Resources (full list)
Reference list — quality over hype
This is the full link list for reference. Note: exploit/PoC references are hidden by default. For defensive work, advisories, standards and tracking are usually enough.
Important: no how-tos, no step-by-step attacks. This page is meant as a reference for defense, patching, standards and research.
A–Z (all links, sorted)
Click a letter to jump. Each entry shows its category.
- #
-
0xrick.github.io / about Sonstiges
- A
-
aperisolve.com Sonstiges
-
apktool.org Sonstiges
- B
-
bc-security.gitbook.io / empire-wiki Sonstiges
-
bishopfox.com / tools/sliver Sonstiges
- C
-
cellebrite.com / en/home Sonstiges
-
centralops.net / co Sonstiges
-
cisis12.de Sonstiges
-
ctftime.org Sonstiges
- D
-
datatracker.ietf.org / doc/html/rfc2104 Sonstiges
-
datatracker.ietf.org / doc/html/rfc3227 Sonstiges
-
datatracker.ietf.org / doc/html/rfc4346 Sonstiges
-
datatracker.ietf.org / doc/html/rfc4519 Sonstiges
-
datatracker.ietf.org / doc/html/rfc5246 Sonstiges
-
datatracker.ietf.org / doc/html/rfc6101 Sonstiges
-
datatracker.ietf.org / doc/html/rfc8446 Sonstiges
-
datatracker.ietf.org / doc/html/rfc8996 Sonstiges
-
dcfldd.sourceforge.net Sonstiges
-
de.tenable.com / products/nessus Sonstiges
-
developer.android.com / studio Sonstiges
-
dftt.sourceforge.net Sonstiges
-
disa.mil Sonstiges
-
dnschecker.org Sonstiges
-
dnschecker.org / all-tools.php Sonstiges
-
dradis.com / ce Sonstiges
-
dsgvo-gesetz.de Sonstiges
-
dsgvo-gesetz.de / bdsg Sonstiges
- E
-
eur-lex.europa.eu / eli/dir/2022/2555/oj Sonstiges
-
eur-lex.europa.eu / eli/dir/2022/2557/oj Sonstiges
-
eur-lex.europa.eu / eli/reg/2022/2554/oj Sonstiges
-
eur-lex.europa.eu / eli/reg/2024/2847/oj Sonstiges
- G
-
gdpr.eu Sonstiges
-
gdpr.eu / article-35-impact-assessment Sonstiges
-
gdpr.eu / tag/gdpr Sonstiges
-
github.com / Arachni/arachni Sonstiges
-
github.com / BC-SECURITY/Empire Sonstiges
-
github.com / besimorhino/powercat Sonstiges
-
github.com / BishopFox/sliver Sonstiges
-
github.com / bitsadmin/nopowershell Sonstiges
-
github.com / CERTCC/certfuzz Sonstiges
-
github.com / cobbr/Covenant Sonstiges
-
github.com / cobbr/ObfuscatedEmpire Sonstiges
-
github.com / dirkjanm/mitm6 Sonstiges
-
github.com / ElevenPaths/FOCA Sonstiges
-
github.com / EmpireProject/Empire Sonstiges
-
github.com / fortra/impacket Sonstiges
-
github.com / gdssecurity/PSAttack Sonstiges
-
github.com / its-a-feature/Mythic Sonstiges
-
github.com / lanmaster53/recon-ng Sonstiges
-
github.com / Mr-Un1k0d3r/PowerLessShell Sonstiges
-
github.com / nam3z1p/ICMP_Loki_Attack Sonstiges
-
github.com / nccgroup/ScoutSuite Sonstiges
-
github.com / open-sdr/openwifi Sonstiges
-
github.com / opsdisk/metagoofil Sonstiges
-
github.com / OWASP/owasp-mastg Sonstiges
-
github.com / p3nt4/PowerShdll Sonstiges
-
github.com / PowerShellMafia/PowerSploit Sonstiges
-
github.com / rad10/SearchSploit.py Sonstiges
-
github.com / s0lst1c3/eaphammer Sonstiges
-
github.com / S4kur4/Saddam-new Sonstiges
-
github.com / samratashok/nishang Sonstiges
-
github.com / sensepost/objection Sonstiges
-
github.com / SpiderLabs/Responder Sonstiges
-
github.com / t6x/reaver-wps-fork-t6x Sonstiges
-
github.com / vaibhavpandeyvpz/apkstudio Sonstiges
-
grml.org / zsh Sonstiges
- H
-
howto.thec2matrix.com Sonstiges
- I
-
incogni.com Sonstiges
