Enterprise-grade OSINT workbench engineered for SOC analysts, incident responders, and threat hunters. Select a security module below or run an instant lookup with the universal search bar.
AbuseIPDB reputation telemetry, VirusTotal hash analytics, Domain WHOIS/DNS, CVE vulnerability queries, and MAC vendors.
Client-side log formatter for Windows/Syslog, User-Agent & HTTP header audits, and real-time detection regex tester.
Select any dedicated capability to launch in-depth analysis
Global reputation scoring, AbuseIPDB confidence metrics, geolocation, ISP/ASN telemetry, and real-time ThreatFox IoC feeds.
Multi-engine malware verdicts and signatures across 70+ antivirus vendors for suspicious binaries and MD5/SHA-1/SHA-256 hashes.
Domain reputation audits, live authoritative DNS records, threat categories, registrar WHOIS metadata, and malicious host scoring.
NIST National Vulnerability Database intelligence featuring official CVSS v3.1 severities, EPSS probability, and exploit advisories.
Hardware vendor resolution, virtualized MAC detection, private address randomization checks, and official IEEE block allocations.
User-Agent and HTTP security header audits, client-side log beautifier for Windows Events/Syslog, and regex tester for detection engineering.
High-performance hash generator (MD5, SHA, BLAKE), interactive JWT token debugger, Base64/Hex encoding, and cryptographic ciphers.
Curated catalog of Unix binaries that can be exploited to bypass local security restrictions and elevate system privileges.
Automated password wordlist generator with leet-speak, case permutations, number/special suffixes, year appends, and custom affixes. Zero-server processing.
Interactive CIDR calculator, subnet masks, usable host address bounds, broadcast addresses, and authoritative DNS zone resolution.
In-depth RFC-822 header audits, SPF/DKIM/DMARC authentication checks, malicious sender flagging, and hop-by-hop relay route mapping.
Live threat intelligence and zero-day disclosures syndicated from The Hacker News. Automated 45s polling, search filtering, and neon telemetry.
ThreatFox (abuse.ch) • Recent malicious IPs, C2 servers & active malware
Connecting to ThreatFox public IoC intelligence feed...
SudoDeck is an enterprise-grade, privacy-first cybersecurity operations workbench designed for SOC analysts, threat hunters, incident responders, and security researchers. We unify automated real-time threat feeds, hardware reconnaissance, Unix binary auditing, and advanced cryptographic transformations into a single, high-efficiency dashboard.
Multi-engine telemetry aggregating AbuseIPDB reputation scores, VirusTotal malware analytics, live ThreatFox IoC streams, and NIST NVD CVE databases.
Instant hardware vendor resolution, virtualized MAC address flagging, private address randomization checks, and IEEE block classification for forensic network audits.
Client-side log formatter for Windows Event, Syslog RFC-5424, and JSON logs. Interactive regex engine with instant YARA and Sigma detection rule synthesis.
Curated Unix binaries privilege escalation reference for SUID/sudo bypass auditing paired with native Node.js high-performance hashing and JWT token decoders.
Need assistance with threat telemetry, reporting a security vulnerability, or exploring enterprise integrations? Connect with the SudoDeck incident response and security engineering team.
Emergency incident triage, malware reports & malicious IoC feeds.
PGP encrypted submissions accepted. Responsible disclosure policy enforced.
9B4E 72F1 A830 DC65 1904 449E F5A1 3302 9D77 B81C
Use our public PGP key when transmitting sensitive packet captures or zero-day advisories.