Comment on page

Offensive-Cybersecurity

General
Cloud Pentesting
Recon + OSINT
Wordlists
Infrastructure 
Social Engineering
​AthenaOS - Arch-linux Cybersecurity OS !
​HackTricks !
​Exploit Notes !
​Nahamsec's beginner repo​
​PayloadsAllTheThings Repo !
​Z4nzu's Hacking Tool​
​CTF Resources from @Crypto-Cat​
​Awesome Pentest Tools/references from @enaqx​
​Dark Army Hacking Tools​
​Pimp My Kali​
​Online Hash Cracking Service !
​fsociety Hacking Tools​
​Payloadbox Repository !
​Awesome Andoid Security !
​Bug Bounty Tips​
​Lockdoor Framework Pentesting Tool​
​Penetration Testing Execution Standard Guide !
​CyberChef Recipes Repo​
​Red Teaming Cheat Sheet Repo from @0xjs​
​Cobra All-in-one Tool​
​SANS SLingshot Tool​
​Pentest Reporting Tool from @micro-joan​
​s0cm0nkey's guide !
​Six2dez's Pentest Book​
​sl4xo's Blog​
​thehacker.recipes​
​
Azure
​MAAD-AF Azure AD Tool​
Informational Repos
​https://github.com/InfoSecWarrior/Offensive-Recon​
Sites
Tools
OSINT Sites
​BuiltWith !
​Binary Edge (Threat Intelligence scanner)​
​Censys (Internet Attack Surface monitoring)​
​CentralOps​
​crt.sh (Database of certificate identities​
​DNSlytics​
​EXIF Data​
​FullHunt (Attack Surface Intelligence)​
​GPS Coordinates​
​GrayHatWarefare (Search public S3 buckets)​
​Grep App (Searching for data within git repos)​
​GreyNoise (Search for internet-connected devices)​
​Hunter (Find professional email addresses linked to a business)​
​IntelligenceX (Search Engine and data archive)​
​LeakIX (publicly indexed information)​
​Netlas (internet connected asset intel)​
​ONYPHE (Cyber Defense Search Engine)​
​OpenCorporates​
​Packet Storm Security (Latest atest security issues and exploit database)​
​PentestTools​
​PimEyes ( Face Recognition Search Engine and Reverse Image Search)​
​PublicWWW (Marketing and affiliate marketing research​
​Pulsedive—Threat intelligence search engine)​
​Shodan​
​SpiderFoot​
​SpyOnWeb URL Scan (Analyse websites)​
​ViewDNS​
​VirusTotal​
​Wayback Machine​
​Vulners (Search engine for Security Intel)​
​Wigle (Database of wireless networks)​
​ZoomEye (Information Gathering for IP connected devces)​
​How to create sockpuppet accounts !
​Ultimate OSINT Handbook on Personal Information by SOCRadar​
​Commandergirl's suggestions - powerful OSINT Dashboard​
​Hatles1der's Ultimate OSINT Collection Dashboard​
​
​
​
​
Tools
​Shodan Search Engine !
​OSINT Tool Collection Repo​
​Awesome Shodan Queries !
​OWASP Maryam​
​Karma from @Dheerajmadhukar​
​sn0int​
​Scrummage OSINT and Threat Hunting Framework​
​Online OSINT Framework Reference​
​BlackBird​
​uncover​
​Oh365 User Finder​
​WeakestLink LinkedIN Tool​
​msDorkDump​
​geeMailUserFinder​
​Exchange Finder​
​Octosuite - Github user OSINT​
​LinkScope - perform online investigations
​sub3suite​
​Phoneinfoga​
​
​
Wordlists and Passwords
Password Databases/Lists
Text
Text
​Seclists from @danielmiessler​
​Default Creds Cheat Sheet​
​CIRT.net (default passwords)​
​Default-password.info​
​Data Recovery (default passwords)​
