Awesome security

A list of security tools and links that I find useful.

Contents

• Web applications
  • Reconnaissance
  • Domain discovery
  • Vulnerabilities
  • Authentication bypass
• Networks
  • Discovery
• Reverse engineering
  • Tools
  • Reading materials
  • Cheat sheets
• RSS feeds
• Thanks
• License

Web applications

Domain discovery

• VirusTotal
  • domain:target.com
• Censys
  • 443.https.tls.certificate.parsed.extensions.subject_alt_name.dns_names:target.com
• DNSdumpster
• crt.sh
• Netcraft searchdns
• Shodan

Web application vulnerabilities

• XSS
  • BeEF
  • RequestBin
• SSRF
  • SSRF bible
  • A new era of SSRF exploiting in trending programming languages
• XML
  • XML cheatsheet

Authentication

• SAML
  • Office365 bypass
  • Uber bypass

Fuzzers

• Tiny URL Fuzzer - A tiny and cute URL fuzzer

Networks

Network Discovery

• A Masscan Tutorial and Primer - A basic masscan tutorial by Daniel Messler

Reverse Engineering

RE Tools

• Compiler explorer

RE Reading materials

• Reverse engineering for beginners

RE Cheat sheets

• Zeltser

Malware analysis

• Unpacking Shade

RSS feeds

• Forums
  • /r/hacking
  • /r/netsec
  • /r/HowToHack
• News
  • blackMORE Ops
  • CyberPunk
  • fossBytes
  • Security Bloggers Network
  • The Register - Security
  • Security.NL
• Organisations
  • SANS Information Security Reading Room
  • The Akamai Blog
• Tools
  • Nmap Announce
  • Wireshark
• Vulnerability feeds
  • Bugtraq
  • Exploit-DB Updates
  • Full Disclosure
  • National Vulnerability Database
  • Open Source Security
  • Files ≈ Packet Storm

Thanks

These are some of the sources that I got lists from

• https://blog.bugcrowd.com/discovering-subdomains

License

To the extent possible under law, Rory Breuk has waived all copyright and related or neighboring rights to this work.