Security list for fun and profit

My initial idea came from this list : http://www.nothink.org/utilities.php

I wanted to update it with my sources, I will probably continue to update and reorganize it in the future.

Table of Contents

• Awesome lists
• Books
• Bug bounty
• Cheat sheets
• CTF
• Decoder/Packer/Unpacker
• Domain name Research / Analysis / Reputation
• Exploits and vulnerabilities
• Forensic
• Free shell
• Fun
• Generic utilities
• GNU/Linux
• Honeypots
• IP Research / Analysis / Investigation
• Leak / Defaced
• Learning / Exercises
• Lock picking
• Mail utilities
• Malicious traffic detection
• Malware / Botnet sources
• Malware analysis - Sandbox
• Malware analysis - Sandbox - Online
• Mobile
• Network
• OSINT
• OS X
• Passwords
• Penetration testing
• Port scanners
• Search engines
• Security challenges / WarGames
• Skimmer
• SSH
• SSL
• TOR
• VOIP
• VPN
• Vulnerable environments
• Web browser
• Wide Scans
• Windows
• Wireless / Radio

---

Awesome lists 👍

Name	URL
Android	https://github.com/ashishb/android-security-awesome
Collection of awesome lists	https://github.com/Hack-with-Github/Awesome-Hacking 🏆
Honeypots	https://github.com/paralax/awesome-honeypots 🏆
Incident response	https://github.com/meirwah/awesome-incident-response/ 🏆
Indicators of compromise	https://github.com/sroberts/awesome-iocs
Lists of lists of lists	https://github.com/t3chnoboy/awesome-awesome-awesome
Malware analysis	https://github.com/rshipp/awesome-malware-analysis/ 🏆
Reversing	https://github.com/fdivrp/awesome-reversing
Security list	https://github.com/sbilly/awesome-security
Threat intelligence	https://github.com/hslatman/awesome-threat-intelligence
Web	https://github.com/infoslack/awesome-web-hacking

Books 📚

Name	URL
Free programming books	https://github.com/vhf/free-programming-books
Recommended Reading	http://dfir.org/?q=node/8

Bug bounty 🍫

Name	URL
Programs and write-ups	https://github.com/djadmin/awesome-bug-bounty
Write-ups	https://github.com/ngalongc/bug-bounty-reference
HackerOne	https://hackerone.com 👍
BugCrowd.com	https://bugcrowd.com/programs
Zerodium	https://www.zerodium.com/
Vul box	https://www.vulbox.com/
Open bug bounty	https://www.openbugbounty.org/
BountyFactory	https://bountyfactory.io
Firebounty	https://firebounty.com
Bugsheet	http://www.bugsheet.com/
BountySource	https://www.bountysource.com/
Hunter edu	http://www.bountyhunteredu.org/careers/
Google	https://www.google.com/about/appsecurity/reward-program/
Microsoft	https://technet.microsoft.com/en-us/security/dn425036
More bug bounty	https://bugcrowd.com/list-of-bug-bounty-programs#

Cheat sheets 👍

Name	URL
General cheat sheets	http://www.cheat-sheets.org/
LFI	https://highon.coffee/blog/lfi-cheat-sheet/
Owasp series	https://www.owasp.org/index.php/OWASP_Cheat_Sheet_Series 👍
Packet life	http://packetlife.net/library/cheat-sheets/
Penetration test	https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/
Pentest monkey	http://pentestmonkey.net
SANS Forensic	https://digital-forensics.sans.org/community/cheat-sheets
Security Onion	https://github.com/Security-Onion-Solutions/security-onion/wiki/Cheat-Sheet
SQL injection	http://websec.ca/kb/sql_injection
Reverse	http://r00ted.com/cheat%20sheet%20reverse%20v5.png
Web application	https://www.owasp.org/index.php/Web_Application_Security_Testing_Cheat_Sheet
Zeltser's cheat sheets list	https://zeltser.com/cheat-sheets/

CTF 🚩

Name	URL
CTFTIME	https://ctftime.org/
Write-ups	https://github.com/ctfs
Reddit	https://www.reddit.com/r/securityctf
Tools list	https://github.com/Laxa/HackingTools
Tools list	https://github.com/zardus/ctf-tools
Tools list	https://github.com/apsdehal/awesome-ctf
Mellivora platform	https://github.com/Nakiami/mellivora 👍
Tinyctf platform	https://github.com/balidani/tinyctf-platform
Isislab platform	https://github.com/isislab/CTFd
Facebook platform	https://github.com/facebook/fbctf

Decoder/Packer/Unpacker

Name	URL
Code beautifier	http://codebeautify.org/
VB code beautifier	http://www.vbindent.com/
PHP formatter	http://beta.phpformatter.com/
PHPdecoder	http://ddecode.com/phpdecoder/
PHP encoding	http://yehg.net/encoding/
XML formatter	http://chris.photobooks.com/xml/default.htm
JSDetox	http://www.relentless-coding.com/projects/jsdetox/
JSNice	http://www.jsnice.org/
JSUnpack	https://github.com/urule99/jsunpack-n
JSBeautifier	http://jsbeautifier.org/
JavaScript Compressor	http://dean.edwards.name/packer/
Jjencode	http://utf-8.jp/public/jjencode.html
JSFuck	http://www.jsfuck.com/
Js obfuscate	http://www.jsobfuscate.com/
JS deobfuscate	https://github.com/sevzero/honeybadger
Colour higlighter	http://quickhighlighter.com/
URL	http://meyerweb.com/eric/tools/dencoder/
HEXdecoder	http://ddecode.com/hexdecoder/
Hackvertor (Tag based decoder/encoder)	https://hackvertor.co.uk/public

