache in front. Moloch is not meant to replace IDS engines but instead work along side them to store and index all the network traffic in standard PCAP format, providing fast access. Moloch is built to be deployed across many systems and can scale to handle multiple gigabits/sec of traffic.
  • OpenFPC - OpenFPC is a set of tools that combine to provide a lightweight full-packet network traffic recorder & buffering system. It’s design goal is to allow non-expert users to deploy a distributed network traffic recorder on COTS hardware while integrating into existing alert and log management tools.
  • Dshell - Dshell is a network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures.
  • stenographer - Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets.

Sniffer

  • wireshark - Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Wireshark is very similar to tcpdump, but has a graphical front-end, plus some integrated sorting and filtering options.
  • netsniff-ng - netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa.
  • Live HTTP headers - Live HTTP headers is a free firefox addon to see your browser requests in real time. It shows the entire headers of the requests and can be used to find the security loopholes in implementations.

Security Information & Event Management

  • Prelude - Prelude is a Universal “Security Information & Event Management” (SIEM) system. Prelude collects, normalizes, sorts, aggregates, correlates and reports all security-related events independently of the product brand or license giving rise to such events; Prelude is “agentless”.
  • OSSIM - OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.
  • FIR - Fast Incident Response, a cybersecurity incident management platform.
  • LogESP - Open Source SIEM (Security Information and Event Management system).
  • wazuh -Wazuh is a free, open source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response and compliance. It works with tons of data supported by an OpenSearch fork and custom WUI.
  • VAST - Open source security data pipeline engine for structured event data, supporting high-volume telemetry ingestion, compaction, and retrieval; purpose-built for security content execution, guided threat hunting, and large-scale investigation.
  • Matano - Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.

VPN

  • OpenVPN - OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that utilizes SSL/TLS for key exchange.
  • Firezone - Open-source VPN server and egress firewall for Linux built on WireGuard that makes it simple to manage secure remote access to your company’s private networks. Firezone is easy to set up (all dependencies are bundled thanks to Chef Omnibus), secure, performant, and self hostable.

Fast Packet Processing

  • DPDK - DPDK is a set of libraries and drivers for fast packet processing.
  • PFQ - PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission (10G and beyond), in-kernel functional processing and packets steering across sockets/end-points.
  • PF_RING - PF_RING is a new type of network socket that dramatically improves the packet capture speed.
  • PF_RING ZC (Zero Copy) - PF_RING ZC (Zero Copy) is a flexible packet processing framework that allows you to achieve 1/10 Gbit line rate packet processing (both RX and TX) at any packet size. It implements zero copy operations including patterns for inter-process and inter-VM (KVM) communications.
  • PACKET_MMAP/TPACKET/AF_PACKET - It’s fine to use PACKET_MMAP to improve the performance of the capture and transmission process in Linux.
  • netmap - netmap is a framework for high speed packet I/O. Together with its companion VALE software switch, it is implemented as a single kernel module and available for FreeBSD, Linux and now also Windows.

Firewall

  • pfSense - Firewall and Router FreeBSD distribution.
  • OPNsense - is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.
  • fwknop - Protects ports via Single Packet Authorization in your firewall.

Anti-Spam

  • Spam Scanner - Anti-Spam Scanning Service and Anti-Spam API by @niftylettuce.
  • rspamd - Fast, free and open-source spam filtering system.
  • SpamAssassin - A powerful and popular email spam filter employing a variety of detection technique.
  • Scammer-List - A free open source AI based Scam and Spam Finder with a free API

Docker Images for Penetration Testing & Security

Endpoint

Anti-Virus / Anti-Malware

  • Fastfinder - Fast customisable cross-platform suspicious file finder. Supports md5/sha1/sha256 hashs, litteral/wildcard strings, regular expressions and YARA rules. Can easily be packed to be deployed on any windows / linux host.
  • Linux Malware Detect - A malware scanner for Linux designed around the threats faced in shared hosted environments.
  • LOKI - Simple Indicators of Compromise and Incident Response Scanner
  • rkhunter - A Rootkit Hunter for Linux
  • ClamAv - ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.

Content Disarm & Reconstruct

  • DocBleach - An open-source Content Disarm & Reconstruct software sanitizing Office, PDF and RTF Documents.

Configuration Management

  • Fleet device management - Fleet is the lightweight, programmable telemetry platform for servers and workstations. Get comprehensive, customizable data from all your devices and operating systems.
  • Rudder - Rudder is an easy to use, web-driven, role-based solution for IT Infrastructure Automation & Compliance. Automate common system administration tasks (installation, configuration); Enforce configuration over time (configuring once is good, ensuring that configuration is valid and automatically fixing it is better); Inventory of all managed nodes; Web interface to configure and manage nodes and their configuration; Compliance reporting, by configuration and/or by node.

Authentication

  • google-authenticator - The Google Authenticator project includes implementations of one-time passcode generators for several mobile platforms, as well as a pluggable authentication module (PAM). One-time passcodes are generated using open standards developed by the Initiative for Open Authentication (OATH) (which is unrelated to OAuth). These implementations support the HMAC-Based One-time Password (HOTP) algorithm specified in RFC 4226 and the Time-based One-time Password (TOTP) algorithm specified in RFC 6238. Tutorials: How to set up two-factor authentication for SSH login on Linux
  • Stegcloak - Securely assign Digital Authenticity to any written text

Mobile / Android / iOS

  • android-security-awesome - A collection of android security related resources. A lot of work is happening in academia and industry on tools to perform dynamic analysis, static analysis and reverse engineering of android apps.
  • SecMobi Wiki - A collection of mobile security resources which including articles, blogs, books, groups, projects, tools and conferences. *
  • OWASP Mobile Security Testing Guide - A comprehensive manual for mobile app security testing and reverse engineering.
  • OSX Security Awesome - A collection of OSX and iOS security resources
  • Themis - High-level multi-platform cryptographic framework for protecting sensitive data: secure messaging with forward secrecy and secure data storage (AES256GCM), suits for building end-to-end encrypted applications.
  • Mobile Security Wiki - A collection of mobile security resources.
  • Apktool - A tool for reverse engineering Android apk files.
  • jadx - Command line and GUI tools for produce Java source code from Android Dex and Apk files.
  • enjarify - A tool for translating Dalvik bytecode to equivalent Java bytecode.
  • Android Storage Extractor - A tool to extract local data storage of an Android application in one click.
  • Quark-Engine - An Obfuscation-Neglect Android Malware Scoring System.
  • dotPeek - Free-of-charge standalone tool based on ReSharper’s bundled decompiler.
  • hardened_malloc - Hardened allocator designed for modern systems. It has integration into Android’s Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
  • AMExtractor - AMExtractor can dump out the physical content of your Android device even without kernel source code.
  • frida - Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
  • UDcide - Android Malware Behavior Editor.
  • reFlutter - Flutter Reverse Engineering Framework

Forensics

  • grr - GRR Rapid Response is an incident response framework focused on remote live forensics.
  • Volatility - Python based memory extraction and analysis framework.
  • mig - MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security.
  • ir-rescue - ir-rescue is a Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
  • Logdissect - CLI utility and Python API for analyzing log files and other data.
  • Meerkat - PowerShell-based Windows artifact collection for threat hunting and incident response.
  • Rekall - The Rekall Framework is a completely open collection of tools, implemented in Python under the Apache and GNU General Public License, for the extraction and analysis of digital artifacts computer systems.
  • LiME - Linux Memory Extractor
  • Maigret - Maigret collect a dossier on a person by username only, checking for accounts on a huge number of sites and gathering all the available information from web pages.

Threat Intelligence

  • abuse.ch - ZeuS Tracker / SpyEye Tracker / Palevo Tracker / Feodo Tracker tracks Command&Control servers (hosts) around the world and provides you a domain- and an IP-blocklist.
  • Cyware Threat Intelligence Feeds - Cyware’s Threat Intelligence feeds brings to you the valuable threat data from a wide range of open and trusted sources to deliver a consolidated stream of valuable and actionable threat intelligence. Our threat intel feeds are fully compatible with STIX 1.x and 2.0, giving you the latest information on malicious malware hashes, IPs and domains uncovered across the globe in real-time.
  • Emerging Threats - Open Source - Emerging Threats began 10 years ago as an open source community for collecting Suricata and SNORT® rules, firewall rules, and other IDS rulesets. The open source community still plays an active role in Internet security, with more than 200,000 active users downloading the ruleset daily. The ETOpen Ruleset is open to any user or organization, as long as you follow some basic guidelines. Our ETOpen Ruleset is available for download any time.
  • PhishTank - PhishTank is a collaborative clearing house for data and information about phishing on the Internet. Also, PhishTank provides an open API for developers and researchers to integrate anti-phishing data into their applications at no charge.
  • SBL / XBL / PBL / DBL / DROP / ROKSO - The Spamhaus Project is an international nonprofit organization whose mission is to track the Internet’s spam operations and sources, to provide dependable realtime anti-spam protection for Internet networks, to work with Law Enforcement Agencies to identify and pursue spam and malware gangs worldwide, and to lobby governments for effective anti-spam legislation.
  • Internet Storm Center - The ISC was created in 2001 following the successful detection, analysis, and widespread warning of the Li0n worm. Today, the ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service Providers to fight back against the most malicious attackers.
  • AutoShun - AutoShun is a Snort plugin that allows you to send your Snort IDS logs to a centralized server that will correlate attacks from your sensor logs with other snort sensors, honeypots, and mail filters from around the world.
  • DNS-BH - The DNS-BH project creates and maintains a listing of domains that are known to be used to propagate malware and spyware. This project creates the Bind and Windows zone files required to serve fake replies to localhost for any requests to these, thus preventing many spyware installs and reporting.
  • AlienVault Open Threat Exchange - AlienVault Open Threat Exchange (OTX), to help you secure your networks from data loss, service disruption and system compromise caused by malicious IP addresses.
  • Tor Bulk Exit List - CollecTor, your friendly data-collecting service in the Tor network. CollecTor fetches data from various nodes and services in the public Tor network and makes it available to the world. If you’re doing research on the Tor network, or if you’re developing an application that uses Tor network data, this is your place to start. TOR Node List / DNS Blacklists / Tor Node List
  • leakedin.com - The primary purpose of leakedin.com is to make visitors aware about the risks of loosing data. This blog just compiles samples of data lost or disclosed on sites like pastebin.com.
  • FireEye OpenIOCs - FireEye Publicly Shared Indicators of Compromise (IOCs)
  • OpenVAS NVT Feed - The public feed of Network Vulnerability Tests (NVTs). It contains more than 35,000 NVTs (as of April 2014), growing on a daily basis. This feed is configured as the default for OpenVAS.
  • Project Honey Pot - Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to your site. If one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it.
  • virustotal - VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means to detect false positives, i.e. innocuous resources detected as malicious by one or more scanners.
  • IntelMQ - IntelMQ is a solution for CERTs for collecting and processing security feeds, pastebins, tweets using a message queue protocol. It’s a community driven initiative called IHAP (Incident Handling Automation Project) which was conceptually designed by European CERTs during several InfoSec events. Its main goal is to give to incident responders an easy way to collect & process threat intelligence thus improving the incident handling processes of CERTs. ENSIA Homepage.
  • CIFv2 - CIF is a cyber threat intelligence management system. CIF allows you to combine known malicious threat information from many sources and use that information for identification (incident response), detection (IDS) and mitigation (null route).
  • MISP - Open Source Threat Intelligence Platform - MISP threat sharing platform is a free and open source software helping information sharing of threat intelligence including cyber security indicators. A threat intelligence platform for gathering, sharing, storing and correlating Indicators of Compromise of targeted attacks, threat intelligence, financial fraud information, vulnerability information or even counter-terrorism information. The MISP project includes software, common libraries (taxonomies, threat-actors and various malware), an extensive data model to share new information using objects and default feeds.
  • PhishStats - Phishing Statistics with search for IP, domain and website title.
  • Threat Jammer - REST API service that allows developers, security engineers, and other IT professionals to access curated threat intelligence data from a variety of sources.
  • Cyberowl - A daily updated summary of the most frequent types of security incidents currently being reported from different sources.

Social Engineering

  • Gophish - An Open-Source Phishing Framework.

Web

Organization

  • OWASP - The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software.
  • Portswigger - PortSwigger offers tools for web application security, testing & scanning. Choose from a wide range of security tools & identify the very latest vulnerabilities.

Web Application Firewall

  • ModSecurity - ModSecurity is a toolkit for real-time web application monitoring, logging, and access control.
  • BunkerWeb - BunkerWeb is a full-featured open-source web server with ModeSecurity WAF, HTTPS with transparent Let’s Encrypt renewal, automatic ban of strange behaviors based on HTTP codes, bot and bad IPs block, connection limits, state-of-the-art security presets, Web UI and much more.
  • NAXSI - NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX, NAXSI means Nginx Anti Xss & Sql Injection.
  • sql_firewall SQL Firewall Extension for PostgreSQL
  • ironbee - IronBee is an open source project to build a universal web application security sensor. IronBee as a framework for developing a system for securing web applications - a framework for building a web application firewall (WAF).
  • Curiefense - Curiefense adds a broad set of automated web security tools, including a WAF to Envoy Proxy.
  • open-appsec - open-appsec is an open source machine-learning security engine that preemptively and automatically prevents threats against Web Application & APIs.

Scanning / Pentesting

  • Spyse - Spyse is an OSINT search engine that provides fresh data about the entire web. All the data is stored in its own DB for instant access and interconnected with each other for flexible search. Provided data: IPv4 hosts, sub/domains/whois, ports/banners/protocols, technologies, OS, AS, wide SSL/TLS DB and more.
  • sqlmap - sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
  • ZAP - The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
  • OWASP Testing Checklist v4 - List of some controls to test during a web vulnerability assessment. Markdown version may be found here.
  • w3af - w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.
  • Recon-ng - Recon-ng is a full-featured Web Reconnaissance framework written in Python. Recon-ng has a look and feel similar to the Metasploit Framework.
  • PTF - The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
  • Infection Monkey - A semi automatic pen testing tool for mapping/pen-testing networks. Simulates a human attacker.
  • ACSTIS - ACSTIS helps you to scan certain web applications for AngularJS Client-Side Template Injection (sometimes referred to as CSTI, sandbox escape or sandbox bypass). It supports scanning a single request but also crawling the entire web application for the AngularJS CSTI vulnerability.
  • padding-oracle-attacker - padding-oracle-attacker is a CLI tool and library to execute padding oracle attacks (which decrypts data encrypted in CBC mode) easily, with support for concurrent network requests and an elegant UI.
  • is-website-vulnerable - finds publicly known security vulnerabilities in a website’s frontend JavaScript libraries.
  • PhpSploit - Full-featured C2 framework which silently persists on webserver via evil PHP oneliner. Built for stealth persistence, with many privilege-escalation & post-exploitation features.
  • Keyscope - Keyscope is an extensible key and secret validation for checking active secrets against multiple SaaS vendors built in Rust
  • Cyclops - The Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.
  • Scanmycode CE (Community Edition) - Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report. Currently supports: PHP, Java, Scala, Python, Ruby, Javascript, GO, Secret Scanning, Dependency Confusion, Trojan Source, Open Source and Proprietary Checks (total ca. 1000 checks)
  • recon - a fast Rust based CLI that uses SQL to query over files, code, or malware with content classification and processing for security experts
  • CakeFuzzer - The ultimate web application security testing tool for CakePHP-based web applications. CakeFuzzer employs a predefined set of attacks that are randomly modified before execution. Leveraging its deep understanding of the Cake PHP framework, Cake Fuzzer launches attacks on all potential application entry points.
  • Artemis - A modular vulnerability scanner with automatic report generation capabilities.

Runtime Application Self-Protection

  • Sqreen - Sqreen is a Runtime Application Self-Protection (RASP) solution for software teams. An in-app agent instruments and monitors the app. Suspicious user activities are reported and attacks are blocked at runtime without code modification or traffic redirection.
  • OpenRASP - An open source RASP solution actively maintained by Baidu Inc. With context-aware detection algorithm the project achieved nearly no false positives. And less than 3% performance reduction is observed under heavy server load.

Development

  • API Security in Action - Book covering API security including secure development, token-based authentication, JSON Web Tokens, OAuth 2, and Macaroons. (early access, published continuously, final release summer 2020)
  • Secure by Design - Book that identifies design patterns and coding styles that make lots of security vulnerabilities less likely. (early access, published continuously, final release fall 2017)
  • Understanding API Security - Free eBook sampler that gives some context for how API security works in the real world by showing how APIs are put together and how the OAuth protocol can be used to protect them.
  • OAuth 2 in Action - Book that teaches you practical use and deployment of OAuth 2 from the perspectives of a client, an authorization server, and a resource server.
  • OWASP ZAP Node API - Leverage the OWASP Zed Attack Proxy (ZAP) within your NodeJS applications with this official API.
  • GuardRails - A GitHub App that provides security feedback in Pull Requests.
  • Bearer - Scan code for security risks and vulnerabilities leading to sensitive data exposures.
  • Checkov - A static analysis tool for infrastucture as code (Terraform).
  • TFSec - A static analysis tool for infrastucture as code (Terraform).
  • KICS - Scans IaC projects for security vulnerabilities, compliance issues, and infrastructure misconfiguration. Currently working with Terraform projects, Kubernetes manifests, Dockerfiles, AWS CloudFormation Templates, and Ansible playbooks.
  • Insider CLI - A open source Static Application Security Testing tool (SAST) written in GoLang for Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C# and Javascript (Node.js).
  • Full Stack Python Security - A comprehensive look at cybersecurity for Python developers
  • Making Sense of Cyber Security - A jargon-free, practical guide to the key concepts, terminology, and technologies of cybersecurity perfect for anyone planning or implementing a security strategy. (early access, published continuously, final release early 2022)
  • Security Checklist by OWASP - A checklist by OWASP for testing web applications based on assurance level. Covers multiple topics like Architecture, IAM, Sanitization, Cryptography and Secure Configuration.

Exploits & Payloads

  • PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Red Team Infrastructure Deployment

  • Redcloud - A automated Red Team Infrastructure deployement using Docker.
  • Axiom -Axiom is a dynamic infrastructure framework to efficiently work with multi-cloud environments, build and deploy repeatable infrastructure focussed on offensive and defensive security.

Blue Team Infrastructure Deployment

  • MutableSecurity - CLI program for automating the setup, configuration, and use of cybersecurity solutions.

Usability

  • Usable Security Course - Usable Security course at coursera. Quite good for those looking for how security and usability intersects.

Big Data

  • data_hacking - Examples of using IPython, Pandas, and Scikit Learn to get the most out of your security data.
  • hadoop-pcap - Hadoop library to read packet capture (PCAP) files.
  • Workbench - A scalable python framework for security research and development teams.
  • OpenSOC - OpenSOC integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
  • Apache Metron (incubating) - Metron integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
  • Apache Spot (incubating) - Apache Spot is open source software for leveraging insights from flow and packet analysis.
  • binarypig - Scalable Binary Data Extraction in Hadoop. Malware Processing and Analytics over Pig, Exploration through Django, Twitter Bootstrap, and Elasticsearch.
  • Matano - Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.
  • VAST - Open source security data pipeline engine for structured event data, supporting high-volume telemetry ingestion, compaction, and retrieval; purpose-built for security content execution, guided threat hunting, and large-scale investigation.

DevOps

  • Securing DevOps - A book on Security techniques for DevOps that reviews state of the art practices used in securing web applications and their infrastructure.
  • ansible-os-hardening - Ansible role for OS hardening
  • Trivy - A simple and comprehensive vulnerability scanner for containers and other artifacts, suitable for CI.
  • Preflight - helps you verify scripts and executables to mitigate supply chain attacks in your CI and other systems.
  • Teller - a secrets management tool for devops and developers - manage secrets across multiple vaults and keystores from a single place.
  • cve-ape - A non-intrusive CVE scanner for embedding in test and CI environments that can scan package lists and individual packages for existing CVEs via locally stored CVE database. Can also be used as an offline CVE scanner for e.g. OT/ICS.
  • Selefra - An open-source policy-as-code software that provides analytics for multi-cloud and SaaS.

Terminal

  • shellfirm - It is a handy utility to help avoid running dangerous commands with an extra approval step. You will immediately get a small prompt challenge that will double verify your action when risky patterns are detected.
  • shellclear - It helps you to Secure your shell history commands by finding sensitive commands in your all history commands and allowing you to clean them.

Operating Systems

Privacy & Security

  • Qubes OS - Qubes OS is a free and open-source security-oriented operating system meant for single-user desktop computing.
  • Whonix - Operating System designed for anonymity.
  • Tails OS - Tails is a portable operating system that protects against surveillance and censorship.

Online resources

Datastores

  • databunker - Databunker is an address book on steroids for storing personal data. GDPR and encryption are out of the box.
  • acra - Database security suite: proxy for data protection with transparent “on the fly” data encryption, data masking and tokenization, SQL firewall (SQL injections prevention), intrusion detection system.
  • blackbox - Safely store secrets in a VCS repo using GPG
  • confidant - Stores secrets in AWS DynamoDB, encrypted at rest and integrates with IAM
  • dotgpg - A tool for backing up and versioning your production secrets or shared passwords securely and easily.
  • redoctober - Server for two-man rule style file encryption and decryption.
  • aws-vault - Store AWS credentials in the OSX Keychain or an encrypted file
  • credstash - Store secrets using AWS KMS and DynamoDB
  • chamber - Store secrets using AWS KMS and SSM Parameter Store
  • Safe - A Vault CLI that makes reading from and writing to the Vault easier to do.
  • Sops - An editor of encrypted files that supports YAML, JSON and BINARY formats and encrypts with AWS KMS and PGP.
  • passbolt - The password manager your team was waiting for. Free, open source, extensible, based on OpenPGP.
  • passpie - Multiplatform command-line password manager
  • Vault - An encrypted datastore secure enough to hold environment and application secrets.
  • LunaSec - Database for PII with automatic encryption/tokenization, sandboxed components for handling data, and centralized authorization controls.

Fraud prevention

  • FingerprintJS - Identifies browser and hybrid mobile application users even when they purge data storage. Allows you to detect account takeovers, account sharing and repeated malicious activity.
  • FingerprintJS Android - Identifies Android application users even when they purge data storage. Allows you to detect account takeovers, account sharing and repeated malicious activity.

EBooks

  • Holistic Info-Sec for Web Developers - Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises
  • Docker Security - Quick Reference: For DevOps Engineers - A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques.
  • How to Hack Like a Pornstar - A step by step process for breaking into a BANK, Sparc Flow, 2017
  • How to Hack Like a Legend - A hacker’s tale breaking into a secretive offshore company, Sparc Flow, 2018
  • How to Investigate Like a Rockstar - Live a real crisis to master the secrets of forensic analysis, Sparc Flow, 2017
  • Real World Cryptography - This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications.
  • AWS Security - This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response.
  • The Art of Network Penetration Testing - Book that is a hands-on guide to running your own penetration test on an enterprise network. (early access, published continuously, final release December 2020)
  • Spring Boot in Practice - Book that is a practical guide which presents dozens of relevant scenarios in a convenient problem-solution-discussion format.. (early access, published continuously, final release fall 2021)
  • Self-Sovereign Identity - A book about how SSI empowers us to receive digitally-signed credentials, store them in private wallets, and securely prove our online identities. (early access, published continuously, final release fall 2021)
  • Data Privacy - A book that teaches you to implement technical privacy solutions and tools at scale. (early access, published continuously, final release January 2022)
  • Cyber Security Career Guide - Kickstart a career in cyber security by learning how to adapt your existing technical and non-technical skills. (early access, published continuously, final release Summer 2022)
  • Secret Key Cryptography - A book about cryptographic techniques and Secret Key methods. (early access, published continuously, final release Summer 2022)
  • The Security Engineer Handbook - A short read that discusses the dos and dont’s of working in a security team, and the many tricks and tips that can help you in your day-to-day as a security engineer.
  • Cyber Threat Hunting - Practical guide to cyber threat hunting.
  • Edge Computing Technology and Applications - A book about the business and technical foundation you need to create your edge computing strategy.
  • Spring Security in Action, Second Edition - A book about designing and developing Spring applications that are secure right from the start.
  • Azure Security - A practical guide to the native security services of Microsoft Azure.
  • Node.js Secure Coding: Defending Against Command Injection Vulnerabilities - Learn secure coding conventions in Node.js by executing command injection attacks on real-world npm packages and analyzing vulnerable code.
  • Node.js Secure Coding: Prevention and Exploitation of Path Traversal Vulnerabilities - Master secure coding in Node.js with real-world vulnerable dependencies and experience firsthand secure coding techniques against Path Traversal vulnerabilities.
  • Grokking Web Application Security - A book about building web apps that are ready for and resilient to any attack.

Other Awesome Lists

Other Security Awesome Lists

Other Common Awesome Lists

Other amazingly awesome lists:

Hacking Tools

Hacking Tools and Medias

A curated list of Hacking.For a list of free hacking books available for download, go here

System

Tutorials

Tools

  • Metasploit A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
  • mimikatz - A little tool to play with Windows security
  • Hackers tools - Tutorial on tools.

Docker Images for Penetration Testing & Security

General

Reverse Engineering

Tutorials

Tools

Disassemblers and debuggers

  • IDA - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger
  • OllyDbg - A 32-bit assembler level analysing debugger for Windows
  • x64dbg - An open-source x64/x32 debugger for Windows
  • radare2 - A portable reversing framework
  • plasma - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
  • ScratchABit - Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
  • Capstone
  • Ghidra - A software reverse engineering (SRE) suite of tools developed by NSA’s Research Directorate in support of the Cybersecurity mission

Decompilers

  • JVM-based languages
  • Krakatau - the best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully.
  • JD-GUI
  • procyon
    • Luyten - one of the best, though a bit slow, hangs on some binaries and not very well maintained.
  • JAD - JAD Java Decompiler (closed-source, unmaintained)
  • JADX - a decompiler for Android apps. Not related to JAD.
  • .net-based languages
  • dotPeek - a free-of-charge .NET decompiler from JetBrains
  • ILSpy - an open-source .NET assembly browser and decompiler
  • dnSpy - .NET assembly editor, decompiler, and debugger
  • native code
  • Python
  • uncompyle6 - decompiler for the over 20 releases and 20 years of CPython.

Deobfuscators

  • de4dot - .NET deobfuscator and unpacker.
  • JS Beautifier
  • JS Nice - a web service guessing JS variables names and types based on the model derived from open source.

Other

  • nudge4j - Java tool to let the browser talk to the JVM
  • dex2jar - Tools to work with Android .dex and Java .class files
  • androguard - Reverse engineering, malware and goodware analysis of Android applications
  • antinet - .NET anti-managed debugger and anti-profiler code
  • UPX - the Ultimate Packer (and unpacker) for eXecutables

Execution logging and tracing

  • Wireshark - A free and open-source packet analyzer
  • tcpdump - A powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture
  • mitmproxy - An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface
  • Charles Proxy - A cross-platform GUI web debugging proxy to view intercepted HTTP and HTTPS/SSL live traffic
  • usbmon - USB capture for Linux.
  • USBPcap - USB capture for Windows.
  • dynStruct - structures recovery via dynamic instrumentation.
  • drltrace - shared library calls tracing.

Binary files examination and editing

Hex editors

  • HxD - A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size
  • WinHex - A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security

Other

  • Binwalk - Detects signatures, unpacks archives, visualizes entropy.
  • Veles - a visualizer for statistical properties of blobs.
  • Kaitai Struct - a DSL for creating parsers in a variety of programming languages. The Web IDE is particularly useful for reverse-engineering.
  • Protobuf inspector
  • DarunGrim - executable differ.
  • DBeaver - a DB editor.
  • Dependencies - a FOSS replacement to Dependency Walker.
  • PEview - A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files
  • BinText - A small, very fast and powerful text extractor that will be of particular interest to programmers.

General

Web

Tools

  • Spyse - Data gathering service that collects web info using OSINT. Provided info: IPv4 hosts, domains/whois, ports/banners/protocols, technologies, OS, AS, maintains huge SSL/TLS DB, and more… All the data is stored in its own database allowing get the data without scanning.
  • sqlmap - Automatic SQL injection and database takeover tool
  • NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • tools.web-max.ca - base64 base85 md4,5 hash, sha1 hash encoding/decoding
  • VHostScan - A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
  • SubFinder - SubFinder is a subdomain discovery tool that discovers valid subdomains for any target using passive online sources.
  • Findsubdomains - A subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results.
  • badtouch - Scriptable network authentication cracker
  • PhpSploit - Full-featured C2 framework which silently persists on webserver via evil PHP oneliner
  • Git-Scanner - A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
  • CSP Scanner - Analyze a site’s Content-Security-Policy (CSP) to find bypasses and missing directives.
  • Shodan - A web-crawling search engine that lets users search for various types of servers connected to the internet.
  • masscan - Internet scale portscanner.
  • Keyscope - an extensible key and secret validation tool for auditing active secrets against multiple SaaS vendors
  • Decompiler.com - Java, Android, Python, C# online decompiler.

General

  • Strong node.js - An exhaustive checklist to assist in the source code security analysis of a node.js web service.

Network

Tools

  • NetworkMiner - A Network Forensic Analysis Tool (NFAT)
  • Paros - A Java-based HTTP/HTTPS proxy for assessing web application vulnerability
  • pig - A Linux packet crafting tool
  • findsubdomains - really fast subdomains scanning service that has much greater opportunities than simple subs finder(works using OSINT).
  • cirt-fuzzer - A simple TCP/UDP protocol fuzzer.
  • ASlookup - a useful tool for exploring autonomous systems and all related info (CIDR, ASN, Org…)
  • ZAP - The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications
  • mitmsocks4j - Man-in-the-middle SOCKS Proxy for Java
  • ssh-mitm - An SSH/SFTP man-in-the-middle tool that logs interactive sessions and passwords.
  • nmap - Nmap (Network Mapper) is a security scanner
  • Aircrack-ng - An 802.11 WEP and WPA-PSK keys cracking program
  • Nipe - A script to make Tor Network your default gateway.
  • Habu - Python Network Hacking Toolkit
  • Wifi Jammer - Free program to jam all wifi clients in range
  • Firesheep - Free program for HTTP session hijacking attacks.
  • Scapy - A Python tool and library for low level packet creation and manipulation
  • Amass - In-depth subdomain enumeration tool that performs scraping, recursive brute forcing, crawling of web archives, name altering and reverse DNS sweeping
  • sniffglue - Secure multithreaded packet sniffer
  • Netz - Discover internet-wide misconfigurations, using zgrab2 and others.
  • RustScan - Extremely fast port scanner built with Rust, designed to scan all ports in a couple of seconds and utilizes nmap to perform port enumeration in a fraction of the time.
  • PETEP - Extensible TCP/UDP proxy with GUI for traffic analysis & modification with SSL/TLS support.

Forensic

Tools

  • Autopsy - A digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics tools
  • sleuthkit - A library and collection of command-line digital forensics tools
  • EnCase - The shared technology within a suite of digital investigations products by Guidance Software
  • malzilla - Malware hunting tool
  • IPED - Indexador e Processador de Evidências Digitais - Brazilian Federal Police Tool for Forensic Investigation
  • CyLR - NTFS forensic image collector
  • CAINE- CAINE is a Ubuntu-based app that offers a complete forensic environment that provides a graphical interface. This tool can be integrated into existing software tools as a module. It automatically extracts a timeline from RAM.

Cryptography

Tools

  • xortool - A tool to analyze multi-byte XOR cipher
  • John the Ripper - A fast password cracker
  • Aircrack - Aircrack is 802.11 WEP and WPA-PSK keys cracking program.
  • Ciphey - Automated decryption tool using artificial intelligence & natural language processing.

Wargame

System

Reverse Engineering

  • Reversing.kr - This site tests your ability to Cracking & Reverse Code Engineering
  • CodeEngn - (Korean)
  • simples.kr - (Korean)
  • Crackmes.de - The world first and largest community website for crackmes and reversemes.

Web

  • Hack This Site! - a free, safe and legal training ground for hackers to test and expand their hacking skills
  • Hack The Box - a free site to perform pentesting in a variety of different systems.
  • Webhacking.kr
  • 0xf.at - a website without logins or ads where you can solve password-riddles (so called hackits).
  • fuzzy.land - Website by an Austrian group. Lots of challenges taken from CTFs they participated in.
  • Gruyere
  • Others
  • TryHackMe - Hands-on cyber security training through real-world scenarios.

Cryptography

Bug bounty

Bug bounty - Earn Some Money

CTF

Competition

General

OS

Online resources

Post exploitation

tools

  • empire - A post exploitation framework for powershell and python.
  • silenttrinity - A post exploitation tool that uses iron python to get past powershell restrictions.
  • PowerSploit - A PowerShell post exploitation framework
  • ebowla - Framework for Making Environmental Keyed Payloads

ETC

Social Media OSINT Tools

Social-Media-OSINT-Tools

A collection of most useful tools for social media osint.

Documentation

1. What is osint

2. What is Social Media Osint

3. Facebook

4. Instagram

5. LinkedIn

6. Twitter

7. Pinterest

8. Reddit

9. Github

10. Snapchat

11. Whatsapp

12. Skype

13. Telegram

14. Discord

15. ONLYFANS

16. TikTok

What is OSINT

Open source intelligence (OSINT) is the practice of collecting information from published or otherwise publicly available sources. OSINT operations, whether practiced by IT security pros, malicious hackers, or state-sanctioned intelligence operatives, use advanced techniques to search through the vast haystack of visible data to find the needles they’re looking for to achieve their goals—and learn information that many don’t realize is public.

What is Social Media OSINT

Social Media Osint, also known as Social media intelligence allows one to collect intelligence gathering from social media sites like Facebook, Twitter, Instagram etc. This type of intelligence gathering is one element of OSINT (Open- Source Intelligence).

Facebook -

  1. Facebook Recover Lookup

    • Link: Facebook Recover Lookup
    • Description: Used to check if a given email or phone number is associated with any Facebook account or not.
  2. CrowdTangle Link Checker

    • Link: CrowdTangle Link Checker
    • Description: Shows the specific Facebook posts, Instagram posts, tweets, and subreddits that mention this link. It works for articles, as well as YouTube videos, Facebook videos, and more.
  3. Social Searcher

    • Link: Social Searcher
    • Description: Allows you to monitor all public social mentions in social networks and the web.
  4. Lookup-id.com

    • Link: Lookup-id.com
    • Description: Helps you find the Facebook ID of anyone’s profile or a Group.
  5. Who posted this

    • Link: Who posted this
    • Description: Facebook keyword search for people who work in the public interest. It allows you to search keywords on specific dates.
  6. Facebook Search

    • Link: Facebook Search
    • Description: Allows you to search on Facebook for posts, people, photos, etc., using some filters.
  7. Facebook Graph Searcher

  8. Facebook People Search

  9. DumpItBlue

    • Link: DumpItBlue+
    • Description: helps to dump Facebook stuff for analysis or reporting purposes.
  10. Export Comments

    • Link: Export Comments
    • Description: Easily exports all comments from your social media posts to Excel file.
  11. Facebook Applications

    • Link: Facebook Applications
    • Description: A collection of online tools that automate and facilitate Facebook.
  12. Social Analyzer

  13. AnalyzeID

    • Link: AnalyzeID
    • Description: Just looking for sites that supposedly may have the same owner. Including a FaceBook App ID match.
  14. SOWsearch

    • Link: sowsearch
    • Description: a simple interface to show how the current Facebook search function works.
  15. Facebook Matrix

  16. Who posted what

    • Link: Who Posted What
    • Description: A non public Facebook keyword search for people who work in the public interest. It allows you to search keywords on specific dates.
  17. StalkFace

    • Link: StalkFace
    • Description: Toolkit to stalk someone on Facebook.
  18. Search is Back

    • Link: Search is Back
    • Description: ind people and events on Facebook Search by location, relationships, and more!.

Instagram -

  1. SnapInsta

    • Link: SnapInsta
    • Description: Download Photos, Videos, IGTV & more from a public Instagram account.
  2. IFTTT Integrations

  3. Pickuki

    • Link: Pickuki
    • Description: Browse publicly available Instagram content without logging in.
  4. IMGinn.io

    • Link: IMGinn.io
    • Description: view and download all the content on the social network Instagram all at one place.
  5. Instaloader

    • Link: Instaloader
    • Description: Download pictures (or videos) along with their captions and other metadata from Instagram.
  6. SolG

    • Link: SolG
    • Description: The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn’t be able to get from just looking at their profile.
  7. Osintgram

    • Link: Osintgram
    • Description: Osintgram is an OSINT tool on Instagram to collect, analyze, and run reconnaissance.
  8. Toutatis

    • Link: toutatis
    • Description: It is a tool written to retrieve private information such as Phone Number, Mail Address, ID on Instagram accounts via API.
  9. instalooter

    • Link: instalooter
    • Description: InstaLooter is a program that can download any picture or video associated from an Instagram profile, without any API access.
  10. Exportgram

    • Link: Exportgram
    • Description: A web application made for people who want to export instagram comments into excel, csv and json formats.
  11. Profile Analyzer

    • Link: Profile Analyzer
    • Description: Analyze any public profile on Instagram – the tool is free, unlimited, and secure. Enter a username to take advantage of precise statistics.
  12. Find Instagram User Id

    • Link: Find Instagram User Id
    • Description: This tool called “Find Instagram User ID” provides an easy way for developers and designers to get Instagram account numeric ID by username.
  13. Instahunt

    • Link: Instahunt
    • Description: Easily find social media posts surrounding a location.
  14. InstaFreeView

    • Link: InstaFreeView
    • Description: InstaFreeView Private Instagram Profile Viewer is a free app to view Instagram profile posts without login.
  15. InstaNavigation

LinkedIn -

  1. RecruitEm

    • Link: RecruitEm
    • Description: Allows you to search social media profiles. It helps recruiters to create a Google boolean string that searches all public profiles.
  2. RocketReach

    • Link: RocketReach
    • Description: Allows you to programmatically search and lookup contact info over 700 million professionals and 35 million companies.
  3. Phantom Buster

    • Link: Phantom Buster
    • Description: Automation tool suite that includes data extraction capabilities.
  4. linkedprospect

  5. ReverseContact

  6. LinkedIn Search Engine

  7. Free People Search Tool

  8. IntelligenceX Linkedin

  9. Linkedin Search Tool

    • Link: Linkedin Search Tool
    • Description: Provides you a interface with various tools for Linkedin Osint.
  10. LinkedInt

    • Link: LinkedInt
    • Description: Providing you with Linkedin Intelligence.
  11. InSpy

    • Link: InSpy
    • Description: InSpy is a python based LinkedIn enumeration tool.
  12. CrossLinked

    • Link: CrossLinked
    • Description: CrossLinked is a LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from an organization.

Twitter -

  1. TweetDeck

    • Link: TweetDeck
    • Description: Offers a more convenient Twitter experience by allowing you to view multiple timelines in one easy interface.
  2. FollowerWonk

    • Link: FollowerWonk
    • Description: Helps you find Twitter accounts using bio and provides many other useful features.
  3. Twitter Advanced Search

    • Link: Twitter Advanced Search
    • Description: Allows you to search on Twitter using filters for better search results.
  4. Wayback Tweets

    • Link: Wayback Tweets
    • Description: Display multiple archived tweets on Wayback Machine and avoid opening each link manually.
  5. memory.lol

    • Link: memory.lol
    • Description: a tiny web service that provides historical information about twitter users.
  6. SocialData API

    • Link: SocialData API
    • Description: an unofficial Twitter API alternative that allows scraping historical tweets, user profiles, lists and Twitter spaces without using Twitter’s API.
  7. Social Bearing

    • Link: Social Bearing
    • Description: Insights & analytics for tweets & timelines.
  8. Tinfoleak

    • Link: Tinfoleak
    • Description: Search for Twitter users leaks.
  9. Network Tool

    • Link: Network Tool
    • Description: Explore how information spreads across Twitter with an interactive network using OSoMe data.
  10. Foller

    • Link: Foller
    • Description: Looking for someone in the United States? Our free people search engine finds social media profiles, public records, and more!
  11. SimpleScraper OSINT

    • Link: SimpleScraper OSINT
    • Description: This Airtable automatically scrapes OSINT-related twitter accounts ever 3 minutes and saves tweets that contain coordinates.
  12. Deleted Tweet Finder

    • Link: Deleted Tweet Finder
    • Description: Search for deleted tweets across multiple archival services.
  13. Twitter Search Tool

    • Link: Twitter search tool
    • Description: On this page you can create advanced search queries within Twitter.
  14. Twitter Video Downloader

  15. Download Twitter Data

    • Link: Download Twitter Data
    • Description: Download Twitter data in csv format by entering any Twitter handle, keyword, hashtag, List ID or Space ID.
  16. Twitonomy

    • Link: Twitonomy
    • Description: Twitter #analytics and much more.
  17. tweeterid

    • Link: tweeterid
    • Description: Type in any Twitter ID or @handle below, and it will be converted into the respective ID or username.
  18. BirdHunt

    • Link: BirdHunt
    • Description: Easily find social media posts surrounding a location.

