KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

Resources

★ 34 Open GitHub ↗

Learning resources, blogs, news, SQL, PowerShell, SQL, Linux, Revers Engineering, Malware

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Resources

- 📄 [CAREER/RESUME/LINKEDIN](#career) 
- 📝 [BLOGS](#blogs)
- 📚 [BOOKS](#books)
- ♟️ [CTF/CHALLANGES/LABS](#ctf) 
- 🎙️ [PODCAST](#podcast)
- 📰 [SECURITY NEWS](#news) 
- 📓 [SECURITY REPORTS](#reports)
- 📺 [YOUTUBE](#youtube) 
- 🗞️ [NEWSLETTERS](#newsletters)

- 🗂️ [ACTIVE DIRECTORY](#ad)
- ⌨️ [BASH](#bash) 
- 🐛 [BUG BOUNTY](#bug)
- 👨‍🍳 [CyberChef](#chef)
- ☁️ [CLOUD](#cloud)
- 🧑‍💻 [DETECTION ENGINEERING](#detect)
- 🕵️ [DFIR](#DFIR)
- 🐟 [DOCKER](#docker)
- 🏭 [ICS/OT](#ot)
- 🛡️ [INFOSEC ANALYST](#analyst)
- ⚙️ [KUBERNETES](#kube)
- 🐧 [LINUX](#linux)
- 🕷️ [MALWARE](#malware)
- 🌐 [NETWORK](#network)
- 👁️‍🗨️ [OSINT](#osint)
- 🔥 [PENTEST](#pentest)
- 🟦 [POWERSHELL](#powershell) 
- 🔒 [PRIVACY](#privacy)
- 🐍 [PYTHON](#python)
- 🍓 [RASPBERRY PI](#rasp)
- *️⃣ [REGEX](#regex) 
- ◀️ [REVERSE ENGINEERING](#reverse) 
- 🧪 [SQL](#sql) 
- 📊 [THREAT HUNTING](#TH)
- 🧠 [THREAT INTELLIGENCE](#TI)
- ⛳ [TRAINING COURSES](#traning)
- 🩹 [VULNERABILITY MANAGEMENT](#vuln)
- 💬 [OTHER](#other)

***

### <a name="career"></a> 📄 CAREER/RESUME/LINKEDIN
- [Heatmap](https://www.cyberseek.org/heatmap.html)
- [Certification Road Map](https://pauljerimy.com/security-certification-roadmap/)
- [Workforce Framework for Cybersecurity](https://www.youtube.com/watch?v=oozqj7axNYM&ab_channel=CareerHackingVillage)
- [LinkedIn Summary](https://www.youtube.com/watch?v=5hNsdH6Y2Mg&lc=&ab_channel=JeffSu)
- [Why Being #OpenToWork on LinkedIn is Working Against You](https://www.youtube.com/watch?v=eEfF7yROrjA&ab_channel=JordanCarroll-TheRemoteJobCoach)
- [Mind the Gap: Leveraging mind maps & self-assessments to develop a personal training plan](https://klrgrz.medium.com/mind-the-gap-leveraging-mind-maps-self-assessments-to-develop-a-personal-training-plan-8210137f3f92)
- [How to Professionally Say](https://howtoprofessionallysay.akashrajpurohit.com/)
- [Recovering from burnout](https://kierantie.com/a/burnout)
- [Burning out and quitting](https://mayakaczorowski.com/blogs/burnout)
- [Cybersecurity Job Interview Simulation (Entry-level)](https://www.youtube.com/watch?v=ep9VJIzfObw&ab_channel=CyberGoldenRetriever)
- [Managing Underperformers](https://jackdanger.com/managing-underperformers)
- [How to understand/retain complex concepts 10x better](https://learnhowtolearn.org/how-to-understand-and-retain-any-concept-10x-better)
- [Fighting With Your Boss](https://staysaasy.com/management/2024/07/15/fighting-with-your-boss)
- [International Tech Job Search Handbook](https://github.com/AndrewStetsenko/tech-jobs-with-relocation)
- [What I tell people new to on-call](https://ntietz.com/blog/what-i-tell-people-new-to-oncall)
- [Speaking for Hackers](https://sfhbook.netlify.app/) - how to do speaking on conferences
- [ActivityWatch ](https://activitywatch.net/) - is an app that automatically tracks how you spend time on your devices.

### <a name="blogs"></a> 📝 BLOGS
- [ADSecurity](https://adsecurity.org/)
- [Didier Stevens](https://blog.didierstevens.com/) - malware analysis
- [harmj0y](https://blog.harmj0y.net/blog/)
- [Jason Turley's Website](https://jasonturley.xyz/blog/) - CTF and tips
- [Inversecos](https://www.inversecos.com/) - DFIR and malware analysis
- [DFIR Science](https://dfir.science/)
- [The Book of Secret Knowledge ](https://github.com/trimstray/the-book-of-secret-knowledge#your-daily-knowledge-and-news-toc) - collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more
- [SOC radar blog](https://socradar.io/blog/)
- [Dawid Bałut](https://dawidbalut.com/) 🇵🇱
- [CyberWatch](https://whitehatcheryl.com/)
- [threathuntergir](https://threathuntergirl.com/?blog)
- [Chris Sanders](https://chrissanders.org/blog/)
- [Hacking Articles](www.hackingarticles.in)
- [Bushidotoken](https://blog.bushidotoken.net/)
- [The Packet Thrower](https://the-packet-thrower.com/)
- [Darknet](https://www.darknet.org.uk/)
- [Exploit Reversing](https://exploitreversing.com/) - Malware Analysis Series
- [Web Breacher](https://webbreacher.com/) - posts related to OSINT
- [Windows Commandline](https://www.windows-commandline.com/) - not updated anymore but good posts
- [Chappell University Labs](https://www.chappell-university.com/lauras-lab) -articles related to Wireshark and packet capture
- [Gregor Reimling](https://www.reimling.eu/) - Azure cloud ☁️
- [Thomas Maurer](https://www.thomasmaurer.ch/) - Azure cloud☁️
- [Bruce Schneier](https://www.schneier.com/) - writing about security issues 
- [Curmudgeonly Ways](https://jerichoattrition.wordpress.com/)
- [We Hack People](https://wehackpeople.wordpress.com/blog/)
- [The Book of Secret Knowledge](https://github.com/trimstray/the-book-of-secret-knowledge)
- [You should turn off autofill in your password manager](https://marektoth.com/blog/password-managers-autofill/?fbclid=IwAR1klyRUhFFlzv_5McgYtDv1Lvqa_qkv-dekHuRImIYRJi7S3yvGUlQyxaY)
- [Matt's DFIR Blog](https://mgreen27.github.io/)
- [nixCraft](https://www.cyberciti.biz/) - for Linux fans
- [Detectify](https://labs.detectify.com/)
- [Mark's Blog](https://docs.microsoft.com/en-us/archive/blogs/markrussinovich/) - blog covering topics such as Windows troubleshooting, technologies and security.
- [Windows Blog Archive](https://techcommunity.microsoft.com/t5/windows-blog-archive/bg-p/Windows-Blog-Archive/label-name/Mark%20Russinovich)
- [Learn in public](https://www.swyx.io/learn-in-public/)
- [High on coffee](https://highon.coffee/blog/)
- [X33U](https://www.x33u.org/blog/)
- [OpenSecurity](https://opensecurity.pl/) 🇵🇱
- [hackstreetboys](https://atom.hackstreetboys.ph/) - good blog post about Privilege Escalation
- [Become a Cyberwarrior](https://www.hackers-arise.com/getting-started)
- [The security Noob](https://thesecuritynoob.com/)
- [El Kentaro](https://medium.com/@elkentaro) - wardriving, warwalking blog
- [The Mayor](https://medium.themayor.tech/) - hunting tips
- [Counter Intelligence](https://counterintelligence.pl/) 🇵🇱
- [Reversing Labs](https://blog.reversinglabs.com/blog)
- [CISA Alerts](https://www.cisa.gov/uscert/ncas/alerts)
- [Google Project Zero](https://googleprojectzero.blogspot.com/)
- [Packet Storm](https://packetstormsecurity.com/) - information about exploits
- [Cyble](https://blog.cyble.com/)
- [mr eerie](https://mreerie.com/) - DFIR blog
- [ThinkDFIR](https://thinkdfir.com/) - DFIR blog
- [Cheeky4n6Monkey](https://cheeky4n6monkey.blogspot.com/) - Forensics
- [The Binary Hick](https://thebinaryhick.blog/) - Thoughts From a Digital Forensic Practitioner
- [dfir.blog](https://dfir.blog/) - Digital forensics, web browsers, visualizations, & open source tools
- [Yogesh Khatri's forensic blog](https://www.swiftforensics.com/) - All things forensic and security related
- [ZENA FORENSICS](https://blog.digital-forensics.it/)
- [Initialization vectors](https://abrignoni.blogspot.com/) - Digital Forensics and Incident Response. All things InfoSec
- [TheHexNinja](https://www.thehexninja.com/)
- [forensicmike1](https://forensicmike1.com/)
- [mac4n6](http://www.mac4n6.com/) - MacOS forensics
- [Another Forensics Blog](https://az4n6.blogspot.com/)
- [LinuxSleuthing](https://linuxsleuthing.blogspot.com/)
- [Sketchymoose's Blog ](https://sketchymoose.blogspot.com/)
- [cyb3rward0g](https://cyb3rward0g.medium.com/) - covers Azure & Sentinel
- [securityinbits](https://www.securityinbits.com/) - DFIR
- [Malwology](https://malwology.com/)
- [Cloudbrothers](https://cloudbrothers.info/en/) - blog posts related to Microsoft solutions