Domain name Research / Analysis / Reputation 📉

Name	URL
Archive	http://archive.is/
Archive	https://web.archive.org/ 👍
Archive a page	https://archive.fo/
BGP Toolkit	http://bgp.he.net/ 👍👍
Biggest DNS history	http://server9.rscott.org/tools/lookup.htm?ip=xxx.xxx.xxx.xxx 🏆
Cache page	http://www.cachedpages.com/
Cache view	http://cachedview.com/
Checking multiple blocklists	http://rbls.org/ 👍
DGA intro	https://en.wikipedia.org/wiki/Domain_generation_algorithm
DNS Blacklists	https://raw.githubusercontent.com/zbetcheckin/DNSBLs/master/active_dnsbls.txt
DNS dumpster	https://dnsdumpster.com/
DNS Propagation Checker	https://www.whatsmydns.net/
DNS stuff	http://www.dnsstuff.com/
Domain analysis list	https://github.com/rshipp/awesome-malware-analysis/#domain-analysis
Domain hijacking intro	https://en.wikipedia.org/wiki/Domain_hijacking
Expired domain	https://www.expireddomains.net/backorder-expired-domains/
Google	https://www.google.com/transparencyreport/safebrowsing/diagnostic/
Into dns	http://www.intodns.com/
Multi RBL	http://multirbl.valli.org/lookup/ 🏆
MXToolBox	https://mxtoolbox.com/SuperTool.aspx#
Netcraft	http://www.netcraft.com/
Reverse Whois	https://reversewhois.domaintools.com/
Robtex	https://www.robtex.com/dns/
Sucuri	http://sitecheck.sucuri.net/scanner/
TCP utils	http://www.tcpiputils.com/
Threat log	http://www.threatlog.com/
Threat miner	https://www.threatminer.org/
Top-Level Domains list	https://data.iana.org/TLD/tlds-alpha-by-domain.txt 👍
Trusted source	http://www.trustedsource.org/
URL Query	http://urlquery.net/ 🏆
URL scan	https://urlscan.io/
URL shorter list	https://mirror1.malwaredomains.com/files/url_shorteners.txt
URL Void	http://www.urlvoid.com/ 👍
Virus total	https://www.virustotal.com/#url
Whois - ARIN	https://whois.arin.net/
Whois - LACNIC	http://lacnic.net/cgi-bin/lacnic/whois
Whois - RIPE NCC	https://apps.db.ripe.net/search/query.html
Whois - AFRINIC	http://www.afrinic.net/fr/services/whois-query
Whois - APNIC	http://wq.apnic.net/apnic-bin/whois.pl
Whois by registrant name	http://viewdns.info/reversewhois/
Zeltser's list	https://zeltser.com/lookup-malicious-websites/

Exploits and vulnerabilities 🚪

Name	URL
CVEdetails	http://www.cvedetails.com/ 👍
CVE.mitre	https://cve.mitre.org/
Full disclosure	http://seclists.org/fulldisclosure/
See bug	https://www.seebug.org/ 👍
CXSecurity	https://cxsecurity.com/ 👍
Inj3ct0r	http://0day.today/
Packet Storm	https://packetstormsecurity.com/files/tags/exploit/
Exploit-db	http://www.exploit-db.com
Vulnerability-lab	http://www.vulnerability-lab.com/
Vulndb	https://vuldb.com/?archive.2016
Vulners	https://vulners.com/search?query=order:published
Backdoor - TCP-32764	https://github.com/elvanderb/TCP-32764
Rapid7 DB	https://www.rapid7.com/db/modules/
Intelligent Exploit	http://www.intelligentexploit.com
NIST	http://web.nvd.nist.gov/
Security focus	http://www.securityfocus.com/vulnerabilities
Country compatibility	https://cve.mitre.org/compatible/country.html
Mailing list	https://nmap.org/mailman/listinfo/fulldisclosure
Mail received	http://lists.openwall.net/full-disclosure/2016/
Mailing list	http://seclists.org/
Mailing list	https://lists.debian.org/debian-security-announce/
CVSS FIRST	https://www.first.org/cvss/calculator/3.0
CVSS NIST	https://nvd.nist.gov/cvss/v3-calculator

