Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/GoVanguard/list-infosec-encyclopedia
A list of information security related awesome lists and other resources.
https://github.com/GoVanguard/list-infosec-encyclopedia
Last synced: 5 days ago
JSON representation
A list of information security related awesome lists and other resources.
- Host: GitHub
- URL: https://github.com/GoVanguard/list-infosec-encyclopedia
- Owner: GoVanguard
- Created: 2018-07-12T01:27:08.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2023-10-27T21:21:44.000Z (about 1 year ago)
- Last Synced: 2024-08-01T12:37:12.747Z (3 months ago)
- Size: 1.57 MB
- Stars: 563
- Watchers: 31
- Forks: 96
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-starred - GoVanguard/list-infosec-encyclopedia - A list of information security related awesome lists and other resources. (others)
README
# GoVanguard InfoSec Encyclopedia
This is an ongoing compilation of resources we have found helpful and tools we use.
If you're new to InfoSec and are looking for a concentrated list of resources to get started, check out [Getting into InfoSec and Cybersecurity](https://github.com/GoVanguard/Getting-into-InfoSec-and-Cybersecurity).
## Table of Contents
- [Resources](#resources)
* [Information Security Certifications](#information-security-certifications)
* [Books](#books)
* [Lockpicking Resources](#lockpicking-resources)
* [Social Engineering Articles](#social-engineering-articles)
* [Conferences](#conferences)
* [Online Videos](#online-vidoes)
* [Free Online Courses](#free-online-courses)
* [Training Resources](#training-resources)
* [Hacking References And Cheatsheets](#hacking-references-and-cheatsheets)
* [Training And Practice Exercises](#training-and-practice-exercises)
* [Informative Youtube Channels](#informative-youtube-channels)
* [Illustrations and Presentations](#illustrations-and-presentations)
* [Clearnet Exploit Databases](#clearnet-exploit-databases)
* [Awesome Master Lists](#awesome-master-lists)
* [Knowledge Bases](#knowledge-bases)
- [OSINT Tools Used](#osint-tools-used)
* [General OSINT Tools](#general-osint-tools)
* [Crypto OSINT Search](#crypto-osint-search)
* [Government Record Search](#government-record-search)
* [National Search Engines](#national-search-engines)
* [Meta Search](#meta-search)
* [Visual Search and Clustering Search Engines](#visual-search-and-clustering-search-engines)
* [Similar Sites Search](#similar-sites-search)
* [Document and Slides Search](#document-and-slides-search)
* [Pastebin Search](#pastebin-search)
* [Code Search](#code-search)
* [Real-Time Search, Social Media Search, and General Social Media Tools](#real-time-search-social-media-search-and-general-social-media-tools)
* [Twitter Search](#twitter-search)
* [Facebook Search](#facebook-search)
* [Instagram Search](#instagram-search)
* [Pinterest Search](#pinterest-search)
* [Reddit Search](#reddit-search)
* [VKontakte Search](#vkontakte-search)
* [LinkedIn](#linkedin)
* [Blog Search](#blog-search)
* [Forums and Discussion Boards Search](#forums-and-discussion-boards-search)
* [Username Check](#username-check)
* [Personel Investigations](#personel-investigations)
* [E-mail Search / E-mail Check](#e-mail-search--e-mail-check)
* [Phone Number Research](#phone-number-research)
* [Company Research](#company-research)
* [Domain and IP Research](#domain-and-ip-research)
* [Keywords Discovery and Research](#keywords-discovery-and-research)
* [Web History and Website Capture](#web-history-and-website-capture)
* [Language Tools](#language-tools)
* [Image Search](#image-search)
* [Image Analysis](#image-analysis)
* [Data and Statistics](#data-and-statistics)
* [Web Monitoring](#web-monitoring)
* [OCR Tools](#ocr-tools)
* [Collaboration and Project Management](#collaboration-and-project-management)
* [Communication Tools](#communication-tools)
* [Calendars and Scheduling](#calendars-and-scheduling)
* [Mind Mapping, Concept Mapping and Idea Generation Tools](#mind-mapping-concept-mapping-and-idea-generation-tools)
* [Social Network Analysis](#social-network-analysis)
* [DNS Search And Enumeration](#dns-search-and-enumeration)
* [Network Reconnaissance Tools](#network-reconnaissance-tools)
- [Exploitation Enumeration And Data Recovery Tools](#exploitation-enumeration-and-data-recovery-tools)
* [Penetration Testing OS Distributions](#penetration-testing-os-distributions)
* [Multi-paradigm Frameworks](#multi-paradigm-frameworks)
* [Network Vulnerability Scanners](#network-vulnerability-scanners)
* [Web Vulnerability Scanners](#web-vulnerability-scanners)
* [Web Exploitation](#web-exploitation)
* [Network Tools](#network-tools)
* [Protocol Analyzers and Sniffers](#protocol-analyzers-and-sniffers)
* [Proxies and MITM Tools](#proxies-and-mitm-tools)
* [Wireless Network Tools](#wireless-network-tools)
* [Transport Layer Security Tools](#transport-layer-security-tools)
* [Cryptography](#cryptography)
* [Post-Exploitation](#post-exfiltration)
* [Exfiltration Tools](#exfiltration-tools)
* [Static Analyzers](#static-analyzers)
* [Dynamic Analyzers](#dynamic-analyzers)
* [Hex Editors](#hex-editors)
* [File Format Analysis Tools](#file-format-analysis-tools)
* [Anti-Virus Evasion Tools](#anti-virus-evasion-tools)
* [Hash Cracking Tools](#hash-cracking-tools)
* [Windows Utilities](#windows-utilities)
* [GNU Linux Utilities](#gnu-linux-utilities)
* [macOS Utilities](#macos-utilities)
* [Social Engineering Tools](#social-engineering-tools)
* [Anonymity Tools](#anonymity-tools)
* [Reverse Engineering Tools](#reverse-engineering-tools)
* [Side-channel Tools](#side-channel-tools)
* [Forensic Tools](#forensic-tools)
* [Memory Analysis](#memory-analysis)
* [Memory Imaging Tools](#memory-imaging-tools)
* [Incident Response](#incident-response)
* [Honeypot Tools](#honeypot-tools)
* [Monitoring and IDS-IPS](#monitoring-and-ids-ips)
* [Physical Tools](#physical-tools)
* [Adversary Emulation](#adversary-emulation)
* [All in one Incident Response Tools](#all-in-one-incident-response-tools)
* [Communities](#communities)
* [Disk Image Creation Tools](#disk-image-creation-tools)
* [Evidence Collection Tools](#evidence-collection-tools)
* [Incident Management Tools](#incident-management-tools)
* [Linux Forensics Distributions](#linux-forensics-distributions)
* [Linux Evidence Collection](#linux-evidence-collection)
* [Log Analysis Tools](#log-analysis-tools)
* [OSX Evidence Collection](#osx-evidence-collection)
* [Incident Response Playbooks](#playbooks)
* [Process Dump Tools](#process-dump-tools)
* [Sandboxing/reversing tools](#sandboxingreversing-tools)
* [Timeline tools](#timeline-tools)
* [Windows Evidence Collection](#windows-evidence-collection)
* [Other](#other)
- [License](#license)
---------------------------------------------------------------------------------------------------------------------------------------
### Resources
#### Information Security Certifications
* [Certified Ethical Hacker](https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/)
* [Certified Information Systems Security Professional (CISSP)](https://www.isc2.org/Certifications/CISSP)
* [Certified Penetration Testing Engineer (CPTE)](https://www.mile2.com/penetration-testing-engineer-outline/)
* [CompTIA Security+](https://www.comptia.org/certifications/security)
* [GIAC Security Essentials (GSEC)](https://www.giac.org/certification/security-essentials-gsec)
* [Kali Linux Certified Professional (KLCP)](https://home.pearsonvue.com/kali)
* [Offensive Security Certified Expert (OSCE)](https://www.offensive-security.com/ctp-osce/)
* [Offensive Security Certified Professional (OSCP)](https://www.offensive-security.com/pwk-oscp/)
* [Offensive Security Exploitation Expert (OSEE)](https://www.offensive-security.com/awe-osee/)
* [Offensive Security Web Expert (OSWE)](https://www.offensive-security.com/awae-oswe/)
* [Offensive Security Wireless Professional (OSWP)](https://www.offensive-security.com/wifu-oswp/)
* [Practical Network Penetration Tester (PNPT)](https://certifications.tcm-sec.com/pnpt/)
* [HTB Certified Bug Bounty Hunter (HTB BBH)](https://academy.hackthebox.com/preview/certifications/htb-certified-bug-bounty-hunter/)
* [HTB Certified Penetration Testing Specialist (HTB CPTS)](https://academy.hackthebox.com/preview/certifications/htb-certified-penetration-testing-specialist/)
* [eLearnSecurity Junior Penetration Tester (eJPT)](https://elearnsecurity.com/product/ejpt-certification/)
#### Books
* A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security
* A Short Course on Computer Viruses
* AVIEN Malware Defense Guide for the Enterprise
* Advanced Penetration Testing: Hacking the World's Most Secure Networks
* Applied Cryptography: Protocols, Algorithms and Source Code in C
* Applied Network Security Monitoring: Collection, Detection, and Analysis
* Black Hat Python: Python Programming for Hackers and Pentesters
* Bug Bounty Bootcamp By Vickie Li
* Blue Team Handbook: Incident Response Edition: A condensed field guide for the Cyber Security Incident Responder
* Bulletproof SSL and TLS: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web Applications
* CEH Certified Ethical Hacker All-in-One Exam Guide
* CISSP All-in-One Exam Guide
* CISSP: Certified Information Systems Security Professional Study Guide
* CISSP](ISC)2 Certified Information Systems Security Professional Official Study Guide
* Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
* Cryptography Engineering: Design Principles and Practical Applications
* Cyber War: The Next Threat to National Security and What to Do About It
* Cybersecurity - Protecting Critical Infrastructures from Cyber Attack and Cyber Warfare
* Cybersecurity and Cyberwar: What Everyone Needs to Know
* Cybersecurity and Human Rights in the Age of Cyberveillance
* Cyberspies: The Secret History of Surveillance, Hacking, and Digital Espionage
* Essentials of Cybersecurity
* Future Crimes: Inside the Digital Underground and the Battle for Our Connected World
* Ghost in the Wires: My Adventures as the World's Most Wanted Hacker
* Hacked Again
* Hacking Exposed 7
* Hacking: The Art of Exploitation
* How Linux Works: What every superuser should know
* Information Assurance Handbook: Effective Computer Security and Risk Management Strategies
* Linux Shell Scripting Cookbook
* Network Forensics: Tracking Hackers through Cyberspace
* Network Security Through Data Analysis: Building Situational Awareness
* Penetration Testing: A Hands-On Introduction to Hacking
* Practical Malware Analysis: A Hands-On Guide to Dissecting Malicious Software
* Practice of Network Security Monitoring
* Protecting Your Internet Identity: Are You Naked Online?
* Protection and Security on the Information Superhighway
* Reversing: Secrets of Reverse Engineering
* Rtfm: Red Team Field Manual
* Security Metrics, A Beginner's Guide
* Spam Nation: The Inside Story of Organized Cybercrime-from Global Epidemic to Your Front Door
* Surreptitious Software: Obfuscation, Watermarking, and Tamperproofing for Software Protection
* TCP/IP Illustrated
* The Art of Computer Virus Research and Defense
* The Art of Deception: Controlling the Human Element of Security
* The Art of Memory Forensics
* The Beginner's Guide to Information Security
* The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography
* The Computer Incident Response Planning Handbook: Executable Plans for Protecting Information at Risk
* The Cyber Skill Gap
* The Hacker Playbook: Practical Guide To Penetration Testing
* The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassembler
* The Ncsa Guide to PC and Lan Security
* The Shellcoder's Handbook: Discovering and Exploiting Security Holes
* The Tao of Network Security Monitoring: Beyond Intrusion Detection
* The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
* Thinking Security: Stopping Next Year's Hackers
* Understanding Cryptography: A Textbook for Students and Practitioners
* We Are Anonymous: Inside the Hacker World of LulzSec, Anonymous, and the Global Cyber Insurgency
* Web Application Vulnerabilities: Detect, Exploit, Prevent
* Windows Internals
* Worm: The First Digital World War
* [A Search Engine Backed by Internet-Wide Scanning - Ariana Mirian](https://censys.io/static/censys.pdf)
* [Advanced Penetration Testing by Wil Allsopp, 2017](https://www.amazon.com/dp/1119367689/)
* [Advanced Penetration Testing for Highly-Secured Environments by Lee Allen, 2012](https://www.packtpub.com/product/advanced-penetration-testing-for-highly-secured-environments-the-ultimate-security-guide/9781849517744)
* [Advanced Persistent Threat Hacking: The Art and Science of Hacking Any Organization by Tyler Wrightson, 2014](https://www.amazon.com/dp/0071828362)
* [Android Hackers Handbook by Joshua J. Drake et al., 2014](https://www.wiley.com/en-us/Android+Hacker%27s+Handbook-p-9781118608647)
* [Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014](https://www.amazon.com/dp/1593275900)
* [Btfm: Blue Team Field Manual by Alan White and Ben Clark](https://www.amazon.com/dp/154101636X)
* [Bug Hunter's Diary by Tobias Klein, 2011](https://nostarch.com/bughunter)
* [CIA Lock Picking Field Operative Training Manual](https://www.scribd.com/doc/7207/CIA-Lock-Picking-Field-Operative-Training-Manual)
* [Car Hacker's Handbook by Craig Smith, 2016]( https://nostarch.com/carhacking)
* [CompTIA Security+ SY0-501 Certification Study Guide](https://www.comptia.org/training/books/security-sy0-501-study-guide)
* [Complete Guide to Shodan](https://leanpub.com/shodan)
* [Dfir intro](https://sroberts.medium.com/introduction-to-dfir-d35d5de4c180)
* [Eddie the Wire books](https://www.thriftbooks.com/a/eddie-the-wire/397834/)
* [Essentials of Enterprise Network Security](https://res.cloudinary.com/peerlyst/image/upload/v1499385854/post-attachments/Essentials_of_Enterprise_Network_Security_wiqsvc.pdf)
* [Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton et al., 2007](http://www.fuzzing.org/)
* [Ghost in the Wires by Kevin D. Mitnick & William L. Simon, 2011](https://www.hachettebookgroup.com/titles/kevin-mitnick/ghost-in-the-wires/9780316134477/)
* [Gray Hat Hacking The Ethical Hacker's Handbook by Daniel Regalado et al., 2015](https://www.amazon.com/dp/0071832386)
* [Hacking the Xbox by Andrew Huang, 2003](https://nostarch.com/xbox)
* [Holistic Info-Sec for Web Developers](bundle)](https://leanpub.com/b/holisticinfosecforwebdevelopers)
* [Kali Linux Revealed](https://kali.training/downloads/Kali-Linux-Revealed-1st-edition.pdf)
* [Keys to the Kingdom by Deviant Ollam, 2012](https://www.elsevier.com/books/keys-to-the-kingdom/ollam/978-1-59749-983-5)
* [Lock Picking: Detail Overkill by Solomon](https://www.dropbox.com/s/y39ix9u9qpqffct/Lockpicking%20Detail%20Overkill.pdf?dl=0)
* [Malware Analyst's Cookbook and DVD by Michael Hale Ligh et al., 2010](https://www.wiley.com/en-us/Malware+Analyst%27s+Cookbook+and+DVD%3A+Tools+and+Techniques+for+Fighting+Malicious+Code-p-9780470613030)
* [Metasploit: The Penetration Tester's Guide by David Kennedy et al., 2011](https://nostarch.com/metasploit)
* [Network Forensics: Tracking Hackers through Cyberspace by Sherri Davidoff & Jonathan Ham, 2012](https://www.amazon.com/dp/B008CG8CYU/)
* [Network Security Assessment by Chris McNab](https://www.amazon.com/dp/B0043EWUR0)
* [Nmap Network Scanning by Gordon Fyodor Lyon, 2009](https://nmap.org/book/)
* [No Tech Hacking by Johnny Long & Jack Wiles, 2008](https://www.elsevier.com/books/no-tech-hacking/mitnick/978-1-59749-215-7)
* [Open Source Intelligence Techniques - 8th Edition by Michael Bazell, 2021](https://www.amazon.com/dp/B08RRDTFF9/)
* [Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman, 2014](https://nostarch.com/pentesting)
* [Penetration Testing: Procedures & Methodologies by EC-Council, 2010](https://www.amazon.com/dp/1435483677)
* [Practical Lock Picking by Deviant Ollam, 2012](https://www.elsevier.com/books/practical-lock-picking/ollam/978-1-59749-989-7)
* [Practical Malware Analysis by Michael Sikorski & Andrew Honig, 2012](https://nostarch.com/malware)
* [Practical Packet Analysis by Chris Sanders, 2017](https://nostarch.com/packetanalysis3)
* [Practical Reverse Engineering by Bruce Dang et al., 2014](https://www.wiley.com/en-us/Practical+Reverse+Engineering%3A+x86%2C+x64%2C+ARM%2C+Windows+Kernel%2C+Reversing+Tools%2C+and+Obfuscation-p-9781118787311)
* [Professional Penetration Testing by Thomas Wilhelm, 2013](https://www.elsevier.com/books/professional-penetration-testing/wilhelm/978-1-59749-993-4)
* [Reverse Engineering for Beginners by Dennis Yurichev](https://beginners.re/main.html)
* [Rtfm: Red Team Field Manual by Ben Clark, 2014](https://www.amazon.com/dp/1494295504/)
* [Secure Programming HOWTO](https://dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html)
* [Social Engineering in IT Security: Tools, Tactics, and Techniques by Sharon Conheady, 2014](https://www.mhprofessional.com/9780071818469-usa-social-engineering-in-it-security-tools-tactics-and-techniques-group)
* [Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010](https://www.wiley.com/en-us/Social+Engineering%3A+The+Art+of+Human+Hacking-p-9780470639535)
* [The Art of Deception by Kevin D. Mitnick & William L. Simon, 2002](https://www.wiley.com/en-us/The+Art+of+Deception%3A+Controlling+the+Human+Element+of+Security-p-9780471237129)
* [The Art of Exploitation by Jon Erickson, 2008](https://nostarch.com/hacking2.htm)
* [The Art of Intrusion by Kevin D. Mitnick & William L. Simon, 2005](https://www.wiley.com/en-us/The+Art+of+Intrusion%3A+The+Real+Stories+Behind+the+Exploits+of+Hackers%2C+Intruders+and+Deceivers-p-9780764569593)
* [The Art of Memory Forensics by Michael Hale Ligh et al., 2014](https://www.wiley.com/en-us/The+Art+of+Memory+Forensics%3A+Detecting+Malware+and+Threats+in+Windows%2C+Linux%2C+and+Mac+Memory-p-9781118825099)
* [The Basics of Hacking and Penetration Testing by Patrick Engebretson, 2013](https://www.elsevier.com/books/the-basics-of-hacking-and-penetration-testing/engebretson/978-1-59749-655-1)
* [The Browser Hackers Handbook by Wade Alcorn et al., 2014](https://www.wiley.com/en-us/The+Browser+Hacker%27s+Handbook-p-9781118662090)
* [The Database Hacker's Handbook, David Litchfield et al., 2005](https://www.wiley.com/en-us/The+Database+Hacker%27s+Handbook%3A+Defending+Database+Servers-p-9780764578014)
* [The Hacker Playbook by Peter Kim, 2014](https://www.amazon.com/dp/1494932636/)
* [The IDA Pro Book by Chris Eagle, 2011](https://nostarch.com/idapro2.htm)
* [The Mac Hacker's Handbook by Charlie Miller & Dino Dai Zovi, 2009](https://www.wiley.com/en-us/The+Mac+Hacker%27s+Handbook-p-9780470395363)
* [The Mobile Application Hackers Handbook by Dominic Chell et al., 2015](https://www.wiley.com/en-us/The+Mobile+Application+Hacker%27s+Handbook-p-9781118958506)
* [The Practice of Network Security Monitoring: Understanding Incident Detection and Response 9](https://www.amazon.com/gp/product/1593275099)
* [The Shellcoders Handbook by Chris Anley et al., 2007](https://www.wiley.com/en-us/The+Shellcoder%27s+Handbook%3A+Discovering+and+Exploiting+Security+Holes%2C+2nd+Edition-p-9780470080238)
* [The Web Application Hackers Handbook by D. Stuttard, M. Pinto, 2011](https://www.wiley.com/en-us/The+Web+Application+Hacker%27s+Handbook%3A+Finding+and+Exploiting+Security+Flaws%2C+2nd+Edition-p-9781118026472)
* [Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp, 2010](https://www.amazon.com/dp/B005DIAPKE)
* [Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014](https://www.wiley.com/en-us/Unmasking+the+Social+Engineer%3A+The+Human+Element+of+Security-p-9781118608579)
* [Violent Python by TJ O'Connor, 2012](https://www.elsevier.com/books/violent-python/unknown/978-1-59749-957-6)
* [Windows Internals by Mark Russinovich et al., 2012](https://www.amazon.com/dp/0735648735/)
* [Wireshark Network Analysis by Laura Chappell & Gerald Combs, 2012](https://www.amazon.com/dp/1893939944)
* [iOS Hackers Handbook by Charlie Miller et al., 2012](https://www.wiley.com/en-us/iOS+Hacker%27s+Handbook-p-9781118204122)
#### Lockpicking Resources
* [/r/lockpicking Subreddit](https://www.reddit.com/r/lockpicking/) - Subreddit dedicated to the sport of lockpicking.
