Digital Certificate Search ↓

Censys → https://censys.io/

CertDB → https://certdb.com/

crt.sh → https://crt.sh/

Digicert → https://www.digicert.com/help/

DigiCert SSLTools → https://ssltools.digicert.com/checker/

Entrust → https://www.entrust.com/ct-search/

Google → https://transparencyreport.google.com/https/certificates?hl=en

NRC → https://pki.nrc.gov/rudimentary/client/search.htm

spyse_ → https://spyse.com/search/cert



Vulnerability Research & Analysis ↓

Bugcrowd (Bug Bounty) → https://www.bugcrowd.com/

Bugtraq → https://seclists.org/bugtraq/

CERT Vulnerability Research → https://www.kb.cert.org/vuls/

CVE Details → https://www.cvedetails.com/

Exploit Database (EXPLOITDB) → https://www.exploit-db.com/google-hacking-database

Exploitsearch → http://exploitsearch.com/

Full Disclosure → https://seclists.org/fulldisclosure/

GreyNoise Visualizer → https://viz.greynoise.io/

HackerOne (Bug Bounty) → https://www.hackerone.com/

insightVM (commercial) → https://www.rapid7.com/products/insightvm/

KitPloit → https://www.kitploit.com/

MITRE CVE
Common Vulnerabilities and Exposures (CVE®) is a list of entries — each containing an identification number, a description, and at least one public reference — for publicly known cybersecurity vuln... → https://cve.mitre.org/

Nessus (commercial) → https://www.tenable.com/products/nessus/nessus-professional

Nexpose (commercial) → https://www.rapid7.com/products/nexpose/

NIST National Vulnerability DB → http://nvd.nist.gov/

Nmmapper → https://www.nmmapper.com/

NVD → https://nvd.nist.gov/

OpenVAS
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. → https://www.openvas.org/

OpenVAS NVT Feed
he public feed of Network Vulnerability Tests (NVTs). It contains more than 35,000 NVTs (as of April 2014), growing on a daily basis. This feed is configured as the default for OpenVAS. → http://www.openvas.org/openvas-nvt-feed.html

OVAL Patch Vulnerability Compliance DB → https://www.itsecdb.com/oval/

OWASP Web Vulnerability Testing Checklist → https://github.com/amocrenco/owasp-testing-checklist-v4-markdown/blob/master/README.md

Packet Storm → https://packetstormsecurity.com/

Pompem
Pompem is an open source tool, which is designed to automate the search for exploits in major databases. Developed in Python, has a system of advanced search, thus facilitating the work of pentesters and ethical hackers. In its current version, performs searches in databases: Exploit-db, 1337day, Packetstorm Security... → https://github.com/rfunix/Pompem

Punk Spider Web App Vuln Search Engine → http://www.punkspider.org/

Qualys (commercial) → https://www.qualys.com/

Secunia Research Flexera → https://secuniaresearch.flexerasoftware.com/community/research/

SecurityFocus → https://www.securityfocus.com/

Shodan Exploits → https://exploits.shodan.io/welcome

sploitus (Exploit Search) → https://sploitus.com/

US CERT → https://www.us-cert.gov/

Vulmon → https://vulmon.com/

Vulncode-db → https://www.vulncode-db.com/

Vulners → https://vulners.com/landing

ZERODIUM → https://www.zerodium.com/program.html