Forensic 🔍

Name	URL
Aldeid list	https://www.aldeid.com/wiki/Category:Digital-Forensics
Awesome forensic	https://github.com/Cugu/awesome-forensics
CFReDS	http://www.cfreds.nist.gov/ 👍
DFRWS challenge	http://www.dfrws.org/dfrws-forensic-challenge-2016
File signatures	https://en.wikipedia.org/wiki/List_of_file_signatures
File signatures	http://www.filesignatures.net/index.php?page=all
File signatures	http://www.garykessler.net/library/file_sigs.html
Forensic control	https://forensiccontrol.com/resources/free-software/
Forensic kb practical	http://www.forensickb.com/2008/01/forensic-practical.html
Forensic tools	https://forensics.cert.org/
Forensic - Technical graph	http://www.amanhardikar.com/mindmaps/ForensicChallenges.html
Package - DEFT	http://www.deftlinux.net/package-list/
Package - forensic-all	https://packages.debian.org/jessie-backports/forensics-all 👍
Testing Images	http://dftt.sourceforge.net/
Tools - DFIR	http://www.dfir.training/index.php/tools/ 👍
Tools - Forensics wiki	http://forensicswiki.org/wiki/Tools
Tools - NIST	http://toolcatalog.nist.gov/populated_taxonomy/index.php
Windows tools	https://ericzimmerman.github.io/
Windows tools list	http://forensic-proof.com/tools
Windows Artifact	https://blogs.sans.org/computer-forensics/
Write blocker	http://www.cftt.nist.gov/software_write_block.htm
Write blocker	https://github.com/msuhanov/Linux-write-blocker
Zythom list - FR	https://zythom.blogspot.se/2007/02/les-outils-dun-expert-judiciaire.html

Free shell 🐚

Name	URL
FreeShells list	http://www.freeshells.info/
Red-pill	http://shells.red-pill.eu/

Fun

Name	URL
Pwnie Awards	http://pwnies.com/nominations/ 🐴
Dead drops	https://deaddrops.com/db/
Mozilla location service map	https://location.services.mozilla.com/map - Thx rawger
Norse map	http://map.norsecorp.com/ 🌎
Fire eye map	https://www.fireeye.com/cyber-map/threat-map.html 🌎
Kaspersky AV map	https://cybermap.kaspersky.com/ 🌎
Kaspersky map	https://apt.securelist.com/ 🌎
Eset map	http://www.virusradar.com/ 🌎
Fortinet map	https://threatmap.fortiguard.com/ 🌎
Blueliv map	https://community.blueliv.com/map/ 🌎
Tor flow map	https://torflow.uncharted.software 🌎
Cymon map	https://cymon.io/map 🌎
HE maps	https://he.net/3d-map/ 🌎
DDoS attacks	http://www.digitalattackmap.com/
Sub marine cable	http://www.submarinecablemap.com/
Sub marine cable	http://submarine-cable-map-2016.telegeography.com/
Sub marine cable	http://lifewinning.com/submarine-cable-taps/
Flight radar	https://www.flightradar24.com ✈️
Fligh aware	https://flightaware.com/ ✈️
Live map	https://www.livemap24.com/ 🚋
World of VNC	https://worldofvnc.net/

Generic utilities 📁

Will be reorganized

Name	URL
CERT teams	https://www.first.org/about/organization/teams
Citizen lab	https://citizenlab.org/
Code analysises	https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
Codepad	http://codepad.org/
Crypto currency	https://coinmarketcap.com
Darknet stats	https://dnstats.net/
Deepweb	https://www.reddit.com/r/deepweb/
Electronic Frontier Foundation	https://www.eff.org/
Fake ID	http://www.fakenamegenerator.com/
GZinflate	http://www.tareeinternet.com/scripts/decrypt.php
Hackforum	http://hackforums.net/
Hashes example	https://hashcat.net/wiki/doku.php?id=example_hashes
Hurl	http://www.hurl.it/
Mibbit	http://www.mibbit.com/
Microsoft threat	http://www.microsoft.com/security
MIME types	https://www.iana.org/assignments/media-types/media-types.xhtml
MIME types	https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Complete_list_of_MIME_types
Mindmaps	http://www.amanhardikar.com/mindmaps.html 🏆
Random data generator	http://www.mockaroo.com/
Sandsprite	http://sandsprite.com/shellcode_2_exe.php
Sans	http://isc.sans.edu/diary/
Security wiki	http://oss-security.openwall.org/wiki/
Skimmers	https://krebsonsecurity.com/all-about-skimmers/
Tools	http://seclist.us/
Understand your commands	http://explainshell.com

GNU/Linux

Name	URL
Chkrootkit	https://packages.debian.org/en/jessie/chkrootkit
Command collection	https://github.com/tuwid/GNU-Linux-OpsWiki
Debsecan	https://packages.debian.org/en/jessie/debsecan
GNU/Linux containers	https://github.com/Friz-zy/awesome-linux-containers#security
GNU/Linux executable walkthrough	https://i.imgur.com/q5nyHp7.png
GNU/Linux post exploitation	https://github.com/mubix/post-exploitation/wiki/Linux-Post-Exploitation-Command-List 👍
GNU/Linux workstation	https://github.com/lfit/itpol/blob/master/linux-workstation-security.md 👍👍
Kernel exploitation	https://github.com/xairy/linux-kernel-exploitation
Lynis	https://packages.debian.org/en/jessie/lynis
RKhunter	https://packages.debian.org/en/jessie/rkhunter 👍
Securing debian	https://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html 👍
Vulnerability scanner	https://github.com/future-architect/vuls

