📚 The OneHack Link Bible — Every Site Worth Bookmarking, Built by All of Us

One thread, the whole community’s best links — 25 verified sites to start, yours go under it

Hey everyone in this amazing OneHack community! :waving_hand: :sparkles: First off, huge thanks to everyone who actively comments, replies, and shares knowledge here, as well as the admins and mods who keep everything running smoothly. A special shout-out to @SRZ for always keeping a watchful eye on the threads! :eye::fire:

I wanted to start a mega-thread where we can all share cool and valuable resources — the goal is simple: build an absolute goldmine of information :gem_stone: where anyone browsing can easily find something that sparks their interest.

Drop yours below, one per line — the name as the link, then what it does in your own words:
:globe_with_meridians: Unique websites & URLs · :books: Must-read books & articles · :popcorn: Streaming links · :open_book: Topic “bibles” & deep-dive guides · :light_bulb: Anything else worth checking out

That said, I’ll start. Every link below opens today, sorted into shelves so you find your thing in seconds:

🛡️ Cybersecurity, OSINT & Tech — 8 sites

:shield: SecTools – A curated list of 125 top network security tools with detailed explanations
:magnifying_glass_tilted_left: DorkGen – An easy-to-use Google Dork generator for OSINT and advanced search queries
:man_detective: OSINT Framework – An essential collection of open-source intelligence gathering tools and resources
:globe_with_meridians: CyberChef – The “Cyber Swiss Army Knife” for encoding, decoding, encrypting, and parsing data formats right in the browser
:man_detective: Have I Been Pwned – Check if your email or passwords have been compromised in data breaches
:test_tube: VirusTotal – Analyze suspicious files, domains, IPs, and URLs to detect malware
:cloud: Aman Hardikar – A rich repository of cloud mind maps, pentesting guides, and cybersecurity reading material
:unlocked: PrimeXaTools – A hub for cracking tools. Always test inside an RDP or virtual machine for safety!

🖥️ Dev, Hosting & Testing — 4 sites

:desktop_computer: AppOnFly – Free temporary RDP access (approx. 18 minutes). Perfect for safely testing software or scripts
:globe_with_meridians: Portmap.io – Expose your local server/device to the internet without needing a public IPv4 address
:laptop: CodePen – An interactive online development environment for front-end web design
:memo: Paster.sh – A modern, customizable Pastebin alternative for quick text and code sharing

📚 Free Media, Learning & Bibles — 6 sites

:popcorn: FMHY – A massive hub for streaming content, tools, and broad resources
:books: Internet Archive – A massive digital library of free books, movies, software, music, and archived web pages
:brain: Roadmap.sh – Community-created developer roadmaps, learning paths, and guides for every tech role
:graduation_cap: Class Central – An aggregator for thousands of free online courses (MOOCs) from top universities
:light_bulb: wikiHow – Step-by-step guides on how to do almost anything
:brain: Assume School – A site based on the Law of Assumption (re-sharing for newcomers)

📄 Documents & Downloads — 3 sites

:books: Scribd downloader 1 · Scribd downloader 2 – Download documents from Scribd for free
:hammer_and_wrench: iFixit – DIY repair guides for almost anything. Not as actively updated as before, still super useful

🧰 Web Tools & Productivity — 4 sites

:hammer_and_wrench: TinyWow – Free online tools for PDFs, video editing, image manipulation, and file conversions without sign-ups
:file_folder: ToffeeShare – Share files directly from your device to another via peer-to-peer (P2P) without file size limits or cloud uploads
:artist_palette: Remove.bg – Fast, automatic background removal for images
:key: Keyword.io – Generate long-tail keyword suggestions starting from a single seed word

If you have more pages, share them below; I’ll be updating the list little by little. :backhand_index_pointing_down::rocket:

One link from each of us and this becomes the page you open first.

2 Likes

Appreciate the shout-out, KTYM. The watchful eye is a whole bench, not one chair — Team-SRZ, reporting for duty, first drop below. :handshake:

The sites nobody lists — 85 pages that do one everyday job for free, no account, no install. They never show up in a “best free tools” post because nobody makes money from them, and a website that makes no money is basically a ghost. Sorted by the moment you need them, because you will not remember any of these names. Nobody does.

