# Awesome Security List For Fun And Profit | Massive Collection & Resources ⭐ **URL:** \ **Category:** Give-Away and Freebies\ **Tags:** freebies\ **Created:** [June 8, 2024, 8:51pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246 "2024-06-08T20:51:35Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [June 8, 2024, 8:51pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/1 "2024-06-08T20:51:35Z")
![image](https://onehack.st/uploads/default/original/3X/4/f/4f29f9772d2fc12e7ecf3efa900259bd17eed470.jpeg) Awesome Security List For Fun And Profit | Massive Collection & Resources ⭐ Great security list for fun and profit for almost anything! πŸ€·β€β™‚οΈ ## Table of Contents - Awesome lists - Books - Bug bounty - Cheat sheets - CTF - Decoder/Converter/Beautifier - Domain name Research / Analysis / Reputation - Exploits and vulnerabilities - Forensic - Free shell - Fun - Generic utilities - GNU/Linux - Honeypots - IP Research / Analysis / Investigation - Leak / Defaced - Learning / Exercises - Lock picking - Mail utilities - Malicious traffic detection - Malware / Botnet sources - Malware analysis - Sandbox - Malware analysis - Sandbox - Online - Mobile - Network - OSINT - OS X - Passwords - Penetration testing - Port scanners / Wide scans - Search engines - Security challenges / WarGames - Skimmer - SSH - SSL - TOR - VOIP - VPN - Vulnerable environments - Web browser - Windows - Wireless / Radio ## Awesome lists πŸ‘ | Name | URL | | --- | --- | | Android | [https://github.com/ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) | | Curated list of awesome lists | [https://github.com/sindresorhus/awesome](https://github.com/sindresorhus/awesome) ⭐ | | Fuzzing | [https://github.com/secfigo/Awesome-Fuzzing](https://github.com/secfigo/Awesome-Fuzzing) | | Hacking list | [https://github.com/Hack-with-Github/Awesome-Hacking](https://github.com/Hack-with-Github/Awesome-Hacking) ⭐⭐⭐ | | Honeypots | [https://github.com/paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) ⭐ | | Incident response | [https://github.com/meirwah/awesome-incident-response/](https://github.com/meirwah/awesome-incident-response/) ⭐⭐ | | Indicators of compromise | [https://github.com/sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) | | Info sec | [https://github.com/rmusser01/Infosec\_Reference](https://github.com/rmusser01/Infosec_Reference) | | Malware analysis | [https://github.com/rshipp/awesome-malware-analysis/](https://github.com/rshipp/awesome-malware-analysis/) ⭐⭐⭐ | | Personal Security | [https://github.com/Lissy93/personal-security-checklist](https://github.com/Lissy93/personal-security-checklist) | | Red team | [https://github.com/yeyintminthuhtut/Awesome-Red-Teaming](https://github.com/yeyintminthuhtut/Awesome-Red-Teaming) | | Reversing | [https://github.com/fdivrp/awesome-reversing](https://github.com/fdivrp/awesome-reversing) | | Security | [https://github.com/sbilly/awesome-security](https://github.com/sbilly/awesome-security) | | Threat intelligence | [https://github.com/hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) | | Web | [https://github.com/qazbnm456/awesome-web-security/](https://github.com/qazbnm456/awesome-web-security/) [https://github.com/infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) | ## Books πŸ“š | Name | URL | | --- | --- | | Free programming books | [https://github.com/EbookFoundation/free-programming-books](https://github.com/EbookFoundation/free-programming-books) | | Recommended Reading | [http://dfir.org/?q=node/8](http://dfir.org/?q=node/8) | ## Bug bounty 🍫 | Name | URL | | --- | --- | | Bounty factory | [https://bountyfactory.io](https://bountyfactory.io/) | | Bugcrowd | [https://bugcrowd.com/programs](https://bugcrowd.com/programs) | | Google | [https://www.google.com/about/appsecurity/reward-program/](https://www.google.com/about/appsecurity/reward-program/) | | HackerOne | [https://hackerone.com](https://hackerone.com/) ⭐ | | List of bug bounty | [https://www.bugcrowd.com/bug-bounty-list/](https://www.bugcrowd.com/bug-bounty-list/) | | Microsoft | [https://technet.microsoft.com/en-us/security/dn425036](https://technet.microsoft.com/en-us/security/dn425036) | | Open bug bounty | [https://www.openbugbounty.org/](https://www.openbugbounty.org/) | | Programs and write-ups | [https://github.com/djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) | | Write-ups | [https://github.com/ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) | | Zerodium | [https://www.zerodium.com/](https://www.zerodium.com/) πŸ’°:trollface: | ## Cheat sheets πŸ‘ | Name | URL | | --- | --- | | General cheat sheets | [http://www.cheat-sheets.org/](http://www.cheat-sheets.org/) ⭐ | | Owasp series | [https://github.com/OWASP/CheatSheetSeries](https://github.com/OWASP/CheatSheetSeries) ⭐⭐ | | Packet life | [http://packetlife.net/library/cheat-sheets/](http://packetlife.net/library/cheat-sheets/) | | Penetration test | [https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/) | | Pentest monkey | [http://pentestmonkey.net](http://pentestmonkey.net/) | | SANS Forensic | [https://digital-forensics.sans.org/community/cheat-sheets](https://digital-forensics.sans.org/community/cheat-sheets) | | Security Onion | [https://github.com/Security-Onion-Solutions/security-onion/wiki/Cheat-Sheet](https://github.com/Security-Onion-Solutions/security-onion/wiki/Cheat-Sheet) | | Zeltser’s cheat sheets list | [https://zeltser.com/cheat-sheets/](https://zeltser.com/cheat-sheets/) | ## CTF 🚩 | Name | URL | | --- | --- | | Awesome CTF | [https://github.com/apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) ⭐⭐ | | CTFd platform | [https://github.com/CTFd/CTFd](https://github.com/CTFd/CTFd) ⭐ | | CTF PAD | [https://github.com/StratumAuhuur/CTFPad](https://github.com/StratumAuhuur/CTFPad) | | CTF TIME | [https://ctftime.org/](https://ctftime.org/) | | Mellivora platform | [https://github.com/Nakiami/mellivora](https://github.com/Nakiami/mellivora) ⭐ | | Platform list | [https://github.com/We5ter/Awesome-Platforms/blob/master/CTF-Platforms.md](https://github.com/We5ter/Awesome-Platforms/blob/master/CTF-Platforms.md) | | Reddit | [https://www.reddit.com/r/securityctf](https://www.reddit.com/r/securityctf) | | Tools list | [https://github.com/Laxa/HackingTools](https://github.com/Laxa/HackingTools) | | Tools list | [https://github.com/zardus/ctf-tools](https://github.com/zardus/ctf-tools) | | Write-ups | [https://github.com/ctfs](https://github.com/ctfs) | ## Decoder/Converter/Beautifier :hurtrealbad: | Name | URL | | --- | --- | | Code beautifier | [http://codebeautify.org/](http://codebeautify.org/) | | Converter | [https://github.com/koczkatamas/koczkatamas.github.io](https://github.com/koczkatamas/koczkatamas.github.io) | | Cyber Chef | [https://gchq.github.io/CyberChef/](https://gchq.github.io/CyberChef/) 🍴⭐⭐⭐ | | JSUnpack | [https://github.com/urule99/jsunpack-n](https://github.com/urule99/jsunpack-n) | | JSBeautifier | [http://jsbeautifier.org/](http://jsbeautifier.org/) ⭐ | | Jjencode | [http://utf-8.jp/public/jjencode.html](http://utf-8.jp/public/jjencode.html) | | JS deobfuscate | [https://github.com/sevzero/honeybadger](https://github.com/sevzero/honeybadger) | | VB code beautifier | [http://www.vbindent.com/](http://www.vbindent.com/) | ## Domain name Research / Analysis / Reputation πŸ“‰ | Name | URL | | --- | --- | | Archive | [https://archive.is/](https://archive.is/) | | Archive | [https://web.archive.org/](https://web.archive.org/) ⭐ | | BGP Toolkit | [http://bgp.he.net/](http://bgp.he.net/) ⭐ | | Biggest DNS history | [https://securitytrails.com/list/ip/$IP](https://securitytrails.com/list/ip/$IP) ⭐ | | Cache page | [http://www.cachedpages.com/](http://www.cachedpages.com/) | | Cache view | [http://cachedview.com/](http://cachedview.com/) | | Checking multiple blocklists | [http://rbls.org/](http://rbls.org/) ⭐ | | DGA intro | [https://en.wikipedia.org/wiki/Domain\_generation\_algorithm](https://en.wikipedia.org/wiki/Domain_generation_algorithm) | | DNS Blacklists | [https://raw.githubusercontent.com/zbetcheckin/DNSBLs/master/active\_dnsbls.txt](https://raw.githubusercontent.com/zbetcheckin/DNSBLs/master/active_dnsbls.txt) | | DNS dumpster | [https://dnsdumpster.com/](https://dnsdumpster.com/) | | DNS Propagation Checker | [https://www.whatsmydns.net/](https://www.whatsmydns.net/) | | DNS stuff | [http://www.dnsstuff.com/](http://www.dnsstuff.com/) | | Domain analysis list | [https://github.com/rshipp/awesome-malware-analysis/#domain-analysis](https://github.com/rshipp/awesome-malware-analysis/#domain-analysis) | | Domain hijacking intro | [https://en.wikipedia.org/wiki/Domain\_hijacking](https://en.wikipedia.org/wiki/Domain_hijacking) | | Expired domain | [https://www.expireddomains.net/backorder-expired-domains/](https://www.expireddomains.net/backorder-expired-domains/) | | Google | [https://www.google.com/transparencyreport/safebrowsing/diagnostic/](https://www.google.com/transparencyreport/safebrowsing/diagnostic/) | | Into dns | [http://www.intodns.com/](http://www.intodns.com/) | | Multi RBL | [http://multirbl.valli.org/lookup/](http://multirbl.valli.org/lookup/) ⭐ | | MXToolBox | [https://mxtoolbox.com/SuperTool.aspx#](https://mxtoolbox.com/SuperTool.aspx#) | | Netcraft | [http://www.netcraft.com/](http://www.netcraft.com/) | | Reverse Whois | [https://reversewhois.domaintools.com/](https://reversewhois.domaintools.com/) | | Robtex | [https://www.robtex.com/dns/](https://www.robtex.com/dns/) | | Sucuri | [http://sitecheck.sucuri.net/scanner/](http://sitecheck.sucuri.net/scanner/) | | TCP utils | [http://www.tcpiputils.com/](http://www.tcpiputils.com/) | | Threat log | [http://www.threatlog.com/](http://www.threatlog.com/) | | Threat miner | [https://www.threatminer.org/](https://www.threatminer.org/) | | Top-Level Domains list | [https://data.iana.org/TLD/tlds-alpha-by-domain.txt](https://data.iana.org/TLD/tlds-alpha-by-domain.txt) ⭐ | | Trusted source | [http://www.trustedsource.org/](http://www.trustedsource.org/) | | URL