* [Keypicking.com](https://keypicking.com/) - Bustling online forum for the discussion of lockpicking and locksport.
* [LockWiki](http://lockwiki.com/index.php/Main_Page) - Community-driven reference for both beginners and professionals in the security industry.
* [Lockpicking Forensics](http://www.lockpickingforensics.com/) - Website "dedicated to the science and study of forensic locksmithing."
* [Lockpicking101.com](https://www.lockpicking101.com/) - One of the longest-running online communities "dedicated to the fun and ethical hobby of lock picking."
* [The Amazing King's Lockpicking pages](http://theamazingking.com/lockpicking.php) - Hobbyist's website with detailed pages about locks, tools, and picking techniques.
#### Social Engineering Articles
* [How I Socially Engineer Myself Into High Security Facilities](https://www.vice.com/en/article/qv34zb/how-i-socially-engineer-myself-into-high-security-facilities) - Sophie Daniel
* [Social Engineering: Compromising Users with an Office Document](https://resources.infosecinstitute.com/certification/social-engineering-compromising-users-using-office-document/) - Infosec Institute
* [The 7 Best Social Engineering Attacks Ever](https://www.darkreading.com/the-7-best-social-engineering-attacks-ever/d/d-id/1319411) - DarkReading
* [The Limits of Social Engineering](https://www.technologyreview.com/2014/04/16/173156/the-limits-of-social-engineering/) - MIT, Technology Review
* [The Persuasion Reading List](https://www.scottadamssays.com/2018/01/24/persuasion-reading-list-updated-1-18/) - Scott Adams' Blog
#### Conferences
* (ISC)2 Secure Event Series
* 44CON London
* 44Con
* AFCEA Defensive Cyber Operations Symposium
* AppSec United States](OWASP National Conference)
* AppSecUSA
* Atlantic Security Conference](AtlSecCon)
* BSides
* BSides Event Series
* BalCCon
* Black Hat
* Black Hat United States
* BruCON
* CCC
* CISO Executive Summit Series](Invite-only)
* CSO50 Conference
* CanSecWest
* CarolinaCon
* Cyber Threat Intelligence Summit
* DEF CON
* DeepSec
* DefCamp
* DerbyCon
* DerbyCon 8.0
* Ekoparty
* FIRST Conference
* FSec
* HACKMIAMI
* HITB
* HOPE
* Hack.lu
* Hack3rCon
* Hacker Halted - Optionally includes certification-specific training
* IANS Information Security Forums
* IAPP Global Privacy Summit
* IEEE Symposium on Security & Privacy
* ISACA Cyber Security Nexus
* ISF Annual World Congress
* ISSA CISO Executive Forum Series
* ISSA International Conference
* Ignite
* Infiltrate
* InfoSec Southwest
* InfoSec World
* Infosecurity Europe
* Infosecurity Europe
* Infosecurity North America
* LayerOne
* Nullcon
* Nullcon Conference
* Open Security Summit
* PhreakNIC
* RSA Conference United States
* SANS Annual Conference
* SANS Pen Test Annual Conferences
* SANS Security Annual Conferences
* SECUINSIDE
* SOURCE Annual Conferences
* SecTor Canada
* Secure360 Conference
* SecureWorld
* Securi-Tay
* Security Operations Summit & Training
* ShmooCon
* SkyDogCon
* SummerCon
* Swiss Cyber Storm
* ThotCon
* USENIX Security Symposium
* Virus Bulletin Conference
* conINT
* secureCISO
#### Online Videos
* [Dennis Maldonado: Are We Really Safe? Bypassing Access Control Systems](https://www.youtube.com/watch?v=jTtdTrMSsPw)
* [Internet of Things: IoT Research Methodology](https://www.youtube.com/watch?v=iQCaGxnY4LM)
* [Internet of Things: The Relationship Between IoT and Security](https://www.youtube.com/watch?v=LcoEe0LvaBo)
* [Offensive Security Part 1 - Basics of Penetration Testing](https://www.youtube.com/watch?v=GX1go9PDnWY)
* [Phishing Campaigns in Metasploit Pro](https://www.youtube.com/watch?v=XReMP6_f2xU)
* [Rapid7 Whiteboard Wednesday Series](https://www.youtube.com/playlist?list=PLMrgKzfE1aINBOpJXCkqPdWcT7YCPZYL3)
* [Spear Phishing with Cobalt Strike](https://www.youtube.com/watch?v=V7UJjVcq2Ao)
#### Free Online Courses
* [CompTIA Network+ Certification Video Course By PowerCert Animated Videos](https://www.youtube.com/watch?v=vrh0epPAC5w)
* [CompTIA Security+ SY0-501 Training Course By Professor Messer](https://www.youtube.com/playlist?list=PLG49S3nxzAnnVhoAaL4B6aMFDQ8_gdxAy)
* [Complete Ethical Hacking Course By HackerSploit - Part1 of 126](https://www.youtube.com/watch?v=tHd8k54kVs8&list=PLBf0hzazHTGOEuhPQSnq-Ej8jRyXxfYvl)
* [Complete Ethical Hacking Course by Joseph Delgadillo - 8 hour course](https://www.youtube.com/watch?v=fDeLtKUxTmM)
#### Training Resources
* [Awesome Hacking Resources](https://github.com/vitalysim/Awesome-Hacking-Resources) - Self-explanatory.
* [Awesome Web Security](https://github.com/qazbnm456/awesome-web-security) - Encyclopedia of web security information.
* [Corelan.be](https://www.corelan.be/index.php/articles/) - Website containing many useful training resources and tutorial.
* [Cybrary.it](https://www.cybrary.it/) - Free online courses.
* [Enigma Group](https://www.enigmagroup.org/) - Web application training resource.
* [Executing Metasploit & Empire Payloads from MS Office Document Properties part 1](https://stealingthe.network/executing-metasploit-empire-payloads-from-ms-office-document-properties-part-1-of-2/) - How to stealthily deliver a Metasploit payload via MS Office document properties and a simple macro.
* [Executing Metasploit & Empire Payloads from MS Office Document Properties part 2](https://stealingthe.network/executing-metasploit-empire-payloads-from-ms-office-document-properties-part-2-of-2/) - Like part 1, but focusing on Empire rather than Metasploit.
* [Hacker101](https://www.hacker101.com/) - Online training resource.
* [How To: Empire's Cross Platform Office Macro](https://www.blackhillsinfosec.com/empires-cross-platform-office-macro/) - How to utilize Empire's cross-platform malicious MS Office macro.
* [Introduction to Software Exploits Part 1](https://opensecuritytraining.info/Exploits1.html) - Online or in-person tutorial covering multiple areas of software exploitation.
* [Introduction to Software Exploits Part 2 - Exploitation in the Windows Environment](https://opensecuritytraining.info/Exploits2.html) - Online or in-person tutorial covering multiple areas of software exploitation, with emphasis on Windows exploitation.
* [OpenSecurityTraining.info](https://opensecuritytraining.info/) - Free online training resource.
* [PentesterLab](https://pentesterlab.com/) - Tiered online training resources.
* [PortSwigger's lab](https://portswigger.net/web-security/all-labs) - Free and advanced labs for hands on training.
* [Phishing With Empire](https://enigma0x3.net/2016/03/15/phishing-with-empire/) - Guide on phishing with Empire.
* [Phishing With PowerPoint](https://www.blackhillsinfosec.com/phishing-with-powerpoint/) - Guide on getting unsuspecting users to open malicious PPT files.
#### Hacking References And Cheatsheets
* [LFI Cheat Sheet](https://highon.coffee/blog/lfi-cheat-sheet/)
* [Local Linux Enumeration & Privilege Escalation Cheatsheet](https://github.com/rebootuser/LinEnum)
* [Metasploit Payload Cheatsheet](https://netsec.ws/?p=331)
* [Multiple Cheatsheets By Andrewjkerr](https://github.com/andrewjkerr/security-cheatsheets)
* [Nmap Cheat Sheet](https://highon.coffee/blog/nmap-cheat-sheet/)
* [Pentest Recon And Enu Cheatsheet](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/#recon-and-enumeration)
* [Reverse Shell Cheat Sheet](https://highon.coffee/blog/reverse-shell-cheat-sheet/)
* [SQL Injection Cheat Sheet](https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/)
* [XSS Cheat Sheet](https://n0p.net/penguicon/php_app_sec/mirror/xss.html)
* [XSS Payload Cheatsheet](https://github.com/pgaijin66/XSS-Payloads/blob/master/payload/payload.txt)
#### Training And Practice Exercises
* [CPTE Courseware Kit](https://www.mile2.com/product/cpte-e-course-kit/) - Paid Official training kit for CPTE exam.
* [CTFlearn](https://ctflearn.com/) - The most beginner-friendly way to get into hacking.
* [Damn Vulnerable Web Application (DVWA)](https://dvwa.co.uk/) - Purposely vulnerable PHP/MySQL web application.
* [Gruyere](https://google-gruyere.appspot.com/) - Gruyere is a web application that has multiple security bugs ranging from cross-site scripting and cross-site request forgery, to information disclosure, denial of service, and remote code execution.
* [Hack This Site](https://www.hackthissite.org/) - Web application security exercises.
* [Hack the Box](https://www.hackthebox.eu/) - Online pentesting labs with Windows VMs.
* [Hacker101 CTF](https://ctf.hacker101.com/) - Webapp CTF style exercises.
* [Mutillidae](https://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10) - Mutillidae is a free, open source web application provided to allow you to hack a web application. Can be installed on Linux, Windows XP, Windows 7 and windows 10 using XAMMP.
* [OSCP-like Vulnhub VMs](https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms) - Intentionally vulnerable VMs resembling OSCP.
* [OWASP Damn Vulnerable Web Sockets (DVWS)](https://github.com/interference-security/DVWS/) - Vulnerable web application which works on web sockets for client-server communication.
* [OWASP Juice Shop](https://github.com/bkimminich/juice-shop/) - JavaScript based intentionally insecure web application.
* [OWASP NodeGoat](https://github.com/OWASP/NodeGoat/) - Includes Node.js web applications for learning the OWASP top 10.
* [OWASP Railsgoat](https://github.com/OWASP/railsgoat) - A vulnerable version of Rails that follows the OWASP Top 10.
* [OWASP SecurityShepard](https://github.com/OWASP/SecurityShepherd/) - Web and mobile application security training platform.
* [OWASP WebGoat](https://github.com/WebGoat/WebGoat) - WebGoat is an insecure application that allows the testing of vulnerabilities commonly found in Java-based applications that use common and popular open source components.
* [OWASP security knowledge framework](https://owasp-skf.gitbook.io/asvs-write-ups/) - OWASP security knowledge framework labs exercises complete with write-ups.
* [Over the Wire: Natas](https://overthewire.org/wargames/natas/) - Web application challenges.
* [PicoCTF](https://picoctf.org/) - Multiple beginner as well as advanced CTF challenges.
* [Rapid7 Metsploitable](https://information.rapid7.com/download-metasploitable-2017.html) - Metasploitable is essentially a penetration testing lab in a box, available as a VMware virtual machine (VMX).
* [Root Me](https://www.root-me.org/) - The fast, easy, and affordable way to train your hacking skills.
* [RopeyTasks](https://github.com/iriusrisk/RopeyTasks) - Simple deliberately vulnerable web application.
* [XSS Exercises](https://xss-game.appspot.com/) - Webapp Cross-site scripting (XSS) bug hunting exercises.
#### Informative Youtube Channels
* [Computerphile](https://www.youtube.com/user/Computerphile/videos?view=0&sort=p&shelf_id=2) - Information security concepts.
* [Farah Hawa](https://www.youtube.com/c/FarahHawa) - Hacking concepts and news.
* [Hacksplained](https://www.youtube.com/c/hacksplained) - Hacking guides and walkthroughs.
* [Hak5](https://www.youtube.com/user/Hak5Darren/featured) - Hacking tools, guides and concepts.
* [HackerSploit](https://www.youtube.com/c/HackerSploit) - Hacking Resources.
* [Loi Liang Yang](https://www.youtube.com/channel/UC1szFCBUWXY3ESff8dJjjzw/videos) - Hacking guides.
* [Motasem Hamdan](https://www.youtube.com/channel/UCNSdU_1ehXtGclimTVckHmQ/videos) - Hacking guides.
* [Null Byte](https://www.youtube.com/channel/UCgTNupxATBfWmfehv21ym-g) - Hacking guides and concepts.
* [Schuyler Towne channel](https://www.youtube.com/user/SchuylerTowne/) - Lockpicking videos and security talks.
* [Thenewboston](https://www.youtube.com/user/thenewboston/playlists) - Programming and hacking guides.
* [bosnianbill](https://www.youtube.com/user/bosnianbill) - lockpicking videos.
#### Illustrations and Presentations
* ["Fileless" UAC Bypass Using sdclt.exe](https://enigma0x3.net/2017/03/17/fileless-uac-bypass-using-sdclt-exe/)
* [A Citrix Story](https://rastamouse.me/blog/a-citrix-story/)
* [A Guide to Attacking Domain Trusts](https://posts.specterops.io/a-guide-to-attacking-domain-trusts-971e52cb2944)
* [A Guide to Attacking Domain Trusts](https://www.harmj0y.net/blog/redteaming/a-guide-to-attacking-domain-trusts/)
* [A Pentester's Guide to Group Scoping](https://www.harmj0y.net/blog/activedirectory/a-pentesters-guide-to-group-scoping/)
* [A Read Teamer's Guide to GPOs and OUs](https://wald0.com/?p=179)
* [Abusing Active Directory Permissions with PowerView](https://www.harmj0y.net/blog/redteaming/abusing-active-directory-permissions-with-powerview/)
* [Abusing DCOM For Yet Another Lateral Movement Technique](https://bohops.com/2018/04/28/abusing-dcom-for-yet-another-lateral-movement-technique/)
* [Abusing DNSAdmins Privilege for Escalation in Active Directory](http://www.labofapenetrationtester.com/2017/05/abusing-dnsadmins-privilege-for-escalation-in-active-directory.html)
* [Abusing Exported Functions and Exposed DCOM Interfaces for Pass-Thru Command Execution and Lateral Movement](https://bohops.com/2018/03/17/abusing-exported-functions-and-exposed-dcom-interfaces-for-pass-thru-command-execution-and-lateral-movement/)
* [Abusing GPO Permissions](https://www.harmj0y.net/blog/redteaming/abusing-gpo-permissions/)
* [Abusing Microsoft Word Features for Phishing: "subDoc"](https://rhinosecuritylabs.com/research/abusing-microsoft-word-features-phishing-subdoc/)
* [Abusing the COM Registry Structure: CLSID, LocalServer32, & ImprocServer32](https://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/)
* [Accessing Clipboard From the Lock Screen in Windows 10 Part 1](https://oddvar.moe/2017/01/24/accessing-clipboard-from-the-lock-screen-in-windows-10/)
* [Accessing Clipboard From the Lock Screen in Windows 10 Part 2](https://oddvar.moe/2017/01/27/access-clipboard-from-lock-screen-in-windows-10-2/)
* [Agentless Post-Exploitation](https://www.youtube.com/watch?v=QbjuO5IlpBU)
* [Aggressor PowerView](https://threat.tevora.com/aggressor-powerview/)
* [AppLocker - Case Study - How Insecure Is It Really? Part 1](https://oddvar.moe/2017/12/13/applocker-case-study-how-insecure-is-it-really-part-1/)
* [AppLocker - Case Study - How Insecure Is It Really? Part 2](https://oddvar.moe/2017/12/21/applocker-case-study-how-insecure-is-it-really-part-2/)
* [Are We Really Safe? Hacking Access Control Systems](https://www.slideshare.net/DennisMaldonado5/hacking-access-control-systems)
* [Automated Derivative Administrator Search](https://wald0.com/?p=14)
* [Awesome Bug Bounty](https://github.com/djadmin/awesome-bug-bounty)
* [Awesome CTF](https://github.com/apsdehal/awesome-ctf)
* [Awesome ICS Security](https://github.com/hslatman/awesome-industrial-control-system-security)
* [Awesome Lockpicking](https://github.com/fabacab/awesome-lockpicking)
* [Awesome Yara](https://github.com/InQuest/awesome-yara)
* [Bringing the Hashes Home With reGeorg & Empire](https://sensepost.com/blog/2016/bringing-the-hashes-home-with-regeorg-empire/)
* [Bypassing AMSI via COM Server Hijacking](https://posts.specterops.io/bypassing-amsi-via-com-server-hijacking-b8a3354d1aff)
* [Bypassing Application Whitelisting With BGinfo](https://oddvar.moe/2017/05/18/bypassing-application-whitelisting-with-bginfo/)
* [Bypassing Device Guard UMCI Using CHM - CVE-2017-8625](https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/)
* [Bypassing UAC Using App Paths](https://enigma0x3.net/2017/03/14/bypassing-uac-using-app-paths/)
* [Cell Injection](http://blog.7elements.co.uk/2013/01/cell-injection.html)
* [ClickOnce, Twice or Thrice: A Technique for Social Engineering and Untrusted Command Execution](https://bohops.com/2017/12/02/clickonce-twice-or-thrice-a-technique-for-social-engineering-and-untrusted-command-execution/)
* [Cloning and Hosting Evil Captive Portals Using a Wi-Fi Pineapple](https://blog.inspired-sec.com/archive/2017/01/10/cloning-captive-portals.html)
* [CloudFront Hijacking](https://www.mindpointgroup.com/blog/pen-test/cloudfront-hijacking/)
* [Cobalt Strike - What's the go-to phishing technique or exploit?](https://blog.cobaltstrike.com/2014/12/17/whats-the-go-to-phishing-technique-or-exploit/)
* [Code Signing Certificate Cloning Attacks and Defenses](https://posts.specterops.io/code-signing-certificate-cloning-attacks-and-defenses-6f98657fc6ec)
* [Colbalt Strike - Spear Phishing documentation](https://www.cobaltstrike.com/help-spear-phish)
* [Comma Separated Vulnerabilities](https://www.contextis.com/en/blog/comma-separated-vulnerabilities)
* [DNS Data Exfiltration - What is This and How to Use?](https://cuongmx.medium.com/dns-data-exfiltration-what-is-this-and-how-to-use-2f6c69998822)
* [DNS Tunnelling](https://resources.infosecinstitute.com/topic/dns-tunnelling/)
* [Data Exfiltration Over DNS Request Covert Channel: DNSExfiltrator](https://www.kitploit.com/2018/01/dnsexfiltrator-data-exfiltration-over.html)
* [Data Exfiltration via Formula Injection](https://notsosecure.com/data-exfiltration-formula-injection/)
* [Defense In Depth](https://oddvar.moe/2017/09/13/defense-in-depth-writeup/)
* [DiskShadow: The Return of VSS Evasion, Persistence, and Active Directory Database Extraction](https://bohops.com/2018/03/26/diskshadow-the-return-of-vss-evasion-persistence-and-active-directory-database-extraction/)
* [Domain Fronting Via Cloudfront Alternate Domains](https://www.mdsec.co.uk/2017/02/domain-fronting-via-cloudfront-alternate-domains/)
* [Dump Clear-Text Passwords for All Admins in the Domain Using Mimikatz DCSync](https://adsecurity.org/?p=2053)
* [Dumping Domain Password Hashes](https://pentestlab.blog/2018/07/04/dumping-domain-password-hashes/)
* [Empire Domain Fronting](https://www.xorrior.com/Empire-Domain-Fronting/)
* [Empire Without PowerShell](https://isec.ne.jp/wp-content/uploads/2017/08/30Empire-without-Powershell.pdf)
* [Escape and Evasion Egressing Restricted Networks](https://www.optiv.com/explore-optiv-insights/blog/escape-and-evasion-egressing-restricted-networks)
* [Excel Macros With PowerShell](https://4sysops.com/archives/excel-macros-with-powershell/)
* [Executing Commands and Bypassing AppLocker with PowerShell Diagnostic Scripts](https://bohops.com/2018/01/07/executing-commands-and-bypassing-applocker-with-powershell-diagnostic-scripts/)
* [Exploiting Environment Variables in Scheduled Tasks for UAC Bypass](https://www.tiraniddo.dev/2017/05/exploiting-environment-variables-in.html)
* [Extending BloodHound for Red Teamers](https://www.youtube.com/watch?v=Pn7GWRXfgeI)
* [Finding Domain Frontable Azure Domains](https://theobsidiantower.com/2017/07/24/d0a7cfceedc42bdf3a36f2926bd52863ef28befc.html)
* [First Entry: Welcome and Fileless UAC Bypass](https://winscripting.blog/2017/05/12/first-entry-welcome-and-uac-bypass/)