🧾 Before you pay or trust someone (it's always someone) — 8

ICANN Lookup — who registered that “official” site and when it expires. Spoiler: last month, from a bedroom.
VIES VAT checker — paste the European shop’s VAT number; a real business shows up. A fake one shows up too, later, in your bank statement.
EU Safety Gate — every recalled product with photos and model numbers. Check the toaster before the toaster checks you.
NHTSA VIN Decoder — the car’s real year, make, model and engine. The seller’s story is a separate document.
FCC ID Search — the gadget’s real maker and photos of its guts. Sometimes the guts are a different brand wearing a costume.
UK Companies House — any UK company’s owners, address and accounts. “Established 1987” meets “incorporated last Tuesday”.
Your Europe: Guarantees — your legal refund, repair and replacement rights per EU country. Print it. Bring it. Watch faces change.
Frankfurter — currency charts on real central-bank rates. No signup, no “create an account to see the number”.

🔒 Before you install or click (the app is already watching) — 8

εxodus — type an app’s name, see every tracker inside before installing. A flashlight app with 14 trackers is a flashlight with a hobby.
Blacklight — paste a site, see what it runs on you. Recipe blogs are the worst offenders. The lasagna is watching.
Browser Fingerprint (ETH Zürich) — everything your browser leaks right now. Incognito mode is a hat, not a mask.
Messageheader — paste an email’s full header, see every server it crossed. “From: your bank”, via a server in a hurry.
OONI Explorer — is that site blocked in your country, and how. Now you know who to be quiet about.
IODA — live map of internet outages by country. Good for “is it me”. It’s rarely you. Sometimes it’s a whole nation.
BlahDNS — one address in your phone’s Private DNS setting and apps stop loading ads. Your phone gets quieter. Suspiciously.
test-ipv6 — pass or fail on whether your connection speaks IPv6. Most fail. Most don’t care. Same energy.

📡 When you want something live right now (instead of sleeping) — 14

Open Source AIS — real ships crossing the sea, updated every minute. Very calming until you notice the one going in circles.
Live Tube Map — every London Underground train moving in 3D. The delays are also live.
EMSC — earthquakes worldwide within minutes, with reports from people who felt them. “Felt it. Dog left.”
DSN Now — which NASA dish is talking to which spacecraft, and the delay. Voyager answers in 22 hours. Faster than some group chats.
Orcasound — live underwater microphones near Seattle. Mostly silence. Then the sea says something.
Old Faithful cam — a geyser, 24/7. It erupts on time. It has a schedule. It is doing better than most of us.
Twente WebSDR — a real radio antenna in the Netherlands, in your browser. Somewhere a man is reading numbers to no one.
FogCam — the world’s oldest webcam, since 1994. Still fog. Committed.
Old Time Radio — 1930s–50s comedy, mystery and drama, all day. The ads are for cigarettes. History.
Netflix Top 10 — most-watched by country each week, no account. Now you know what your whole country did last night.
Telegram /s/ trick — put /s/ before any public channel name (example) and read the whole feed with no app. No install, no “join to see”.
Spotify embed trick — insert embed/ after open.spotify.com in any song link (example) for a free 30-second preview. Thirty seconds is enough. It’s always the chorus.
Instagram embed trick — add /embed/captioned/ to any public post or reel link: photo, video, caption, no app, no login wall.
Threads without loginthreads.net/@handle in any browser reads a public profile. Threads didn’t expect visitors either.

🌤️ Before you step outside (a bold move) — 6

USNO Sun and Moon — sunrise, sunset, moonrise and phase for any place and date, from the US Navy. They also do boats.
NOAA Aurora 30-minute forecast — where the aurora is visible right now. Then go outside. You have to actually go outside.
OpenRouteService Reach — click an address, it draws how far you get on foot, bike or car in the minutes you pick. Honest about your bike, and about you.
Light Pollution Map — how dark the sky is anywhere. The dark spots are the good spots. Correct.
Iowa Mesonet — the real temperature, wind or rain at any airport worldwide on any past date. “It didn’t rain on your wedding.” It did.
Text-only Google Directions — addresses in, plain steps out, no map. Works on a phone with 2% battery and a personality.

🧰 When you need a quick tool (no install, no sign-up form) — 11

WebWormhole — send a file browser-to-browser with a short spoken code. Nothing stored anywhere. The file simply happened.
Nullboard — a sticky-note board in one tab, saves itself locally. No “upgrade to add a third list”.
offline-whiteboard — sketch boxes and arrows offline, exports PNG. Diagrams for ideas that will not survive the meeting.
UMindMap — type an indented list, it draws the mind map. You look organized. From a distance.
Spreadshit — a single HTML file spreadsheet you download and use offline. The name says what it thinks of your budget.
Textarea — type a note, click Share, the URL holds the whole note. Ship the note, not the note-taking app.
Sticky-header remover — bookmark it, click it, the sticky headers and popups vanish. Suddenly there is a page under all that.
Dark-mode bookmarklet — a real dark mode for any site, not the inverted-colour crime scene.
Picture-in-Picture bookmarklet — pops the page’s video into a floating window. Watch things while “working”. We won’t tell.
Wikipedia’s hidden QR page — Special:QrCode turns any article into a QR code. Wikipedia has a hidden page for everything. Including this.
math.js — type 12.7 cm to inch and get the answer. A calculator that does not want your email.