Pinterest

  1. DownAlbum

    • Link: DownAlbum
    • Description: Google Chrome extension for downloading albums of photos from various websites, including Pinterest.
  2. Experts PHP: Pinterest Photo Downloader

  3. Pingroupie

    • Link: Pingroupie
    • Description: A Meta Search Engine for Pinterest that lets you discover Collaborative Boards, Influencers, Pins, and new Keywords.
  4. Tailwind

    • Link: Tailwind
    • Description: Social media scheduling and management tool that supports Pinterest.
  5. Pinterest Guest

    • Link: Pinterest Guest
    • Description: Mozilla Firefox add-on for browsing Pinterest without logging in or creating an account.
  6. SourcingLab: Pinterest

Reddit

  1. F5BOT

    • Link: F5BOT
    • Description: Receive notifications for new Reddit posts matching specific keywords.
  2. Karma Decay

    • Link: Karma Decay
    • Description: Reverse image search for finding similar or reposted images on Reddit.
  3. Mostly Harmless

    • Link: Mostly Harmless
    • Description: A suite of tools for Reddit, including user analysis, subreddit comparison, and more.
  4. OSINT Combine: Reddit Post Analyzer

  5. Phantom Buster

    • Link: Phantom Buster
    • Description: Automation tool suite that includes Reddit data extraction capabilities.
  6. rdddeck

    • Link: rdddeck
    • Description: Real-time dashboard for monitoring multiple Reddit communities.
  7. Readr for Reddit

    • Link: Readr for Reddit
    • Description: Google Chrome extension for an improved reading experience on Reddit.
  8. Reddit Archive

    • Link: Reddit Archive
    • Description: Archive of Reddit posts and comments for historical reference.
  9. Reddit Comment Search

  10. Redditery

    • Link: Redditery
    • Description: Explore Reddit posts and comments based on various criteria.
  11. Reddit Hacks

    • Link: Reddit Hacks
    • Description: Collection of Reddit hacks and tricks for advanced users.
  12. Reddit List

    • Link: Reddit List
    • Description: Directory of popular subreddits organized by various categories.
  13. reddtip

    • Link: reddtip
    • Description: Show appreciation to Reddit users by sending them tips in cryptocurrencies.
  14. Reddit Search

  15. Reddit Shell

    • Link: Reddit Shell
    • Description: Command-line interface for browsing and interacting with Reddit.
  16. Reddit Stream

    • Link: Reddit Stream
    • Description: Live-streaming of Reddit comments for real-time discussions.
  17. Reddit Suite

  18. Reddit User Analyser

    • Link: Reddit User Analyser
    • Description: Analyze and visualize the activity and behavior of Reddit users.
  19. redditvids

    • Link: redditvids
    • Description: Watch Reddit videos and browse popular video subreddits.
  20. Redective

    • Link: Redective
    • Description: Investigate and analyze Reddit users based on their post history.
  21. Reditr

    • Link: Reditr
    • Description: Desktop Reddit client with a clean and intuitive interface.
  22. Reeddit

    • Link: Reeddit
    • Description: Simplified and clean Reddit web interface for a distraction-free browsing experience.
  23. ReSavr

    • Link: ReSavr
    • Description: Retrieve and save deleted Reddit comments for later viewing.
  24. smat

    • Link: smat
    • Description: Social media analytics tool that includes Reddit for tracking trends and engagement.
  25. socid_extractor

    • Link: socid_extractor
    • Description: Extract user information from Reddit and other social media platforms.
  26. Suggest me a subreddit

    • Link: Suggest me a subreddit
    • Description: Get recommendations for new subreddits to explore based on your preferences.
  27. Subreddits

    • Link: Subreddits
    • Description: Directory of active subreddits organized by various categories.
  28. uforio

    • Link: uforio
    • Description: Generate word clouds from Reddit comment threads.
  29. Universal Reddit Scraper (URS)

  30. Vizit

    • Link: Vizit
    • Description: Visualize and analyze relationships between Reddit users and subreddits.
  31. Wisdom of Reddit

    • Link: Wisdom of Reddit
    • Description: Curated collection of insightful quotes and comments from Reddit.

Github

  1. Awesome Lists

    • Link: Awesome Lists
    • Description: A curated list of awesome lists for various programming languages, frameworks, and tools.
  2. CoderStats

    • Link: CoderStats
    • Description: A platform for developers to track and showcase their coding activity and statistics from GitHub.
  3. Commit-stream

    • Link: Commit-stream
    • Description: A tool for monitoring and collecting GitHub commits in real-time.
  4. Digital Privacy

    • Link: Digital Privacy
    • Description: A collection of resources and tools for enhancing digital privacy and security.
  5. Find Github User ID

    • Link: Find Github User ID
    • Description: A web tool for finding the unique identifier (ID) of a GitHub user.
  6. GH Archive

    • Link: GH Archive
    • Description: A project that provides a public dataset of GitHub activity, including events and metadata.
  7. Git-Awards

    • Link: Git-Awards
    • Description: A website that ranks GitHub users and repositories based on their contributions and popularity.
  8. GitGot

    • Link: GitGot
    • Description: A semi-automated, feedback-driven tool for auditing Git repositories.
  9. gitGraber

    • Link: gitGraber
    • Description: A tool for searching and cloning sensitive information in GitHub repositories.
  10. git-hound

    • Link: git-hound
    • Description: A tool for finding sensitive information exposed in GitHub repositories.
  11. Github Dorks

    • Link: Github Dorks
    • Description: A collection of GitHub dorks, which are search queries to find sensitive information in repositories.
  12. Github Stars

    • Link: Github Stars
    • Description: A website that showcases GitHub repositories with the most stars and popularity.
  13. Github Trending RSS

    • Link: Github Trending RSS
    • Description: An RSS feed generator for trending repositories on GitHub.
  14. Github Username Search Engine

  15. Github Username Search Engine

  16. GitHut

    • Link: GitHut
    • Description: A website that provides statistics and visualizations of programming languages on GitHub.

Snapchat

  1. addmeContacts

    • Link: addmeContacts
    • Description: A platform to find and connect with new contacts on various social media platforms.
  2. AddMeSnaps

    • Link: AddMeSnaps
    • Description: A website for discovering and adding new Snapchat friends.
  3. ChatToday

    • Link: ChatToday
    • Description: An online chat platform for connecting and chatting with people from around the world.
  4. Gebruikersnamen: Snapchat

  5. GhostCodes

    • Link: GhostCodes
    • Description: An app for discovering new Snapchat users and their stories.
  6. OSINT Combine: Snapchat MultiViewer

  7. Snap Map

    • Link: Snap Map
    • Description: Snapchat’s feature that allows users to share their location and view Snaps from around the world.
  8. Snapchat-mapscraper

    • Link: Snapchat-mapscraper
    • Description: A tool for scraping public Snapchat Stories from the Snap Map.
  9. Snap Political Ads Library

  10. Social Finder

    • Link: Social Finder
    • Description: A platform to search and discover social media profiles on various platforms.
  11. SnapIntel

    • Link: SnapIntel
    • Description: a python tool providing you information about Snapchat users.
  12. AddMeS

    • Link: AddMeS
    • Description: The ‘Add Me’ directory of Snapchat users on web.

WhatsApp

  1. checkwa

    • Link: checkwa
    • Description: An online tool to check the status and availability of WhatsApp numbers.
  2. WhatsApp Fake Chat

    • Link: WhatsApp Fake Chat
    • Description: An online tool to generate fake WhatsApp conversations for fun or pranks.
  3. Whatsapp Monitor

    • Link: Whatsapp Monitor
    • Description: A tool for monitoring and analyzing WhatsApp messages and activities.
  4. whatsfoto

    • Link: whatsfoto
    • Description: A Python script to download profile pictures from WhatsApp contacts.

Skype

  1. addmeContacts

    • Link: addmeContacts
    • Description: A platform to find and connect with new contacts on various social media platforms.
  2. ChatToday

    • Link: ChatToday
    • Description: An online chat platform for connecting and chatting with people from around the world.
  3. Skypli

    • Link: Skypli
    • Description: A website for discovering and connecting with new Skype contacts.

Telegram

  1. ChatBottle: Telegram

  2. ChatToday

    • Link: ChatToday
    • Description: An online chat platform for connecting and chatting with people from around the world.
  3. informer

    • Link: informer
    • Description: A Python library for retrieving information about Telegram channels, groups, and users.
  4. _IntelligenceX: Telegram

    • Link: _IntelligenceX: Telegram
    • Description: IntelligenceX’s Telegram tool for searching and analyzing Telegram data.
  5. Lyzem.com

    • Link: Lyzem.com
    • Description: A website to search and find Telegram groups and channels.
  6. Telegram Channels

    • Link: Telegram Channels
    • Description: A directory of Telegram channels covering various topics.
  7. Telegram Channels

    • Link: Telegram Channels
    • Description: A platform to discover and browse Telegram channels.
  8. Telegram Channels Search

  9. Telegram Directory

    • Link: Telegram Directory
    • Description: A comprehensive directory of Telegram channels, groups, and bots.
  10. Telegram Group

    • Link: Telegram Group
    • Description: A website to search and join Telegram groups.
  11. telegram-history-dump

    • Link: telegram-history-dump
    • Description: A Python script to dump the history of a Telegram chat into a SQLite database.
  12. Telegram-osint-lib

    • Link: Telegram-osint-lib
    • Description: A Python library for performing open-source intelligence (OSINT) on Telegram.
  13. Telegram Scraper

    • Link: Telegram Scraper
    • Description: A powerful Telegram scraping tool for extracting user information and media.
  14. Tgram.io

    • Link: Tgram.io
    • Description: A platform to explore and search for Telegram channels, groups, and bots.
  15. Tgstat.com

    • Link: Tgstat.com
    • Description: A comprehensive platform for analyzing and tracking Telegram channels and groups.
  16. Tgstat RU

    • Link: Tgstat RU
    • Description: A Russian platform for analyzing and monitoring Telegram channels and groups.

Discord

  1. DiscordOSINT

    • Link: DiscordOSINT
    • Description: This Repository Will contain useful resources to conduct research on Discord.
  2. Discord.name

    • Link: Discord.name
    • Description: Discord profile lookup using user ID.
  3. Lookupguru

    • Link: Lookupguru
    • Description: Discord profile lookup using user ID.
  4. Discord History Tracker

    • Link: Discord History Tracker
    • Description: Discord History Tracker lets you save chat history in your servers, groups, and private conversations, and view it offline.
  5. Top.gg

    • Link: Top.gg
    • Description: Explore millions of Discord Bots.
  6. Unofficial Discord Lookup

  7. Disboard

    • Link: Disboard
    • Description: DISBOARD is the place where you can list/find Discord servers.

ONLYFANS

  1. OnlyFinder

    • Link: OnlyFinder
    • Description: OnlyFans Search Engine - OnlyFans Account Finder.
  2. OnlySearch

    • Link: OnlySearch
    • Description: Find OnlyFans profiles by searching for key words.
  3. Sotugas

    • Link: SóTugas
    • Description: Encontra Contas do OnlyFans Portugal 🇵🇹.
  4. Fansmetrics

    • Link: Fansmetrics
    • Description: Use this OnlyFans Finder to search in 3,000,000 OnlyFans Accounts.
  5. Findr.fans

    • Link: Findr.fans
    • Description: Only Fans Search Tool.
  6. Hubite

    • Link: Hubite
    • Description: Advanced OnlyFans Search Engine.
  7. Similarfans

    • Link: Similarfans
    • Description: Blog for OnlyFans content creators.
  8. Fansearch

    • Link: Fansearch
    • Description: Fansearch is the best OnlyFans Finder to search in 3,000,000 OnlyFans Accounts.
  9. Fulldp

    • Link: Fulldp
    • Description: Download Onlyfans Full-Size Profile Pictures.

TikTok

  1. Mavekite

    • Link: Mavekite
    • Description: Search the profile using username.
  2. TikTok hashtag analysis toolset

    • Link: TikTok hashtag analysis toolset
    • Description: The tool helps to download posts and videos from TikTok for a given set of hashtags over a period of time.
  3. TikTok Video Downloader

    • Link: TikTok Video Downloader
    • Description: ssstiktok is a free TikTok video downloader without watermark tool that helps you download TikTok videos without watermark (Musically) online.
  4. Exolyt

    • Link: exolyt
    • Description: The best tool for TikTok analytics & insights.

Other

  1. ** Alfred OSINT**
    • Link: Alfred OSINT
    • Description: A Open-source tool for descovering social media accounts.

Incident Resposne Tools

Incident Response

A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams.

Digital Forensics and Incident Response (DFIR) teams are groups of people in an organization responsible for managing the response to a security incident, including gathering evidence of the incident, remediating its effects, and implementing controls to prevent the incident from recurring in the future.

Contents

IR Tools Collection

Adversary Emulation

  • APTSimulator - Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised.
  • Atomic Red Team (ART) - Small and highly portable detection tests mapped to the MITRE ATT&CK Framework.
  • AutoTTP - Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers.
  • Caldera - Automated adversary emulation system that performs post-compromise adversarial behavior within Windows Enterprise networks. It generates plans during operation using a planning system and a pre-configured adversary model based on the Adversarial Tactics, Techniques & Common Knowledge (ATT&CK™) project.
  • DumpsterFire - Modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations.
  • Metta - Information security preparedness tool to do adversarial simulation.
  • Network Flight Simulator - Lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility.
  • Red Team Automation (RTA) - RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.
  • RedHunt-OS - Virtual machine for adversary emulation and threat hunting.

All-In-One Tools

  • Belkasoft Evidence Center - The toolkit will quickly extract digital evidence from multiple sources by analyzing hard drives, drive images, memory dumps, iOS, Blackberry and Android backups, UFED, JTAG and chip-off dumps.
  • CimSweep - Suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
  • CIRTkit - CIRTKit is not just a collection of tools, but also a framework to aid in the ongoing unification of Incident Response and Forensics investigation processes.
  • Cyber Triage - Cyber Triage collects and analyzes host data to determine if it is compromised. It’s scoring system and recommendation engine allow you to quickly focus on the important artifacts. It can import data from its collection tool, disk images, and other collectors (such as KAPE). It can run on an examiner’s desktop or in a server model. Developed by Sleuth Kit Labs, which also makes Autopsy.
  • Dissect - Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
  • Doorman - osquery fleet manager that allows remote management of osquery configurations retrieved by nodes. It takes advantage of osquery’s TLS configuration, logger, and distributed read/write endpoints, to give administrators visibility across a fleet of devices with minimal overhead and intrusiveness.
  • Falcon Orchestrator - Extendable Windows-based application that provides workflow automation, case management and security response functionality.
  • Flare - A fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing.
  • Fleetdm - State of the art host monitoring platform tailored for security experts. Leveraging Facebook’s battle-tested osquery project, Fleetdm delivers continuous updates, features and fast answers to big questions.
  • GRR Rapid Response - Incident response framework focused on remote live forensics. It consists of a python agent (client) that is installed on target systems, and a python server infrastructure that can manage and talk to the agent. Besides the included Python API client, PowerGRR provides an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
  • IRIS - IRIS is a web collaborative platform for incident response analysts allowing to share investigations at a technical level.
  • Kuiper - Digital Forensics Investigation Platform
  • Limacharlie - Endpoint security platform composed of a collection of small projects all working together that gives you a cross-platform (Windows, OSX, Linux, Android and iOS) low-level environment for managing and pushing additional modules into memory to extend its functionality.
  • Matano: Open source serverless security lake platform on AWS that lets you ingest, store, and analyze petabytes of security data into an Apache Iceberg data lake and run realtime Python detections as code.
  • MozDef - Automates the security incident handling process and facilitate the real-time activities of incident handlers.
  • MutableSecurity - CLI program for automating the setup, configuration, and use of cybersecurity solutions.
  • nightHawk - Application built for asynchronous forensic data presentation using ElasticSearch as the backend. It’s designed to ingest Redline collections.
  • Open Computer Forensics Architecture - Another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data.
  • osquery - Easily ask questions about your Linux and macOS infrastructure using a SQL-like query language; the provided incident-response pack helps you detect and respond to breaches.
  • Redline - Provides host investigative capabilities to users to find signs of malicious activity through memory and file analysis, and the development of a threat assessment profile.
  • SOC Multi-tool - A powerful and user-friendly browser extension that streamlines investigations for security professionals.
  • The Sleuth Kit & Autopsy - Unix and Windows based tool which helps in forensic analysis of computers. It comes with various tools which helps in digital forensics. These tools help in analyzing disk images, performing in-depth analysis of file systems, and various other things.
  • TheHive - Scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.
  • Velociraptor - Endpoint visibility and collection tool
  • X-Ways Forensics - Forensics tool for Disk cloning and imaging. It can be used to find deleted files and disk analysis.
  • Zentral - Combines osquery’s powerful endpoint inventory features with a flexible notification and action framework. This enables one to identify and react to changes on OS X and Linux clients.

Books

Communities

Disk Image Creation Tools

  • AccessData FTK Imager - Forensics tool whose main purpose is to preview recoverable data from a disk of any kind. FTK Imager can also acquire live memory and paging file on 32bit and 64bit systems.
  • Bitscout - Bitscout by Vitaly Kamluk helps you build your fully-trusted customizable LiveCD/LiveUSB image to be used for remote digital forensics (or perhaps any other task of your choice). It is meant to be transparent and monitorable by the owner of the system, forensically sound, customizable and compact.
  • GetData Forensic Imager - Windows based program that will acquire, convert, or verify a forensic image in one of the following common forensic file formats.
  • Guymager - Free forensic imager for media acquisition on Linux.
  • Magnet ACQUIRE - ACQUIRE by Magnet Forensics allows various types of disk acquisitions to be performed on Windows, Linux, and OS X as well as mobile operating systems.

Evidence Collection

  • Acquire - Acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container. This makes Acquire an excellent tool to, among others, speedup the process of digital forensic triage. It uses Dissect to gather that information from the raw disk, if possible.
  • artifactcollector - The artifactcollector project provides a software that collects forensic artifacts on systems.
  • bulk_extractor - Computer forensics tool that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures. Because of ignoring the file system structure, the program distinguishes itself in terms of speed and thoroughness.
  • Cold Disk Quick Response - Streamlined list of parsers to quickly analyze a forensic image file (dd, E01, .vmdk, etc) and output nine reports.
  • CyLR - The CyLR tool collects forensic artifacts from hosts with NTFS file systems quickly, securely and minimizes impact to the host.
  • Forensic Artifacts - Digital Forensics Artifact Repository
  • ir-rescue - Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
  • Live Response Collection - Automated tool that collects volatile data from Windows, OSX, and *nix based operating systems.
  • Margarita Shotgun - Command line utility (that works with or without Amazon EC2 instances) to parallelize remote memory acquisition.
  • SPECTR3 - Acquire, triage and investigate remote evidence via portable iSCSI readonly access
  • UAC - UAC (Unix-like Artifacts Collector) is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Incident Management

  • Catalyst - A free SOAR system that helps to automate alert handling and incident response processes.
  • CyberCPR - Community and commercial incident management tool with Need-to-Know built in to support GDPR compliance while handling sensitive incidents.
  • Cyphon - Cyphon eliminates the headaches of incident management by streamlining a multitude of related tasks through a single platform. It receives, processes and triages events to provide an all-encompassing solution for your analytic workflow — aggregating data, bundling and prioritizing alerts, and empowering analysts to investigate and document incidents.
  • CORTEX XSOAR - Paloalto security orchestration, automation and response platform with full Incident lifecycle management and many integrations to enhance automations.
  • DFTimewolf - A framework for orchestrating forensic collection, processing and data export.
  • DFIRTrack - Incident Response tracking application handling one or more incidents via cases and tasks with a lot of affected systems and artifacts.
  • Fast Incident Response (FIR) - Cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents and is useful for CSIRTs, CERTs and SOCs alike.
  • RTIR - Request Tracker for Incident Response (RTIR) is the premier open source incident handling system targeted for computer security teams. We worked with over a dozen CERT and CSIRT teams around the world to help you handle the ever-increasing volume of incident reports. RTIR builds on all the features of Request Tracker.
  • Sandia Cyber Omni Tracker (SCOT) - Incident Response collaboration and knowledge capture tool focused on flexibility and ease of use. Our goal is to add value to the incident response process without burdening the user.
  • Shuffle - A general purpose security automation platform focused on accessibility.
  • threat_note - Lightweight investigation notebook that allows security researchers the ability to register and retrieve indicators related to their research.
  • Zenduty - Zenduty is a novel incident management platform providing end-to-end incident alerting, on-call management and response orchestration, giving teams greater control and automation over the incident management lifecycle.

Knowledge Bases

Linux Distributions

  • The Appliance for Digital Investigation and Analysis (ADIA) - VMware-based appliance used for digital investigation and acquisition and is built entirely from public domain software. Among the tools contained in ADIA are Autopsy, the Sleuth Kit, the Digital Forensics Framework, log2timeline, Xplico, and Wireshark. Most of the system maintenance uses Webmin. It is designed for small-to-medium sized digital investigations and acquisitions. The appliance runs under Linux, Windows, and Mac OS. Both i386 (32-bit) and x86_64 (64-bit) versions are available.
  • Computer Aided Investigative Environment (CAINE) - Contains numerous tools that help investigators during their analysis, including forensic evidence collection.
  • CCF-VM - CyLR CDQR Forensics Virtual Machine (CCF-VM): An all-in-one solution to parsing collected data, making it easily searchable with built-in common searches, enable searching of single and multiple hosts simultaneously.
  • NST - Network Security Toolkit - Linux distribution that includes a vast collection of best-of-breed open source network security applications useful to the network security professional.
  • PALADIN - Modified Linux distribution to perform various forensics task in a forensically sound manner. It comes with many open source forensics tools included.
  • Security Onion - Special Linux distro aimed at network security monitoring featuring advanced analysis tools.
  • SANS Investigative Forensic Toolkit (SIFT) Workstation - Demonstrates that advanced incident response capabilities and deep dive digital forensic techniques to intrusions can be accomplished using cutting-edge open-source tools that are freely available and frequently updated.

Linux Evidence Collection

  • FastIR Collector Linux - FastIR for Linux collects different artifacts on live Linux and records the results in CSV files.
  • MAGNET DumpIt - Fast memory acquisition open source tool for Linux written in Rust. Generate full memory crash dumps of Linux machines.

Log Analysis Tools

  • AppCompatProcessor - AppCompatProcessor has been designed to extract additional value from enterprise-wide AppCompat / AmCache data beyond the classic stacking and grepping techniques.
  • APT Hunter - APT-Hunter is Threat Hunting tool for windows event logs.
  • Chainsaw - Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows event logs.
  • Event Log Explorer - Tool developed to quickly analyze log files and other data.
  • Event Log Observer - View, analyze and monitor events recorded in Microsoft Windows event logs with this GUI tool.
  • Hayabusa - Hayabusa is a Windows event log fast forensics timeline generator and threat hunting tool created by the Yamato Security group in Japan.
  • Kaspersky CyberTrace - Threat intelligence fusion and analysis tool that integrates threat data feeds with SIEM solutions. Users can immediately leverage threat intelligence for security monitoring and incident report (IR) activities in the workflow of their existing security operations.
  • Log Parser Lizard - Execute SQL queries against structured log data: server logs, Windows Events, file system, Active Directory, log4net logs, comma/tab separated text, XML or JSON files. Also provides a GUI to Microsoft LogParser 2.2 with powerful UI elements: syntax editor, data grid, chart, pivot table, dashboard, query manager and more.
  • Lorg - Tool for advanced HTTPD logfile security analysis and forensics.
  • Logdissect - CLI utility and Python API for analyzing log files and other data.
  • LogonTracer - Tool to investigate malicious Windows logon by visualizing and analyzing Windows event log.
  • Sigma - Generic signature format for SIEM systems already containing an extensive ruleset.
  • StreamAlert - Serverless, real-time log data analysis framework, capable of ingesting custom data sources and triggering alerts using user-defined logic.
  • SysmonSearch - SysmonSearch makes Windows event log analysis more effective and less time consuming by aggregation of event logs.
  • WELA - Windows Event Log Analyzer aims to be the Swiss Army knife for Windows event logs.
  • Zircolite - A standalone and fast SIGMA-based detection tool for EVTX or JSON.

Memory Analysis Tools

  • AVML - A portable volatile memory acquisition tool for Linux.
  • Evolve - Web interface for the Volatility Memory Forensics Framework.
  • inVtero.net - Advanced memory analysis for Windows x64 with nested hypervisor support.
  • LiME - Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, formerly called DMD.
  • MalConfScan - MalConfScan is a Volatility plugin extracts configuration data of known malware. Volatility is an open-source memory forensics framework for incident response and malware analysis. This tool searches for malware in memory images and dumps configuration data. In addition, this tool has a function to list strings to which malicious code refers.
  • Memoryze - Free memory forensic software that helps incident responders find evil in live memory. Memoryze can acquire and/or analyze memory images, and on live systems, can include the paging file in its analysis.
  • Memoryze for Mac - Memoryze for Mac is Memoryze but then for Macs. A lower number of features, however.
  • [MemProcFS] (https://github.com/ufrisk/MemProcFS) - MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system.
  • Orochi - Orochi is an open source framework for collaborative forensic memory dump analysis.
  • Rekall - Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples.
  • Volatility - Advanced memory forensics framework.
  • Volatility 3 - The volatile memory extraction framework (successor of Volatility)
  • VolatilityBot - Automation tool for researchers cuts all the guesswork and manual tasks out of the binary extraction phase, or to help the investigator in the first steps of performing a memory analysis investigation.
  • VolDiff - Malware Memory Footprint Analysis based on Volatility.
  • WindowsSCOPE - Memory forensics and reverse engineering tool used for analyzing volatile memory offering the capability of analyzing the Windows kernel, drivers, DLLs, and virtual and physical memory.

Memory Imaging Tools

  • Belkasoft Live RAM Capturer - Tiny free forensic tool to reliably extract the entire content of the computer’s volatile memory – even if protected by an active anti-debugging or anti-dumping system.
  • Linux Memory Grabber - Script for dumping Linux memory and creating Volatility profiles.
  • MAGNET DumpIt - Fast memory acquisition tool for Windows (x86, x64, ARM64). Generate full memory crash dumps of Windows machines.
  • Magnet RAM Capture - Free imaging tool designed to capture the physical memory of a suspect’s computer. Supports recent versions of Windows.
  • OSForensics - Tool to acquire live memory on 32-bit and 64-bit systems. A dump of an individual process’s memory space or physical memory dump can be done.

OSX Evidence Collection

  • Knockknock - Displays persistent items(scripts, commands, binaries, etc.) that are set to execute automatically on OSX.
  • macOS Artifact Parsing Tool (mac_apt) - Plugin based forensics framework for quick mac triage that works on live machines, disk images or individual artifact files.
  • OSX Auditor - Free Mac OS X computer forensics tool.
  • OSX Collector - OSX Auditor offshoot for live response.
  • The ESF Playground - A tool to view the events in Apple Endpoint Security Framework (ESF) in real time.

Other Lists

Other Tools

  • Cortex - Cortex allows you to analyze observables such as IP and email addresses, URLs, domain names, files or hashes one by one or in bulk mode using a Web interface. Analysts can also automate these operations using its REST API.
  • Crits - Web-based tool which combines an analytic engine with a cyber threat database.
  • Diffy - DFIR tool developed by Netflix’s SIRT that allows an investigator to quickly scope a compromise across cloud instances (Linux instances on AWS, currently) during an incident and efficiently triaging those instances for followup actions by showing differences against a baseline.
  • domfind - Python DNS crawler for finding identical domain names under different TLDs.
  • Fileintel - Pull intelligence per file hash.
  • HELK - Threat Hunting platform.
  • Hindsight - Internet history forensics for Google Chrome/Chromium.
  • Hostintel - Pull intelligence per host.
  • imagemounter - Command line utility and Python package to ease the (un)mounting of forensic disk images.
  • Kansa - Modular incident response framework in PowerShell.
  • MFT Browser - MFT directory tree reconstruction & record info.
  • Munin - Online hash checker for VirusTotal and other services.
  • PowerSponse - PowerSponse is a PowerShell module focused on targeted containment and remediation during security incident response.
  • PyaraScanner - Very simple multi-threaded many-rules to many-files YARA scanning Python script for malware zoos and IR.
  • rastrea2r - Allows one to scan disks and memory for IOCs using YARA on Windows, Linux and OS X.
  • RaQet - Unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system.
  • Raccine - A Simple Ransomware Protection
  • Stalk - Collect forensic data about MySQL when problems occur.
  • Scout2 - Security tool that lets Amazon Web Services administrators assess their environment’s security posture.
  • Stenographer - Packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. It stores as much history as it possible, managing disk usage, and deleting when disk limits are hit. It’s ideal for capturing the traffic just before and during an incident, without the need explicit need to store all of the network traffic.
  • sqhunter - Threat hunter based on osquery and Salt Open (SaltStack) that can issue ad-hoc or distributed queries without the need for osquery’s tls plugin. sqhunter allows you to query open network sockets and check them against threat intelligence sources.
  • sysmon-config - Sysmon configuration file template with default high-quality event tracing
  • sysmon-modular - A repository of sysmon configuration modules
  • traceroute-circl - Extended traceroute to support the activities of CSIRT (or CERT) operators. Usually CSIRT team have to handle incidents based on IP addresses received. Created by Computer Emergency Response Center Luxembourg.
  • X-Ray 2.0 - Windows utility (poorly maintained or no longer maintained) to submit virus samples to AV vendors.

Playbooks

Process Dump Tools

  • Microsoft ProcDump - Dumps any running Win32 processes memory image on the fly.
  • PMDump - Tool that lets you dump the memory contents of a process to a file without stopping the process.

Sandboxing/Reversing Tools

  • Any Run - Interactive online malware analysis service for dynamic and static research of most types of threats using any environment.
  • CAPA - detects capabilities in executable files. You run it against a PE, ELF, .NET module, or shellcode file and it tells you what it thinks the program can do.
  • CAPEv2 - Malware Configuration And Payload Extraction.
  • Cuckoo - Open Source Highly configurable sandboxing tool.
  • Cuckoo-modified - Heavily modified Cuckoo fork developed by community.
  • Cuckoo-modified-api - Python library to control a cuckoo-modified sandbox.
  • Cutter - Free and Open Source Reverse Engineering Platform powered by rizin.
  • Ghidra - Software Reverse Engineering Framework.
  • Hybrid-Analysis - Free powerful online sandbox by CrowdStrike.
  • Intezer - Intezer Analyze dives into Windows binaries to detect micro-code similarities to known threats, in order to provide accurate yet easy-to-understand results.
  • Joe Sandbox (Community) - Joe Sandbox detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux, and iOS for suspicious activities; providing comprehensive and detailed analysis reports.
  • Mastiff - Static analysis framework that automates the process of extracting key characteristics from a number of different file formats.
  • Metadefender Cloud - Free threat intelligence platform providing multiscanning, data sanitization and vulnerability assessment of files.
  • Radare2 - Reverse engineering framework and command-line toolset.
  • Reverse.IT - Alternative domain for the Hybrid-Analysis tool provided by CrowdStrike.
  • Rizin - UNIX-like reverse engineering framework and command-line toolset
  • StringSifter - A machine learning tool that ranks strings based on their relevance for malware analysis.
  • Threat.Zone - Cloud based threat analysis platform which include sandbox, CDR and interactive analysis for researchers.
  • Valkyrie Comodo - Valkyrie uses run-time behavior and hundreds of features from a file to perform analysis.
  • Viper - Python based binary analysis and management framework, that works well with Cuckoo and YARA.
  • Virustotal - Free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners.
  • Visualize_Logs - Open source visualization library and command line tools for logs (Cuckoo, Procmon, more to come).
  • Yomi - Free MultiSandbox managed and hosted by Yoroi.

Scanner Tools

  • Fenrir - Simple IOC scanner. It allows scanning any Linux/Unix/OSX system for IOCs in plain bash. Created by the creators of THOR and LOKI.
  • LOKI - Free IR scanner for scanning endpoint with yara rules and other indicators(IOCs).
  • Spyre - Simple YARA-based IOC scanner written in Go

Timeline Tools

  • Aurora Incident Response - Platform developed to build easily a detailed timeline of an incident.
  • Highlighter - Free Tool available from Fire/Mandiant that will depict log/text file that can highlight areas on the graphic, that corresponded to a key word or phrase. Good for time lining an infection and what was done post compromise.
  • Morgue - PHP Web app by Etsy for managing postmortems.
  • Plaso - a Python-based backend engine for the tool log2timeline.
  • Timesketch - Open source tool for collaborative forensic timeline analysis.

Videos

Windows Evidence Collection

  • AChoir - Framework/scripting tool to standardize and simplify the process of scripting live acquisition utilities for Windows.
  • Crowd Response - Lightweight Windows console application designed to aid in the gathering of system information for incident response and security engagements. It features numerous modules and output formats.
  • Cyber Triage - Cyber Triage has a lightweight collection tool that is free to use. It collects source files (such as registry hives and event logs), but also parses them on the live host so that it can also collect the executables that the startup items, scheduled, tasks, etc. refer to. It’s output is a JSON file that can be imported into the free version of Cyber Triage. Cyber Triage is made by Sleuth Kit Labs, which also makes Autopsy.
  • DFIR ORC - DFIR ORC is a collection of specialized tools dedicated to reliably parse and collect critical artifacts such as the MFT, registry hives or event logs. DFIR ORC collects data, but does not analyze it: it is not meant to triage machines. It provides a forensically relevant snapshot of machines running Microsoft Windows. The code can be found on GitHub.
  • FastIR Collector - Tool that collects different artifacts on live Windows systems and records the results in csv files. With the analyses of these artifacts, an early compromise can be detected.
  • Fibratus - Tool for exploration and tracing of the Windows kernel.
  • Hoarder - Collecting the most valuable artifacts for forensics or incident response investigations.
  • IREC - All-in-one IR Evidence Collector which captures RAM Image, $MFT, EventLogs, WMI Scripts, Registry Hives, System Restore Points and much more. It is FREE, lightning fast and easy to use.
  • Invoke-LiveResponse - Invoke-LiveResponse is a live response tool for targeted collection.
  • IOC Finder - Free tool from Mandiant for collecting host system data and reporting the presence of Indicators of Compromise (IOCs). Support for Windows only. No longer maintained. Only fully supported up to Windows 7 / Windows Server 2008 R2.
  • IRTriage - Incident Response Triage - Windows Evidence Collection for Forensic Analysis.
  • KAPE - Kroll Artifact Parser and Extractor (KAPE) by Eric Zimmerman. A triage tool that finds the most prevalent digital artifacts and then parses them quickly. Great and thorough when time is of the essence.
  • LOKI - Free IR scanner for scanning endpoint with yara rules and other indicators(IOCs).
  • MEERKAT - PowerShell-based triage and threat hunting for Windows.
  • Panorama - Fast incident overview on live Windows systems.
  • PowerForensics - Live disk forensics platform, using PowerShell.
  • PSRecon - PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
  • RegRipper - Open source tool, written in Perl, for extracting/parsing information (keys, values, data) from the Registry and presenting it for analysis.

Offensive OSINT Tools

Offensive-OSINT-Tools

This repository contains tools and links that can be used during OSINT in Pentest or Red Team. Currently, there are numerous awesome lists with tons of tools, but Offensive Security specialists often don’t need such an extensive selection. This motivated the creation of this list. These tools cover almost all the needs of Offensive Security specialists and will help you get the job done efficiently.

If the tool performs multiple functions, for example collecting subdomains and URLs, it will be listed in two places.

📖 Table of Contents

Contributing

Welcome! If you find that any of your favourite offensive tools is not on the list, you can suggest adding it.


Search Engines

Search Engines for Investigation Domains/IP Addresses.

Email addresses

Tools that help you collect email addresses. Usually the search requires the domain of the company.

Source code

Tools for finding mentions in code. Useful to search for company/company mentions to find passwords/secrets/confidential information.

SubDomain’s

Tools for automatic search of subdomains. Most of them require API keys to work correctly.

Tools

  • Bbot
  • sub.Monitor - Passive subdomain continous monitoring tool
  • Sudomy
  • Amass
  • theHarvester
  • Spiderfoot
  • subchase - Chase subdomains by parsing the results of Google and Yandex search results
  • GooFuzz - Enumerate directories, files, subdomains or parameters without leaving evidence on the target’s serve
  • SubGPT - SubGPT looks at subdomains you have already discovered for a domain and uses BingGPT to find more.
  • alterx - Fast and customizable subdomain wordlist generator using DSL.
  • Photon - Incredibly fast crawler designed for OSINT.
  • ronin-recon - Recursive recon engine and framework that can enumerate subdomains, DNS records, port scan, grab TLS certs, spider websites, and collect email addresses.
  • subdomain-enum - securitytrails api

Only sites/tools whose search is not automated by the tools above are listed here.

URLs

Tools for passive collection and analysis URLs

  • Gau
  • Xurlfind3r
  • Unja
  • urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services
  • Waymore
  • Spiderfoot
  • theHarvester
  • GooFuzz - Enumerate directories, files, subdomains or parameters without leaving evidence on the target’s serve
  • Rextracter.streamlit - Gathers links and analyses content
  • Uscrapper - Tool that allows users to extract various personal information from a website.
  • ronin-recon - Recursive recon engine and framework that can enumerate subdomains, DNS records, port scan, grab TLS certs, spider websites, and collect email addresses.
  • Ominis-Osint - The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.

Dark web

An undiscovered area, the author is too dumb for that. Will gradually expand.

Intelligence

Threat Intelligence tools containing extensive company information, subdomains, DNS information, URLs and much more.

Network Info

IP/Domain network analysis tools.

DnsHistory

Tools for viewing the DNS history of a domain.

Certifications

FTP servers

Tools allowing you to search for and download files located on public FTP servers.

Passive Infrastructure scanner

Tools for automated passive IP address/subnet scanning.

Microsoft Exchange

Tools that help in passive/semi-passive analysis of Microsoft Exchange.

Telegram

Tools for investigating Telegram chats.

Google Dorks

Tools for Google Dorks.

Nickname search tools.

Phone number

Sometimes situations happen that require analysing an employee’s phone number to get more information.

Wifi

  • 3Wifi - free base of access points

Cloud

Tools for searching, gathering information from cloud.

Information gathering tools

Links to guide, methodologies and any information that would be useful.

OSINT Countries Tools

OSINT Resources by Country

Welcome to the OSINT (Open Source Intelligence) Resources repository, organized by country. Here you’ll find a collection of links to various OSINT tools, websites, and projects that are specific to different countries. Feel free to contribute by adding more resources through pull requests!

Didn’t find the specific country that you’re looking for?

Check the - Resources containing multi-country links

Table of Contents


Argentina

Australia

Brazil

Bulgaria

Canada

China

Colombia

Hungary

India

Iran

Israel

Japan

Malaysia

Netherlands

New Zealand

Poland

Russia

South Africa

South Korea

Thailand

United Kingdom

USA


Contributing

If you have more OSINT resources to add, feel free to fork this repository and submit a pull request. Please ensure that the resources you’re adding are relevant and specific to the country they are listed under.

Honeypots Tools

Honeypots

A curated list of honeypots, plus related components and much more, divided into categories such as Web, services, and others, with a focus on free and open source projects.