* [From Pass-the-Hash to Pass-the-Ticket with No Pain](https://resources.infosecinstitute.com/topic/pass-hash-pass-ticket-no-pain/)
* [Getting the Goods with CrackMapExec: Part 1](https://byt3bl33d3r.github.io/getting-the-goods-with-crackmapexec-part-1.html)
* [Getting the Goods with CrackMapExec: Part 2](https://byt3bl33d3r.github.io/getting-the-goods-with-crackmapexec-part-2.html)
* [Harden Windows With AppLocker - Based on Case Study Part 1](https://oddvar.moe/2017/12/13/harden-windows-with-applocker-based-on-case-study-part-1/)
* [Harden Windows With AppLocker - Based on Case Study Part 2](https://oddvar.moe/2017/12/21/harden-windows-with-applocker-based-on-case-study-part-2/)
* [Hiding Registry Keys with PSReflect](https://posts.specterops.io/hiding-registry-keys-with-psreflect-b18ec5ac8353)
* [How I Identified 93k Domain-Frontable CloudFront Domains](https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains)
* [How to Obfuscate JacaScript in Metasploit](https://github.com/rapid7/metasploit-framework/wiki/How-to-obfuscate-JavaScript-in-Metasploit)
* [In-Memory Evasion](https://blog.cobaltstrike.com/2018/02/08/in-memory-evasion/)
* [Intercepting Passwords With Empire and Winning](https://sensepost.com/blog/2016/intercepting-passwords-with-empire-and-winning/)
* [Intro to Using GScript for Red Teams](http://lockboxx.blogspot.com/2018/02/intro-to-using-gscript-for-red-teams.html)
* [Introducing BloodHound](https://wald0.com/?p=68)
* [Introduction to Metasploit: Exploiting Web Applications](https://www.slideshare.net/DennisMaldonado5/metasploit-for-web-workshop)
* [Jumping Network Segregation with RDP](https://rastamouse.me/blog/rdp-jump-boxes/)
* [Kerberoasting Without Mimikatz](https://www.harmj0y.net/blog/powershell/kerberoasting-without-mimikatz/)
* [Kerberos Party Tricks: Weaponizing Kerberos Protocol Flaws](http://www.exumbraops.com/blog/2016/6/1/kerberos-party-tricks-weaponizing-kerberos-protocol-flaws)
* [Lateral Movement Using Excel Application and docm](https://enigma0x3.net/2017/09/11/lateral-movement-using-excel-application-and-dcom/)
* [Lay of the Land with Bloodhound](https://threat.tevora.com/lay-of-the-land-with-bloodhound/)
* [LethalHTA - A New Lateral Movement Technique Using DCOM and HTA](https://codewhitesec.blogspot.com/2018/07/lethalhta.html)
* [Leveraging INF-SCT Fetch & Execute Technique For Bypass, Evasion, & Persistence](https://bohops.com/2018/02/26/leveraging-inf-sct-fetch-execute-techniques-for-bypass-evasion-persistence/)
* [Leveraging INF-SCT Fetch & Execute Technique For Bypass, Evasion, & Persistence](https://bohops.com/2018/03/10/leveraging-inf-sct-fetch-execute-techniques-for-bypass-evasion-persistence-part-2/)
* [Loading Alternate Data Stream ADS DLL/CPL Binaries to Bypass AppLocker](https://bohops.com/2018/01/23/loading-alternate-data-stream-ads-dll-cpl-binaries-to-bypass-applocker/)
* [Local Administrator Password Solution (LAPS) - Part 1](https://rastamouse.me/blog/laps-pt1/)
* [Local Administrator Password Solution (LAPS) - Part 2](https://rastamouse.me/blog/laps-pt2/)
* [Local Group Enumeration](https://www.harmj0y.net/blog/redteaming/local-group-enumeration/)
* [Macro-less Code Exec in MSWord](https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/)
* [Microsoft LAPS Security & Active Directory LAPS Configuration Recon](https://adsecurity.org/?p=3164)
* [Microsoft Office - NTLM Hashes via Frameset](https://pentestlab.blog/2017/12/18/microsoft-office-ntlm-hashes-via-frameset/)
* [Multi-Platform Macro Phishing Payloads](https://malcomvetter.medium.com/multi-platform-macro-phishing-payloads-3b688e8eff68)
* [My First Go with BloodHound](https://blog.cobaltstrike.com/2016/12/14/my-first-go-with-bloodhound/)
* [OPSEC Considerations for Beacon Commands](https://blog.cobaltstrike.com/2017/06/23/opsec-considerations-for-beacon-commands/)
* [OWASP Social Engineering: The Art of Human Hacking](https://owasp.org/www-pdf-archive/Presentation_Social_Engineering.pdf)
* [Offensive Encrypted Data Storage](https://www.harmj0y.net/blog/redteaming/offensive-encrypted-data-storage/)
* [Office 365 Safe Links Bypass](https://oddvar.moe/2018/01/03/office-365-safe-links-bypass/)
* [Outlook Forms and Shells](https://sensepost.com/blog/2017/outlook-forms-and-shells/)
* [Outlook Home Page - Another Ruler Vector](https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/)
* [Pass-the-Hash is Dead: Long Live LocalAccountTokenFilterPolicy](https://www.harmj0y.net/blog/redteaming/pass-the-hash-is-dead-long-live-localaccounttokenfilterpolicy/)
* [Persistence Using Globalflags In Image File Execution Options - Hidden from Autoruns.exe](https://oddvar.moe/2018/04/10/persistence-using-globalflags-in-image-file-execution-options-hidden-from-autoruns-exe/)
* [Persistence Using RunOnceEx - Hidden from Autoruns.exe](https://oddvar.moe/2018/03/21/persistence-using-runonceex-hidden-from-autoruns-exe/)
* [Phishing Against Protected View](https://enigma0x3.net/2017/07/13/phishing-against-protected-view/)
* [PowerPoint and Custom Actions](https://cofense.com/powerpoint-and-custom-actions/)
* [PowerShell Empire Stagers 1: Phishing With an Office Macro and Evading AVs](https://fzuckerman.wordpress.com/2016/10/06/powershell-empire-stagers-1-phishing-with-an-office-macro-and-evading-avs/)
* [PowerShell Without PowerShell - How To Bypass Application Whitelisting, Environment Restrictions & AV](https://www.blackhillsinfosec.com/powershell-without-powershell-how-to-bypass-application-whitelisting-environment-restrictions-av/)
* [Practical Guide to NTLM Relaying in 2017](https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html)
* [Process Doppleganging - A New Way to Impersonate A Process](https://hshrzd.wordpress.com/2017/12/18/process-doppelganging-a-new-way-to-impersonate-a-process/)
* [Putting Data In Alternate Data Streams and How to Execute It](https://oddvar.moe/2018/04/11/putting-data-in-alternate-data-streams-and-how-to-execute-it-part-2/)
* [Putting Data in Alternate Data Streams and How to Execute It](https://oddvar.moe/2018/01/14/putting-data-in-alternate-data-streams-and-how-to-execute-it/)
* [Red Team Insights on HTTPS Domain Fronting Google Hosts Using Cobalt Strike](https://www.cyberark.com/resources/threat-research-blog/red-team-insights-on-https-domain-fronting-google-hosts-using-cobalt-strike)
* [Red Team Operating in a Modern Environment](https://owasp.org/www-pdf-archive/Red_Team_Operating_in_a_Modern_Environment.pdf)
* [Roasting AS-REPs](https://www.harmj0y.net/blog/activedirectory/roasting-as-reps/)
* [SPN Discovery](https://pentestlab.blog/2018/06/04/spn-discovery/)
* [Scanning for Active Directory Privileges & Privileged Accounts](https://adsecurity.org/?p=3658)
* [Simple Domain Fronting PoC with GAE C2 Server](https://www.securityartwork.es/2017/01/31/simple-domain-fronting-poc-with-gae-c2-server/)
* [Spear Phishing 101](https://blog.inspired-sec.com/archive/2017/05/07/Phishing.html)
* [Targeted Kerberoasting](https://www.harmj0y.net/blog/activedirectory/targeted-kerberoasting/)
* [The Absurdly Underestimated Dangers of CSV Injection](http://georgemauer.net/2017/10/07/csv-injection.html)
* [The Most Dangerous User Right You Probably Have Never Heard Of](https://www.harmj0y.net/blog/activedirectory/the-most-dangerous-user-right-you-probably-have-never-heard-of/)
* [The PowerView PowerUsage Series #1 - Mass User Profile Enumeration](http://www.harmj0y.net/blog/powershell/the-powerview-powerusage-series-1/)
* [The PowerView PowerUsage Series #2 - Mapping Computer Shortnames With the Global Catalog](http://www.harmj0y.net/blog/powershell/the-powerview-powerusage-series-2/)
* [The PowerView PowerUsage Series #3 - Enumerating GPO Edit Rights In a Foreign Domain](http://www.harmj0y.net/blog/powershell/the-powerview-powerusage-series-3/)
* [The PowerView PowerUsage Series #4 - Finding Cross-Trust ACEs](http://www.harmj0y.net/blog/powershell/the-powerview-powerusage-series-4/)
* [Trust Direction: An Enabler for Active Directory Enumeration and Trust Exploitation](https://bohops.com/2017/12/02/trust-direction-an-enabler-for-active-directory-enumeration-and-trust-exploitation/)
* [Ultimate AppLocker ByPass List](https://github.com/api0cradle/UltimateAppLockerByPassList)
* [Userland API Monitoring and Code Injection Detection](https://0x00sec.org/t/userland-api-monitoring-and-code-injection-detection/5565)
* [Using SQL Server for Attacking a Forest Trust](http://www.labofapenetrationtester.com/2017/03/using-sql-server-for-attacking-forest-trust.html)
* [Using a SCF File to Gather Hashes](https://1337red.wordpress.com/using-a-scf-file-to-gather-hashes/)
* [Using robots.txt to Locate Your Targets](http://www.behindthefirewalls.com/2013/07/using-robotstxt-to-locate-your-targets.html)
* [Validated CloudFront SSL Domains](https://medium.com/@vysec.private/validated-cloudfront-ssl-domains-27895822cea3)
* [Vshadow: Abusing the Volume Shadow Service for Evasion, Persistence, and Active Directory Database Extraction](https://bohops.com/2018/02/10/vshadow-abusing-the-volume-shadow-service-for-evasion-persistence-and-active-directory-database-extraction/)
* [WMI Persistence with Cobalt Strike](https://blog.inspired-sec.com/archive/2017/01/20/WMI-Persistence.html)
* [WSH Injection: A Case Study](https://posts.specterops.io/wsh-injection-a-case-study-fd35f79d29dd)
* [Weaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter](https://www.blackhat.com/docs/us-16/materials/us-16-Seymour-Tully-Weaponizing-Data-Science-For-Social-Engineering-Automated-E2E-Spear-Phishing-On-Twitter.pdf)
* [Week of Evading Microsoft ATA](http://www.labofapenetrationtester.com/2017/08/week-of-evading-microsoft-ata-day1.html)
* [Windows Access Tokens and Alternate Credentials](https://blog.cobaltstrike.com/2015/12/16/windows-access-tokens-and-alternate-credentials/)
* [Windows Defender Attack Surface Reduction Rules Bypass](https://oddvar.moe/2018/03/15/windows-defender-attack-surface-reduction-rules-bypass/)
* [Windows Oneliners to Download Remote Payload and Execute Arbitrary Code](https://arno0x0x.wordpress.com/2017/11/20/windows-oneliners-to-download-remote-payload-and-execute-arbitrary-code/)
* [Windows Privilege Escalation checklist](https://github.com/netbiosX/Checklists/blob/master/Windows-Privilege-Escalation.md)
* [android-security-awesome](https://github.com/ashishb/android-security-awesome)
* [harmj0y Presentations and Blogs - Windows and Active Directory Exploitation](https://www.harmj0y.net/blog/)
* [mavinject.exe Functionality Deconstructed](https://posts.specterops.io/mavinject-exe-functionality-deconstructed-c29ab2cf5c0e)
* [sg1: swiss army knife for data encryption, exfiltration & covert communication](https://securityonline.info/sg1-swiss-army-knife/)
#### Clearnet Exploit Databases
* [0day.today](https://0day.today/)
* [Awesome CVE PoC](https://github.com/qazbnm456/awesome-cve-poc)
* [Contagio](http://contagiodump.blogspot.com/)
* [Exploit-DB](https://www.exploit-db.com/)
* [InfoSec - CERT-PA](https://infosec.cert-pa.it/analyze/submission.html)
* [MalShare](https://malshare.com/)
* [Packet Storm Security](https://packetstormsecurity.com/)
* [Tracker h3x](http://tracker.h3x.eu/)
* [VX Vault](http://vxvault.net/ViriList.php)
* [VirusBay](https://beta.virusbay.io/)
* [VirusShare](https://virusshare.com/)
* [VirusSign](http://www.virussign.com/)
* [Zeus Trojan source code](https://github.com/Visgean/Zeus)
* [theZoo](https://github.com/ytisf/theZoo)
#### Awesome Master Lists
* [Also Hacking](https://github.com/carpedm20/awesome-hacking)
* [Android Security Analysis](https://github.com/ashishb/android-security-awesome)
* [Application Security](https://github.com/paragonie/awesome-appsec)
* [Bug Bounty](https://github.com/djadmin/awesome-bug-bounty)
* [CVE Proof of Concepts](https://github.com/qazbnm456/awesome-cve-poc)
* [Capture The Flag](https://github.com/apsdehal/awesome-ctf)
* [Exploit Development](https://github.com/FabioBaroni/awesome-exploit-development)
* [Forensics](https://github.com/Cugu/awesome-forensics)
* [Hacking Lists](https://github.com/udpsec/awesome-hacking-lists)
* [Hacking Resources](https://github.com/vitalysim/Awesome-Hacking-Resources)
* [Hacking](https://github.com/jekil/awesome-hacking)
* [Honeypot](https://github.com/paralax/awesome-honeypots)
* [Incident Response](https://github.com/meirwah/awesome-incident-response)
* [Industrial Control System Security](https://github.com/hslatman/awesome-industrial-control-system-security)
* [Lockpicking](https://github.com/fabacab/awesome-lockpicking)
* [Malware Analysis](https://github.com/rshipp/awesome-malware-analysis)
* [OSINT](https://github.com/jivoi/awesome-osint)
* [Packet Capture Tools](https://github.com/caesar0301/awesome-pcaptools)
* [PenTesting](https://github.com/x0x8x/awesome-pentester)
* [Penetration Testing](https://github.com/enaqx/awesome-pentest/) - Supported by Netsparker
* [Red Teaming](https://github.com/yeyintminthuhtut/Awesome-Red-Teaming)
* [SecLists](https://github.com/danielmiessler/SecLists) - Useful security related lists to reference/work off of in a pentest
* [Security Talks](https://github.com/PaulSec/awesome-sec-talks)
* [Security](https://github.com/sbilly/awesome-security)
* [Starting Up Security](https://scrty.io/) - A collection of information security essays and links to help growing teams manage risks.
* [Threat Intelligence](https://github.com/hslatman/awesome-threat-intelligence)
* [Web Security](https://github.com/qazbnm456/awesome-web-security)
* [YARA](https://github.com/InQuest/awesome-yara)
#### Knowledge Bases
* [0day](http://0day.today/)
* [Alienvault Open Threat Exchange (OTX)](https://otx.alienvault.com/) - Live threat feed.
* [Cvedetails](https://www.cvedetails.com/)
* [CyBOK](https://www.cybok.org/knowledgebase/)
* [Exploit-db](https://www.exploit-db.com/)
* [Jetlib](https://sec.jetlib.com/)
* [MITRE ATT&CK](https://attack.mitre.org/tactics/enterprise/)
* [Mitre](http://cve.mitre.org/)
* [Nvd.nist.gov](https://nvd.nist.gov/download/nvd-rss-analyzed.xml)
* [OSINT Intel Techniques](https://inteltechniques.com/)
* [Openwall](https://www.openwall.com/lists/oss-security/)
* [Packetstormsecurity](https://packetstormsecurity.com/)
* [Rapid7](https://www.rapid7.com/db/)
* [Securityfocus](https://www.securityfocus.com/bid)
* [Seebug](https://www.seebug.org/)
* [Talos Intelligence](https://talosintelligence.com/) - Live threat feed.
* [Top 100 Cyber Security Blogs and Websites](https://blog.feedspot.com/cyber_security_blogs/)
* [Vulnerability-lab](https://www.vulnerability-lab.com)
* [Wpvulndb](https://wpscan.com/api)
* [Zerodayinitiative](https://www.zerodayinitiative.com/advisories/published/)
### OSINT Tools Used
#### General OSINT Tools
* [AbuseIPDB](https://www.abuseipdb.com/) - Search engine for blacklisted IPs or domains.
* [AutoShun](https://riskanalytics.com/community/) - Public repository of malicious IPs and other resources.
* [BadIPs](https://www.badips.com/) - Online blacklist lookup.
* [Barcode Reader](https://online-barcode-reader.inliteresearch.com/) - Decode barcodes in C#, VB, Java, C\C++, Delphi, PHP and other languages.
* [Belati](https://github.com/aancw/Belati) - The Traditional Swiss Army Knife For OSINT. Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose.
* [Binary Defense IP Ban List](https://www.binarydefense.com/banlist.txt) - Public IP blacklist.
* [Blocklist Ipsets](https://github.com/firehol/blocklist-ipsets) - Public IP blacklist.
* [Censys](https://censys.io/) - Collects data on hosts and websites through daily ZMap and ZGrab scans.
* [CloudFrunt](https://github.com/MindPointGroup/cloudfrunt) - Tool for identifying misconfigured CloudFront domains.
* [Combine](https://github.com/mlsecproject/combine) - Open source threat intelligence feed gathering tool.
* [Creepy](https://github.com/ilektrojohn/creepy) - Geolocation OSINT tool.
* [Datasploit](https://github.com/DataSploit/datasploit) - Tool to perform various OSINT techniques on usernames, emails addresses, and domains.
* [Dnsenum](https://github.com/fwaeytens/dnsenum/) - Perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.
* [Dnsmap](https://github.com/makefu/dnsmap/) - Passive DNS network mapper.
* [Dnsrecon](https://github.com/darkoperator/dnsrecon/) - DNS enumeration script.
* [Dnstracer](http://www.mavetju.org/unix/dnstracer.php) - Determines where a given DNS server gets its information from, and follows the chain of DNS servers.
* [Dork-cli](https://github.com/jgor/dork-cli) - Command line Google dork tool.
* [emagnet](https://github.com/wuseman/EMAGNET) - Automated hacking tool that will find leaked databases.
* [FindFrontableDomains](https://github.com/rvrsh3ll/FindFrontableDomains) - Multithreaded tool for finding frontable domains.
* [GOSINT](https://github.com/Nhoya/gOSINT) - OSINT tool with multiple modules and a telegram scraper.
* [Github-dorks](https://github.com/techgaun/github-dorks) - CLI tool to scan github repos/organizations for potential sensitive information leak.
* [GooDork](https://github.com/k3170makan/GooDork) - Command line Google dorking tool.
* [Google Hacking Database](https://www.exploit-db.com/google-hacking-database) - Database of Google dorks; can be used for recon.
* [Greynoise](https://greynoise.io/) - "Anti-Threat Intelligence" Greynoise characterizes the background noise of the internet, so the user can focus on what is actually important.
* [InfoByIp](https://www.infobyip.com/ipbulklookup.php) - Domain and IP bulk lookup tool.
* [Intrigue Core](https://github.com/intrigueio/intrigue-core) - Framework for attack surface discovery.
* [Machinae](https://github.com/hurricanelabs/machinae) - Multipurpose OSINT tool using threat intelligence feeds.
* [Maltego](https://www.maltego.com/) - Proprietary software for open source intelligence and forensics, from Paterva.
* [Malware Domain List](http://www.malwaredomainlist.com/) - Search and share malicious URLs.
* [NetBootcamp OSINT Tools](https://netbootcamp.org/osinttools/)
* [OSINT Framework](https://osintframework.com/)
* [OpenRefine](https://github.com/OpenRefine) - Free & open source power tool for working with messy data and improving it.
* [Orbit](https://github.com/s0md3v/Orbit) - Draws relationships between crypto wallets with recursive crawling of transaction history.
* [OsintStalker](https://github.com/milo2012/osintstalker) - Python script for Facebook and geolocation OSINT.
* [Outwit](http://www.outwit.com) - Find, grab and organize all kinds of data and media from online sources.
* [PaGoDo](https://github.com/opsdisk/pagodo) - Passive, automated Google dorking tool.
* [Passivedns-client](https://github.com/chrislee35/passivedns-client) - Library and query tool for querying several passive DNS providers.
