Resource Library

HackTricks

General

Comprehensive pentesting & hacking tricks wiki covering everything from enumeration to exploitation.

PayloadsAllTheThings

Web Security

List of useful payloads and bypass for web application security and pentesting.

GTFOBins

Penetration Testing

Curated list of Unix binaries that can be used to bypass local security restrictions.

LOLBAS

Red Team

Living Off The Land Binaries, Scripts and Libraries - Windows equivalent of GTFOBins.

MITRE ATT&CK

General

Global knowledge base of adversary tactics and techniques based on real-world observations.

Exploit-DB

Penetration Testing

Archive of public exploits and corresponding vulnerable software. Maintained by Offensive Security.

CVE Details

General

Security vulnerability database providing detailed information about CVEs.

CyberChef

General

A web app for encryption, encoding, compression, and data analysis - the Cyber Swiss Army Knife.

OWASP Cheat Sheet Series

Web Security

Collection of high-value information on specific application security topics.

The Hacker Recipes

Penetration Testing

Technical guides and resources for ethical hacking, covering AD, web, and more.

SANS Reading Room

General

Thousands of free research papers on information security topics.

Krebs on Security

General

In-depth security news and investigation by Brian Krebs.

IppSec YouTube

Penetration Testing

Hack The Box walkthrough videos with detailed explanations of techniques.

John Hammond YouTube

General

Cybersecurity content including CTF walkthroughs, malware analysis, and tutorials.

The Cyber Mentor (TCM)

Penetration Testing

Practical ethical hacking courses and content for beginners.

InfoSec Community Discord

General

Large Discord communities for cybersecurity discussions and CTF teams.

Red Team Notes

Red Team

Collection of red team techniques, tools, and methodologies.

Malware Bazaar

Malware Analysis

Sharing malware samples with the infosec community for research.

VirusTotal

Malware Analysis

Free service that analyzes files and URLs for malware detection.

Shodan

Network Security

Search engine for internet-connected devices. Find exposed services and vulnerabilities.

CrackStation

Cryptography

Free password hash lookup service with massive rainbow tables.

AWS Security Documentation

Cloud Security

Official AWS security best practices, guides, and documentation.

Kubernetes Security

Cloud Security

Comprehensive guide to Kubernetes security from CIS benchmarks to runtime security.

DFIR Report

Digital Forensics

Real intrusion analysis reports detailing threat actor tactics, techniques, and procedures.