Honeypots

  • Database Honeypots

    • Delilah - Elasticsearch Honeypot written in Python (originally from Novetta).
    • ESPot - Elasticsearch honeypot written in NodeJS, to capture every attempts to exploit CVE-2014-3120.
    • ElasticPot - An Elasticsearch Honeypot.
    • Elastic honey - Simple Elasticsearch Honeypot.
    • MongoDB-HoneyProxy - MongoDB honeypot proxy.
    • NoSQLpot - Honeypot framework built on a NoSQL-style database.
    • mysql-honeypotd - Low interaction MySQL honeypot written in C.
    • MysqlPot - MySQL honeypot, still very early stage.
    • pghoney - Low-interaction Postgres Honeypot.
    • sticky_elephant - Medium interaction postgresql honeypot.
    • RedisHoneyPot - High Interaction Honeypot Solution for Redis protocol.
  • Web honeypots

    • Express honeypot - RFI & LFI honeypot using nodeJS and express.
    • EoHoneypotBundle - Honeypot type for Symfony2 forms.
    • Glastopf - Web Application Honeypot.
    • Google Hack Honeypot - Designed to provide reconnaissance against attackers that use search engines as a hacking tool against your resources.
    • HellPot - Honeypot that tries to crash the bots and clients that visit it’s location.
    • Laravel Application Honeypot - Simple spam prevention package for Laravel applications.
    • Nodepot - NodeJS web application honeypot.
    • PasitheaHoneypot - RestAPI honeypot.
    • Servletpot - Web application Honeypot.
    • Shadow Daemon - Modular Web Application Firewall / High-Interaction Honeypot for PHP, Perl, and Python apps.
    • StrutsHoneypot - Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers.
    • WebTrap - Designed to create deceptive webpages to deceive and redirect attackers away from real websites.
    • basic-auth-pot (bap) - HTTP Basic Authentication honeypot.
    • bwpot - Breakable Web applications honeyPot.
    • django-admin-honeypot - Fake Django admin login screen to notify admins of attempted unauthorized access.
    • drupo - Drupal Honeypot.
    • galah - an LLM-powered web honeypot using the OpenAI API.
    • honeyhttpd - Python-based web server honeypot builder.
    • honeyup - An uploader honeypot designed to look like poor website security.
    • modpot - Modpot is a modular web application honeypot framework and management application written in Golang and making use of gin framework.
    • owa-honeypot - A basic flask based Outlook Web Honey pot.
    • phpmyadmin_honeypot - Simple and effective phpMyAdmin honeypot.
    • shockpot - WebApp Honeypot for detecting Shell Shock exploit attempts.
    • smart-honeypot - PHP Script demonstrating a smart honey pot.
    • Snare/Tanner - successors to Glastopf
      • Snare - Super Next generation Advanced Reactive honeypot.
      • Tanner - Evaluating SNARE events.
    • stack-honeypot - Inserts a trap for spam bots into responses.
    • tomcat-manager-honeypot - Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker’s WAR file for later study.
    • WordPress honeypots
      • HonnyPotter - WordPress login honeypot for collection and analysis of failed login attempts.
      • HoneyPress - Python based WordPress honeypot in a Docker container.
      • wp-smart-honeypot - WordPress plugin to reduce comment spam with a smarter honeypot.
      • wordpot - WordPress Honeypot.
    • Python-Honeypot - OWASP Honeypot, Automated Deception Framework.
  • Service Honeypots

    • ADBHoney - Low interaction honeypot that simulates an Android device running Android Debug Bridge (ADB) server process.
    • AMTHoneypot - Honeypot for Intel’s AMT Firmware Vulnerability CVE-2017-5689.
    • ddospot - NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot.
    • dionaea - Home of the dionaea honeypot.
    • dhp - Simple Docker Honeypot server emulating small snippets of the Docker HTTP API.
    • DolosHoneypot - SDN (software defined networking) honeypot.
    • Ensnare - Easy to deploy Ruby honeypot.
    • Helix - K8s API Honeypot with Active Defense Capabilities.
    • honeycomb_plugins - Plugin repository for Honeycomb, the honeypot framework by Cymmetria.
    • [honeydb] (https://honeydb.io/downloads) - Multi-service honeypot that is easy to deploy and configure. Can be configured to send interaction data to to HoneyDB’s centralized collectors for access via REST API.
    • honeyntp - NTP logger/honeypot.
    • honeypot-camera - Observation camera honeypot.
    • honeypot-ftp - FTP Honeypot.
    • honeypots - 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, ntp, memcache, snmp, oracle, sip and irc).
    • honeytrap - Advanced Honeypot framework written in Go that can be connected with other honeypot software.
    • HoneyPy - Low interaction honeypot.
    • Honeygrove - Multi-purpose modular honeypot based on Twisted.
    • Honeyport - Simple honeyport written in Bash and Python.
    • Honeyprint - Printer honeypot.
    • Lyrebird - Modern high-interaction honeypot framework.
    • MICROS honeypot - Low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS).
    • node-ftp-honeypot - FTP server honeypot in JS.
    • pyrdp - RDP man-in-the-middle and library for Python 3 with the ability to watch connections live or after the fact.
    • rdppot - RDP honeypot
    • RDPy - Microsoft Remote Desktop Protocol (RDP) honeypot implemented in Python.
    • SMB Honeypot - High interaction SMB service honeypot capable of capturing wannacry-like Malware.
    • Tom’s Honeypot - Low interaction Python honeypot.
    • Trapster Commmunity - Modural and easy to install Python Honeypot, with comprehensive alerting
    • troje - Honeypot that runs each connection with the service within a separate LXC container.
    • WebLogic honeypot - Low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware.
    • WhiteFace Honeypot - Twisted based honeypot for WhiteFace.
  • Distributed Honeypots

  • Anti-honeypot stuff

    • canarytokendetector - Tool for detection and nullification of Thinkst CanaryTokens
    • honeydet - Signature based honeypot detector tool written in Golang
    • kippo_detect - Offensive component that detects the presence of the kippo honeypot.
  • ICS/SCADA honeypots

    • Conpot - ICS/SCADA honeypot.
    • GasPot - Veeder Root Gaurdian AST, common in the oil and gas industry.
    • SCADA honeynet - Building Honeypots for Industrial Networks.
    • gridpot - Open source tools for realistic-behaving electric grid honeynets.
    • scada-honeynet - Mimics many of the services from a popular PLC and better helps SCADA researchers understand potential risks of exposed control system devices.
  • Other/random

    • CitrixHoneypot - Detect and log CVE-2019-19781 scan and exploitation attempts.
    • Damn Simple Honeypot (DSHP) - Honeypot framework with pluggable handlers.
    • dicompot - DICOM Honeypot.
    • IPP Honey - A honeypot for the Internet Printing Protocol.
    • Log4Pot - A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
    • Masscanned - Let’s be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
    • medpot - HL7 / FHIR honeypot.
    • NOVA - Uses honeypots as detectors, looks like a complete system.
    • OpenFlow Honeypot (OFPot) - Redirects traffic for unused IPs to a honeypot, built on POX.
    • OpenCanary - Modular and decentralised honeypot daemon that runs several canary versions of services that alerts when a service is (ab)used.
    • ciscoasa_honeypot A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
    • miniprint - A medium interaction printer honeypot.
  • Botnet C2 tools

    • Hale - Botnet command and control monitor.
    • dnsMole - Analyses DNS traffic and potentionaly detect botnet command and control server activity, along with infected hosts.
  • IPv6 attack detection tool

    • ipv6-attack-detector - Google Summer of Code 2012 project, supported by The Honeynet Project organization.
  • Dynamic code instrumentation toolkit

    • Frida - Inject JavaScript to explore native apps on Windows, Mac, Linux, iOS and Android.
  • Tool to convert website to server honeypots

    • HIHAT - Transform arbitrary PHP applications into web-based high-interaction Honeypots.
  • Malware collector

    • Kippo-Malware - Python script that will download all malicious files stored as URLs in a Kippo SSH honeypot database.
  • Distributed sensor deployment

    • Community Honey Network - CHN aims to make deployments honeypots and honeypot management tools easy and flexible. The default deployment method uses Docker Compose and Docker to deploy with a few simple commands.
    • Modern Honey Network - Multi-snort and honeypot sensor management, uses a network of VMs, small footprint SNORT installations, stealthy dionaeas, and a centralized server for management.
  • Network Analysis Tool

  • Log anonymizer

    • LogAnon - Log anonymization library that helps having anonymous logs consistent between logs and network captures.
  • Low interaction honeypot (router back door)

    • Honeypot-32764 - Honeypot for router backdoor (TCP 32764).
    • WAPot - Honeypot that can be used to observe traffic directed at home routers.
  • honeynet farm traffic redirector

    • Honeymole - Deploy multiple sensors that redirect traffic to a centralized collection of honeypots.
  • HTTPS Proxy

    • mitmproxy - Allows traffic flows to be intercepted, inspected, modified, and replayed.
  • System instrumentation

    • Sysdig - Open source, system-level exploration allows one to capture system state and activity from a running GNU/Linux instance, then save, filter, and analyze the results.
    • Fibratus - Tool for exploration and tracing of the Windows kernel.
  • Honeypot for USB-spreading malware

    • Ghost-usb - Honeypot for malware that propagates via USB storage devices.
  • Data Collection

    • Kippo2MySQL - Extracts some very basic stats from Kippo’s text-based log files and inserts them in a MySQL database.
    • Kippo2ElasticSearch - Python script to transfer data from a Kippo SSH honeypot MySQL database to an ElasticSearch instance (server or cluster).
  • Passive network audit framework parser

  • VM monitoring and tools

    • Antivmdetect - Script to create templates to use with VirtualBox to make VM detection harder.
    • VMCloak - Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
    • vmitools - C library with Python bindings that makes it easy to monitor the low-level details of a running virtual machine.
  • Binary debugger

  • Mobile Analysis Tool

    • Androguard - Reverse engineering, Malware and goodware analysis of Android applications and more.
    • APKinspector - Powerful GUI tool for analysts to analyze the Android applications.
  • Low interaction honeypot

    • Honeyperl - Honeypot software based in Perl with plugins developed for many functions like : wingates, telnet, squid, smtp, etc.
    • T-Pot - All in one honeypot appliance from telecom provider T-Mobile
    • beelzebub - A secure honeypot framework, extremely easy to configure by yaml 🚀
  • Honeynet data fusion

    • HFlow2 - Data coalesing tool for honeynet/network analysis.
  • Server

    • Amun - Vulnerability emulation honeypot.
    • Artillery - Open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
    • Bait and Switch - Redirects all hostile traffic to a honeypot that is partially mirroring your production system.
    • Bifrozt - Automatic deploy bifrozt with ansible.
    • Conpot - Low interactive server side Industrial Control Systems honeypot.
    • Heralding - Credentials catching honeypot.
    • HoneyWRT - Low interaction Python honeypot designed to mimic services or ports that might get targeted by attackers.
    • Honeyd - See honeyd tools.
    • Honeysink - Open source network sinkhole that provides a mechanism for detection and prevention of malicious traffic on a given network.
    • Hontel - Telnet Honeypot.
    • KFSensor - Windows based honeypot Intrusion Detection System (IDS).
    • LaBrea - Takes over unused IP addresses, and creates virtual servers that are attractive to worms, hackers, and other denizens of the Internet.
    • MTPot - Open Source Telnet Honeypot, focused on Mirai malware.
    • SIREN - Semi-Intelligent HoneyPot Network - HoneyNet Intelligent Virtual Environment.
    • TelnetHoney - Simple telnet honeypot.
    • UDPot Honeypot - Simple UDP/DNS honeypot scripts.
    • Yet Another Fake Honeypot (YAFH) - Simple honeypot written in Go.
    • arctic-swallow - Low interaction honeypot.
    • fapro - Fake Protocol Server.
    • glutton - All eating honeypot.
    • go-HoneyPot - Honeypot server written in Go.
    • go-emulators - Honeypot Golang emulators.
    • honeymail - SMTP honeypot written in Golang.
    • honeytrap - Low-interaction honeypot and network security tool written to catch attacks against TCP and UDP services.
    • imap-honey - IMAP honeypot written in Golang.
    • mwcollectd - Versatile malware collection daemon, uniting the best features of nepenthes and honeytrap.
    • potd - Highly scalable low- to medium-interaction SSH/TCP honeypot designed for OpenWrt/IoT devices leveraging several Linux kernel features, such as namespaces, seccomp and thread capabilities.
    • portlurker - Port listener in Rust with protocol guessing and safe string display.
    • slipm-honeypot - Simple low-interaction port monitoring honeypot.
    • telnet-iot-honeypot - Python telnet honeypot for catching botnet binaries.
    • telnetlogger - Telnet honeypot designed to track the Mirai botnet.
    • vnclowpot - Low interaction VNC honeypot.
  • IDS signature generation

    • Honeycomb - Automated signature creation using honeypots.
  • Lookup service for AS-numbers and prefixes

    • CC2ASN - Simple lookup service for AS-numbers and prefixes belonging to any given country in the world.
  • Data Collection / Data Sharing

  • Central management tool

    • PHARM - Manage, report, and analyze your distributed Nepenthes instances.
  • Network connection analyzer

    • Impost - Network security auditing tool designed to analyze the forensics behind compromised and/or vulnerable daemons.
  • Honeypot deployment

    • honeyfs - Tool to create artificial file systems for medium/high interaction honeypots.
    • Modern Honeynet Network - Streamlines deployment and management of secure honeypots.
  • Honeypot extensions to Wireshark

    • Wireshark Extensions - Apply Snort IDS rules and signatures against packet capture files using Wireshark.
  • Client

  • Honeypot

  • PDF document inspector

    • peepdf - Powerful Python tool to analyze PDF documents.
  • Hybrid low/high interaction honeypot

  • SSH Honeypots

    • Blacknet - Multi-head SSH honeypot system.
    • Cowrie - Cowrie SSH Honeypot (based on kippo).
    • DShield docker - Docker container running cowrie with DShield output enabled.
    • endlessh - SSH tarpit that slowly sends an endless banner. (docker image)
    • HonSSH - Logs all SSH communications between a client and server.
    • HUDINX - Tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
    • Kippo - Medium interaction SSH honeypot.
    • Kippo_JunOS - Kippo configured to be a backdoored netscreen.
    • Kojoney2 - Low interaction SSH honeypot written in Python and based on Kojoney by Jose Antonio Coret.
    • Kojoney - Python-based Low interaction honeypot that emulates an SSH server implemented with Twisted Conch.
    • Longitudinal Analysis of SSH Cowrie Honeypot Logs - Python based command line tool to analyze cowrie logs over time.
    • LongTail Log Analysis @ Marist College - Analyzed SSH honeypot logs.
    • Malbait - Simple TCP/UDP honeypot implemented in Perl.
    • MockSSH - Mock an SSH server and define all commands it supports (Python, Twisted).
    • cowrie2neo - Parse cowrie honeypot logs into a neo4j database.
    • go-sshoney - SSH Honeypot.
    • go0r - Simple ssh honeypot in Golang.
    • gohoney - SSH honeypot written in Go.
    • hived - Golang-based honeypot.
    • hnypots-agent) - SSH Server in Go that logs username and password combinations.
    • honeypot.go - SSH Honeypot written in Go.
    • honeyssh - Credential dumping SSH honeypot with statistics.
    • hornet - Medium interaction SSH honeypot that supports multiple virtual hosts.
    • ssh-auth-logger - Low/zero interaction SSH authentication logging honeypot.
    • ssh-honeypot - Fake sshd that logs IP addresses, usernames, and passwords.
    • ssh-honeypot - Modified version of the OpenSSH deamon that forwards commands to Cowrie where all commands are interpreted and returned.
    • ssh-honeypotd - Low-interaction SSH honeypot written in C.
    • sshForShits - Framework for a high interaction SSH honeypot.
    • sshesame - Fake SSH server that lets everyone in and logs their activity.
    • sshhipot - High-interaction MitM SSH honeypot.
    • sshlowpot - Yet another no-frills low-interaction SSH honeypot in Go.
    • sshsyrup - Simple SSH Honeypot with features to capture terminal activity and upload to asciinema.org.
    • twisted-honeypots - SSH, FTP and Telnet honeypots based on Twisted.
  • Distributed sensor project

  • A pcap analyzer

  • Network traffic redirector

  • Honeypot Distribution with mixed content

  • Honeypot sensor

    • Honeeepi - Honeypot sensor on a Raspberry Pi based on a customized Raspbian OS.
  • File carving

  • Behavioral analysis tool for win32

  • Live CD

    • DAVIX - The DAVIX Live CD.
  • Spamtrap

  • Commercial honeynet

    • Cymmetria Mazerunner - Leads attackers away from real targets and creates a footprint of the attack.
  • Server (Bluetooth)

  • Dynamic analysis of Android apps

  • Dockerized Low Interaction packaging

    • Docker honeynet - Several Honeynet tools set up for Docker containers.
    • Dockerized Thug - Dockerized Thug to analyze malicious web content.
    • Dockerpot - Docker based honeypot.
    • Manuka - Docker based honeypot (Dionaea and Kippo).
    • honey_ports - Very simple but effective docker deployed honeypot to detect port scanning in your environment.
    • mhn-core-docker - Core elements of the Modern Honey Network implemented in Docker.
  • Network analysis

  • SIP Server

  • SIP

    • SentryPeer - Protect your SIP Servers from bad actors.
  • IOT Honeypot

    • HoneyThing - TR-069 Honeypot.
    • Kako - Honeypots for a number of well known and deployed embedded device vulnerabilities.
  • Honeytokens

    • CanaryTokens - Self-hostable honeytoken generator and reporting dashboard; demo version available at CanaryTokens.org.
    • Honeybits - Simple tool designed to enhance the effectiveness of your traps by spreading breadcrumbs and honeytokens across your production servers and workstations to lure the attacker toward your honeypots.
    • Honeyλ (HoneyLambda) - Simple, serverless application designed to create and monitor URL honeytokens, on top of AWS Lambda and Amazon API Gateway.
    • dcept - Tool for deploying and detecting use of Active Directory honeytokens.
    • honeyku - Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).

Honeyd Tools

Network and Artifact Analysis

  • Sandbox

    • Argos - Emulator for capturing zero-day attacks.
    • COMODO automated sandbox
    • Cuckoo - Leading open source automated malware analysis system.
    • Pylibemu - Libemu Cython wrapper.
    • RFISandbox - PHP 5.x script sandbox built on top of funcall.
    • dorothy2 - Malware/botnet analysis framework written in Ruby.
    • imalse - Integrated MALware Simulator and Emulator.
    • libemu - Shellcode emulation library, useful for shellcode detection.
  • Sandbox-as-a-Service

    • Hybrid Analysis - Free malware analysis service powered by Payload Security that detects and analyzes unknown threats using a unique Hybrid Analysis technology.
    • Joebox Cloud - Analyzes the behavior of malicious files including PEs, PDFs, DOCs, PPTs, XLSs, APKs, URLs and MachOs on Windows, Android and Mac OS X for suspicious activities.
    • VirusTotal - Analyze suspicious files and URLs to detect types of malware, and automatically share them with the security community.
    • malwr.com - Free malware analysis service and community.

Data Tools

  • Front Ends

    • DionaeaFR - Front Web to Dionaea low-interaction honeypot.
    • Django-kippo - Django App for kippo SSH Honeypot.
    • Shockpot-Frontend - Full featured script to visualize statistics from a Shockpot honeypot.
    • Tango - Honeypot Intelligence with Splunk.
    • Wordpot-Frontend - Full featured script to visualize statistics from a Wordpot honeypot.
    • honeyalarmg2 - Simplified UI for showing honeypot alarms.
    • honeypotDisplay - Flask website which displays data gathered from an SSH Honeypot.
  • Visualization

    • Acapulco - Automated Attack Community Graph Construction.
    • Afterglow Cloud
    • Afterglow
    • Glastopf Analytics - Easy honeypot statistics.
    • HoneyMalt - Maltego tranforms for mapping Honeypot systems.
    • HoneyMap - Real-time websocket stream of GPS events on a fancy SVG world map.
    • HoneyStats - Statistical view of the recorded activity on a Honeynet.
    • HpfeedsHoneyGraph - Visualization app to visualize hpfeeds logs.
    • IVRE - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Criminalip / Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
    • Kippo stats - Mojolicious app to display statistics for your kippo SSH honeypot.
    • Kippo-Graph - Full featured script to visualize statistics from a Kippo SSH honeypot.
    • The Intelligent HoneyNet - Create actionable information from honeypots.
    • ovizart - Visual analysis for network traffic.

Guides

OSINT Tools

OSINT Tools

Most important categories

Section Link
Maps, Geolocation and Transport Explore
Social Media Explore
Domain/IP/Links Explore
Image Search and Identification Explore
Cryptocurrencies Explore
Messengers Explore
Code Explore
Search engines Explore
IOT Explore
Archives Explore
Passwords Explore
Emails Explore
Nicknames Explore

Table of contents

Maps, Geolocation and Transport

Social media and photos

Link Description
Apps.skylens.io Posts with geotags from five social networks at once on one map (Twitter, YouTube, Instagram, Flickr, Vkontakte)
photo-map.ru search geotagged photos from VK.com
Snapchat map
YouTube Geofind view YouTube geottaged video on map
Flickr Photo Map
Flickr Common Map displays only Flickr photos distributed under a Creative Commons license (250 of the latest for each location)
I know where your cat lives geottaged photo from Instagram with #cat hashtag
Trendsmap.com Explore most popular #Twitter trends, hashtags and users on the worldmap
Pastvu.com View historical photos taken at a particular location on a map.
BirdHunt A very simple tool that allows you to select a geolocation/radius and get a list of recent tweets made in that place.
WikiShootMe Worldwide map of geotagged Wikipedia Creative Commons Images. To display more information, log in with your Media Wiki account.
The Painted Planet Click on a point on the map to get a list of landscapes by famous artists depicting the area.
COPERNIX Worldwide map of geolocated Wikipedia articles. It’s possible to enter the name of a locality to see articles about local streets or attractions.
WikiNearby Enter geographic coordinates, language, and get a list of Wikipedia articles about streets, towns, stations and other notable places nearby.
Huntel.io get a list of links to Facebook/Instagram locations linked to geographic coordinates

Nature

Link Description
Map View NGMDB map for exploring some geologic maps and articles from the NGMDB (National Geologic Map Database).
WAQI World’s Air Pollution: Real-time Air Quality Index map
GlobalFishingMap click on a point on the map and get the data on the current fishing effort at that location.
ncei.noaa.gov Natural Hazards Viewer (worldwide)
Lightingmaps lightning strikes in real time and also data on thunderstorms that ended months or years ago
Light Pollution World Map showing the degree of light pollution in different countries. It’s possible to see the data over time (since 2013)
Global Wetlands Map Interactive map of open waters, mangroves, swamps, fens, riverines, floodswamps, marshs, wet meadows and floodplains (unfortunately, there are not all countries in the world)
Fire MAP NASA online map of fire hotspots around the world (data from VIIRS and MODIS satellites, last 24 hours)
Ocearch Shark Tracker Click on a shark on the world map and find out its name, size and travel log.
Surging Seas: Risk Zone Map Map of points where there is a risk of significant sea level rise in the event of melting glaciers.
USA Fishermap when you click on a freshwater body of water, its detailed map opens, on which the depth at different points is marked
Mindat.org mineral maps for different countries
Ventusky.com collection of weather map (wind, rain, temperature, air pressure, humidity, waves etc)
Wunderground weather history data
Rain Alarm shows where it is raining on the map. You can enable notification of approaching rain (in the browser and in the mobile app)
Cyclocane click on the hurricane on the map and get detailed information about it
MeteoBlue Weather stats data
Zoom.earth Worldwide map of rains, storms, fires, heats, winds and others natural phenomenas
NGDC Bathymetry map worldwide detailed interactive bathymetry map
Soar.earth big collection satellite, drone and ecological maps
Geodesics on the Earth finding the shortest path between two points
Google Earth 3D representation of Earth based primarily on satellite imagery
Everymountainintheworld Map of the world showing the mountains (with absolute and relative altitude and links to Peakbagger, Listsofjohn and Caltopo).
Rivermap Online map with the most detailed information on Europe’s rivers (mostly central for the time being, but the data is being updated): direction and speed, water temperature, depth, slope angle, etc.
Global Biodiversity Information Facility Enter the name of an animal, bird or plant to see a map of where it has been spotted.
Natural Hazards Map (worldwide) Enter location and assess the risk of flooding, earthquakes and hail in this place on the map.
River Runner Global Click on any point on the map and trace the path that a drop of rainwater takes from current location to the world’s oceans.
Macrostrat’s geologic map system integrates over 290 bedrock geologic maps from around the world into a single, multiscale database (c). Macrostrat’s geologic map system integrates over 290 bedrock geologic maps from around the world into a single, multiscale database (c).
Global Flood Database (and interactive map) Detailed statistics on floods over the last 15 years (worldwide): precipitation levels, flooded area, number of people affected, dates, duration in days, etc.
Gaisma A site for those who verify the location of a photo by the position of the sun. It is very much inferior in functionality to http://timeanddate.com, but its interface is much simpler.

Aviation

Link Description
Skyvector tool is designed for planning private flights. And you can find an incredible amount of data about the current situation in the sky on it
Flight Connections click on the airport on the map to see the cities from which it’s possible fly direct
World Aviation Accident Database 1962-2007
World Aviation Accident Database 2008-2021
Rzjets.net user updated online database (census) of civilian jet and turbojet aircraft
Globe.adsbexchange.com tracking flights on a map
Transtats.bts.gov flight schedules and data on the actual departure/arrival times of flights in the U.S. for more than 30 years (!))
Legrooms for Google Flights An extension that displays the size of the legroom between the seats next to the flight information.
Flight Status Info - get a list of airports by city name; - view the flight schedule of a particular airport; - view the flight schedule of a particular airline; - getting detailed information about a flight and more

Maritime

Link Description
Track Trace tracking a shipping container by number
Container Tracking tracking a shipping container by number
Searates container tracking tracking a shipping container by number
CMA Voyage Finder search for voyage details by voyage number or ship name
The Shipping Database comprehensive archive of the world ships. There is even data for 1820!!!!!!!
Submarinecablemap.com submarine communications cables map
Submarine Vessels Tracking Map
Ports.com online calculation of travel time between two ports (with optimal path). It’s possible to select the speed from 5 to 40 knots. Shows a list of the seas through which it passes.
Live Cruise Ship Tracker Large catalogue of cruise ship research materials: - map with trackers; - timetables; - webcams on decks and in ports; - elaborate thematic news aggregator

Railway

Link Description
Amtrak Status Maps Archive Database find out the train schedule for a station on a particular day that passed many years ago (since 2008)
Europe station maps floor plan
Rasp.yandex.ru/map/trains Live map of trains for Russia, Belarus, Ukraine, Kazahstan and Abhazia
Chronotrains A terrific weekend travel planning service for Europeans. It shows how far you can go from a certain station in 5 hours by train.
Direkht Ban Guru Enter the name of the station to see what cities you can get to by train without changing (+ travel time for each city).
Live Train Tracker A world map showing real-time train traffic (with route point’s exact geographic coordinates) and schedules on the roads of Europe, North and South America and Australia.
Railcabrides Click on a point on the railway on the world map (railways are marked in orange or red) to see a list of rail cab videos from that location. With this service you can see many places where Google Street View has not yet reached!
ZugFinder Detailed information on trains, stations and real-time train traffic for European countries

Routes

Link Description
Ride With GPS
Wandermap hiking routes world map
Runmap running routes world map
Bikemap biking route world map

Politics, conflicts and crisis

Link Description
Global Terriorism Database Info about more than 200,000 terrorist incidents from 1970 to 2020 (worldwide): - dozens of advanced search options; - statistical data for each group of incidents; - many details on each incident, with sources;
Freedomhouse.org map of the world that shows the scores of different countries on the following indicators (on a scale of 1 to 100)
Crimemapping.com pick a state, a police agency, and what crimes and where were committed in the territory under its control in the last 24 hours, a week, or a month.
Citizen.com live map of incidents (mainly shooting) that happened in the last hours in major U.S. cities
MARITIME AWARENESS PROJECT detailed map of maritime borders of states, economic zones with statistical data on ports and many other objects
Monitor Tracking Civic Space Worldwide Map Civicus (@CIVICUSalliance)
Hungermap Worldwide Hunger Map
Native-land.ca click on the point on the map and find out: - what nation this area used to belong to; - what language was once spoken there; - a historical event that resulted in a nation losing their territory.
RiskMap
Liveuamap
Crisisgroup
Hate Map
emmeline.carto.com
Global Conflict Tracker
Acled data crisis map
Frontex Migratory Map click on a country or region to see how many illegal border crossings have been reported there in the last six months.
Safe Airspace (Conflict Zone & Risk Database) worldwide map showing the countries where flying over may be dangerous; detailed history of incidents and official warnings for each country
Worldwide Detention Centres Map This service will help in investigations related to illegal emigration, human trafficking, missing refugees and tourists.

Culture

Link Description
Taste Atlas Worldwide online map of national cuisine. There are thousands of dishes typical of countries or regions as a whole, as well as small towns.

Urban and industrial infrastructure

Link Description
Wheelmap.org map shows public places that are accessible and partially accessible to #wheelchair users
Pedestriansfirst Evaluate the pedestrian friendliness of streets in different cities. There is a lot of detailed data that will be useful both for choosing a place to live and for a variety of research
World Population Density Map Very detailed data. It’s possible to look at the density not only by country and city, but also by individual metropolitan areas, towns, and villages
Emporis Buildings Map world map showing notable buildings. For each object you can find out the height, number of floors, type, and purpose
Osmbuildings.org world map showing notable buildings. For each object you can find out the height, type, and purpose.
Find Food Support find places where you can get free food by address (USA)
Aqicn Air pollution gauges on the map
Average Gamma Dose Rate Map Shows measurements of environmental radioactivity in the form of gamma dose rate for the last 24 hours. These measurements originate from some 5500 stations in 39 countries
OpenIndoor A world map where you can see how different buildings look from the inside (number of floors, location of stairways, rooms, doors, etc.). The database of the service is not very large yet, but the project is constantly being developed.
Poweroutage Map with real-time power outage statistics by country and region.
Open Benches Worldwide map of 22,756 memorial benches (added by users).
Sondehub Worldwide map of radiosondes with detailed info (altitude, coordinates, frequency, manufacturer, sonde-type and much more)
The Meddin Bike-sharing World Map 8 million+ bikes in one map. There is information about rental stations that have recently closed or suspended their activities.
Rally Maps A worldwide map showing thousands of race (regular and one-off) locations. It’s possinle to find names of winners, routes, dates and other detailed information (historical data from the 1970s is available).
SKYDB Worldwide database of skyscrapers and tall buildings.

Worldwide street webcams

Link Description
Surveillance under Surveillance World map of surveillance camera locations (mostly Europe and neighbor countries). For some cameras detailed information is given: geo coordinates, type, mount, timestamp etc
Insecam.org
Earthcam
Camstreamer
Webcamtaxi
Skyline Webcams
Worldcam.eu
Worldcams TV
Geocam
Live beaches Beaches webcam only
Opentopia
MangolinkWorld
FoxMonitor
WEBCAM CSE Google Custom Search Engine for search in 10 online street webcam catalogs

Tools

Link Description
Calculator IPVM A tool that shows how the image from an outdoor camera it will look (based on data from Google Street View). You can specify camera parameters or select a model from a list (9188 cameras).
Osmaps Radius drawing circles with a certain radius on the map
MeasureTool-GoogleMaps-V3 Measurement tool for #GoogleMaps.
ACSDG tool allows you to quickly mark a group of points on the map and then export their geographic coordinates to CSV.
MeasureMapOnline tool for drawing rectangles, circles and complex polygons on a world map to measure their area and perimeter
Map Fight compare size of two countries
Presto Map lead extractor Converts information about labels on Google Maps to CSV or XLSX
Gmaps Extractor Extract data from placemarks
GPS Visualizer show gpx and tcx files on map
Map Checking tool for measuring the number of people in a crowd of different area and density.
OSM Finder A tool for automate work with Overpass Turbo. Upload a photo, mark a line on the map roads, railroads, power lines and get a ready-made query to find sections of the map corresponding to the photo.
Mapnificent Choose a city on the world map, then select an address on the map and see what places you can get to by public transport in a certain time interval (range from 1 to 90 minutes)
Cesium ion scalable and secure platform for 3D geospatial data. Upload your content and Cesium ion will optimize it as 3D Tiles, host it in the cloud, and stream it to any device
OpenSwitchMapsWeb One of the most powerful map switches I’ve ever seen. It allows you to see data for the same location in 160+ different services (some of them in Japanese).
OSM Smart Menu Google Chrome extension to switch between dozens of different types of online maps (based on #OpenStreetMap and NOT only)
Calcmaps Simple online map tools: Calculate area (triangles, quadrilaterals and complex polygons), Calculate distance (for complex routes), Measure radius, Calculate elevation
Scribble maps Partly free online tool for creating infographics (images or pdf) based on maps.
Gdal3.js.org One of the main problems of using geospatial data in investigations is the large number of applications for working with it, which save the result in different formats. This multifunctional online geodata converter will help to solve it.
Google Maps Timeline Exporter If your Google account has once enabled collecting data about your location (link for checking https://timeline.google.com/maps/timeline), this extension will help you analyze your movement data in depth, and export it to CSV.
Overpass API This simple online tool shows Open Street Map changes over a certain date range.
localfocus.nl/geokit geographic toolkit for investigative journalists
Google Maps Scraper Enter search terms (ex “Boston museum”) and scrape adresses, phone, websites and other place info from Google Maps.
FELT FREE online tool for creating map-based visualizations: - put labels with names and descriptions - draw lines and routes - choose from hundreds of backgrounds - download your work as PDF, image, GeoJSON or share link to online version
Bellingcat OSM Search A tool for locating photos and satellite images: Specify the objects you see and the distance between them (ex: a 10-story building 80 meters from a park). Select a search area (ex: a district of a city) Get a list of places that fit the description.
Smappen Online tool to calculate the distance a person can travel from a given point in a given time (on foot, by car, by bicycle, by train, by truck).
Python Overpy Old (but it’s still working) and simple command line #python tool for access Overpass Turbo API.

Transport

Link Description
Venicle Number Search Toolbox search information about car by venicle numbers (14 different countries from one page) - #GreatBritain, #Norway, #Denmark, #Russian and others
Transit Visualisation Client real time info about public transport in 739 cities and towns in the dozens of countries
Collection of public transport maps 20 online public transport maps (most real-time) for different cities and countries around the world
WorldLicensePlates graphic index of license plates of different countries of the world
Openrailwaymap Map of the world with information about the railroad tracks. It’s possible to visualize maximum speed, electrification, track gauge, and other parameters.
Waze Online map (+mobile app) for information about various problems on the roads (accidents, street closures, police parking, etc.) around the world. Waze especially interesting because it stores the marks users left a few days or weeks ago.

Communications, Internet, Technologies

Link Description
Opencellid.org the world’s largest Open Database of Cell Towers
CellMapper Worldwide cell towers map; Cell ID Calculator; Frequency Calculator; LTE Throughput Calculator; Network statistics by countries.
API mylnikov.org get lattitude and longitude by WiFI BBSID
nperf.com/map view the coverage area of different #cellular operators in different countries
nperf.com/map/5g 5G coverage #map worldwide
Vincos.it world social media popularity map
app.any.run interactive worldwide map of cyber threats statistics (last 24 hour)
Web Cam Taxi open webcams around the world
Radio Garden select a local radio station on the world map and listen to what’s playing at the moment
TorMap Worldwide online map of Tor Nodes
GeoWiFi Search WiFi geolocation data by BSSID and SSID on different public databases (Wigle, Apple, OpenWifi, API Mylnikov).
GPSJam GPS Interfence Map shows where GPS jamming systems could be operating on a particular day (most often associated with military conflicts).
Infrapedia Worldwide detailed online map of Submarine Cables, Data Centers, Terrestrial Fibers, Internet Exchanges
OONI Explorer World biggest open data resource on internet censorship around the world. 1.6+ million measurements in 241 countries since 2012.

Anomalies and “Lost Places”

Link Description
Argis UFO map UFO sightings interactive map. USA only
Bigfoot and UFO map Bigfoot, UFO and other sightings around USA and Europe
The Haunted map A map of haunted locations where ghost sightings have been reported around the world. Based by data from http://ghostresearchinternational.com
Lost places map A map of independent research reports on urban spaces that are published in the Lost places Facebook community
Bigfoot Sightings and Density of the US with Biomes Bigfoot sightings reports density around the USA
BFRO bigfoot sightings database This comprehensive database of credible sightings and related reports is maintained by an all-volunteer network of bigfoot/sasquatch researchers, archivists, and investigators in the United States and Canada–the BFRO.
Haunted places Google Earth map of ghost sightings around the world
UFO reporting map YouMap of UFO sightings reporting around the USA
Australia UFO map 2008 UFO sigthins Google Map Australia 2008
URBEX database map Europe lost places map based by Urbex database
Lostplace atlas Google map of lost places in Germany and other Europe countries
Virtual Globe Trotting Add latitude and longitude to the URL to see the nearby : Unusual and funny images from Google Street View; Interesting parts of the satellite map

Street View

Link Description
Show My Street simple tool that simplifies and speeds up your research work with Google Street View. Just click on the map and see street panoramas
Mapillary street panoramas over the world
360cities.net/map world map of panoramic (360 degrees) images
Earthviewer360.com Click on a point on the map to see a 360 degree video panorama (it’s possiblle to pause to see some areas in more detail)

Satellite/aerial imagery

Link Description
Observer service allows you to watch data from different orbiting satellites in the record. The data is available in 15-30 minutes after recording.
USGS Earth Explorer more than 40 years old collection of satellite imagery
Landviewer satellite observation imagery tool that allows for on-the-fly searching, processing and getting valuable insights from satellite data to tackle real business issues
Copernicus Open Access Hub ESA’s open access portal to Sentinel data
Sentinel Hub EO Browser complete archive of Sentinel-1, Sentinel-2, Sentinel-3, Sentinel-5P, ESA’s archive of Landsat 5, 7 and 8, global coverage of Landsat 8, Envisat Meris, MODIS, Proba-V and GIBS products in one place.
Sentinel Hub Playground tool for viewing satellite images with different effects and rendering.
NASA Earthdata Search search in 8555+ collection and photos.
INPE Image Catalog free satellite images catalogue.
NOAA Data Access Viewer satellite images of the coastal U.S.(discover, customize, and download authoritative land cover, imagery, and lidar data.)
NASA WorldView high resolution and high quality satellite images.
ALOS “Advanced land Observer Satellite” images collection (Japan)
Bhuvan Indian Geo-platfrom of ISRO.
OpenAerialMap set of tools for searching, sharing, and using openly licensed satellite and unmanned aerial vehicle (UAV) imagery
OpenAerialMap Select an area on the map and get a list of freely available aerial images for that area. For some locations available images are many times superior in quality to conventional satellite images.
ApolloMapping Image Hunter Select an area on the map using a special tool (square and polygon) and get a list of dozens of images obtained from satellites or by aerial photography (from the early 2000s as well as those taken a couple of days ago).
keyhole engelsjk Experimental visualization tool for 1.3 million+ declassified spy satellite imagery (1960 to 1984 years).
Maxar Highlight an area on the world map and get dozens of satellite images of that area taken at different times (mostly 2021-2023)

Military tracking

Link Description
ADS-b.nl tracking military aircrafts.
Planefinder Army Live Flight Tracker.
Itamilradar track military flights over Italy and over the Mediterranean Sea.
MarineVesselFinder military ship tracking.
BellingCat Radar Interfence Tracker
WEBSDR online access to a short-wave receiver located at the University of Twente. It can be used to listen to military conversations (voice or Morse code).
Russia-Ukraine Monitor Map represent open source material such as videos, photos and imagery that have been cross-referenced with satellite imagery to determine precise locations of military activity .
Ukraine liveuamap.com online tracking of war-related events in Ukraine.
Syria Liveuamap online tracking of war-related events in Syria.
NATO.int Explore this interactive map to learn more about NATO, how the Alliance works and how it responds to today’s security challenges.
Understanding War Map Room collection of maps illustrating military conflicts in different countries.
US Military Bases Interactive Worldwide Map Use the map to find out the number of people at the base, the approximate area, the opening date, and to get links to articles with more information.

Military visualisation

Link Description
Map.Army Online tool for creating schemes of battles and military operations on the map. Extensive customization possibilities and a huge library of symbols.
MGRS Mapper Build and share custom maps with standard military graphics using a simple visual interface (paod)
ArgGis Military Overlay Military Overlay can be used to create overlays with standard military symbols, by using and adapting existing feature templates in ArgGis Pro

Other

Link Description
Demo.4map.com 3D interactive world map
OldMapsOnline World aggregator of old maps from various sources (498,908 maps)
Whatiswhere.com OpenStreetMap based free POI (point of interest) search. 102 types of objects
Collection of cadastral maps 41 countries
WhoDidIt Click on an area on the OpenStreetMap to get a list of nicknames of users who have made changes on it (with dates).
European World Translator Enter the word in English to see its translation into different European languages on the map.

Social Media

Twitter

Link Description
Stweet Opensource Python library for scraping tweets (by user, by hashtag, by keyword). NO LOGIN OR API KEY REQUIRED.
BirdHunt A very simple tool that allows you to select a geolocation/radius and get a list of recent tweets made in that place.
Twitter account detector A simple and fast Chrome extension that finds all Twitter accounts on a site.
Follower Wonk/Compare this service allows you to find out how many followers two (or three) Twitter accounts have in common.
Tweepsmap Unfollows displayed unsubscribed accounts (list for the one week available for free)
app.truthnest.com best tool for Twitter account investigation
Whotwi A free online tool for analysing your #Twitter account: - shows the mutual following; - search for tweets by calendar; - list of most active readers; - analysis of daily activity, hashtags and more.
Treeverse.app view dialogs in Twitter as a graph
Hashtagify compare the popularity of the two hashtags
Scoutzen search twitter lists by keywords
One Million Tweet Map
Tweet Binder detailed twitter account analyze
Tweet Sentiment Visualization
Tweet Beaver Friends Following
Tweet Topic Explorer
Twitter Money Calculator
Twitter Analytics gather detailed infromation about your own account
Twemex Twitter sidebar with: quick commands for searching your own tweets, lists, users tweets and replies; quick links to quotes of current tweet, user’s most liked tweets and conversations.
Vicintias.io very fast export of information about Twitter account followers to XLSX
Twitter Shadow Ban Checker If you suddenly notice that your account’s tweets have decreased in views and the flow of audience has slowed down, it’s worth checking to see if your account has been shadow-banned.
Twitter Mentions Map A world map that shows the locations of users who mention you in their tweets.
Twitter URL Scraper A simple tool for analyzing twitter conversations (and other pages). Get profile pictures, user names and the text of the conversation’s tweets and replies. Data can be exported to CSV, JSON, XML.
DO ES FOLLOW quick check if one user is subscribed to another on Twitter
Sleeping Time determining the approximate sleeping time of a user based on analysis of the timing of a tweet
Tweet Tunnel tool for quick and comfortable viewing old tweet’s of someone account
Twitter users directory
FollowerAudit In-depth analysis of Twitter followers. Identifies inactive and fake accounts, assesses followers by the number of tweets, profile information (biography, geolocation, links, profile picture).
Foller.me Twitter account detailed analyze
Get day Twitter Trends
US Twitter Trend Calendar
Followerwonk search by Twitter bio
Twitter Botometr
projects.noahliebman.net/listcopy copy a list made by another user to your Twitter account
Unfollower Stats iOS App that tracking unfollowers and show nofollowersback and unactive followers for your Twitter account
Twish very simple, quick, comfortable and nicely designed advanced #Twitter search query builder for #GoogleChrome.
Twitter Scraper Scrape any #Twitter user profile. Creates an unofficial Twitter API to extract tweets, retweets, replies, favorites, and conversation threads with no Twitter API limits.
Twiiter Trending Archive A wide range of options for analyzing #Twitter trending history: 1. See what was popular on a particular day in a particular country or in the world as a whole. 2. Enter a keyword and find out when it was in the global/particular country trends.
Tweeview Twitter conversation visualization (beta)
Tweeplers Trending Twitter users and hashtags (map/list) Top twitted cities and countries Realtime Tweet Map
FlockNet A tool for finding and filtering your own #Twitter followers. It allows you to find all the people from a certain city or with certain interests. And then quickly view their profiles in a convenient format.
Orbit livasch A tool for analyzing connections between Twitter accounts (based on the number of likes, retweets, tweet citations, and mentions).
The Twitter Stream Grab Full archives of tweets in JSON for a particular month (from 2011, but some months are not available).
Twitter 3D 3D viewer of relationships between twitter users.
ExportData.io (PAID) Download followers & followings, export historical tweets since 2016.
Eight Dollars Browser extension that shows who really is a verified #Twitter user and who paid $8 for verification.
Twitter Archive Parser In case your Twitter account is blocked, it’s usefull to open settings and download account data. This tool extracts the most important info about tweets from archive and formats it in an easy-to-read way.
removeTweets In recent weeks, I have been seeing more and more accounts deleting their tweets in whole or in part. You can automate this process with this tool.
TWEEDS A very easy-to-use Python library that allows you to collect all of a user’s tweets into a CSV/JSON file. Also it’s possible to collect tweets by hashtag or geolocation.
BirdSQL New Twitter search tool using OpenAI GPT 3.5. Type queries in simple english language to get lists of tweets or users. For example: most liked tweets abou people followed by Jeff Bezos who don’t follow him back total number of users/tweet
Spaces Down Twitter Spaces download service (available after the broadcast ends). Works for quite a long time. It took about 5 minutes to generate an MP3 file with an audio recording of the 46-minute space.
Twitter Control Panel A cross-browser extension that allows you to have maximum control over your Twitter feed: Hide retweets, quote tweets, who to follow etc; Reduce “engagement”; Hide UI items; Remove algoritmic content
Wayback Tweets A tool to quickly view tweets saved on http://archive.org No need to open a link to each tweet in a separate window It’s possible to filter only deleted tweets

YouTube

Link Description
YouTube Whisperer Transcribe YouTube video
Eightify ChatGPT YouTube summary
YouTube Unlisted Video search for videos available only by link on youtube
YouTube Comments Analyze Download detailed information about YouTube video comments to a .tab or .gdf
Youtube Actual Top Comments The main drawback of the standard #YouTube comment display is that it does not sort comments by the number of likes, but simply shows popular comments in a random order. This extension solves this problem:
Noxinluencer youtube channels comparing
YouTube MetaData Viewer
PocketTube YouTube Subscription Manager
YouTube comment Finder
YouTube Comment Downloader easy to install and fast tool for downloading YouTube comments in txt/json. Does NOT require authorization or API keys.
Montage.meedan.com Search #YouTube video by date (uploaded or recording) and by geolocation.
Slash Tags tool for recommending YouTube tags and displaying related statistical data from search keyword(s)
YouTube playlist len Find out the total time of all the videos in playlist
Anylizer.com watch frame by frame YouTube and Vimeo)
Improve YouTube extension with dozens of different tweaks to the standard #YouTube interface
YoTube Channel Search Tool for searching YouTube channels by keywords in the name and creation date. The result is a table with the channel ID, name, description, date of creation, as well as the number of subscribers, views, and uploaded videos
watchframebyframe.com watch frame by frame YouTube and Vimeo
Hadzy.com YouTube comment search)
Ytcs google chrome extension to search YouTube comments without leaving the site (link to source code)
YouTube Comment Search Chrome Extension
YouTube Transcript API Get the transcript/subtitles for a given #YouTube video (by ID from adress bar). It also works for automatically generated subtitles and supports translating subtitles.
Jump Cutter An extension for those who watch university lectures on #YouTube and want to save their time. It identifies chunks where the lecturer writes silently on the board (or is just silent) and plays them back at double speed…
YouFilter – YouTube Advanced Search Filter An extension that displays #YouTube search results in a table with very detailed information about each video (including quick links to the channel owner’s contacts). It’s can to download the results in CSV.
YouTube Timestamp Comments extension finds all the timestamps in YouTube video comments and arranges them in chronological order.
Youtube Actual Top Comments Fetch all comments to Youtube video (without answers). Sort them by likes and filter by keywords
YouTube channel archiver Tool for automation downloading video, thumbnails and comments text from target YouTube channel (or channels).
YouTube Scraper Extract and download channel name, likes, number of views, and number of subscribers. Scrape by keyword or URL.
YouTube Booster This extension selects frames from videos and generates quick links to find them on Google and TinEye!
YouTube Caption Searcher Well down tool for searching in #YouTube video subtitles by keyword. Use Enter to move forward and Shift+Enter to move back.
YouTube word search An extension that helps you find at what second in the video a certain word is heard. It’s possible to search not only by one word, but by the loaded list of words (!).
Speak subtitles to YouTube Subtitle dubbing tool with support for several dozen languages and voice variants. Useful for saving time and for education purposes. Works with glitches, try different settings to get better results.
Youtube Lookup Simple tool for gathering info about video: Content details, Snippet details, Statistics, Status, Thumbnails
YouGlish Type a random phrase in English and listen to native speakers pronounce it in YouTube videos.
YouTube Screen Capture allows you to download a stream in pieces and then merge them
Filmot YouTube subtitles search engine. Search across 573 million captions/528 million videos/45 million channels.
YouTube_Tool #Python library for: - extracting subtitles by video ID or link (in different languages); - list all the video’s contained in playlist; - list all video’s from a channel; - get info about video by ID; - proxy support; and more.
YtGrep A tool for quick text search of subtitles in YouTube videos. Supports regular expressions and searching across multiple videos.
Find YouTube Video An online tool that searches for information on YouTube videos by ID in the following sources: Wayback Machine; GhostArchive; #youtubearchive; Filmot
YouTube Channel Crawler Search across 20, 625,734 channels. Search by name, category, country, number of subscribers, views, videos and creation date.
Return YouTube Comment Username YouTube has recently stopped showing user names in comments. There is an extension that solves this problem.
YouTube Lookup A simple online tool to view YouTube video metadata: Snippet Statistics Status Content Geolocation Thumbnails

TikTok

Link Description
Tiktok Timestamp determines the time of publication of the video to the nearest second. Just copy the link.
TikStats detailed statistics on the growth dynamics of subscribers, likes, and video views for the TikTok account
TikTok Scraper scrapping video from user, trend or hashtag feed, extracting video’s or user’s metadata, downloading video or music, processing a list of clips or users from a file
TikTok Downloader TikTok Video Downloader
TikTokD TikTok Video Downloader
Snaptik.app TikTok Video Downloader
TikTake.net TikTok Video Downloader
Exolyt.com TikTok profile analyze
Tikbuddy TikTok profile analytics
Mavekite.com Enter the nickname of the user #TikTok and get the data on likes, comments, views, shares and engagements for his forty last videos
Tiktok Scraper Extract data about videos, users, and channels based on hashtags, profiles and individual posts.
Tikrank.com free tool for comparing and analyzing #TikTok accounts. Available ranking of the most popular users by country (there are more than a million accounts with the largest number of subscribers in the database)
TikTok Creative Center Statistics List of most popular hashtags; songs; creators; videos for different countries and periods.