* [Passivedns](https://github.com/gamelinux/passivedns) - Network sniffer that logs all DNS server replies for use in a passive DNS setup.
* [Photon](https://github.com/s0md3v/Photon) - Crawler designed for OSINT.
* [Pown Recon](https://github.com/pownjs/recon) - Target reconnaissance framework powered by graph theory.
* [QuickCode](https://quickcode.io/) - Python and R data analysis environment.
* [Raven](https://github.com/0x09AL/raven) - LinkedIn information gathering tool.
* [Recon-ng](https://github.com/lanmaster53/recon-ng) - Full-featured Web Reconnaissance framework written in Python.
* [SecApps Recon](https://secapps.com/tools/recon/) - Information gathering and target reconnaissance tool and UI.
* [Spamcop](https://www.spamcop.net/bl.shtml) - IP based blacklist.
* [Spamhaus](https://www.spamhaus.org/lookup/) - Online blacklist lookup.
* [Spiderfoot](https://www.spiderfoot.net/) - Open source OSINT automation tool with a Web UI and report visualizations
* [ThreatCrowd](https://www.threatcrowd.org/) - Threat search engine.
* [ThreatTracker](https://github.com/michael-yip/ThreatTracker) - Python based IOC tracker.
* [Vcsmap](https://github.com/melvinsh/vcsmap) - Plugin-based tool to scan public version control systems for sensitive information.
* [XRay](https://github.com/evilsocket/xray) - XRay is a tool for recon, mapping and OSINT gathering from public networks.
* [Zen](https://github.com/s0md3v/Zen) - Find email addresses of Github users.
* [malc0de DNSSinkhole](http://malc0de.com/bl/) - List of domains that have been identified as distributing malware during the past 30 days.
* [malc0de Database](http://malc0de.com/database/) - Searchable incident database.
* [pygreynoise](https://github.com/GreyNoise-Intelligence/pygreynoise) - Greynoise Python Library
* [sn0int](https://github.com/kpcyrd/sn0int) - Semi-automatic OSINT framework and package manager.
* [theHarvester](https://github.com/laramies/theHarvester) - E-mail, subdomain and people names harvester.
#### Crypto OSINT Search
* [Bitcoin Abuse](https://www.bitcoinabuse.com/) - Database of wallets associated with ransomware, blackmailers and fraud.
* [Bitcoin Who's Who](https://bitcoinwhoswho.com/) - Database of known ID information from bitcoin addresses.
* [Blockchair](https://blockchair.com/) - Multiple blockchain explorer.
* [Wallet Explorer](https://www.walletexplorer.com/) - Finds all known associated bitcoin addresses from a single known address.
#### Government Record Search
* [Blackbook](https://www.blackbookonline.info/index.html) - Public Records Starting Point.
* [FOIA Search](https://www.foia.gov/search.html) - Government information request portal.
* [PACER](https://pacer.uscourts.gov/) - Public Access to Federal Court Records.
* [RECAP](https://www.courtlistener.com/recap/) - Free version of PACER. Includes browser extensions for Chrome & Firefox.
* [SSN Validator](https://www.ssnvalidator.com/index.aspx) - Confirms valid Social Security Numbers.
#### National Search Engines
*Localized search engines by country.*
* [Alleba (Philippines)](https://www.alleba.com/)
* [Baidu (China)](https://www.baidu.com/)
* [Eniro (Sweden)](https://www.eniro.se/)
* [Goo (Japan)](https://www.goo.ne.jp/)
* [Najdsi (Slovenia)](http://www.najdi.si)
* [Naver (South Korea)](https://www.naver.com/)
* [Onet.pl (Poland)](https://www.onet.pl/)
* [Orange (France)](https://www.orange.fr/portail)
* [Parseek (Iran)](https://www.parseek.com/)
* [SAPO (Portugal)](https://www.sapo.pt/)
* [Search.ch (Switzerland)](https://www.search.ch/)
* [Walla (Israel)](https://www.walla.co.il/)
* [Yandex (Russia)](https://yandex.com/)
#### Meta Search
*Lesser known and used search engines.*
* [All-in-One](https://all-io.net/)
* [AllTheInternet](https://www.alltheinternet.com/)
* [Etools](https://www.etools.ch/)
* [FaganFinder](https://www.faganfinder.com/)
* [Goofram](http://www.goofram.com)
* [Myallsearch](http://www.myallsearch.com)
* [Qwant](https://www.qwant.com/)
* [Sputtr](http://www.sputtr.com)
* [Trovando](http://www.trovando.it)
* [WebOasis](https://weboas.is/)
* [Zapmeta](https://www.zapmeta.com/)
* [iZito](https://www.izito.com/)
#### Visual Search and Clustering Search Engines
*Search engines that scrape multiple sites (Google, Yahoo, Bing, Goo, etc) at the same time and return results.*
* [Carrot2](https://search.carrot2.org/#/search/web) * Organizes your search results into topics.
* [Yippy](https://www.yippy.com/) * Search using multiple sources at once
#### Document and Slides Search
*Search for data located on PDFs, Word documents, presentation slides, and more.*
* [Authorstream](http://www.authorstream.com)
* [Find-pdf-doc](http://www.findpdfdoc.com)
* [Free Full PDF](http://www.freefullpdf.com)
* [Offshore Leak Database](https://offshoreleaks.icij.org)
* [PDF Search Engine](http://www.pdfsearchengine.info)
* [RECAP](https://www.courtlistener.com/recap/)
* [Scribd](https://www.scribd.com/)
* [SlideShare](https://www.slideshare.net/)
* [Slideworld](http://www.slideworld.com)
* [soPDF.com](http://www.sopdf.com)
#### Pastebin Search
* [Pastebin](https://pastebin.com/) - Pastebin is a website where you can store any text online for easy sharing.
#### Code Search
*Search by website source code*
* [NerdyData](https://www.nerdydata.com/) - Search engine for source code.
* [SearchCode](https://searchcode.com) - Help find real world examples of functions, API's and libraries across 10+ sources.
#### Real-Time Search, Social Media Search, and General Social Media Tools
* [Audiense](https://audiense.com/)
* [Blazent](https://www.blazent.com/)
* [Brandwatch](https://www.brandwatch.com)
* [Buffer](https://buffer.com)
* [Buzz sumo](https://buzzsumo.com/)
* [Geocreepy](http://www.geocreepy.com)
* [Geofeedia](https://geofeedia.com)
* [Hootsuite](https://www.hootsuite.com/)
* [Hashtatit](https://www.hashatit.com/)
* [Klear](https://klear.com/)
* [Kred](https://www.home.kred/)
* [SproutSocial](https://sproutsocial.com/)
* [Netvibes](https://www.netvibes.com/en)
* [OpinionCrawl](http://www.opinioncrawl.com)
* [Rival IQ](https://www.rivaliq.com)
* [RSS Social Analyzer](https://chrome.google.com/webstore/detail/rss-social-analyzer/ncmajlpbfckecekfamgfkmckbpihjfdn?hl=en)
* [SocialBakers](https://www.socialbakers.com/)
* [SociaBlade](http://socialblade.com)
* [Social DownORNot](http://social.downornot.com)
* [Social Searcher](https://www.social-searcher.com/)
* [Tagboard](https://tagboard.com)
* [Reputation Refinery](https://reputationrefinery.com/)
* [UVRX](http://www.uvrx.com/social.html)
#### Twitter Search
* [Backtweets](http://backtweets.com)
* [Fake Follower Check](https://fakers.statuspeople.com)
* [First Tweet](https://ctrlq.org/first)
* [FirstTweet](https://about.twitter.com/#i_intelligence)
* [Foller.me](https://foller.me/)
* [FollowCheck](http://followcheck.com)
* [Followerwonk](https://followerwonk.com/)
* [GeoSocial Footprint](http://geosocialfootprint.com)
* [Geochirp](http://www.geochirp.com)
* [Gigatweeter](http://gigatweeter.com)
* [Ground Signal](https://www.groundsignal.com)
* [HappyGrumpy](https://www.happygrumpy.com)
* [Harvard TweetMap](http://worldmap.harvard.edu/tweetmap)
* [Hashtagify](https://hashtagify.me/)
* [Hashtags.org](https://www.hashtags.org/)
* [ManageFlitter](https://www.manageflitter.com/)
* [Mentionmapp](https://mentionmapp.com/)
* [OneMillionTweetMap](https://onemilliontweetmap.com/)
* [Rank Speed](https://rankspeed.com/)
* [Riffle](https://crowdriff.com/)
* [RiteTag](https://ritetag.com)
* [Schedule Warble](https://warble.co)
* [Sentiment140](http://www.twittersentiment.appspot.com)
* [Sleeping Time](http://sleepingtime.org)
* [Social Bearing](https://socialbearing.com/)
* [TruFan](https://www.trufan.io/)
* [Spoonbill](http://spoonbill.io)
* [TWUBS Twitter Chat](http://twubs.com/twitter-chats)
* [Tagdef](https://tagdef.com/en/)
* [Tinfoleak](https://tinfoleak.com)
* [Trends24](https://trends24.in/)
* [TrendsMap](https://www.trendsmap.com/)
* [TwChat](http://twchat.com)
* [Twazzup](http://new.twazzup.com/)
* [Tweet Tag](https://www.tweet-tag.com/)
* [TweetArchivist](http://www.tweetarchivist.com)
* [TweetDeck](https://tweetdeck.twitter.com/)
* [TweetMap](https://www.omnisci.com/demos/tweetmap)
* [TweetMap](http://worldmap.harvard.edu/tweetmap)
* [TweetPsych](http://tweetpsych.com)
* [TweetStats](http://www.tweetstats.com)
* [TweetTunnel](http://tweettunnel.com)
* [Tweetreach](https://tweetreach.com/)
* [Twellow](https://www.twellow.com/)
* [Tweriod](https://www.tweriod.com/)
* [Twiangulate](http://www.twiangulate.com/search/)
* [Twicsy](https://twicsy.com/)
* [Twilert](https://www.twilert.com/)
* [Twipho](http://www.twipho.net)
* [TwitRSS](https://twitrss.me)
* [Twitonomy](http://www.twitonomy.com)
* [Twitter Advanced Search](https://twitter.com/search-advanced?lang=en)
* [Twitter Audit](https://www.twitteraudit.com)
* [Twitter Chat Schedule](https://www.tweetreports.com/twitter-chat-schedule/)
* [Twitter Search](https://twitter.com/explore)
* [Twitterfall](https://twitterfall.com/)
* [burrrd.](https://burrrd.com)
* [doesfollow](https://doesfollow.com)
#### Facebook Search
* [Agora Pulse](https://barometer.agorapulse.com/home)
* [Commun.it](https://commun.it/)
* [ExtractFace](https://le-tools.com/)
* [Fanpage Karma](https://www.fanpagekarma.com/)
* [Facebook Search](https://www.facebook.com/help/821153694683665/)
* [Facebook Search Tool](https://netbootcamp.org/facebook.html)
* [FaceLIVE](https://www.facelive.org)
* [Fb-sleep-stats](https://github.com/sqren/fb-sleep-stats)
* [Find my Facebook ID](https://findmyfbid.in)
* [Lookup-ID.com](https://lookup-id.com)
* [SearchIsBack](https://searchisback.com)
* [Wallfux](https://clearinghouse.wallflux.com/)
* [Wolfram Alpha Facebook Report](https://www.wolframalpha.com/input/?i=facebook+report)
* [Zesty Facebook Search](http://zesty.ca/facebook/)
#### Instagram Search
* [Hashtagify](https://hashtagify.me/hashtag/wandavision)
* [Iconosquare](https://pro.iconosquare.com/)
* [Picodash](https://www.picodash.com)
* [SnapMap](https://snapmap.knightlab.com/)
* [Social Rank](https://socialrank.com/)
* [Worldcam](http://worldc.am)
#### Pinterest Search
* [Pingroupie](https://pingroupie.com/)
#### Reddit Search
*Tools to help discover more about a reddit user or subreddit.*
* [Imgur](https://imgur.com/search) - The most popular image hosting website used by redditors.
* [Mostly Harmless](http://kerrick.github.io/Mostly-Harmless/#features) - Mostly Harmless looks up the page you are currently viewing to see if it has been submitted to reddit.
* [Reddit Archive](https://www.redditinvestigator.com/) - Historical archives of reddit posts.
* [Reddit Comment Search](https://redditcommentsearch.com/) - Analyze a reddit users by comment history.
* [Reddit Investigator](http://www.redditinvestigator.com) - Investigate a reddit users history.
* [Reddit Suite](https://chrome.google.com/webstore/detail/reddit-enhancement-suite/kbmfpngjjgdllneeigpgjifpgocmfgmb) - Enhances your reddit experience.
* [Reddit User Analyser](https://atomiks.github.io/reddit-user-analyser/) - reddit user account analyzer.
* [Subreddits](http://subreddits.org) - Discover new subreddits.
#### VKontakte Search
*Perform various OSINT on Russian social media site VKontakte.*
* [Barkov.net](https://vk.barkov.net/)
* [Report Tree](http://dcpu.ru/vk_repost_tree.php)
* [Snradar](http://snradar.azurewebsites.net) - Search pictures by time and location they were taken
* [Social Stats](http://socialstats.ru)
* [Target Hunter](https://targethunter.ru/)
* [Target Log](https://targetolog.com/)
* [VK Community Search](https://vk.com/communities)
* [VK Parser](http://vkparser.ru) - A tool to search for a target audience and potential customers.
* [VK People Search](https://vk.com/people)
* [VK to RSS Appspot](http://vk-to-rss.appspot.com/)
* [VK5](http://vk5.city4me.com)
* [Дезертир](https://vk.com/app3046467)
#### Blog Search
* [BlogSearchEngine](http://www.blogsearchengine.org)
* [Notey](https://www.notey.com/) - Blog post search engine.
* [Outbrain](https://www.outbrain.com/publishers/)
* [Twingly](https://www.twingly.com/)
#### Username Check
* [Check User Names](https://checkusernames.com/)
* [Knowem](https://knowem.com/) - Search for a username on over 500 popular social networks.
* [Linkedin2Username](https://gitlab.com/initstring/linkedin2username) - Web scraper that uses valid LinkedIn credentials to put together a list of employees for a specified company.
* [Name Checkr](https://www.namecheckr.com/)
* [Name Checkup](https://namecheckup.com)
* [Name Chk](https://www.namechk.com/)
* [User Search](https://usersearch.org/index.php)
#### Personal Investigations
* [192 (UK)](https://www.192.com/)
* [411 (US)](https://www.411.com/)
* [Alumni.net](https://www.alumni.net/)
* [Ancestry](https://www.ancestry.com/)
* [Been Verified](https://www.beenverified.com/) - Good accuracy, paid person search.
* [CVGadget](https://www.cvgadget.com/)
* [Canada411](https://www.canada411.ca/)
* [Cedar](https://cedar.buffalo.edu/AdServ/person-search.html)
* [Charlie App](https://www.detective.io/)
* [Classmates](https://www.classmates.com/)
* [CrunchBase](https://www.crunchbase.com/)
* [Data 24-7](https://www.data247.com/)
* [Family Search](https://www.familysearch.org/en/)
* [Family Tree Now](https://www.familytreenow.com/)
* [Federal Bureau of Prisons Inmate Locator (US)](https://www.bop.gov/inmateloc/) - Find an inmate that is in the Federal Bureau of Prisons system.
* [Fold3 (US Military Records)](https://www.fold3.com/) - Browse records of US Military members.
* [Genealogy Bank](https://www.genealogybank.com/)
* [Genealogy Links](https://www.genealogylinks.net/)
* [Go Find Who](https://gofindwho.com/) - Multiple handy search tools.
* [Homemetry](https://homemetry.com)
* [Infobel](https://www.infobel.com/)
* [Infospace White Pages](https://infospace.com/home/white-pages)
* [Interment](http://www.interment.net/data/search.htm)
* [International White and Yellow Pages](http://www.wayp.com)
* [Itools](http://itools.com/search/people-search)
* [Kompass](https://us.kompass.com/)
* [Locate Family](https://www.locatefamily.com/) - Basicly a worldwide phonebook that can be manually searched. This site shows up as results on google.com so searches based on name, address, or phone number.
* [LookUpUK](http://www.lookupuk.com/main.html)
* [Lullar](https://com.lullar.com/)
* [MelissaDATA](https://www.melissa.com/v2/lookups/)
* [My Life People Search](https://www.mylife.com/reverse-people-search)
* [My Life](https://www.mylife.com/) - Paid people search with lots of results.
* [PeekYou](https://www.peekyou.com/)
* [People Search (Australia)](https://www.peoplesearch.com.au/)
* [PeopleSearch.net](http://www.peoplesearch.net)
* [Pipl](https://pipl.com)
* [Rapportive](https://business.linkedin.com/sales-solutions)
* [RecordsPedia](http://recordspedia.com)
* [Recruitem](http://recruitin.net)
* [Reunion](https://www.reunion.com/)
* [Rootsweb](https://home.rootsweb.com/)
* [SearchBug](https://www.searchbug.com/)
* [Skip Ease](https://www.skipease.com/)
* [SnoopStation](https://snoopstation.com/)
* [Sowdust Facebook Search](https://sowdust.github.io/fb-search/) - Facebook search tool.
* [Spokeo](https://www.spokeo.com/)
* [That's Them](https://thatsthem.com/) - Good accuracy, paid person search.
* [The National Archives (UK)](https://www.nationalarchives.gov.uk/)
* [USSearch](https://www.ussearch.com/)
* [WebMiii](https://webmii.com/)
* [White Pages (US)](https://www.whitepages.com/)
* [Wink](http://itools.com/tool/wink-people-search)
* [Yasni](http://www.yasni.com)
* [Zabasearch](https://www.zabasearch.com/)
* [Zoominfo](https://www.zoominfo.com/)
* [facesearch](http://facesaerch.com) - Search for images of a person by name.
* [snitch.name](http://www.snitch.name)
#### E-mail Search / E-mail Check
* [BriteVerify Email Verification](https://www.validity.com/products/briteverify/email-list-verification/)
* [Email Address Validator](https://www.email-validator.net/)
* [Email Format](https://www.email-format.com/)
* [Email Permutator+](http://metricsparrow.com/toolkit/email-permutator)
* [EmailHippo](https://tools.verifyemailaddress.io)
* [EmailSearch.net](http://www.email-search.org/search-emails/)
* [Have I Been Pwned](https://haveibeenpwned.com) - Search across multiple data breaches to see if your email address has been compromised.
* [Hunter](https://hunter.io) - Hunter lets you find email addresses in seconds and connect with the people that matter for your business.
* [MailTester](https://mailtester.com/en/single-email-verification)
* [MyCleanList](https://www.mycleanlist.com/)
* [Peepmail](http://www.samy.pl/peepmail)
* [Pipl](https://pipl.com)
* [ReversePhoneCheck](https://www.reversephonecheck.com/)
* [ThatsThem](https://thatsthem.com/reverse-email-lookup)
* [FindEmails.com](https://www.findemails.com/)
* [Verify Email](https://verify-email.org/)
* [VoilaNorbert](https://www.voilanorbert.com) - Find anyone's contact information for lead research or talent acquisition.
* [h8mail](https://github.com/khast3x/h8mail) - Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email
#### Phone Number Research
* [National Cellular Directory](https://www.nationalcellulardirectory.com/) - was created to help people research and reconnect with one another by performing cell phone lookups. The lookup products includes have billions of records that can be accessed at any time, as well as free searches one hour a day, every day.
* [Reverse Phone Lookup](https://www.reversephonelookup.com/) - Detailed information about phone carrier, region, service provider, and switch information.
* [Spy Dialer](https://spydialer.com/default.aspx) - Get the voicemail of a cell phone & owner name lookup.
* [Twilio](https://www.twilio.com/lookup) - Look up a phone numbers carrier type, location, etc.
* [Phone Validator](https://www.phonevalidator.com/index.aspx) - Pretty accurate phone lookup service, particularly good against Google Voice numbers.