Honeypots 🍯

Name	URL
Awesome list - All of them !	https://github.com/paralax/awesome-honeypots#honeypots 🏆
Honeynet	https://honeynet.org/project
Live nothink	http://www.nothink.org/honeypots.php

IP Research / Analysis / Investigation

Name	URL
BGP Toolkit	http://bgp.he.net/ 🏆
Bing dork	ip:xxx.xxx.xxx.xxx
Black List Alert	http://www.blacklistalert.org/
Black List Check	http://whatismyipaddress.com/blacklist-check/
Check host	http://check-host.net/
FireHOL IP blacklist	https://github.com/firehol/blocklist-ipsets 🏆
Google dork	"xxx.xxx.xxx.xxx" (replace xxx.xxx.xxx.xxx with the ip you are looking for)
Host file	https://hosts-file.net/
Host tracker	https://www.host-tracker.com/
IP in detail	http://ipindetail.com/ip-blacklist-checker
IP void	http://www.ipvoid.com/ 👍
IPv4 info	http://ipv4info.com/ 👍
Multi RBL	http://multirbl.valli.org/lookup/ 👍👍
Nirsoft country IP	http://www.nirsoft.net/countryip/
Project Honeypot	https://www.projecthoneypot.org/search_ip.php
Spamhaus	https://www.spamhaus.org/lookup/
TCP utils	http://www.tcpiputils.com/
Virus total	https://www.virustotal.com/en/ip-address/xxx.xxx.xxx.xxx/information/
Whatch Guard	http://www.reputationauthority.org/

Leak / Defaced 🚑

Name	URL
Breach alarm	https://breachalarm.com/
Cam	http://www.insecam.org/
Hacked emails	https://hacked-emails.com/
Have I been pwned	https://haveibeenpwned.com/
Isithacked	http://www.isithacked.com
Leakedin	http://www.leakedin.com/
Siph0n	https://twitter.com/datasiph0n
Zone-H	https://zone-h.org/

Learning / Exercises 🎓

Name	URL
Awesome training	http://opensecuritytraining.info/Training.html 🏆 🏆
Cybrary training	https://www.cybrary.it/
Essential basics	https://github.com/alex/what-happens-when 🏆 🏆
Exploits	https://exploit-exercises.com/
Exploits	https://thesprawl.org/research/
F-Secure training	http://mooc.fi/courses/2016/cybersecurity/
Malware Analysis course	https://github.com/RPISEC/Malware 🏆
Malware traffic training	http://www.malware-traffic-analysis.net/training-exercises.html 👍
Network - Forensic	https://www.honeynet.org/node/504
Practical analysis	https://practicalmalwareanalysis.com/labs/
Reverse - Malware	http://fumalwareanalysis.blogspot.se/p/malware-analysis-tutorials-reverse.html
Security courses	https://bitvijays.github.io/ 👍
Security talks	https://github.com/PaulSec/awesome-sec-talks 👍

Lock picking 🔐

Name	URL
Lock pick guide	http://lockpickguide.com 👍
Bosnianbill video	https://www.youtube.com/user/bosnianbill/videos :1:
Lock lab	https://lock-lab.com/
Lock wiki	http://www.lockwiki.com/

Mail utilities 📬

Name	URL
10 Minute Mail	http://10minutemail.com
DNSBL	https://en.wikipedia.org/wiki/DNSBL
DKIM validator	http://dkimvalidator.com/
Email recon	https://github.com/laramies/theHarvester
Get air mail	http://en.getairmail.com/
Gophish	https://github.com/gophish/gophish
Mailinator	https://www.mailinator.com/ # https://gist.github.com/nocturnalgeek/1b8fa44283314544c487
Mailnesia	http://mailnesia.com/
Mailcatch	http://mailcatch.com/
Mxtoolbox	http://www.mxtoolbox.com/
Open phish	https://openphish.com/
Openresolver JP	http://www.openresolver.jp/en/
Phishing Framework	https://github.com/pentestgeek/phishing-frenzy
Phish tank	http://www.phishtank.com/ 👍
SimplyEmail	https://github.com/killswitch-GUI/SimplyEmail
Spam DB	http://www.dnsbl.info/dnsbl-database-check.php
Spam encode secret	http://spammimic.com/encode.cgi
SpeedPhish Framework	https://github.com/tatanus/SPF
Yop mail	http://www.yopmail.com/

Malicious traffic detection 🚦

Name	URL
Maltrail	https://github.com/stamparm/maltrail 👍
Tsusen	https://github.com/stamparm/tsusen
Packetbeat	https://www.elastic.co/products/beats/packetbeat
p0f	http://lcamtuf.coredump.cx/p0f3/