Protonmail

Link Description
Prot1ntelligence Validate ProtonMail email address, Gather info about ProtonMail user email or PGP Key, Search on the dark web target digital footprints, Check IP to belong to ProtonVPN

Facebook

Link Description
Find my FB ID (randomtools.io)
435,627,630 indexed items from that Facebook dump of recent - ready to be searched upon.
Facebook People Directory
sowdust.github.io/fb-search search facebook posts, people and groups using URL-filtres
Dumplt Blue GoogleChrome extension for @Facebook: dump to txt file friends, group members, messenger contacts etc, automate scroll page to bottom (+isolate scrolling), automate expanding comments and replies and much more.
Fdown.net Facebook video downloader
Facebook Latest Posts Scraper Scrape #Facebook posts with comments from one or multiple page URLs. Get post and comment texts, timestamps, post URLs, likes, shares, comments count, author ID.
Facebook Latest Comments Scraper Enter link to the #Facebook post and get comments comments to it (text, timestamp and other info).
Facebook Friend List Scraper Scrape names and usernames from large friend lists on Facebook, without being rate limited"

Clubhouse

Link Description
ClubHouse users.db search users by nickname and keyword in profile
roomsofclubhouse.com search open and scheduled rooms
clubsearch.io search open and scheduled rooms
search4faces.com/ch00 reverse image face search by 4 millions 594 thousands #clubhouse avatars.

Linkedin

Link Description
Freepeoplesseacrhtool.com find people in Linkedin without registration
CrossLinked LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
Linkedin Datahub linkedIn’s generalized metadata search & discovery tool
Recruitin.net easily use Google to search profiles on LinkedIn

Xing

Link Description
XingDumper The Xing job and networking service has almost 20 million users! Here is a simple script that allows you to get a list of employees registered there for a particular company.

Reddit

Link Description
Map of Reddit an alternative format for interacting with Reddit
Reddit Insvestigator
redditcommentsearch.com getting a list of all comments by a Reddit user with a certain name
dashboard.laterforreddit.com/analysis examine popular post trends for a given subreddit
Reddit Timer Get last week’s hourly activity schedule for a specific subreddit
Redditsave.com Reddit video downloader
Reddit Scraper Crawl posts, comments, communities, and users without login.
Redditsearch.io Reddit search tool
Reddloader.com Reddit video downloader
Camas Reddit Search Search engines for Reddit with a lot of filtres
Reditmetis View statistics fot Reddit users’s account
Repostsleuth Reddit trends analyzer
Redetective Reddit search tool
Unddit.com Display deleted content in Reddit
Reveddit Reveal reddit’s removed content. Search by username, subreddit (r/), link or domain.
Reddit User Extractor #python script that allows you to get a complete list of comments by user name on Reddit in CSV format
Better Reddit Search Reddit search tool for posts and subreddits (with boolean filters by keywords and filters by publication date).
Reddit Post Scraping Tool Simple #python script for scraping post from #Reddit (by keywords and subreddit name)
Subreddit Stats User-Overlap A tool to find similar subreddits. The higher the score of a subreddit in the list, the higher the probability that users of the original subreddit (in our case r/osint) are active in it too.
Reddit User Analyzer Registration date; Activity stats; Kindness Meter; Text readability; Top subreddits; Most frequently used words; Submission and comment activity over time; Submission and comment karma over time; Best and worst comments

Onlyfans

Link Description
fansmetrics.com Search in 20 millions #OnlyFans accounts
Onlysearch.com Onlyfans users search engines
onlyfinder.com OnlyFans profiles search engine (search by people, images and deals)
hubite.com/onlyfans-search/ OnlyFans profiles search engine with price filter
SimilarFans A tool to find OnlyFans profiles with many filters (by country, price, category, age, etc.).
FanSearch Search OnlyFans profiles by countries, price or category.

Snapchat

Link Description
Bitmoji Avatar History Enumerator BACKMOJI takes a Bitmoji ID, version (usually the number 5), and a maximum value. Press the “Grab Images!” button and your browser will make “maximum value” requests for the images of that user’s Bitmoji. Those images will be displayed below.

Twitch

Link Description
Twitch Tools downloas full followers list of any Twitch account in CSV
Twitch Tracker detailed analysis of #Twitch streamer stats
Sully Gnome detailed analysis of #Twitch streamer stats
Twitch Stream Filter Search streams and filter results by title, game, language, number of viewers.
Untwitch.com Twitch video downloader
Twitch Overlap shows the viewer and audience overlap stats between different channels on Twitch. Currently tracks all channels over 1000 concurrent viewers. Data updates every 30 minutes.
Justlog Enter the username and the name of the channel to see all of the user’s messages in that channel. The results can be downloaded as TXT
Pogu Live Tool that allows you to watch sub only or deleted VODs for free. It works because when a streamer deletes a video, iit is not deleted from Twitch’s servers immediately.
Twitch Recover Twitch VOD tool which recovers all VODs including those that are sub only or deleted.
Twitch Database Following List + Channel Metadata + Role Lookup
Twitch Insights Account stats; Game ranking; Extensions stats; List of all Twitch bot; Check user status by nickname or ID; List of Twitch team (history before 2020)
Twitch Followage Tool Enter the Twitch username and get a complete list of channels he/she follows (with start dates)

Fidonet

Link Description
Fidonet nodelist search by node number, sysop name and sysop location

Usenet

Link Description
NZBFRIENDS usenet search engine

Tumblr

Link Description
Tumblr Tool collected posts tagged with a specific term from Tumblr and export to .tab file (opens in Excel) and .GDF (opens in Gephi)

Flickr

Link Description
Flickr Photopool Contact Network Analyzes Flickr groups and makes a list of nicknames of participants for further graph analysis in Gephi

Spotify

Link Description
Zspotify Spotify track downloader. Download mp3 by link or by keywords
Chosic.com analyze the playlist on Spotiify, calculate the prevailing mood, genres, decades and favorite artists
Spotify downloader download spotify playlist in mp3 from YouTube
chartmasters.org/spotify-streaming-numbers-tool/ report of the number of streams of a particular artist’s tracks on Spotify

Discord

Link Description
ASTRAAHOME 14 #Discord tools (including a RAT, a Raid Tool, a Token Grabber, a Crash Video Maker, etc) in one #python tool.
Discord History Tracker A tracking script will load messages from the selected channel and save them in .txt file.
Serverse Search for Discord servers by keyword.

Mastodon

Link Description
MASTO Masto searches for the users Mastodon by name and collects information about them (profile creation date, number of subscribers and subscriptions, bio, avatar link and more).
Fedifinder Tool for finding Twitter-users in Mastodon. You can search among those who follow you, those who follow you, as well as in your lists! Results can be exported to CSV.
MastoVue More and more #osint and #infosec bloggers are creating Mastodon profiles these days. This tool will help you find accounts that match your interests by hashtag.
Debirdify This tool automatically finds Fediverse/Mastodon accounts of people you follow on Twitter
Search.Noc.Social Good alternative to the standard Mastodon search. This service allows you to search for users on different servers by hashtags and keywords.
Instances.Social A tool for searching across full list of instances in #Mastodon. It can help you choose the right instance to register (matching your views on spam, advertising and pornography) and in finding illegal content to investigate crimes.
Fediverse Explorer Search Mastodon users by interests
Trunk 200+ thematic lists of accounts in Mastodon. Python, JavaScript, Vim, Ruby, Privacy, Linux… There are even nudists and Tarot. The Pytrunk tool can be used to automatically following this lists https://github.com/lots-of-things/pytrunk
What goes on Mastodon Interactive real time visualisation which shows the number of new users and posts on Mastodon Instances in the last 6 hours, 24 hours, 72 hours or the entire last month.
IMAGSTON A tool that searches for users by name on different #Mastodon servers and collects information about them (profile picture, account type, date of account creation, bio).
Movetodon Get a list of your Twitter followings in Mastodon. With the ability to sort by date of registration, date of last activity, and buttons for quick subscriptions.
Followgraph for Mastodon Enter any #Mastodon Handle and get a list of accounts followed by the people this profile follows. It helps to find connections between people or just interesting accounts followed by many people interested in a certain topic.
Kirbstr’s Mastodon search Google CSE for some of the most popular and open mastodon instances.

Yandex

Link Description
YaSeeker Get information about http://Yandex.ru account by login

Instagram

Link Description
IMGINN This service allows you to do the following without logging in to Instagram account: - search for accounts containing a keyword in the profile name; - view all of the user’s photos; - view photos in which the profile has been tagged by other users
Instahunt Click on the point on the world map Click “Find places” Click “Get Instagram Place Data” Copy and paste the “Place Data” into the box View Insta locations on the map with links to photos!
Instagram Location Search Get the names and links to all the locations on Instagram tied to specific geographic coordinates
Inflact Instagram Search Instagram profiles search tool with the ability to filter results by number of subscribers, number of posts, gender, categories (personal blog, artist, product/service etc.)
Terra Collect information about twitter and Instagram accounts
Instagram analyzer and viewer
Sterraxcyl Tool for export to excel someone’s #Instagram followers and/or following with details (Username, FullName, Bio, Followers and Following count, etc)
Storysaver.net download Instagram stories.
Instagram Scraper Scrape info about accounts, posts, stories and comment
Instagram Hashtag Scraper Enter hashtag name and scrape all post tagged it. Get caption, commentsCount, photo dimensions, URL, other hashtags and other details in CSV, JSON or XLS table.
Tenai Simple tool that uncover some followers of a private #Instagram account
TrendHero An Instagram profile search tool with a huge number of filters and the ability to view profile statistics.
INSTALOADER Allows to download Instagram posts, photos, stories, comments, geolocation tags and more from #instagram
InsFo The ultimate simple tool for saving followers/following an Instagram account to a table.
Inflact Another online tool that allows you to watch Instagram, without logging in: - search users by nickname; - view last posts; - analyze profile;
Imginn Free service to view Instagram profile posts without registration
Instagram Explorer Click on a point on the map. Follow the instructions on the left. Get a link to view Instagram posts made at this location on a specific date range

Google

Link Description
GHunt google account investigation tool
Ghunt Online Version Get info about Google account by email: - name - default profile and cover pictures; - calendar events and timezone; - Google Maps reviews; - Google Plus and Google Chat data;

Patreon

Link Description
Graphtreon.com patreon accounts earnings stats

Github

Link Description
Star History simple tool that shows how the number of stars a repository on #Github has changed over the past three months.
Commits.top Current list of the most active @Github users by country
Gitstar Ranking Unofficial GitHub star ranking for users, organizations and repositories
Github Rater rates GitHub profile upon data received from GitHub API
Github Trending Archives Github trending archive for a specific date.
GitHub Repository Size simple google chrome extension to view Github repo size
Gitcolombo simple and fast tool that collects information (edit statistics and contacts) about repository contributors on Github
Coderstats enter Github username and get detailed statistics of profile: languages, issues, forks, stars and much more
GitHub-Chart it shows a visual representation of the temporal distribution of user changes in the repositories. You can visually see “productivity peaks” and see which days of the week a person is most active
Zen Tool for gathering emails of #Github users
GithubCompare When searching for OSINT tools on #Github, you will often come across several repositories with the same name. This service will help to visually compare them, determine which one was created earlier, which one has more forks and stars.
DownGit Create GitHub Resource Download Link
Profile Summary for Github Get detailed stats by Github username
Github Hovercard Displays a block of detailed information about the repository or user when the mouse pointer is placed over it. Save time for those who look through dozens of pages of #Github search results in search of the right tool for their tasks.
SEART Github Search Search engine for #Github with a dozen different filters. It has slightly fewer features than the standard Github advanced search, but more user-friendly.
Repos Timeline Enter #Github username and click Generate to see a timeline with all of the user’s repositories and forks they have made.
Gitvio A tool to quickly and easily view detailed information about a user’s Github profile: the most popular repositories, number of commits, issues and , statistics of languages used, and more.
OSGINT A simple #python tool to collect information about a Github user. It can be used to gather: all available emails avatar_url twitter_username number of followers/following date of profile creation and last update and more.
gitSome A tool for gathering information from #Github: - extract all emails from commits of a particular user (top of the pic); - gathering info about repository (with forks); - search info by domain name
Open Source Software Insight Amazing service that allows to analyze developers and repositories data based on more than 5 billion (!) Github Events.
Map of Github Enter the name of the repository, see its links to other projects, and its place on the map of all Github repositories. Notice how small 1337 island is.

Wikipedia

Link Description
WikiStalk : Analyze Wikipedia User’s Activity
Wikipedia Cross-lingual Image Analysis A simple tool that allows to evaluate the content of different language versions of an #wikipedia article about the same subject or concept in one glance.
WikiMedia Cloud Page Views The tool shows how many times a particular page on WikiPedia has been visited within a certain period of time. It also allows you to compare 2 or more pages with each other. Who is more popular?
WikiWho Database of edits made to #Wikipedia using IP ranges of organizations, government agencies and companies (FBI, NATO, European Parliament, etc.) You can view both the edits history of a single article and the edits history of organization.
WIKIT A tool for searching and reading #Wikipedia articles from the #CLI. The main benefit of it is fewer distractions from work. You don’t have to open browser (with Facebook, YouTube and other time eaters) to find out about something.

Parler

Link Description
Parler archive

Pornhub

Link Description
Sn0int framework module for Pornhub

Bluesky

Link Description
BlueSky users stats

Steam

Link Description
steamdb.info/calculator shows how much money has been spent on games in Steam by a particular user
Steam Osint Tool Enter the link to the user’s Steam profile to get a list of his or her closed “friends” and a list of his or her public comments.

Minecraft

Link Description
MineSight Minecraft #osint tool. By nickname, it checks the presence of users on different servers and collects information about them (date of registration, links to social networks, history of nickname changes, etc.).

Xbox

Link Description
Xboxgamertag search Xbox Live users by nickname (gamertag). It’s possible to view gamer’s stats and his playing history.

VK

Link Description
Vk.city4me.com tracking user online time

Office365

Link Description
Oh365UserFinder A simple tool that shows if an #Office365 account is tied to a specific email address. It’s possible to check an entire list of emails from a text file at once.
o365chk simple #Python script to check if there is an #Office365 instance linked to a particular domain and gathering information about this instance.

OneDrive

Link Description
Onedrive Enumeration Tool A tool that checks the existence of OneDrive accounts with certain usernames (from the users.txt file) in the domain of a certain company.

Udemy

Link Description
Udemy Video Playback Speed A simple extension that changes the speed of playing video courses on #Udemy.

Duolingo

Link Description
duolingOSINT The language learning platform Duolingo has more than 570 million+ users worldwide. This tool collects information about Duolingo users by nickname or email.

Universal

Link Description
Gallery-dl Quick and simple tool for downloading image galleries and collections from #flickr, #danbooru, #pixiv, #deviantart, #exhentai
Kribrum.io searchengine for different social media platforms with filters by author and time period
Auto Scroll Search automatically scrolls the page down (and loads the ribbon) until the specified keyword appears on it.
Social Blade help you track YouTube Channel Statistics, Twitch User Stats, Instagram Stats, and much more
ExportComments Export comments from social media posts to excel files (Twitter, Facebook, Instagram, Discord etc), 100 comments free
Social Media Salary Calculator for YouTube, TikTok, Instagram
Chat-downloader download chats messages in JSON from #YouTube, #Twitch, #Reddit and #Facebook.
FindMyFBID Toolkit for collecting data from social networks
Social Analyzer extension for Google Chrome that simplifies and speeds up daily monitoring of social networks. Create your own list of keywords and regularly check what’s new and related to them.
Khalil Shreateh Social Applications More than 20 tools to extend the standard functionality of #Facebook, #TikTok, #Instagram, #Twitter (information gathering, random pickers for contests, content downloaders etc.)
SNScrape Tool for search posts and gathering information about users in Twitter, Reddit, Vkontakte, Weibo, Telegram, Facebook, Instagram, Telegram and Mastodon.
TalkWalker You can enter a tag (keyword and brand name) and then see which people have used it most often: - gender; - age; - language; - profession; - interests.
Kworb A lot of different statistics on views and listens collected from #YouTube, #iTunes, #Spotify. Ratings by country, year, music type, and more.
Amazing Hiring An extension for Chrome that allows you to find a link to Linkedin, Facebook, VK, StackOverflow, Instagram… by user Github (or other) profile
RUBY Simple tool for searching videos by keyword in Rumble, BitChute, YouTube and saving results (author, title, link) to CSV file.
The Visualized visualize profile tweets to see the most popular from the last month; get info about the use of a particular hashtag (popular tweets, related hashtags, profiles that frequently use this hashtag); lists of #Twitter and #YouTube trends by country;
CommentPicker Facebook profiles/posts ID finder Export Facebook like and comments YouTube Tag Extractor Instagram profile analyzer Twitter account data export

Downloaders

Link Description
Wenku download documents from Baidu Wenku without registration
Slideshare Downloader A very simple and fast tool for downloading Slideshare presentations in PDF format (recommend to choose High quality at once)
Gdown When downloading files from Google Drive curl/wget fails (because of the security notice). But this problem is easily solved
Waybackpack download the entire #WaybackMachine archive for a given URL. You can only download versions for a certain date range (date format YYYYMMDDhhss)
Chat-downloader download chats messages in JSON from #YouTube, #Twitch, #Reddit and #Facebook.
Gallery-dl Quick and simple tool for downloading image galleries and collections from #flickr, #danbooru, #pixiv, #deviantart, #exhentai
Spotify downloader download spotify playlist in mp3 from YouTube
Zspotify Spotify track downloader. Download mp3 by link or by keywords
Snaptik.app TikTok Video Downloader
TikTok Scraper scrapping video from user, trend or hashtag feed, extracting video’s or user’s metadata, downloading video or music, processing a list of clips or users from a file
YouTube Comment Downloader easy to install and fast tool for downloading YouTube comments in txt/json. Does NOT require authorization or API keys.
Storysaver.net download Instagram stories
Fdown.net Facebook video downloader
Untwitch.com Twitch video downloader
Redditsave.com Reddit video downloader
DownGit Create GitHub Resource Download Link
SaveFrom.net download video from YouTube, Vimeo, VK, Odnoklassniki and dozen of others services
Gdown When downloading files from Google Drive curl/wget fails (because of the security notice). But this problem is easily solved.
Download Sorter simple tool that will help set up the distribution of files with different extensions into different folders in a minute and permanently put “Downloads” folder in order.
Z History Dump Open chrome://history/ and download all links from browser history in json. This provides tremendous opportunities for visualization and analysis of information.
Slideshare Downloader A very simple and fast tool for downloading Slideshare presentations in PDF format (recommend to choose High quality at once)
Megatools The http://Mega.nz file exchange contains links to many files, including various databases of leaked data. You can use the megatools command-line tool to automate your work with this file-sharing service.
You Get Universal content downloader: - download video from popular sites like #YouTube or #TikTok - scrape webpages and download images - download binary files and other non-html content from sites
SoundScrape Download tracks and playlists from SoundCloud, Bandcamp, MixCloud, Audiomack, Hive com.
Stream Downloader Download streams from different sites
Chat Downloader Python tool for extracting chat messages from livestreams and broadcast. Supported sites: YouTube Twitch Reddit Zoom Facebook

Domain/IP/Links

Dorks/Pentest/Vulnerabilities

Link Description
OWASP Amass The OWASP Amass Project performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
Investigator Recon Tool web based handy-#recon tool that uses different #GoogleDorking techniques and some open sources service to find juicy information about target websites. It helps you quickly check and gather information about the target domain name.
AORT All in one domain recon tool: portscan; email services enumeration; subdomain information gathering; find info in Wayback Machine and more.
Site Dorks
Google (universal) Dork Builder Quick create queries with advanced search operator for Google, Bing, Yandex etc. Copy dorks from Google Hacking Database. Save dorks in your own database
Hakrawler Extreme(!) fast crawler designed for easy, quick discovery of links, endpoints and assets within a web application.
0xdork Very light and simple #Python tool for Google Dorking
FilePhish Simple online Google query builder for fast and easy document file discovery.
Snyk.io Website Vulnerabilities Scanner
dorks.faisalahmed.me online constructor of google dorks for searching “sensitive” wesite pages
Fast Google Dorks Scan Search the website for vulnerable pages and files with sensitive information using 45 types of Google Dorks.
GO DORK Fast (like most #osint scripts written in #golang) tool for automation work with Google Dorks.
Dork Scanner NOT support Google. Only Bing, ASK and http://WoW.com (AOL) search engines. Can work with very long lists of queries/documents (in .txt files)
ixss.warsong.pw very old service for making XSS (Cross Site Scripting) faster and easier
ReconFTW tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
LFITester Tool which tests if a server is vulnerable to Local File Inclusion (LFI) attack
Oralyzer Script that check website for following types of Open Redirect Vulnerabilities
RobotTester Simple Python script can enumerate all URLs present in robots.txt files, and test whether they can be accessed or not.
SickNerd tool for researching domain lists using Google Dorking. You can automatically load fresh dorks from GHDB and customize the maximum number of results
CDNStrip Very fast #go tool, that sorts the list of IP addresses into two lists: CDN and no CDN.
H3X-CCTV A simple command line tool with a Google Dorks list to find vulnerable CCTV cameras
nDorker Enter the domain name and get quick links to Google Dorks, Github dorks, Shodan dorks and quick links to get info about domain in Codepad, Codepen, Codeshare and other sites (“vendor dorking”)
Scan4all 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzzing and many many more
Intezer Analyzer Online tool for finding code injections, malware, unrecognized code and suspicious artifacts in: Files (up to 150 mb), URL, Memory dumps, Endpoints
WEBOSINT Simple #python tool for step-by-step collection of domain information using HackerTarget and whoisxmlapi APIs.
KnockKnock A very fast script written in #go that queries the ViewDNSInfo API (free, 500 results limit) and gets a list of domains related to target domain (which could theoretically belong to the same person or company)
SQLI Dorks Generator python script generates Google Dorks for SQL Injections for sites from the list.
Dorks Hunter A simple script to analyze domain using Google Dorks. It saves in file the results of checking the following categories Backup files, Database files, Exposed documents, Sub-subdomains, Login pages, SQL/PHP errors
xnLinkFinder Tool for discover endpoints for a given target. One of the most versatile tools of this type, with dozens of different settings.
DATA Surgeon A tool for extracting various sensitive data from text files and web pages. For example: - emails - phone numbers - API keys - URLs - MAC addresses - Hashes - Bitcoin wallets and more.
JSLEAK Extreme fast #Go tool to find secrets (emails, API keys etc), paths, links in the source code during domain recon.
FUZZULI Url fuzzing tool written on #go that aims to find critical backup files by creating a dynamic wordlist based on the domain. It’s using 7 different methods for creating wordlists: “shuffle”, “regular”, “reverse”, “mixed” etc
DorkGenius AI tool that generates “dorks” to find vulnerable sites and sensitive information for Google, Bing and DuckDuckGo based on their descriptions. It doesn’t work perfectly, but it’s an interesting idea.
DorkGPT Describe what you want to find in human language and get a Google query using advanced search operators. Suitable for “juicy info” and vulnerable sites, as well as for any other search tasks.
XURLFIND3R Find domain’s known URLs from: AlienVault’s, Open Threat Exchange, Common Crawl, Github, Intelligence X, URLScan, Wayback Machine
LogSensor #Python tool to discover login panels, and POST Form SQLi Scanning. Support multiple hosts scanning, targeted SQLi form scanning and proxies.
SOC Multi Tool Chrome Extension for quick: IP/Domain Reputation Lookup IP/ Domain Info Lookup Hash Reputation Lookup (Decoding of Base64 & HEX using CyberChef File Extension & Filename Lookup and more
PyDork Tool for automation collecting Google, Bing, DuckDuckGo, Baidu and Yahoo Japan search results (images search and suggestions). Note the huge(!) number of options for customizing search results.

Searchers, scrapers, extractors, parsers

Link Description
Scrappy! One of the easiest to learn web scrapers I’ve seen (and quite fast at that). It allows you to extract all URLs, table fields, lists and any elements matching the given criteria from a web page in a second.
find+ Regex Find-in-Page Tool
Google Chrome webpage Regexp search
Regex Checker Search and highlight (in webpage): Emails, Phone numbers, Dates, Prices, Addresses
moarTLS Analyzer addon which check all links on the webpage and show list of non-secure links
Scrape API Proxy API for Web Scraping
Try.jsoup.org online version of HTML pasrer http://github.com/jhy/jsoup
Investigo A very simple and fast (written in #go) tool that searches for active links to social network accounts by username (or multiple usernames)
REXTRACT This extreme simple tool extracts the strings corresponding to a certain #regex from the html code of the list of URLs.
Extract images Extract pictures from any webpage. Analyze, sort, download and search in them by keywords.
Contacts Details Scraper Free contact details scraper to extract and download emails, phone numbers, Facebook, Twitter, LinkedIn, and Instagram profiles from any website.
linkKlipper The easiest extension to collect links from an open web page: - select links with Ctrl/Command key or download all; - filter links by extension or using Regular Expressions; - download in CSV/TXT.
Listly An extension that allows to collect all the data from a website into a table, quickly filter out the excess, and export the result to Excel/Google Sheet.
EmailHarvester A tool to collect emails registered on a certain domain from search results (google, bing, yahoo, ask) and save the results to a text file. Proxy support.
Email Finder Another tool to collect emails registered on a certain domain from search results (google, bing, baidu, yandex). Can be used in combination with EmailHarvester as the two tools produce different results.
USCRAPPER Simple #python tool for extracting different information from web pages: - email addresses - social media links - phone numbers
Auto Scroll Search A simple extension for Chrome that automatically scrolls a web page until a certain word or phrase appears on it (or until the stop button is pressed).
GoGetCrawl Search and download archived web pages and files from Common Crawl and Wayback Machine.

Redirect lookup

Link Description
Redirect Detective tool that allows you to do a full trace of a URL Redirect
Wheregoes.com tool that allows you to do a full trace of a URL Redirect
Spyoffers.com tool that allows you to do a full trace of a URL Redirect

Cookies analyze

Link Description
Determines if website is not comply with EU Cookie Law and gives you insight about cookies installed from website before the visitors consent
Audits website cookies, online tracking and HTTPS usage for GDPR compliance
Webemailextractor.com extract email’s and phone numbers from the website or list of website
cookieserve.com detailed website cookie analyze
What every Browser knows about you This site not only shows what information your browser provides to third-party sites, but also explains how it can be dangerous and suggests what extensions will help to ensure your anonymity.
User Agent Parser User Agent String can be found, for example, in the logs of your site (or someone else’s), in the source code of some CLI tools for #osint and many other places.

Website’s files metadata analyze and files downloads

Link Description
Metagoofil finds pdf/xlsx/docx files and other documents on the site/server, analyzes their metadata, and outputs a list of found user names and email addresses
Aline a very simple tool that simply downloads files of a certain type, located on a certain domain and indexed by Google.
Goblyn tool focused to enumeration and capture of website files metadata. It will search for active directories in the website and so enumerate the files, if it find some file it will get the metadata of file
DORK DUMP Looks for Google-indexed files with doc, docx, ppt, pptx, csv, pdf, xls, xlsx extensions on a particular domain and downloads them.
VERY QUICK and SIMPLE metadata online editor and remover
AutoExif A simple script to read and delete metadata from images and ACVH videos.
DumpsterDiver Tool can analyze big volumes of data and find some “secrets” in the files (passwords and hardcoded password, SSH, Azure and AWS keys etc)
HACHOIR One of the most powerful tools for work with files metadata with the most detailed settings.
Link Description
SEO Spyglass Backlink checker
Neilpatel backlinks analyzer find out how many sites are linking to a certain web page
Webmeup Service for collecting information about backlinks to the site. Without registering an account it shows not everything, but a lot. To see more data (full text of link anchors, etc) for free, use the View Rendered Source extension:

Website analyze

Link Description
AppSumo Content Analyzer Enter the name of the domain and find out for free its three most popular publications in social networks (for six months, a quarter, a month, or the last day)
OpenLinkProfiles Get backlinks by website URL. Filter and sort backlinks by anchor, context, trust, LIS and industry.
Lookyloo Webapp allowing to scrape a website and then displays a tree of domains calling each other (redirects, frames, javascript, css, fonts, images etc)
Core SERP Vitals adds a bit of information from CrUX API to the standard Google search results
BGPView web-browsing tool and an API that lets you gather information about the current state and structure of the internet, including ASNs, IP addresses, IXs, BGP Downstream & Upstream Peers, and much more
Terms of Service Didn’t Read find out what interesting privacy and confidentiality clauses are in the license agreements of popular websites and apps
analyzeid.com find websites with the same owner by domain name. Checking for email, Facebook App ID and nameserver matches
MMHDAN Calculate a fingerprint of a website (HTML, Favicon, Certificate in SHA1, SHA256, MD5, MMH3) and create the quick links to search it in IOT search engines
Favhash Simple script to calculate favicon hash for searching in Shodan.
Favicon Hasher Favicon.ico files hashes is a feature by which you can find domains related with your target. This tool generates hashes for all favicon.ico on the site (+ quick links to find them in Shodan, Censys, Zoomeye)
FavFreak #python tool for using favicon.ico hashes for finding new assets/IP addresses and technologies owned by a company.
Hackertarget 14 tools for gathering information about domain using Hackerarget API (http://hackertarget.com)
AnalyticsRelationships command line #tool for to search for links between domains by Google Analytics ID
UDON #go tool to find assets/domains based by Google Analytics ID
Pidrila Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer
Adsense Identiicator Finder this service finds other sites belonging to the same owner or company by Google Adsense ID
Smart ruler Simple #GoogleChrome extension (200 000 users) for those who like to explore the design of different sites
SourceWolf A tool for analyzing #javascript files. It finds all the variables, endpoints and social media links mentioned in the code in just a few seconds.
Stylifyme Tool for analyzing the style characteristics of a particular website. In the context of #osint, it will help when analyzing links between two sites (common rare design features may indicate common owner)
Content Security Policy (CSP) Validator Online service for checking the headers and meta tags of websites for compliance with security standards. It can help determine if a site is vulnerable to common vulnerabilities (XSS, clickjacking, etc).
Nibbler Free tool for comprehensive website analysis on more than ten different parameters.
WebHackUrls The simplest tool for URl recon with filter by keyword and saving results to file.
Visual Site Mapper A free online tool for generating site maps in graph form. Allows you to visually see the links between the pages of a website and estimate their number.
WEBPALM Command-line tool that traverse a website and generate a tree of all its webpages. Also it can scrape and extract data using #regex.

Domain/IP investigation

Link Description
@UniversalSearchBot telegram bot finding information about email, russian phone number, domain or IP
Domain Investigation Toolbox gather information about domain with 41 online tools from one page.
GoFindWhois More than 180 online tool for domain investigaions in one. What’s not to be found here: reverse whois, hosting history, cloudfare resolver, redirect check, reputation analyze.
Spyfu tool to collect seo information about the domain, which provide a lot of data partly for free
Spyse.com domain investigation toolbox
Spyse CLI command line client for Spyse.com
Domaintracker webapp and mobile app, which helps you keep track of payment deadlines (expired dates) for domains (sends push notifications and notifications to email)
Sputnik Chrome extension for quick gathering info about IP, domain, hash or URL in dozens of different services: Censys, GreyNoise, VirusTotal, Shodan, ThreatMiner and many others.
Whois Domain Search Tool A tool that allows you to query whois data for a site name in several domain zones at once.
IP Neighbors Find the hosting neighbors for a specific web site or hostname
The Favicon Finder Instantly finds the favicon and all .ico files on the site, and then generates links to download them quickly.
HostHunter Tool to efficiently discover and extract hostnames providing a large set of target IP addresses. HostHunter utilises simple OSINT techniques to map IP addresses with virtual hostnames
Tor Whois
Dnstwister The anti-phishing domain name search engine and DNS monitoring service
EuroDNS Free whois data search service for long lists of domains (250 can be searched at a time, total number unlimited). The results show the status of the domain and a quick link to the full whois data.
Source code search engine (315 million domains indexed). Search by title, metadata, javascript files, server name, location and more. Source code search engine (315 million domains indexed). Search by title, metadata, javascript files, server name, location and more.
Dnstwist Command line anti-phishing domain name search engine and DNS monitoring service
Ditto Dsmall tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered
RADB Provides information collected from all the registries that form part of the Internet Routing Registry
IPinfo map paste up to 500,000 IPs below to see where they’re located on a map
Whois XML API Whois history database
Hakrawler discover endpoints and assets
Passive DNS search
Talos Intelligence Mail Server Reputation
netbootcamp.org/websitetool.html access to 74 #tools to collect domain information from a single page
HTTPFY A fast #nodejs tool for gathering information about a domain or a list of domains. Response time, main page word count, content type, redirect location and many other options (view pic).
Hussh shell script for domain analyzing
OPENSQUAT Search newly registered phishing domain by keywords; Check it with VirusTotal and Quad9 DNS;
Check any website to see in real time if it is blocked in China
@iptools_robot univsersal domain investigation Telegram bot
Raymond Framework for gathering information about website
Pulsedive A partially free website research tool. Collects detailed information about IP, whois, ssl, dns, ports, threats reports, geolocation, cookies, metadata (fb app id etc). Make screenshots and many others
Striker Quick and simple tool for gathering information about domain (http headers, technologies, vulnerabilities etc).
SiteBroker Domain investigation #python tool
DNSlytics find out everything about a domain name, IP address or provider. Discover relations between them and see historical data
FindMyAss (HostSpider) Domain investigations toolkit
Drishti Nodejs toolkit for OSINT
passivedns.mnemonic.no DNS history search by IP-adress or by domain name
Gotanda Google Chrome extension. 56 tools for domain, ip and url investigation in one
Ip Investigation Toolbox type ip-adress once and gather information about it with 13 tools
Crab Well done and well designed port scanner, host info gatherer (include whois).
MayorSecDNSScan Identify DNS records for target domains, check for zone transfers and conduct subdomain enumeration.
Cert4Recon Very quick and simple subdomain enumeration using http://crt.sh.
Miteru Experimental phishing kit detection tool. It collects phishy URLs from phishing info feeds and checks each phishy URL whether it enables directory listing and contains a phishing kit (compressed file) or not
Web Check Get detailed report about IP or domain: Location SSL Info Headers Domain and host names Whois DNS records Crawl riles Cookies Server Info Redirects Server status TXT Config

Subdomains scan/brute

Link Description
SubDomainsBrute Very(!) fast and simple tool for subdomain bruteforce. It find 53 subdomains, scanned 31160 variations in 31 seconds.
Anubis Subdomain enumeration and information gathering tool
Turbolist3r An improved and accelerated version of famous sublist3r. Looks for subdomains in 11 sources (see picture). It’s possible to apply bruteforce (flag -b)
DomE Fast and reliable #python script that makes active and/or passive scan to obtain subdomains and search for open ports. Used 21 different #OSINT sources (AlienVault, ThreatCrowd, Urlscan io etc)
CloudBrute Tool to find target infrastructure, files, and apps on the popular cloud providers
dnsReaper TwiSub-domain takeover tool
ALERTX Very fast #go tool for search subdomains. For example, it fin 111 http://tesla.com subdomains in 0.003 seconds.
Columbus Project A fast, API-first subdomain discovery service with advanced queries.

Cloudfare

Link Description
Cloudmare Simple tool to find origin servers of websites protected by #Cloudflare, #Sucuri or #Incapsula with a misconfiguration DNS
CloudUnflare Reconnaissance Real IP address for Cloudflare Bypass

Databases of domains

Link Description
RansomLook “Yet another Ransomware gang tracker” (c) Group profiles, recent updates, forums and markets list + some stats. A real treasure cybercrime researchers.
Whois Freaks API which allows you to search Whois-database (430M+ domains since 1986) by keyword, company name or owner name
Expireddomains.net lists of deleted and expired domains (last 7 days)
InstantDomainSearch search for domains for sale
WhoisDS.com database of domains registered in the last day
API Domaindumper An interesting tool for researchers of IT history and data journalists. Just an FREE API that shows how many sites were registered in each domain zone on a given day (since January 1, 1990)
ptrarchive.com search by 230 billion DNS records retrieved from 2008 to the present.
PeeringDB Freely available, user-maintained, database of networks, and the go-to location for interconnection data.
IQWhois Search whois data by address, city, name, surname, phonenumber

Website traffic look up

Link Description
SimilarWeb Detailed website traffic analyze
Alexa Keyword Research, Competitive Analysis, Website Ranking
HypeStat Analyzer Plugin Shows estimate daily website traffic, Alexa rank, average visit duration and used techhologies.
vstat.info Getting detailed info about website traffic (sources, keywords, linked sites etc)
w3snoop Getting detailed information about website: - general domain info; - valuation ($); - popularity; - traffic; - revenue; - security (WOT rating, McAfee WebAdvisor Rating etc) and more.

Website technology look up

Link Description
WhatRuns extension, which discover what runs a website: frameworks, Analytics Tools, Wordpress Plugins, Fonts.
Built With
w3techs
Hexometer stack checker
Web Tech Survey
Awesome Tech Stack
Netcraft Site Report
Wappalyzer
Larger.io
CMLabs Tools
Snov.io technology checker type name of #webdev technology (jquery, django, wordpress etc) and get the list of websites, which used it.

Source Code Analyzes

Link Description
View Rendered Source The standard browser source code view did not display the actual source code. View Rendered Source extension solve this problem. It shows the html code after all JavaScript functions (full page load, page scrolling, and other user actions) are executed
Retire.js GoogleChrome extension for scanning a web app for use of vulnerable JavaScript libraries
OpenLink Structured Data Sniffer GoogleChrome extension which reveals structured metadata (Microdata, RDFa, JSON-LD, Turtle, etc.) embedded within HTML documents.
SIngle File GoogleChrome, Firefox and MicrosoftEdge addon to save webpage in single html file
Dirscraper OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website
Ericom Page Risk Analysis Get a detailed report with links to CSS, Javascript, Fonts, XHR, Images and domains web pages
SecretFinder Tool for find sensitive data (apikeys, accesstoken,jwt,..) or search anything with #regexp on #javascript files
Copy all links and image links to CSV or JSON Download all links from current webpage in CSV (for open in #Excel) or JSON
ArchiveReady OSINT specialists most often use various web archives to analyze other people’s sites. But if you want your descendants to be able to find your own site, check whether the code of its pages is understandable for crawlers of web archives.
Talend API Tester Free Edition tool that allows to quickly test requests to different APIs directly in the browser, send requests and inspect responses, validate API behavior
uMatrix Shows all the domains to which the site connects at runtime and allows you to block different sources at will. Useful for ad blocking, tracking, data collection, and various experiments.
Open Link Structured Data Sniffer View webpage details info in Google Chrome: RDFa linked data (http://rdfa.info) POSH (Plain Old Semantic HTML) Microdata RSS
REGEXPER A simple and free online tool for visualizing regular expressions. Just copy the regular expression to the site and convert it into a detailed and understandable graphical scheme.
LinkFinder Simple tool discover endpoints and their parameters in JavaScript files. It’s possible to discover individual URLs, groups of URLs and directories. Supports regular expressions.
Link Description
Broken Link Hijacker Crawls the website and searches for all the broken links (in “<a href” and “<img src”).
Broken Link Checker shows which links on the page are giving out errors. It helps to find sites that have been working recently but are no longer working.
Open Multiple Links ☷ One Click
Check my links Old and large lists of tutorials or tools often have many inactive links. This extension will help mark inactive links in red and save you time checking them out.