- K
- L
-
leakchecker.uni-bonn.de / de/index Sonstiges
-
linux.die.net / man Sonstiges
- M
-
metadefender.opswat.com Sonstiges
-
mullvad.net / en Sonstiges
- N
-
null-byte.wonderhowto.com Sonstiges
- O
-
oag.ca.gov / privacy/ccpa Sonstiges
-
overthewire.org / wargames Sonstiges
- P
-
packetstorm.news / files/latest/1 Sonstiges
-
picoctf.org Sonstiges
-
public.cyber.mil / stigs Sonstiges
-
public.cyber.mil / stigs/scap Sonstiges
-
publicrecords.searchsystems.net Sonstiges
- R
-
regex101.com Sonstiges
-
rgaucher.info / beta/grabber Sonstiges
- S
-
saveweb2zip.com / en Sonstiges
-
scapy.net Sonstiges
-
scratch.mit.edu Sonstiges
-
sec.hpi.uni-potsdam.de / ilc/search Sonstiges
-
socialcatfish.com Sonstiges
-
sourceforge.net / projects/bittwist Sonstiges
-
sourceforge.net / projects/isstf Sonstiges
-
subnetipv4.com Sonstiges
- T
-
tineye.com Sonstiges
-
tldp.org / LDP/abs/html Sonstiges
- U
-
udemy.com Sonstiges
- V
-
vulners.com / search Sonstiges
- W
-
wapiti-scanner.github.io Sonstiges
-
wigle.net Sonstiges
-
wmx-api- Sonstiges
-
www.abc.se / ~re/Coagula/Coagula.html Sonstiges
-
www.acunetix.com Sonstiges
-
www.armis.com / research/blueborne Sonstiges
-
www.blackbox.ai Sonstiges
-
www.bluecedar.com / deploy Sonstiges
-
www.cobaltstrike.com Sonstiges
-
www.credly.com Sonstiges
-
www.dein-ip-check.de / tools/macfinder Sonstiges
-
www.dmarc-record.de Sonstiges
-
www.eicar.org Sonstiges
-
www.ettercap-project.org Sonstiges
-
www.fern-pro.com Sonstiges
-
www.fern-pro.com / screenshots Sonstiges
-
www.first.org / cvss Sonstiges
-
www.first.org / cvss/calculator/3.0 Sonstiges
-
www.first.org / cvss/v4.0/faq Sonstiges
-
www.gesetze-im-internet.de / bdsg_2018 Sonstiges
-
www.gesetze-im-internet.de / bsi-kritisv Sonstiges
-
www.gesetze-im-internet.de / bsig_2009 Sonstiges
-
www.howto-do.it / de/was-ist-recon-ng Sonstiges
-
www.httrack.com Sonstiges
-
www.ietf.org / rfc/rfc2246.txt Sonstiges
-
www.invicti.com Sonstiges
-
www.irongeek.com / i.php Sonstiges
-
www.isecom.org / OSSTMM.3.pdf Sonstiges
-
www.joesandbox.com Sonstiges
-
www.kali.org / tools/bulk-extractor Sonstiges
-
www.kali.org / tools/firewalk Sonstiges
-
www.kali.org / tools/hping3 Sonstiges
-
www.kali.org / tools/impacket Sonstiges
-
www.kali.org / tools/metagoofil Sonstiges
-
www.kali.org / tools/mitm6 Sonstiges
-
www.kali.org / tools/outguess Sonstiges
-
www.kali.org / tools/powershell-empire Sonstiges
-
www.kali.org / tools/reaver Sonstiges
-
www.kali.org / tools/skipfish Sonstiges
-
www.kali.org / tools/spooftooph Sonstiges
-
www.kali.org / tools/steghide Sonstiges
-
www.kali.org / tools/yersinia Sonstiges
-
www.misp-project.org Sonstiges
-
www.netcraft.com Sonstiges
-
www.nslookup.io Sonstiges
-
www.offsec.com Sonstiges
-
www.open-scap.org Sonstiges
-
www.openstego.com Sonstiges
-
www.pcisecuritystandards.org / about_us Sonstiges
-
www.peekyou.com / - Sonstiges
-
www.pentest-standard.org Sonstiges
-
www.pingcastle.com Sonstiges
-
www.postman.com Sonstiges
-
www.qualys.com Sonstiges
-
www.rexegg.com / regex-quickstart.html Sonstiges
-
www.sans.org / tools/registry-explorer Sonstiges
-
www.ssllabs.com / ssl-pulse Sonstiges
-
www.tenable.com Sonstiges
-
www.vulnhub.com Sonstiges
- Y
-
yacy.de Sonstiges
-
yandex.com / images Sonstiges
By category
For browsing — each category is alphabetically sorted.