🔁 When you need it in another form — 16

Google Input Tools — type your language in English letters, get the real script. Finally, texting your mother correctly.
BirdNET — record a bird, it names the species. It’s a pigeon. It’s always a pigeon.
Musipedia — hum the tune, it finds the song. Sing badly; it has heard worse.
trace.moe — an anime screenshot in, show + episode + timestamp out. For research purposes.
BugGuide — post a bug photo, real entomologists name it. Then you know exactly what was in your shoe.
Demucs.app — a song in, vocals / drums / bass / instruments out, in the browser. Karaoke with the singer removed. The singer never agreed.
mp3tag.js — drag an MP3 in, fix the title, artist and cover, nothing uploaded. “Track01.mp3” finally gets a name.
Unlimited:Waifu2x — a blurry photo in, sharpened and enlarged out. Old scans, old memes, old you.
Whisper Web — audio in, full transcript with timestamps out, in the browser. The 90-minute podcast becomes 4 minutes of reading. As it should.
Textise — paste a link, get just the readable text. The recipe without the author’s childhood.
Rewordify — hard text in, plain English out. Legal letters become sentences.
dotepub — one click, the page is an EPUB or Kindle file. Read it on the beach. Pretend it’s a book.
Particularly — an article link in, the page read aloud, audio downloadable. Your podcast now. Nobody can stop you.
SauceNAO — a picture in, the original source out. Stop reposting the repost of the repost.
Try Pandoc — a Word file in, EPUB / HTML / plain text out, in the browser. Word is optional. It always was.
Tesseract.js — a photo of a receipt, sign or page in, typed text out. It reads your handwriting better than you do.

📖 When you want to read what's locked or lost — 8

WikiBlame — paste a Wikipedia sentence, see who added it and when. Usually someone with a grudge, at 3 a.m.
David Rumsey Map Collection — 150,000+ antique maps of any place, free. Your town was a swamp. Good to know.
CORE — 449 million research papers, opens the free copy past the paywall. The paywall is a suggestion.
Wikipedia BookSources — paste an ISBN, get libraries, shops and free copies of that exact edition. “Free” is a section. It’s near the top.
Wikipedia Nearby — on your phone: articles about the landmarks around you, by distance. That plain building has a story. It’s usually a fire.
Liverpool Interaction Checker — list your medicines, it flags dangerous mixes in colour. Red means stop. It’s not decoration.
dict.org — one word, 15+ dictionaries at once, no ads. The word means what you feared.
How Everything Works — a physics professor answers everyday questions in plain language. Why the microwave hums. Why the container shrinks. Why you.

⏪ When it's gone, or you miss the old internet (it misses you too) — 14

Ghostarchive — paste a page or YouTube link, get a permanent copy that survives removal. The internet forgets. This one doesn’t.
Arquivo.pt — a dead site’s address in, saved copies back to 1996 out. Your first website. Yes, that one.
Unddit — swap reddit.com for undelete.pullpush.io in any link and removed comments come back. Nothing is gone. Nothing.
Missing Tweet Finder — paste a tweet or account link, it checks several archives for the vanished text. Screenshots were never necessary. They’re just funnier.
PastVu — click any spot on the world map, see old street photos of it. Same corner, worse hats.
City Roads — type a city, get a poster made only of its streets. Some cities look like a nervous system. Some look like a mistake.
Closer to Van Eyck — zoom into a 600-year-old painting closer than eyes can. The brushstrokes have brushstrokes.
Museum Shuffle — one random Rijksmuseum artwork per reload. Art without the walking.
Smithsonian 3D — spin real 3D scans of museum objects, download the free ones. Own a mammoth. Digitally. Legally.
v86 — pick an OS, it boots in your tab. Windows 98 in a browser, in 2026, running better than it did in 1998.
Floodgap Gopher — the pre-web internet, text menus only. No ads. No cookie banner. No one. Peace.
Telehack — a simulated 1980s–90s internet you explore by typing the real old commands. Hack like the movies. Consequences like a game.
Rocksolid Light — real Usenet newsgroups in your browser, no signup. People arguing since 1995, still not done.
BBC Sound Effects — 33,000 real BBC recordings, free for personal use. “Crowd, disappointed” is a file. It’s 40 seconds long.

Every one of these opens today with nothing to sign. Add the ones you find the same way — the byproduct pages, not the products. The products already have enough friends.

1 Like