Query | [http://urlquery.net/](http://urlquery.net/) ⭐ | | URL scan | [https://urlscan.io/](https://urlscan.io/) ⭐ | | URL shorter list | [https://mirror1.malwaredomains.com/files/url\_shorteners.txt](https://mirror1.malwaredomains.com/files/url_shorteners.txt) | | URL Void | [http://www.urlvoid.com/](http://www.urlvoid.com/) | | Virus total | [https://www.virustotal.com/#url](https://www.virustotal.com/#url) | | Whois - ARIN | [https://whois.arin.net/](https://whois.arin.net/) | | Whois - LACNIC | [http://lacnic.net/cgi-bin/lacnic/whois](http://lacnic.net/cgi-bin/lacnic/whois) | | Whois - RIPE NCC | [https://apps.db.ripe.net/search/query.html](https://apps.db.ripe.net/search/query.html) | | Whois - AFRINIC | [http://www.afrinic.net/fr/services/whois-query](http://www.afrinic.net/fr/services/whois-query) | | Whois - APNIC | [http://wq.apnic.net/apnic-bin/whois.pl](http://wq.apnic.net/apnic-bin/whois.pl) | | Whois by registrant name | [http://viewdns.info/reversewhois/](http://viewdns.info/reversewhois/) | | Zeltser’s list | [https://zeltser.com/lookup-malicious-websites/](https://zeltser.com/lookup-malicious-websites/) | ## Exploits and vulnerabilities πŸšͺ | Name | URL | | --- | --- | | CVEdetails | [http://www.cvedetails.com/](http://www.cvedetails.com/) ⭐ | | CVE.mitre | [https://cve.mitre.org/](https://cve.mitre.org/) ⭐ | | Full disclosure | [http://seclists.org/fulldisclosure/](http://seclists.org/fulldisclosure/) | | See bug | [https://www.seebug.org/](https://www.seebug.org/) ⭐ | | CXSecurity | [https://cxsecurity.com/](https://cxsecurity.com/) ⭐ | | Inj3ct0r | [http://0day.today/](http://0day.today/) | | Packet Storm | [https://packetstormsecurity.com/files/tags/exploit/](https://packetstormsecurity.com/files/tags/exploit/) | | Exploit-db | [http://www.exploit-db.com](http://www.exploit-db.com/) | | Vulnerability-lab | [http://www.vulnerability-lab.com/](http://www.vulnerability-lab.com/) | | Vulndb | [https://vuldb.com/?archive.2016](https://vuldb.com/?archive.2016) | | Vulners | [https://vulners.com/search?query=order:published](https://vulners.com/search?query=order:published) | | Backdoor - TCP-32764 | [https://github.com/elvanderb/TCP-32764](https://github.com/elvanderb/TCP-32764) | | Rapid7 DB | [https://www.rapid7.com/db/modules/](https://www.rapid7.com/db/modules/) | | NIST | [http://web.nvd.nist.gov/](http://web.nvd.nist.gov/) | | Security focus | [http://www.securityfocus.com/vulnerabilities](http://www.securityfocus.com/vulnerabilities) | | Country compatibility | [https://cve.mitre.org/compatible/country.html](https://cve.mitre.org/compatible/country.html) | | Mailing list | [https://nmap.org/mailman/listinfo/fulldisclosure](https://nmap.org/mailman/listinfo/fulldisclosure) | | Mail received | [http://lists.openwall.net/full-disclosure/2016/](http://lists.openwall.net/full-disclosure/2016/) | | Mailing list | [http://seclists.org/](http://seclists.org/) | | Mailing list | [https://lists.debian.org/debian-security-announce/](https://lists.debian.org/debian-security-announce/) | | CVSS FIRST | [https://www.first.org/cvss/calculator/3.0](https://www.first.org/cvss/calculator/3.0) | | CVSS NIST | [https://nvd.nist.gov/cvss/v3-calculator](https://nvd.nist.gov/cvss/v3-calculator) | ## Forensic πŸ” | Name | URL | | --- | --- | | Aldeid list | [https://www.aldeid.com/wiki/Category:Digital-Forensics](https://www.aldeid.com/wiki/Category:Digital-Forensics) | | Awesome forensic | [https://github.com/Cugu/awesome-forensics](https://github.com/Cugu/awesome-forensics) | | CFReDS | [http://www.cfreds.nist.gov/](http://www.cfreds.nist.gov/) ⭐ | | DFRWS challenge | [http://www.dfrws.org/dfrws-forensic-challenge-2016](http://www.dfrws.org/dfrws-forensic-challenge-2016) | | File signatures | [https://en.wikipedia.org/wiki/List\_of\_file\_signatures](https://en.wikipedia.org/wiki/List_of_file_signatures) | | File signatures | [http://www.filesignatures.net/index.php?page=all](http://www.filesignatures.net/index.php?page=all) | | File signatures | [http://www.garykessler.net/library/file\_sigs.html](http://www.garykessler.net/library/file_sigs.html) | | Forensic kb practical | [http://www.forensickb.com/2008/01/forensic-practical.html](http://www.forensickb.com/2008/01/forensic-practical.html) | | Forensic tools | [https://forensics.cert.org/](https://forensics.cert.org/) | | Forensic - Technical graph | [http://www.amanhardikar.com/mindmaps/ForensicChallenges.html](http://www.amanhardikar.com/mindmaps/ForensicChallenges.html) | | Learn with David Cowen | [https://www.youtube.com/channel/UCZ7mQV3j4GNX-LU1IKPVQZg](https://www.youtube.com/channel/UCZ7mQV3j4GNX-LU1IKPVQZg) | | Package - DEFT | [http://www.deftlinux.net/package-list/](http://www.deftlinux.net/package-list/) | | Package - forensic-all | [https://packages.debian.org/stretch/forensics-all](https://packages.debian.org/stretch/forensics-all) ⭐⭐ | | Testing Images | [http://dftt.sourceforge.net/](http://dftt.sourceforge.net/) | | Tools - DFIR | [http://www.dfir.training/index.php/tools/](http://www.dfir.training/index.php/tools/) ⭐ | | Tools - Forensics wiki | [http://forensicswiki.org/wiki/Tools](http://forensicswiki.org/wiki/Tools) | | Tools - NIST | [https://toolcatalog.nist.gov/taxonomy/index.php](https://toolcatalog.nist.gov/taxonomy/index.php) | | Windows tools | [https://ericzimmerman.github.io/](https://ericzimmerman.github.io/) | | Windows tools list | [http://forensic-proof.com/tools](http://forensic-proof.com/tools) | | Windows Artifact | [https://blogs.sans.org/computer-forensics/](https://blogs.sans.org/computer-forensics/files/2012/06/SANS-Digital-Forensics-and-Incident-Response-Poster-2012.pdf) | | Write blocker | [http://www.cftt.nist.gov/software\_write\_block.htm](http://www.cftt.nist.gov/software_write_block.htm) | | Write blocker | [https://github.com/msuhanov/Linux-write-blocker](https://github.com/msuhanov/Linux-write-blocker) | | Zythom list | [https://zythom.blogspot.se/2007/02/les-outils-dun-expert-judiciaire.html](https://zythom.blogspot.se/2007/02/les-outils-dun-expert-judiciaire.html) πŸ‡«πŸ‡· | ## Free shell 🐚 | Name | URL | | --- | --- | | FreeShells list | [http://www.freeshells.info/](http://www.freeshells.info/) | | Red-pill | [http://shells.red-pill.eu/](http://shells.red-pill.eu/) | ## Fun :trollface: | Name | URL | | --- | --- | | Akamai map | [https://www.akamai.com/us/en/resources/visualizing-akamai/real-time-web-monitor.jsp](https://www.akamai.com/us/en/resources/visualizing-akamai/real-time-web-monitor.jsp) 🌎 | | BGP stream | [https://bgpstream.com/](https://bgpstream.com/) 🌎 | | Bitdefender map | [https://threatmap.bitdefender.com/](https://threatmap.bitdefender.com/) 