### <a name="books"></a> 📚 BOOKS
- [Blue Team Handbook: SOC, SIEM, and Threat Hunting](https://www.amazon.com/Blue-Team-Handbook-Condensed-Operations/dp/1091493898/ref=sr_1_1?dchild=1&keywords=blue+team+handbook&qid=1625404261&sr=8-1)
- [Blue Team Handbook: Incident Response](https://www.amazon.com/Blue-Team-Handbook-condensed-Responder/dp/1500734756/ref=sr_1_2?dchild=1&keywords=blue+team+handbook&qid=1625404261&sr=8-2)
- [Ten Strategies of a World-Class Cybersecurity Operations Center](https://www.mitre.org/sites/default/files/publications/pr-13-1028-mitre-10-strategies-cyber-ops-center.pdf)
- [Malware Analyst's Cookbook](https://www.amazon.com/Malware-Analysts-Cookbook-DVD-Techniques/dp/0470613033/ref=sr_1_5?crid=17A6KY3JMD2CS&dchild=1&keywords=malware+analysis&qid=1625404377&sprefix=malware+analys%2Caps%2C258&sr=8-5)
- [Practical Malware Analysis](https://www.amazon.com/Practical-Malware-Analysis-Hands-Dissecting/dp/1593272901/ref=sr_1_2?crid=17A6KY3JMD2CS&dchild=1&keywords=malware+analysis&qid=1625404377&sprefix=malware+analys%2Caps%2C258&sr=8-2)

### <a name="ctf"></a> ♟️ CTF/CHALLANGES/LABS
- [AWS Well-Architected Labs](https://wellarchitectedlabs.com/)
- [pwnable](https://pwnable.kr/)
- [PWNEDlabs](https://pwnedlabs.io/)
- [Backdoors&Breaches](https://www.blackhillsinfosec.com/projects/backdoorsandbreaches/)
- [Blue Team Labs](https://blueteamlabs.online/)
- [bWAPP](http://itsecgames.com) - buggy web application
- [Command Challenge](https://cmdchallenge.com/) - challenges to write single line bash commands for the given task
- [CryptoHack](https://cryptohack.org/) - learn cryptography
- [CTF Learn](https://ctflearn.com/)
- [Cyber Defenders](https://cyberdefenders.org/)
- [Digital Forensic Challenge Images](https://www.ashemery.com/dfir.html) 7 DFIR challanges by Ali Hadi
- [ExploitMe Mobile Android Labs](https://securitycompass.github.io/AndroidLabs/index.html)
- [flAWS Cloud](http://flaws.cloud) - learn about common mistakes and gotchas when using Amazon Web Services (AWS)
- [Immersive Labs](https://immersivelabs.online/signin)
- [IO](http://io.netgarage.org/) - the modern exploit mitigation techniques, like better ASLR
- [Java Vulnerable Lab](https://github.com/CSPF-Founder/JavaVulnerableLab)
- [Lets Defend](https://letsdefend.io/)
- [Hacker101](https://www.hacker101.com/)
- [Hack This Site](https://www.hackthissite.org/)
- [Hacking Loops](https://www.hackingloops.com/)
- [Hacksplaining](https://www.hacksplaining.com/lessons)
- [Hacktoria](https://hacktoria.com/) - OSINT CTFs
- [HackTheBox](https://www.hackthebox.eu/)
- [MemLabs](https://github.com/stuxnet999/MemLabs) - memory forensics
- [Microcorruption](https://microcorruption.com/login) - Security CTF
- [OWASP Juice Shop](https://juice-shop.herokuapp.com/#/)
- [PentesterLab](https://pentesterlab.com/)
- [Pico CTF](https://play.picoctf.org/login?redirect=/login)
- [Smash the Stack](http://www.smashthestack.org/)
- [TryHackMe](https://tryhackme.com/)
- [VulnHub](https://www.vulnhub.com/)
- [War games](https://overthewire.org/wargames/) - OverTheWire community can help you to learn and practice security concepts
- [XSS Game](https://xss-game.appspot.com/)
- [Cybersec Labs](https://www.cyberseclabs.co.uk/) - reports, analysis of attacks, IOCs
- [Unit42 Paoalto Networks](https://unit42.paloaltonetworks.com/) - reports, analysis of attacks, IOCs

### <a name="podcast"></a> 🎙️ PODCAST
- [Malicious Life](https://malicious.life/)
- [DARKNET DIARIES](https://darknetdiaries.com/)
- [The Privacy, Security, and OSINT Show](https://inteltechniques.com/podcast.html)
- [Digital Forensic Survival Podcast](https://digitalforensicsurvivalpodcast.com/)
- [Down the Security Rabbithole Podcast](http://podcast.wh1t3rabbit.net/)
- [The OSINT Curious Project](https://podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy84OTkyZGY0L3BvZGNhc3QvcnNz)
- [Cyberlaw](https://www.lawfareblog.com/topic/cyberlaw-podcast!)
- [SANS Daily Stormcast](https://isc.sans.edu/podcast.html)
- [CISO Series: Headlines, Why Discussions](https://podcasts.google.com/feed/aHR0cHM6Ly9jaXNvc2VyaWVzLmxpYnN5bi5jb20vcnNz?sa=X&ved=0CAMQ9sEGahgKEwi4lNrr2pj0AhUAAAAAHQAAAAAQthA)
- [What the Shell?](https://whattheshell.podbean.com/)
- [Cyber Sector 7](https://cybersector7.com/)