URL unshorteners

Link Description
Get Link Info
Unshorten.me
Urlxray
Unshorten.it

Text Analyze

Link Description
Headlines.Sharethrough.com analyzes headlines according to four indicators (strenghts, suggestions, engagement, impression) and gives a score from 1 to 100
Wordtune.com Provide a link to the text of the article or upload a PDF document. In response, the service will give a brief retelling of the main ideas of the text.

Sound indefication and analyze

Link Description
Online Loudness Meter allows to estimate the volume of noises in the room or to analyze the volume of sounds in a recording file.
Voice Stress Test tool analyzes the voice and determines a person’s stress level.
AHA Music A very simple tool that helps you determine what track is playing in the current browser tab. What I like best about it is that it works when the sound is turned OFF (albeit with a slight delay)
MP3 Spectrum Analyzer

Sound search and analyze

Link Description
soundeffectssearch.com find a sound library
Vocal Remover An AI-based service that removes vocals from a song, leaving only the music. It works amazingly well.

Video editing and analyze

Link Description
Scene detection Determine the timecodes on which there is a change of scenery in the video and significantly save time watching it
Get text from video Transcribe uploaded video file
EfficientNetV2 DeepFake Video Detector
Downsub Extract subtitles from video
Subtitlevideo Extract subtitles from video
FlexClip Get video metadata
Pix2Pix-Video Edit video by prompt
unscreen.com remove the background from an uploaded video
TextGrab Simple #Chrome extension for copying and recognizing text from videos (#YouTube, #GoogleMeetup etc.)
Lossless Cut #javascript #opensource swiss army knife for audio/video editing.
Movio.la Create spoken person video from text
Tagrum Upload a video file to the site or leave a link to the video. Wait a few minutes. Get a subtitled version of the video in English (other languages will probably be available later).
Scene Edit Detection A tool to help speed up and automate your video viewing. It highlights the frames where a new scene begins and allows you to quickly analyze the key semantic parts of the video.

Image Search and Identification

Reverse Image Search Engines and automation tools

Link Description
News Myseldon from the photo looks for famous and little-known (like minor officials) people
Ascii2d.net Japanese reverse image search engine for anime lovers expose image properties, EXIF data, and one-click download
Searchbyimage.app search clothes in online shops
Aliseeks.com search items by photo in AliExpress and Ebay
lykdat.com clothing reverse image search services
IQDB.org reverse image search specially for anime art
pic.sogou.com chinese reverse image search engine
Same Energy reverse image search engine for finding beautiful art and photos in the same style as the original picture
Revesearch.com allows to upload an image once and immediately search for it in #Google, #Yandex, and #Bing.
Image Search Assistant searches for a picture, screenshot or fragment of a screenshot in several search engines and stores at once
Pixsy allows to upload pictures from computer, social networks or cloud storages, and then search for their duplicates and check if they are copyrighted
EveryPixel Reverse image search engine. Search across 50 leading stock images agencies. It’s possible to filter only free or only paid images.
openi.nlm.nih.gov Reverse image search engine for scientific and medical images
DepositPhotos Reverse Image Search tool for reverse image search (strictly from DepositPhoto’s collection of 222 million files).
Portrait Matcher Upload a picture of a face and get three paintings that show similar people.
Image So Search Qihoo 360 Reverse Images Search
GORIS Command line tool for Google reverse image search automation. It can find links to similar pictures by URL or by file.
Pill Identifier How to know which pill drug is pictured or accidentally found on the floor of your home? Use a special online identifier that suggests possible variations based on colour, shape and imprint.
Logobook help to see which companies have a logo that looks like a certain object. You can use the suggested variants to geolocate photo.
Immerse Zone Reverse Image Search Engine. Search by uploaded image or URl; Search by sketch (it can be drawn directly in the browser); Search by quote (can be selected from the catalog)
Lexica Download the image to find thousands Stable Diffusion AI artworks that are as similar to it as possible. You can also search by description and keywords.
Numlookup Reverse Image Search The results are very different from Yandex Images and Google Lens search results, as the service only searches for links to exact matches with the original picture.
Google Reverse Image Search Fix
Google lens is not too user friendly for investigations. But this tool will help you get back to the old Google Image Search. (in case of problems, upload images to http://Postimages.org)

Image editing tools

Link Description
Theinpaint One of the best (and free) online photo object removal tools I’ve ever seen. Just highlight red on the photo and press Erase. Then do it again, and again, and again (until you get the perfect result).
GFPGAN Blind face restoration algorithm towards real-world face images. Restores blurry, blurred and damaged faces in photos.
Remini AI Photo Enhancer Tool allows to restore blurry faces to photos.
Letsenhance Online #AI tool to increase image resolution (x2, x4, x8) without quality loss. 100% automatic. Very fast.
Media IO Watermark Remover Select the area and mark the time frame in which you want to remove the object. Works for barely visible watermarks as well as for bright and large objects.
Remove.bg Remove background from image with AI
Watermarkremover Remove watermark from image with AI
Instruct Pix2pix Image editing with prompt

Other Image Search Engines

Link Description
SN Radar VK Photo Search
BBC News Visual Search Enter the name of the item and the service will show in which news stories and at what time interval it appeared

Image Analyze

Link Description
Aperislove Online steganography tool: PngCheck,Strings,Foremost,Binwalk,ExifTool,Outguess,Steghide,Zsteg,Blue/Green/Red/Superimposed
Sherloq open source image #forensic toolset made by profesional photograph Guido Bartoli
Image Color Picker pick color (HEX or RGB) from image or website screenshot
Find and Set Scale From Image
Image Forensic (Ghiro Online)
compress-or-die.com/analyze get detail information about images (exif, metatags, ICC_Profile, quantanisation tables)
aperisolve.fr Deep image layers (Supperimposed, Red, Green, Blue) and properties (Zsteg, Steghide, Outguess, Exif, Binwalk, Foremost) analyze tool.
Dicom Viewer view MRI or CT photo online (.DCM files)
Caloriemama AI can identify the type of food from the photo and give information about its caloric value.
BetterViewer #Google Chrome extension for work with images. Right click on the picture and open it in new tab. You will get access to the following tools: Zoom, Flip, Rotate, Color picker, Extract text, Reverse image search, QR code scanner and much more
PhotoOSINT A simple extension that checks in a couple of seconds if a web page contains images that have not had their exif data deleted.
Perceptual image analysis Chrome extension for quick access to image #forensic tools: Metadata Levels Principal Component Analysis Slopes Error Level Analysis
Plate Recognizer Online tool to recognise number plates on blurred pictures. Sometimes it may not work accurately, but it is valuable for identifying the country when the flag is not visible.
Street clip AI, which determines from a photo the likelihood that it was taken in a particular country. (don’t forget to change the list of countries for each photo⚠️)

Exif Analyze and editing

Link Description
EXIF-PY get exif data of photos thrue command line
Exif.app Press “Diff check button”, upload two graphical images and get a comparison table of their metadata. The differences are highlighted in yellow
Image Analyzer Addon View all images on a page and expose image properties, EXIF data, and one-click download
Online metadata viewer and editor High-quality and well-made. Support docx, xlsx, msg, pptx, jpeg, vsd, mpp.
Scan QR Code While determining the location of the photo, sometimes the research of QR codes on the road poles, showcases and billboards helps a lot. This service will help to recognize a QR-code by a picture
Identify plans
Forensicdots.de find “yellow dots” (Machine Identification Code) in printed documents
Image Diff Checker
Vsudo Geotag Tool tool for mass geotagging of photos
exifLooter Quick #go tool to automate work with EXIF data
PYMETA A tool that searches (using Google, Bing etc.) for documents in the domain, analyses their metadata and generate a report in CSV format.
Link Description
Face Recognition facial recognition api for Python and the command line
Facial composite (identikit) maker
Search4faces.com search people in VK, Odnoklassniki, TikTok and ClubHouse by photo or identikit
Telegram Facemath bot searching for a face among the archive of photographs from public events in Kazakhstan

Font Indenfication

Link Description
WhatTheFont
WhatFontIs
Font Squirrel
Font Spring
Identifont.com
LikeFont.com

Cryptocurrencies

Link Description
Wallet explorer bitcoin wallet transaction history
Blockpath.com viewing bitcoin wallet transactions as a graph
Cryptocurrency alerting track spending and deposits in Bitcoin and Ethereum wallets
Learnmebitcoin.com find transactions between two Bitcoin adresses
Coinwink.com allows you to set up email notifications in case Bitcoin (or other #cryptocurrency) rate rises (falls) above (below) a certain value
BlockCypher Blockchain explorer for Bitcoin, Ethereum, Litecoin, DogeCoin, Dash. Getting into about address, transactions and block hashes, block number or wallet name.
Bitcoin Abuse Database A simple tool to check whether a Bitcoin address has been used for ransomware, blackmailers, fraudsters and view incident reports.
BreadCrumbs Enter your BTC or ETH wallet number to see a graph of associated wallets (with transaction history and lot of other details).
A TON of Privacy Tool for OSINT investigations on TON NFTs. Search info (balance, scam status etc) by Telegram nickname, phone number or domain.
Wallet Labels Search across more than 7.5M #Ethereum addresses labeled to easily identify wallets and exchange

Messengers

Telegram

Link Description
Telegago Telegram search engine
Commentgram CSE search by Telegram comments
Telegram Message Analyzer Export #Telegram chat (with Windows version of Telegram app) and get detailed analyze of it (message count, average message count per day, word frequency etc)
@SangMataInfo_bot forward a message from the user and find out the history of their name in Telegram
@tgscanrobot telegram bot to show which telegram groups a person is member of.
@telebrellabot telegram bot to show which telegram groups a person is member of (users in DB: 4019357, groups in DB: 1745).
Telegram Nearby Map Discover the location of nearby Telegram users on OpenStreetMap
Telescan search users in groups (and in which groups is the user) by id, username or phone number (if it’s in your contacts)
Tgstat one of the largest directories of Telegram channels, which has detailed information about the growth of the audience, its engagement and mentions of a particular channel in various sources.
Telescan search users in groups (and in which groups is the user) by id, username or phone number
Telegcrack.com search in telegra.ph
@VoiceMsgBot telegram bot to which you can send voice messages and it converts them into text
@transcriber_bot telegram bot, which can convert to text voice messages in 24 languages (view pic)
Telegramchannels.me Ratings of the 100 largest (by number of subscribers) #Telegram channels for different languages
@YTranslateBot type text or resend messages to Telegram bot for translate it.

WhatsApp

Link Description
whatsanalyze.com analyzes #WhatsApp group message statistics (world cloud, timeline, message frequency)
chatvisualizer.com another #WhatsApp chat analyzer.
Watools.io download whatsapp profile picture
WAGSCRAPER Scraps Whatsapp Group Links From Google Results And Gives Working Links (with group names and images)

Kik

Link Description
Kikusernames.com Kik messenger username search

Slack

Link Description
Slack Pirate tool developed in Python which uses the native Slack APIs to extract ‘interesting’ information from a Slack workspace given an access token

Skype

Link Description
vedbex.com/tools/email2skype finding a Skype account by email
SkypeHunt A tool for finding Skype users by nickname. Shows a list of users with date of birth, year of account creation, country, avatar link, and other information.

Code

Link Description
Grep.app regExp search in Github repositories
Searchcode.com Search engine for @github, @gitlab, @bitbucket, @GoogleCode and other source code storages
Code Repository Google CSE Google CSE for search 15 code repository services
Libraries.io search by 4 690 628 packages across 32 different package managers
The Scraper Simple tool for scrapping emails and social media accounts from the website’s source code.
CloudScraper Scrape URL’s of the target website and find links to cloud resources: Amazonaws, Digitaloceanspaces, Azure (windows net), Storage.googleapis, Aliyuncs
Complete Email Scraper Paste the link to the site and the bot finds the sitemap. The bot then goes through all the links on the site looking for email addresses (strings contains @).
Python Code Checker quick find errors in code
Github Search collection of Github investigation command line tools. Explore users, employes, endpoints,surveys and grab the repos
Sploitus exploit and hacker’s tools search engine
Leakcop service that monitors in real-time the illegal use of source code from certain repositories on Github
Github Artifact Exporter provides a set of packages to make exporting Issues easier useful for those migrating information out of Github
PublicWWW webpages source code search engine
SayHello #AI Search engine for developers. Type a question (e.g. how to do something) in normal human language and get code examples in response.
SourceGraph universal code search engine
NerdyData html/css/code search engine
YouCode Add free, privacy source code search engine with popular tech sites snippets in search results: Mozilla Developer Network; Github; W3 Schools; Hacker News; Read the Docs; Geek for Geeks
De4js HTML/JS deobfuscator
TIO RUN Run and test code written in one of 680 programming languages (260 practical and 420 recreational) directly in your browser
Explain Shell this site will help you quickly understand terminal commands-lines from articles, manuals, and tutorials
Codesandbox Great online environment for creating, testing, and researching written JavaScript tools (and #OSINT has many: social-analyzer, opencti, rengine, aleph).
shellcheck.net analyzes command-line scripts and explains in detail the errors found in them
Regular Expression Analyzer super tool for those who forget to leave comments on their code or have to deal with someone else’s code.
Developer search tool Take the art of copy and paste from Stack Overflow to a new level of speed and productivity
HTTP Cat free #API to get pictures with cats for different HTTP response codes
Run PHP functions online
HTTPIE.IO command-line HTTP client
The Missing Package Manager for macOS (or Linux)
Gitpod.io run code from repositories on Github directly in a browser
Thanks A simple script that analyzes the #opensource products used in your project and displays a list of links to pages for financial support for their developers.
The Fuck Simple app which corrects your previous console commands.
API Guesser Enter the API key or token to find out which service it can be used by.
Cheat․sh Timesaving tool that allows cheat sheets to be loaded directly into the command line (or Sublime Text/IntelliJ IDEA) using the curl command (run after installation).
NGINXconfig Online tool to configure stable and secure #nginx server. Select the options and then download the config files.
SPF Explainer Simple online tool that explain in details Sender Policy Framework (email authentication standard) record of target domain.
TLDR A tool that is a great time-saver when working with the command line. Enter “tldr command name” and get a brief description with examples of how to use it.
AWK JS AWK (script language) is a powerful command line tool for extracting data from texts and auto generating texts. For those who don’t use CLI yet (or just want to solve some problem without leaving browser) a good alternative is an online version of awk.
PLDB A huge knowledge base of 4050 programming languages. For each language you can see its place in the ranking, the number of users and repositories, the history of creation, linguistic features + huge lists of books and articles

Search engines

Link Description
fnd.io alternative search engine for the AppStore and iTunes
GlobalSpec Engineer Search Engine
URVX Based by Google Custom Search tool for searching in popular cloud storages service
Mac Address Search Tool search by full Mac adress, part of Mac adress (prefix), vendor name or brand name
Hashatit.com hastag searchengine. Search in twitter, instagram, facebook, youtube, pinterest
Goo.ne.jp beautiful japanese search engine
Peteyvid search engine for 70 video hosting sites
3DFindit tool for searching 3D models by 3560 3D CAD (computer aided design) and BIM (Building Information Model) catalogs.
Filechef tool for searching different type of files (videos, application, documents, audio, images)
Find Who Events Google CSE for finding events by location (keywords) in #Facebook, #Eventbrite, #Xing, #Meetup, #Groupon, #Ticketmaster, #Yepl, #VK, #Eventective, #Nextdoor
Listennotes Podcast Search Engine
thereisabotforthat.com search by catalog of 5151 bots for 17 different apps and platforms
BooleanStringBank over 430+ strings and 3553+ keywords
Google Unlocked browser extension uncensor google search results
Iconfinder.com Icons Search Engine
Google Datasets Search
Gifcities.org GIF Search Engine from archive.org
Presearch.org privately decentralized search engine, powered by #blockchain technology
milled.com search engine for searching through the texts of email marketing messages
Orion open-Source Search Engine for social networking websites.
PacketTotal .pcap files (Packet Capture of network data) search engine and analyze tool. Search by URL, IP, file hash, network indicator, view timeline of dns-queries and http-connections, download files for detailed analyze.
SearXNG Free internet metasearch engine which aggregates results from more than 70 search services. No tracking. Can be used over Tor
Yeggi 3D printer model search engine. There are more than 3 million 700 thousand objects in the database. There are both paid and free.
Memegine A search engine to find memes. Helps you find rare and obscure memes when Google fails.
ChatBottle A search engine to find the weirdest and most highly specialised chatbots for all occasions. There are over 150,000 bots in the database. Of these, 260 are chatbots related to cats for Facebook Messenger.
search3 New privacy search engine (no trackers + just a little bit of ads). With NFT search tab and cryptocurrencies realtime info tab
DensePhrase This tool searches phrase-level answers to your questions or retrieve relevant passages in real-time in 5 million Wikipedia articles.
metaphor systems A search engine with a new and unusual search method. This AI “trained to predict the next link (similar to the way GPT-3 predicts the next word)”. Enter a statement (or an entire dialog) and Metaphor will end it with the appropriate link.

Universal search tools

Link Description
S Search from command line in 106 different sources
searchall.net 75 fields for quick entry of queries to different search services on one page
Query-server A tool that can send queries to popular search engines (list in picture) and return search results in JSON, CSV or XML format.
Search Engines Scraper Collects search results in text files. It’s possible to search Google, Bing, DuckDuckGo, AOL and other search engines.
Trufflepiggy (Context Search) Search selected text in different search engines and sites from Google Chrome context menu.
Search Patterns A tool that analyzes autosuggest for #Google and #YouTube search queries (questions, prepositions, comparisons, and words starting with different letters of the alphabet).
Searcher A very fast and simple #go tool that allows you to collect search results from a list of keywords in the following search engines: Ask Bing Brave DuckDuckGo Yahoo Yandex
Startpage Parser Startpage.com search engine produces similar (but not identical) results to Google’s, but is much less likely to get banned. This #python tool allows to scrape big amounts of results without using proxies.
BigSearch Google Chrome and Firefox addon for quick access to dozens of online search tools: general search engines, video hosts, programming forums, translators and much more.

Darknet/deepweb search tools

Link Description
Onion Search
TheDevilsEye Search links in #darknet (.onion domain zone) from command line without using a Tor network.
Onion Search Engine (+maps, mail and pastebin)
KILOS Darknet Search Engine
Ahmia Link Graph Enter the name of the site in the .onion domain zone and see what other sites in the #onion domain zone it is associated with.
Pasta Pastebin scraper, which generates random paste addresses and checks if there is any text in them.
Dark Web Scraper Specify the start link and depth of crawl to research the .onion website for sensitive data (crypto wallets, API keys, emails, phone numbers, social media profiles).
Pastebin-Bisque Command line #python tool, which downloads all the pastes of a particular #Pastebin user.
Dark Fail List of several dozen services in the .onion domain (marketplaces, email clients, VPN services, search engines) with up-to-date links and status (online/offline)
Darkweb archive Free simple tool that allows you to download website files in the .onion domain zone as an archive with html, css, javascript and other files.

Public buckets search tools

Link Description
buckets.grayhatwarfare.com Amazon Public Buckets Search
osint.sh/buckets Azure Public Buckets Search

Bugbounty/vulnerabilities search tools

Link Description
Firebounty Bug bounty search engine
BugBountyHunting Bug bounty hunting search engine
Leakix A search engine for web services where common types of vulnerabilities have been found.
Network Entity Reputation Database (NERD) database of malicious entities on the Internet) It’s possible to search by IP, domain, subdomain, and other parameters, including even the country code (useful for large-scale research)
Inventory Raw Pm Search by best #cybersecurity tools, resources, #ctf and #bugbounty platforms.
RFC.fyi Browseable, searchable RFC index
Hacker News Algolia Hacker News search engine with filters. Useful for finding all mentions of a product or person.
Control Validation Compass Database of 9,000+ publicly-accessible detection rules and 2,100+ offensive security tests, aligned with over 500 common attacker techniques.
Hacking the Cloud Encyclopedia of the attacks/tactics/techniques that offensive security professionals can use on cloud exploitation (#AWS, #Azure, #GoogleCloud, #Terraform,)
ExploitAlert One of the largest searchable databases of information on exploits (from October 2005 to October 2022). Updated daily.

Filesharing Search Engines

I strongly recommend to use it strictly for research purposes and to search for files that cannot be legally purchased anywhere else. Respect the copyrights of others.

Link Description
Napalm FTP Indexer
Cloud File Search Engine search music, books, video, programs archives in 59 file-sharing sites (#meganz, #dropark, #turbotit etc)
Filesearching old FTP servers search engine with filter by top-level domain name and filetype
Snowfl.com torrent aggregator which searches various public torrent indexes in real-time
Torrents.me torrent aggregator with search engines and list of new torrents trackers
Open Directory Finder Tool for search files based by Google CSE
Mamont’s open FTP indexer
Orion Media Indexer Lightning Fast Link Indexer for Torrents, Usenet, and Hosters
Library Genesis “search engine for articles and books, which allows free access to content that is otherwise paywalled or not digitized elsewhere” (c)
Sunxdcc XDCC file search engine
Xdcc.eu XDCC search engine
URVX.com File storage search engine based by Google CSE
DDL Search search engine for Rapidshare, Megaupload, Filefactory, Depositfile, Fileserve and a lot of other file sharing sites
Sharedigger search files in popular file hosting services
Xtorx fast torrents search engine
Torrent Seeker torrents search engine
FreeWare web FTP file search ftp servers search engine
Search 22 access to 10+ ftp search tools from one page
Heystack Service for finding public files in Google Docs, Google Sheets and Google Slides. It’s possible to filter results by topic group and creation date.

Tools for DuckDuckGo

Link Description
DuckDuckGo !bangs extension that add DuckDuckGo bang buttons to search results and search links in the context menu
DDGR Search in DuckDuckGo via the command line: - export the results to JSON; - bangs support - location setting

Tools for Google

Link Description
Google Search Scraper Crawls Google Search result pages (SERPs) and extracts a list of organic results, ads, related queries and more. It supports selection of custom country, language and location
Googler command line google search tool
goosh.org online google search command line tool
Web Search Navigator extension that adds keyboard shortcuts to Google, YouTube, Github, Amazon, and others
Overload Search Advanced query builder in #Google with the possibilities: change the language and country of your search, disable safe search,disable personalization of search results (“filter bubble”)
Google Autocomplete Scraper One of the best ways to learn more about a person, company, or subject is to see what people are more likely to type in a search engine along with it.
SDorker Type the Google Dork and get the list of the pages, that came up with this query.
XGS allows you to search for links to onion sites using Google Dorks (site:http://onion.cab, site:http://onion.city etc)
Google Email Extractor Extract emails from Google Search Results
SEQE.me online #tool for constructing search queries using advanced search operators simultaneously for five search engines
Bright Local Search Result Checker shows what #Google search results look like for a particular query around the world (by exact address)
Auto Searcher One by one types words from a given list into the search bar of #Google, #Bing, or another search engine
2lingual.com google search in two languages simultaneously in one window
I search from allows you to customize the country, language, device, city when searching on Google
Anon Scraper Search uploaded files to AnonFile using Google
Search Commands Google Chrome extension provides a Swiss-knife style commands tool inside your browser’s address bar to enhance your search experience
Boolean Builder theBalazs Google Sheet to tool for constructing Google X-Ray search queries.
Yagooglesearch “Simulates real human Google search behavior to prevent rate limiting by Google and if HTTP 429 blocked by Google, logic to back off and continue trying” (c)
Google Word Sniper Simple tool to make easier Google queries with the advanced search operator AROUND().
OMAIL An online tool that extracts and validates emails from Google and Bing search results (by keyword or domain). Partly free (200 extracts per search)

IOT (ip search engines)

Link Description
Greynoise.io
fofa.so
Thingful.net
TheLordEye Tool that searches for devices directly connected to the internet with a user specified query. It returns results for webcams, traffic lights, routers, smart TVs etc
Netlas.io Search engine for every domain and host available on the Internet (like Shodan and Censys): - search by IP, domain DNS-servers, whois info, certificates (with filtering by ports and protocols) - 2500 requests/month free; - API and python lib “netlas”.
CriminalAPI Search engine for all public IPs on the Internet. Search by (for ex): html title, html meta tags and html keyword tags; whois city and country; ssl expired date; CVE id and MANY more
FullHunt Attack surface database of the entire Internet. Search info by domain, ip, technology, host, tag, port, city and more.
Hunter Search engine for security researchers (analog Shodan, Censys, Netlas). Search by domain, page title, protocol, location, certificates, http headers, ASN, product name and more.

Archives

Link Description
Quick Cache and Archive search quick search website old versions in different search engines and archives (21 source)
Trove australian web archive
Vandal extension that makes working with http://archive.org faster, more comfortable, and more efficient.
TheOldNet.com
Carbon Dating The Web
Arquivo.pt
Archive.md
Webarchive.loc.gov
Swap.stanford.edu
Wayback.archive-it.org
Vefsafn.is
web.archive.bibalex.org
Archive.vn
UKWA archive of more than half a billion saved English-language web pages (data from 2013)

Tools for working with web archives

Link Description
The Time Machine Tool for gathering domain info from WayBackMachine: - fetches subdomains from waybackurl; - search for /api/JSON/Configuration endpoints and many more (view pic)
Web Archives extension for viewing cached web page version in 18 search engines and services
EasyCache quick search website old versions in different search engines and archives
cachedview.b4your.com quick search website old versions in different search engines and archives
Internet Archive Wayback Machine Link Ripper Enter a host or URL to retrieve the links to the URL’s archived versions at http://wayback.archive.org. A text file is produced which lists the archive URLs.
Waybackpack download the entire #WaybackMachine archive for a given URL. You can only download versions for a certain date range (date format YYYYMMDDhhss)
TheTimeMachine Toolkit to use http://archive.org to search for vulnerabilities
Waybackpy If you want to write your own script to work with http://archive.org, check out the #python library Wayback Machine API. You can use it to quickly automate the extraction of all sorts of website data from the webarchive.
Archivebox Create your own self-hosted web archive. Save pages from browser history, bookmarks, Pocket etc. Save html, js, css, media, pdf and other files
WaybackPDF Collects a list of saved PDFs for the given domain from http://archive.org and downloads them into a folder.
Archive-org-Downloader A simple #python script for downloading books from http://archive.org in PDF format. You can adjust image resolution to optimize file size and work with link lists.
WayMore Search archived links to domain in Wayback Machine and Common Crawl (+ Urlscan and Alien Vault OTX).
Wayback Keywords Search A tool that allows you to download all the pages of a particular domain from http://archive.org for a particular month or day, and quickly do a keyword search on those pages.

Tools for working with WARC (WebARChive) files

Link Description
Warcat My favorite (because it’s the easiest) tool for working with Warc files. It allows you to see the list of files in the archive (command “list”) and unpack it (command “extract”).
Replayweb If the warc file is small, you can view its contents with this extreme simple online tool. Also it’s possible to deploy ReplayWeb on your own server
Metawarc Allows you to quickly analyze the structure of the warc file and collect metadata from all the files in the archive
Webrecorder tools Archiving various interesting sites is a noble and useful activity for society. To make it easier for posterity to analyze your web archives, save them in Warc format with an online tool
GRAB SITE Af you need to make a Warc archive out of a huge site with a lot of different content, then it is better to use this #python script with dozens of different settings that will optimize the process as much as possible.
har2warc Convert HTTP Archive (HAR) -> Web Archive (WARC) format

Archives of documents/newspapers

Link Description
UK National Archives search in the catalogue of United Kingdom “The National Archives”
Directory of Open Access Journals Search by 16 920 journals, 6, 588, 661 articles, 80 lanquages, 129 countries
National Center for Biotechnology unique tool to search 39 scientific databases (Pubmed, SRA, OMIN, MedGen etc) from one page
industrydocuments.ucsf.edu digital archive of documents created by industries which influence public health (tobacco, chemical, drug, fossil fuel)
Offshor Leaks Search through various databases of leaked documents of offshore companies
Vault.fbi.gov Vault is FOIA Library, containing 6,700 documents that have been scanned from paper
Lux Leaks — the name of a financial scandal revealed in November 2014 by a journalistic investigation. On this site you will find documents related to more than 350 of the world’s largest companies involved in this story
RootsSearch Quick search service for five sites with genealogical information (as well as births, weddings and deaths/burials)
Newspaper navigator Keyword search of a database of 1.5 million newspaper clippings with photos from the Library of Congress database. It’s possible to filter results by year (1900 to 1963) and state.
Anna’s Archive Search engine of shadow libraries: books, papers, comics, magazines (IPFS Gateway, Library Genesis etc).
World Cat Enter the name of the paper book and find out which public libraries near you can find it. Works for the USA, Australia and most European countries.
DailyEarth Worldwide catalog of daily newspapers (since 1999). 52 USA states. 73 countries.
visLibri World’s largest search engine for old, rare & second-hand books. Search across 140+ websites worldwide.(Ebay, Amazone, Booklooker, Catawiki, Antiqbook etc)
FACTINSECT Free online tool for automating #factchecking. In order to confirm or deny some information, the service provides several arguments with references to information sources.

Science

Link Description
ConnectedPapers A tool for gathering information about academic papers. It shows a large graph of references to other articles that are present in the text and clearly see the connections between different authors.
AcademicTree A tool for finding links between scientists (including little-known ones). 150000+ people in database (in all sections combined). Select a field of science. Enter a person’s name. See a tree of their teachers and students
clinicaltrials.gov 433,207 research studies in 221 countries. For people who have a difficult-to-treat disease, this registry will help them learn about recently developed drugs and treatments and get contacts of organizations that are researching a particular disease.
Elicit AI research assistant. Find answers to any question from 175 million papers. The results show a list of papers with summaries + Summary of the 4 most relevant papers.
ExplainPaper AI is a tool to make reading scientific articles easier. Highlight a phrase, sentence or whole paragraph to get its simple and detailed explanation with #AI.
Bielefeld Academic Search Engine Search across 311 million 481 thousands documents (most of them with free access). Search by email, domain, first/last name, part of address or keywords.
Scite.ai Enter the article title or DOI to get a list of publications that cite it. Results can be filtered by type (book, review, article), year, author, journal and other parameters.
Scholarcy AI papers summarizer. Upload the file or copy the access URL to the article to get: Key concepts; Abstract; Synopsis; Highlights; Summary; Links to download tables from paper in Excel.
Research Rabbit Find articles and view its connections - similar works, references, citations and more
Trinka A partly free online tool to help you prepare a research paper for publication: AI Grammar; Checker (made especially for scientific papers); Consistency checker; Citation checker; Plagiarism checker; Journal founder
Zendy.io Discover academic journals, articles, & books on one seamless platform. Search keyword, authors, titles ISBN, ISSN etc
Scinapse.io Academic Search Engine. Search by 48000 journals
Argo Scholar A tool for analysing connections between research articles
INCITEFUL Enter paper title, DOI, PubMed URl, arXiv URL to build a graph of links between the research article and other publications (who it cites and who cites it)
PaperPanda In recent years it has become increasingly difficult to find scientific articles. To download their full versions, websites require registration or payment. This extension finds freely available PDF versions of articles in one click.

Datasets

Link Description
Afrobarometer huge database of the results of sociological surveys conducted in African countries over the last 20 years
Arabbarometer database of the results of sociological surveys conducted in the Arab countries of Africa and the Middle East in 2007-2018
dataset.domainsproject.org dataset of 616 millions domains (16GB!)
Stevemorse.org Searching the Social Security Death Index
UK Census Online Database of deaths, births, and marriages. From 1841 to the beginning of the 21st century. Only the first and last names can be searched.
IPUMS Variable Search A service for finding variables in data from sociological surveys in 157 countries from 1960 to 2022. You can find completely rare and surprising things there, like a survey to count the number of bananaboat owners in Zambia.

Passwords

Link Description
CrackStation.net password hash cracker
Leak peek by pasword search part of email and site, where this password is used
Reference of default settings of different router models (IP, username, password)
Many Passwords Default passwords for IoT devices and for web applications (for ex. MySQL and PostgreSQL admin panels)
PassHunt Command line tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords
BugMenot login and passwords for public accounts in different services
Search-That-Hash Python tool for automating password hash detection (based on Hashcat). It can work with single strings as well as with long lists of hashes from a text file. Useful for investigating data leaks

Emails

Link Description
geeMail User Finder A simple tool to check the validity of a Gmail account. You can check a single email or a list of emails.
Breachchecker.com history of data leaks associated with a particular email address
Metric Sparrow email permulator
snov.io email finder find emails of company employees by domain name.
Mailfoguess tool create a lot of possible local-part from personal information, add domain to all local-part respecting the conditions of creation of mail of these domains and verify these mails
Hunter.io can link to an article to find its author and his email address
Mailcat find existing email addresses by nickname in 22 providers, > 60 domains and > 100 aliases
H8mail email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt’s “Collection1” and the infamous “Breach Compilation” torrent
MailBoxLayer API free api for email adress checking
EmailHippo Simple free online tool for check the existence of a particular email address and evaluate its reliability on a 10-point scale.
Spycloud.com check for a particular email in data leaks. Shows how many addresses registered on a particular house have been scrambled
Gravatar check Just enter email and see what the person’s Gravatar avatar looks like.
Email Permutator Google Sheet table that generate 46 variants of user email by first name, last name and domain
Have I Been Sold? The service checks if the e-mail address is included in one of the databases, which are sold illegally and are used for various illegal activities such as spamming.
mailMeta Simple tool to analyze emails headers and identify spoofed emails.
EmailAnalyzer Tool for analyzing .eml files. It analyzes and checks with VirusTotal links, attachments and headers.
Avatar API Enter email address and receive an image of the avatar linked to it. Over a billion avatars in the database collected from public sources (such as Gravatar, Stackoverflow etc.)
Email Finder Enter a person’s first and last name, domain name of a company or email service, and then get a list of possible email addresses with their status (free).
Defastra Assesses the reliability of a phone or email on a number of different parameters. Displays social network profiles registered to the number or email. Partially free
OSINT Industries Enter emai/phonel and get a list of accounts that may be associated with it (accounts for which this email was used to register or those where the email in the profile description)
What Mail? Simple #python tool for email headers analyze and visualize them in a table.
ZEHEF A simple #Python tool that collects information about an email. It checks its reputation in different sources and finds possible accounts in different social networks (some functions may not work properly, the tool is in development).
Castrickclues Online tool to get Google and Skype account information by email, phone number or nickname (free). + search for accounts in other services (paid).

Nicknames

Link Description
@maigret_osint_bot check accounts by username on 1500 sites. Based on maigret CLI tool
Analyzeid.com Username Search view “Summary” of accounts found: list of names used, locations, bio, creations dates etc.
NEXFIL Search username by 350 social media platforms
Spy Just another very quick and simple account checker by username (210 sites in list).
Profil3r search for profiles in social networks by nickname
Aliens eye Find links to social media accounts in 70 websites by username
Thorndyke Checks the availability of a specified username on over 200 websites
Marple It collect links contains nickname/name/surname in url from Google and DuckDuckGo search results.
Holehe check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function
UserFinder tool for finding profiles by username
Snoop Search users profile by nickname
Pyosint Search for usenames form a list of 326 websites. Scrap a website to extract all links form a given website. Automate the search of subdomains of a given domain from diffrent services
Alternate Spelling Finder When searching for information by name, remember that the same name can be recorded in documents and files very differently, as people of different nationalities perceive sounds differently.
Translit.net Sometimes it happens that a person’s name is written in Cyrillic, but you can find a lot of info about him in Google if you type his transliteration “Ivan Ivanov”. This tool will come in handy when working with Russian, Belarusian, Ukrainian, Armenian names
NAMINT Enter first, middle (or nickname) and last name, and press Go! to see possible search patterns and links (Google, Yandex, Facebook, Twitter, Linkedin and others social media)
Username Availability Checker Simple online tool that checks if a user with a certain nickname is present on popular social networks. Very far behind Maigret/WhatsMyName in terms of number of services, but suitable for a quick check.
BlackBird - Search username across 200+ sites; - API username check (Protonmail, PlayerDB, Hackthebox etc); - Check archived Twitter accounts.
Nameberry When you are looking for mentions of a person on social media, remember that one name can have dozens of different spelling variations. Ideally, you should check them all, or at least the most popular ones.
WhatsMyName With Holehe and Maigret, WhatsMyName is one of the most powerful Username enumeration tools.
Go Sherlock #GO version of Project Sherlock (https://github.com/sherlock-project/sherlock…). It’s quite fast. Checks if a user with a certain nickname exists on a thousand sites in a few tens of seconds.
User Searcher User-Searcher is a powerful and free tool to help you search username in 2000+ websites.
Digital Footprint Check Similar to WhatsMyName but with options to extend search into email, phone and social handles.

Phone numbers

Link Description
USA Telephone Directory Collection 3512 of paper “yellow” and “white” pages available for download in PDF published from 1887 to 1987
Oldphonebook USA phonenumbers database from 1994 to 2014
Phomber Get information about phone number with command line.
Numverify API free api for global phone number lookup and validation
FireFly Get information about phone number using Numverify API
PhoneNumber OSINT Simple tool for gathering basic information about phone numbers (country code, timezone, provider)

Universal Contact Search and Leaks Search

Link Description
DaProfiler Get emails, social medias, adresses of peoples using web scraping and google dorking
SingleHire Tool for search contacts by full name, location and job title. Shows phones, emails, #Linkedin, #Facebook, #Twitter and other social media profile
Social Analyzer tool for searching nickname profiles on more than 300 sites
SovaWeb web version of a famous Russian bot in Telegram for searching by email, nickname, IMSI, IMEI, MSISDN, BTS, IP, BSSID
BehindTheNames when conducting an in-depth search for information about a person, it is important to check the different pronunciations of their name and diminutives. This service will help you find them
My CSE for search in 48 pastebin sites
Psbdmp.ws search sensitive user data by 25 759 511 pastebins
Cybernews RockYour2021 check if your data has been leaked
GoFindWho People Search More than 300 tools for gathering information about people in one. Search by name, username, phone, adress, company name.
That’s them people search
Anywho Search for people in #USA. Enter first and last name to get age, address, and part of phone number (free)
Usersearch.org search people by nickname, phone or email
Ellis Island online searchable database of 65 million arrivals to #NewYork between (late 19th and early 20th century).
recordsearch.naa.gov.au National archives of #Australia
SpyDialer Free search contact information by phone number, name, address or email
Decoding Social Security Numbers in One Step
Inmate Database Search
Scamdigger.com search in #scammers database by name, IP-adress, email or phone
Cloob.com Iranian people search
SlaveVoyages.org the Trans-Atlantic and Intra-American slave trade databases are the culmination of several decades of independent and collaborative research by scholars drawing upon data in libraries and archives around the Atlantic world.
FEI Database Person Search If the person you are researching is related to equestrian sports, check the FEI database for information about him or her. There you can find cards of riders, horse owners, grooms and fans around the world.
Name Variant Search Type in a name and get a list of possible spelling options (+ quick links to Google, DuckDuckGo and Facebook searches for each option)

Sock Puppets

Link Description
Rug Extreme simple tool for generating random user data.
Face Generator Face Generator for creating #sockpuppets. Customize gender, age, head position, emotions, hair and skin color, makeup and glasses.
2,682,783 free AI generated photos
VoiceBooking fake voice generator
ThisXDoesNotExist collection of more than 30 services that generate various items using neural networks.
TheXifer add fake metadata to photo
GeoTagOnline add fake geotags to photo
Fake ID Identity Random Name Generator generate a random character with a fake name for games, novels, or alter ego avatars of yourself. Create a new virtual disposable identity instantly.
@TempMail_org_bot telegram bot for quick creation of temporary email addresses (to receive emails when registering on different sites)
Text2img text to image AI generator
Face Anonimyzer Upload a face photo and get set of similar AI generated faces.
AI video generator Type the text (video script). Choose a character and script template. Click the “Submit a video” button. Enter your registration data and wait for the letter with the result
Movio.la Create spoken person video from text
AI Face maker Just draw a person face (note that there is a separate tool for each part of the face) and the neural network will generate a realistic photo based on it.
SessionBox multi-login browser extension
MultiLogin multi-login browser extension
FreshStart multi-login browser extension
BoredHumans Another tool for creating non-existent people. AI was trained using a database of 70,000 of photos of real humans. I like this service because it often makes very emotional and lively faces.
Deepfakesweb Create deepfake videos ONLINE
Deep Face Live Real-time face swap for streaming and video calls
Fakeinfo Online screenshot generator of fake YouTube channels, posts/profiles on Facebook, Instagram, TikTok, Twitter, chats on Telegram, Hangouts, WhatsApp, Line, Linkedin.
ThisPersonDoesNotExistAPI (unofficial) #Python library that returns a random “doesnotexist” person picture generated by AI (with site http://thispersondoesnotexist.com)
This Baseball Player Does Not Exist A non-existent personality generator that generates people who look amazingly natural.
Cardgenerator.org tool for generating valid bank card numbers (useful for registering accounts to use free trial versions or to create sock puppets)
VCC Generator tool for generating valid bank card numbers (useful for registering accounts to use free trial versions or to create sock puppets)
CardGuru tool for generating valid bank card numbers (useful for registering accounts to use free trial versions or to create sock puppets)
CardGenerator tool for generating valid bank card numbers (useful for registering accounts to use free trial versions or to create sock puppets)
Faker Python tool for generating fake data in different languages. Generate addresses, city names, postal codes (you can choose the country), names, meaningless texts, etc.
Generate Data Free tool for generating fake data. Useful for testing scripts and applications. The result can be downloaded in CSV, JSON, XML, SQL or JavaScript (PHP, TypeScript, Python) arrays.