#### Company Research
* [AllStocksLinks](http://www.allstocks.com/links)
* [Battle of the Internet Giants](https://influencermarketinghub.com/battle-of-internet-giants)
* [Better Business Bureau](https://www.bbb.org/)
* [Bizeurope](http://www.bizeurope.com)
* [Bloomberg](https://www.bloomberg.com/markets/stocks)
* [Business Source](https://www.ebsco.com/products/research-databases/business-source-complete)
* [Bureau Van Dijk](https://www.bvdinfo.com/en-gb/)
* [Canadian Business Research](https://www.canada.ca/en/services/business/research.html)
* [Canadian Business Resource](http://www.cbr.ca)
* [Central and Eastern European Business Directory](https://globaledge.msu.edu/global-resources/resource/1274)
* [Company Registration Round the World](https://www.sg.ch/recht/handelsregister-notariate.html)
* [Company Research Resources by Country Comparably](https://www.comparably.com)
* [CompeteShark](https://competeshark.com/)
* [Corporate Information](https://www.corporateinformation.com/)
* [CrunchBase](https://www.crunchbase.com)
* [EDGAR Online](https://www.dfinsolutions.com/products/edgar-online)
* [Europages](https://www.europages.co.uk/)
* [European Business Register](https://ebra.be/)
* [Ezilon](http://www.ezilon.com)
* [Factiva](https://global.factiva.com)
* [Glassdoor](https://www.glassdoor.com/index.htm)
* [globalEdge](https://globaledge.msu.edu/)
* [GuideStar](https://www.guidestar.org/)
* [Hoovers](https://www.dnb.com/products/marketing-sales/dnb-hoovers.html)
* [Inc. 5000](https://www.inc.com/inc5000)
* [InstantLogoSearch](http://instantlogosearch.com)
* [iSpionage](https://www.ispionage.com/)
* [Knowledge guide to international company registration](https://www.icaew.com/library/subject-gateways/business-management/knowledge-guide-international-company-registration)
* [Linkedin](https://www.linkedin.com)
* [National Company Registers](https://en.wikipedia.org/wiki/List_of_official_business_registers)
* [Mergent Intellect](https://www.mergentintellect.com/)
* [Mergent Online](https://www.mergentonline.com/login.php)
* [Morningstar Research](http://library.morningstar.com)
* [Notablist](https://www.notablist.com)
* [Orbis directory](https://orbisdirectory.bvdinfo.com/version-20181213/OrbisDirectory/Companies/Login)
* [opencorporates](https://opencorporates.com)
* [Owler](https://corp.owler.com/)
* [Overseas Company Registers](https://www.gov.uk/government/publications/overseas-registries/overseas-registries)
* [Plunkett Research](http://www.plunkettresearchonline.com/Login.aspx)
* [Scoot](https://www.scoot.co.uk/)
* [SEMrush](https://www.semrush.com)
* [Serpstat](https://serpstat.com)
* [SpyFu](https://www.spyfu.com/)
* [Forbes Global 2000](https://www.forbes.com/global2000/)
* [Vault](https://www.vault.com/)
* [Xing](https://www.xing.com/)
#### Domain and IP Research
* [Accuranker](https://www.accuranker.com)
* [ahrefs](https://ahrefs.com) - A tool for backlink research, organic traffic research, keyword research, content marketing & more.
* [Alexa](http://www.alexa.com)
* [Bing Webmaster Tools](https://www.bing.com/webmasters/about)
* [BuiltWith](https://builtwith.com/)
* [Central Ops](https://centralops.net/co/)
* [Dedicated or Not](http://dedicatedornot.com)
* [DNSDumpster](https://dnsdumpster.com)
* [DNS History](http://dnshistory.org)
* [DNSStuff](https://www.dnsstuff.com/)
* [DNSViz](https://dnsviz.net/)
* [Domain Big Data](https://domainbigdata.com/)
* [Domain Crawler](https://domaincrawler.com/)
* [Domain Dossier](https://centralops.net/co/DomainDossier.aspx)
* [Domain Tools](https://whois.domaintools.com/) - Whois lookup and domain/ip historical data.
* [Easy whois](https://www.easywhois.com)
* [Exonera Tor](https://metrics.torproject.org/exonerator.html) - A database of IP addresses that have been part of the Tor network. It answers the question whether there was a Tor relay running on a given IP address on a given date.
* [Follow.net](https://follow.net/)
* [GraphyStories](https://app.graphystories.com/)
* [HypeStat](https://hypestat.com/)
* [Infosniper](https://www.infosniper.net/)
* [intoDNS](https://intodns.com/)
* [IP Checking](http://www.ipchecking.com)
* [IP Location](https://www.iplocation.net/)
* [IP 2 Geolocation](http://ip2geolocation.com)
* [IP 2 Location](http://www.ip2location.com/demo.aspx)
* [IPFingerprints](https://www.ipfingerprints.com/)
* [IPVoid](https://www.ipvoid.com/) - IP address toolset.
* [IntelliTamper](https://www.softpedia.com/get/Internet/Other-Internet-Related/IntelliTamper.shtml)
* [Kloth](http://www.kloth.net/services/)
* [NetworkTools](https://network-tools.com/)
* [Majestic](https://majestic.com)
* [MaxMind](https://www.maxmind.com/en/home)
* [MXToolbox](https://mxtoolbox.com/) - MX record lookup tool.
* [Netcraft Site Report](https://sitereport.netcraft.com/)
* [OpenLinkProfiler](https://www.openlinkprofiler.org/)
* [Link Explorer](https://moz.com/link-explorer)
* [PageGlimpse](http://www.pageglimpse.com)
* [Pentest-Tools.com](https://pentest-tools.com/information-gathering/google-hacking)
* [PhishStats](https://phishstats.info/)
* [Pulsedive](https://pulsedive.com)
* [Quantcast](https://www.quantcast.com)
* [Quick Sprout](https://www.quicksprout.com)
* [RedirectDetective](https://redirectdetective.com/)
* [Remote DNS Lookup](https://remote.12dt.com)
* [Robtex](https://www.robtex.com)
* [SecurityTrails](https://securitytrails.com/dns-trails) - API to search current and historical DNS records, current and historical WHOIS, technologies used by sites and whois search for phone, email, address, IPs etc.
* [SEMrush](https://www.semrush.com)
* [SEOTools for Excel](https://seotoolsforexcel.com/)
* [Similar Web](https://www.similarweb.com) - Compare any website traffic statistics & analytics.
* [SmallSEOTools](https://smallseotools.com/)
* [StatsCrop](https://www.statscrop.com/)
* [Squatm3gator](https://github.com/david3107/squatm3gator) - Enumerate available domains generated modifying the original domain name through different cybersquatting techniques
* [URLVoid](https://www.urlvoid.com/) - Analyzes a website through multiple blacklist engines and online reputation tools to facilitate the detection of fraudulent and malicious websites.
* [Wappalyzer](https://www.wappalyzer.com/)
* [WebMeUp](https://webmeup.com/)
* [Website Informer](https://website.informer.com/)
* [WhatIsMyIPAddress](https://whatismyipaddress.com/)
* [Who.is](https://who.is/) - Domain whois information.
* [Whois Arin Online](https://whois.arin.net/ui/)
* [WhoIsHostingThis](https://www.whoishostingthis.com/)
* [Whoisology](https://whoisology.com)
* [WhoIsRequest](https://whoisrequest.com/)
* [w3snoop](https://webboar.com.w3snoop.com/)
* [Verisign](https://dnssec-analyzer.verisignlabs.com/)
* [ViewDNS.info](https://viewdns.info/)
* [You Get Signal](https://www.yougetsignal.com/)
#### Keywords Discovery and Research
* [Google Adwords](https://ads.google.com/home/#!/) - Get monthly keyword volume data and stats.
* [Google Trends](https://trends.google.com/trends/?geo=US) - See how many users are searching for specific keywords.
* [Keyword Discovery](https://www.keyworddiscovery.com/)
* [Keyword Spy](https://www.keywordspy.com/)
* [KeywordTool](https://keywordtool.io/)
* [One Look Reverse Dictionary](https://www.onelook.com/reverse-dictionary.shtml)
* [Soovle](https://soovle.com/)
* [Ubersuggest](https://neilpatel.com/ubersuggest/)
* [Word Tracker](https://www.wordtracker.com/)
#### Web History and Website Capture
* [Archive.is](https://archive.is/)
* [BlackWidow](https://softbytelabs.com/wp/blackwidow/)
* [CashedPages](http://www.cachedpages.com)
* [CachedView](https://cachedview.com/)
* [DomainTools](https://account.domaintools.com/log-in/)
* [Wayback Machine](https://archive.org/web/web.php) - Explore the history of a website.
* [Wayback Machine Archiver](https://github.com/jsvine/waybackpack)
#### Image Search
* [Baidu Images](https://image.baidu.com/)
* [Bing Images](https://www.bing.com/images/)
* [Flickr](https://flickr.com/)
* [Google Image](https://images.google.com)
* [Gramfeed](http://www.gramfeed.com/)
* [Image Identification Project](https://www.imageidentify.com/)
* [Image Raider](https://infringement.report/api/raider-reverse-image-search/)
* [KarmaDecay](http://karmadecay.com/)
* [Lycos Image Search](https://search.lycos.com/)
* [PhotoBucket](https://app.photobucket.com/explore)
* [Picsearch](https://www.picsearch.com/)
* [PicTriev](http://www.pictriev.com/)
* [TinEye](https://tineye.com) - Reverse image search engine.
* [Websta](https://websta.me/)
* [Worldcam](http://www.worldc.am)
* [Yahoo Image Search](https://images.search.yahoo.com)
* [Yandex Images](https://www.yandex.com/images)
#### Image Analysis
* [ExifTool](https://exiftool.org/)
* [Ghiro](https://www.getghiro.org/)
* [ImpulseAdventure](https://www.impulseadventure.com/photo/jpeg-snoop.html)
* [Jeffreys Image Metadata Viewer](http://exif.regex.info/exif.cgi)
* [JPEGsnoop](https://github.com/ImpulseAdventure/JPEGsnoop)
* [Metapicz](http://metapicz.com/#landing)
#### Web Monitoring
* [Alltop](https://alltop.com/)
* [Awasu](https://awasu.com/)
* [Bridge.Leslibres](https://bridge.leslibres.org/)
* [Bridge.Suumitsu](https://bridge.suumitsu.eu/)
* [ChangeDetect](https://www.changedetect.com/)
* [Deltafeed](https://bitreading.com/deltafeed/)
* [Feed43](https://feed43.com/)
* [FeedBooster](https://www.qsensei.com/)
* [Feed Exileed](http://feed.exileed.com/)
* [Feed Filter Maker](https://feed.janicek.co/)
* [Feedly](https://feedly.com/)
* [FeedReader](https://www.feedreader.com/)
* [FetchRSS](https://fetchrss.com/)
* [Flipboard](https://flipboard.com/)
* [FollowThatPage](https://www.followthatpage.com/)
* [Google Alerts](https://www.google.com/alerts) - A content change detection and notification service.
* [InfoMinder](https://app.infominder.com/webminder/)
* [Mention](https://mention.com/en/)
* [Netvibes](https://www.netvibes.com/en)
* [Newsblur](https://newsblur.com/)
* [OmeaReader](https://www.jetbrains.com/omea/reader/)
* [OnWebChange](https://onwebchange.com/)
* [Reeder](https://reederapp.com/)
* [RSS Bridge](https://bridge.suumitsu.eu)
* [RSS Feed Reader](https://chrome.google.com/webstore/detail/rss-feed-reader/pnjaodmkngahhkoihejjehlcdlnohgmp)
* [RSS Micro](http://www.rssmicro.com/)
* [RSS Search Engine](https://ctrlq.org/rss/)
* [RSS Search Hub](https://www.rsssearchhub.com/)
* [RSSOwl](https://www.rssowl.org/)
* [Selfoss](https://selfoss.aditu.de/)
* [Silobreaker](https://www.silobreaker.com/)
* [Talkwalker](https://www.talkwalker.com/)
* [The Old Reader](https://theoldreader.com/home)
* [versionista](https://versionista.com/)
* [visualping](https://visualping.io)
* [WebSite Watcher](https://www.aignes.com/index.htm)
* [Winds](https://winds.getstream.io/create-account)
#### Social Network Analysis
* [Gephi](https://gephi.org)
* [ORA](http://www.casos.cs.cmu.edu/projects/ora/software.php)
* [Sentinel Visualizer](https://fmsasg.com/)
* [Visual Investigative Scenarios](https://vis.occrp.org)
* [Wynyard Group](https://www.wynyardgroup.com/)
#### DNS Search And Enumeration
* [Amass](https://github.com/caffix/amass) - The amass tool searches Internet data sources, performs brute force subdomain enumeration, searches web archives, and uses machine learning to generate additional subdomain name guesses. DNS name resolution is performed across many public servers so the authoritative server will see the traffic coming from different locations. Written in Go.
#### Network Reconnaissance Tools
* [ACLight](https://github.com/cyberark/ACLight) - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.
* [BuiltWith](https://builtwith.com/) - Technology lookup tool for websites.
* [CloudFail](https://github.com/m0rtem/CloudFail) - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
* [LdapMiner](https://sourceforge.net/projects/ldapminer/) - Multiplatform LDAP enumeration utility.
* [Mass Scan](https://github.com/robertdavidgraham/masscan) - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
* [Netdiscover](https://github.com/alexxy/netdiscover) - Simple and quick network scanning tool.
* [Pentest-Tools](https://pentest-tools.com/home) - Online suite of various different pentest related tools.
* [Ruler](https://github.com/sensepost/ruler) - Tool for remotely interacting with Exchange servers.
* [Shodan](https://www.shodan.io/) - Database containing information on all accessible domains on the internet obtained from passive scanning.
* [Spyse](https://spyse.com/) - Web research services that scan the entire internet using OSINT, to simplify the investigation of infrastructure and attack surfaces.
* [Spyse.py](https://github.com/zeropwn/spyse.py) - Python API wrapper and command-line client for the tools hosted on spyse.com.
* [Sublist3r](https://github.com/aboul3la/Sublist3r) - Subdomain enumeration tool for penetration testers.
* [ldapsearch](https://linux.die.net/man/1/ldapsearch) - Linux command line utility for querying LDAP servers.
* [nmap](https://nmap.org/) - Free security scanner for network exploration & security audits.
* [pyShodan](https://github.com/GoVanguard/pyShodan) - Python 3 script for interacting with Shodan API (requires valid API key).
* [smbmap](https://github.com/ShawnDEvans/smbmap) - Handy SMB enumeration tool.
* [xprobe2](https://linux.die.net/man/1/xprobe2) - Open source operating system fingerprinting tool.
* [zmap](https://zmap.io/) - Open source network scanner that enables researchers to easily perform Internet-wide network studies.
### Exploitation Enumeration And Data Recovery Tools
#### Penetration Testing OS Distributions
* [ArchStrike](https://archstrike.org/) - Arch GNU/Linux repository for security professionals and enthusiasts.
* [AttifyOS](https://github.com/adi0x90/attifyos) - GNU/Linux distribution focused on tools useful during Internet of Things (IoT) security assessments.
* [BackBox](https://www.backbox.org/) - Ubuntu-based distribution for penetration tests and security assessments.
* [BlackArch](https://www.blackarch.org/) - Arch GNU/Linux-based distribution for penetration testers and security researchers.
* [Buscador](https://inteltechniques.com/buscador/) - GNU/Linux virtual machine that is pre-configured for online investigators.
* [Fedora Security Lab](https://labs.fedoraproject.org/en/security/) - Provides a safe test environment to work on security auditing, forensics, system rescue and teaching security testing methodologies.
* [Kali](https://www.kali.org/) - GNU/Linux distribution designed for digital forensics and penetration testing.
* [Network Security Toolkit (NST)](https://networksecuritytoolkit.org/nst/index.html) - Fedora-based bootable live operating system designed to provide easy access to best-of-breed open source network security applications.
* [Parrot Security OS](https://www.parrotsec.org/) - Distribution similar to Kali using the same repositories, but with additional features such as Tor and I2P integration.
* [The Pentesters Framework](https://github.com/trustedsec/ptf) - Distro organized around the Penetration Testing Execution Standard (PTES), providing a curated collection of utilities that eliminates often unused toolchains.
#### Multi-paradigm Frameworks
* [Armitage](http://www.fastandeasyhacking.com/) - Java-based GUI front-end for the Metasploit Framework.
* [AutoSploit](https://github.com/NullArray/AutoSploit) - Automated mass exploiter, which collects target by employing the Shodan.io API and programmatically chooses Metasploit exploit modules based on the Shodan query.
* [Faraday](https://github.com/infobyte/faraday) - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
* [Habu Hacking Toolkit](https://github.com/fportantier/habu) - Unified set of tools spanning passive reconnaissance, network attacks, social media monitoring, and website fingerprinting.
* [Mad-Metasploit](https://www.hahwul.com/p/mad-metasploit.html) - Additional scripts for Metasploit.
* [Metasploit](https://www.metasploit.com/) - Software for offensive security teams to help verify vulnerabilities and manage security assessments.
* [Mobile Security Framework (MobSF)](https://github.com/MobSF/Mobile-Security-Framework-MobSF/) - Automated mobile application pentesting framework capable of static analysis, dynamic analysis, malware analysis, and web API testing.
* [Pupy](https://github.com/n1nj4sec/pupy) - Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.
* [Rupture](https://github.com/dionyziz/rupture) - Multipurpose tool capable of man-in-the-middle attacks, BREACH attacks and other compression-based crypto attacks.
#### Network Vulnerability Scanners
* [Nessus](https://www.tenable.com/products/nessus/nessus-professional) - Commercial network vulnerability scanner.
* [Nexpose](https://www.rapid7.com/products/nexpose/) - Commercial vulnerability and risk management assessment engine that integrates with Metasploit, sold by Rapid7.
* [OpenVAS](https://www.openvas.org/) - Open source implementation of the popular Nessus vulnerability assessment system.
* [Vuls](https://github.com/future-architect/vuls) - Agentless Linux/FreeBSD vulnerability scanner written in Go.
#### Web Vulnerability Scanners
* [ACSTIS](https://github.com/tijme/angularjs-csti-scanner) - Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
* [Burp Suite](https://portswigger.net/burp) - Commercial web vulnerability scanner, with limited community edition.
* [cms-explorer](https://code.google.com/archive/p/cms-explorer/) - Reveal the specific modules, plugins, components and themes that various websites powered by content management systems are running.
* [Netsparker Web Application Security Scanner](https://www.netsparker.com/) - Commercial web application security scanner to automatically find many different types of security flaws.
* [Nikto](https://cirt.net/nikto2) - Noisy but fast black box web server and web application vulnerability scanner.
* [Observatory](https://observatory.mozilla.org/) - Free online web scanning utility.
* [OWASP Zed Attack Proxy (ZAP)](https://owasp.org/www-project-zap/) - Feature-rich, scriptable HTTP intercepting proxy and fuzzer for penetration testing web applications.
* [Security Headers](https://securityheaders.com/) - Free online utility for checking a website's HTTP headers for security vulnerabilities.
* [SQLmate](https://github.com/s0md3v/sqlmate) - A friend of sqlmap that identifies sqli vulnerabilities based on a given dork and website (optional).
* [WPScan](https://wpscan.com/wordpress-security-scanner) - Black box WordPress vulnerability scanner.
#### Web Exploitation
* [Browser Exploitation Framework (BeEF)](https://github.com/beefproject/beef) - Command and control server for delivering exploits to commandeered Web browsers.
* [Commix](https://github.com/commixproject/commix) - Automated all-in-one operating system command injection and exploitation tool.
* [Drupwn](https://github.com/immunIT/drupwn/) - Drupal web application exploitation tool.
* [EyeWitness](https://github.com/FortyNorthSecurity/EyeWitness) - Tool to take screenshots of websites, provide some server header info, and identify default credentials if possible.
* [fimap](https://github.com/kurobeats/fimap) - Find, prepare, audit, exploit and even Google automatically for LFI/RFI bugs.
* [FuzzDB](https://github.com/fuzzdb-project/fuzzdb) - Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
* [IIS-Shortname-Scanner](https://github.com/irsdl/IIS-ShortName-Scanner) - Command line tool to exploit the Windows IIS tilde information disclosure vulnerability.
* [Kadabra](https://github.com/D35m0nd142/Kadabra) - Automatic LFI exploiter and scanner.
* [Kadimus](https://github.com/P0cL4bs/Kadimus) - LFI scan and exploit tool.
* [LFISuite](https://github.com/D35m0nd142/LFISuite) - A tool designed to exploit Local File Include vulnerabilities.
* [libformatstr](https://github.com/hellman/libformatstr) - Python script designed to simplify format string exploits.
* [liffy](https://github.com/hvqzao/liffy) - LFI exploitation tool.
* [lyncsmash](https://github.com/nyxgeek/lyncsmash) - A collection of tools to enumerate and attack self-hosted Skype for Business and Microsoft Lync installations
* [NoSQLmap](https://github.com/codingo/NoSQLMap) - Automatic NoSQL injection and database takeover tool.
* [SQLmap](http://sqlmap.org/) - Automated SQL injection and database takeover tool.
* [sqlninja](http://sqlninja.sourceforge.net/) - Automated SQL injection and database takeover tool.
* [sslstrip2](https://github.com/LeonardoNve/sslstrip2) - SSLStrip version to defeat HSTS.
* [sslstrip](https://github.com/moxie0/sslstrip) - Demonstration of the HTTPS stripping attacks.
* [tplmap](https://github.com/epinna/tplmap) - Automatic server-side template injection and Web server takeover tool.
* [VHostScan](https://github.com/codingo/VHostScan) - A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
* [wafw00f](https://github.com/EnableSecurity/wafw00f) - Identifies and fingerprints Web Application Firewall (WAF) products.
* [webscreenshot](https://github.com/maaaaz/webscreenshot) - A simple script to take screenshots from a list of websites.
* [weevely3](https://github.com/epinna/weevely3) - Weaponized web shell.