### <a name="news"></a> 📰 SECURITY/TECH  NEWS
- [All InfoSec News](https://allinfosecnews.com/) - The InfoSec & Cyber news aggregator
- [ZDNET](https://www.zdnet.com/)
- [Bleeping Computer](https://www.bleepingcomputer.com/)
- [Cyber Scoop](https://www.cyberscoop.com/)
- [The Register](https://www.theregister.com/)
- [Tech Beacon](https://techbeacon.com/security)
- [The Cyber Post](https://thecyberpost.com/)
- [Cyber News](https://cybernews.com/)
- [TechURLs](https://techurls.com/)
- [The Daily Sqing](https://portswigger.net/daily-swig)
- [ASEC](https://asec.ahnlab.com/en/) - AhnLab security emergency reponse center. 
- [IronNet](https://www.ironnet.com/blog) - Executive commentary, threat research, and analysis from the IronNet team.
- [Zimperium](https://www.zimperium.com/blog/)

### <a name="reports"></a> 📓 SECURITY REPORTS
- [FireEye Threat Research](https://www.fireeye.com/blog/threat-research.html)
- [THE DFIR REPORT](https://thedfirreport.com/)
- [Mandiant blog](https://www.mandiant.com/resources/blog)

### <a name="youtube"></a> 📺 YOUTUBE
- [0x4rkØ](https://www.youtube.com/c/0x4rk%C3%98) - OSINT, Vulnerability Management
- [HackerSploit](https://www.youtube.com/c/HackerSploit)
- [Black Hills Information Security](https://www.youtube.com/c/BlackHillsInformationSecurity) - security tranings
- [Nahamsec](https://www.youtube.com/c/Nahamsec/videos)
- [STÖK](https://www.youtube.com/c/STOKfredrik) - Bug hunting
- [The Cyber Mentor](https://www.youtube.com/c/TheCyberMentor) - hacking, OSINT
- [BlackPerl](https://www.youtube.com/c/BlackPerl)
- [InsiderPhD](https://www.youtube.com/c/InsiderPhD)
- [DC CyberSec](https://www.youtube.com/c/DCcybersec/featured)
- [John Hammond](https://www.youtube.com/c/JohnHammond010)
- [The OSINT Curious Project](https://www.youtube.com/c/TheOSINTCuriousProject) - OSINT tips
- [Data Rescue Labs](https://www.youtube.com/c/DataRescueLabsIncMississauga) - Digital Forensic
- [Gerald Auger - Simply Cyber](https://www.youtube.com/c/GeraldAuger/videos) - cybersecurity career, interview, begginer information
- [Neil Fox](https://www.youtube.com/c/0xf0x/videos) - Malware Analyse
- [Cybersecurity Meg](https://www.youtube.com/c/CybersecurityMeg/videos) - Security Career
- [Nicolas Moy](https://www.youtube.com/c/NicolasMoy/videos) - Senior Cloud Security Instructor
- [Thomas Maurer](https://www.youtube.com/c/ThomasMaurerCloud) - Azure cloud
- [webpwnized](https://www.youtube.com/c/webpwnized/videos) - web, mobile and network penetration testing
- [Andy Li](https://www.youtube.com/channel/UCKTs4jCh9yLbFfZHntSairQ) - pentesting journey
- [247 CTF](https://www.youtube.com/247CTF)
- [DFIRScience](https://www.youtube.com/@DFIRScience) - DFIR stuff
- [Email Forensics by Metaspike](https://www.youtube.com/@Metaspike/videos) - Forensics
- [Chris Greer](https://www.youtube.com/@ChrisGreer/videos) - chanell about Wireshark
- [Practical Networking](https://www.youtube.com/@PracticalNetworking/videos)
- [Gary Ruddell](https://www.youtube.com/@theGaryRuddell) - OSINT

Conferences: 
- [DEFCON](https://defcon.org/)
- [SAINTCON](https://www.youtube.com/c/SAINTCON/videos) - Security Advisory and Incident Network Team 
- [Blue Team Village](https://www.youtube.com/c/BlueTeamVillage/videos) - Defcon village
- [Red Team Village](https://www.youtube.com/c/RedTeamVillage/videos) - Defcon village

Polish:
- [Kacper Szczurek](https://www.youtube.com/c/KacperSzurek) 🇵🇱
- [Maciej Kofel](https://www.youtube.com/c/MaciejKofel/videos) 🇵🇱
- [UW-TEAM.org](https://www.youtube.com/c/uwteamorg/videos) 🇵🇱
- [Niebezpiecznik](https://www.youtube.com/c/NiebezpiecznikTV/videos) 🇵🇱
- [Pasja informatyki](https://www.youtube.com/c/Pasjainformatykitutoriale/videos) 🇵🇱
- [Sekurak](https://www.youtube.com/c/SekurakTV/videos) 🇵🇱

### <a name="newsletters"></a> 🗞️ NEWSLETTER
- [This Week in Security](https://this.weekinsecurity.com/)
- [Unsupervised Learning](https://danielmiessler.com/newsletter/)
- [tl;dr sec](https://tldrsec.com/newsletter/)
- [Intigriti](https://newsletter.intigriti.com/)
- [Hacker newsletter](https://hackernewsletter.com/)
- [SANS Newsletter](https://www.sans.org/newsletters/at-risk/)
- [CISA](https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=USDHSCISA_138)
- [cybersecurityventures](https://cybersecurityventures.com/mailing-list/)
- [Robin Oldham newsletter](https://rto.me.uk/newsletter/)
- [Naked security](https://nakedsecurity.sophos.com/)

_____________________________________________________________________________________________________

### <a name="ad"></a> 🗂️ ACTIVE DIRECTORY
- [Microsoft Evaluation Center](https://www.microsoft.com/en-us/evalcenter/) - iso for MS products
- [AD Security](https://adsecurity.org/)
- [Active Directory Security](https://www.active-directory-security.com/)
- [Harmj0y](http://harmj0y.net/blog/)

### <a name="bash"></a> ⌨️ BASH
- [Bash introduction for hackers part 1](https://hakin9.org/bash-introduction-for-hackers-part-1/)
- [Bash introduction for hackers part 2](https://hakin9.org/bash-introduction-for-hackers-part-2/)
- [Introduction to Bash Programming by InsiderPhD](https://www.youtube.com/watch?v=qy6TaUjyKcg&ab_channel=InsiderPhD)

### <a name="bug"></a> 🐛 BUG BOUNTY
- [OWASP juice Shop](https://pwning.owasp-juice.shop/) - learning about web app pentesting
- [OWASP Testing guide](https://owasp.org/www-project-web-security-testing-guide/assets/archive/OWASP_Testing_Guide_v4.pdf)
- [BugBountyHunter](https://www.bugbountyhunter.com) - Learning about web application vulnerabilities
- [BRUTE XSS](https://brutelogic.com.br/blog/)
- [The Bug Hunter's Methodology Full 2-hour Training by Jason Haddix](https://www.youtube.com/watch?v=uKWu6yhnhbQ&ab_channel=RedTeamVillage)
- [CS 253 Web Security](https://www.youtube.com/playlist?list=PL1y1iaEtjSYiiSGVlL1cHsXN_kvJOOhu-) - This course is a comprehensive overview of web security. 
- [Playlist of live bug bounty by Nahamsec](https://www.youtube.com/watch?v=MIujSpuDtFY&list=PLKAaMVNxvLmAkqBkzFaOxqs3L66z2n8LA&ab_channel=Nahamsec)
- [Script for recon](https://github.com/Gr1mmie/sumrecon)
- [Security Headers](https://securityheaders.com/) - scan website to check headers