NOOSINT tools

Link Description
Annotely Perfectly simple tool for putting an arrow on a screenshot, highlighting some detail or blurring personal data.
Pramp The service allows you to take five free (!) online #coding and #productmanagement interview training sessions with peers
RemindWhen Simple app that reminds you on email if your favorite country opens for tourists from your country.
Web–proxy free web proxy
Google Docs Voice Comments simple trick to save time. Voice comments in GoogleDocs, Sheets, Slides, and Forms.
Text to ASCII Art Generator (TAAG) This site will help you make atmospheric lettering for your command line tool or README.
Snow A very simple add-on that speeds up and simplifies the formatting of #GoogleDocs. “Show” shows non-printable characters (spaces, tabs, page breaks, indents, etc.)
Wide-band WebSDR Online access to a short-wave receiver located at the University of Twente. It can be used to listen to military conversations (voice or Morse code)
Crontab guru Online “shedule expression” editor (for setting task times in Crontab files).
Chmod calculator Calculate the octal numeric or symbolic value for a set of file or folder permissions in #Linux servers. Check the desired boxes or directly enter a valid numeric value to see its value in other format
Ray So A simple tool that allows you to beautifully design code as a picture (for social media post or article).
Windows Event Collection A tool to help you understand #Windows, #SharePoint, #SQLServer and Exchange system security logs.
Hack This Page A simple extension that allows you to edit the text of any web page.
Soundraw AI music generation
Screenshot - Full Page Screen Capture record a video of part of the screen using a very easy-to-use browser extension
Chepy Python command line version of CyberChef
Typeit If the text in the picture is not recognised using Google Lens or other OCR tools, try just typing it character by character using the online keyboard. This website has these for 25 different languages.
Transform Tools This tool is worth knowing for developers and anyone who has to work with different data formats. It can convert: JSON to MySQL, JavaScript to JSON, TypeScript to JavaScript, Markdown to HTML
Autoregex AI regular expressions generator. Generates a pattern by verbal description. It does not work perfectly (see picture with bitcoin wallet, there is an error, it does not always start with 13). But in general the service is very impressive!
MARKMAP A simple and free online tool to convert Markdown to Mindmap (SVG or interactive HTML). Formatting options are not too many, but enough to create an informative and clear visualization.
Xmind Works Online tool for open and editing .xmind files
CLIGPT The simplest tool possible (with as few settings as possible) for working with ChatGPT API at the command line and using in bash scripts.
MarkWhen Free online tool that converts Markdown to graphical timeline. It will come in handy for investigations where you need to investigate time-bound events, or simply for quick project planning. Export results in .SVG, .PNG, .MW or share link.

Visualization tools

Link Description
Jsoncrack Online tool for visualizing, editing and searching for text in JSON files. With the ability to save, export and share results via a link.
Jsonvisio Well-made JSON file renderer. Allows you to quickly understand the structure of even the most complex #JSON files.
Time graphics Powerful tool for analytics of time-based events: a large number of settings for the visualization of time periods, integration with Google Drive, YouTube, Google Maps, 12 ways to export results (PNG, JSON, PPTX etc.)
Gephi fast and easy to learn graph analytics tool with a lot of modules (plugins)
Tobloef.com text to mind map
Cheat sheet maker simple tool for creating cheat sheets
JSONHero Free online tool for visualizing data in JSON format. With tree structure display, syntax highlighting, link preview, pictures, colors and many other interesting features.

Routine/Data Extraction Automation

Link Description
Scrapersnbots A collection of a wide variety of online tools for #osint and not only: search for users with a specific name on different sites, one domain #Google Image search, YouTube tags viewer, url-extractor and much more
Manytools Collection of tools to automate the repetitive jobs involved in webdevelopment and hacking.
Webdext An intelligent and quick web data extractor for #GoogleChrome. Support data extraction from web pages containing a list of objects such as product listing, news listing, search result, etc
CloudHQ A collection of several dozen extensions for #Chrome that allow you to extend the functionality of the standard #Gmail interface and maximize your #productivity. Tracking, sorting, sharing, saving, editing and much more.
Magical. Text Expander Create shortcuts in Google Chrome to reduce text entry time. For example: email templates, message templates for messengers, signatures and contact information, the names of people with complex spelling (lom -> Lomarrikkendd)
Online tools 55 tools for calculation hash functions, calculation file checksum, encoding and decoding strings
CyberChef collection of more than a hundred online #tools for automating a wide variety of tasks (string coding, text comparison, double-space removal)
Shadowcrypt Tools 24 online tools for OSINT, network scanning, MD5 encryption and many others

Browser analyze

Link Description
Web history stat detailed statistics of your browser history
coveryourtracks.eff.org can tell a lot about your browser and computer, including showing a list of installed fonts on the system.
Webmapper Extension that create a map-visualization based by browser history. A visual representation of the most visited sites in 10, 20, 50 or 100 days. Zoomable and searchable.
Export Chrome History A simple extension for Googlechrome that allows you to save detailed information about links from browser history as CSV/JSON. Useful for both personal archives and investigations using other people’s computers.

Files

Link Description
Grep for OSINT simple toolkit that helps to quickly extract “important data” (phone numbers, email addresses, URLs) from the text / file directory
Diffnow.com Compares and finds differences in text, URL (html code downloaded by link), office documents (doc, docx, xls, xlsx, ppt, pptx), source code (C, C++, C#, Java, Perl, PHP and other), archives (RAR, 7-zip etc).
CompressedCrack Simple tool for brute passwords for ZIP and RAR archives
Encrytped ZIP file creator Create ZIP archive online
PDFX get meta data of PDF files thrue command line
@mediainforobot telegram bot to getting metadata from different types of files
Mutagen get meta data of audiofiles thrue command line
voyant-tools.org analysis of particular words in .TXT, .DOCX, .XLSX, .CSV and other file types.
Analyze file format online
ToolSley: analyze file format online
RecoveryToolBox recovery tools for corrupted Excel, CorelDraw, Photoshop, PowerPoint, RAR, ZIP, PDF and other files
Google Docs to Markdown online converter just copy text to the site
Binvis lets you visually dissect and analyze binary files. It’s the interactive grandchild of a static visualisation online tool
Gdrive-copy The standard functionality of #GoogleDrive does not allow you to copy an entire folder with all subfolders and files. But it can be done using third-party applications
Siftrss.com tool for filtering RSS feeds
JSON to CSV
Textise.net convert the HTML code of a page to TXT

IMEI and serial numbers

Link Description
Checking MI account
Contex condoms serial number lookup
iPhone IMEI Checker Get information about #iPhone by International Mobile Equipment Identity
SNDeepInfo Find information about devices (phones, smartphones, cameras, household appliances) by - IMEI; - MEID; - ICCID; - serial number; - Apple Part Number.

NFT

Link Description
Nonfungible.com help to analyze the NFT market, find out which tokens were sold most actively (week, month, year, all time)
Numbers Search NFT by Content ID, Commit hash, keywords or uploaded photo.
Fingble Nftport One of the most accurate search engines for finding NFT by uploaded image. Works well with faces. Also it’s possible to search by keyword or Token ID.

Keywords, trends, news analytics

Link Description
Wordstat.yandex.ru the estimated number of Yandex searches in the coming month for different keywords
Trends Google
Keywordtool.io keyword matching for Google, YouTube, Amazon, Ebay, Bing, Instagram, Twitter
Google Books Ngram Viewer
News Explorer BlueMix
Pinterest Trends
PyTrends Simple #python library for automatically collecting data from Google Trends.
KeyWordPeopleUse Type in a keyword and see what questions mentioning it are being asked on Quora and Reddit. The service is also able to analyse Google Autocomplete and “People also ask”

Apps and programs

Link Description
Google Play Scraper get the most detailed
App Store Scraper get the most detailed metadata about the app from AppStore

Company information search

Link Description
Lei.bloomberg.com search information about company by Legal Identify Number
990 finder Enter the company name and select the state to get a link to download its 900 form.
Open Corporates Command Line Client (Occli) Gathering detailed information about company through cli.
NewsBrief Looking for recent mentions of the company in online media around the world
Related List find company-related contacts and confidential documents leaked online
Investing.com View a detailed investment profile of the company
FCCID.IO seacrh by FCC ID, Country, Date, Company name or Frequency ( in Mhz)
Tradeint Quick access for more than 85 tools for gathering information about company and company website, location and sector
Corporative Registry Catalog worldwide catalog of business registries (63 countries)
LEI search can help find “who owned by” or “who owns”
openownership.org Wordwide beneficial ownership data.
opensanctions.org Open source data on sanctioned people and companies in various countries from 35 (!) different sources.
Oec World A tool for detailed analysis of international trade. It will show clearly which country sells which products, to which countries these products are sold and in what trade value (in $)
Skymem A free tool to search for employees’ emails by company domain. Partially free (only 25 emails can be viewed)

Bank information search

Link Description
FDIC search Search banks by FDIC (Federal Deposit Insurance Corporation) certificate number and get detailed information about it
Iban.com Check the validity of the IBAN (International Bank Account Number) of the company and see the information about the bank where it is serviced
Freebin Checker easy-to-use API for getting bank details by BIN. 850,000+ BIN records in FreeBinChecker’s database
Credit OSINT A very simple #python tool to gather information about bank cards and validate them.

Brand/trademark information search

Link Description
WIPO.int Global Brands Database (46,020,000 records)
TMDN Design View Search 17 684 046 products designs across the European Union and beyond
TESS Search engine for #USA trademarks

Tender/shipment information search

Link Description
TendersInfo Search tenders around the world by keywords.
Barcode lookup
Panjiva.com search data on millions of shipments worldwide
en.52wmb.com Search information about worldwide buyers and suppliers by product name, company name or HS code.

Amazon

Link Description
Amazon Scraper scraped detail information about list of items
Amazon ASIN Finder
Sellerapp.com. Amazon Reverse ASIN search

Movies

Link Description
Reelgood.com search engine for more than 300 free and paid streaming services (Netflix, Amazon Prime Video, HBO, BBC, DisneyPlus)
IMCDB Internet Movie Cars Database
Sympsons screencaps search
Search Futuruma screencaps
Rick and Morty screencaps search
Subzin.com by one phrase will find the movie, as well as the full text of the dialogue with the timing
Doesthedogdie This is an ingenious site that lets you find out if a movie (video game) has scenes that might upset someone (death of dogs, cats and horses, animal abuse, domestic violence etc).
PlayPhrase Search across 7 million + phrase from movies and watch fragments in which this3 phrase is spoken.

Netflix

Link Description
Unogs.com Netflix search without registration
flixable.com alternative way to find anything interesting on Netflix
flixwatch.co alternative way to find anything interesting on Netflix
flicksurfer.com alternative way to find anything interesting on Netflix
flixboss.com alternative way to find anything interesting on Netflix
flickmetrix.com alternative way to find anything interesting on Netflix
whatthehellshouldiwatchonnetflix.com alternative way to find anything interesting on Netflix
netflix-codes.com alternative way to find anything interesting on Netflix

TV/Radio

Link Description
Radion.net view list of all radiostations near your location and search radiostations by keywords
American Archive of Public Broadcasting Discover historic programs of publicly funded radio and television across America. Watch and listen
LiveATC Archive of audio recordings between pilots and dispatchers. Useful for investigating incidents and for foreign language comprehension skills (if you learn to understand pilots’ conversations, you will be able to understand everything).
Wideband shortware radio receiver map Online map of shortwave radio receivers available for listening in your browser at the moment.
IPTV org Search by 28 813 IP television channels in 196 countries. Get detailed information about channel in HTML/JSON (sometimes with link to livestream).

Tools collections/toolkits

Link Description
Osint Search Tools Several hundred links for quick search in Social Media, Communties, Maps, Documents Search Engines, Maps, Pastes…
Scrummage Ultimate OSINT and Threat Hunting Framework
Mr.Holmes osint toolkit for gathering information about domains, phone numbers and social media accounts
SEMID osint framework Search user info in Tiktok, Playstation, Discord, Doxbin,Twitter, Github
NAZAR universal Osint Toolkit
E4GL30S1NT ShellScript toolkit for #osint (12 tools)
Recon Spider Advanced Open Source Intelligence (#OSINT) Framework for scanning IP Address, Emails, Websites, Organizations
Hunt Osint Framework Dozens of online tools for different stages of #osint investigations
GoMapEnum Gather emails on Linkedin (via Linkedin and via Google) + User enumeration and password bruteforce on Azure, ADFS, OWA, O365 (this part seems to be still in development)
ExtendClass One of my favorite sites for #automating various routine tasks. Among the many analogues, it stands out for its quality of work and variety of functions (view pic).
FoxyRecon 44 osint tools in one add-on for #Firefox
S.I.G.I.T. Simple information gathering toolkit
GVNG Search Command line toolkit for gathering information about person (nickname search, validate email, geolocate ip) and domain (traceroute, dns lookup, tcp port scan etc).
Owasp Maryam modular open-source framework based on OSINT and data gathering
Ghoulbond Just another all-in-one command line toolkit for gathering information about system (technical characteristics, internet speed, IP/Mac address, port scanner)+some features for nickname and phone number #osint.
Metabigoor Simple and fast #osint framework
Geekflare Tools 39 online free tools for website testing
Oryon OSINT query tool Construct investigations links in Google Sheet
Discover Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing and listeners with metasploit (16 tools in one)
one-plus.github.io/DocumentSearch Document Search osint Toolkit
Telegram HowToFindBot
Harpoon
ResearchBuzz Google Sinker Search queries constructor (view pic), Google News Search queries constructor, Quick twitter account historical navigation in http://archive.org, Blogspace Time Machine and more tools
Profounder searching users by nickname and scrapping url’s from website
Moriarty Project
Osintcombine Tools
OSINT-SAN
Mihari
One Plus OSINT Toolkit
Vichiti
Sarenka
Vedbex.com
Synapsint.com
Ashok Swiff knife for #osint
IVRE framework for network recon
SEARCH Investigative and Forensic Toolbar extension with quick access to dozens of online tools for osint, forensics and othef investigations goals.
Tenssens osint framework
Collector Universal Osint Toolkit
Randomtools Several dozen online tools for a variety of purposes. Including to facilitate gathering information on #Facebook, #Twitter, #YouTube, #Instagram
Infooze User Recon, Mail Finder, Whois/IP/DNS/headers lookup, InstaRecon, Git Recon, Exif Metadata
ThreatPinch Lookup Helps speed up security investigations by automatically providing relevant information upon hovering over any IPv4 address, MD5 hash, SHA2 hash, and CVE title. It’s designed to be completely customizable and work with any rest API(c)
Osint tool A universal online tool for searching various services and APIs with more than a dozen different inputs (phone number, email, website address, domain, etc.).
Hackers toolkit An extension for quick access to dozens of tools for decoding/encoding strings as well as generating queries for popular types of web attacks (#SQLi,#LFI,#XSS).
BOTSTER A huge collection of bots for gathering, monitoring, analysing and validating data from Instagram, Twitter, Google, Amazon, Linkedin, Shopify and other services.
Magnifier #osint #python toolkit. 15 scripts in one: - subdomain finder; - website emails collector; - zone transfer; - reverse IP lookup; and much more.
Wannabe1337 Toolkit This site has dozens of free online tools (many of which will be useful for #osint): - website and network info gathering tools; - code, text and image processing tools; - IPFS and Fraud tools; - Discord and Bitcoin tools.
BazzellPy Unofficial(!) #Python library for automation work with IntelTechniques Search Tools https://inteltechniques.com/tools/
BBOT Toolkit of 51 modules (for collecting domain/IP information - cookie_brute, wappalyzer, sslcert, leakix, urlscan, wayback (full list in the picture)
SLASH Universal #cli search tool. Search email or username across social media, forums, Pastebin leaks, Github commits and more.
How to verify? Visual fact checking mind maps for verification video, audio, source, text. Detailed workflows descriptions with tools, tips and tricks.
Cyclect Ultimate OSINT Search Engine + list of 281+ tools for information gathering about": IP Adress, Social Media Account, Email, Phone, Domain, Person, Venicle and more.
ShrewdEye Online versions of popular command line #osint tools: Amass, SubFinder, AssetFinder, GAU, DNSX
OSINT Toolkit Self-hosted web app (one minute Docker installation) for gathering information about IPs, Domains, URLs, Emails, Hashes, CVEs and more.
OSINTTracker A simple and free online tool to visualize investigations and collect data about different entry points (domains, email addresses, crypto wallet numbers) using hundreds of different online services.

Databases and data analyzes

Link Description
Cronodump When searching for information about citizens of Ukraine, Russia and other CIS countries, often have to deal with leaked databases for the Cronos program (used in government organizations). This simple utility generates Cronos files in CSV.
Jsonvisio Well-made JSON file renderer. Allows you to quickly understand the structure of even the most complex #JSON files.
1C Database Converter 1C is a very popular program in CIS countries for storing data in enterprises (accounting, document management, etc.). This tool allows you to convert 1C files into CSV files.
Insight Jini Extreme quick, extreme simple and free online tool for data visalization and analysis
DIAGRAMIFY generates flow charts from the text description. Branching and backtracking are supported
OBSIDIAN CLI Very simple #go tool that let to interact with the Obsidian using the terminal. Open, search, create and edit files. Can be combined with any other #cli #osint tools to automate your workflow.

Online OS Emulators

Link Description
Windows 10 Online Emulator
Parrot Security OS Online Emulator

Virtual Machines/Linux distributions

Link Description
Offen Osint
BlackArch Linux
Kali Linux
CSI Linux
Fedora Security Lab
Huron Osint
Tsurugi Linux
Osintux
TraceLabs OSINT VM
Dracos Linux
ArchStrike
Septor Linux
Parrot Security
osintBOX Parrot OS Home edition modified with the popular OSINT tools: Dmitry, ExifTool, Maltego, Sherlock, SpiderFoot and much more.
Pentoo Linux
Deft Linux
BackBox
Falcon Arch Linux
AttifyOS Linux distro for pentesting IoT devices.

My Projects

Link Description
Python OSINT automation examples In this repository, I will collect quick and simple code examples that use Python to automate various #osint tasks.
Worldwide OSINT Tools Map
Quick hashtags and keywords search
Quick geolocation search
Phone Number Search Constructor
Domain Investigation Toolbox
IP adress Investigation Toolbox
Quick Cache and Archive search
Grep for OSINT Set of very simple shell scripts that will help you quickly analyze a text or a folder with files for data useful for investigation (phone numbers, bank card numbers, URLs, emails
5 Google Custom Search Engine for search 48 pastebin sites
CSE for search 20 source code hosting services
Dorks collections list List of Github repositories and articles with list of dorks for different search engines
APIs for OSINT List of API’s for gathering information about phone numbers, addresses, domains etc
Advanced Search Operators List List of the links to the docs for different services, which explain using of advanced search operators
Code understanding tools list Tools for understanding other people’s code
Awesome grep List of GREP modifications and alternatives for a variety of purposes
Maltego transforms list list of tools that handle different data and make it usable in Maltego

Infosec Tools

Infosec

=============== A curated list of awesome information security resources.

Those resources and tools are intended only for cybersecurity professional and educational use in a controlled environment.

Table of Contents

=================

  1. Massive Online Open Courses
  2. Academic Courses
  3. Laboratories
  4. Capture the Flag
  5. Open Security Books
  6. Challenges
  7. Documentation
  8. SecurityTube Playlists
  9. Related Awesome Lists

Massive Online Open Courses

===========================

Stanford University - Computer Security

In this class you will learn how to design secure systems and write secure code. You will learn how to find vulnerabilities in code and how to design software systems that limit the impact of security vulnerabilities. We will focus on principles for building secure systems and give many real world examples.

Stanford University - Cryptography I

This course explains the inner workings of cryptographic primitives and how to correctly use them. Students will learn how to reason about the security of cryptographic constructions and how to apply this knowledge to real-world applications. The course begins with a detailed discussion of how two parties who have a shared secret key can communicate securely when a powerful adversary eavesdrops and tampers with traffic. We will examine many deployed protocols and analyze mistakes in existing systems. The second half of the course discusses public-key techniques that let two or more parties generate a shared secret key. We will cover the relevant number theory and discuss public-key encryption and basic key-exchange. Throughout the course students will be exposed to many exciting open problems in the field.

Stanford University - Cryptography II

This course is a continuation of Crypto I and explains the inner workings of public-key systems and cryptographic protocols. Students will learn how to reason about the security of cryptographic constructions and how to apply this knowledge to real-world applications. The course begins with constructions for digital signatures and their applications. We will then discuss protocols for user authentication and zero-knowledge protocols. Next we will turn to privacy applications of cryptography supporting anonymous credentials and private database lookup. We will conclude with more advanced topics including multi-party computation and elliptic curve cryptography.

University of Maryland - Usable Security

This course focuses on how to design and build secure systems with a human-centric focus. We will look at basic principles of human-computer interaction, and apply these insights to the design of secure systems with the goal of developing security measures that respect human performance and their goals within a system.

University of Maryland - Software Security

This course we will explore the foundations of software security. We will consider important software vulnerabilities and attacks that exploit them – such as buffer overflows, SQL injection, and session hijacking – and we will consider defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we take a “build security in” mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems.

University of Maryland - Cryptography

This course will introduce you to the foundations of modern cryptography, with an eye toward practical applications. We will learn the importance of carefully defining security; of relying on a set of well-studied “hardness assumptions” (e.g., the hardness of factoring large numbers); and of the possibility of proving security of complicated constructions based on low-level primitives. We will not only cover these ideas in theory, but will also explore their real-world impact. You will learn about cryptographic primitives in wide use today, and see how these can be combined to develop modern protocols for secure communication.

University of Maryland - Hardware Security

This course will introduce you to the foundations of modern cryptography, with an eye toward practical applications. We will learn the importance of carefully defining security; of relying on a set of well-studied “hardness assumptions” (e.g., the hardness of factoring large numbers); and of the possibility of proving security of complicated constructions based on low-level primitives. We will not only cover these ideas in theory, but will also explore their real-world impact. You will learn about cryptographic primitives in wide use today, and see how these can be combined to develop modern protocols for secure communication.

University of Washington - Introduction to CyberSecurity

This course will introduce you to the cybersecurity, ideal for learners who are curious about the world of Internet security and who want to be literate in the field. This course will take a ride in to cybersecurity feild for beginners.

University of Washington - Finding Your Cybersecurity Career Path

There are 5-6 major job roles in industry for cybersecurity enthusiast. In This course you will Learn about different career pathways in cybersecurity and complete a self-assessment project to better understand the right path for you.

University of Washington - Essentials of Cybersecurity

This course is good for beginner It contains introduction to cybersecurity, The CISO’s view, Helps you building cybersecurity toolKit and find your cybersecurity career path.

Academic Courses

NYU Tandon School of Engineering - OSIRIS Lab’s Hack Night

Developed from the materials of NYU Tandon’s old Penetration Testing and Vulnerability Analysis course, Hack Night is a sobering introduction to offensive security. A lot of complex technical content is covered very quickly as students are introduced to a wide variety of complex and immersive topics over thirteen weeks.

Florida State University’s - Offensive Computer Security

The primary incentive for an attacker to exploit a vulnerability, or series of vulnerabilities is to achieve a return on an investment (his/her time usually). This return need not be strictly monetary, an attacker may be interested in obtaining access to data, identities, or some other commodity that is valuable to them. The field of penetration testing involves authorized auditing and exploitation of systems to assess actual system security in order to protect against attackers. This requires thorough knowledge of vulnerabilities and how to exploit them. Thus, this course provides an introductory but comprehensive coverage of the fundamental methodologies, skills, legal issues, and tools used in white hat penetration testing and secure system administration.

Florida State University’s - Offensive Network Security

This class allows students to look deep into know protocols (i.e. IP, TCP, UDP) to see how an attacker can utilize these protocols to their advantage and how to spot issues in a network via captured network traffic. The first half of this course focuses on know protocols while the second half of the class focuses on reverse engineering unknown protocols. This class will utilize captured traffic to allow students to reverse the protocol by using known techniques such as incorporating bioinformatics introduced by Marshall Beddoe. This class will also cover fuzzing protocols to see if the server or client have vulnerabilities. Overall, a student finishing this class will have a better understanding of the network layers, protocols, and network communication and their interaction in computer networks.

Rensselaer Polytechnic Institute - Malware Analysis

This course will introduce students to modern malware analysis techniques through readings and hands-on interactive analysis of real-world samples. After taking this course students will be equipped with the skills to analyze advanced contemporary malware using both static and dynamic analysis.

Rensselaer Polytechnic Institute - Modern Binary Exploitation

This course will start off by covering basic x86 reverse engineering, vulnerability analysis, and classical forms of Linux-based userland binary exploitation. It will then transition into protections found on modern systems (Canaries, DEP, ASLR, RELRO, Fortify Source, etc) and the techniques used to defeat them. Time permitting, the course will also cover other subjects in exploitation including kernel-land and Windows based exploitation.

Rensselaer Polytechnic Institute - Hardware Reverse Engineering

Reverse engineering techniques for semiconductor devices and their applications to competitive analysis, IP litigation, security testing, supply chain verification, and failure analysis. IC packaging technologies and sample preparation techniques for die recovery and live analysis. Deprocessing and staining methods for revealing features bellow top passivation. Memory technologies and appropriate extraction techniques for each. Study contemporary anti-tamper/anti-RE methods and their effectiveness at protecting designs from attackers. Programmable logic microarchitecture and the issues involved with reverse engineering programmable logic.

City College of San Francisco - Sam Bowne Class

  • CNIT 40: DNS Security DNS is crucial for all Internet transactions, but it is subject to numerous security risks, including phishing, hijacking, packet amplification, spoofing, snooping, poisoning, and more. Learn how to configure secure DNS servers, and to detect malicious activity with DNS monitoring. We will also cover DNSSEC principles and deployment. Students will perform hands-on projects deploying secure DNS servers on both Windows and Linux platforms.

  • CNIT 120 - Network Security Knowledge and skills required for Network Administrators and Information Technology professionals to be aware of security vulnerabilities, to implement security measures, to analyze an existing network environment in consideration of known security threats or risks, to defend against attacks or viruses, and to ensure data privacy and integrity. Terminology and procedures for implementation and configuration of security, including access control, authorization, encryption, packet filters, firewalls, and Virtual Private Networks (VPNs).

  • CNIT 121 - Computer Forensics The class covers forensics tools, methods, and procedures used for investigation of computers, techniques of data recovery and evidence collection, protection of evidence, expert witness skills, and computer crime investigation techniques. Includes analysis of various file systems and specialized diagnostic software used to retrieve data. Prepares for part of the industry standard certification exam, Security+, and also maps to the Computer Investigation Specialists exam.

  • CNIT 123 - Ethical Hacking and Network Defense Students learn how hackers attack computers and networks, and how to protect systems from such attacks, using both Windows and Linux systems. Students will learn legal restrictions and ethical guidelines, and will be required to obey them. Students will perform many hands-on labs, both attacking and defending, using port scans, footprinting, exploiting Windows and Linux vulnerabilities, buffer overflow exploits, SQL injection, privilege escalation, Trojans, and backdoors.

  • CNIT 124 - Advanced Ethical Hacking Advanced techniques of defeating computer security, and countermeasures to protect Windows and Unix/Linux systems. Hands-on labs include Google hacking, automated footprinting, sophisticated ping and port scans, privilege escalation, attacks against telephone and Voice over Internet Protocol (VoIP) systems, routers, firewalls, wireless devices, Web servers, and Denial of Service attacks.

  • CNIT 126 - Practical Malware Analysis Learn how to analyze malware, including computer viruses, trojans, and rootkits, using disassemblers, debuggers, static and dynamic analysis, using IDA Pro, OllyDbg and other tools.

  • CNIT 127 - Exploit Development Learn how to find vulnerabilities and exploit them to gain control of target systems, including Linux, Windows, Mac, and Cisco. This class covers how to write tools, not just how to use them; essential skills for advanced penetration testers and software security professionals.

  • CNIT 128 - Hacking Mobile Devices Mobile devices such as smartphones and tablets are now used for making purchases, emails, social networking, and many other risky activities. These devices run specialized operating systems have many security problems. This class will cover how mobile operating systems and apps work, how to find and exploit vulnerabilities in them, and how to defend them. Topics will include phone call, voicemail, and SMS intrusion, jailbreaking, rooting, NFC attacks, malware, browser exploitation, and application vulnerabilities. Hands-on projects will include as many of these activities as are practical and legal.

  • CNIT 129S: Securing Web Applications Techniques used by attackers to breach Web applications, and how to protect them. How to secure authentication, access, databases, and back-end components. How to protect users from each other. How to find common vulnerabilities in compiled code and source code.

  • CNIT 140: IT Security Practices Training students for cybersecurity competitions, including CTF events and the Collegiate Cyberdefense Competition (CCDC). This training will prepare students for employment as security professionals, and if our team does well in the competitions, the competitors will gain recognition and respect which should lead to more and better job offers.

  • Violent Python and Exploit Development In the exploit development section, students will take over vulnerable systems with simple Python scripts.

University of Cincinnati - CS6038/CS5138 Malware Analysis

This class will introduce the CS graduate students to malware concepts, malware analysis, and black-box reverse engineering techniques. The target audience is focused on computer science graduate students or undergraduate seniors without prior cyber security or malware experience. It is intended to introduce the students to types of malware, common attack recipes, some tools, and a wide array of malware analysis techniques.

Eurecom - Mobile Systems and Smartphone Security (MOBISEC)

Hands-On course coverings topics such as mobile ecosystem, the design and architecture of mobile operating systems, application analysis, reverse engineering, malware detection, vulnerability assessment, automatic static and dynamic analysis, and exploitation and mitigation techniques. Besides the slides for the course, there are also multiple challenges covering mobile app development, reversing and exploitation.

Open Security Training

OpenSecurityTraining.info is dedicated to sharing training material for computer security classes, on any topic, that are at least one day long.

Beginner Classes

  • Android Forensics & Security Testing This class serves as a foundation for mobile digital forensics, forensics of Android operating systems, and penetration testing of Android applications.

  • Certified Information Systems Security Professional (CISSP)® Common Body of Knowledge (CBK)® Review The CISSP CBK Review course is uniquely designed for federal agency information assurance (IA) professionals in meeting NSTISSI-4011, National Training Standard for Information Systems Security Professionals, as required by DoD 8570.01-M, Information Assurance Workforce Improvement Program.

  • Flow Analysis & Network Hunting This course focuses on network analysis and hunting of malicious activity from a security operations center perspective. We will dive into the netflow strengths, operational limitations of netflow, recommended sensor placement, netflow tools, visualization of network data, analytic trade craft for network situational awareness and networking hunting scenarios.

  • Hacking Techniques and Intrusion Detection The course is designed to help students gain a detailed insight into the practical and theoretical aspects of advanced topics in hacking techniques and intrusion detection.

  • Introductory Intel x86: Architecture, Assembly, Applications, & Alliteration This class serves as a foundation for the follow on Intermediate level x86 class. It teaches the basic concepts and describes the hardware that assembly code deals with. It also goes over many of the most common assembly instructions. Although x86 has hundreds of special purpose instructions, students will be shown it is possible to read most programs by knowing only around 20-30 instructions and their variations.

  • Introductory Intel x86-64: Architecture, Assembly, Applications, & Alliteration This class serves as a foundation for the follow on Intermediate level x86 class. It teaches the basic concepts and describes the hardware that assembly code deals with. It also goes over many of the most common assembly instructions. Although x86 has hundreds of special purpose instructions, students will be shown it is possible to read most programs by knowing only around 20-30 instructions and their variations.

  • Introduction to ARM This class builds on the Intro to x86 class and tries to provide parallels and differences between the two processor architectures wherever possible while focusing on the ARM instruction set, some of the ARM processor features, and how software works and runs on the ARM processor.

  • Introduction to Cellular Security This course is intended to demonstrate the core concepts of cellular network security. Although the course discusses GSM, UMTS, and LTE - it is heavily focused on LTE. The course first introduces important cellular concepts and then follows the evolution of GSM to LTE.

  • Introduction to Network Forensics This is a mainly lecture based class giving an introduction to common network monitoring and forensic techniques.

  • Introduction to Secure Coding This course provides a look at some of the most prevalent security related coding mistakes made in industry today. Each type of issue is explained in depth including how a malicious user may attack the code, and strategies for avoiding the issues are then reviewed.

  • Introduction to Vulnerability Assessment This is a lecture and lab based class giving an introduction to vulnerability assessment of some common common computing technologies. Instructor-led lab exercises are used to demonstrate specific tools and technologies.

  • Introduction to Trusted Computing This course is an introduction to the fundamental technologies behind Trusted Computing. You will learn what Trusted Platform Modules (TPMs) are and what capabilities they can provide both at an in-depth technical level and in an enterprise context. You will also learn about how other technologies such as the Dynamic Root of Trust for Measurement (DRTM) and virtualization can both take advantage of TPMs and be used to enhance the TPM’s capabilities.

  • Offensive, Defensive, and Forensic Techniques for Determining Web User Identity This course looks at web users from a few different perspectives. First, we look at identifying techniques to determine web user identities from a server perspective. Second, we will look at obfuscating techniques from a user whom seeks to be anonymous. Finally, we look at forensic techniques, which, when given a hard drive or similar media, we identify users who accessed that server.

  • Pcap Analysis & Network Hunting Introduction to Packet Capture (PCAP) explains the fundamentals of how, where, and why to capture network traffic and what to do with it. This class covers open-source tools like tcpdump, Wireshark, and ChopShop in several lab exercises that reinforce the material. Some of the topics include capturing packets with tcpdump, mining DNS resolutions using only command-line tools, and busting obfuscated protocols. This class will prepare students to tackle common problems and help them begin developing the skills to handle more advanced networking challenges.

  • Malware Dynamic Analysis This introductory malware dynamic analysis class is dedicated to people who are starting to work on malware analysis or who want to know what kinds of artifacts left by malware can be detected via various tools. The class will be a hands-on class where students can use various tools to look for how malware is: Persisting, Communicating, and Hiding

  • Secure Code Review The course briefly talks about the development lifecycle and the importance of peer reviews in delivering a quality product. How to perform this review is discussed and how to keep secure coding a priority during the review is stressed. A variety of hands-on exercises will address common coding mistakes, what to focus on during a review, and how to manage limited time.

  • Smart Cards This course shows how smart cards are different compared to other type of cards. It is explained how smart cards can be used to realize confidentiality and integrity of information.

  • The Life of Binaries Along the way we discuss the relevance of security at different stages of a binary’s life, from the tricks that can be played by a malicious compiler, to how viruses really work, to the way which malware “packers” duplicate OS process execution functionality, to the benefit of a security-enhanced OS loader which implements address space layout randomization (ASLR).

  • Understanding Cryptology: Core Concepts This is an introduction to cryptology with a focus on applied cryptology. It was designed to be accessible to a wide audience, and therefore does not include a rigorous mathematical foundation (this will be covered in later classes).

  • Understanding Cryptology: Cryptanalysis A class for those who want to stop learning about building cryptographic systems and want to attack them. This course is a mixture of lecture designed to introduce students to a variety of code-breaking techniques and python labs to solidify those concepts. Unlike its sister class, Core Concepts, math is necessary for this topic.

Intermediate Classes

  • Exploits 1: Introduction to Software Exploits Software vulnerabilities are flaws in program logic that can be leveraged by an attacker to execute arbitrary code on a target system. This class will cover both the identification of software vulnerabilities and the techniques attackers use to exploit them. In addition, current techniques that attempt to remediate the threat of software vulnerability exploitation will be discussed.

  • Exploits 2: Exploitation in the Windows Environment This course covers the exploitation of stack corruption vulnerabilities in the Windows environment. Stack overflows are programming flaws that often times allow an attacker to execute arbitrary code in the context of a vulnerable program. There are many nuances involved with exploiting these vulnerabilities in Windows. Window’s exploit mitigations such as DEP, ASLR, SafeSEH, and SEHOP, makes leveraging these programming bugs more difficult, but not impossible. The course highlights the features and weaknesses of many the exploit mitigation techniques deployed in Windows operating systems. Also covered are labs that describe the process of finding bugs in Windows applications with mutation based fuzzing, and then developing exploits that target those bugs.

  • Intermediate Intel x86: Architecture, Assembly, Applications, & Alliteration Building upon the Introductory Intel x86 class, this class goes into more depth on topics already learned, and introduces more advanced topics that dive deeper into how Intel-based systems work.

Advanced Classes

  • Advanced x86: Virtualization with Intel VT-x The purpose of this course is to provide a hands on introduction to Intel hardware support for virtualization. The first part will motivate the challenges of virtualization in the absence of dedicated hardware. This is followed by a deep dive on the Intel virtualization “API” and labs to begin implementing a blue pill / hyperjacking attack made famous by researchers like Joanna Rutkowska and Dino Dai Zovi et al. Finally a discussion of virtualization detection techniques.

  • Advanced x86: Introduction to BIOS & SMM We will cover why the BIOS is critical to the security of the platform. This course will also show you what capabilities and opportunities are provided to an attacker when BIOSes are not properly secured. We will also provide you tools for performing vulnerability analysis on firmware, as well as firmware forensics. This class will take people with existing reverse engineering skills and teach them to analyze UEFI firmware. This can be used either for vulnerability hunting, or to analyze suspected implants found in a BIOS, without having to rely on anyone else.

  • Introduction to Reverse Engineering Software Throughout the history of invention curious minds have sought to understand the inner workings of their gadgets. Whether investigating a broken watch, or improving an engine, these people have broken down their goods into their elemental parts to understand how they work. This is Reverse Engineering (RE), and it is done every day from recreating outdated and incompatible software, understanding malicious code, or exploiting weaknesses in software.

  • Reverse Engineering Malware This class picks up where the Introduction to Reverse Engineering Software course left off, exploring how static reverse engineering techniques can be used to understand what a piece of malware does and how it can be removed.

  • Rootkits: What they are, and how to find them Rootkits are a class of malware which are dedicated to hiding the attacker’s presence on a compromised system. This class will focus on understanding how rootkits work, and what tools can be used to help find them.

  • The Adventures of a Keystroke: An in-depth look into keylogging on Windows Keyloggers are one of the most widely used components in malware. Keyboard and mouse are the devices nearly all of the PCs are controlled by, this makes them an important target of malware authors. If someone can record your keystrokes then he can control your whole PC without you noticing.

Cybrary - Online Cyber Security Training

  • CompTIA A+ This course covers the fundamentals of computer technology, basic networking, installation and configuration of PCs, laptops and related hardware, as well as configuring common features for mobile operation systems Android and Apple iOS.

  • CompTIA Linux+ Our free, self-paced online Linux+ training prepares students with the knowledge to become a certified Linux+ expert, spanning a curriculum that covers Linux maintenance tasks, user assistance and installation and configuration.

  • CompTIA Cloud+ Our free, online Cloud+ training addresses the essential knowledge for implementing, managing and maintaining cloud technologies as securely as possible. It covers cloud concepts and models, virtualization, and infrastructure in the cloud.

  • CompTIA Network+ In addition to building one’s networking skill set, this course is also designed to prepare an individual for the Network+ certification exam, a distinction that can open a myriad of job opportunities from major companies

  • CompTIA Advanced Security Practitioner In our free online CompTIA CASP training, you’ll learn how to integrate advanced authentication, how to manage risk in the enterprise, how to conduct vulnerability assessments and how to analyze network security concepts and components.

  • CompTIA Security+ Learn about general security concepts, basics of cryptography, communications security and operational and organizational security. With the increase of major security breaches that are occurring, security experts are needed now more than ever.

  • ITIL Foundation Our online ITIL Foundation training course provides baseline knowledge for IT service management best practices: how to reduce costs, increase enhancements in processes, improve IT productivity and overall customer satisfaction.

  • Cryptography In this online course we will be examining how cryptography is the cornerstone of security technologies, and how through its use of different encryption methods you can protect private or sensitive information from unauthorized access.

  • Cisco CCNA Our free, online, self-paced CCNA training teaches students to install, configure, troubleshoot and operate LAN, WAN and dial access services for medium-sized networks. You’ll also learn how to describe the operation of data networks.

  • Virtualization Management Our free, self-paced online Virtualization Management training class focuses on installing, configuring and managing virtualization software. You’ll learn how to work your way around the cloud and how to build the infrastructure for it.

  • Penetration Testing and Ethical Hacking If the idea of hacking as a career excites you, you’ll benefit greatly from completing this training here on Cybrary. You’ll learn how to exploit networks in the manner of an attacker, in order to find out how protect the system from them.

  • Computer and Hacking Forensics Love the idea of digital forensics investigation? That’s what computer forensics is all about. You’ll learn how to; determine potential online criminal activity at its inception, legally gather evidence, search and investigate wireless attacks.

  • Web Application Penetration Testing In this course, SME, Raymond Evans, takes you on a wild and fascinating journey into the cyber security discipline of web application pentesting. This is a very hands-on course that will require you to set up your own pentesting environment.

  • CISA - Certified Information Systems Auditor In order to face the dynamic requirements of meeting enterprise vulnerability management challenges, this course covers the auditing process to ensure that you have the ability to analyze the state of your organization and make changes where needed.

  • Secure Coding Join industry leader Sunny Wear as she discusses secure coding guidelines and how secure coding is important when it comes to lowering risk and vulnerabilities. Learn about XSS, Direct Object Reference, Data Exposure, Buffer Overflows, & Resource Management.

  • NIST 800-171 Controlled Unclassified Information Course The Cybrary NIST 800-171 course covers the 14 domains of safeguarding controlled unclassified information in non-federal agencies. Basic and derived requirements are presented for each security domain as defined in the NIST 800-171 special publication.

  • Advanced Penetration Testing This course covers how to attack from the web using cross-site scripting, SQL injection attacks, remote and local file inclusion and how to understand the defender of the network you’re breaking into to. You’ll also learn tricks for exploiting a network.

  • Intro to Malware Analysis and Reverse Engineering In this course you’ll learn how to perform dynamic and static analysis on all major files types, how to carve malicious executables from documents and how to recognize common malware tactics and debug and disassemble malicious binaries.

  • Social Engineering and Manipulation In this online, self-paced Social Engineering and Manipulation training class, you will learn how some of the most elegant social engineering attacks take place. Learn to perform these scenarios and what is done during each step of the attack.

  • Post Exploitation Hacking In this free self-paced online training course, you’ll cover three main topics: Information Gathering, Backdooring and Covering Steps, how to use system specific tools to get general information, listener shells, metasploit and meterpreter scripting.

  • Python for Security Professionals This course will take you from basic concepts to advanced scripts in just over 10 hours of material, with a focus on networking and security.

  • Metasploit This free Metasploit training class will teach you to utilize the deep capabilities of Metasploit for penetration testing and help you to prepare to run vulnerability assessments for organizations of any size.

  • ISC2 CCSP - Certified Cloud Security Professional The reality is that attackers never rest, and along with the traditional threats targeting internal networks and systems, an entirely new variety specifically targeting the cloud has emerged.

Executive

  • CISSP - Certified Information Systems Security Professional Our free online CISSP (8 domains) training covers topics ranging from operations security, telecommunications, network and internet security, access control systems and methodology and business continuity planning.