* [Wordpress Exploit Framework](https://github.com/rastating/wordpress-exploit-framework) - Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.
* [WPSploit](https://github.com/espreto/wpsploit) - Exploit WordPress-powered websites with Metasploit.
#### Network Tools
* [dnstwist](https://github.com/elceef/dnstwist) - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
* [dsniff](https://www.monkey.org/~dugsong/dsniff/) - Collection of tools for network auditing and pentesting.
* [enumdb](https://github.com/m8r0wn/enumdb) - MySQL and MSSQL bruteforce utility
* [FireAway](https://github.com/tcstool/Fireaway/) - Firewall audit and security bypass tool.
* [impacket](https://github.com/SecureAuthCorp/impacket) - Collection of Python classes for working with network protocols.
* [Intercepter-NG](http://sniff.su/) - Multifunctional network toolkit.
* [kerbrute](https://github.com/ropnop/kerbrute) - A tool to perform Kerberos pre-auth bruteforcing.
* [Low Orbit Ion Cannon (LOIC)](https://github.com/NewEraCracker/LOIC/) - Open source network stress testing tool.
* [Ncat](https://nmap.org/ncat/) - TCP/IP command line utility supporting multiple protocols.
* [netcut](https://arcai.com/netcut/) - ARP based utility for discovering and spoofing MAC addresses and enabling/disabling network connectivity on network devices.
* [Network-Tools.com](https://network-tools.com/) - Website offering an interface to numerous basic network utilities like `ping`, `traceroute`, `whois`, and more.
* [patator](https://github.com/lanjelot/patator) - Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
* [pig](https://github.com/rafael-santiago/pig) - GNU/Linux packet crafting tool.
* [Praeda](http://h.foofus.net/?page_id=218) - Automated multi-function printer data harvester for gathering usable data during security assessments.
* [Printer Exploitation Toolkit (PRET)](https://github.com/RUB-NDS/PRET) - Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.
* [routersploit](https://github.com/threat9/routersploit) - Open source exploitation framework similar to Metasploit but dedicated to embedded devices.
* [scapy](https://github.com/secdev/scapy) - Python-based interactive packet manipulation program & library.
* [Sockstress](https://github.com/defuse/sockstress) - TCP based DoS utility.
* [SPARTA](https://sparta.secforce.com/) - Graphical interface offering scriptable, configurable access to existing network infrastructure scanning and enumeration tools.
* [Spyse](https://spyse.com/) - Web research services that scan the entire internet using OSINT, to simplify the investigation of infrastructure and attack surfaces.
* [Spyse.py](https://github.com/zeropwn/spyse.py) - Python API wrapper and command-line client for the tools hosted on spyse.com.
* [THC Hydra](https://github.com/vanhauser-thc/thc-hydra) - Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.
* [UFONet](https://github.com/epsylon/ufonet/) - Layer 7 DDoS/DoS tool.
* [Zarp](https://github.com/hatRiot/zarp/) - Multipurpose network attack tool, both wired and wireless.
#### Protocol Analyzers and Sniffers
* [tcpdump/libpcap](https://www.tcpdump.org/) - Common packet analyzer that runs under the command line.
* [Wireshark](https://www.wireshark.org/) - Widely-used graphical, cross-platform network protocol analyzer.
* [Yersinia](https://tools.kali.org/vulnerability-analysis/yersinia) - Packet and protocol analyzer with MITM capability.
* [Fiddler](https://www.telerik.com/fiddler) - Cross platform packet capturing tool for capturing HTTP/HTTPS traffic.
* [netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) - Swiss army knife for Linux network sniffing.
* [Dshell](https://github.com/USArmyResearchLab/Dshell) - Network forensic analysis framework.
* [Chaosreader](http://chaosreader.sourceforge.net/) - Universal TCP/UDP snarfing tool that dumps session data from various protocols.
#### Proxies and MITM Tools
* [BetterCAP](https://www.bettercap.org/) - Modular, portable and easily extensible MITM framework.
* [dnschef](https://github.com/iphelix/dnschef) - Highly configurable DNS proxy for pentesters.
* [Ettercap](https://www.ettercap-project.org/) - Comprehensive, mature suite for machine-in-the-middle attacks.
* [evilgrade](https://github.com/infobyte/evilgrade) - Modular framework to take advantage of poor upgrade implementations by injecting fake updates.
* [mallory](https://github.com/justmao945/mallory) - HTTP/HTTPS proxy over SSH
* [MITMf](https://github.com/byt3bl33d3r/MITMf) - Multipurpose man-in-the-middle framework.
- e.g. `mitmf --arp --spoof -i eth0 --gateway 192.168.1.1 --targets 192.168.1.20 --inject --js-url http://192.168.1.137:3000/hook.js`
* [mitmproxy](https://github.com/mitmproxy/mitmproxy) - Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
* [Morpheus](https://github.com/r00t-3xp10it/morpheus) - Automated ettercap TCP/IP Hijacking tool.
* [Responder-Windows](https://github.com/lgandx/Responder-Windows) - Windows version of the above NBT-NS/LLMNR/MDNS poisoner.
* [Responder](https://github.com/lgandx/Responder) - Open source NBT-NS, LLMNR, and MDNS poisoner.
* [SSH MITM](https://github.com/jtesta/ssh-mitm) - Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.
#### Wireless Network Tools
* [Aircrack-ng](https://www.aircrack-ng.org/) - Set of tools for auditing wireless networks.
* [BetterCAP](https://www.bettercap.org/) - Wifi, Bluetooth LE, and HID reconnaissance and MITM attack framework, written in Go.
* [Fluxion](https://github.com/FluxionNetwork/fluxion) - Suite of automated social engineering based WPA attacks.
* [Kismet](https://www.patreon.com/kismetwireless) - Wireless network discovery tool.
* [MANA Toolkit](https://github.com/sensepost/mana) - Rogue AP and man-in-the-middle utility.
* [NetStumbler](https://www.netstumbler.com/downloads/) - WLAN scanning tool.
* [WiFi Pumpkin](https://github.com/P0cL4bs/wifipumpkin3) - All in one Wi-Fi exploitation and spoofing utility.
* [wifi-pickle](https://github.com/GoVanguard/wifi-pickle) - Fake access point attacks.
* [Wifite](https://github.com/derv82/wifite) - Automated wireless attack tool.
#### Transport Layer Security Tools
* [tlssled](https://tools.kali.org/information-gathering/tlssled) - Comprehensive TLS/SSL testing suite.
* [SSLscan](https://github.com/rbsec/sslscan) - Quick command line SSL/TLS analyzer.
* [SSLyze](https://github.com/nabla-c0d3/sslyze) - Fast and comprehensive TLS/SSL configuration analyzer to help identify security mis-configurations.
* [SSL Labs](https://www.ssllabs.com/ssltest/) - Online TLS/SSL testing suite for revealing supported TLS/SSL versions and ciphers.
* [crackpkcs12](https://github.com/crackpkcs12/crackpkcs12) - Multithreaded program to crack PKCS#12 files (`.p12` and `.pfx` extensions), such as TLS/SSL certificates.
* [spoodle](https://github.com/avicoder/spoodle) - Mass subdomain + POODLE vulnerability scanner.
* [SMTP TLS Checker](https://luxsci.com/smtp-tls-checker) - Online TLS/SSL testing suite for SMTP servers.
#### Cryptography
* [FeatherDuster](https://github.com/nccgroup/featherduster) - Analysis tool for discovering flaws in cryptography.
* [rsatool](https://github.com/ius/rsatool) - Tool for calculating RSA and RSA-CRT parameters.
* [xortool](https://github.com/hellman/xortool/) - XOR cipher analysis tool.
#### Post-Exploitation
* [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec/) - Multipurpose post-exploitation suite containing many plugins.
* [DBC2](https://github.com/Arno0x/DBC2/) - Multipurpose post-exploitation tool.
* [Empire](https://github.com/EmpireProject/Empire/) - PowerShell based (Windows) and Python based (Linux/OS X) post-exploitation framework.
* [EvilOSX](https://github.com/Marten4n6/EvilOSX/) - macOS backdoor with docker support.
* [Fathomless](https://github.com/xor-function/fathomless) - A collection of post-exploitation tools for both Linux and Windows systems.
* [FruityC2](https://github.com/xtr4nge/FruityC2/) - Open source, agent-based post-exploitation framework with a web UI for management.
* [Koadic](https://github.com/zerosum0x0/koadic) - Windows post-exploitation rootkit, primarily utilizing Windows Script Host.
* [PlugBot](https://www.redteamsecure.com/research/plugbot-hardware-botnet-research) - Can be installed onto an ARM device for Command & Control use and more.
* [Portia](https://github.com/milo2012/portia) - Automated post-exploitation tool for lateral movement and privilege escalation.
* [ProcessHider](https://github.com/M00nRise/ProcessHider/) - Post-exploitation tool for hiding processes.
* [Pupy](https://github.com/n1nj4sec/pupy/) - Open source cross-platform post-exploitation tool, mostly written in Python.
* [RemoteRecon](https://github.com/xorrior/RemoteRecon/) - Post-exploitation utility making use of multiple agents to perform different tasks.
* [TheFatRat](https://github.com/Exploit-install/TheFatRat) - Tool designed to generate remote access trojans (backdoors) with msfvenom.arch-project/) - Can be installed onto an ARM device for Command & Control use and more.
* [p0wnedShell](https://github.com/Cn33liz/p0wnedShell) - PowerShell based post-exploitation utility utilizing .NET.
* [poet](https://github.com/offlinemark/poet) - Simple but multipurpose post-exploitation tool.
#### Exfiltration Tools
* [Data Exfiltration Toolkit (DET)](https://github.com/PaulSec/DET) - Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.
* [dnsteal](https://github.com/m57/dnsteal/) - Fake DNS server for stealthily extracting files.
* [HTTPTunnel](https://github.com/larsbrinkhoff/httptunnel) - Tunnel data over pure HTTP GET/POST requests.
* [Iodine](https://github.com/yarrick/iodine) - Tunnel IPv4 data through a DNS server; useful for exfiltration from networks where Internet access is firewalled, but DNS queries are allowed.
* [MailSniper](https://github.com/dafthack/MailSniper) - Search through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.).
* [mallory](https://github.com/justmao945/mallory) - HTTP/HTTPS proxy over SSH.
* [mimikatz](https://blog.gentilkiwi.com/mimikatz) - Credentials extraction tool for Windows operating system.
* [mimikittenz](https://github.com/orlyjamie/mimikittenz) - Post-exploitation PowerShell tool for extracting data from process memory.
* [PANHunt](https://github.com/Dionach/PANhunt) - Search file systems for credit cards.
* [PassHunt](https://github.com/Dionach/PassHunt) - Search file systems for passwords.
* [ptunnel-ng](https://github.com/lnslbrty/ptunnel-ng) - Tunnel IPv4 traffic through ICMP pings; slow but stealthy when normal IP exfiltration traffic is blocked.
* [pwnat](https://github.com/samyk/pwnat) - Punches holes in firewalls and NATs.
* [spYDyishai](https://github.com/Night46/spYDyishai/) - Local Google credentials exfiltration tool, written in Python.
* [tgcd](http://tgcd.sourceforge.net/) - Simple Unix network utility to extend the accessibility of TCP/IP based network services beyond firewalls.
#### Static Analyzers
* [Androbugs-Framework](https://github.com/AndroBugs/AndroBugs_Framework/) - Android program vulnerability analysis tool.
* [Androwarn](https://github.com/maaaaz/androwarn/) - Android static code analysis tool.
* [APKinspector](https://github.com/honeynet/apkinspector/) - Android APK analysis tool with GUI.
* [bandit](https://pypi.org/project/bandit/) - Security oriented static analyser for python code.
* [Brakeman](https://github.com/presidentbeef/brakeman) - Static analysis security vulnerability scanner for Ruby on Rails applications.
* [Codebeat (open source)](https://codebeat.co/open-source/) - Open source implementation of commercial static code analysis tool with GitHub integration.
* [Codelyzer](https://github.com/mgechev/codelyzer) - A set of tslint rules for static code analysis of Angular TypeScript projects. You can run the static code analyzer over web apps, NativeScript, Ionic, etc.
* [cppcheck](http://cppcheck.sourceforge.net/) - Extensible C/C++ static analyzer focused on finding bugs.
* [FindBugs](http://findbugs.sourceforge.net/) - Free software static analyzer to look for bugs in Java code.
* [Icewater](https://github.com/SupportIntelligence/Icewater) - 16,432 free Yara rules.
* [Joint Advanced Defense Assessment for Android Applications (JAADAS)](https://github.com/flankerhqd/JAADAS/) - Multipurpose Android static analysis tool.
* [OWASP Dependency Check](https://owasp.org/www-project-dependency-check/) - Open source static analysis tool that enumerates dependencies used by Java and .NET software code (with experimental support for Python, Ruby, Node.js, C, and C++) and lists security vulnerabilities associated with the depedencies.
* [pefile](https://github.com/erocarrera/pefile) - Static portable executable file inspector.
* [Progpilot](https://github.com/designsecurity/progpilot) - Static security analysis tool for PHP code.
* [Quick Android Review Kit (Qark)](https://github.com/linkedin/qark/) - Tool for finding security related Android application vulnerabilities.
* [ShellCheck](https://github.com/koalaman/shellcheck) - Static code analysis tool for shell script.
* [smalisca](https://github.com/dorneanu/smalisca) - Android static code analysis tool.
* [sobelow](https://github.com/nccgroup/sobelow) - Security-focused static analysis for the Phoenix Framework.
* [truffleHog](https://github.com/dxa4481/truffleHog) - Git repo scanner.
* [Veracode](https://www.veracode.com/) - Commercial cloud platform for static code analysis, dynamic code analysis, dependency/plugin analysis, and more.
* [VisualCodeGrepper](https://github.com/nccgroup/VCG) - Open source static code analysis tool with support for Java, C, C++, C#, PL/SQL, VB, and PHP. VisualCodeGrepper also conforms to OWASP best practices.
* [Yara](https://github.com/VirusTotal/yara) - Static pattern analysis tool for malware researchers.
#### Dynamic Analyzers
* [AndroidHooker](https://github.com/AndroidHooker/hooker/) - Dynamic Android application analysis tool.
* [Androl4b](https://github.com/sh4hin/Androl4b/) - Android security virtual machine based on Ubuntu-MATE for reverse engineering and malware analysis.
* [Cheat Engine](https://www.cheatengine.org/) - Memory debugger and hex editor for running applications.
* [ConDroid](https://github.com/JulianSchuette/ConDroid) - Android dynamic application analysis tool.
* [Cuckoo](https://github.com/cuckoosandbox) - Automated dynamic malware analysis tool.
* [DECAF](https://github.com/decaf-project/DECAF) - Dynamic code analysis tool.
* [droidbox](https://github.com/pjlantz/droidbox) - Dynamic malware analysis tool for Android, extension to DECAF.
* [drozer](https://github.com/FSecureLABS/drozer) - Android platform dynamic vulnerability assessment tool.
* [idb](https://www.idbtool.com/) - iOS app security analyzer.
* [Inspeckage](https://github.com/ac-pm/Inspeckage) - Dynamic Android package analysis tool.
#### Hex Editors
* [Cheat Engine](https://www.cheatengine.org/) - Memory debugger and hex editor for running applications.
* [Frhed](http://frhed.sourceforge.net/en/) - Binary file editor for Windows.
* [HexEdit.js](https://hexed.it/) - Browser-based hex editing.
* [Hexinator](https://hexinator.com/) - World's finest (proprietary, commercial) Hex Editor.
#### File Format Analysis Tools
* [Hachoir](https://hachoir.readthedocs.io/en/latest/index.html) - Python library to view and edit a binary stream as tree of fields and tools for metadata extraction.
* [Kaitai Struct](https://kaitai.io/) - File formats and network protocols dissection language and web IDE, generating parsers in C++, C#, Java, JavaScript, Perl, PHP, Python, Ruby.
* [Veles](https://codisec.com/veles/) - Binary data visualization and analysis tool.
#### Anti-Virus Evasion Tools
* [AntiVirus Evasion Tool (AVET)](https://github.com/govolution/avet) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.
* [Hyperion](https://nullsecurity.net/tools/binary.html) - Runtime encryptor for 32-bit portable executables ("PE `.exe`s").
* [peCloak.py](https://www.securitysift.com/pecloak-py-an-experiment-in-av-evasion/) - Automates the process of hiding a malicious Windows executable from antivirus (AV) detection.
* [peCloakCapstone](https://github.com/v-p-b/peCloakCapstone) - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.
* [Shellter](https://www.shellterproject.com/) - Dynamic shellcode injection tool, and the first truly dynamic PE infector ever created.
* [SigThief](https://github.com/secretsquirrel/SigThief) - Stealing signatures to evade AV.
* [UniByAv](https://github.com/Mr-Un1k0d3r/UniByAv) - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.
* [Windows-SignedBinary](https://github.com/vysecurity/Windows-SignedBinary) - AV evasion tool for binary files.
#### Hash Cracking Tools
* [CeWL](https://digi.ninja/projects/cewl.php) - Generates custom wordlists by spidering a target's website and collecting unique words.
* [CrackStation](https://crackstation.net/) - Online password cracker.
* [Hashcat](http://hashcat.net/hashcat/) - Fast hash cracking utility with support for most known hashes as well as OpenCL and CUDA acceleration.
* [John the Ripper Jumbo edition](https://github.com/openwall/john) - Community enhanced version of John the Ripper.
* [John the Ripper](https://www.openwall.com/john/) - Fast password cracker.
* [JWT Cracker](https://github.com/lmammino/jwt-cracker) - Simple HS256 JWT token brute force cracker.
* [Mentalist](https://github.com/sc0tfree/mentalist) - Unique GUI based password wordlist generator compatible with CeWL and John the Ripper.
* [JPassword Recovery Tool](https://sourceforge.net/projects/jpassrecovery/) - RAR bruteforce cracker. Formery named RAR Crack.
#### Windows Utilities
* [Bloodhound](https://github.com/BloodHoundAD/BloodHound/wiki) - Graphical Active Directory trust relationship explorer.
* [Commentator](https://github.com/clr2of8/Commentator) - PowerShell script for adding comments to MS Office documents, and these comments can contain code to be executed.
* [DeathStar](https://github.com/byt3bl33d3r/DeathStar) - Python script that uses Empire's RESTful API to automate gaining Domain Admin rights in Active Directory environments.
* [Empire](https://www.powershellempire.com/) - Pure PowerShell post-exploitation agent.
* [Fibratus](https://github.com/rabbitstack/fibratus) - Tool for exploration and tracing of the Windows kernel.
* [GetVulnerableGPO](https://github.com/gpoguy/GetVulnerableGPO/) - PowerShell based utility for finding vulnerable GPOs.
* [Headstart](https://github.com/GoVanguard/script-win-privescalate-headstart) - Lazy man's Windows privilege escalation tool utilizing PowerSploit.
* [Hyena](https://www.systemtools.com/hyena/download.htm) - NetBIOS exploitation.
* [Luckystrike](https://github.com/curi0usJack/luckystrike) - PowerShell based utility for the creation of malicious Office macro documents.
* [Magic Unicorn](https://github.com/trustedsec/unicorn) - Shellcode generator for numerous attack vectors, including Microsoft Office macros, PowerShell, HTML applications (HTA), or `certutil` (using fake certificates).
* [Mimikatz](https://blog.gentilkiwi.com/mimikatz) - Credentials extraction tool for Windows operating system.
* [PowerSploit](https://github.com/PowerShellMafia/PowerSploit) - PowerShell Post-Exploitation Framework.
* [PSKernel-Primitives](https://github.com/FuzzySecurity/PSKernel-Primitives/) - Exploiting primitives for PowerShell.
* [Redsnarf](https://github.com/nccgroup/redsnarf) - Post-exploitation tool for retrieving password hashes and credentials from Windows workstations, servers, and domain controllers.
* [Rubeus](https://github.com/GhostPack/Rubeus) - Rubeus is a C# toolset for raw Kerberos interaction and abuses.
* [Sysinternals Suite](https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite) - The Sysinternals Troubleshooting Utilities.
* [Windows Credentials Editor](https://www.ampliasecurity.com/research/windows-credentials-editor/) - Inspect logon sessions and add, change, list, and delete associated credentials, including Kerberos tickets.
* [Windows Exploit Suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester) - Suggests Windows exploits based on patch levels.
#### GNU Linux Utilities
* [Linus](https://cisofy.com/lynis/) - Security auditing tool for Linux and macOS.
* [Linux Exploit Suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.
* [Mempodipper](https://www.exploit-db.com/exploits/18411/) - Linux Kernel 2.6.39 < 3.2.2 local privilege escalation script.
* [vuls](https://github.com/future-architect/vuls) - Linux/FreeBSD agentless vulnerability scanner.
#### macOS Utilities
* [Bella](https://github.com/khaleds-brain/Bella) - Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS.
* [Linus](https://cisofy.com/lynis/) - Security auditing tool for Linux and macOS.