### <a name="chef"></a> 👨‍🍳 CYBERCHEF
- [Cyberchef Recipes](https://github.com/mattnotmax/cyberchef-recipes)
- [CyberChef: Example DFIR Use Cases](https://betweentwodfirns.blogspot.com/2017/06/cyberchef-example-dfir-use-cases.html)
- [CyberChef for Security Analysts](https://www.networkdefense.io/library/cyberchef-for-security-analysts-57976/200184/about/) - paid course that I recommand
- [Podstawy narzędzia CyberChef](https://www.youtube.com/watch?v=PsJp0BNh5A0&t=9312s&ab_channel=KacperSzurek) 🇵🇱 - free 2h+ video in polish
- [Advanced CyberChef Techniques For Malware Analysis - Detailed Walkthrough and Examples](https://www.embeeresearch.io/advanced-cyberchef-operations-netsupport/)

### <a name="cloud"></a> ☁️ CLOUD
- [AzureHunter](https://github.com/darkquasar/AzureHunter)
- [AWS Vulnerability Management Best Practices [Cheat Sheet]](https://www.wiz.io/lp/aws-vulnerability-management-best-practices-cheat-sheet?utm_source=tldrsec&utm_medium=paid-email&utm_campaign=FY25Q3_INB_FORM_AWS-Vulnerability-Management-Best-Practices-Cheat-Sheet&sfcid=701Py00000FaBR0IAN&utm_term=FY25H2-tldrsec-nl-primary&utm_content=AWS-VM-BestPractices)
- [Ransomware in the cloud](https://www.invictus-ir.com/news/ransomware-in-the-cloud) - article
- [Cloud native incident response in AWS](https://www.invictus-ir.com/news/cloud-native-incident-response-in-aws---part-ii)
- [The curious case of DangerDev@protonmail.me](https://www.invictus-ir.com/news/the-curious-case-of-dangerdev-protonmail-me) - An AWS incident response story
- [Analyzing access to S3 buckets](https://blog.cloudsecuritypartners.com/analyzing-access-to-s3-buckets
- [Amazon (AWS) S3 Bucket Take Over](https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/amazon-aws-s3-bucket-take-over/)

### <a name="detect"></a> 🧑‍💻 DETECTION ENGINEERING
- [Detections XYZ](https://detections.xyz/) - Detection knowledge repository – by Daniel Koifman
- [Detection Pitfalls You Might Be Sleeping On](https://detect.fyi/detection-pitfalls-you-might-be-sleeping-on-52b5a3d9a0c8)

### <a name="DFIR"></a> 🕵️ DFIR
- [unfur](https://dfir.blog/unfurl/)
- [hackthelogs](https://www.hackthelogs.com/)
- [The Hitchhiker's Guide to DFIR: Experiences From Beginners and Experts](https://leanpub.com/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts)
- [Stark4n6's startme](https://start.me/p/q6mw4Q/forensics)
- [Awesome Incident Response](https://github.com/meirwah/awesome-incident-response)
- [Digital Forensics Guide](https://github.com/mikeroyal/Digital-Forensics-Guide)
- [Intro to DFIR](https://dfir-training.basistech.com/collections) - free 3 h
- [Playbooks](https://www.incidentresponse.com/playbooks/)
- [SNAS youtube](https://www.youtube.com/user/robtlee73)
- [Start.me Digital Forensics](https://start.me/p/ekq7Al/digital-forensics)
- [Start.me Forensics](https://start.me/p/q6mw4Q/forensics)
- [Memory Forensics with Vol(a|u)tility](https://www.youtube.com/watch?v=dB5852eAgpc&ab_channel=SecIC) - video
- [Cobalt Strike, a Defender’s Guide](https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/)
- [DFIR Madness](https://dfirmadness.com/) - examples of cases really useful!
- [PowerShell Commands for Incident Response](https://www.securityinbits.com/incident-response/powershell-commands-for-incident-response/)
- [Digital Forensics Essentials (DFE)](https://codered.eccouncil.org/course/digital-forensics-essentials) - free course
- ['X-Ways Forensics' Video Clips](https://www.xwaysclips.co.uk/)
- [Memory Forensic](https://memoryforensic.com/) - write ups, tutorials, blog
- [Threat hunting with hints of incident response](https://threathunt.blog/)
- [Digital Forensic & Incident Response](https://www.iblue.team/)
- [PSDecode](https://github.com/R3MRUM/PSDecode) - This is a PowerShell script for deobfuscating other encoded PowerShell scripts.

#### DFIR TOOLS FOR DATA ACQUISITION
- [processhacker](https://processhacker.sourceforge.io/downloads.php)
- [PE Explorer](http://www.heaventools.com/overview.htm)
- [regshot](https://sourceforge.net/projects/regshot/)
- [ShellBags Explorer](https://www.sans.org/tools/shellbags-explorer/) - A GUI for browsing shellbags data. Handles locked files.
- [USBDeview](https://www.nirsoft.net/utils/usb_devices_view.html) - lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used.
- [Thumbcache Viewer](https://thumbcacheviewer.github.io/) - extract thumbnail images from the thumbcache
- [JumpListsView](https://www.nirsoft.net/utils/jump_lists_view.html) - displays the information stored by the 'Jump Lists' filename, data, event, id, size etc.
- [ArgFuscator](https://argfuscator.net/)

### <a name="docker"></a> 🐟 DOCKER
- [Docker Tutorial for Beginners [FULL COURSE in 3 Hours]](https://www.youtube.com/watch?v=3c-iBn73dDE&ab_channel=TechWorldwithNana)
- [Top 8 Docker Best Practices for using Docker in Production](https://www.youtube.com/watch?v=8vXoMqWgbQQ&ab_channel=TechWorldwithNana)
- [Docker Tutorial for Beginners](https://www.youtube.com/watch?v=pTFZFxd4hOI&ab_channel=ProgrammingwithMosh)
- [Kubernetes Crash Course for Absolute Beginners](https://www.youtube.com/watch?v=s_o8dwzRlu4&ab_channel=TechWorldwithNana)
- [Awesome Docker Compose Examples](https://github.com/Haxxnet/Compose-Examples)
- [Play with docker](https://training.play-with-docker.com/) - labs and tutorials that help you get hands-on experience using Docker

### <a name="ot"></a> 🏭 ICS/OT
TRAINING
- [CISA ICS training](https://ics-training.inl.gov/learn/signin) - Free training by CISA

PODCASTS
- [Control Loop](https://open.spotify.com/show/4C9w7T3YJt6kZ8je40B5Kb) - Control Loop is the OT Cybersecurity Podcast, your terminal for ICS security, intelligence, and learning. Every two weeks, we bring you the latest news, strategies, and technologies that industry professionals rely on to safeguard civilization.
- [The Industrial Security Podcast](https://open.spotify.com/show/1F0k9fEq8q9f51n3ZQ584u) - takes a deep-dive into the most pressing emerging issues in SCADA technologies today.
- [The PrOTect OT cybersecurity Podcast](https://open.spotify.com/show/0paav04Xxxdy5DrcTzSTjN) - brings together experts in the field of cybersecurity for critical infrastructure and industrial organizations.
- [Unsolicited Response](https://open.spotify.com/show/3IBQ9z2x01JAkJQczBOXam) - Every week Dale Peterson interviews the innovators in OT and ICS security, as well as the top talent in related fields. 
- [CS2AI podcast show]([https://www.cs2ai.org/podcast](https://open.spotify.com/show/7JVVSdCidMxXXeGtVLnHMS)) 
CTFs
-[CAPTURE THE FLAG 2024](https://hub.dragos.com/ctf-registration-24) - DRAGOS