Malware / Botnet sources 👼

Name	URL
Cybercrime tracker	http://cybercrime-tracker.net/
Malc0de	http://malc0de.com/database/
Malekal	http://malwaredb.malekal.com/
Abuse CH	https://www.abuse.ch/
Tracker	http://tracker.h3x.eu/
Kernel mode	http://www.kernelmode.info
Malware domain list	http://www.malwaredomainlist.com
Botnet.fr	https://www.botnets.fr/wiki/Main_Page
Exposed Botnets	http://www.exposedbotnets.com/
Dont need coffee	http://malware.dontneedcoffee.com/
VX Vault	http://vxvault.net/
Malware binaries	https://github.com/ytisf/theZoo/tree/master/malwares/Binaries
Total hash	https://totalhash.cymru.com/
ZeuS Tracker	https://zeustracker.abuse.ch
Contagio	http://contagiodump.blogspot.se/
Yararules	https://github.com/Yara-Rules/rules
Custom Google search engine	https://cse.google.com/cse/home?cx=011750002002865445766%3Apc60zx1rliu (from Corey Harrell)
Ransomware tracker	https://ransomwaretracker.abuse.ch/tracker/
Ransomware overview	https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml#
Ransomware simulator	https://shinolocker.com/
No more ransom	https://www.nomoreransom.org/
VirusShare	http://virusshare.com/
Malware.lu	https://malware.lu/
SafeGroup	http://www.malware.pl/ - https://www.scumware.org/
Clean MX	http://support.clean-mx.de/clean-mx/viruses.php
Malware domain blocklist	http://www.malwaredomains.com
Structured Threat Information eXpression	https://stixproject.github.io/
The Zoo aka Malware DB	https://ytisf.github.io/theZoo/
MISP	https://github.com/MISP/MISP
Maltrieve crawler	https://github.com/technoskald/maltrieve
Malware museum	https://archive.org/details/malwaremuseum 👍

Malware analysis - Sandbox 😷

Name	URL
Zeltser's list	https://zeltser.com/automated-malware-analysis/
Cuckoo Sandbox	https://www.cuckoosandbox.org/ 👍
Mastiff	https://github.com/KoreLogicSecurity/mastiff
Fastir	https://github.com/SekoiaLab/Fastir_Collector
SysAnalyser	https://github.com/dzzie/SysAnalyzer
Viper	https://github.com/viper-framework/viper
REMnux	http://zeltser.com/remnux/
Zeltser analysis	http://zeltser.com/reverse-malware/automated-malware-analysis.html
Manalyze	https://github.com/JusticeRage/Manalyze
Quarkslab IRMA	http://irma.quarkslab.com/
Dorothy2	https://github.com/m4rco-/dorothy2
F-Secure see	https://github.com/F-Secure/see
Noriben	https://github.com/Rurik/Noriben
Malheur	https://github.com/rieck/malheur
Drakvuf	https://github.com/tklengyel/drakvuf
Zero Wine Tryouts	http://zerowine-tryout.sourceforge.net/
CWSandbox	http://www.cwsandbox.org
RFI sandbox	https://monkey.org/~jose/software/rfi-sandbox/
Malwasm	https://github.com/malwarelu/malwasm

Malware analysis - Sandbox - Online 😷

Name	URL
Malwr - Cuckoo	https://malwr.com/ 👍
Hybrid analysis	https://www.hybrid-analysis.com/ 👍
PE dump	https://github.com/zed-0xff/pedump
Yararules	https://analysis.yararules.com/
Virscan	http://www.virscan.org/
Virusade	http://virusade.com/
VirusTotal	http://www.virustotal.com/
Malwareconfig	http://malwareconfig.com/
AVcaesar	https://avcaesar.malware.lu/
Detux GNU/Linux sandbox	http://detux.org/
Mastiff online	https://mastiff-online.korelogic.com/
AndroTotal	https://andrototal.org/
Comodo	https://cit.valkyrie.comodo.com/
VirScan	http://r.virscan.org/
ID Ransomware	https://id-ransomware.malwarehunterteam.com/
Document Analyzer	http://www.document-analyzer.net/
Malware tracker	http://www.cryptam.com/
Metascan	https://www.metadefender.com/#!/scan-file
Jotti	http://virusscan.jotti.org/it
ViCheck	https://www.vicheck.ca/
PDF examiner	http://www.pdfexaminer.com/
Malware tracker	https://www.malwaretracker.com
ThreadExpert	http://www.threatexpert.com/submit.aspx
Randomly changes Win32/64 PE Files	https://github.com/secretsquirrel/recomposer
Virus Total Notifier	https://github.com/mubix/vt-notify
Other list	http://cleanbytes.net/malware-online-scanners
Sand droid	http://sanddroid.xjtu.edu.cn

Mobile 📱

Name	URL
APK Analzyer	http://www.apk-analyzer.net/
Droid Sec wiki	http://www.droidsec.org/wiki/
Joebox Cloud	https://jbxcloud.joesecurity.org/login
Mobile security wiki	https://mobilesecuritywiki.com/ 👍
OWASP Goat Droid	https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project
Tracedroid	http://tracedroid.few.vu.nl
Wiki secmobi	https://github.com/secmobi/wiki.secmobi.com 🏆

