# Application security-To understand attack surface area

**Resource ID:** `@APPSEC1`

**Author:** akh  
**Category:** Technology  
**Tags:** appsec, cyber  
**Published:** 2026-07-19

These tools will help you the attack surface area before testing

**Primary link:** <https://crt.sh>

## Bundled Resources

### crt.sh

crt.sh is a web-based service that allows users to search and analyze SSL/TLS certificates published in Certificate Transparency (CT) logs.

<https://crt.sh>

### urlscan io

URLScan.io is a web-based URL analysis and threat intelligence platform that safely scans and analyzes websites.

<https://urlscan.io>

### wappalyzer.com

Wappalyzer helps sales and GTM teams build technographic prospect lists, enrich CRM records, and monitor competitor installs with data from millions of websites this helps in understanding attack surface area

<https://www.wappalyzer.com>

### Wayback Machine

The Wayback Machine is an initiative of the Internet Archive, a 501(c)(3) non-profit, building a digital library of Internet sites

<http://web.archive.org>

### Shodan

A search engine for internet-connected devices, allowing users to discover servers, IoT devices, and open ports across the web.

<https://www.shodan.io>

### VirusTotal

A free service that analyzes suspicious files and URLs to detect malware and automatically shares them with the security community.

<https://www.virustotal.com/gui/home/url>

### Have I Been Pwned

A popular data breach aggregation service that allows users to check if their personal data has been compromised in data leaks.

<https://haveibeenpwned.com>

### Censys

Censys helps organizations, individuals, and researchers find and monitor every server on the Internet to reduce exposure and improve security.

<https://search.censys.io>

### DNSTwister

A domain name permutation engine and rogue domain monitoring tool that helps identify potential phishing and typosquatting threats

<https://www.dnstwister.com>

### DNSDumpster

A free passive DNS research tool used to discover subdomains, host records, and generate visual infrastructure maps instantly.

<https://dnsdumpster.com>

### Pulsedive

A community threat intelligence platform that compiles open-source feeds, enriches indicators of compromise, and assigns real-time risk scores.

<https://pulsedive.com>

### Web Check

An open-source, entirely free website intelligence analyzer providing comprehensive infrastructure data, SSL details, and security headers from one clean interface.

<https://web-check.xyz>

### CyberChef

A completely free, web-based "cyber swiss army knife" used to encode, decode, decrypt, parse, and analyze complex data structures.

<https://gchq.github.io/CyberChef/>

---

Source: https://infogts.com/resource/fe67b6ba-6ad4-40e8-984c-a57a4c3a8a32 · InfoGTS