CERTIFICATES
- [GICSP](https://www.giac.org/certifications/global-industrial-cyber-security-professional-gicsp/) - SANS Global Industrial Cyber Security Professional Certification (💲 paid)
- [GRID](https://www.giac.org/certifications/response-industrial-defense-grid/) - SANS GIAC Response and Industrial Defense (💲 paid)
- [GCIP](https://www.giac.org/certifications/critical-infrastructure-protection-gcip/) - SANS GIAC Critical Infrastructure Protection Certification (💲 paid)

### <a name="analyst"></a> 🛡️ INFOSEC ANALYST
- [Blue Teams Academy](https://www.blueteamsacademy.com/) - Free Training 2022
- [Self-Study SOC Analyst Curriculum](https://deadpan-supply-c1d.notion.site/Self-Study-SOC-Analyst-Curriculum-da89504a2880440b9f7d688b6e195fa2)
- [SOC Analyst Study Guide](https://biggingerhoneypot.notion.site/68fb84422c8b47118569f7585054a7d7?v=493a04e2c4024a899ba23dea337d7009)
- [Awesome-infosec](https://github.com/onlurking/awesome-infosec) - A curated list of awesome information security resources
- [The Analyst Mindset: A Cognitive Skills Assessment of Digital Forensic Analysts](https://chrissanders.org/dissertation/Sanders,%20Chris%20-%20The%20Analyst%20Mindset%20-%20A%20Cognitive%20Skills%20Assessment%20of%20Digital%20Forensic%20Analysts.pdf)
- [The Diamond Model of Intrusion Analysis](https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf)
- [Tool Analysis Result Sheet](https://jpcertcc.github.io/ToolAnalysisResultSheet/) - summarizes the results of examining logs recorded in Windows upon execution of the 49 tools
- [Writing better Yara rules in 2023](https://www.hexacorn.com/blog/2023/08/26/writing-better-yara-rules-in-2023/)
- [UNDERSTANDING RANSOMWARE-AS-A-SERVICE (RAAS) - A GUIDE](https://explore.avertium.com/resource/understanding-ransomware-as-a-service-a-guide)
- [Demystifying DLL Hijacking Understanding the Intricate World of Dynamic Link Library Attacks](https://www.binarydefense.com/resources/blog/demystifying-dll-hijacking-understanding-the-intricate-world-of-dynamic-link-library-attacks/)
- [Splunk Detections](https://research.splunk.com/detections/)
- [Create a new Sigma rule](https://sigmahq.streamlit.app/Create_A_New_Sigma_Rule)
- [Yara Toolkit](https://yaratoolkit.securitybreak.io/) - yara editor, generator etc.
- [haveïbeensquattɘd¿](https://www.haveibeensquatted.com/) Typosquat checks
- [Blue Team Guides](https://book.blueteamguides.com/)
- [Living off the False Positive](https://br0k3nlab.com/LoFP/) - Living off the False Positive is an autogenerated collection of false positives sourced from some of the most popular rule sets.
- [Practical Incident Response - Active Directory](https://nxb1t.is-a.dev/incident-response/practical_ir_ad/#the-incident)
- [Tool Analysis Result Sheet](https://jpcertcc.github.io/ToolAnalysisResultSheet/) - summarizes the results of examining logs recorded in Windows upon execution of the 49 tools ⭐

### <a name="kube"></a> ⚙️ KUBERNETES
Is an open-source container-orchestration system for automating computer application deployment, scaling, and management.
- [Understanding Kubernetes](https://www.linode.com/content/kubernetes-guide/) - ebook 
- [Kubernetes Tutorial for Beginners](https://www.youtube.com/watch?v=X48VuDVv0do&ab_channel=TechWorldwithNana) - free video course

### <a name="linux"></a> 🐧 LINUX 
- [Bandit](https://overthewire.org/wargames/bandit/) - is aimed at absolute beginners. It will teach the basics needed to be able to play other wargames.
- [linuxjourney](https://linuxjourney.com/)
- [Cyberciti](https://www.cyberciti.biz/faq/category/linux/)
- [The Complete Linux for Ethical Hackers Course for 2019](https://www.youtube.com/watch?v=rZsJieGi8os&ab_channel=TheCyberMentor)
- [Linux ip Command Examples](https://www.cyberciti.biz/faq/linux-ip-command-examples-usage-syntax/?fbclid=IwAR3CpswryqeFVJbzKnNxzbBUvoyql7cG2Pbbyz7gS2pOwLfSC-i2aH9Bht0)
- [Linux Survival](https://linuxsurvival.com/)
- [Linux command line for you and me!](https://lym.readthedocs.io/en/latest/)
- [Learng it Branching](https://learngitbranching.js.org/) - learn git

### <a name="malware"></a> 🕷️ MALWARE
- [Malware Analysis In 5+ Hours](https://www.youtube.com/watch?v=qA0YcYMRWyI&ab_channel=HuskyHacks)
- [maldefense](https://www.maldefense.com/)
- [Abuse](https://abuse.ch/) - is providing community driven threat intelligence on cyber threats
- [malware-traffic-analysis](https://www.malware-traffic-analysis.net/)
- [SANS Malicious-File-Investigation-Procedures](https://www.sans.org/media/score/checklists/Malicious-File-Investigation-Procedures.pdf)
- [exploit-db](https://www.exploit-db.com/)
- [Malware Wiki](https://malwiki.org/index.php?title=Main_Page)
- [The Zoo](https://github.com/ytisf/theZoo)
- [Malware Trends](https://any.run/malware-trends/)
- [How You Can Start Learning Malware Analysis](https://zeltser.com/start-learning-malware-analysis/)
- [Malicious Life Podcast](https://malicious.life/)
- [Microsoft Defender Submit a file](https://www.microsoft.com/en-us/wdsi/filesubmission/)
- [Tools For Security Researchers & Malware Analyst](https://gbhackers.com/most-important-tools/)
- [The Art of Modern Malware Analysis](https://github.com/ps-interactive/labs_modern_malware_c2) - free labs
- [Malware Unicorn](https://malwareunicorn.org/)
- [List of materials for Malware Analysis](https://github.com/lasq88/LearingMaterials/blob/main/MalwareAnalysis.md)
- [A Beginner’s Guide to Tracking Malware Infrastructure](https://censys.com/a-beginners-guide-to-tracking-malware-infrastructure/)
- [Learning Malware Analysis](https://github.com/jstrosch/learning-malware-analysis) - This repository contains sample programs that mimick behavior found in real-world malware.
- [GETTING STARTED ANALYZING MALICIOUS DOCUMENTS](https://quickreference.thecyberyeti.com/malicious-docs) - 3 page PDF quick reference provides you with the tools you need to know when analyzing malicious documents, such as Word, OneNote and PDF.
- [Downlaod Windows 10](https://www.microsoft.com/en-us/evalcenter/download-windows-10-enterprise)
- [REMnux](https://remnux.org/#distro)
- [OPEN SOURCE MALWARE](https://opensourcemalware.com/) - A community database, API and collaboration platform to help identify and protect against open-source malware

### <a name="network"></a> 🌐 NETWORK
- [The TCP/IP Guide](http://www.tcpipguide.com/free/t_toc.htm)
- [Wi is Fi](https://www.wiisfi.com/) - Understanding Wi-Fi 4/5/6/6E/7 (802.11 n/ac/ax/be)
- [Network lessons](https://networklessons.com/cisco)
- [Network Defense Essentials (NDE)](https://codered.eccouncil.org/course/network-defense-essentials) - free course
- [Free CCNA 200-301 course](https://www.youtube.com/playlist?list=PLxbwE86jKRgMpuZuLBivzlM8s2Dk5lXBQ)
- [Cyren IP Reputation Check](https://www.cyren.com/security-center/cyren-ip-reputation-check-gate)
- [Cisco IP Reputation](https://talosintelligence.com/reputation_center/)
- [System Design Basics - Load Balancing Algorithms](https://dev.to/somadevtoo/system-design-basics-load-balancing-algorithms-2559)
- [WhoYouCalling](https://github.com/H4NM/WhoYouCalling?utm_source=substack&utm_medium=email) - Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by the process.