  • CISM - Certified Information Security Manager Cybrary’s Certified Information Security Manager (CISM) course is a great fit for IT professionals looking to move up in their organization and advance their careers and/or current CISMs looking to learn about the latest trends in the IT industry.

  • PMP - Project Management Professional Our free online PMP training course educates on how to initiate, plan and manage a project, as well as the process behind analyzing risk, monitoring and controlling project contracts and how to develop schedules and budgets.

  • CRISC - Certified in Risk and Information Systems Control Certified in Risk and Information Systems Control is for IT and business professionals who develop and maintain information system controls, and whose job revolves around security operations and compliance.

  • Risk Management Framework The National Institute of Standards and Technology (NIST) established the Risk Management Framework (RMF) as a set of operational and procedural standards or guidelines that a US government agency must follow to ensure the compliance of its data systems.

  • ISC2 CSSLP - Certified Secure Software Life-cycle Professional This course helps professionals in the industry build their credentials to advance within their organization, allowing them to learn valuable managerial skills as well as how to apply the best practices to keep organizations systems running well.

  • COBIT - Control Objectives for Information and Related Technologies Cybrary’s online COBIT certification program offers an opportunity to learn about all the components of the COBIT 5 framework, covering everything from the business end-to-end to strategies in how effectively managing and governing enterprise IT.

  • Corporate Cybersecurity Management Cyber risk, legal considerations and insurance are often overlooked by businesses and this sets them up for major financial devastation should an incident occur.

Roppers Academy

Roppers is a community dedicated to providing free training to beginners so that they have the best introduction to the field possible and have the knowledge, skills, and confidence required to figure out what the next ten thousand hours will require them to learn.

  • Introduction to Computing Fundamentals A free, self-paced curriculum designed to give a beginner all of the foundational knowledge and skills required to be successful. It teaches security fundamentals along with building a strong technical foundation that students will build on for years to come. Full text available as a gitbook. Learning Objectives: Linux, Hardware, Networking, Operating Systems, Power User, Scripting Pre-Reqs: None

  • Introduction to Capture the Flags Free course designed to teach the fundamentals required to be successful in Capture the Flag competitions and compete in the picoCTF event. Our mentors will track your progress and provide assistance every step of the way. Full text available as a gitbook. Learning Objectives: CTFs, Forensics, Cryptography, Web-Exploitation Pre-Reqs: Linux, Scripting

  • Introduction to Security Free course designed to teach students security theory and have them execute defensive measures so that they are better prepared against threats online and in the physical world. Full text available as a gitbook. Learning Objectives: Security Theory, Practical Application, Real-World Examples Pre-Reqs: None

Laboratories

Syracuse University’s SEED

Hands-on Labs for Security Education

Started in 2002, funded by a total of 1.3 million dollars from NSF, and now used by hundreds of educational institutes worldwide, the SEED project’s objective is to develop hands-on laboratory exercises (called SEED labs) for computer and information security education and help instructors adopt these labs in their curricula.

Software Security Labs

These labs cover some of the most common vulnerabilities in general software. The labs show students how attacks work in exploiting these vulnerabilities.

Network Security Labs

These labs cover topics on network security, ranging from attacks on TCP/IP and DNS to various network security technologies (Firewall, VPN, and IPSec).

  • TCP/IP Attack Lab Launching attacks to exploit the vulnerabilities of the TCP/IP protocol, including session hijacking, SYN flooding, TCP reset attacks, etc.

  • Heartbleed Attack Lab Using the heartbleed attack to steal secrets from a remote server.

  • Local DNS Attack Lab Using several methods to conduct DNS pharming attacks on computers in a LAN environment.

  • Remote DNS Attack Lab Using the Kaminsky method to launch DNS cache poisoning attacks on remote DNS servers.

  • Packet Sniffing and Spoofing Lab Writing programs to sniff packets sent over the local network; writing programs to spoof various types of packets.

  • Linux Firewall Exploration Lab Writing a simple packet-filter firewall; playing with Linux’s built-in firewall software and web-proxy firewall; experimenting with ways to evade firewalls.

  • Firewall-VPN Lab: Bypassing Firewalls using VPN Implement a simple vpn program (client/server), and use it to bypass firewalls.

  • Virtual Private Network (VPN) Lab Design and implement a transport-layer VPN system for Linux, using the TUN/TAP technologies. This project requires at least a month of time to finish, so it is good for final project.

  • Minix IPSec Lab Implement the IPSec protocol in the Minix operating system and use it to set up Virtual Private Networks.

  • Minix Firewall Lab Implementing a simple firewall in Minix operating system.

Web Security Labs

These labs cover some of the most common vulnerabilities in web applications. The labs show students how attacks work in exploiting these vulnerabilities.

Elgg-Based Labs

Elgg is an open-source social-network system. We have modified it for our labs.

  • Cross-Site Scripting Attack Lab Launching the cross-site scripting attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • Cross-Site Request Forgery Attack Lab Launching the cross-site request forgery attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • Web Tracking Lab Experimenting with the web tracking technology to see how users can be checked when they browse the web.

  • SQL Injection Attack Lab Launching the SQL-injection attack on a vulnerable web application. Conducting experiments with several countermeasures.

Collabtive-Based Labs

Collabtive is an open-source web-based project management system. We have modified it for our labs.

  • Cross-site Scripting Attack Lab Launching the cross-site scripting attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • Cross-site Request Forgery Attack Lab Launching the cross-site request forgery attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • SQL Injection Lab Launching the SQL-injection attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • Web Browser Access Control Lab Exploring browser’s access control system to understand its security policies.

PhpBB-Based Labs

PhpBB is an open-source web-based message board system, allowing users to post messages. We have modified it for our labs.

  • Cross-site Scripting Attack Lab Launching the cross-site scripting attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • Cross-site Request Forgery Attack Lab Launching the cross-site request forgery attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • SQL Injection Lab Launching the SQL-injection attack on a vulnerable web application. Conducting experiments with several countermeasures.

  • ClickJacking Attack Lab Launching the ClickJacking attack on a vulnerable web site. Conducting experiments with several countermeasures.

System Security Labs

These labs cover the security mechanisms in operating system, mostly focusing on access control mechanisms in Linux.

  • Linux Capability Exploration Lab Exploring the POSIX 1.e capability system in Linux to see how privileges can be divided into smaller pieces to ensure the compliance with the Least Privilege principle.

  • Role-Based Access Control (RBAC) Lab Designing and implementing an integrated access control system for Minix that uses both capability-based and role-based access control mechanisms. Students need to modify the Minix kernel.

  • Encrypted File System Lab Designing and implementing an encrypted file system for Minix. Students need to modify the Minix kernel.

Cryptography Labs

These labs cover three essential concepts in cryptography, including secrete-key encryption, one-way hash function, and public-key encryption and PKI.

Mobile Security Labs

These labs focus on the smartphone security, covering the most common vulnerabilities and attacks on mobile devices. An Android VM is provided for these labs.

Pentester Lab

There is only one way to properly learn web penetration testing: by getting your hands dirty. We teach how to manually find and exploit vulnerabilities. You will understand the root cause of the problems and the methods that can be used to exploit them. Our exercises are based on common vulnerabilities found in different systems. The issues are not emulated. We provide you real systems with real vulnerabilities.

  • From SQL Injection to Shell This exercise explains how you can, from a SQL injection, gain access to the administration console. Then in the administration console, how you can run commands on the system.

  • From SQL Injection to Shell II This exercise explains how you can, from a blind SQL injection, gain access to the administration console. Then in the administration console, how you can run commands on the system.

  • From SQL Injection to Shell: PostgreSQL edition This exercise explains how you can from a SQL injection gain access to the administration console. Then in the administration console, how you can run commands on the system.

  • Web for Pentester This exercise is a set of the most common web vulnerabilities.

  • Web for Pentester II This exercise is a set of the most common web vulnerabilities.

  • PHP Include And Post Exploitation This exercice describes the exploitation of a local file include with limited access. Once code execution is gained, you will see some post exploitation tricks.

  • Linux Host Review This exercice explains how to perform a Linux host review, what and how you can check the configuration of a Linux server to ensure it is securely configured. The reviewed system is a traditional Linux-Apache-Mysql-PHP (LAMP) server used to host a blog.

  • Electronic Code Book This exercise explains how you can tamper with an encrypted cookies to access another user’s account.

  • Rack Cookies and Commands injection After a short brute force introduction, this exercice explains the tampering of rack cookie and how you can even manage to modify a signed cookie (if the secret is trivial). Using this issue, you will be able to escalate your privileges and gain commands execution.

  • Padding Oracle This course details the exploitation of a weakness in the authentication of a PHP website. The website uses Cipher Block Chaining (CBC) to encrypt information provided by users and use this information to ensure authentication. The application also leaks if the padding is valid when decrypting the information. We will see how this behavior can impact the authentication and how it can be exploited.

  • XSS and MySQL FILE This exercise explains how you can use a Cross-Site Scripting vulnerability to get access to an administrator’s cookies. Then how you can use his/her session to gain access to the administration to find a SQL injection and gain code execution using it.

  • Axis2 Web service and Tomcat Manager This exercice explains the interactions between Tomcat and Apache, then it will show you how to call and attack an Axis2 Web service. Using information retrieved from this attack, you will be able to gain access to the Tomcat Manager and deploy a WebShell to gain commands execution.

  • Play Session Injection This exercise covers the exploitation of a session injection in the Play framework. This issue can be used to tamper with the content of the session while bypassing the signing mechanism.

  • Play XML Entities This exercise covers the exploitation of a XML entities in the Play framework.

  • CVE-2007-1860: mod_jk double-decoding This exercise covers the exploitation of CVE-2007-1860. This vulnerability allows an attacker to gain access to unaccessible pages using crafted requests. This is a common trick that a lot of testers miss.

  • CVE-2008-1930: Wordpress 2.5 Cookie Integrity Protection Vulnerability This exercise explains how you can exploit CVE-2008-1930 to gain access to the administration interface of a Wordpress installation.

  • CVE-2012-1823: PHP CGI This exercise explains how you can exploit CVE-2012-1823 to retrieve the source code of an application and gain code execution.

  • CVE-2012-2661: ActiveRecord SQL injection This exercise explains how you can exploit CVE-2012-2661 to retrieve information from a database.

  • CVE-2012-6081: MoinMoin code execution This exercise explains how you can exploit CVE-2012-6081 to gain code execution. This vulnerability was exploited to compromise Debian’s wiki and Python documentation website.

  • CVE-2014-6271/Shellshock This exercise covers the exploitation of a Bash vulnerability through a CGI.

Dr. Thorsten Schneider’s Binary Auditing

Learn the fundamentals of Binary Auditing. Know how HLL mapping works, get more inner file understanding than ever. Learn how to find and analyse software vulnerability. Dig inside Buffer Overflows and learn how exploits can be prevented. Start to analyse your first viruses and malware the safe way. Learn about simple tricks and how viruses look like using real life examples.

Damn Vulnerable Web Application (DVWA)

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.

Damn Vulnerable Web Services

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. The aim of this project is to help security professionals learn about Web Application Security through the use of a practical lab environment.

NOWASP (Mutillidae)

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiest. With dozens of vulns and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an “assess the assessor” target for vulnerability assessment software.

OWASP Broken Web Applications Project

Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of vulnerable web applications that is distributed on a Virtual Machine in VMware format compatible with their no-cost and commercial VMware products.

OWASP Bricks

Bricks is a web application security learning platform built on PHP and MySQL. The project focuses on variations of commonly seen application security issues. Each ‘Brick’ has some sort of security issue which can be leveraged manually or using automated software tools. The mission is to ‘Break the Bricks’ and thus learn the various aspects of web application security.

OWASP Hackademic Challenges Project

The Hackademic Challenges implement realistic scenarios with known vulnerabilities in a safe and controllable environment. Users can attempt to discover and exploit these vulnerabilities in order to learn important concepts of information security through an attacker’s perspective.

Web Attack and Exploitation Distro (WAED)

The Web Attack and Exploitation Distro (WAED) is a lightweight virtual machine based on Debian Distribution. WAED is pre-configured with various real-world vulnerable web applications in a sandboxed environment. It includes pentesting tools that aid in finding web application vulnerabilities. The main motivation behind this project is to provide a practical environment to learn about web application’s vulnerabilities without the hassle of dealing with complex configurations. Currently, there are around 18 vulnerable applications installed in WAED.

Xtreme Vulnerable Web Application (XVWA)

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security. It’s not advisable to host this application online as it is designed to be “Xtremely Vulnerable”. We recommend hosting this application in local/controlled environment and sharpening your application security ninja skills with any tools of your own choice. It’s totally legal to break or hack into this. The idea is to evangelize web application security to the community in possibly the easiest and fundamental way. Learn and acquire these skills for good purpose. How you use these skills and knowledge base is not our responsibility.

WebGoat: A deliberately insecure Web Application

WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons.

Audi-1’s SQLi-LABS

SQLi-LABS is a comprehensive test bed to Learn and understand nitti gritty of SQL injections and thereby helps professionals understand how to protect.

Capture the Flag

Hack The Box

This pentester training platform/lab is full of machines (boxes) to hack on the different difficulty level. Majority of the content generated by the community and released on the website after the staff’s approval. Besides boxes users also can pick static challenges or work on advanced tasks like Fortress or Endgame.

Vulnhub

We all learn in different ways: in a group, by yourself, reading books, watching/listening to other people, making notes or things out for yourself. Learning the basics & understanding them is essential; this knowledge can be enforced by then putting it into practice.

Over the years people have been creating these resources and a lot of time has been put into them, creating ‘hidden gems’ of training material. However, unless you know of them, its hard to discover them.

So VulnHub was born to cover as many as possible, creating a catalogue of ‘stuff’ that is (legally) ‘breakable, hackable & exploitable’ - allowing you to learn in a safe environment and practice ‘stuff’ out. When something is added to VulnHub’s database it will be indexed as best as possible, to try and give you the best match possible for what you’re wishing to learn or experiment with.

CTF Write Ups

  • CTF Resources A general collection of information, tools, and tips regarding CTFs and similar security competitions.

  • CTF write-ups 2016 Wiki-like CTF write-ups repository, maintained by the community. (2015)

  • CTF write-ups 2015 Wiki-like CTF write-ups repository, maintained by the community. (2015)

  • CTF write-ups 2014 Wiki-like CTF write-ups repository, maintained by the community. (2014)

  • CTF write-ups 2013 Wiki-like CTF write-ups repository, maintained by the community. (2013)

CTF Repos

  • captf This site is primarily the work of psifertex since he needed a dump site for a variety of CTF material and since many other public sites documenting the art and sport of Hacking Capture the Flag events have come and gone over the years.

  • shell-storm The Jonathan Salwan’s little corner.

CTF Courses

  • Roppers CTF Course Free course designed to teach the fundamentals of Forensics, Cryptography, and Web-Exploitation required to be successful in Capture the Flag competitions. At the end of the course, students compete in the picoCTF event with guidance from instructors. Full text available as a gitbook.

SecurityTube Playlists

Security Tube hosts a large range of video tutorials on IT security including penetration testing , exploit development and reverse engineering.

  • SecurityTube Metasploit Framework Expert (SMFE) This video series covers basics of Metasploit Framework. We will look at why to use metasploit then go on to how to exploit vulnerbilities with help of metasploit and post exploitation techniques with meterpreter.

  • Wireless LAN Security and Penetration Testing Megaprimer This video series will take you through a journey in wireless LAN (in)security and penetration testing. We will start from the very basics of how WLANs work, graduate to packet sniffing and injection attacks, move on to audit infrastructure vulnerabilities, learn to break into WLAN clients and finally look at advanced hybrid attacks involving wireless and applications.

  • Exploit Research Megaprimer In this video series, we will learn how to program exploits for various vulnerabilities published online. We will also look at how to use various tools and techniques to find Zero Day vulnerabilities in both open and closed source software.

  • Buffer Overflow Exploitation Megaprimer for Linux In this video series, we will understand the basic of buffer overflows and understand how to exploit them on linux based systems. In later videos, we will also look at how to apply the same principles to Windows and other selected operating systems.

Open Security Books

Crypto 101 - lvh

Comes with everything you need to understand complete systems such as SSL/TLS: block ciphers, stream ciphers, hash functions, message authentication codes, public key encryption, key agreement protocols, and signature algorithms. Learn how to exploit common cryptographic flaws, armed with nothing but a little time and your favorite programming language. Forge administrator cookies, recover passwords, and even backdoor your own random number generator.

A Graduate Course in Applied Cryptography - Dan Boneh & Victor Shoup

This book is about constructing practical cruptosystems for which we can argue security under plausible assumptions. The book covers many constructions for different tasks in cryptography. For each task we define the required goal. To analyze the constructions, we develop a unified framework for doing cryptographic proofs. A reader who masters this framework will capable of applying it to new constructions that may not be covered in this book. We describe common mistakes to avoid as well as attacks on real-world systems that illustratre the importance of rigor in cryptography. We end every chapter with a fund application that applies the ideas in the chapter in some unexpected way.

Security Engineering, A Guide to Building Dependable Distributed Systems - Ross Anderson

The world has changed radically since the first edition of this book was published in 2001. Spammers, virus writers, phishermen, money launderers, and spies now trade busily with each other in a lively online criminal economy and as they specialize, they get better. In this indispensable, fully updated guide, Ross Anderson reveals how to build systems that stay dependable whether faced with error or malice. Here?s straight talk on critical topics such as technical engineering basics, types of attack, specialized protection mechanisms, security psychology, policy, and more.

Reverse Engineering for Beginners - Dennis Yurichev

This book offers a primer on reverse-engineering, delving into disassembly code-level reverse engineering and explaining how to decipher assembly language for those beginners who would like to learn to understand x86 (which accounts for almost all executable software in the world) and ARM code created by C/C++ compilers.

CTF Field Guide - Trail of Bits

The focus areas that CTF competitions tend to measure are vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft.. Whether you want to succeed at CTF, or as a computer security professional, you’ll need to become an expert in at least one of these disciplines. Ideally in all of them.

Challenges

  • Reverse Engineering Challenges

  • Pwnable.kr is a non-commercial wargame site which provides various pwn challenges regarding system exploitation.

  • Matasano Crypto Challenges (a.k.a. Cryptopals) is a collection of exercises that demonstrate attacks on real-world crypto by letting you implement and break the cryptoschemes yourself.

Documentation

OWASP - Open Web Application Security Project

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.

Applied Crypto Hardening - bettercrypto.org

This guide arose out of the need for system administrators to have an updated, solid, well re-searched and thought-through guide for configuring SSL, PGP,SSH and other cryptographic tools in the post-Snowdenage. Triggered by the NSA leaks in the summer of 2013, many system administrators and IT security officers saw the need to strengthen their encryption settings.This guide is specifically written for these system administrators.

PTES - Penetration Testing Execution Standard

The penetration testing execution standard cover everything related to a penetration test - from the initial communication and reasoning behind a pentest, through the intelligence gathering and threat modeling phases where testers are working behind the scenes in order to get a better understanding of the tested organization, through vulnerability research, exploitation and post exploitation, where the technical security expertise of the testers come to play and combine with the business understanding of the engagement, and finally to the reporting, which captures the entire process, in a manner that makes sense to the customer and provides the most value to it.

Malware Analysis Tools

Malware Analysis

A curated list of malware analysis tools and resources.


Malware Collection

Anonymizers

Web traffic anonymizers for analysts.

  • Anonymouse.org - A free, web based anonymizer.
  • OpenVPN - VPN software and hosting solutions.
  • Privoxy - An open source proxy server with some privacy features.
  • Tor - The Onion Router, for browsing the web without leaving traces of the client IP.

Honeypots

Trap and collect your own samples.

  • Conpot - ICS/SCADA honeypot.
  • Cowrie - SSH honeypot, based on Kippo.
  • DemoHunter - Low interaction Distributed Honeypots.
  • Dionaea - Honeypot designed to trap malware.
  • Glastopf - Web application honeypot.
  • Honeyd - Create a virtual honeynet.
  • HoneyDrive - Honeypot bundle Linux distro.
  • Honeytrap - Opensource system for running, monitoring and managing honeypots.
  • MHN - MHN is a centralized server for management and data collection of honeypots. MHN allows you to deploy sensors quickly and to collect data immediately, viewable from a neat web interface.
  • Mnemosyne - A normalizer for honeypot data; supports Dionaea.
  • Thug - Low interaction honeyclient, for investigating malicious websites.

Malware Corpora

Malware samples collected for analysis.

  • Clean MX - Realtime database of malware and malicious domains.
  • Contagio - A collection of recent malware samples and analyses.
  • Exploit Database - Exploit and shellcode samples.
  • Infosec - CERT-PA - Malware samples collection and analysis.
  • InQuest Labs - Evergrowing searchable corpus of malicious Microsoft documents.
  • Javascript Mallware Collection - Collection of almost 40.000 javascript malware samples
  • Malpedia - A resource providing rapid identification and actionable context for malware investigations.
  • Malshare - Large repository of malware actively scrapped from malicious sites.
  • Ragpicker - Plugin based malware crawler with pre-analysis and reporting functionalities
  • theZoo - Live malware samples for analysts.
  • Tracker h3x - Agregator for malware corpus tracker and malicious download sites.
  • vduddu malware repo - Collection of various malware files and source code.
  • VirusBay - Community-Based malware repository and social network.
  • ViruSign - Malware database that detected by many anti malware programs except ClamAV.
  • VirusShare - Malware repository, registration required.
  • VX Vault - Active collection of malware samples.
  • Zeltser’s Sources - A list of malware sample sources put together by Lenny Zeltser.
  • Zeus Source Code - Source for the Zeus trojan leaked in 2011.
  • VX Underground - Massive and growing collection of free malware samples.

Open Source Threat Intelligence

Tools

Harvest and analyze IOCs.

  • AbuseHelper - An open-source framework for receiving and redistributing abuse feeds and threat intel.
  • AlienVault Open Threat Exchange - Share and collaborate in developing Threat Intelligence.
  • Combine - Tool to gather Threat Intelligence indicators from publicly available sources.
  • Fileintel - Pull intelligence per file hash.
  • Hostintel - Pull intelligence per host.
  • IntelMQ - A tool for CERTs for processing incident data using a message queue.
  • IOC Editor - A free editor for XML IOC files.
  • iocextract - Advanced Indicator of Compromise (IOC) extractor, Python library and command-line tool.
  • ioc_writer - Python library for working with OpenIOC objects, from Mandiant.
  • MalPipe - Malware/IOC ingestion and processing engine, that enriches collected data.
  • Massive Octo Spice - Previously known as CIF (Collective Intelligence Framework). Aggregates IOCs from various lists. Curated by the CSIRT Gadgets Foundation.
  • MISP - Malware Information Sharing Platform curated by The MISP Project.
  • Pulsedive - Free, community-driven threat intelligence platform collecting IOCs from open-source feeds.
  • PyIOCe - A Python OpenIOC editor.
  • RiskIQ - Research, connect, tag and share IPs and domains. (Was PassiveTotal.)
  • threataggregator - Aggregates security threats from a number of sources, including some of those listed below in other resources.
  • ThreatConnect - TC Open allows you to see and share open source threat data, with support and validation from our free community.
  • ThreatCrowd - A search engine for threats, with graphical visualization.
  • ThreatIngestor - Build automated threat intel pipelines sourcing from Twitter, RSS, GitHub, and more.
  • ThreatTracker - A Python script to monitor and generate alerts based on IOCs indexed by a set of Google Custom Search Engines.
  • TIQ-test - Data visualization and statistical analysis of Threat Intelligence feeds.

Other Resources

Threat intelligence and IOC resources.

Detection and Classification

Antivirus and other malware identification tools

  • AnalyzePE - Wrapper for a variety of tools for reporting on Windows PE files.
  • Assemblyline - A scalable file triage and malware analysis system integrating the cyber security community’s best tools..
  • BinaryAlert - An open source, serverless AWS pipeline that scans and alerts on uploaded files based on a set of YARA rules.
  • capa - Detects capabilities in executable files.
  • chkrootkit - Local Linux rootkit detection.
  • ClamAV - Open source antivirus engine.
  • Detect It Easy(DiE) - A program for determining types of files.
  • Exeinfo PE - Packer, compressor detector, unpack info, internal exe tools.
  • ExifTool - Read, write and edit file metadata.
  • File Scanning Framework - Modular, recursive file scanning solution.
  • fn2yara - FN2Yara is a tool to generate Yara signatures for matching functions (code) in an executable program.
  • Generic File Parser - A Single Library Parser to extract meta information,static analysis and detect macros within the files.
  • hashdeep - Compute digest hashes with a variety of algorithms.
  • HashCheck - Windows shell extension to compute hashes with a variety of algorithms.
  • Loki - Host based scanner for IOCs.
  • Malfunction - Catalog and compare malware at a function level.
  • Manalyze - Static analyzer for PE executables.
  • MASTIFF - Static analysis framework.
  • MultiScanner - Modular file scanning/analysis framework
  • Nauz File Detector(NFD) - Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  • nsrllookup - A tool for looking up hashes in NIST’s National Software Reference Library database.
  • packerid - A cross-platform Python alternative to PEiD.
  • PE-bear - Reversing tool for PE files.
  • PEframe - PEframe is an open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
  • PEV - A multiplatform toolkit to work with PE files, providing feature-rich tools for proper analysis of suspicious binaries.
  • PortEx - Java library to analyse PE files with a special focus on malware analysis and PE malformation robustness.
  • Quark-Engine - An Obfuscation-Neglect Android Malware Scoring System
  • Rootkit Hunter - Detect Linux rootkits.
  • ssdeep - Compute fuzzy hashes.
  • totalhash.py - Python script for easy searching of the TotalHash.cymru.com database.
  • TrID - File identifier.
  • YARA - Pattern matching tool for analysts.
  • Yara rules generator - Generate yara rules based on a set of malware samples. Also contains a good strings DB to avoid false positives.
  • Yara Finder - A simple tool to yara match the file against various yara rules to find the indicators of suspicion.

Online Scanners and Sandboxes

Web-based multi-AV scanners, and malware sandboxes for automated analysis.

  • anlyz.io - Online sandbox.
  • any.run - Online interactive sandbox.
  • AndroTotal - Free online analysis of APKs against multiple mobile antivirus apps.
  • BoomBox - Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant.
  • Cryptam - Analyze suspicious office documents.
  • Cuckoo Sandbox - Open source, self hosted sandbox and automated analysis system.
  • cuckoo-modified - Modified version of Cuckoo Sandbox released under the GPL. Not merged upstream due to legal concerns by the author.
  • cuckoo-modified-api - A Python API used to control a cuckoo-modified sandbox.
  • DeepViz - Multi-format file analyzer with machine-learning classification.
  • detux - A sandbox developed to do traffic analysis of Linux malwares and capturing IOCs.
  • DRAKVUF - Dynamic malware analysis system.
  • filescan.io - Static malware analysis, VBA/Powershell/VBS/JS Emulation
  • firmware.re - Unpacks, scans and analyzes almost any firmware package.
  • HaboMalHunter - An Automated Malware Analysis Tool for Linux ELF Files.
  • Hybrid Analysis - Online malware analysis tool, powered by VxSandbox.
  • Intezer - Detect, analyze, and categorize malware by identifying code reuse and code similarities.
  • IRMA - An asynchronous and customizable analysis platform for suspicious files.
  • Joe Sandbox - Deep malware analysis with Joe Sandbox.
  • Jotti - Free online multi-AV scanner.
  • Limon - Sandbox for Analyzing Linux Malware.
  • Malheur - Automatic sandboxed analysis of malware behavior.
  • malice.io - Massively scalable malware analysis framework.
  • malsub - A Python RESTful API framework for online malware and URL analysis services.
  • Malware config - Extract, decode and display online the configuration settings from common malwares.
  • MalwareAnalyser.io - Online malware anomaly-based static analyser with heuristic detection engine powered by data mining and machine learning.
  • Malwr - Free analysis with an online Cuckoo Sandbox instance.
  • MetaDefender Cloud - Scan a file, hash, IP, URL or domain address for malware for free.
  • NetworkTotal - A service that analyzes pcap files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware using Suricata configured with EmergingThreats Pro.
  • Noriben - Uses Sysinternals Procmon to collect information about malware in a sandboxed environment.
  • PacketTotal - PacketTotal is an online engine for analyzing .pcap files, and visualizing the network traffic within.
  • PDF Examiner - Analyse suspicious PDF files.
  • ProcDot - A graphical malware analysis tool kit.
  • Recomposer - A helper script for safely uploading binaries to sandbox sites.
  • sandboxapi - Python library for building integrations with several open source and commercial malware sandboxes.
  • SEE - Sandboxed Execution Environment (SEE) is a framework for building test automation in secured Environments.
  • SEKOIA Dropper Analysis - Online dropper analysis (Js, VBScript, Microsoft Office, PDF).
  • VirusTotal - Free online analysis of malware samples and URLs
  • Visualize_Logs - Open source visualization library and command line tools for logs. (Cuckoo, Procmon, more to come…)
  • Zeltser’s List - Free automated sandboxes and services, compiled by Lenny Zeltser.

Domain Analysis

Inspect domains and IP addresses.

  • AbuseIPDB - AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.
  • badips.com - Community based IP blacklist service.
  • boomerang - A tool designed for consistent and safe capture of off network web resources.
  • Cymon - Threat intelligence tracker, with IP/domain/hash search.
  • Desenmascara.me - One click tool to retrieve as much metadata as possible for a website and to assess its good standing.
  • Dig - Free online dig and other network tools.
  • dnstwist - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
  • IPinfo - Gather information about an IP or domain by searching online resources.
  • Machinae - OSINT tool for gathering information about URLs, IPs, or hashes. Similar to Automator.
  • mailchecker - Cross-language temporary email detection library.
  • MaltegoVT - Maltego transform for the VirusTotal API. Allows domain/IP research, and searching for file hashes and scan reports.
  • Multi rbl - Multiple DNS blacklist and forward confirmed reverse DNS lookup over more than 300 RBLs.
  • NormShield Services - Free API Services for detecting possible phishing domains, blacklisted ip addresses and breached accounts.
  • PhishStats - Phishing Statistics with search for IP, domain and website title
  • Spyse - subdomains, whois, realted domains, DNS, hosts AS, SSL/TLS info,
  • SecurityTrails - Historical and current WHOIS, historical and current DNS records, similar domains, certificate information and other domain and IP related API and tools.
  • SpamCop - IP based spam block list.
  • SpamHaus - Block list based on domains and IPs.
  • Sucuri SiteCheck - Free Website Malware and Security Scanner.
  • Talos Intelligence - Search for IP, domain or network owner. (Previously SenderBase.)
  • TekDefense Automater - OSINT tool for gathering information about URLs, IPs, or hashes.
  • URLhaus - A project from abuse.ch with the goal of sharing malicious URLs that are being used for malware distribution.
  • URLQuery - Free URL Scanner.
  • urlscan.io - Free URL Scanner & domain information.
  • Whois - DomainTools free online whois search.
  • Zeltser’s List - Free online tools for researching malicious websites, compiled by Lenny Zeltser.
  • ZScalar Zulu - Zulu URL Risk Analyzer.

Browser Malware

Analyze malicious URLs. See also the domain analysis and documents and shellcode sections.

  • Bytecode Viewer - Combines multiple Java bytecode viewers and decompilers into one tool, including APK/DEX support.
  • Firebug - Firefox extension for web development.
  • Java Decompiler - Decompile and inspect Java apps.
  • Java IDX Parser - Parses Java IDX cache files.
  • JSDetox - JavaScript malware analysis tool.
  • jsunpack-n - A javascript unpacker that emulates browser functionality.
  • Krakatau - Java decompiler, assembler, and disassembler.
  • Malzilla - Analyze malicious web pages.
  • RABCDAsm - A “Robust ActionScript Bytecode Disassembler.”
  • SWF Investigator - Static and dynamic analysis of SWF applications.
  • swftools - Tools for working with Adobe Flash files.
  • xxxswf - A Python script for analyzing Flash files.

Documents and Shellcode

Analyze malicious JS and shellcode from PDFs and Office documents. See also the browser malware section.

  • AnalyzePDF - A tool for analyzing PDFs and attempting to determine whether they are malicious.
  • box-js - A tool for studying JavaScript malware, featuring JScript/WScript support and ActiveX emulation.
  • diStorm - Disassembler for analyzing malicious shellcode.
  • InQuest Deep File Inspection - Upload common malware lures for Deep File Inspection and heuristical analysis.
  • JS Beautifier - JavaScript unpacking and deobfuscation.
  • libemu - Library and tools for x86 shellcode emulation.
  • malpdfobj - Deconstruct malicious PDFs into a JSON representation.
  • OfficeMalScanner - Scan for malicious traces in MS Office documents.
  • olevba - A script for parsing OLE and OpenXML documents and extracting useful information.
  • Origami PDF - A tool for analyzing malicious PDFs, and more.
  • PDF Tools - pdfid, pdf-parser, and more from Didier Stevens.
  • PDF X-Ray Lite - A PDF analysis tool, the backend-free version of PDF X-RAY.
  • peepdf - Python tool for exploring possibly malicious PDFs.
  • QuickSand - QuickSand is a compact C framework to analyze suspected malware documents to identify exploits in streams of different encodings and to locate and extract embedded executables.
  • Spidermonkey - Mozilla’s JavaScript engine, for debugging malicious JS.

File Carving

For extracting files from inside disk and memory images.

  • bulk_extractor - Fast file carving tool.
  • EVTXtract - Carve Windows Event Log files from raw binary data.
  • Foremost - File carving tool designed by the US Air Force.
  • hachoir3 - Hachoir is a Python library to view and edit a binary stream field by field.
  • Scalpel - Another data carving tool.
  • SFlock - Nested archive extraction/unpacking (used in Cuckoo Sandbox).

Deobfuscation

Reverse XOR and other code obfuscation methods.

  • Balbuzard - A malware analysis tool for reversing obfuscation (XOR, ROL, etc) and more.
  • de4dot - .NET deobfuscator and unpacker.
  • ex_pe_xor & iheartxor - Two tools from Alexander Hanel for working with single-byte XOR encoded files.
  • FLOSS - The FireEye Labs Obfuscated String Solver uses advanced static analysis techniques to automatically deobfuscate strings from malware binaries.
  • NoMoreXOR - Guess a 256 byte XOR key using frequency analysis.
  • PackerAttacker - A generic hidden code extractor for Windows malware.
  • PyInstaller Extractor - A Python script to extract the contents of a PyInstaller generated Windows executable file. The contents of the pyz file (usually pyc files) present inside the executable are also extracted and automatically fixed so that a Python bytecode decompiler will recognize it.
  • uncompyle6 - A cross-version Python bytecode decompiler. Translates Python bytecode back into equivalent Python source code.
  • un{i}packer - Automatic and platform-independent unpacker for Windows binaries based on emulation.
  • unpacker - Automated malware unpacker for Windows malware based on WinAppDbg.
  • unxor - Guess XOR keys using known-plaintext attacks.
  • VirtualDeobfuscator - Reverse engineering tool for virtualization wrappers.
  • XORBruteForcer - A Python script for brute forcing single-byte XOR keys.
  • XORSearch & XORStrings - A couple programs from Didier Stevens for finding XORed data.
  • xortool - Guess XOR key length, as well as the key itself.

Debugging and Reverse Engineering

Disassemblers, debuggers, and other static and dynamic analysis tools.

  • angr - Platform-agnostic binary analysis framework developed at UCSB’s Seclab.
  • bamfdetect - Identifies and extracts information from bots and other malware.
  • BAP - Multiplatform and open source (MIT) binary analysis framework developed at CMU’s Cylab.
  • BARF - Multiplatform, open source Binary Analysis and Reverse engineering Framework.
  • binnavi - Binary analysis IDE for reverse engineering based on graph visualization.
  • Binary ninja - A reversing engineering platform that is an alternative to IDA.
  • Binwalk - Firmware analysis tool.
  • BluePill - Framework for executing and debugging evasive malware and protected executables.
  • Capstone - Disassembly framework for binary analysis and reversing, with support for many architectures and bindings in several languages.
  • codebro - Web based code browser using  clang to provide basic code analysis.
  • Cutter - GUI for Radare2.
  • DECAF (Dynamic Executable Code Analysis Framework) - A binary analysis platform based   on QEMU. DroidScope is now an extension to DECAF.
  • dnSpy - .NET assembly editor, decompiler and debugger.
  • dotPeek - Free .NET Decompiler and Assembly Browser.
  • Evan’s Debugger (EDB) - A modular debugger with a Qt GUI.
  • Fibratus - Tool for exploration and tracing of the Windows kernel.
  • FPort - Reports open TCP/IP and UDP ports in a live system and maps them to the owning application.
  • GDB - The GNU debugger.
  • GEF - GDB Enhanced Features, for exploiters and reverse engineers.
  • Ghidra - A software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.
  • hackers-grep - A utility to search for strings in PE executables including imports, exports, and debug symbols.
  • Hopper - The macOS and Linux Disassembler.
  • IDA Pro - Windows disassembler and debugger, with a free evaluation version.
  • IDR - Interactive Delphi Reconstructor is a decompiler of Delphi executable files and dynamic libraries.
  • Immunity Debugger - Debugger for malware analysis and more, with a Python API.
  • ILSpy - ILSpy is the open-source .NET assembly browser and decompiler.
  • Kaitai Struct - DSL for file formats / network protocols / data structures reverse engineering and dissection, with code generation for C++, C#, Java, JavaScript, Perl, PHP, Python, Ruby.
  • LIEF - LIEF provides a cross-platform library to parse, modify and abstract ELF, PE and MachO formats.
  • ltrace - Dynamic analysis for Linux executables.
  • mac-a-mal - An automated framework for mac malware hunting.
  • objdump - Part of GNU binutils, for static analysis of Linux binaries.
  • OllyDbg - An assembly-level debugger for Windows executables.
  • OllyDumpEx - Dump memory from (unpacked) malware Windows process and store raw or rebuild PE file. This is a plugin for OllyDbg, Immunity Debugger, IDA Pro, WinDbg, and x64dbg.
  • PANDA - Platform for Architecture-Neutral Dynamic Analysis.
  • PEDA - Python Exploit Development Assistance for GDB, an enhanced display with added commands.
  • pestudio - Perform static analysis of Windows executables.
  • Pharos - The Pharos binary analysis framework can be used to perform automated static analysis of binaries.
  • plasma - Interactive disassembler for x86/ARM/MIPS.
  • PPEE (puppy) - A Professional PE file Explorer for reversers, malware researchers and those who want to statically inspect PE files in more detail.
  • Process Explorer - Advanced task manager for Windows.
  • Process Hacker - Tool that monitors system resources.
  • Process Monitor - Advanced monitoring tool for Windows programs.
  • PSTools - Windows command-line tools that help manage and investigate live systems.
  • Pyew - Python tool for malware analysis.
  • PyREBox - Python scriptable reverse engineering sandbox by the Talos team at Cisco.
  • Qiling Framework - Cross platform emulation and sanboxing framework with instruments for binary analysis.
  • QKD - QEMU with embedded WinDbg server for stealth debugging.
  • Radare2 - Reverse engineering framework, with debugger support.
  • RegShot - Registry compare utility that compares snapshots.
  • RetDec - Retargetable machine-code decompiler with an online decompilation service and API that you can use in your tools.
  • ROPMEMU - A framework to analyze, dissect and decompile complex code-reuse attacks.
  • Scylla Imports Reconstructor - Find and fix the IAT of an unpacked / dumped PE32 malware.
  • ScyllaHide - An Anti-Anti-Debug library and plugin for OllyDbg, x64dbg, IDA Pro, and TitanEngine.
  • SMRT - Sublime Malware Research Tool, a plugin for Sublime 3 to aid with malware analyis.
  • strace - Dynamic analysis for Linux executables.
  • StringSifter - A machine learning tool that automatically ranks strings based on their relevance for malware analysis.
  • Triton - A dynamic binary analysis (DBA) framework.
  • Udis86 - Disassembler library and tool for x86 and x86_64.
  • Vivisect - Python tool for malware analysis.
  • WinDbg - multipurpose debugger for the Microsoft Windows computer operating system, used to debug user mode applications, device drivers, and the kernel-mode memory dumps.
  • X64dbg - An open-source x64/x32 debugger for windows.

Network

Analyze network interactions.

  • Bro - Protocol analyzer that operates at incredible scale; both file and network protocols.
  • BroYara - Use Yara rules from Bro.
  • CapTipper - Malicious HTTP traffic explorer.
  • chopshop - Protocol analysis and decoding framework.
  • CloudShark - Web-based tool for packet analysis and malware traffic detection.
  • FakeNet-NG - Next generation dynamic network analysis tool.
  • Fiddler - Intercepting web proxy designed for “web debugging.”
  • Hale - Botnet C&C monitor.
  • Haka - An open source security oriented language for describing protocols and applying security policies on (live) captured traffic.
  • HTTPReplay - Library for parsing and reading out PCAP files, including TLS streams using TLS Master Secrets (used in Cuckoo Sandbox).
  • INetSim - Network service emulation, useful when building a malware lab.
  • Laika BOSS - Laika BOSS is a file-centric malware analysis and intrusion detection system.
  • Malcolm - Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
  • Malcom - Malware Communications Analyzer.
  • Maltrail - A malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails and featuring an reporting and analysis interface.
  • mitmproxy - Intercept network traffic on the fly.
  • Moloch - IPv4 traffic capturing, indexing and database system.
  • NetworkMiner - Network forensic analysis tool, with a free version.
  • ngrep - Search through network traffic like grep.
  • PcapViz - Network topology and traffic visualizer.
  • Python ICAP Yara - An ICAP Server with yara scanner for URL or content.
  • Squidmagic - squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and malicious sites, using Squid proxy server and Spamhaus.
  • Tcpdump - Collect network traffic.
  • tcpick - Trach and reassemble TCP streams from network traffic.
  • tcpxtract - Extract files from network traffic.
  • Wireshark - The network traffic analysis tool.

Memory Forensics

Tools for dissecting malware in memory images or running systems.