Sonstiges (201)
- 0xrick.github.io / about
- aperisolve.com
- apktool.org
- bc-security.gitbook.io / empire-wiki
- bishopfox.com / tools/sliver
- blog.fox-it.com / 2018/01/11/mitm6-compromising-ipv4-networks-v…
- cellebrite.com / en/home
- centralops.net / co
- cisis12.de
- ctftime.org
- datatracker.ietf.org / doc/html/rfc2104
- datatracker.ietf.org / doc/html/rfc3227
- datatracker.ietf.org / doc/html/rfc4346
- datatracker.ietf.org / doc/html/rfc4519
- datatracker.ietf.org / doc/html/rfc5246
- datatracker.ietf.org / doc/html/rfc6101
- datatracker.ietf.org / doc/html/rfc8446
- datatracker.ietf.org / doc/html/rfc8996
- dcfldd.sourceforge.net
- de.tenable.com / products/nessus
- developer.android.com / studio
- dftt.sourceforge.net
- disa.mil
- dnschecker.org
- dnschecker.org / all-tools.php
- docs.redhat.com / en/documentation/red_hat_enterprise_linux/7/h…
- docs.redhat.com / en/documentation/red_hat_enterprise_linux/7/h…
- dradis.com / ce
- dsgvo-gesetz.de
- dsgvo-gesetz.de / bdsg
- eur-lex.europa.eu / eli/dir/2022/2555/oj
- eur-lex.europa.eu / eli/dir/2022/2557/oj
- eur-lex.europa.eu / eli/reg/2016/679/2016-05-04
- eur-lex.europa.eu / eli/reg/2022/2554/oj
- eur-lex.europa.eu / eli/reg/2024/2847/oj
- gdpr.eu
- gdpr.eu / article-32-security-of-processing
- gdpr.eu / article-35-impact-assessment
- gdpr.eu / tag/gdpr
- github.com / Arachni/arachni
- github.com / BC-SECURITY/Empire
- github.com / besimorhino/powercat
- github.com / BishopFox/sliver
- github.com / bitsadmin/nopowershell
- github.com / CERTCC/certfuzz
- github.com / cobbr/Covenant
- github.com / cobbr/ObfuscatedEmpire
- github.com / dirkjanm/mitm6
- github.com / ElevenPaths/FOCA
- github.com / EmpireProject/Empire
- github.com / fortra/impacket
- github.com / gdssecurity/PSAttack
- github.com / its-a-feature/Mythic
- github.com / lanmaster53/recon-ng
- github.com / MobSF/Mobile-Security-Framework-MobSF
- github.com / Mr-Un1k0d3r/PowerLessShell
- github.com / nam3z1p/ICMP_Loki_Attack
- github.com / nccgroup/ScoutSuite
- github.com / open-sdr/openwifi
- github.com / opsdisk/metagoofil
- github.com / OWASP/CheatSheetSeries/blob/master/cheatsheet…
- github.com / OWASP/owasp-mastg
- github.com / p3nt4/PowerShdll
- github.com / PowerShellMafia/PowerSploit
- github.com / rad10/SearchSploit.py
- github.com / s0lst1c3/eaphammer
- github.com / S4kur4/Saddam-new
- github.com / samratashok/nishang
- github.com / sensepost/objection
- github.com / SpiderLabs/Responder
- github.com / SwiftOnSecurity/sysmon-config
- github.com / t6x/reaver-wps-fork-t6x
- github.com / tcostam/awesome-command-control
- github.com / vaibhavpandeyvpz/apkstudio
- grml.org / zsh
- howto.thec2matrix.com
- iapp.org / resources/article/the-california-privacy-righ…
- incogni.com
- kalilinuxtutorials.com / foca-metadata-hidden-documents
- leakchecker.uni-bonn.de / de/index
- learn.microsoft.com / de-de/windows/security/operating-system-secur…
- learn.microsoft.com / en-us/powershell/scripting/overview
- learn.microsoft.com / en-us/security-updates
- learn.microsoft.com / nl-nl/windows/security/operating-system-secur…
- linux.die.net / man
- medium.com / fmisec/gaining-credentials-easily-with-respon…
- metadefender.opswat.com
- mullvad.net / en
- null-byte.wonderhowto.com
- oag.ca.gov / privacy/ccpa
- otx.alienvault.com / browse/global/pulses
- overthewire.org / wargames
- packetstorm.news / files/latest/1
- pentest-standard.readthedocs.io / en/latest/reporting.html
- picoctf.org
- public.cyber.mil / stigs
- public.cyber.mil / stigs/scap
- publicrecords.searchsystems.net