### <a name="osint"></a> 👁️‍🗨️ OSINT
- [OSINT Framework](https://osintframework.com/)
- [OSINT Me](https://www.osintme.com/)
- [GROSpy](https://geospy.ai/) - detecting where the photo was taken
- [OSINTCurious](OSINTCurio.us) - great tips related to OSINT, they have great podcast!
- [OSINT Dojo](https://www.osintdojo.com/resources/)
- [Tips and Tricks on Reverse Image Searches](https://osintcurio.us/2020/04/12/tips-and-tricks-on-reverse-image-searches/)
- [The Ultimate Beginner's Guide to OSINT](https://www.osint-jobs.com/post/the-ultimate-beginners-guide-to-osint)
- [OSINT tips - missing person (Trace Lab)](https://twitter.com/search?q=from%3Ajakecreps++%22tip%22&src=typed_query&f=live)
- [Trace Lab OSINT Search Party CTF Contestant Guide](https://download.tracelabs.org/Trace-Labs-OSINT-Search-Party-CTF-Contestant-Guide_v1.1.pdf)
- [Search Paty writeups](https://github.com/tracelabs/searchparty-ctf-writeups/blob/master/searchparty-ctf-writeups.md)
- [OSINT Protips](https://github.com/OhShINT/ohshint.gitbook.io/blob/main/OSINT_Protips/OSINT-Protips.md)
- [Learn All the Things](https://www.learnallthethings.net/)
- [UNREDACTED Magazine](https://unredactedmagazine.com/index.html) - free magazine about Privacy, Security, and OSINT
- [Bellingcat](https://www.bellingcat.com/)
- [Hunting Warhead](https://www.cbc.ca/listen/cbc-podcasts/387-hunting-warhead) - podcast that follows a group of journalists tracking down paedophiles and eventually a guy who ran one of the biggest paedophilia website.
- [OSINT – jakie informacje o sobie można znaleźć w Internecie](https://www.youtube.com/watch?v=Nk8jQhRFcBg&ab_channel=KacperSzurek) 🇵🇱
- [Delete your data from Facebook](https://www.facebook.com/contacts/removal)
- [HandleFinder](https://www.handlefinder.com/) - find usernames across many social networks
- [Twitter Advance Searches](https://www.tweetbinder.com/blog/twitter-advanced-search/)
- [ID Ransomware](https://id-ransomware.malwarehunterteam.com/) - identify ransomware
- [Unlisted Videos](https://unlistedvideos.com/indexm.html) - find unlisted YouTube videos
- [breachdirectory](https://breachdirectory.org/) - CHECK IF YOUR EMAIL OR USERNAME WAS COMPROMISED
- [scamsearch](https://scamsearch.io/#anchorCeckNow)
- [castrickclues](https://castrickclues.com/)
- [holehe](https://github.com/megadose/holehe) - Efficiently finding registered accounts from emails.
- [mailcat](https://github.com/sharsil/mailcat) - The only cat who can find existing email addresses by nickname.
- [Wikimapia](https://wikimapia.org/) - s an online editable map - you can describe any place on Earth.
- [cylect](https://cylect.io/) - the Ultimate AI OSINT Tool
- [Bellingcat OpenStreetMap search](https://osm-search.bellingcat.com/)
- [Face check id](https://facecheck.id/) - search based on the photo of the face
- [GeoSpy Vision](https://geospy.ai/) - Convert pixels into actionable intelligence using generative AI
- [Solve the case](https://www.solvethecase.org/) - Help solve real world cases
- [Surveillance Under Surveillance](https://sunders.uber.space/) - leverages hard-to-reach Open Street Maps data to geolocate all cameras.
- [Free LinkedIn Profile viewr Tool](https://nubela.co/proxycurl/demo/linkedin-profile-viewer)
- [FilePhish  - DORKING](https://greylensresearch.github.io/filephish/) - Build targeted search queries to discover exposed documents online.
Select file types, keywords, and search engines for precise OSINT collection.

#### Tools
- [SpiderFoot](https://github.com/smicallef/spiderfoot) - SpiderFoot automates the collection of OSINT to find everything possible about a target
- [Sherlock](https://github.com/sherlock-project/sherlock) - Command line tool to search usernames across social networks
- [Buster](https://github.com/sham00n/buster) - An advanced tool for email reconnaissance
- [Face Depixelizer](https://github.com/tg-bomze/Face-Depixelizer)
- [Tinyeye](https://tineye.com/)
- [Pimeye](https://pimeyes.com/en)
- [Sync Me](https://sync.me/)
- [Shodan](https://www.shodan.io/)
- [Censys](https://search.censys.io/) - similar to Shodan
- [Binary Edge](https://app.binaryedge.io/services/query) - similar to Shodan 
- [Wayback machine](https://archive.org/)
- [Archive.today](https://archive.ph/)
- [CachedView](https://cachedview.com/) - The Google Cache Browser for any page on the Internet.
- [Cachedpages](http://www.cachedpages.com/) - Get the cached page of any URL
- [Webcitation](https://webcitation.org/query)
- [Timetravel](http://timetravel.mementoweb.org/)
- [OldWeb](https://oldweb.today/)
- [Geocities](http://geocities.com/)
- [Phonebook](https://phonebook.cz/)
- [Email verification](https://tools.emailhippo.com/)
- [Email-checker](https://email-checker.net/)
- [Dehashed](https://dehashed.com/)
- [WhatsMyName](https://whatsmyname.app/)
- [Snaptik](https://snaptik.app/pl) - download TikTok videos
- [GoSearch](https://github.com/ibnaleem/gosearch) - is an efficient and reliable OSINT tool designed for uncovering digital footprints associated with a given username.
 ##### Tools for searching emails for a specific domain: 
- [email-finder](snov.io/email-finder)
- [experte](experte.com/email-finder)
- [Infoga - github](github.com/GiJ03/Infoga)
- [Infoga Email OSINT ](infoga.io) 
- [findemail](findemail.io)
- [hunter - Domain search](hunter.io/domain-search)
- [minelead](minelead.io)