​Skullsecurity Password collection​
​Trickest Wordlists​
​
​
Web Fuzzing
​OnelistForall - AKA Rockyou for web !
​FuzzDB​
​Asset Note​
Infrastructure Pentesting Resources
​Windows & AD Exploitation Cheatsheet by chvancooten
​Wadoms Interactive AD Pentest CheatSheet !
​Ciphey - Encryption
Malware
Exploitation
Post-Exploitation
C2's
Network
Shells
​Awesome Malware Development Repo​
​Maldev for Dummies​
​Sektor7 Institute - Malware Dev training
General Tools
​GTFOBins​
​Windows Exploitatation from @FULLSHADE​
​EvilWinRM​
​HoaxShell !
​Shennina - automated host exploitation framework
​
Antivirus Evasion
​AMSI Bypass Powershell​
​ProtectMyTooling - Packer
​Garble - Golang packer
​PatchThatAMSI​
​
​
Tools
​Forensia - Anti Forensics Tool
C2s
Text
Text
​CrackMapExec​
​DBC2​
​Empire​
​EvilOSX​
​PEASS from @carlospolop !
​Portia​
​ProcessHider​
​PwnCat​
​pupy​
​Villian - Backdoor generator by @t3l3machus​
​DefenderCheck - tool to check/modify signatures used by antivirus for detection
​LOLBAS​
​Havoc​
​Silver​
​Merlin​
​GithubC2​
​VirusTotalC2​
​Reddit C2​
​Low detection c2 by @polymaster3313
​C2 Matrix !
​
​Wireshark: Network protocol analysis tool​
​NMap: The pre-eminent network mapping tool​
​JFScan​
​CrackMapExec A swiss army knife for pentesting networks​
​Legion​
​VLANPWN​
​Responder !
​OrbitalDump​
(SSH Brute-forcer)
​
​
​Reverse Shell Generator by @0Day
​PHP Reverse Shell​
​Reverse Shell Cheat Sheet by pentestmonkey
​PayloadsAllTheThings RevShell cheatsheet​
​
​
​
​Beast Bomber​
​PyPhisher​
​Awesome Social Engineering​
​
SMS Services
Send SMS - TX only
Text
Text
​Txtdrop​
​Textem​
​Txtemnow​
​SendanonymousSMS​
​SMSend​
​AfreeSMS​
​FreebulkSMSonline​
​
​
Send and Receive SMS
-----------------------------
-----------------------------
​SMS-online​
​SMS.SELLAITE​
​Send SMS now​
​Receive SMS online​
​Free SMS code​
​HS3X​
​SMS Get​
​GetfreeSMSnumber​
​ReceivefreeSMS​
​ReceivefreeSMS​
​7sim​
​1S2U​
​Text anywhere​
​Proovl​
​Groovl​
Mobile
Container Security
Cloud
Blockchain
Mobile Testing
Android PenTesting
Text
Text
​HacktheBox Android guide for beginners​
​APKNuke​
​Mobile Hacking Android cheatsheet (PDF) by @randorisec​
​Slicer - Automated​
​Recon Tool for APKs​
​
​
IoS PenTesting
Text
Text
​IoS Pentesting Guide by Carlos Polop (Hacktrickz)​
​Mobile Hacking iOS cheatsheet (PDF) by @randorisec​
​
Application Security
Text
Text
​OWASP Mobile Application Security Standard for Baseline Security​
​Android App Security Checklist​
​Mobile Security Framework (MobSF)​
​Objection - runtime mobile exploration toolkit
​Mobile App PenTesting Cheat Sheet​
​OWASP Mobile Application Security Standards​
​
Kubernetes
Text
​Kubeeye - misconfiguration scanning tool​
​
​
​Cloud Pentest CheatSheets​
​AWSGoat Vulnerable AWS Instance​
​AzureGoat Vulnerable Azure Instance​
​Azure Red Team Repo​
​Azure Pentest .md file from @swiskyrepo​
​PowerZure​
​Awesome Azure Pentest​
​StormSpotter for Azure AD​
​
​Awesome Smart Contract Security from @saeidshirazi​
​Damn Vulnerable DeFi practice​
---

