📚 The OneHack Link Bible — Every Site Worth Bookmarking, Built by All of Us

One thread, the whole community’s best links — 25 working sites to start, yours go under it

Hey everyone in this amazing OneHack community! :waving_hand: :sparkles: First off, huge thanks to everyone who actively comments, replies, and shares knowledge here, as well as the admins and mods who keep everything running smoothly. A special shout-out to @SRZ for always keeping a watchful eye on the threads! :eye::fire:

I wanted to start a mega-thread where we can all share cool and valuable resources — the goal is simple: build an absolute goldmine of information :gem_stone: where anyone browsing can easily find something that sparks their interest.

Drop yours below, one per line — the name as the link, then what it does in your own words:
• :globe_with_meridians: Unique websites & URLs · :books: Must-read books & articles · :popcorn: Streaming links · :open_book: Topic “bibles” & deep-dive guides · :light_bulb: Anything else worth checking out

That said, I’ll start. Every link below opens today, sorted into shelves so you find your thing in seconds:

🛡️ Cybersecurity, OSINT & Tech — 8 sites

• :shield: SecTools – A curated list of 125 top network security tools with detailed explanations
• :magnifying_glass_tilted_left: DorkGen – An easy-to-use Google Dork generator for OSINT and advanced search queries
• :man_detective: OSINT Framework – An essential collection of open-source intelligence gathering tools and resources
• :globe_with_meridians: CyberChef – The “Cyber Swiss Army Knife” for encoding, decoding, encrypting, and parsing data formats right in the browser
• :man_detective: Have I Been Pwned – Check if your email or passwords have been compromised in data breaches
• :test_tube: VirusTotal – Analyze suspicious files, domains, IPs, and URLs to detect malware
• :cloud: Aman Hardikar – A rich repository of cloud mind maps, pentesting guides, and cybersecurity reading material
• :unlocked: PrimeXaTools – A hub for cracking tools. Always test inside an RDP or virtual machine for safety!

🖥️ Dev, Hosting & Testing — 4 sites

• :desktop_computer: AppOnFly – Free temporary RDP access (approx. 18 minutes). Perfect for safely testing software or scripts
• :globe_with_meridians: Portmap.io – Expose your local server/device to the internet without needing a public IPv4 address
• :laptop: CodePen – An interactive online development environment for front-end web design
• :memo: Paster.sh – A modern, customizable Pastebin alternative for quick text and code sharing

📚 Free Media, Learning & Bibles — 6 sites

• :popcorn: FMHY – A massive hub for streaming content, tools, and broad resources
• :books: Internet Archive – A massive digital library of free books, movies, software, music, and archived web pages
• :brain: Roadmap.sh – Community-created developer roadmaps, learning paths, and guides for every tech role
• :graduation_cap: Class Central – An aggregator for thousands of free online courses (MOOCs) from top universities
• :light_bulb: wikiHow – Step-by-step guides on how to do almost anything
• :brain: Assume School – A site based on the Law of Assumption (re-sharing for newcomers)

📄 Documents & Downloads — 3 sites

• :books: Scribd downloader 1 · Scribd downloader 2 – Download documents from Scribd for free
• :hammer_and_wrench: iFixit – DIY repair guides for almost anything. Not as actively updated as before, still super useful

🧰 Web Tools & Productivity — 4 sites

• :hammer_and_wrench: TinyWow – Free online tools for PDFs, video editing, image manipulation, and file conversions without sign-ups
• :file_folder: ToffeeShare – Share files directly from your device to another via peer-to-peer (P2P) without file size limits or cloud uploads
• :artist_palette: Remove.bg – Fast, automatic background removal for images
• :key: Keyword.io – Generate long-tail keyword suggestions starting from a single seed word

If you have more pages, share them below; I’ll be updating the list little by little. :backhand_index_pointing_down::rocket:

One link from each of us and this becomes the page you open first.

Appreciate the shout-out, KTYM. The watchful eye is a whole bench, not one chair — Team-SRZ, reporting for duty, first drop below. :handshake:

The sites nobody lists — 85 pages that do one everyday job for free, no account, no install. They never show up in a “best free tools” post because nobody makes money from them, and a website that makes no money is basically a ghost. Sorted by the moment you need them, because you will not remember any of these names. Nobody does.

🧾 Before you pay or trust someone (it's always someone) — 8

• ICANN Lookup — who registered that “official” site and when it expires. Spoiler: last month, from a bedroom.
• VIES VAT checker — paste the European shop’s VAT number; a real business shows up. A fake one shows up too, later, in your bank statement.
• EU Safety Gate — every recalled product with photos and model numbers. Check the toaster before the toaster checks you.
• NHTSA VIN Decoder — the car’s real year, make, model and engine. The seller’s story is a separate document.
• FCC ID Search — the gadget’s real maker and photos of its guts. Sometimes the guts are a different brand wearing a costume.
• UK Companies House — any UK company’s owners, address and accounts. “Established 1987” meets “incorporated last Tuesday”.
• Your Europe: Guarantees — your legal refund, repair and replacement rights per EU country. Print it. Bring it. Watch faces change.
• Frankfurter — currency charts on real central-bank rates. No signup, no “create an account to see the number”.

