• Corelan Team's Exploit writing tutorial
• Exploit Writing Tutorials for Pentesters
• Understanding the basics of Linux Binary Exploitation

Docker Images for Penetration Testing & Security

• Lenas Reversing for Newbies

• Metasploit
• mimikatz - A little tool to play with Windows security

Docker Images for Penetration Testing & Security

• official OWASP ZAP
• OWASP NodeGoat
• OWASP Juice Shop
• official Kali Linux
• docker-metasploit
• Vulnerable WordPress Installation
• Arch Linux Penetration Tester
• OWASP WebGoat Project docker image

Disassemblers and debuggers

• x64dbg - An open-source x64/x32 debugger for Windows
• radare2 - A portable reversing framework
• ScratchABit - Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
• IDA - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger
• OllyDbg - A 32-bit assembler level analysing debugger for Windows

Decompilers

• Krakatau - the best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully.
• JD-GUI
• Luyten - one of the best, though a bit slow, hangs on some binaries and not very well maintained.
• JADX - a decompiler for Android apps. Not related to JAD.
• snowman
• dotPeek - a free-of-charge .NET decompiler from JetBrains
• cutter - a decompiler based on radare2.
• Hex-Rays

Other

• nudge4j - Java tool to let the browser talk to the JVM
• dex2jar - Tools to work with Android .dex and Java .class files
• antinet - .NET anti-managed debugger and anti-profiler code

Deobfuscators

• JS Nice - a web service guessing JS variables names and types based on the model derived from open source.

Execution logging and tracing

• Wireshark - A free and open-source packet analyzer
• usbmon - USB capture for Linux.

Binary files examination and editing

• Synalize It
• PEview - A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files
• BinText - A small, very fast and powerful text extractor that will be of particular interest to programmers.
• ZAP - The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications
• nmap - Nmap (Network Mapper) is a security scanner
• Autopsy - A digital forensics platform and graphical interface to [The Sleuth Kit](http://www.sleuthkit.org/sleuthkit/index.php) and other digital forensics tools
• Wifi Jammer - Free program to jam all wifi clients in range

Tools

• Aircrack - Aircrack is 802.11 WEP and WPA-PSK keys cracking program.

Docker Images for Penetration Testing & Security

• Exploit database - An ultimate archive of exploits and vulnerable software

Binary files examination and editing

• Open Malware

Tools

• Hack+ - An Intelligent network of bots that fetch the latest InfoSec content.
• CTFtime.org - All about CTF (Capture The Flag)
• WeChall
• CTF archives (shell-storm)
• Rookit Arsenal - OS RE and rootkit development

Tools

• pwnable.kr - Provide various pwn challenges regarding system security

Tools

• Reversing.kr - This site tests your ability to Cracking & Reverse Code Engineering
• CodeEngn - (Korean)
• Crackmes.de - The world first and largest community website for crackmes and reversemes.

Tools

• Hack This Site! - a free, safe and legal training ground for hackers to test and expand their hacking skills
• 0xf.at - a website without logins or ads where you can solve password-riddles (so called hackits).
• Gruyere

Tools

• Bugcrowd

Tools

• DEF CON
• CSAW CTF
• Pliad CTF
• RuCTFe
• Ghost in the Shellcode
• SECUINSIDE CTF
• Codegate CTF
• Boston Key Party CTF
• ZeroDays CTF
• Insomni’hack
• Pico CTF

Tools

• Security related Operating Systems @ Rawsec - Complete list of security related operating systems
• Security related Operating Systems @ Rawsec - Complete list of security related operating systems
• Best Linux Penetration Testing Distributions @ CyberPunk - Description of main penetration testing distributions