Network

Name	URL
Awesome PCAP	https://github.com/caesar0301/awesome-pcaptools 👍
BGPlay	https://stat.ripe.net/widget/bgplay 👍
GNU/Linux monitoring	https://blog.serverdensity.com/80-linux-monitoring-tools-know/
MAC address block	http://standards-oui.ieee.org/oui/oui.txt
MAC find	http://www.coffer.com/mac_find/
MAC find	http://hwaddress.com
Packet total	http://www.packettotal.com/
Ping.eu	http://ping.eu/
Project honeypot	https://www.projecthoneypot.org/
Protocol Numbers	http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
Publicly PCAP files	http://www.netresec.com/?page=PcapFiles
Service Port Number Registry	https://www.iana.org/assignments/service-names-port-numbers/ 👍👍
Service Port Number Registry	https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers
Subnet calculator	http://www.subnet-calculator.com/cidr.php
Subnet calculator	http://www.subnetonline.com/pages/subnet-calculators.php
Security Onion tools	https://github.com/Security-Onion-Solutions/security-onion/wiki/Tools
Wireshark extentions	https://www.honeynet.org/project/WiresharkExtensions

OSINT

Name	URL
Osint list	https://github.com/jivoi/awesome-osint 👍
List of social network	https://en.wikipedia.org/wiki/List_of_social_networking_websites 👍
Reddit	https://www.reddit.com/r/SocialEngineering/
Maltego	https://www.paterva.com/
Hunter	https://hunter.io/
Pipl	https://pipl.com/
Peek you	http://www.peekyou.com/
Yatedo	http://www.yatedo.com/
Lullar	http://com.lullar.com/
Lakako	http://www.lakako.com/
Yasni	http://www.yasni.com/
User search	https://usersearch.org/
Google	https://www.google.com/advanced_search
Google dorks	intext:lastName firstName
Google dorks	insubject:lastName firstName
Google dorks	`intext:lastName firstName filetype:pdf
Google Scraper	https://github.com/NikolaiT/GoogleScraper
Bing	https://www.bing.com/
Bing dorks	lastName firstName (filetype:doc OR filetype:ppt OR filetype:pps OR filetype:xls OR filetype:docx OR filetype:pptx OR filetype:ppsx OR filetype:xlsx OR filetype:sxw OR filetype:sxc OR filetype:sxi OR filetype:odt OR filetype:ods OR filetype:odg OR filetype:odp OR filetype:pdf OR filetype:wpd OR filetype:svg OR filetype:svgz OR filetype:indd OR filetype:rdp OR filetype:ica)
Yahoo	https://search.yahoo.com/
Duck duck go	https://duckduckgo.com/
Yandex	https://www.yandex.com/
Exa lead	http://www.exalead.com
Osint stalker	https://github.com/milo2012/osintstalker
Speed phish framework	https://github.com/tatanus/SPF
Browser exploitation framework	https://github.com/beefproject/beef
The harvester	https://github.com/laramies/theHarvester
Meta goofil	https://github.com/laramies/metagoofil

OS X

Name	URL
Awesome OSX & IOS sec list	https://github.com/ashishb/osx-and-ios-security-awesome
OSX auditor	https://github.com/jipegit/OSXAuditor
OWASP iGoat Project	https://www.owasp.org/index.php/OWASP_iGoat_Project
Security and privacy guide	https://github.com/drduh/OS-X-Security-and-Privacy-Guide
stronghold - Easily configure MacOS security settings from the terminal.	https://github.com/alichtman/stronghold

Passwords 🔑

Name	URL
Cotse	http://www.cotse.com/tools/wordlists.htm
CrackStation	https://crackstation.net/buy-crackstation-wordlist-password-cracking-dictionary.htm
Default password	https://default-password.info/
Default password	https://cirt.net/passwords
Default password	http://www.defaultpassword.com/
Default password	http://www.defaultpassword.us/
Default cameras password	https://github.com/jeanphorn/wordlist/blob/master/README.md
Default password thc-hydra	https://github.com/vanhauser-thc/thc-hydra/blob/master/dpl4hydra_full.csv
Dafault router password	http://www.cleancss.com/router-default/
Default router password	https://github.com/jeanphorn/wordlist/blob/master/router_default_password.md
Default VoIP password	https://github.com/netbiosX/Default-Credentials/blob/master/VoIP-Default-Password-List.mdown
Fun secure password checker	https://password.kaspersky.com/
Hashcat WIKI	https://hashcat.net/wiki/
Multiple dictionary	https://github.com/danielmiessler/SecLists/tree/master/Passwords
Multiple dictionary	https://github.com/duyetdev/bruteforce-database
Online CrackStation	https://crackstation.net
Online Hask Killer	https://hashkiller.co.uk
Online Hash crack	http://www.onlinehashcrack.com/
Online MD5 and SHA1 db	http://hashtoolkit.com/
OpenWall	http://www.openwall.com/passwords/wordlists/ or ftp://ftp.openwall.com/pub/wordlists/
Outpost9	http://www.outpost9.com/files/WordLists.html
Packets storm	https://packetstormsecurity.com/Crackers/wordlists/
Password research	http://www.passwordresearch.com/
Programming - Secure Password Storage	https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016
SecLists	https://github.com/danielmiessler/SecLists/tree/master/Passwords
Skull security	https://wiki.skullsecurity.org/Passwords
SSH dictionary	https://github.com/droope/pwlist

