Offensive Security resources
This section provides access to useful resources with a simple design in mind. Its structure will stay flat, so there is no need to navigate through multiple nested pages. If a topic is particularly extensive and manually maintained, please create a separate page for it (e.g. PHP Injections) and list all related payloads there.
Wikis, Blogs & Documentations
Section titled “Wikis, Blogs & Documentations”Solid sources of knowledge about offensive security, techniques, and more.
- 0xBEN blog Write ups, methodologies, techniques, walkthroughs
- 0xdf hacks stuff HTB write ups, cheatsheets and posts
- Black Hills InfoSec Tools, posts with various techniques
- Hacking Articles Posts with various hacks, POCs and write ups
- Hacktricks Techniques, payloads, cheatsheets
- M4lwhere Hacking Notes Techniques, payloads
- Paged Out One article - one page magazine with programming tricks, hacking etc.
- Pentest Monkey Posts with various attacks and hacks
- Red Team Notes Techniques, payloads, cheatsheets
- SpecterOPS Tools and posts from team responsible for BloodHound
- The Hacker Recipes Techniques, payloads
Intel, Databases & Repositories
Section titled “Intel, Databases & Repositories”References, datasets, and curated lists for recon, vuln research and payload resources.
- Awesome list of awesome lists #Security section contains various useful stuff
- Chaos - The Internet Database Bug bounties with discovered subdomains
- Exploit Database Vulns, Exploits, PoCs
- Rapid7 DB Vulns, metasploit exploits
- SecLists Security testing wordlists and resources
- Shodan Search engine for internet accessible devices
- swisskyrepo Repositories for projects like PayloadsAllTheThings, InternalAllTheThings etc.
Offensive tooling organized by use case. Single-purpose tools stay in their relevant subcategory, broader collections and automation go into Misc.
Recon and Discovery
Section titled “Recon and Discovery”Tooling for mapping attack surface, discovering assets and automating reconnaissance workflows.
Web Fuzzing
Section titled “Web Fuzzing”Fast content discovery tools for directories, endpoints, vhosts and parameters.
- ffuf Go-based fuzzer/enumeration tool for discovering web content, vhosts and parameters
- GoBuster Go-based fuzzer/enumeration tool for discovering web content
Wordlists and Wordlist Generators
Section titled “Wordlists and Wordlist Generators”Inputs for bruteforce, content discovery and credential attacks.
- CeWL Custom Word List generator
- CrackStation Wordlists and cracking
- DefaultCreds Default credentials for various services
Cracking and Data Analysis
Section titled “Cracking and Data Analysis”Tools for password recovery and quick manipulation of encoded, encrypted or mangled data.
- CyberChef Cyber Swiss Army Knife web app for encoding, decoding and data analysis
- hashcat Advanced password recovery tool
Windows, AD and Protocol Abuse
Section titled “Windows, AD and Protocol Abuse”Tools and references for attacking Windows environments, Active Directory and network protocols.
- gentilkiwi repos Repositories for projects like mimikatz, kekeo and more
- HarmJ0y Repositories for projects like PowerView, Rubeus and more
- impacket Collection of Python classes to work with network protocols
- Inveigh Tool for sniffing and spoofing packets for various protocols with focus on Windows
- LOLBAS Live-off-the-land binaries for Windows
- WADComs Offensive tools cheatsheet against Windows
Priv Esc
Section titled “Priv Esc”Scanners and references for identifying and abusing privilege escalation vectors.
- GTFOBins List of Unix-like execs and how they can lead to priv esc
- PEASS-ng Privilege escalation scanners
Reverse Engineering
Section titled “Reverse Engineering”Frameworks for static and dynamic analysis of binaries and firmware.
Hardware and RF
Section titled “Hardware and RF”Resources for physical adjacent attacks and RF tooling ecosystems.
Misc and Automation
Section titled “Misc and Automation”Broader tool collections and security automations.
- Reverse Shell Generator Quick Reverse Shell payloads generator
- RedTeam Tools Collection of tools useful in red teaming
- secureCodeBox Kubernetes-based modular toolchain for continuous, automated security scans
- zsh-aliases Various aliases to work faster during CTFs
Training
Section titled “Training”Hands-on learning resources split between interactive platforms and deliberately vulnerable targets.
Platforms
Section titled “Platforms”Online platforms with structured challenges, learning paths and guided exercises.
- Caldera Scalable, Automated Adversary Emulation Platform
- DynamiteLab Large collection of PCAP files to analyze and learn from
- HackTheBox Labs offer simulated environments (boxes) to hack and challenges, while Academy offers various learning paths to many security areas
- OverTheWire Various challenges to learn bash, web apps and more
- PentesterLab Security Platform for learning particular techniques
- PortSwigger Academy Web security challenges with heavy focus on using Burp Suite
- Root Me Platform for training hacking skills
- TryHackMe Security learning platform dividing challenges into rooms
- UnderTheWire Powershell based challenges
Vulnerable Machines and Dummies
Section titled “Vulnerable Machines and Dummies”Deliberately broken apps, VMs and cluster deployments to practice exploitation in a safe environment.
- DVWA Damn Vulnerable Web App, another vulnerable web app for testing
- EKS Cluster Games Challenges with intentionally flawed EKS cluster
- Kubernetes Goat Deliberately vulnerable K8s deployment for education
- Metasploitable2 Vulnerable version of Ubuntu Linux
- Metasploitable3 VM full of security vulnerabilities meant for exploits testing
- OWASP Juice Shop Sophisticated insecure web application