Handpicked cybersecurity links, CTF resources, and pentest references.
Maintained by [WreakDev] & [X3roxDev]
- HackTricks — Essential pentesting wiki.
- Shodan — Search engine for internet-connected devices.
- IDCrawl - Search engine for Peoples, Usernames, Phone Numbers, Emails
- Wayback Machine - Internet Archive is a non-profit library of millions of free texts, movies, software, music, websites, and more.
- TryHackMe — Interactive platform ranging from basics to advanced Red Teaming.
- Hack The Box — Advanced training labs and real-world scenarios.
- PortSwigger Web Security Academy — Comprehensive web security training.
- CryptoHack - A free, fun platform for learning modern cryptography.
- OverTheWire - A wargame-style game that teaches you the basics of the command line and Linux.
- Root-Me - It contains hundreds of diverse security challenges categorized by focus area (web, crypto, forensics).
- CyLab Security Academy (formerly picoCTF) - A free, globally popular ethical hacking learning platform from an expert team at Carnegie Mellon University. It offers over 500 interactive CTF challenges, ranging from the absolute basics to advanced techniques.
- GTFOBins — Unix binaries and privilege escalation.
- LOLBAS — Windows Living Off The Land Binaries and Scripts.
- CyberChef — The Cyber Swiss Army Knife for encryption, encoding, and data analysis.
- dCode — Ciphers & cipher detection tools.
- OnlineHashCrack - for quickly cracking basic hashes.
- Hashcat - World's fastest and most advanced password recovery utility.
- John The Ripper - John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs.
- JWT.io — JSON Web Token decoder, verifier, and debugger.
- SecLists — The security tester's companion (usernames, passwords, fuzzing payloads).
- WeakPass — Large collection of password lists for security assessments.
- Display Filters — Examples of packet display filters (e.g.,
tcp.port eq 25). - Wireshark Wiki — Comprehensive documentation and guides.
- PayloadsAllTheThings — The ultimate bible for payloads and bypasses.
- RevShells — Advanced reverse shell generator with automatic payload encoding.
- Aperi'Solve - An excellent online tool for image analysis and steganography (it tests dozens of algorithms simultaneously).
- Sonic Visualiser - Visualisation, analysis, and annotation of music audio recordings.
- 0xdf HackTheBox Walkthroughts - In-depth, high-quality walkthroughs and methodology notes for HTB machines.