#### Social Engineering Tools
* [Beelogger](https://github.com/4w4k3/BeeLogger) - Tool for generating keylooger.
* [Catphish](https://github.com/ring0lab/catphish) - Tool for phishing and corporate espionage written in Ruby.
* [Evilginx](https://github.com/kgretzky/evilginx2) - MITM attack framework used for phishing credentials and session cookies from any Web service
* [Gophish](https://getgophish.com/) - Open-Source Phishing Framework
* [King Phisher](https://github.com/rsmusllp/king-phisher) - Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.
* [Lucy Phishing Server](https://lucysecurity.com/) - (commercial) tool to perform security awareness trainings for employees including custom phishing campaigns, malware attacks etc. Includes many useful attack templates as well as training materials to raise security awareness.
* [PhishingFrenzy](https://www.phishingfrenzy.com/) - Phishing Frenzy is an Open Source Ruby on Rails application that is leveraged by penetration testers to manage email phishing campaigns.
* [SET](https://github.com/trustedsec/social-engineer-toolkit) - The Social-Engineer Toolkit from TrustedSec
* [wifiphisher](https://github.com/wifiphisher/wifiphisher) - Automated phishing attacks against Wi-Fi networks
* [Canary Tokens](https://canarytokens.org/generate#) - Generate tokens to automatically alert users when triggered.
#### Anonymity Tools
* [Freenet](https://freenetproject.org/) - Freenet is a peer-to-peer platform for censorship-resistant communication and publishing.
* [I2P](https://geti2p.net/en/) - The Invisible Internet Project.
* [OnionScan](https://onionscan.org/) - Tool for investigating the Dark Web by finding operational security issues introduced by Tor hidden service operators.
* [Tor](https://www.torproject.org/) - Free software and onion routed overlay network that helps you defend against traffic analysis.
* [What Every Browser Knows About You](http://webkay.robinlinus.com/) - Comprehensive detection page to test your own Web browser's configuration for privacy and identity leaks.
#### Reverse Engineering Tools
* [Balbuzard](https://github.com/decalage2/balbuzard) - Malware analysis tool with reverse obfuscation.
* [binwalk](https://github.com/ReFirmLabs/binwalk) - Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.
* [Capstone](https://www.capstone-engine.org/) - Lightweight multi-platform, multi-architecture disassembly framework.
* [Cuckoo Modified API](https://github.com/keithjjones/cuckoo-modified-api) - Python API for Cuckoo Modified.
* [Cuckoo Modified](https://github.com/brad-sp/cuckoo-modified) - Fork of Cuckoo Sandbox with multiple improvements.
* [Cuckoo Sandbox](https://cuckoosandbox.org/) - Online malware scanner.
* [de4dot](https://github.com/de4dot/de4dot) - .NET deobfuscator and unpacker.
* [dnSpy](https://github.com/dnSpy/dnSpy) - Tool to reverse engineer .NET assemblies.
* [Dovehawk] (https://github.com/tylabs/dovehawk) - Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
* [DRAKVUF](https://github.com/tklengyel/drakvuf) - Virtualization based agentless black-box binary analysis system.
* [Evan's Debugger](http://codef00.com/projects#debugger) - OllyDbg-like debugger for GNU/Linux.
* [FireEye Labs Obfuscated String Solver (FLOSS)](https://github.com/fireeye/flare-floss) - Malware deobfuscator.
* [firmware.re](http://firmware.re/) - Firmware analyzier.
* [HaboMalHunter](https://github.com/Tencent/HaboMalHunter) - Automated malware analysis tool for Linux ELF files.
* [Hybrid Analysis](https://www.hybrid-analysis.com/) - Online malware scanner.
* [Immunity Debugger](https://debugger.immunityinc.com/) - Powerful way to write exploits and analyze malware.
* [Interactive Disassembler (IDA Pro)](https://www.hex-rays.com/products/ida/) - Proprietary multi-processor disassembler and debugger for Windows, GNU/Linux, or macOS; also has a free version, [IDA Free](https://www.hex-rays.com/products/ida/support/download_freeware/).
* [Malaice.io](https://github.com/maliceio/malice) - Open source malware analyzer.
* [Malheur](https://github.com/rieck/malheur) - Automated sandbox analysis of malware behavior.
* [Medusa](https://github.com/wisk/medusa) - Open source, cross-platform interactive disassembler.
* [Metadefender](https://metadefender.opswat.com/#!/) - Online file and hash analyzer.
* [NoMoreXOR](https://github.com/hiddenillusion/NoMoreXOR) - Frequency analysis tool for trying to crack 256-bit XOR keys.
* [OllyDbg](http://www.ollydbg.de/) - x86 debugger for Windows binaries that emphasizes binary code analysis.
* [PackerAttacker](https://github.com/BromiumLabs/PackerAttacker) - Generic hidden code extractor for Windows malware.
* [PacketTotal](https://packettotal.com/) - Online pcap file analyzer.
* [peda](https://github.com/longld/peda) - Python Exploit Development Assistance for GDB.
* [plasma](https://github.com/plasma-disassembler/plasma) - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
* [PyREBox](https://github.com/Cisco-Talos/pyrebox) - Python scriptable Reverse Engineering sandbox by Cisco-Talos.
* [Radare2](https://www.radare.org/r/index.html) - Open source, crossplatform reverse engineering framework.
* [Ragpicker](https://github.com/robbyFux/Ragpicker) - Malware analysis tool.
* [rVMI](https://github.com/fireeye/rVMI) - Debugger on steroids; inspect userspace processes, kernel drivers, and preboot environments in a single tool.
* [Sandboxed Execution Environment](https://github.com/F-Secure/see) - Framework for building sandboxed malware execution environments.
* [unXOR](https://github.com/tomchop/unxor/) - Tool that guesses XOR keys using known plaintext attacks.
* [VirtualDeobfuscator](https://github.com/jnraber/VirtualDeobfuscator) - Reverse engineering tool for virtualization wrappers.
* [VirusTotal](https://www.virustotal.com/gui/home/upload) - Online malware scanner.
* [Voltron](https://github.com/snare/voltron) - Extensible debugger UI toolkit written in Python.
* [WDK/WinDbg](https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk) - Windows Driver Kit and WinDbg.
* [x64dbg](https://x64dbg.com/#start) - Open source x64/x32 debugger for windows.
* [xortool](https://github.com/hellman/xortool) - Tool for guessing XOR keys.
#### Side-channel Tools
* [ChipWhisperer](https://rtfm.newae.com/) - Complete open-source toolchain for side-channel power analysis and glitching attacks.
#### Forensic Tools
* [Appliance for Digital Investigation and Analysis (ADIA)](https://forensics.cert.org/#ADIA) - VMware virtual appliance for digital forensics.
* [Autopsy](https://www.sleuthkit.org/autopsy/) - Graphical interface to The Sleuth Kit.
* [binwalk](https://github.com/ReFirmLabs/binwalk) - Firmware analysis tool.
* [bulk_extractor](https://github.com/simsong/bulk_extractor/) - Command line tool for extracting email addresses, credit card numbers, URLs, and other types of information from many types of files, including compressed files and images.
* [CAINE](https://www.caine-live.net/index.html) - Italian live Linux distro for digital forensics.
* [chkrootkit](http://www.chkrootkit.org/) - Checks local Linux systems for rootkits.
* [Chrome URL Dumper](https://github.com/eLoopWoo/chrome-url-dumper) - Python based agent that gathers and dumps Chrome history (URLs).
* [DEFT Linux](http://na.mirror.garr.it/mirrors/deft/) - Linux distro for digital forensics analysis.
* [Digital Forensics Framework (DFF)](https://tools.kali.org/forensics/dff) - Open source digital forensics framework with GUI.
* [docker-explorer](https://github.com/google/docker-explorer) - Docker file system forensic tool.
* [Dumpzilla](https://www.dumpzilla.org/) - Python based application for dumping information from Firefox, Iceweasel, and Seamonkey browsers.
* [extundelete](http://extundelete.sourceforge.net/) - ext3 and ext4 file recovery tool.
* [Fast Evidence Collector Toolkit (FECT)](https://github.com/jipegit/FECT) - Lightweight digital forensics tool.
* [FireEye Labs Obfuscated String Solver (FLOSS)](https://github.com/fireeye/flare-floss/) - Extract obfuscated strings from malware.
* [Foremost](http://foremost.sourceforge.net/) - File recovery tool.
* [GRR Rapid Response](https://github.com/google/grr) - Incident response framework focused on remote live forensics.
* [Hindsight](https://github.com/obsidianforensics/hindsight) - Chrome/Chromium browser forensics tool.
* [IREC](https://binalyze.com/irec/) - All in one evidence collector.
* [Linux Expl0rer](https://github.com/intezer/linux-explorer) - Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask.
* [magneto-malware-scanner](https://github.com/gwillem/magento-malware-scanner) - Malware scanning platform.
* [nightHawk](https://github.com/biggiesmallsAG/nightHawkResponse) - Platform for digital forensics presentation, using Elasticsearch.
* [PALADIN](https://sumuri.com/software/paladin/) - Linux distro for digital forensics.
* [pdf-parser](https://blog.didierstevens.com/my-software/#pdf-parser) - PDF digital forensics software.
* [pdfid](https://blog.didierstevens.com/my-software/#pdfid) - PDF digital forensics software.
* [pdfminer](https://github.com/euske/pdfminer/) - Tool for extracting information from the text of PDF documents.
* [peepdf](https://github.com/jesparza/peepdf) - Python PDF analysis tool.
* [PowerForensics](https://github.com/Invoke-IR/PowerForensics) - PowerShell based digital forensics suite.
* [PSRecon](https://github.com/gfoss/PSRecon/) - Windows based data gathering tool using PowerShell.
* [Regripper](https://forensicswiki.xyz/wiki/index.php?title=Regripper) - Windows Registry data extraction tool.
* [Rekall](http://www.rekall-forensic.com/) - Incident response and forensics tool.
* [SANS Investigative Forensics Toolkit (SIFT)](https://github.com/teamdfir/sift) - Linux VM for digital forensics.
* [SIFT Workstation](https://digital-forensics.sans.org/community/downloads) - Linux distro (with optional VM) for digital forensics.
* [The Sleuth Kit](https://www.sleuthkit.org/sleuthkit/) - Collection of command line digital forensic utilities for investigating disk images, volume and file system data, and more.
#### Memory Analysis
* [Evolve](https://github.com/JamesHabben/evolve) - Web interface for Volatility advanced memory forensics framework.
* [inVtero.net](https://github.com/ShaneK2/inVtero.net) - Windows x64 memory analysis tool.
* [Linux Memory Extractor (LiME)](https://github.com/504ensicsLabs/LiME) - A Loadable Kernel Module (LKM) allowing for volatile memory extraction of Linux-based systems.
* [Memoryze](https://www.fireeye.com/services/freeware/memoryze.html) - Memory forensics software.
* [Microsoft User Mode Process Dumping](https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/user-mode-dump-files) - Dumps any running Win32 processes memory image on the fly.
* [PMDump](https://vidstromlabs.com/freetools/pmdump/) - Tool for dumping memory contents of a process without stopping the process.
* [Rekall](http://www.rekall-forensic.com/) - Open source tool and library for the extraction of digital artifacts from volatile memory, RAM, samples.
* [Responder PRO](https://www.gosecure.net/responder-pro) - Commercial memory analysis software.
* [Volatility](https://github.com/volatilityfoundation/volatility) - Advanced memory forensics framework.
* [VolatilityBot](https://github.com/mkorman90/VolatilityBot) - Automation tool utilizing Volatility.
* [VolDiff](https://github.com/aim4r/VolDiff) - Malware Memory Footprint Analysis based on Volatility.
* [WindowsSCOPE](https://www.windowsscope.com/) - Commercial memory forensics software for Windows systems.
#### Memory Imaging Tools
* [Belkasoft Live RAM Capturer](https://belkasoft.com/ram-capturer) - A tiny free forensic tool to reliably extract the entire content of the computer’s volatile memory – even if protected by an active anti-debugging or anti-dumping system.
* [Linux Memory Grabber](https://github.com/halpomeranz/lmg/) - A script for dumping Linux memory and creating Volatility profiles.
* [Magnet RAM Capture](https://www.magnetforensics.com/resources/magnet-ram-capture/) - Magnet RAM Capture is a free imaging tool designed to capture the physical memory of a suspect’s computer. Supports recent versions of Windows.
* [OSForensics](https://www.osforensics.com/) - OSForensics can acquire live memory on 32bit and 64bit systems. A dump of an individual process’s memory space or physical memory dump can be done.
#### Incident Response
* [APT Simulator](https://github.com/NextronSystems/APTSimulator) - Windows Batch Script that makes a system appear compromised.
* [Atomic Red Team](https://atomicredteam.io/) - Set of premade tests to evaluate security posture.
* [AutoTTP](https://github.com/jymcheong/AutoTTP) - Automated Tactics Techniques & Procedures, for re-issuing complex tasks.
* [Belkasoft Evidence Center](https://belkasoft.com/x) - Commercial incident response suite.
* [Blue Team Training Toolkit](https://www.bt3.no/) - Toolkit for preparing blue teams for defensive security.
* [Caldera](https://github.com/mitre/caldera) - Automated adversary emulation system.
* [CIRTKit](https://github.com/opensourcesec/CIRTKit) - Open source incident response framework.
* [Cyber Triage](https://www.cybertriage.com/) - Commercial incident response suite.
* [Doorman](https://github.com/mwielgoszewski/doorman) - Osquery fleet manager.
* [DumpsterFire Toolset](https://github.com/TryCatchHCF/DumpsterFire) - Security event simulator.
* [Falcon Orchestrator](https://github.com/CrowdStrike/falcon-orchestrator) - Windows based incident management framework.
* [GRR Rapid Response](https://github.com/google/grr) - Python based incident mangement framework.
* [Kolide Fleet](https://github.com/kolide/fleet) - Open source osquery manager.
* [LimaCharlie](https://github.com/refractionpoint/limacharlie) - Cross-platform open source endpoint detection and response solution.
* [Metta](https://github.com/uber-common/metta) - Open source adversary simulation.
* [MIG - Mozilla InvestiGator](http://mozilla.github.io/mig/) - Endpoint inspection.
* [MozDef](https://github.com/mozilla/MozDef) - Mozilla defense platform.
* [Network Flight Simulator](https://github.com/alphasoc/flightsim) - Utility for generating malicious network traffic.
* [Osquery](https://osquery.io/) - Multiplatform framework for querying operating systems similar to SQL queries.
* [Red Team Automation (RTA)](https://github.com/endgameinc/RTA) - Adversary simulation framework.
* [RedHunt OS](https://github.com/redhuntlabs/RedHunt-OS) - Purposely vulnerable Linux VM.
* [Redline](https://www.fireeye.com/services/freeware/redline.html) - Investigative tool able to scan processes, memory, file system metadata, and more.
* [Zentral](https://github.com/zentralopensource/zentral) - Monitors system events using osquery.
#### Honeypot Tools
* [bap - Basic Authentication honeyPot](https://github.com/bjeborn/basic-auth-pot/) - HTTP basic authentication web service honeypot.
* [conpot](https://github.com/mushorg/conpot/) - ICS/SCADA honeypot.
* [Cowrie Docker](https://github.com/cowrie/docker-cowrie) - Docker version of Cowrie, SSH/Telnet honeypot.
* [Cowrie](https://github.com/cowrie/cowrie/) - SSH/Telnet honeypot.
* [dionaea](https://github.com/DinoTools/dionaea) - Multipurpose honeypot.
* [elastichoney](https://github.com/jordan-wright/elastichoney/) - Elasticsearch honeypot.
* [glastopf](https://github.com/mushorg/glastopf/) - Python based web application honeypot.
* [glutton](https://github.com/mushorg/glutton/) - Multipurpose honeypot.
* [Modern Honey Network (mhn)](https://github.com/pwnlandia/mhn) - Multipurpose honeypot with centralized management and many integrations.
* [MongoDB-HoneyProxy](https://github.com/Plazmaz/MongoDB-HoneyProxy/) - MongoDB honeypot.
* [MysqlPot](https://github.com/schmalle/MysqlPot/) - MySQL honeypot.
* [Nodepot](https://github.com/schmalle/Nodepot/) - NodeJS web application honeypot.
* [Nosqlpot](https://github.com/torque59/nosqlpot/) - NoSQL honeypot.
* [phpmyadmin_honeypot](https://github.com/gfoss/phpmyadmin_honeypot/) - PHPMyAdmin honeypot.
* [Servletpot](https://github.com/schmalle/Servletpot/) - Web application honeypot written in Java, making use of Apache HttpClient libraries, MySQL connector, Cassandra connector.
* [Shadow Daemon](https://github.com/zecure/shadowd/) - Collection of tools to detect, record, and prevent attacks on web applications.
* [smart-honeypot](https://github.com/freak3dot/smart-honeypot/) - PHP based honeypot.
* [SpamScope](https://github.com/SpamScope/spamscope/) - Spam analysis tool.
* [Thug](https://github.com/buffer/thug/) - Python based honeyclient tool.
* [Wordpot](https://github.com/gbrindisi/wordpot) - WordPress honeypot.
* [wp-smart-honeypot](https://github.com/freak3dot/wp-smart-honeypot/) - WordPress plugin and honeypot designed to reduce comment spam.
#### Monitoring and IDS-IPS
* [AIEngine](https://bitbucket.org/camp0/aiengine/src/master/) - Very advanced NIDS.
* [Elastic Stack](https://www.elastic.co/products/) - Also known as the ELK stack, the combination of Elasticsearch, Logstash, and Kibana, for monitoring and logging.
* [OSSEC](https://www.ossec.net/) - Open source HIDS.
* [Security Onion](https://github.com/Security-Onion-Solutions/security-onion) - Linux distro for monitoring.
* [Snort](https://www.snort.org/) - Open source NIPS/NIDS.
* [SSHWATCH](https://github.com/marshyski/sshwatch) - SSH IPS.
* [Suricata](https://suricata-ids.org/) - Open source NIPS/NIDS.
#### Physical Tools
* [LAN Turtle](https://shop.hak5.org/products/lan-turtle) - Covert "USB Ethernet Adapter" that provides remote access, network intelligence gathering, and MITM capabilities when installed in a local network.
* [PCILeech](https://github.com/ufrisk/pcileech) - Uses PCIe hardware devices to read and write from the target system memory via Direct Memory Access (DMA) over PCIe.
* [Poisontap](https://samy.pl/poisontap/) - Siphons cookies, exposes internal (LAN-side) router and installs web backdoor on locked computers.
* [Proxmark3](https://proxmark3.com/) - RFID/NFC cloning, replay, and spoofing toolkit often used for analyzing and attacking proximity cards/readers, wireless keys/keyfobs, and more.
* [USB Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky-deluxe) - Customizable keystroke injection attack platform masquerading as a USB thumbdrive.
* [WiFi Pineapple](https://shop.hak5.org/products/wifi-pineapple) - Wireless auditing and penetration testing platform.
#### Adversary Emulation
* [APTSimulator](https://github.com/NextronSystems/APTSimulator) - A Windows Batch script that uses a set of tools and output files to make a system look as if it was compromised.
* [Atomic Red Team](ART)](https://github.com/redcanaryco/atomic-red-team) - Small and highly portable detection tests mapped to the Mitre ATT&CK Framework.
* [AutoTTP](https://github.com/jymcheong/AutoTTP) - Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers.
* [Blue Team Training Toolkit](BT3)](https://www.bt3.no/) - Software for defensive security training, which will bring your network analysis training sessions, incident response drills and red team engagements to a new level.
* [Caldera](https://github.com/mitre/caldera) - an automated adversary emulation system that performs post-compromise adversarial behavior within Windows Enterprise networks. It generates plans during operation using a planning system and a pre-configured adversary model based on the Adversarial Tactics, Techniques & Common Knowledge](ATT&CK™) project.
* [DumpsterFire](https://github.com/TryCatchHCF/DumpsterFire) - The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations.
* [Metta](https://github.com/uber-common/metta) - An information security preparedness tool to do adversarial simulation.
* [Network Flight Simulator](https://github.com/alphasoc/flightsim) - flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility.
* [Red Team Automation ](RTA)](https://github.com/endgameinc/RTA) - RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.
* [RedHunt-OS](https://github.com/redhuntlabs/RedHunt-OS) - A virtual machine for adversary emulation and threat hunting.
#### All in one Incident Response Tools
* [Belkasoft Evidence Center](https://belkasoft.com/x) - The toolkit will quickly extract digital evidence from multiple sources by analyzing hard drives, drive images, memory dumps, iOS, Blackberry and Android backups, UFED, JTAG and chip-off dumps.
* [CimSweep](https://github.com/PowerShellMafia/CimSweep) - CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
* [CIRTkit](https://github.com/opensourcesec/CIRTKit) - CIRTKit is not just a collection of tools, but also a framework to aid in the ongoing unification of Incident Response and Forensics investigation processes.
