When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the channels to disclose them properly. As a result, security issues may be left unreported. security.txt defines a standard to help organizations define the process for security researchers to disclose security vulnerabilities securely: securitytxt.org.
Read MoreServer
The magazine computerwoche.de published a list of handy Open Source Intelligence Tools, incl.:
- Maltego – comprehensive tool for graphical link analyses that offers real-time data mining and information gathering, as well as the representation of this information on a node-based graph, making patterns and multiple order connections between said information easily identifiable
- Recon-ng – gathering tool aimed at reducing the time spent harvesting information from open sources
- theHarvester – emails, subdomains and names Harvester
- Shodan – world’s first search engine for Internet-connected devices
- Metagoofil – metadata harvester
- searchcode – search 75 billion lines of code from 40 million projects
- SpiderFoot – automates OSINT so one can find what matters, faster
- Babel X – discover and decipher geographically diverse, multilingual data into actionable insights in real time, babel street’s platform helps interpret real-time data, so one can make clear, decisive decisions that impact any mission
- Mitaka – browser extension for OSINT search
- BuiltWith – search tech stack of specific websites
- Wappalyzer – find the technology stack of any website
- DarkSearch.io – self-declared “first real” “dark web” “search engine” (yet, no longer publicly available)
- Grep.app – tool for searches across git repos
The list seems compiled from pcwdld.com, where more detailed descriptions of each tool can be found.
Furthermore, the OSINT Framework helps gathering information from free tools or resources by providing a very good overview of available applications, platforms, methods etc.
Read MoreSeveral tools can help to check the risk for your emails to be qualified as SPAM.
Microsoft Smart Network Data Services (SNDS)
SNDS is a free service Microsoft offers to senders that provides high-level insight on how subscribers rate the email they receive as well as the health of an IP address as viewed by the Outlook.com system. SNDS provides data based on actual email sent to Outlook.com subscribers. The metrics include:
- Spam complaints
- SmartScreen filter results
- Spam trap hits
SNDS data can help improve your understanding of how the Outlook.com filters and users rate your email: sendersupport.olc.protection.outlook.com/snds.
Mail-Tester
Free tool to check newsletter’s and email’s SPAM score and quality: mail-tester.com.
Read MoreMindProbe is a server to host online experiments. This server runs the open-source software JATOS, which is compatible with several free software packages for developing online experiments, including OpenSesame/ OSWeb, jsPsych, and Lab.JS. MindProbe is sponsored by ESCOP, with Journal of Cognition as their official journal. MindProbe is free: mindprobe.eu.
Read MoreZapier is an online automation tool that connects your favorite apps, such as Gmail, Slack, Mailchimp, and more. You can connect two or more apps to automate repetitive tasks without coding or relying on developers to build the integration. It’s easy enough that anyone can build their own app workflows with just a few clicks.
For example, maybe you get a lot of email attachments in your Gmail account and you want to save them to Dropbox. Every time you get an attachment, you could open up the email, click the attachment, and then save it to Dropbox. Or you can have Zapier automate this for you, saving you time and effort: zapier.com.
Read MoreThe qaul.net-software implements a redundant, open communication principle, in which wireless-enabled computers and mobile devices can directly form a spontaneous network. Text messaging, file sharing and voice calls are possible independent of internet and cellular networks. Qaul.net can spread like a virus, and an Open Source Community can modify it freely. It runs on MacOS, iOS, Windows, Ubuntu, Android alike: https://github.com/qaul/qaul.net.
Read More