0Day vs DevToolkit

Most security feeds bury you in CVEs that have nothing to do with what you ship. 0Day cuts through that. Zero-days, supply chain attacks, compromised packages, active exploits: filtered to your exact stack, the moment they break. Pick your stack once during onboarding: npm, PyPI, Docker, Kubernetes, React, Rails, OpenSSL, whatever you use and the feed shows you only what touches your tech. No noise. No irrelevant advisories. Just what matters to you. The goal is lead time. Know about a compromised package, a poisoned build pipeline, or an actively exploited CVE before it reaches your CI, your production deployment, or your customers. Before the news cycle. Before the stragglers patch. Before you're the one scrambling at 2am. WHY 0DAY - Privacy-first — no analytics, no tracking, no third-party SDKs - Early warnings before the news cycle — the moment a threat breaks, you know - Stack-aware filtering — see only threats that hit the tools you use - Multi-source corroboration — duplicates merged, sources ranked by tier - Curated, not firehose — every alert is tied to a specific component - Full archive — searchable history of every threat that hit your stack HOW IT WORKS Every item in the feed goes through a three-stage lifecycle so you can tell the difference between "we're watching this" and "this is real, act now": CANDIDATE — A single source has reported an incident. In the pipeline, being correlated, not yet corroborated. EARLY WARNING — Either an authoritative research outlet flagged it, or a second independent source has confirmed the same incident. Pushed to your device immediately — this is the lead time the product is built for. CONFIRMED — Two or more authoritative sources agree, or three independent sources total. High-confidence state you can act on without double-checking. INSIDE THE FEED Each alert gives you a plain-English summary, affected components with version ranges, recommended action, CVE and GHSA identifiers with tappable links to the upstream advisories, and a timeline of when each source reported the incident. PRIVACY We collect only what we need to run the service: your email for sign-in, your stack selections, your notification preferences, and your device token for push delivery. No analytics. No crash reporting SDKs. No advertising identifiers. No cross-app tracking. All data is stored in the European Union on AWS infrastructure. You can delete your account and all associated data instantly from Settings. SUBSCRIPTION 0Day Pro unlocks the full experience: early warning alerts, push notifications, full archive access, remediation guidance, and stack filtering. All new users get a free 14-day trial — no payment required to get started. After the trial, subscribe to keep full access. Offered as a monthly or annual subscription. Payment is charged to your Apple ID at confirmation of purchase. Subscription auto-renews unless cancelled at least 24 hours before the end of the current period. Manage or cancel anytime in iOS Settings → Apple ID → Subscriptions. Terms of Use: https://0day.lous.nl/terms Privacy Policy: https://0day.lous.nl/privacy

A developer's toolkit in your pocket. SSH, SFTP, FTP/FTPS, DNS, Ping, Traceroute, HTTP, WebSocket, SSL and more — all in one app, no accounts, no data sent to the cloud. A single password encrypts everything and keeps it on your device. 13 professional tools, one interface. Native iOS 17 app; no ads, no tracking, no backend. NETWORK DIAGNOSTIC TOOLS • DNS Lookup — A, AAAA, MX, NS, TXT, CNAME records; multiple types in one query • Ping — live latency chart, avg/min/max and packet loss statistics • Traceroute — UDP-based, per-hop latency with reverse DNS • Redirect Checker — follows the HTTP redirect chain step by step; loop detection • SSL Checker — TLS certificate, chain, expiration, cipher suite, SAN list FILE TRANSFER (FTP/SFTP) • FTP, FTPS and SFTP protocol support • Folder upload and download (recursive, including subdirectories) • File permissions (chmod) — numeric mode with preview • Rename, move, copy, bulk delete • Tappable breadcrumb for fast directory navigation • Home icon jumps to the root directory in one tap • Connection details and passwords stored encrypted REMOTE SHELL (SSH) • xterm-256color emulation — top, htop, vim and other screen apps work smoothly • Password, OpenSSH Ed25519 private key, and Secure Enclave-backed P-256 key auth • TOFU host key verification; warns against MITM attacks • Customizable keyboard shortcuts: Ctrl, Esc, Tab, arrow keys, pipe, tilde, slash • Reorder shortcuts by drag and drop • Active SSH sessions stay alive in the background WEB DEVELOPMENT • Built-in browser — WKWebView with Console, Network, and Storage panels • HTTP client — GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS; header editor, JSON/Form/Raw body • WebSocket — connect, send/receive text and binary frames, live log, 500-frame buffer • History for previous requests (HTTP and WebSocket) FILE MANAGER • Local file browser with tappable breadcrumb • Syntax-highlighted code editor: JSON, YAML, Markdown, JavaScript, TypeScript, Python, Bash, HTML, CSS • Image viewer and editor — crop, resize, convert to PNG/JPG/WEBP/HEIC/GIF/ICO, quality control • PDF reader • Media player: MP4, M4V, MOV, MP3, AAC, WAV, MKV, WEBM, AVI, FLV, TS, OGG • Archives: ZIP, TAR, GZIP, BZip2, XZ, 7Z, RAR extraction; ZIP compression • Hardened against archive attacks like zip-slip MEDIA PLAYER (from URL) • MP4, MOV, MP3, M4A, AAC, WAV • HLS live streams (.m3u8) • Custom headers like Authorization and Cookie (HTTPS only) • History of loaded streams NOTES • End-to-end encrypted notes — protected by your app password • Attach photos and files • Attachments open directly in the in-app viewers SECURITY • On-device PBKDF2 (200,000 iterations, SHA-256) and AES-GCM encryption • All connections, passwords, SSH keys, notes, and history stored encrypted • Atomic password change with automatic rollback on failure • Auto-lock — immediate, 1 min, 5 min, 10 min, 30 min, 1 hour • Auto-wipe after too many wrong password attempts (optional; 3, 5, 10, 15, 20) • SSH private keys can be generated inside the Secure Enclave; the key never leaves the device • No data is sent to any cloud. No backend. No account required. WHO IS IT FOR? System administrators, backend and web developers, DevOps and network engineers, and anyone who tinkers with servers and networks. One app, one password, fully local — a professional workstation in your pocket. WHAT CAN YOU DO? • Connect to a remote server via SSH, run commands, tail logs • Transfer files and folders over SFTP, change permissions remotely • Verify DNS, SSL, and redirect chains when launching a new domain • Diagnose network issues with ping, traceroute, public/local IP • Test a REST API, try a WebSocket endpoint • Watch live console output and network traffic in the built-in browser • Download a ZIP archive, extract it, edit the code inside with syntax highlighting