### <a name="pentest"></a> 🔥 PENTEST 
- [Awesome Sites To Test On](https://github.com/BMayhew/awesome-sites-to-test-on)
- [Zero to Hero Pentesting](https://www.thecybermentor.com/zero-to-hero-pentesting)
- [SHODAN for Penetration Testers](https://defcon.org/images/defcon-18/dc-18-presentations/Schearer/DEFCON-18-Schearer-SHODAN.pdf)
- [Full Ethical Hacking Course - Beginner Network Penetration Testing (2019)](https://www.youtube.com/watch?v=WnN6dbos5u8&ab_channel=TheCyberMentor) - 15 h course for free
- [Beginner-Network-Pentesting](https://github.com/hmaverickadams/Beginner-Network-Pentesting)
- [Free Password Hash Cracker](https://crackstation.net/)
- [The Journey to Try Harder: TJnull’s Preparation Guide for PWK/OSCP](https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html)
- [Hack Tricks](https://book.hacktricks.xyz/welcome/readme)
- [The Ultimate OSCP Preparation Guide, 2021](https://johnjhacking.com/blog/the-oscp-preperation-guide-2020/)
- [Penetration Testing Tools Cheat Sheet](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/)
- [OSCP - Links and Notes](https://www.x33u.org/blog/posts/oscp-links-and-notes/)
- [Payloads All The Things](https://github.com/swisskyrepo/PayloadsAllTheThings) - A list of useful payloads and bypasses for Web Application Security. 
- [Ethical Hacking Essentials (EHE)](https://codered.eccouncil.org/course/ethical-hacking-essentials) - free course
- [API Security Certified Expert](https://university.apisec.ai/apisec-certified-expert) - free course by Corey Ball
- [Pentest Book](https://pentestbook.six2dez.com/)
- [RedTeamRecipe](https://redteamrecipe.com/) ⭐
- [Manipulating ActiveProcessLinks to Hide Processes in Userland](https://www.ired.team/miscellaneous-reversing-forensics/windows-kernel-internals/manipulating-activeprocesslinks-to-unlink-processes-in-userland)
- [15 Ways to Bypass the PowerShell Execution Policy](https://www.netspi.com/blog/technical-blog/network-penetration-testing/15-ways-to-bypass-the-powershell-execution-policy/)
- [Reverse Shell Generator](https://www.revshells.com/)
- [Sploitus](https://sploitus.com/) - POCs
 
### <a name="powershell"></a> 🟦 POWERSHELL
- [PowerShell forensics](https://powerforensics.readthedocs.io/en/latest/)
- [Learn PowerShell](https://www.tutorialspoint.com/powershell/index.htm)
- [Getting Started with PowerShell 3.0](https://channel9.msdn.com/Series/GetStartedPowerShell3)
- [The Guide to Learning PowerShell](https://www.idera.com/resource-center/whitepapers/powershell-ebook) - ebook
- [PowerShell Magazine](https://powershellmagazine.com/)

### <a name="privacy"></a> 🔒 PRIVACY 
- [Your activity in Google](https://myactivity.google.com/myactivity?hl=pl&pli=1) - Stored Google activity data  
- [Privacy is sexy](https://privacy.sexy/) - Enforce privacy & security on Windows and macOS
- [Your activity outside of Facebook ](https://www.facebook.com/off_facebook_activity/activity_list) - a list of sites you have visited that use integration with this service. The number of sites depends mainly on whether you use Adblock.
- [Open Source Alternative ](https://www.opensourcealternative.to/)
- [Tutanota](https://tutanota.com/) - Secure email for everybody.
- [Privnote](https://privnote.com/) - PrivnoteSend notes that will self-destruct after being read.
- [GrapheneOS](https://grapheneos.org/) - The private and secure mobile operating system with Android app compatibility
- [Aegis Authenticator](https://getaegis.app/)
- [Orbot: Tor for android](https://play.google.com/store/apps/details?id=org.torproject.android&hl=en&gl=US)
- [Shelter](https://play.google.com/store/apps/details?id=net.typeblog.shelter&hl=en_IE) - Android app - is a Free and Open-Source (FOSS) app that leverages the “Work Profile” feature of Android to provide an isolated space that you can install or clone apps into.
- [KeePassDX](https://www.keepassdx.com/) - android app 
- [Briar](https://briarproject.org/) - Secure messaging, anywhere
- [Element](https://element.io/) - Secure and independent communication, connected via Matrix
- [OnionShare](https://onionshare.org/) - is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
- [ai.robots.txt](https://github.com/ai-robots-txt/ai.robots.txt/tree/main) - an open list of web crawlers associated with AI companies and the training of LLMs to block.

### <a name="python"></a> 🐍 PYTHON
- [Python Tutorial for Beginners - Learn Python in 5 Hours](https://www.youtube.com/watch?v=t8pPdKYpowI&ab_channel=TechWorldwithNana) - I recommand!
- [Python for everybody](https://www.freecodecamp.org/learn/scientific-computing-with-python/) - free video course series that teaches the basics of using Python 3.
- [18 Python one-liners that will speed up your coding process.](https://dev.to/yash_makan/18-python-one-liners-that-will-speed-up-your-coding-process-21md)
- [Data Analysis with Python](https://www.freecodecamp.org/learn/data-analysis-with-python/)
- [Python Beginners](https://python-adv-web-apps.readthedocs.io/en/latest/index.html)
- [Automate Your Life with Python](https://www.freecodecamp.org/news/automate-your-life-with-python/)
- [Automate the Boring Stuff with Python](https://automatetheboringstuff.com/)
- [Python course on networklessons.com](https://networklessons.com/python)
- [Python Programming MOOC 2024](https://programming-24.mooc.fi/) - Helsinki University
- [The Algorithms - Python](https://github.com/TheAlgorithms/Python?tab=readme-ov-file) - Implementations are for learning purposes only.
- [Fluent Python](https://elmoukrie.com/wp-content/uploads/2022/05/luciano-ramalho-fluent-python_-clear-concise-and-effective-programming-oreilly-media-2022.pdf)

### <a name="rasp"></a> 🍓 RASPBERRY PI
- [Raspberry Pi Hardening Guide](https://www.chrisapproved.com/blog/raspberry-pi-hardening.html)

### <a name="regex"></a> *️⃣ REGEX
- [Regular Expression Cheat Sheet](https://jdhao.github.io/2019/02/28/sublime_text_regex_cheat_sheet/)
- [Regex101](https://regex101.com/)
- [Regex Learn](https://regexlearn.com/)
- [RegExHub](https://projects.lukehaas.me/regexhub/)
- [Regular-Expressions](https://www.regular-expressions.info/)
- [THM room Regular expressions](https://tryhackme.com/room/catregex)

### <a name="reverse"></a> ◀️ REVERSE ENGINEERING
- [Reverse Engineering 101](https://malwareunicorn.org/workshops/re101.html#1)
- [Reverse Engineering For Everyone!](https://0xinfection.github.io/reversing/)
- [Nightmare](https://guyinatuxedo.github.io/index.html) - intro to binary exploitation / reverse engineering course based around ctf challenges
- [Reverse Engineering & Vulnerability Analysis](https://pwn.umasscybersec.org/) - free lectures

### <a name="sql"></a> 🧪 SQL 
- [SQLbolt](https://sqlbolt.com/)
- [PGEXERCISE](https://pgexercises.com/questions/basic/)
- [SQL teaching](https://www.sqlteaching.com/)
- [KingLab](https://mystery.knightlab.com/)
- [DB designer](https://www.dbdesigner.net/) - Online Database Schema Design and Modeling Tool
- [SQL tips and tricks](https://github.com/ben-n93/SQL-tips-and-tricks)

### <a name="TH"></a> 📊 THREAT HUNTING
- [CyberChef](https://gchq.github.io/CyberChef/) - web app for encryption, encoding, compression and data analysis
- [CTI 101 Student Handout](https://klrgrz.medium.com/cti-101-student-handout-42c1441d3519)
- [Linux Threat hunting part 1](https://medium.com/verint-cyber-engineering/linux-threat-hunting-primer-part-i-dd11b156cb7d)
- [Linux Threat hunting part 2](https://medium.com/verint-cyber-engineering/linux-threat-hunting-primer-part-ii-69484f58ac92)
- [Living Off Trusted Sites (LOTS) Project](https://lots-project.com/) - Attackers are using popular legitimate domains when conducting phishing, C&C, exfiltration and downloading tools to evade detection. The list of websites below allow attackers to use their domain or subdomain.
- [LOLOL Farm](https://lolol.farm/) - Living Off the Living Off the Land - A great collection of resources to thrive off the land