Password Databases/Lists	Text	Text
Seclists from @danielmiessler	Default Creds Cheat Sheet	CIRT.net (default passwords)
Default-password.info	Data Recovery (default passwords)	Skullsecurity Password collection
Trickest Wordlists

C2s	Text	Text
CrackMapExec	DBC2	Empire
EvilOSX	PEASS from @carlospolop !	Portia
ProcessHider	PwnCat	pupy
Villian - Backdoor generator by @t3l3machus	DefenderCheck - tool to check/modify signatures used by antivirus for detection	LOLBAS
Havoc	Silver	Merlin
GithubC2	VirusTotalC2	Reddit C2
Low detection c2 by @polymaster3313	C2 Matrix !

Send SMS - TX only	Text	Text
Txtdrop	Textem	Txtemnow
SendanonymousSMS	SMSend	AfreeSMS
FreebulkSMSonline
Send and Receive SMS	-----------------------------	-----------------------------
SMS-online	SMS.SELLAITE	Send SMS now
Receive SMS online	Free SMS code	HS3X
SMS Get	GetfreeSMSnumber	ReceivefreeSMS
ReceivefreeSMS	7sim	1S2U
Text anywhere	Proovl	Groovl

Android PenTesting	Text	Text
HacktheBox Android guide for beginners	APKNuke	Mobile Hacking Android cheatsheet (PDF) by @randorisec
Slicer - Automated Recon Tool for APKs

IoS PenTesting	Text	Text
IoS Pentesting Guide by Carlos Polop (Hacktrickz)	Mobile Hacking iOS cheatsheet (PDF) by @randorisec

Application Security	Text	Text
OWASP Mobile Application Security Standard for Baseline Security	Android App Security Checklist	Mobile Security Framework (MobSF)
Objection - runtime mobile exploration toolkit	Mobile App PenTesting Cheat Sheet	OWASP Mobile Application Security Standards

Kubernetes	Text
Kubeeye - misconfiguration scanning tool

Starting a Business

Application Security

Last modified 8d ago

AthenaOS - Arch-linux Cybersecurity OS !	HackTricks !	Exploit Notes !
Nahamsec's beginner repo	PayloadsAllTheThings Repo !	Z4nzu's Hacking Tool
CTF Resources from @Crypto-Cat	Awesome Pentest Tools/references from @enaqx	Dark Army Hacking Tools
Pimp My Kali	Online Hash Cracking Service !	fsociety Hacking Tools
Payloadbox Repository !	Awesome Andoid Security !	Bug Bounty Tips
Lockdoor Framework Pentesting Tool	Penetration Testing Execution Standard Guide !	CyberChef Recipes Repo
Red Teaming Cheat Sheet Repo from @0xjs	Cobra All-in-one Tool	SANS SLingshot Tool
Pentest Reporting Tool from @micro-joan	s0cm0nkey's guide !	Six2dez's Pentest Book
sl4xo's Blog	thehacker.recipes

BuiltWith !	Binary Edge (Threat Intelligence scanner)	Censys (Internet Attack Surface monitoring)	CentralOps
crt.sh (Database of certificate identities	DNSlytics	EXIF Data	FullHunt (Attack Surface Intelligence)
GPS Coordinates	GrayHatWarefare (Search public S3 buckets)	Grep App (Searching for data within git repos)	GreyNoise (Search for internet-connected devices)
Hunter (Find professional email addresses linked to a business)	IntelligenceX (Search Engine and data archive)	LeakIX (publicly indexed information)	Netlas (internet connected asset intel)
ONYPHE (Cyber Defense Search Engine)	OpenCorporates	Packet Storm Security (Latest atest security issues and exploit database)	PentestTools
PimEyes ( Face Recognition Search Engine and Reverse Image Search)	PublicWWW (Marketing and affiliate marketing research	Pulsedive—Threat intelligence search engine)	Shodan
SpiderFoot	SpyOnWeb URL Scan (Analyse websites)	ViewDNS	VirusTotal
Wayback Machine	Vulners (Search engine for Security Intel)	Wigle (Database of wireless networks)	ZoomEye (Information Gathering for IP connected devces)
How to create sockpuppet accounts !	Ultimate OSINT Handbook on Personal Information by SOCRadar	Commandergirl's suggestions - powerful OSINT Dashboard	Hatles1der's Ultimate OSINT Collection Dashboard

Shodan Search Engine !	OSINT Tool Collection Repo	Awesome Shodan Queries !
OWASP Maryam	Karma from @Dheerajmadhukar	sn0int
Scrummage OSINT and Threat Hunting Framework	Online OSINT Framework Reference	BlackBird
uncover	Oh365 User Finder	WeakestLink LinkedIN Tool
msDorkDump	geeMailUserFinder	Exchange Finder
Octosuite - Github user OSINT	LinkScope - perform online investigations	sub3suite
Phoneinfoga

GTFOBins	Windows Exploitatation from @FULLSHADE	EvilWinRM
HoaxShell !	Shennina - automated host exploitation framework

AMSI Bypass Powershell	ProtectMyTooling - Packer	Garble - Golang packer
PatchThatAMSI

Wireshark: Network protocol analysis tool	NMap: The pre-eminent network mapping tool	JFScan
CrackMapExec A swiss army knife for pentesting networks	Legion	VLANPWN
Responder !	OrbitalDump (SSH Brute-forcer)

Reverse Shell Generator by @0Day	PHP Reverse Shell	Reverse Shell Cheat Sheet by pentestmonkey
PayloadsAllTheThings RevShell cheatsheet

Cloud Pentest CheatSheets	AWSGoat Vulnerable AWS Instance	AzureGoat Vulnerable Azure Instance
Azure Red Team Repo	Azure Pentest .md file from @swiskyrepo	PowerZure
Awesome Azure Pentest	StormSpotter for Azure AD

Offensive-Cybersecurity

Azure

Informational Repos

OSINT Sites

Tools

Wordlists and Passwords

Web Fuzzing

Infrastructure Pentesting Resources

​

SMS Services

Mobile Testing