🔒 Before you install or click (the app is already watching) — 8

• εxodus — type an app’s name, see every tracker inside before installing. A flashlight app with 14 trackers is a flashlight with a hobby.
• Blacklight — paste a site, see what it runs on you. Recipe blogs are the worst offenders. The lasagna is watching.
• Browser Fingerprint (ETH Zürich) — everything your browser leaks right now. Incognito mode is a hat, not a mask.
• Messageheader — paste an email’s full header, see every server it crossed. “From: your bank”, via a server in a hurry.
• OONI Explorer — is that site blocked in your country, and how. Now you know who to be quiet about.
• IODA — live map of internet outages by country. Good for “is it me”. It’s rarely you. Sometimes it’s a whole nation.
• BlahDNS — one address in your phone’s Private DNS setting and apps stop loading ads. Your phone gets quieter. Suspiciously.
• test-ipv6 — pass or fail on whether your connection speaks IPv6. Most fail. Most don’t care. Same energy.

📡 When you want something live right now (instead of sleeping) — 14

• Open Source AIS — real ships crossing the sea, updated every minute. Very calming until you notice the one going in circles.
• Live Tube Map — every London Underground train moving in 3D. The delays are also live.
• EMSC — earthquakes worldwide within minutes, with reports from people who felt them. “Felt it. Dog left.”
• DSN Now — which NASA dish is talking to which spacecraft, and the delay. Voyager answers in 22 hours. Faster than some group chats.
• Orcasound — live underwater microphones near Seattle. Mostly silence. Then the sea says something.
• Old Faithful cam — a geyser, 24/7. It erupts on time. It has a schedule. It is doing better than most of us.
• Twente WebSDR — a real radio antenna in the Netherlands, in your browser. Somewhere a man is reading numbers to no one.
• FogCam — the world’s oldest webcam, since 1994. Still fog. Committed.
• Old Time Radio — 1930s–50s comedy, mystery and drama, all day. The ads are for cigarettes. History.
• Netflix Top 10 — most-watched by country each week, no account. Now you know what your whole country did last night.
• Telegram /s/ trick — put /s/ before any public channel name (example) and read the whole feed with no app. No install, no “join to see”.
• Spotify embed trick — insert embed/ after open.spotify.com in any song link (example) for a free 30-second preview. Thirty seconds is enough. It’s always the chorus.
• Instagram embed trick — add /embed/captioned/ to any public post or reel link: photo, video, caption, no app, no login wall.
• Threads without login — threads.net/@handle in any browser reads a public profile. Threads didn’t expect visitors either.

🌤️ Before you step outside (a bold move) — 6

• USNO Sun and Moon — sunrise, sunset, moonrise and phase for any place and date, from the US Navy. They also do boats.
• NOAA Aurora 30-minute forecast — where the aurora is visible right now. Then go outside. Outside is required.
• OpenRouteService Reach — click an address, it draws how far you get on foot, bike or car in the minutes you pick. Blunt about your bike, and about you.
• Light Pollution Map — how dark the sky is anywhere. The dark spots are the good spots. Correct.
• Iowa Mesonet — the real temperature, wind or rain at any airport worldwide on any past date. “It didn’t rain on your wedding.” It did.
• Text-only Google Directions — addresses in, plain steps out, no map. Works on a phone with 2% battery and a personality.

🧰 When you need a quick tool (no install, no sign-up form) — 11

• WebWormhole — send a file browser-to-browser with a short spoken code. Nothing stored anywhere. The file simply happened.
• Nullboard — a sticky-note board in one tab, saves itself locally. No “upgrade to add a third list”.
• offline-whiteboard — sketch boxes and arrows offline, exports PNG. Diagrams for ideas that will not survive the meeting.
• UMindMap — type an indented list, it draws the mind map. You look organized. From a distance.
• Spreadshit — a single HTML file spreadsheet you download and use offline. The name says what it thinks of your budget.
• Textarea — type a note, click Share, the URL holds the whole note. Ship the note, not the note-taking app.
• Sticky-header remover — bookmark it, click it, the sticky headers and popups vanish. Suddenly there is a page under all that.
• Dark-mode bookmarklet — a real dark mode for any site, not the inverted-colour crime scene.
• Picture-in-Picture bookmarklet — pops the page’s video into a floating window. Watch things while “working”. We won’t tell.
• Wikipedia’s hidden QR page — Special:QrCode turns any article into a QR code. Wikipedia has a hidden page for everything. Including this.
• math.js — type 12.7 cm to inch and get the answer. A calculator that does not want your email.

