Cybersecurity
Published on
Vulnerabilities
- NVD - Search and Statistics
- CVE: Common Vulnerabilities and Exposures
- Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers
- NVD - Home
- ThreatFox | Share Indicators Of Compromise (IOCs)
- GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- Common Vulnerability Scoring System SIG
- Vulnerability Priority Rating | Tenable®
- VirusTotal - Home
- CWE - Common Weakness Enumeration
Organisations
Frameworks
- Essential Eight Maturity Model | Cyber.gov.au
- CIS Critical Security Controls
- MITRE ATT&CK®
- Cyber Kill Chain® | Lockheed Martin
- D3FEND Matrix | MITRE D3FEND™
- Cybersecurity Framework | NIST
- CAF Objective A - Managing Security Risk - NCSC.GOV.UK
- ISO/IEC TS 19249:2017 - Information technology — Security techniques — Catalogue of architectural and design principles for secure products, systems and applications
- ISO/IEC 27001:2022 - Information security management systems
- Unified Kill Chain: Raising Resilience Against Cyber Attacks
Learning
- TryHackMe
- VulnHub
- Isosecu: Your Resource for Cybersecurity Insights and Discussions
- Troubleshooting OpenVPN on Linux and Mac | TryHackMe Help Center
- CIDR Notation Explained: Complete Guide to IP Address Subnetting (2025)
- Ethical Hacking Learning Path
- IT and Cybersecurity Learning Path
Lookups
- AbuseIPDB - IP address abuse reports - Making the Internet safer, one IP at a time
- DNSDumpster - Find & lookup dns records for recon & research
Tools
Enumeration
- Nikto - cirt.net
- Shodan Search Engine
- Metasploit | Penetration Testing Software, Pen Testing Security | Metasploit
- CyberChef
- Crontab.guru - The cron schedule expression generator
- Wappalyzer – Get this Extension for 🦊 Firefox (en-US)
- GitHub - danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
- ATT&CK® Navigator
- Subnet Calculator - Free Online IP Subnet & CIDR Calculator Tool
- CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.
Encryption
Analysis
OSINT
- crt.sh | Certificate Search
- Shelves | 0xBEN | Notes
- Google Hacking Database (GHDB) - Google Dorks, OSINT, Recon
Cryptograms
- quipqiup - cryptoquip and cryptogram solver
- GitHub - RsaCtfTool/RsaCtfTool: RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data · GitHub
Incident Response
- GitHub - certsocietegenerale/IRM: Incident Response Methodologies 2022
- ACSC Emergency Response Guide - ACSC Cyber Incident Response Plan Guidance_A4.pdf
- Incident Handler's Handbook
- SP 800-61 Rev. 3, Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile | CSRC
Penetration Testing
- OSSTMM 3 - OSSTMM.3.pdf
- The Penetration Testing Execution Standard (PTES)
- SP 800-115, Technical Guide to Information Security Testing and Assessment | CSRC
- BeEF - The Browser Exploitation Framework Project
Legislation
Australia
- Criminal Code Act 1995 - Federal Register of Legislation
- Privacy Act 1988 - Federal Register of Legislation
- Cyber Security Act 2024 - Federal Register of Legislation
- Cybercrime Act 2001 - Federal Register of Legislation
- Information Privacy Act 2009 - Queensland Legislation - Queensland Government
- Telecommunications (Interception and Access) Act 1979 - Federal Register of Legislation
- View - NSW legislation
- Privacy and Data Protection Act 2014 | legislation.vic.gov.au
Cheat Sheets
- OWASP Favicon Database | OWASP Foundation
- example_hashes [hashcat wiki]
- GitHub - bodadotsh/npm-security-best-practices: Continuous updates on how to stay safe from NPM supply chain attacks · GitHub
Physical
Funny
Red/Blue Team
- GitHub - A-poc/BlueTeam-Tools: Tools and Techniques for Blue Team / Incident Response · GitHub
- GitHub - A-poc/RedTeam-Tools: Tools and Techniques for Red Team / Penetration Testing · GitHub
- TIBER EU - CREST
- TIBER-EU FRAMEWORK – How to implement the European framework for Threat Intelligence-based Ethical Red Teaming - ecb.tiber_eu_framework.en.pdf
- GitHub - redcanaryco/atomic-red-team: Small and highly portable detection tests based on MITRE's ATT&CK. · GitHub
- GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF · GitHub