### <a name="TI"></a> 🧠 THREAT INTELLIGENCE 
- [CTI Analyst Challenge](https://github.com/BushidoUK/CTI-Analyst-Challenge) - This repository contains instructions and resources for an intelligence analysis challenge
- [intelbase](https://intelbase.is/) - have I been pwned on steroids

### <a name="traning"></a> ⛳ TRAINING COURSES 
- [Investigation Theory](https://www.networkdefense.io/library/the-analyst-mindset/195109/about/)
- [Practical Threat Hunting](https://www.networkdefense.io/library/threat-hunters-playbook/87345/about/)
- [SOC Core Skills w/ John Strand](https://wildwesthackinfest.com/antisyphon//soc-core-skills-john-strand/)
- [Getting Started in Security with BHIS and MITRE ATT&CK](https://wildwesthackinfest.com/antisyphon/getting-started-in-security-with-bhis-and-mitre-attck-john-strand/)
- [Google Data Analytics Professional Certificate](https://www.coursera.org/specializations/google-data-analytics)
  [Blue Team Level 1](https://www.securityblue.team/why-btl1/) - Paid - £399 GBP
- [CCD - Certified CyberDefender](https://cyberdefenders.org/) - Paid - $800 USD

#### FREE
- [ENISA CSIRT Training Resources](https://www.enisa.europa.eu/topics/trainings-for-cybersecurity-specialists/online-training-material) - Trainings for Cybersecurity Specialists
- [ActiveCountermeasures](https://www.activecountermeasures.com/cyber-threat-hunting-training-course/) - Cyber Threat Hunting training course
- [Wireshark Tutorial](https://unit42.paloaltonetworks.com/wireshark-tutorial-decrypting-https-traffic/)
- [Cuckoosegg training](https://chrissanders.org/training/cuckoosegg/)
- [Incident Response class](https://samsclass.info/152/IR2020.htm)
- [Elastic for Security Analysts. Part 1: Searching Strings](https://socprime.com/blog/elastic-for-security-analysts-part-1-searching-strings/)
- [CRYPTO101](https://www.crypto101.io/)
- [CS50's Introduction to Computer Science](https://www.edx.org/course/introduction-computer-science-harvardx-cs50x)
- [Code Red](https://codered.eccouncil.org/essentials-series-bundle/#pricing-plans) - Network Defense Essentials, Ethical Hacking Essentials, Digital Forensics Essentials
- [C2 Attack & Defend](https://bluecapesecurity.com/courses/c2-attack-and-defend/)
- [CSI Linux](https://csilinux.com/) - go to Academy and there is a fee course - CSI Linux is a focused Linux distribution for digital forensics and was developed as an open source 'theme park' for the cyber security industry.
- [Fundamentals of Dark Web](https://socradar.io/dark-web-training/)

### <a name="vuln"></a> 🩹 VULNERABILITY MANAGEMENT
- [CVE Trends](https://cvetrends.com/)
- [VARIoT IoT vulnerabilities and exploits databases](https://www.variotdbs.pl/)
- [RouterSploit](https://github.com/threat9/routersploit)
- [Remedy Cloud](https://vulcan.io/remedy-cloud) - Search for a CVE below to see all the available fixes

### <a name="other"></a> 💬 OTHER
- [Inventory](https://inventory.raw.pm/) - cybersecurity tools and resources
- [Sound of Text](https://soundoftext.com/) - makes a sound of the text you wirte
- [Rambox](https://rambox.app/#home) - the best way to organize your workspace
- [Mindmup](https://www.mindmup.com/) - create your mindmap
- [Forest](https://www.forestapp.cc/) - Stay focused be present (pomodoro technique)
- [Postman](https://www.postman.com/api-platform/api-testing/) - API Testing
- [Stackedit](https://stackedit.io/app#) - In-browser Markdown editor
- [Canva](https://www.canva.com/) - graphic design platform, used to create social media graphics, presentations, posters, documents and other visual content. 
- [Ninte](https://ninite.com/) - Install and Update All Your Programs at Once
- [BurpSuite community](https://portswigger.net/burp)
- [Process Explorer](https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer) - shows a list of the currently active processes, including the names of their owning accounts
- [WinSCP](https://winscp.net/eng/index.php) - File Manager
- [Putty](https://www.putty.org/) - an SSH and telnet client
- [Win32 Disk Imager](https://sourceforge.net/projects/win32diskimager/) - to write a raw disk image to a removable device or backup a removable device to a raw image file. 
- [pfpmaker](https://pfpmaker.com/) - Create an awesome profile picture for free
- [Meld](https://meldmerge.org/) - helps you compare files, directories, and version controlled projects. It provides two- and three-way comparison of both files and directories, and has support for many popular version control systems.
- [Netatmo](https://www.netatmo.com/) - inteligent camera
- [crxaminer](https://crxaminer.tech/) - Enter the ID of the Chrome extension you want to analyze.

#### WEB BROWSER EXTENTION
- [Mitaka](https://chrome.google.com/webstore/detail/mitaka/bfjbejmeoibbdpfdbmbacmefcbannnbg/related?authuser=0) - searching IP, domain, URL, hash, etc. via the context menu.
- [Facebook Container](https://addons.mozilla.org/pl/firefox/addon/facebook-container/) - Firefox
- [DuckDuckGo Privacy Essentials](https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-for-firefox/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search)
- [Enhancer for YouTube](https://addons.mozilla.org/en-US/firefox/addon/enhancer-for-youtube/)
- [HTTPS Everywhere](https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search)
- [AdGuard AdBlocker](https://addons.mozilla.org/en-US/firefox/addon/adguard-adblocker/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search)
- [SafeType](https://chromewebstore.google.com/detail/mlnijlbdcehmipkmgmogebioeonfdpff) - Cyera Safe Type is an extention for anonimyzing private data in ChatGPT

#### OS
- [Kali Linux](https://www.kali.org/docs/introduction/download-official-kali-linux-images/)
- [Pop OS](https://pop.system76.com/) - for STEM and creative professionals who use their computer as a tool to discover and create.
- [xfce](https://www.xfce.org/) - lightweight desktop environment for UNIX-like operating systems

#### Dark Web - use TOR
- [Facebook](https://www.facebookcorewwwi.onion/)
- [Secure Drop](http://secrdrop5wyphb5x.onion/) - It allows a platform to securely and anonymously share documents.
- [WikiLeaks Upload](http://wlupld3ptjvsgwqw.onion/)
- [ProtonMail](https://protonirockerxow.onion/)
- [Shadow Wallet – Keeping Your Cryptocurrency Running](http://shadowrnzghb5zhb.onion/)
- [Deep Web Radio](http://76qugh5bey5gum7l.onion/) - Listen to Music Anonymously, Because Why Not?
- [Email templates](https://tabular.email/pricing)
- [cleanup.pictures](https://cleanup.pictures/) - remove any unwanted object on the picture
- [Tor: From the Dark Web to the Future of Privacy](https://direct.mit.edu/books/oa-monograph/5761/TorFrom-the-Dark-Web-to-the-Future-of-Privacy) - A biography of Tor—a cultural and technological history of power, privacy, and global politics at the internet's core.

Resources

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README