- readwrite.com / 3-dangerous-cross-site-scripting-attacks-of-t…
- regex101.com
- rgaucher.info / beta/grabber
- saveweb2zip.com / en
- scapy.net
- scratch.mit.edu
- sec.hpi.uni-potsdam.de / ilc/search
- socialcatfish.com
- sourceforge.net / projects/bittwist
- sourceforge.net / projects/isstf
- sourceforge.net / projects/retinacommunity
- subnetipv4.com
- tineye.com
- tldp.org / LDP/abs/html
- udemy.com
- vulners.com / search
- w3techs.com / technologies/overview/ssl_certificate
- wapiti-scanner.github.io
- wigle.net
- wmx-api-
- www.abc.se / ~re/Coagula/Coagula.html
- www.acunetix.com
- www.armis.com / research/blueborne
- www.blackbox.ai
- www.bluecedar.com / deploy
- www.bmi.bund.de / SharedDocs/downloads/DE/publikationen/themen/…
- www.bundesnetzagentur.de / DE/Vportal/TK/Funktechnik/EMF/start.html
- www.bundesregierung.de / breg-de/aktuelles/kritis-dachgesetz-2318846
- www.cdc.gov / phlp/php/resources/health-insurance-portabili…
- www.cloudflare.com / de-de/dns/dnssec/how-dnssec-works
- www.cobaltstrike.com
- www.credly.com
- www.davidc.net / sites/default/subnets/subnets.html
- www.dein-ip-check.de / tools/macfinder
- www.dfs.ny.gov / system/files/documents/2019/02/dfsrf500txt.pdf
- www.dinmedia.de / de/norm/din-en-iso-iec-27001/370680635
- www.dmarc-record.de
- www.eicar.org
- www.ettercap-project.org
- www.fern-pro.com
- www.fern-pro.com / screenshots
- www.first.org / cvss
- www.first.org / cvss/calculator/3.0
- www.first.org / cvss/v4.0/faq
- www.forcepoint.com / security/insider-threat
- www.gesetze-im-internet.de / bdsg_2018
- www.gesetze-im-internet.de / bsi-kritisv
- www.gesetze-im-internet.de / bsig_2009
- www.howto-do.it / de/was-ist-recon-ng
- www.httrack.com
- www.ibm.com / products/qradar-siem/user-behavior-analytics
- www.ietf.org / rfc/rfc2246.txt
- www.invicti.com
- www.irongeek.com / i.php
- www.isecom.org / OSSTMM.3.pdf
- www.joesandbox.com
- www.kali.org / tools/bulk-extractor
- www.kali.org / tools/firewalk
- www.kali.org / tools/hping3
- www.kali.org / tools/impacket
- www.kali.org / tools/libimage-exiftool-perl
- www.kali.org / tools/metagoofil
- www.kali.org / tools/mitm6
- www.kali.org / tools/outguess
- www.kali.org / tools/powershell-empire
- www.kali.org / tools/reaver
- www.kali.org / tools/skipfish
- www.kali.org / tools/spooftooph
- www.kali.org / tools/steghide
- www.kali.org / tools/yersinia
- www.legislation.gov.uk / ukpga/1990/18/section/3A
- www.microsoft.com / en-us/download/details.aspx
- www.misp-project.org
- www.ncsl.org / technology-and-communication/computer-crime-s…
- www.netcraft.com
- www.nslookup.io
- www.offsec.com
- www.offsec.com / reports/sample-penetration-testing-report.pdf
- www.onworks.net / de/software/windows/app-spooftooph
- www.open-scap.org
- www.openstego.com
- www.opentext.com / products/encase-endpoint-security
- www.pcisecuritystandards.org / about_us
- www.pcisecuritystandards.org / document_library
- www.peekyou.com / -
- www.pentest-hub.com / PDF/EXAMPLE-Penetration_Testing_Report_v.1.0.pdf
- www.pentest-standard.org
- www.pentest-standard.org / index.php/Main_Page
- www.pingcastle.com
- www.postman.com
- www.qualys.com
- www.rexegg.com / regex-quickstart.html
- www.sans.org / information-security-policy
- www.sans.org / tools/registry-explorer
- www.sei.cmu.edu / about/divisions/cert/index.cfm
- www.splunk.com / en_us/products/user-behavior-analytics.html
- www.ssldragon.com / de/blog/cipher-suites
- www.ssllabs.com / ssl-pulse
- www.tenable.com
- www.varonis.com / blog/practical-powershell-for-it-security-par…
- www.vulnhub.com
- yacy.de
- yandex.com / images