Penetration testing 🔧

Name	URL
Awesome pentest	https://github.com/enaqx/awesome-pentest
Footprinting - Procedure & tools	http://www.0daysecurity.com/penetration-testing/network-footprinting.html
GNU/Linux privilege escalation	https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ 👍
Informaion gathering - Tools	http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/information-gathering.html
Organization of the Standard	http://www.pentest-standard.org/index.php/Main_Page 👍
Owasp - Check list	https://www.owasp.org/index.php/Testing_Checklist
Owasp testing guide	https://www.owasp.org/images/5/52/OWASP_Testing_Guide_v4.pdf 🏆
Owasp - tools	https://www.owasp.org/index.php/Category:OWASP_Tool
Public pentest reports	https://github.com/juliocesarfort/public-pentesting-reports 👍
Python tools for pentest	https://github.com/dloss/python-pentest-tools
Report sample	https://www.offensive-security.com/reports/sample-penetration-testing-report.pdf
Reverse engineering	http://wiki.yobi.be/wiki/Reverse-Engineering
SANS Penetration Testing	http://pen-testing.sans.org
Services enumeration	http://www.0daysecurity.com/penetration-testing/enumeration.html 👍 Thx rawger
Tools - BlackArch list	https://blackarch.org/tools.html
Tools - Cotse	http://www.cotse.com/tools/
Tools - Great list	http://wiki.yobi.be/wiki/Table_of_contents#Security
Tools - Kali list	http://tools.kali.org/tools-listing
Web	http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/web-application-analysis.html
Web vulnerabilities	http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/vulnerability-assessment.html

Port scanners 🎯

Name	URL
Masscan	https://github.com/robertdavidgraham/masscan
Nmap	https://nmap.org/7/
Zmap	https://zmap.io/
Zgrab	https://github.com/zmap/zgrab (Banner Grabber)
Nscan	https://github.com/OffensivePython/Nscan
PFRing	https://github.com/ntop/PF_RING - High-speed packet processing framework

Search engines 📡

Name	URL
ZoomEye	https://zoomeye.org/ 👍
Shodan	https://www.shodan.io/
Censys	https://censys.io/
Gegereka	http://gegereka.com/ (not always up)
Google	https://www.google.com/advanced_search
Google dorks	https://gist.github.com/zbetcheckin/04e6a5d7f2d5ef8cfa3c298701f47f9c
List of search engines	https://en.wikipedia.org/wiki/List_of_search_engines
Threat crowd	https://www.threatcrowd.org/

Security challenges / WarGames 🚩

Name	URL
Zenk-Security	https://www.zenk-security.com/
Root-Me	http://www.root-me.org/
Overthewire	http://overthewire.org/wargames/
CrackMe.de	http://crackmes.de/
Reversing	http://reversing.kr/
Pwnable	http://pwnable.kr/
Newbiecontest	https://www.newbiecontest.org/
OWASP VWAD list	https://github.com/OWASP/OWASP-VWAD/blob/master/src/online.tsv
WeChall	https://www.wechall.net/
Vulnhub	https://www.vulnhub.com/
Net Garage	http://io.netgarage.org/
SmashTheStack	http://smashthestack.org/
Hackthissite	http://www.hackthissite.org/
Hack.me	https://hack.me
HackThis!	http://www.hackthis.co.uk/
Backdoor.Sdslabs	https://backdoor.sdslabs.co/
Bright-shadows	http://www.bright-shadows.net/
SmashTheStack	http://smashthestack.org/
Ringzer0team	https://ringzer0team.com/challenges
Forensic contest	http://forensicscontest.com/puzzles
Dareyourmind	http://www.dareyourmind.net
Lost chall	http://www.lost-chall.org/
Rankk	http://www.rankk.org/
Happy Security	http://www.happy-security.de/
Net force	https://www.net-force.nl/challenges/
CanYouHack.it	http://canyouhack.it/
Hellboundhackers	https://www.hellboundhackers.org/
Microcorruption	https://microcorruption.com/
More challenges	http://captf.com/practice-ctf/

Skimmer 🃏

Name	URL
Skimmer source from Krebs	https://krebsonsecurity.com/all-about-skimmers/
Great reverse engineering on skimmer	https://trustfoundry.net/reverse-engineering-a-discovered-atm-skimmer/

SSH

Name	URL
Bruteforce know hosts	https://github.com/Churro/bruteforce-known-hosts
OpenSSH guidelines	https://wiki.mozilla.org/Security/Guidelines/OpenSSH
SSH audit	https://github.com/arthepsy/ssh-audit.git
SSH audit online	https://sshcheck.com
Who's there	https://github.com/FiloSottile/whosthere

SSL

Name	URL
Certificate search	https://crt.sh
Bad SSL	https://github.com/chromium/badssl.com
Htbridge - Online analysis	https://www.htbridge.com/ssl/
Mozilla SSL Configuration Generator	https://mozilla.github.io/server-side-tls/ssl-config-generator/
Observatory by Mozilla - Online analysis	https://observatory.mozilla.org/ 🏆🏆
O-Saft - Tools	https://www.owasp.org/index.php/O-Saft
OWASP tests - Procedure	https://www.owasp.org/index.php/Testing_for_Weak_SSL/TLS_Ciphers
Qualys SSL Labs - Online analysis	https://www.ssllabs.com/ssltest/
SSLscan - Tools	https://github.com/rbsec/sslscan
SSLyze - Tools	https://github.com/iSECPartners/sslyze
Symantec report - Online analysis	https://cryptoreport.websecurity.symantec.com/checker/
Testssl.sh - Tools	https://github.com/drwetter/testssl.sh 👍

