面向系统、网络、安全与运维管理员的实用工具。

SEC

安全桌

哈希、编码、头字段,以及你更愿意亲自运行的检查。这里不会要求账户。

289–312 / 915

OWASP ASVS Checklist Generator

已上线

Generate ASVS verification checklist by level. The result stays on this page.

打开工具

OAuth 2.0 / OIDC Flow Visualizer

已上线

Visualize auth code, PKCE and client credentials flows. The result stays on this page.

打开工具

PKCE Code Generator

已上线

Generate code_verifier and code_challenge. The result stays on this page.

打开工具

API Security Checklist Generator

已上线

API Security Checklist Generator. OWASP API Top 10 checklist. The result stays on this page.

打开工具

Input Validation Regex Library

已上线

Safe validation patterns for common inputs. The result stays on this page.

打开工具

CVSS v4.0 Calculator

已上线

CVSS v4.0 Calculator. Calculate CVSS 4.0 scores. The result stays on this page.

打开工具

CVSS Vector Decoder

已上线

CVSS Vector Decoder. Explain a CVSS vector string. The result stays on this page.

打开工具

EPSS Score Lookup

已上线

EPSS Score Lookup. Exploit prediction score for a CVE. The result stays on this page.

打开工具

Vulnerability Prioritization Calculator

已上线

Combine CVSS, EPSS, KEV and asset value. The result stays on this page.

打开工具

Remediation SLA Due Date Calculator

已上线

Remediation SLA Due Date Calculator. Due dates by severity and policy. The result stays on this page.

打开工具

SBOM Viewer

已上线

SBOM Viewer. View CycloneDX/SPDX SBOMs in browser. The result stays on this page.

打开工具

SBOM Generator from Manifest

已上线

SBOM Generator from Manifest. Generate SBOM from dependency files. The result stays on this page.

打开工具

Vulnerability Scan Report Summarizer

已上线

Vulnerability Scan Report Summarizer. Summarize Nessus/OpenVAS CSV exports. The result stays on this page.

打开工具

Vulnerability Report Template Generator

已上线

Vulnerability Report Template Generator. Generate remediation report templates. The result stays on this page.

打开工具

IOC Extractor

已上线

Extracts IPs, domains, URLs and hashes from text. The result stays on this page.

打开工具

ATT&CK Navigator Layer Generator

已上线

Generate coverage layers from technique lists. The result stays on this page.

打开工具

Threat Actor Profile Lookup

已上线

Look up known groups, aliases and techniques. The result stays on this page.

打开工具

YARA Rule Builder & Tester

已上线

Build and test YARA rules for detection. The result stays on this page.

打开工具

File Type Identifier (Magic Bytes)

已上线

Identify true file type from header bytes. The result stays on this page.

打开工具

PE File Header Viewer

已上线

Static view of Windows executable headers for triage. The result stays on this page.

打开工具

Strings Extractor

已上线

Extract printable strings from a file in browser. The result stays on this page.

打开工具

Threat Intel Feed Formatter

已上线

Convert IOC lists to firewall/SIEM import formats. The result stays on this page.

打开工具

MFA Method Comparison

已上线

Compare SMS, TOTP, push, FIDO2 and passkeys. The result stays on this page.

打开工具

Passkey/FIDO2 Readiness Checker

已上线

Assess passkey readiness of apps and devices. The result stays on this page.

打开工具