🔁 When you need it in another form — 16

• Google Input Tools — type your language in English letters, get the real script. Finally, texting your mother correctly.
• BirdNET — record a bird, it names the species. It’s a pigeon. It’s always a pigeon.
• Musipedia — hum the tune, it finds the song. Sing badly; it has heard worse.
• trace.moe — an anime screenshot in, show + episode + timestamp out. For research purposes.
• BugGuide — post a bug photo, real entomologists name it. Then you know exactly what was in your shoe.
• Demucs.app — a song in, vocals / drums / bass / instruments out, in the browser. Karaoke with the singer removed. The singer never agreed.
• mp3tag.js — drag an MP3 in, fix the title, artist and cover, nothing uploaded. “Track01.mp3” finally gets a name.
• Unlimited:Waifu2x — a blurry photo in, sharpened and enlarged out. Old scans, old memes, old you.
• Whisper Web — audio in, full transcript with timestamps out, in the browser. The 90-minute podcast becomes 4 minutes of reading. As it should.
• Textise — paste a link, get just the readable text. The recipe without the author’s childhood.
• Rewordify — hard text in, plain English out. Legal letters become sentences.
• dotepub — one click, the page is an EPUB or Kindle file. Read it on the beach. Pretend it’s a book.
• Particularly — an article link in, the page read aloud, audio downloadable. Your podcast now. Nobody can stop you.
• SauceNAO — a picture in, the original source out. Stop reposting the repost of the repost.
• Try Pandoc — a Word file in, EPUB / HTML / plain text out, in the browser. Word is optional. It always was.
• Tesseract.js — a photo of a receipt, sign or page in, typed text out. It reads your handwriting better than you do.

📖 When you want to read what's locked or lost — 8

• WikiBlame — paste a Wikipedia sentence, see who added it and when. Usually someone with a grudge, at 3 a.m.
• David Rumsey Map Collection — 150,000+ antique maps of any place, free. Your town was a swamp. Good to know.
• CORE — 449 million research papers, opens the free copy past the paywall. The paywall is a suggestion.
• Wikipedia BookSources — paste an ISBN, get libraries, shops and free copies of that exact edition. “Free” is a section. It’s near the top.
• Wikipedia Nearby — on your phone: articles about the landmarks around you, by distance. That plain building has a story. It’s usually a fire.
• Liverpool Interaction Checker — list your medicines, it flags dangerous mixes in colour. Red means stop. It’s not decoration.
• dict.org — one word, 15+ dictionaries at once, no ads. The word means what you feared.
• How Everything Works — a physics professor answers everyday questions in plain language. Why the microwave hums. Why the container shrinks. Why you.

⏪ When it's gone, or you miss the old internet (it misses you too) — 14

• Ghostarchive — paste a page or YouTube link, get a permanent copy that survives removal. The internet forgets. This one doesn’t.
• Arquivo.pt — a dead site’s address in, saved copies back to 1996 out. Your first website. Yes, that one.
• Unddit — swap reddit.com for undelete.pullpush.io in any link and removed comments come back. Nothing is gone. Nothing.
• Missing Tweet Finder — paste a tweet or account link, it checks several archives for the vanished text. Screenshots were never necessary. They’re just funnier.
• PastVu — click any spot on the world map, see old street photos of it. Same corner, worse hats.
• City Roads — type a city, get a poster made only of its streets. Some cities look like a nervous system. Some look like a mistake.
• Closer to Van Eyck — zoom into a 600-year-old painting closer than eyes can. The brushstrokes have brushstrokes.
• Museum Shuffle — one random Rijksmuseum artwork per reload. Art without the walking.
• Smithsonian 3D — spin real 3D scans of museum objects, download the free ones. Own a mammoth. Digitally. Legally.
• v86 — pick an OS, it boots in your tab. Windows 98 in a browser, in 2026, running better than it did in 1998.
• Floodgap Gopher — the pre-web internet, text menus only. No ads. No cookie banner. No one. Peace.
• Telehack — a simulated 1980s–90s internet you explore by typing the real old commands. Hack like the movies. Consequences like a game.
• Rocksolid Light — real Usenet newsgroups in your browser, no signup. People arguing since 1995, still not done.
• BBC Sound Effects — 33,000 real BBC recordings, free for personal use. “Crowd, disappointed” is a file. It’s 40 seconds long.

Every one of these opens today with nothing to sign. Add the ones you find the same way — the byproduct pages, not the products. The products already have enough friends.

found severely infected software on primexa tools

Hey bro, that’s right. It’ll flag it as a virus because those tools are designed to check other people’s accounts on websites. That’s why we mention using RDP or a virtual machine. I’ve used those tools a lot, and I use them in Hyper-V with a virtualized Windows 10, isolated from my physical computer. It’s highly recommended to use those tools for the aforementioned purpose. Anyone who’s worked with them will have noticed that it will always flag it as a virus, even if it isn’t—a false positive. But it depends on who’s running it and how they’re doing it. Also, if the admins or you guys decide to remove it, I could remove the URL from the list without any problem, bro. :smiley:

great work really appreciate

thanks, UnlockTool Pro 2026 has real viruses tho (for example)

Awesome work KYTM. Lots of great/amazing links. Be careful of viruses but thats what a VM is for. Great effort.

Ninite — Pick the Windows apps you want, download one installer, and run it to install them together. Handy when setting up a new PC. Keep the installer and run it again later to update those apps. Free for home use.