TOR

Name	URL
Hidden services	https://www.torproject.org/docs/hidden-services.html.en
Hidden services scanner	https://github.com/superp00t/sadonion
Reddit	https://www.reddit.com/r/onions/
Scan Onion Services	https://github.com/s-rah/onionscan
Search engine - Grams	http://grams7enufi7jmdl.onion/
Search engine - Ahmia	https://ahmia.fi/
Search engine - TORCH	http://xmh57jrzrnw6insl.onion/
Search engine - DuckDuckGo	http://3g2upl4pq6kufc4m.onion/
Tails	https://blog.torproject.org/blogs/tails
The hidden wiki	https://thehiddenwiki.org/
Tolerant ISP for exit node	https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs
Tor Browser Fingerprint	https://github.com/jonaslejon/tor-fingerprint
Tor Bulk exit list	https://check.torproject.org/cgi-bin/TorBulkExitList.py
Tor IP history	https://exonerator.torproject.org/
Tor Know exit nodes	https://check.torproject.org/exit-addresses
Tor Project	https://www.torproject.org/
Tor Relays bandwidth	https://github.com/TheTorProject/bwscanner
Tor Socks	https://gitweb.torproject.org/torsocks.git
Tor Status	https://torstatus.blutmagie.de/
URL onion inspector	https://github.com/k4m4/onioff

VOIP ☎️

Name	URL
Penetration test	http://0daysecurity.com/penetration-testing/VoIP-security.html

VPN

Name	URL
Open VPN	https://github.com/OpenVPN
Comparison	https://thatoneprivacysite.net/vpn-comparison-chart/
Location test	https://www.dnsleaktest.com/
Location test	https://ipleak.net/

Vulnerable environments 🔓

Name	URL
Owasp list	https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project/Pages/Offline
Owasp BWA	https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project
DVWA	http://www.dvwa.co.uk/
WebGoat	http://code.google.com/p/webgoat
Metasploitable 3	https://github.com/rapid7/metasploitable3/wiki
Vulnerable systems list	https://www.amanhardikar.com/mindmaps/Practice.html 👍
VulnHub	http://vulnhub.com/
LampSecurity	http://sourceforge.net/projects/lampsecurity/
Hackademic-RTB1	http://www.aldeid.com/wiki/Hackademic-RTB1
Moth	http://www.bonsai-sec.com
Peruggia	http://sourceforge.net/projects/peruggia/
XSS play ground	http://xssplayground.net23.net/

Web browser

Name	URL
Amiunique project	https://github.com/DIVERSIFY-project/amiunique
Browser exploit	https://github.com/julienbedard/browsersploit
Browser info	http://www.browser-info.net/
Browser leaks	https://www.browserleaks.com/
Browser recommendations	https://gist.github.com/atcuno/3425484ac5cce5298932 👍
Browserling	https://www.browserling.com/
Fingerprint	https://amiunique.org/
Fingerprint	https://panopticlick.eff.org/
Flash	http://isflashinstalled.com/
Referer	https://www.whatismyreferer.com/
SSL	https://www.ssllabs.com/ssltest/viewMyClient.html
URL Shorter List	https://bit.do/list-of-url-shorteners.php
User agent	http://useragentstring.com/pages/useragentstring.php
User agent	http://whatsmyuseragent.com/
User agent	https://www.projecthoneypot.org/robot_useragents.php
User agent	https://www.whatismybrowser.com/developers/tools/user-agent-parser/browse

Windows

Name	URL
Anti forensic Windows	https://www.reddit.com/r/security/comments/32fb1l/open_guide_to_scrubbing_windows_oss_from_forensic/
Windows executable walkthrough	https://i.imgur.com/pHjcI.png
Windows exploitation	https://github.com/enddo/awesome-windows-exploitation
Windows hardening	https://github.com/PaulSec/awesome-windows-domain-hardening

Wide Scans 🌎

Name	URL
Scans.io	https://scans.io/
Rapid7 Sonar Labs	https://sonar.labs.rapid7.com/
Similar projects	https://github.com/rapid7/sonar/wiki/Similar-Projects
Defcon conference	https://defcon.org/
Blackhat conference	https://www.blackhat.com/

Wireless / Radio 📶

Name	URL
Awesome wifi tools list	https://github.com/0x90/wifi-arsenal
Penetration test	http://0daysecurity.com/penetration-testing/wireless-penetration.html
Great wifi map	https://wigle.net/
RFSec-ToolKit	https://github.com/cn0xroot/RFSec-ToolKit
RTL-SDR	http://www.rtl-sdr.com/
Wireless in airports	https://www.google.com/maps/d/viewer?mid=1Z1dI8hoBZSJNWFx2xr_MMxSxSxY