* [Cyber Triage](https://www.cybertriage.com/) - Cyber Triage remotely collects and analyzes endpoint data to help determine if it is compromised. It’s agentless approach and focus on ease of use and automation allows companies to respond without major infrastructure changes and without a team of forensics experts. Its results are used to decide if the system should be erased or investigated further.
* [Digital Forensics Framework](https://github.com/arxsys/dff) - DFF is an Open Source computer forensics platform built on top of a dedicated Application Programming Interface. DFF proposes an alternative to the aging digital forensics solutions used today. Designed for simple use and automation, the DFF interface guides the user through the main steps of a digital investigation so it can be used by both professional and non-expert to quickly and easily conduct a digital investigations and perform incident response.
* [Doorman](https://github.com/mwielgoszewski/doorman) - Doorman is an osquery fleet manager that allows remote management of osquery configurations retrieved by nodes. It takes advantage of osquery's TLS configuration, logger, and distributed read/write endpoints, to give administrators visibility across a fleet of devices with minimal overhead and intrusiveness.
* [Envdb](https://github.com/mephux/envdb) - Envdb turns your production, dev, cloud, etc environments into a database cluster you can search using osquery as the foundation. It wraps the osquery process with a cluster node agent that can communicate back to a central location.
* [Falcon Orchestrator](https://github.com/CrowdStrike/falcon-orchestrator) - Falcon Orchestrator by CrowdStrike is an extendable Windows-based application that provides workflow automation, case management and security response functionality.
* [GRR Rapid Response](https://github.com/google/grr) - GRR Rapid Response is an incident response framework focused on remote live forensics. It consists of a python agent client that is installed on target systems, and a python server infrastructure that can manage and talk to the agent.
* [Kolide Fleet](https://github.com/kolide/fleet) - Kolide Fleet is a state of the art host monitoring platform tailored for security experts. Leveraging Facebook's battle-tested osquery project, Kolide delivers fast answers to big questions.
* [Limacharlie](https://github.com/refractionpoint/limacharlie) - an endpoint security platform. It is itself a collection of small projects all working together, and gives you a cross-platform, Windows, OSX, Linux, Android and iOS, low-level environment allowing you to manage and push additional modules into memory to extend its functionality.
* [MIG](http://mozilla.github.io/mig/) - Mozilla Investigator, MIG, is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security.
* [MozDef](https://github.com/mozilla/MozDef) - The Mozilla Defense Platform, MozDef, seeks to automate the security incident handling process and facilitate the real-time activities of incident handlers.
* [nightHawk](https://github.com/biggiesmallsAG/nightHawkResponse) - the nightHawk Response Platform is an application built for asynchronus forensic data presentation using ElasticSearch as the backend. It's designed to ingest Redline collections.
* [Open Computer Forensics Architecture](https://sourceforge.net/projects/ocfa/) - Open Computer Forensics Architecture, OCFA, is another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data.
* [Osquery](https://osquery.io/) - with osquery you can easily ask questions about your Linux and OSX infrastructure. Whether your goal is intrusion detection, infrastructure reliability, or compliance, osquery gives you the ability to empower and inform a broad set of organizations within your company. Queries in the -incident-response pack - help you detect and respond to breaches.
* [Redline](https://www.fireeye.com/services/freeware/redline.html) - provides host investigative capabilities to users to find signs of malicious activity through memory and file analysis, and the development of a threat assessment profile.
* [The Sleuth Kit & Autopsy](https://www.sleuthkit.org/) - The Sleuth Kit is a Unix and Windows based tool which helps in forensic analysis of computers. It comes with various tools which helps in digital forensics. These tools help in analyzing disk images, performing in-depth analysis of file systems, and various other things.
* [TheHive](https://thehive-project.org/) - TheHive is a scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.
* [X-Ways Forensics](https://www.x-ways.net/forensics/) - X-Ways is a forensics tool for Disk cloning and imaging. It can be used to find deleted files and disk analysis.
* [Zentral](https://github.com/zentralopensource/zentral) - combines osquery's powerful endpoint inventory features with a flexible notification and action framework. This enables one to identify and react to changes on OS X and Linux clients.
#### Disk Image Creation Tools
* [AccessData FTK Imager](https://accessdata.com/product-download/?/support/adownloads#FTKImager) - AccessData FTK Imager is a forensics tool whose main purpose is to preview recoverable data from a disk of any kind. FTK Imager can also acquire live memory and paging file on 32bit and 64bit systems.
* [Bitscout](https://github.com/vitaly-kamluk/bitscout) - Bitscout by Vitaly Kamluk helps you build your fully-trusted customizable LiveCD/LiveUSB image to be used for remote digital forensics, or perhaps any other task of your choice. It is meant to be transparent and monitorable by the owner of the system, forensically sound, customizable and compact.
* [GetData Forensic Imager](https://getdataforensics.com/product/fex-imager/) - GetData Forensic Imager is a Windows based program that will acquire, convert, or verify a forensic image in one of the following common forensic file formats.
* [Guymager](https://guymager.sourceforge.io/) - Guymager is a free forensic imager for media acquisition on Linux.
* [Magnet ACQUIRE](https://www.magnetforensics.com/resources/magnet-acquire/) - ACQUIRE by Magnet Forensics allows various types of disk acquisitions to be performed on Windows, Linux, and OS X as well as mobile operating systems.
#### Evidence Collection Tools
* [Bulk_extractor](https://github.com/simsong/bulk_extractor) - bulk_extractor is a computer forensics tool that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures. Because of ignoring the file system structure, the program distinguishes itself in terms of speed and thoroughness.
* [Cold Disk Quick Response](https://github.com/orlikoski/CDQR) - uses a streamlined list of parsers to quickly analyze a forenisic image file, dd, E01, .vmdk, etc, and output nine reports.
* [Ir-rescue](https://github.com/diogo-fernan/ir-rescue) - -ir-rescue - is a Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
* [Live Response Collection](https://www.brimorlabs.com/tools/) - The Live Response collection by BriMor Labs is an automated tool that collects volatile data from Windows, OSX, and -nix based operating systems.
#### Incident Management Tools
* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/xsoar) - Security orchestration tool. Formerly Demisto community edition. Offers full Incident lifecycle management, Incident Closure Reports, team assignments and collaboration, and many integrations to enhance automations, like Active Directory, PagerDuty, Jira and much more.
* [CyberCPR](https://www.cybercpr.com) - A community and commercial incident management tool with Need-to-Know built in to support GDPR compliance while handling sensitive incidents.
* [Cyphon](https://www.cyphon.io/) - Cyphon eliminates the headaches of incident management by streamlining a multitude of related tasks through a single platform. It receives, processes and triages events to provide an all-encompassing solution for your analytic workflow — aggregating data, bundling and prioritizing alerts, and empowering analysts to investigate and document incidents.
* [FIR](https://github.com/certsocietegenerale/FIR/) - Fast Incident Response, FIR, is an cybersecurity incident management platform designed with agility and speed in mind. It allows for easy creation, tracking, and reporting of cybersecurity incidents and is useful for CSIRTs, CERTs and SOCs alike.
* [RTIR](https://bestpractical.com/rtir/) - Request Tracker for Incident Response, RTIR, is the premier open source incident handling system targeted for computer security teams. We worked with over a dozen CERT and CSIRT teams around the world to help you handle the ever-increasing volume of incident reports. RTIR builds on all the features of Request Tracker.
* [SCOT](https://getscot.sandia.gov/) - Sandia Cyber Omni Tracker, SCOT, is an Incident Response collaboration and knowledge capture tool focused on flexibility and ease of use. Our goal is to add value to the incident response process without burdening the user.
* [Threat_note](https://github.com/DefensePointSecurity/threat_note) - A lightweight investigation notebook that allows security researchers the ability to register and retrieve indicators related to their research.
#### Linux Forensics Distributions
* [ADIA](https://forensics.cert.org/#ADIA) - The Appliance for Digital Investigation and Analysis, ADIA, is a VMware-based appliance used for digital investigation and acquisition and is built entirely from public domain software. Among the tools contained in ADIA are Autopsy, the Sleuth Kit, the Digital Forensics Framework, log2timeline, Xplico, and Wireshark. Most of the system maintenance uses Webmin. It is designed for small-to-medium sized digital investigations and acquisitions. The appliance runs under Linux, Windows, and Mac OS. Both i386 32-bit and x86_64 versions are available.
* [CAINE](https://www.caine-live.net/index.html) - The Computer Aided Investigative Environment, CAINE, contains numerous tools that help investigators during their analysis, including forensic evidence collection.
* [CCF-VM](https://github.com/orlikoski/Skadi) - CyLR CDQR Forensics Virtual Machine, CCF-VM: An all-in-one solution to parsing collected data, making it easily searchable with built-in common searches, enable searching of single and multiple hosts simultaneously.
* [DEFT](http://na.mirror.garr.it/mirrors/deft/) - The Digital Evidence & Forensics Toolkit, DEFT, is a Linux distribution made for computer forensic evidence collection. It comes bundled with the Digital Advanced Response Toolkit, DART, for Windows. A light version of DEFT, called DEFT Zero, is also available, which is focused primarily on forensically sound evidence collection.
* [NST - Network Security Toolkit](https://sourceforge.net/projects/nst/files/latest/download?source=files) - Linux distribution that includes a vast collection of best-of-breed open source network security applications useful to the network security professional.
* [PALADIN](https://sumuri.com/software/paladin/) - PALADIN is a modified Linux distribution to perform various forenics task in a forensically sound manner. It comes with many open source forensics tools included.
* [Security Onion](https://github.com/Security-Onion-Solutions/security-onion) - Security Onion is a special Linux distro aimed at network security monitoring featuring advanced analysis tools.
* [SIFT Workstation](http://digital-forensics.sans.org/community/downloads) - The SANS Investigative Forensic Toolkit, SIFT, Workstation demonstrates that advanced incident response capabilities and deep dive digital forensic techniques to intrusions can be accomplished using cutting-edge open-source tools that are freely available and frequently updated.
#### Linux Evidence Collection
* [FastIR Collector Linux](https://github.com/SekoiaLab/Fastir_Collector_Linux) - FastIR for Linux collects different artefacts on live Linux and records the results in csv files.
#### Log Analysis Tools
* [Logdissect](https://github.com/dogoncouch/logdissect) - A CLI utility and Python API for analyzing log files and other data.
* [Lorg](https://github.com/jensvoid/lorg) - a tool for advanced HTTPD logfile security analysis and forensics.
#### OSX Evidence Collection
* [Knockknock](https://wiert.me/2020/02/10/github-synack-knockknock-whos-there/) - Displays persistent items, scripts, commands, binaries, etc., that are set to execute automatically on OSX.
* [Mac_apt - macOS Artifact Parsing Tool](https://github.com/ydkhatri/mac_apt) - Plugin based forensics framework for quick mac triage that works on live machines, disk images or individual artifact files.
* [OSX Auditor](https://github.com/jipegit/OSXAuditor) - OSX Auditor is a free Mac OS X computer forensics tool.
* [OSX Collector](https://github.com/yelp/osxcollector) - An OSX Auditor offshoot for live response.
#### Incident Response Playbooks
* [IR Workflow Gallery](https://www.incidentresponse.com/playbooks/) - Different generic incident response workflows, e.g. for malware outbreak, data theft, unauthorized access,... Every workflow constists of seven steps: prepare, detect, analyze, contain, eradicate, recover, post-incident handling.
* [IRM](https://github.com/certsocietegenerale/IRM) - Incident Response Methodologies by CERT Societe Generale.
* [PagerDuty Incident Response Documentation](https://github.com/PagerDuty/incident-response-docs) - Documents that describe parts of the PagerDuty Incident Response process. It provides information not only on preparing for an incident, but also what to do during and after.
#### Process Dump Tools
* [Microsoft User Mode Process Dumping](https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/user-mode-dump-files) - User mode process dumping guide.
* [PMDump](https://vidstromlabs.com/freetools/pmdump/) - PMDump is a tool that lets you dump the memory contents of a process to a file without stopping the process.
#### Sandboxing/reversing tools
* [Cuckoo](https://github.com/cuckoosandbox) - Open Source Highly configurable sandboxing tool.
* [Cuckoo-modified](https://github.com/spender-sandbox/cuckoo-modified) - Heavily modified Cuckoo fork developed by community.
* [Cuckoo-modified-api](https://github.com/keithjjones/cuckoo-modified-api) - A Python library to control a cuckoo-modified sandbox.
* [Hybrid-Analysis](https://www.hybrid-analysis.com/) - Hybrid-Analysis is a free powerful online sandbox by Payload Security.
* [Malwr](https://malwr.ee/) - Malwr is a free online malware analysis service and community, which is powered by the Cuckoo Sandbox.
* [Mastiff](https://github.com/KoreLogicSecurity/mastiff) - MASTIFF is a static analysis framework that automates the process of extracting key characteristics from a number of different file formats.
* [Metadefender Cloud](https://metadefender.opswat.com/) - Metadefender is a free threat intelligence platform providing multiscanning, data sanitization and vulnerability assesment of files.
* [Viper](https://github.com/viper-framework/viper) - Viper is a python based binary analysis and management framework, that works well with Cuckoo and YARA
* [Virustotal](https://www.virustotal.com/gui/) - Virustotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners.
* [Visualize_Logs](https://github.com/keithjjones/visualize_logs) - Open source. Visualization library and command line tools for logs.
#### Timeline tools
* [Highlighter](https://www.fireeye.com/services/freeware/highlighter.html) - Free Tool available from Fire/Mandiant that will depict log/text file that can highlight areas on the graphic, that corresponded to a key word or phrase. Good for time lining an infection and what was done post compromise.
* [Morgue](https://github.com/etsy/morgue) - A PHP Web app by Etsy for managing postmortems.
* [Plaso](https://github.com/log2timeline/plaso) - a Python-based backend engine for the tool log2timeline.
* [Timesketch](https://github.com/google/timesketch) - open source tool for collaborative forensic timeline analysis.
#### Windows Evidence Collection
* [AChoir](https://github.com/OMENScan/AChoir) - Achoir is a framework/scripting tool to standardize and simplify the process of scripting live acquisition utilities for Windows.
* [Binaryforay](https://binaryforay.blogspot.com/p/software.html) - list of free tools for win forensics.
* [Crowd Response](https://www.crowdstrike.com/resources/community-tools/) - Crowd Response by CrowdStrike is a lightweight Windows console application designed to aid in the gathering of system information for incident response and security engagements. It features numerous modules and output formats.
* [FastIR Collector](https://github.com/SekoiaLab/Fastir_Collector) - FastIR Collector is a tool that collects different artefacts on live Windows systems and records the results in csv files. With the analyses of these artefacts, an early compromise can be detected.
* [FECT](https://github.com/jipegit/FECT) - Fast Evidence Collector Toolkit, FECT, is a light incident response toolkit to collect evidences on a suspicious Windows computer. Basically it is intended to be used by non-tech savvy people working with a journeyman Incident Handler.
* [Fibratus](https://github.com/rabbitstack/fibratus) - tool for exploration and tracing of the Windows kernel.
* [IREC](https://binalyze.com/irec/) - All-in-one IR Evidence Collector which captures RAM Image, $MFT, EventLogs, WMI Scripts, Registry Hives, System Restore Points and much more. It is FREE, lightning fast and easy to use.
* [IOC Finder](https://www.fireeye.com/services/freeware/ioc-finder.html) - IOC Finder is a free tool from Mandiant for collecting host system data and reporting the presence of Indicators of Compromise. Support for Windows only.
* [LOKI](https://github.com/Neo23x0/Loki) - Loki is a free IR scanner for scanning endpoint with yara rules and other indicators.
* [Panorama](https://github.com/AlmCo/Panorama) - Fast incident overview on live Windows systems.
* [PowerForensics](https://github.com/Invoke-IR/PowerForensics) - Live disk forensics platform, using PowerShell.
* [PSRecon](https://github.com/gfoss/PSRecon/) - PSRecon gathers data from a remote Windows host using PowerShell](v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
* [RegRipper](https://github.com/keydet89/RegRipper3.0) - Regripper is an open source tool, written in Perl, for extracting/parsing information, keys, values, and data from the Registry and presenting it for analysis.
* [TRIAGE-IR](https://code.google.com/archive/p/triage-ir/) - Triage-IR is a IR collector for Windows.
#### Other
* [BruteX Wordlists](https://github.com/coreb1t/BruteX/tree/master/wordlists) - Wordlist repo.
* [Cortex](https://thehive-project.org) - Cortex allows you to analyze observables such as IP and email addresses, URLs, domain names, files or hashes one by one or in bulk mode using a Web interface. Analysts can also automate these operations using its REST API.
* [Crits](https://crits.github.io/) - a web-based tool which combines an analytic engine with a cyber threat database .
* [Diffy](https://github.com/Netflix-Skunkworks/diffy) - a DFIR tool developed by Netflix's SIRT that allows an investigator to quickly scope a compromise across cloud instances (Linux instances on AWS, currently) during an incident and efficiently triaging those instances for followup actions by showing differences against a baseline.
* [domfind](https://github.com/diogo-fernan/domfind) - domfind is a Python DNS crawler for finding identical domain names under different TLDs.
* [Fenrir](https://github.com/Neo23x0/Fenrir) - Fenrir is a simple IOC scanner. It allows scanning any Linux/Unix/OSX system for IOCs in plain bash. Created by the creators of THOR and LOKI.
* [Fileintel](https://github.com/keithjjones/fileintel) - Pull intelligence per file hash.
* [fuzzbox](https://github.com/iSECPartners/fuzzbox/) - Multi-codec media fuzzing tool.
* [Google Hacking Master List](https://gist.github.com/cmartinbaughman/5877945)
* [HELK](https://github.com/Cyb3rWard0g/HELK) - Threat Hunting platform.
* [Hindsight](https://github.com/obsidianforensics/hindsight) - Internet history forensics for Google Chrome/Chromium.
* [honggfuzz](https://github.com/google/honggfuzz/) - Security orientated fuzzing tool.
* [Hostintel](https://github.com/keithjjones/hostintel) - Pull intelligence per host.
* [imagemounter](https://github.com/ralphje/imagemounter) - Command line utility and Python package to ease the (un)mounting of forensic disk images.
* [Kansa](https://github.com/davehull/Kansa/) - Kansa is a modular incident response framework in Powershell.
* [Kayak Car Hacking Tool](https://github.com/ParrotSec/car-hacking-tools) - Tool for Kayak car hacking.
* [melkor-android](https://github.com/anestisb/melkor-android/) - Android fuzzing tool for ELF file formats.
* [Netzob](https://github.com/netzob/netzob/) - Multipurpose tool for reverse engineering, modeling, and fuzzing communciation protocols.
* [radamsa](https://gitlab.com/akihe/radamsa) - General purpose fuzzing tool.
* [RaQet](https://www.raqet.org/) - RaQet is an unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system.
* [rastrea2r](https://github.com/aboutsecurity/rastrea2r) - allows one to scan disks and memory for IOCs using YARA on Windows, Linux and OS X.
* [ROPgadget](https://github.com/JonathanSalwan/ROPgadget/) - Python based tool to aid in ROP exploitation.
* [Shellen](https://github.com/merrychap/shellen) - Interactive shellcoding environment.
* [sqhunter](https://github.com/0x4d31/sqhunter) - a threat hunter based on osquery and Salt Open (SaltStack) that can issue ad-hoc or distributed queries without the need for osquery's tls plugin. sqhunter allows you to query open network sockets and check them against threat intelligence sources.
* [Stalk](https://www.percona.com/doc/percona-toolkit/2.2/pt-stalk.html) - Collect forensic data about MySQL when problems occur.
* [Stenographer](https://github.com/google/stenographer) - Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. It stores as much history as it possible, managing disk usage, and deleting when disk limits are hit. It's ideal for capturing the traffic just before and during an incident, without the need explicit need to store all of the network traffic.
* [Sulley](https://github.com/OpenRCE/sulley/) - Fuzzing engine and framework.
* [traceroute-circl](https://github.com/CIRCL/traceroute-circl) - traceroute-circl is an extended traceroute to support the activities of CSIRT (or CERT) operators. Usually CSIRT team have to handle incidents based on IP addresses received. Created by Computer Emergency Responce Center Luxembourg.
* [Zulu](https://github.com/nccgroup/Zulu/) - Interactive fuzzer.
### Our Open Source Tools
* [Legion](https://github.com/GoVanguard/legion) - Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
* [SecretScanner](https://github.com/GoVanguard/SecretScanner) - Searches for common keys and secrets in a stupidly simple way.
* [SecretSearcher](https://github.com/GoVanguard/SecretSearcher) - Python re-implementation of the classic SecretScanner shell script.
* [log4jShell Scanner](https://github.com/GoVanguard/Log4jShell_Scanner) - This shell script scans a vulnerable web application that is using a version of apache-log4j < 2.15.0.
* [WinPrivHeadStart](https://github.com/GoVanguard/script-win-privescalate-headstart) - The lazy mans local Windows privilege escalation script.
### License
[](https://creativecommons.org/licenses/by/4.0/)
This work is licensed under a [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/).