  • BlackLight - Windows/MacOS forensics client supporting hiberfil, pagefile, raw memory analysis.
  • DAMM - Differential Analysis of Malware in Memory, built on Volatility.
  • evolve - Web interface for the Volatility Memory Forensics Framework.
  • FindAES - Find AES encryption keys in memory.
  • inVtero.net - High speed memory analysis framework developed in .NET supports all Windows x64, includes code integrity and write support.
  • Muninn - A script to automate portions of analysis using Volatility, and create a readable report. Orochi - Orochi is an open source framework for collaborative forensic memory dump analysis.
  • Rekall - Memory analysis framework, forked from Volatility in 2013.
  • TotalRecall - Script based on Volatility for automating various malware analysis tasks.
  • VolDiff - Run Volatility on memory images before and after malware execution, and report changes.
  • Volatility - Advanced memory forensics framework.
  • VolUtility - Web Interface for Volatility Memory Analysis framework.
  • WDBGARK - WinDBG Anti-RootKit Extension.
  • WinDbg - Live memory inspection and kernel debugging for Windows systems.

Windows Artifacts

  • AChoir - A live incident response script for gathering Windows artifacts.
  • python-evt - Python library for parsing Windows Event Logs.
  • python-registry - Python library for parsing registry files.
  • RegRipper (GitHub) - Plugin-based registry analysis tool.

Storage and Workflow

  • Aleph - Open Source Malware Analysis Pipeline System.
  • CRITs - Collaborative Research Into Threats, a malware and threat repository.
  • FAME - A malware analysis framework featuring a pipeline that can be extended with custom modules, which can be chained and interact with each other to perform end-to-end analysis.
  • Malwarehouse - Store, tag, and search malware.
  • Polichombr - A malware analysis platform designed to help analysts to reverse malwares collaboratively.
  • stoQ - Distributed content analysis framework with extensive plugin support, from input to output, and everything in between.
  • Viper - A binary management and analysis framework for analysts and researchers.

Miscellaneous

  • al-khaser - A PoC malware with good intentions that aimes to stress anti-malware systems.
  • CryptoKnight - Automated cryptographic algorithm reverse engineering and classification framework.
  • DC3-MWCP - The Defense Cyber Crime Center’s Malware Configuration Parser framework.
  • FLARE VM - A fully customizable, Windows-based, security distribution for malware analysis.
  • MalSploitBase - A database containing exploits used by malware.
  • Malware Museum - Collection of malware programs that were distributed in the 1980s and 1990s.
  • Malware Organiser - A simple tool to organise large malicious/benign files into a organised Structure.
  • Pafish - Paranoid Fish, a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
  • REMnux - Linux distribution and docker images for malware reverse engineering and analysis.
  • Tsurugi Linux - Linux distribution designed to support your DFIR investigations, malware analysis and OSINT (Open Source INTelligence) activities.
  • Santoku Linux - Linux distribution for mobile forensics, malware analysis, and security.

Resources

Books

Essential malware analysis reading material.

Other

Related Awesome Lists

Contributing

Pull requests and issues with suggestions are welcome! Please read the CONTRIBUTING guidelines before submitting a PR.

Thanks

This list was made possible by:

  • Lenny Zeltser and other contributors for developing REMnux, where I found many of the tools in this list;
  • Michail Hale Ligh, Steven Adair, Blake Hartstein, and Mather Richard for writing the Malware Analyst’s Cookbook, which was a big inspiration for creating the list;
  • And everyone else who has sent pull requests or suggested links to add here!

Thanks!

Penetration Testing Tools

Penetration Testing

A collection of penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and vulnerabilities. Should you discover a vulnerability, please follow this guidance to report it responsibly.

Contents

Android Utilities

  • cSploit - Advanced IT security professional toolkit on Android featuring an integrated Metasploit daemon and MITM capabilities.
  • Fing - Network scanning and host enumeration app that performs NetBIOS, UPnP, Bonjour, SNMP, and various other advanced device fingerprinting techniques.

Anonymity Tools

Tor Tools

See also awesome-tor.

  • Nipe - Script to redirect all traffic from the machine to the Tor network.
  • OnionScan - Tool for investigating the Dark Web by finding operational security issues introduced by Tor hidden service operators.
  • Tails - Live operating system aiming to preserve your privacy and anonymity.
  • Tor - Free software and onion routed overlay network that helps you defend against traffic analysis.
  • dos-over-tor - Proof of concept denial of service over Tor stress test tool.
  • kalitorify - Transparent proxy through Tor for Kali Linux OS.

Anti-virus Evasion Tools

  • AntiVirus Evasion Tool (AVET) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.
  • CarbonCopy - Tool that creates a spoofed certificate of any online website and signs an Executable for AV evasion.
  • Hyperion - Runtime encryptor for 32-bit portable executables (“PE .exes”).
  • Shellter - Dynamic shellcode injection tool, and the first truly dynamic PE infector ever created.
  • UniByAv - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.
  • Veil - Generate metasploit payloads that bypass common anti-virus solutions.
  • peCloakCapstone - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.

Books

See also DEF CON Suggested Reading.

Malware Analysis Books

See awesome-malware-analysis § Books.

CTF Tools

  • CTF Field Guide - Everything you need to win your next CTF competition.
  • Ciphey - Automated decryption tool using artificial intelligence and natural language processing.
  • RsaCtfTool - Decrypt data enciphered using weak RSA keys, and recover private keys from public keys using a variety of automated attacks.
  • ctf-tools - Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.
  • shellpop - Easily generate sophisticated reverse or bind shell commands to help you save time during penetration tests.

Cloud Platform Attack Tools

See also HackingThe.cloud.

  • Cloud Container Attack Tool (CCAT) - Tool for testing security of container environments.
  • CloudHunter - Looks for AWS, Azure and Google cloud storage buckets and lists permissions for vulnerable buckets.
  • Cloudsplaining - Identifies violations of least privilege in AWS IAM policies and generates a pretty HTML report with a triage worksheet.
  • Endgame - AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account’s resources with a rogue AWS account.
  • GCPBucketBrute - Script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

Collaboration Tools

  • Dradis - Open-source reporting and collaboration tool for IT security professionals.
  • Hexway Hive - Commercial collaboration, data aggregation, and reporting framework for red teams with a limited free self-hostable option.
  • Lair - Reactive attack collaboration framework and web application built with meteor.
  • Pentest Collaboration Framework (PCF) - Open source, cross-platform, and portable toolkit for automating routine pentest processes with a team.
  • Reconmap - Open-source collaboration platform for InfoSec professionals that streamlines the pentest process.
  • RedELK - Track and alarm about Blue Team activities while providing better usability in long term offensive operations.

Conferences and Events

  • BSides - Framework for organising and holding security conferences.
  • CTFTime.org - Directory of upcoming and archive of past Capture The Flag (CTF) competitions with links to challenge writeups.

Asia

  • HITB - Deep-knowledge security conference held in Malaysia and The Netherlands.
  • HITCON - Hacks In Taiwan Conference held in Taiwan.
  • Nullcon - Annual conference in Delhi and Goa, India.
  • SECUINSIDE - Security Conference in Seoul.

Europe

  • 44Con - Annual Security Conference held in London.
  • BalCCon - Balkan Computer Congress, annually held in Novi Sad, Serbia.
  • BruCON - Annual security conference in Belgium.
  • CCC - Annual meeting of the international hacker scene in Germany.
  • DeepSec - Security Conference in Vienna, Austria.
  • DefCamp - Largest Security Conference in Eastern Europe, held annually in Bucharest, Romania.
  • FSec - FSec - Croatian Information Security Gathering in Varaždin, Croatia.
  • Hack.lu - Annual conference held in Luxembourg.
  • Infosecurity Europe - Europe’s number one information security event, held in London, UK.
  • SteelCon - Security conference in Sheffield UK.
  • Swiss Cyber Storm - Annual security conference in Lucerne, Switzerland.
  • Troopers - Annual international IT Security event with workshops held in Heidelberg, Germany.
  • HoneyCON - Annual Security Conference in Guadalajara, Spain. Organized by the HoneySEC association.

North America

  • AppSecUSA - Annual conference organized by OWASP.
  • Black Hat - Annual security conference in Las Vegas.
  • CarolinaCon - Infosec conference, held annually in North Carolina.
  • DEF CON - Annual hacker convention in Las Vegas.
  • DerbyCon - Annual hacker conference based in Louisville.
  • Hackers Next Door - Cybersecurity and social technology conference held in New York City.
  • Hackers On Planet Earth (HOPE) - Semi-annual conference held in New York City.
  • Hackfest - Largest hacking conference in Canada.
  • LayerOne - Annual US security conference held every spring in Los Angeles.
  • National Cyber Summit - Annual US security conference and Capture the Flag event, held in Huntsville, Alabama, USA.
  • PhreakNIC - Technology conference held annually in middle Tennessee.
  • RSA Conference USA - Annual security conference in San Francisco, California, USA.
  • ShmooCon - Annual US East coast hacker convention.
  • SkyDogCon - Technology conference in Nashville.
  • SummerCon - One of the oldest hacker conventions in America, held during Summer.
  • ThotCon - Annual US hacker conference held in Chicago.
  • Virus Bulletin Conference - Annual conference going to be held in Denver, USA for 2016.

South America

  • Ekoparty - Largest Security Conference in Latin America, held annually in Buenos Aires, Argentina.
  • Hackers to Hackers Conference (H2HC) - Oldest security research (hacking) conference in Latin America and one of the oldest ones still active in the world.

Zealandia

  • CHCon - Christchurch Hacker Con, Only South Island of New Zealand hacker con.

Exfiltration Tools

  • DET - Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.
  • Iodine - Tunnel IPv4 data through a DNS server; useful for exfiltration from networks where Internet access is firewalled, but DNS queries are allowed.
  • TrevorC2 - Client/server tool for masking command and control and data exfiltration through a normally browsable website, not typical HTTP POST requests.
  • dnscat2 - Tool designed to create an encrypted command and control channel over the DNS protocol, which is an effective tunnel out of almost every network.
  • pwnat - Punches holes in firewalls and NATs.
  • tgcd - Simple Unix network utility to extend the accessibility of TCP/IP based network services beyond firewalls.
  • QueenSono - Client/Server Binaries for data exfiltration with ICMP. Useful in a network where ICMP protocol is less monitored than others (which is a common case).

Exploit Development Tools

See also Reverse Engineering Tools.

  • H26Forge - Domain-specific infrastructure for analyzing, generating, and manipulating syntactically correct but semantically spec-non-compliant video files.
  • Magic Unicorn - Shellcode generator for numerous attack vectors, including Microsoft Office macros, PowerShell, HTML applications (HTA), or certutil (using fake certificates).
  • Pwntools - Rapid exploit development framework built for use in CTFs.
  • Wordpress Exploit Framework - Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.
  • peda - Python Exploit Development Assistance for GDB.

File Format Analysis Tools

  • ExifTool - Platform-independent Perl library plus a command-line application for reading, writing and editing meta information in a wide variety of files.
  • Hachoir - Python library to view and edit a binary stream as tree of fields and tools for metadata extraction.
  • Kaitai Struct - File formats and network protocols dissection language and web IDE, generating parsers in C++, C#, Java, JavaScript, Perl, PHP, Python, Ruby.
  • peepdf - Python tool to explore PDF files in order to find out if the file can be harmful or not.
  • Veles - Binary data visualization and analysis tool.

GNU/Linux Utilities

  • Hwacha - Post-exploitation tool to quickly execute payloads via SSH on one or more Linux systems simultaneously.
  • Linux Exploit Suggester - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.
  • Lynis - Auditing tool for UNIX-based systems.
  • checksec.sh - Shell script designed to test what standard Linux OS and PaX security features are being used.

Hash Cracking Tools

  • BruteForce Wallet - Find the password of an encrypted wallet file (i.e. wallet.dat).
  • CeWL - Generates custom wordlists by spidering a target’s website and collecting unique words.
  • duplicut - Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.
  • GoCrack - Management Web frontend for distributed password cracking sessions using hashcat (or other supported tools) written in Go.
  • Hashcat - The more fast hash cracker.
  • hate_crack - Tool for automating cracking methodologies through Hashcat.
  • JWT Cracker - Simple HS256 JSON Web Token (JWT) token brute force cracker.
  • John the Ripper - Fast password cracker.
  • Rar Crack - RAR bruteforce cracker.

Hex Editors

  • Bless - High quality, full featured, cross-platform graphical hex editor written in Gtk#.
  • Frhed - Binary file editor for Windows.
  • Hex Fiend - Fast, open source, hex editor for macOS with support for viewing binary diffs.
  • HexEdit.js - Browser-based hex editing.
  • Hexinator - World’s finest (proprietary, commercial) Hex Editor.
  • hexedit - Simple, fast, console-based hex editor.
  • wxHexEditor - Free GUI hex editor for GNU/Linux, macOS, and Windows.

Industrial Control and SCADA Systems

See also awesome-industrial-control-system-security.

  • Industrial Exploitation Framework (ISF) - Metasploit-like exploit framework based on routersploit designed to target Industrial Control Systems (ICS), SCADA devices, PLC firmware, and more.
  • s7scan - Scanner for enumerating Siemens S7 PLCs on a TCP/IP or LLC network.
  • OpalOPC - Commercial OPC UA vulnerability assessment tool, sold by Molemmat.

Intentionally Vulnerable Systems

See also awesome-vulnerable.

Intentionally Vulnerable Systems as Docker Containers

Lock Picking

See awesome-lockpicking.

macOS Utilities

  • Bella - Pure Python post-exploitation data mining and remote administration tool for macOS.
  • EvilOSX - Modular RAT that uses numerous evasion and exfiltration techniques out-of-the-box.

Multi-paradigm Frameworks

  • Armitage - Java-based GUI front-end for the Metasploit Framework.
  • AutoSploit - Automated mass exploiter, which collects target by employing the Shodan.io API and programmatically chooses Metasploit exploit modules based on the Shodan query.
  • Decker - Penetration testing orchestration and automation framework, which allows writing declarative, reusable configurations capable of ingesting variables and using outputs of tools it has run as inputs to others.
  • Faraday - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
  • Metasploit - Software for offensive security teams to help verify vulnerabilities and manage security assessments.
  • Pupy - Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.
  • Ronin - Free and Open Source Ruby Toolkit for Security Research and Development, providing many different libraries and commands for a variety of security tasks, such as recon, vulnerability scanning, exploit development, exploitation, post-exploitation, and more.

Network Tools

  • CrackMapExec - Swiss army knife for pentesting networks.
  • IKEForce - Command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities.
  • Intercepter-NG - Multifunctional network toolkit.
  • Legion - Graphical semi-automated discovery and reconnaissance framework based on Python 3 and forked from SPARTA.
  • Network-Tools.com - Website offering an interface to numerous basic network utilities like ping, traceroute, whois, and more.
  • Ncrack - High-speed network authentication cracking tool built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords.
  • Praeda - Automated multi-function printer data harvester for gathering usable data during security assessments.
  • Printer Exploitation Toolkit (PRET) - Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.
  • SPARTA - Graphical interface offering scriptable, configurable access to existing network infrastructure scanning and enumeration tools.
  • SigPloit - Signaling security testing framework dedicated to telecom security for researching vulnerabilites in the signaling protocols used in mobile (cellular phone) operators.
  • Smart Install Exploitation Tool (SIET) - Scripts for identifying Cisco Smart Install-enabled switches on a network and then manipulating them.
  • THC Hydra - Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.
  • Tsunami - General purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
  • Zarp - Network attack tool centered around the exploitation of local networks.
  • dnstwist - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
  • dsniff - Collection of tools for network auditing and pentesting.
  • impacket - Collection of Python classes for working with network protocols.
  • pivotsuite - Portable, platform independent and powerful network pivoting toolkit.
  • routersploit - Open source exploitation framework similar to Metasploit but dedicated to embedded devices.
  • rshijack - TCP connection hijacker, Rust rewrite of shijack.

DDoS Tools

  • Anevicon - Powerful UDP-based load generator, written in Rust.
  • D(HE)ater - D(HE)ater sends forged cryptographic handshake messages to enforce the Diffie-Hellman key exchange.
  • HOIC - Updated version of Low Orbit Ion Cannon, has ‘boosters’ to get around common counter measures.
  • Low Orbit Ion Canon (LOIC) - Open source network stress tool written for Windows.
  • Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.
  • SlowLoris - DoS tool that uses low bandwidth on the attacking side.
  • T50 - Faster network stress tool.
  • UFONet - Abuses OSI layer 7 HTTP to create/manage ‘zombies’ and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.

Network Reconnaissance Tools

  • ACLight - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.
  • AQUATONE - Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.
  • CloudFail - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
  • DNSDumpster - Online DNS recon and search service.
  • Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
  • OWASP Amass - Subdomain enumeration via scraping, web archives, brute forcing, permutations, reverse DNS sweeping, TLS certificates, passive DNS data sources, etc.
  • ScanCannon - POSIX-compliant BASH script to quickly enumerate large networks by calling masscan to quickly identify open ports and then nmap to gain details on the systems/services on those ports.
  • XRay - Network (sub)domain discovery and reconnaissance automation tool.
  • dnsenum - Perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.
  • dnsmap - Passive DNS network mapper.
  • dnsrecon - DNS enumeration script.
  • dnstracer - Determines where a given DNS server gets its information from, and follows the chain of DNS servers.
  • fierce - Python3 port of the original fierce.pl DNS reconnaissance tool for locating non-contiguous IP space.
  • netdiscover - Network address discovery scanner, based on ARP sweeps, developed mainly for those wireless networks without a DHCP server.
  • nmap - Free security scanner for network exploration & security audits.
  • passivedns-client - Library and query tool for querying several passive DNS providers.
  • passivedns - Network sniffer that logs all DNS server replies for use in a passive DNS setup.
  • RustScan - Lightweight and quick open-source port scanner designed to automatically pipe open ports into Nmap.
  • scanless - Utility for using websites to perform port scans on your behalf so as not to reveal your own IP.
  • smbmap - Handy SMB enumeration tool.
  • subbrute - DNS meta-query spider that enumerates DNS records, and subdomains.
  • zmap - Open source network scanner that enables researchers to easily perform Internet-wide network studies.

Protocol Analyzers and Sniffers

See also awesome-pcaptools.

  • Debookee - Simple and powerful network traffic analyzer for macOS.
  • Dshell - Network forensic analysis framework.
  • Netzob - Reverse engineering, traffic generation and fuzzing of communication protocols.
  • Wireshark - Widely-used graphical, cross-platform network protocol analyzer.
  • netsniff-ng - Swiss army knife for network sniffing.
  • sniffglue - Secure multithreaded packet sniffer.
  • tcpdump/libpcap - Common packet analyzer that runs under the command line.

Network Traffic Replay and Editing Tools

  • TraceWrangler - Network capture file toolkit that can edit and merge pcap or pcapng files with batch editing features.
  • WireEdit - Full stack WYSIWYG pcap editor (requires a free license to edit packets).
  • bittwist - Simple yet powerful libpcap-based Ethernet packet generator useful in simulating networking traffic or scenario, testing firewall, IDS, and IPS, and troubleshooting various network problems.
  • hping3 - Network tool able to send custom TCP/IP packets.
  • pig - GNU/Linux packet crafting tool.
  • scapy - Python-based interactive packet manipulation program and library.
  • tcpreplay - Suite of free Open Source utilities for editing and replaying previously captured network traffic.

Proxies and Machine-in-the-Middle (MITM) Tools

See also Intercepting Web proxies.

  • BetterCAP - Modular, portable and easily extensible MITM framework.
  • Ettercap - Comprehensive, mature suite for machine-in-the-middle attacks.
  • Habu - Python utility implementing a variety of network attacks, such as ARP poisoning, DHCP starvation, and more.
  • Lambda-Proxy - Utility for testing SQL Injection vulnerabilities on AWS Lambda serverless functions.
  • MITMf - Framework for Man-In-The-Middle attacks.
  • Morpheus - Automated ettercap TCP/IP Hijacking tool.
  • SSH MITM - Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.
  • dnschef - Highly configurable DNS proxy for pentesters.
  • evilgrade - Modular framework to take advantage of poor upgrade implementations by injecting fake updates.
  • mallory - HTTP/HTTPS proxy over SSH.
  • oregano - Python module that runs as a machine-in-the-middle (MITM) accepting Tor client requests.
  • sylkie - Command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol.
  • PETEP - Extensible TCP/UDP proxy with GUI for traffic analysis & modification with SSL/TLS support.

Transport Layer Security Tools

  • SSLyze - Fast and comprehensive TLS/SSL configuration analyzer to help identify security mis-configurations.
  • crackpkcs12 - Multithreaded program to crack PKCS#12 files (.p12 and .pfx extensions), such as TLS/SSL certificates.
  • testssl.sh - Command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws.
  • tls_prober - Fingerprint a server’s SSL/TLS implementation.

Wireless Network Tools

  • Aircrack-ng - Set of tools for auditing wireless networks.
  • Airgeddon - Multi-use bash script for Linux systems to audit wireless networks.
  • BoopSuite - Suite of tools written in Python for wireless auditing.
  • Bully - Implementation of the WPS brute force attack, written in C.
  • Cowpatty - Brute-force dictionary attack against WPA-PSK.
  • Fluxion - Suite of automated social engineering based WPA attacks.
  • KRACK Detector - Detect and prevent KRACK attacks in your network.
  • Kismet - Wireless network detector, sniffer, and IDS.
  • PSKracker - Collection of WPA/WPA2/WPS default algorithms, password generators, and PIN generators written in C.
  • Reaver - Brute force attack against WiFi Protected Setup.
  • WiFi Pineapple - Wireless auditing and penetration testing platform.
  • WiFi-Pumpkin - Framework for rogue Wi-Fi access point attack.
  • Wifite - Automated wireless attack tool.
  • infernal-twin - Automated wireless hacking tool.
  • krackattacks-scripts - WPA2 Krack attack scripts.
  • pwnagotchi - Deep reinforcement learning based AI that learns from the Wi-Fi environment and instruments BetterCAP in order to maximize the WPA key material captured.
  • wifi-arsenal - Resources for Wi-Fi Pentesting.

Network Vulnerability Scanners

  • celerystalk - Asynchronous enumeration and vulnerability scanner that “runs all the tools on all the hosts” in a configurable manner.
  • kube-hunter - Open-source tool that runs a set of tests (“hunters”) for security issues in Kubernetes clusters from either outside (“attacker’s view”) or inside a cluster.
  • Nessus - Commercial vulnerability management, configuration, and compliance assessment platform, sold by Tenable.
  • Netsparker Application Security Scanner - Application security scanner to automatically find security flaws.
  • Nexpose - Commercial vulnerability and risk management assessment engine that integrates with Metasploit, sold by Rapid7.
  • OpenVAS - Free software implementation of the popular Nessus vulnerability assessment system.
  • Vuls - Agentless vulnerability scanner for GNU/Linux and FreeBSD, written in Go.

Web Vulnerability Scanners

  • ACSTIS - Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
  • Arachni - Scriptable framework for evaluating the security of web applications.
  • JCS - Joomla Vulnerability Component Scanner with automatic database updater from exploitdb and packetstorm.
  • Nikto - Noisy but fast black box web server and web application vulnerability scanner.
  • SQLmate - Friend of sqlmap that identifies SQLi vulnerabilities based on a given dork and (optional) website.
  • SecApps - In-browser web application security testing suite.
  • WPScan - Black box WordPress vulnerability scanner.
  • Wapiti - Black box web application vulnerability scanner with built-in fuzzer.
  • WebReaver - Commercial, graphical web application vulnerability scanner designed for macOS.
  • cms-explorer - Reveal the specific modules, plugins, components and themes that various websites powered by content management systems are running.
  • joomscan - Joomla vulnerability scanner.
  • skipfish - Performant and adaptable active web application security reconnaissance tool.
  • w3af - Web application attack and audit framework.

Online Resources

Online Operating Systems Resources

Online Penetration Testing Resources

Other Lists Online

Penetration Testing Report Templates

Open Sources Intelligence (OSINT)

See also awesome-osint.

  • DataSploit - OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes.
  • Depix - Tool for recovering passwords from pixelized screenshots (by de-pixelating text).
  • GyoiThon - GyoiThon is an Intelligence Gathering tool using Machine Learning.
  • Intrigue - Automated OSINT & Attack Surface discovery framework with powerful API, UI and CLI.
  • Maltego - Proprietary software for open sources intelligence and forensics.
  • PacketTotal - Simple, free, high-quality packet capture file analysis facilitating the quick detection of network-borne malware (using Zeek and Suricata IDS signatures under the hood).
  • Skiptracer - OSINT scraping framework that utilizes basic Python webscraping (BeautifulSoup) of PII paywall sites to compile passive information on a target on a ramen noodle budget.
  • Sn1per - Automated Pentest Recon Scanner.
  • Spiderfoot - Multi-source OSINT automation tool with a Web UI and report visualizations.
  • creepy - Geolocation OSINT tool.
  • gOSINT - OSINT tool with multiple modules and a telegram scraper.
  • image-match - Quickly search over billions of images.
  • recon-ng - Full-featured Web Reconnaissance framework written in Python.
  • sn0int - Semi-automatic OSINT framework and package manager.
  • Facebook Friend List Scraper - Tool to scrape names and usernames from large friend lists on Facebook, without being rate limited.

Data Broker and Search Engine Services

  • Hunter.io - Data broker providing a Web search interface for discovering the email addresses and other organizational details of a company.
  • Threat Crowd - Search engine for threats.
  • Virus Total - Free service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware.
  • surfraw - Fast UNIX command line interface to a variety of popular WWW search engines.

Dorking tools

  • BinGoo - GNU/Linux bash based Bing and Google Dorking Tool.
  • dorkbot - Command-line tool to scan Google (or other) search results for vulnerabilities.
  • github-dorks - CLI tool to scan GitHub repos/organizations for potential sensitive information leaks.
  • GooDork - Command line Google dorking tool.
  • Google Hacking Database - Database of Google dorks; can be used for recon.
  • dork-cli - Command line Google dork tool.
  • dorks - Google hack database automation tool.
  • fast-recon - Perform Google dorks against a domain.
  • pagodo - Automate Google Hacking Database scraping.
  • snitch - Information gathering via dorks.

Email search and analysis tools

  • SimplyEmail - Email recon made fast and easy.
  • WhatBreach - Search email addresses and discover all known breaches that this email has been seen in, and download the breached database if it is publicly available.

Metadata harvesting and analysis

Network device discovery tools

  • Censys - Collects data on hosts and websites through daily ZMap and ZGrab scans.
  • Shodan - World’s first search engine for Internet-connected devices.
  • ZoomEye - Search engine for cyberspace that lets the user find specific network components.

OSINT Online Resources

  • CertGraph - Crawls a domain’s SSL/TLS certificates for its certificate alternative names.
  • GhostProject - Searchable database of billions of cleartext passwords, partially visible for free.
  • NetBootcamp OSINT Tools - Collection of OSINT links and custom Web interfaces to other services.
  • OSINT Framework - Collection of various OSINT tools broken out by category.
  • WiGLE.net - Information about wireless networks world-wide, with user-friendly desktop and web applications.

Source code repository searching tools

See also Web-accessible source code ripping tools.

  • vcsmap - Plugin-based tool to scan public version control systems for sensitive information.
  • Yar - Clone git repositories to search through the whole commit history in order of commit time for secrets, tokens, or passwords.

Web application and resource analysis tools

  • BlindElephant - Web application fingerprinter.
  • EyeWitness - Tool to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  • GraphQL Voyager - Represent any GraphQL API as an interactive graph, letting you explore data models from any Web site with a GraphQL query endpoint.
  • VHostScan - Virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
  • Wappalyzer - Wappalyzer uncovers the technologies used on websites.
  • WhatWaf - Detect and bypass web application firewalls and protection systems.
  • WhatWeb - Website fingerprinter.
  • wafw00f - Identifies and fingerprints Web Application Firewall (WAF) products.
  • webscreenshot - Simple script to take screenshots of websites from a list of sites.

Operating System Distributions

  • Android Tamer - Distribution built for Android security professionals that includes tools required for Android security testing.
  • ArchStrike - Arch GNU/Linux repository for security professionals and enthusiasts.
  • AttifyOS - GNU/Linux distribution focused on tools useful during Internet of Things (IoT) security assessments.
  • BlackArch - Arch GNU/Linux-based distribution for penetration testers and security researchers.
  • Buscador - GNU/Linux virtual machine that is pre-configured for online investigators.
  • Kali - Rolling Debian-based GNU/Linux distribution designed for penetration testing and digital forensics.
  • Network Security Toolkit (NST) - Fedora-based GNU/Linux bootable live Operating System designed to provide easy access to best-of-breed open source network security applications.
  • Parrot - Distribution similar to Kali, with support for multiple hardware architectures.
  • PentestBox - Open source pre-configured portable penetration testing environment for the Windows Operating System.
  • The Pentesters Framework - Distro organized around the Penetration Testing Execution Standard (PTES), providing a curated collection of utilities that omits less frequently used utilities.

Periodicals

Physical Access Tools

  • AT Commands - Use AT commands over an Android device’s USB port to rewrite device firmware, bypass security mechanisms, exfiltrate sensitive information, perform screen unlocks, and inject touch events.
  • Bash Bunny - Local exploit delivery tool in the form of a USB thumbdrive in which you write payloads in a DSL called BunnyScript.
  • LAN Turtle - Covert “USB Ethernet Adapter” that provides remote access, network intelligence gathering, and MITM capabilities when installed in a local network.
  • PCILeech - Uses PCIe hardware devices to read and write from the target system memory via Direct Memory Access (DMA) over PCIe.
  • Packet Squirrel - Ethernet multi-tool designed to enable covert remote access, painless packet captures, and secure VPN connections with the flip of a switch.
  • Poisontap - Siphons cookies, exposes internal (LAN-side) router and installs web backdoor on locked computers.
  • Proxmark3 - RFID/NFC cloning, replay, and spoofing toolkit often used for analyzing and attacking proximity cards/readers, wireless keys/keyfobs, and more.
  • Thunderclap - Open source I/O security research platform for auditing physical DMA-enabled hardware peripheral ports.
  • USB Rubber Ducky - Customizable keystroke injection attack platform masquerading as a USB thumbdrive.

Privilege Escalation Tools

  • Active Directory and Privilege Escalation (ADAPE) - Umbrella script that automates numerous useful PowerShell modules to discover security misconfigurations and attempt privilege escalation against Active Directory.
  • GTFOBins - Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.
  • LOLBAS (Living Off The Land Binaries and Scripts) - Documents binaries, scripts, and libraries that can be used for “Living Off The Land” techniques, i.e., binaries that can be used by an attacker to perform actions beyond their original purpose.
  • LinEnum - Scripted local Linux enumeration and privilege escalation checker useful for auditing a host and during CTF gaming.
  • Postenum - Shell script used for enumerating possible privilege escalation opportunities on a local GNU/Linux system.
  • unix-privesc-check - Shell script to check for simple privilege escalation vectors on UNIX systems.

Password Spraying Tools

  • DomainPasswordSpray - Tool written in PowerShell to perform a password spray attack against users of a domain.
  • SprayingToolkit - Scripts to make password spraying attacks against Lync/S4B, Outlook Web Access (OWA) and Office 365 (O365) a lot quicker, less painful and more efficient.

Reverse Engineering

See also awesome-reversing, Exploit Development Tools.

Reverse Engineering Books

Reverse Engineering Tools

  • angr - Platform-agnostic binary analysis framework.
  • Capstone - Lightweight multi-platform, multi-architecture disassembly framework.
  • Detect It Easy(DiE) - Program for determining types of files for Windows, Linux and MacOS.
  • Evan’s Debugger - OllyDbg-like debugger for GNU/Linux.
  • Frida - Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
  • Fridax - Read variables and intercept/hook functions in Xamarin/Mono JIT and AOT compiled iOS/Android applications.
  • Ghidra - Suite of free software reverse engineering tools developed by NSA’s Research Directorate originally exposed in WikiLeaks’s “Vault 7” publication and now maintained as open source software.
  • Immunity Debugger - Powerful way to write exploits and analyze malware.
  • Interactive Disassembler (IDA Pro) - Proprietary multi-processor disassembler and debugger for Windows, GNU/Linux, or macOS; also has a free version, IDA Free.
  • Medusa - Open source, cross-platform interactive disassembler.
  • OllyDbg - x86 debugger for Windows binaries that emphasizes binary code analysis.
  • PyREBox - Python scriptable Reverse Engineering sandbox by Cisco-Talos.
  • Radare2 - Open source, crossplatform reverse engineering framework.
  • UEFITool - UEFI firmware image viewer and editor.
  • Voltron - Extensible debugger UI toolkit written in Python.
  • WDK/WinDbg - Windows Driver Kit and WinDbg.
  • binwalk - Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
  • boxxy - Linkable sandbox explorer.
  • dnSpy - Tool to reverse engineer .NET assemblies.
  • plasma - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
  • pwndbg - GDB plug-in that eases debugging with GDB, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers, and exploit developers.
  • rVMI - Debugger on steroids; inspect userspace processes, kernel drivers, and preboot environments in a single tool.
  • x64dbg - Open source x64/x32 debugger for windows.

Security Education Courses

Shellcoding Guides and Tutorials

Side-channel Tools

  • ChipWhisperer - Complete open-source toolchain for side-channel power analysis and glitching attacks.
  • SGX-Step - Open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX (Software Guard Extensions) platforms in particular.
  • TRRespass - Many-sided rowhammer tool suite able to reverse engineer the contents of DDR3 and DDR4 memory chips protected by Target Row Refresh mitigations.

Social Engineering

See also awesome-social-engineering.

Social Engineering Books

Social Engineering Online Resources

Social Engineering Tools

  • Beelogger - Tool for generating keylooger.
  • Catphish - Tool for phishing and corporate espionage written in Ruby.
  • Evilginx2 - Standalone Machine-in-the-Middle (MitM) reverse proxy attack framework for setting up phishing pages capable of defeating most forms of 2FA security schemes.
  • FiercePhish - Full-fledged phishing framework to manage all phishing engagements.
  • Gophish - Open-source phishing framework.
  • King Phisher - Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.
  • Modlishka - Flexible and powerful reverse proxy with real-time two-factor authentication.
  • ReelPhish - Real-time two-factor phishing tool.
  • Social Engineer Toolkit (SET) - Open source pentesting framework designed for social engineering featuring a number of custom attack vectors to make believable attacks quickly.
  • SocialFish - Social media phishing framework that can run on an Android phone or in a Docker container.
  • phishery - TLS/SSL enabled Basic Auth credential harvester.
  • wifiphisher - Automated phishing attacks against WiFi networks.

Static Analyzers

  • Brakeman - Static analysis security vulnerability scanner for Ruby on Rails applications.
  • FindBugs - Free software static analyzer to look for bugs in Java code.
  • Progpilot - Static security analysis tool for PHP code.
  • RegEx-DoS - Analyzes source code for Regular Expressions susceptible to Denial of Service attacks.
  • bandit - Security oriented static analyser for Python code.
  • cppcheck - Extensible C/C++ static analyzer focused on finding bugs.
  • sobelow - Security-focused static analysis for the Phoenix Framework.
  • cwe_checker - Suite of tools built atop the Binary Analysis Platform (BAP) to heuristically detect CWEs in compiled binaries and firmware.

Steganography Tools

  • Cloakify - Textual steganography toolkit that converts any filetype into lists of everyday strings.
  • StegOnline - Web-based, enhanced, and open-source port of StegSolve.
  • StegCracker - Steganography brute-force utility to uncover hidden data inside files.

Vulnerability Databases

  • Bugtraq (BID) - Software security bug identification database compiled from submissions to the SecurityFocus mailing list and other sources, operated by Symantec, Inc.
  • CISA Known Vulnerabilities Database (KEV) - Vulnerabilities in various systems already known to America’s cyber defense agency, the Cybersecurity and Infrastructure Security Agency, to be actively exploited.
  • CXSecurity - Archive of published CVE and Bugtraq software vulnerabilities cross-referenced with a Google dork database for discovering the listed vulnerability.
  • China National Vulnerability Database (CNNVD) - Chinese government-run vulnerability database analoguous to the United States’s CVE database hosted by Mitre Corporation.
  • Common Vulnerabilities and Exposures (CVE) - Dictionary of common names (i.e., CVE Identifiers) for publicly known security vulnerabilities.
  • Exploit-DB - Non-profit project hosting exploits for software vulnerabilities, provided as a public service by Offensive Security.
  • Full-Disclosure - Public, vendor-neutral forum for detailed discussion of vulnerabilities, often publishes details before many other sources.
  • GitHub Advisories - Public vulnerability advisories published by or affecting codebases hosted by GitHub, including open source projects.
  • HPI-VDB - Aggregator of cross-referenced software vulnerabilities offering free-of-charge API access, provided by the Hasso-Plattner Institute, Potsdam.
  • Inj3ct0r - Exploit marketplace and vulnerability information aggregator. (Onion service.)
  • Microsoft Security Advisories and Bulletins - Archive and announcements of security advisories impacting Microsoft software, published by the Microsoft Security Response Center (MSRC).
  • Mozilla Foundation Security Advisories - Archive of security advisories impacting Mozilla software, including the Firefox Web Browser.
  • National Vulnerability Database (NVD) - United States government’s National Vulnerability Database provides additional meta-data (CPE, CVSS scoring) of the standard CVE List along with a fine-grained search engine.
  • Open Source Vulnerabilities (OSV) - Database of vulnerabilities affecting open source software, queryable by project, Git commit, or version.
  • Packet Storm - Compendium of exploits, advisories, tools, and other security-related resources aggregated from across the industry.
  • SecuriTeam - Independent source of software vulnerability information.
  • Snyk Vulnerability DB - Detailed information and remediation guidance for vulnerabilities known by Snyk.
  • US-CERT Vulnerability Notes Database - Summaries, technical details, remediation information, and lists of vendors affected by software vulnerabilities, aggregated by the United States Computer Emergency Response Team (US-CERT).
  • VulDB - Independent vulnerability database with user community, exploit details, and additional meta data (e.g. CPE, CVSS, CWE)
  • Vulnerability Lab - Open forum for security advisories organized by category of exploit target.
  • Vulners - Security database of software vulnerabilities.
  • Vulmon - Vulnerability search engine with vulnerability intelligence features that conducts full text searches in its database.
  • Zero Day Initiative - Bug bounty program with publicly accessible archive of published security advisories, operated by TippingPoint.

Web Exploitation

  • FuzzDB - Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  • Offensive Web Testing Framework (OWTF) - Python-based framework for pentesting Web applications based on the OWASP Testing Guide.
  • Raccoon - High performance offensive security tool for reconnaissance and vulnerability scanning.
  • WPSploit - Exploit WordPress-powered websites with Metasploit.
  • autochrome - Chrome browser profile preconfigured with appropriate settings needed for web application testing.
  • badtouch - Scriptable network authentication cracker.
  • gobuster - Lean multipurpose brute force search/fuzzing tool for Web (and DNS) reconnaissance.
  • sslstrip2 - SSLStrip version to defeat HSTS.
  • sslstrip - Demonstration of the HTTPS stripping attacks.

Intercepting Web proxies

See also Proxies and Machine-in-the-Middle (MITM) Tools.

  • Burp Suite - Integrated platform for performing security testing of web applications.
  • Fiddler - Free cross-platform web debugging proxy with user-friendly companion tools.
  • OWASP Zed Attack Proxy (ZAP) - Feature-rich, scriptable HTTP intercepting proxy and fuzzer for penetration testing web applications.
  • mitmproxy - Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Web file inclusion tools

  • Kadimus - LFI scan and exploit tool.
  • LFISuite - Automatic LFI scanner and exploiter.
  • fimap - Find, prepare, audit, exploit and even Google automatically for LFI/RFI bugs.
  • liffy - LFI exploitation tool.

Web injection tools

  • Commix - Automated all-in-one operating system command injection and exploitation tool.
  • NoSQLmap - Automatic NoSQL injection and database takeover tool.
  • SQLmap - Automatic SQL injection and database takeover tool.
  • tplmap - Automatic server-side template injection and Web server takeover tool.

Web path discovery and bruteforcing tools

Web shells and C2 frameworks

  • Browser Exploitation Framework (BeEF) - Command and control server for delivering exploits to commandeered Web browsers.
  • DAws - Advanced Web shell.
  • Merlin - Cross-platform post-exploitation HTTP/2 Command and Control server and agent written in Golang.
  • PhpSploit - Full-featured C2 framework which silently persists on webserver via evil PHP oneliner.
  • SharPyShell - Tiny and obfuscated ASP.NET webshell for C# web applications.
  • weevely3 - Weaponized PHP-based web shell.

Web-accessible source code ripping tools

  • DVCS Ripper - Rip web accessible (distributed) version control systems: SVN/GIT/HG/BZR.
  • GitTools - Automatically find and download Web-accessible .git repositories.
  • git-dumper - Tool to dump a git repository from a website.
  • git-scanner - Tool for bug hunting or pentesting websites that have open .git repositories available in public.

Web Exploitation Books

Windows Utilities

  • Bloodhound - Graphical Active Directory trust relationship explorer.
  • Commando VM - Automated installation of over 140 Windows software packages for penetration testing and red teaming.
  • Covenant - ASP.NET Core application that serves as a collaborative command and control platform for red teamers.
  • ctftool - Interactive Collaborative Translation Framework (CTF) exploration tool capable of launching cross-session edit session attacks.
  • DeathStar - Python script that uses Empire’s RESTful API to automate gaining Domain Admin rights in Active Directory environments.
  • Empire - Pure PowerShell post-exploitation agent.
  • Fibratus - Tool for exploration and tracing of the Windows kernel.
  • Inveigh - Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/machine-in-the-middle tool.
  • LaZagne - Credentials recovery project.
  • MailSniper - Modular tool for searching through email in a Microsoft Exchange environment, gathering the Global Address List from Outlook Web Access (OWA) and Exchange Web Services (EWS), and more.
  • PowerSploit - PowerShell Post-Exploitation Framework.
  • RID_ENUM - Python script that can enumerate all users from a Windows Domain Controller and crack those user’s passwords using brute-force.
  • Responder - Link-Local Multicast Name Resolution (LLMNR), NBT-NS, and mDNS poisoner.
  • Rubeus - Toolset for raw Kerberos interaction and abuses.
  • Ruler - Abuses client-side Outlook features to gain a remote shell on a Microsoft Exchange server.
  • SCOMDecrypt - Retrieve and decrypt RunAs credentials stored within Microsoft System Center Operations Manager (SCOM) databases.
  • Sysinternals Suite - The Sysinternals Troubleshooting Utilities.
  • Windows Credentials Editor - Inspect logon sessions and add, change, list, and delete associated credentials, including Kerberos tickets.
  • Windows Exploit Suggester - Detects potential missing patches on the target.
  • mimikatz - Credentials extraction tool for Windows operating system.
  • redsnarf - Post-exploitation tool for retrieving password hashes and credentials from Windows workstations, servers, and domain controllers.
  • wePWNise - Generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
  • WinPwn - Internal penetration test script to perform local and domain reconnaissance, privilege escalation and exploitation.