🌎 | | Blueliv map | [https://community.blueliv.com/map/](https://community.blueliv.com/map/) 🌎 | | Checkpoint map | [https://threatmap.checkpoint.com/](https://threatmap.checkpoint.com/) 🌎 | | DDoS attacks | [http://www.digitalattackmap.com/](http://www.digitalattackmap.com/) :trollface: | | Dead drops | [https://deaddrops.com/db/](https://deaddrops.com/db/) πŸ’ΎπŸ’€ | | Dshield map | [https://dshield.org/threatmap.html](https://dshield.org/threatmap.html) 🌎 | | Eset map | [http://www.virusradar.com/](http://www.virusradar.com/) 🌎 | | Fire eye map | [https://www.fireeye.com/cyber-map/threat-map.html](https://www.fireeye.com/cyber-map/threat-map.html) 🌎 | | Flight radar | [https://www.flightradar24.com](https://www.flightradar24.com/) ✈ | | Fortinet map | [https://threatmap.fortiguard.com/](https://threatmap.fortiguard.com/) 🌎 | | HE maps | [https://he.net/3d-map/](https://he.net/3d-map/) 🌎 | | Kaspersky AV map | [https://cybermap.kaspersky.com/](https://cybermap.kaspersky.com/) 🌎 | | Kaspersky map | [https://apt.securelist.com/](https://apt.securelist.com/) 🌎 | | Mozilla location service map | [https://location.services.mozilla.com/map](https://location.services.mozilla.com/map) 🌎 | | Open IP video cameras | [http://www.insecam.org/](http://www.insecam.org/) πŸ“ΉπŸ™ˆ | | Pwnie Awards | [http://pwnies.com/nominations/](http://pwnies.com/nominations/) 🐴 | | Sub marine cable | [http://www.submarinecablemap.com/](http://www.submarinecablemap.com/) βš“ | | Sub marine cable | [http://submarine-cable-map-2016.telegeography.com/](http://submarine-cable-map-2016.telegeography.com/) βš“ | | Sub marine cable | [http://lifewinning.com/submarine-cable-taps/](http://lifewinning.com/submarine-cable-taps/) βš“ | | Threat butt | [https://threatbutt.com/map/](https://threatbutt.com/map/) 🌎🀑 | | Tor flow map | [https://torflow.uncharted.software](https://torflow.uncharted.software/) 🌎 | | Trendmicro map | [https://botnet-cd.trendmicro.com/](https://botnet-cd.trendmicro.com/) 🌎 | | World of VNC | [https://worldofvnc.net/](https://worldofvnc.net/) πŸŽ… | ## Generic utilities πŸ“ Will be reorganized | Name | URL | | --- | --- | | Abuse Contact DB | [https://www.abusix.com/contactdb](https://www.abusix.com/contactdb) πŸ“• | | CERT teams | [https://www.first.org/about/organization/teams](https://www.first.org/about/organization/teams) | | Citizen lab | [https://citizenlab.org/](https://citizenlab.org/) | | Code analysises | [https://en.wikipedia.org/wiki/List\_of\_tools\_for\_static\_code\_analysis](https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis) | | Codepad | [http://codepad.org/](http://codepad.org/) | | Crypto currency | [https://coinmarketcap.com](https://coinmarketcap.com/) | | Deepweb | [https://www.reddit.com/r/deepweb/](https://www.reddit.com/r/deepweb/) | | Electronic Frontier Foundation | [https://www.eff.org/](https://www.eff.org/) | | Face generator | [https://www.thispersondoesnotexist.com/](https://www.thispersondoesnotexist.com/) | | Fake ID | [http://www.fakenamegenerator.com/](http://www.fakenamegenerator.com/) | | Hackforum | [http://hackforums.net/](http://hackforums.net/) :trollface: | | Hardened BSD | [https://hardenedbsd.org/content/easy-feature-comparison](https://hardenedbsd.org/content/easy-feature-comparison) | | Hashes example | [https://hashcat.net/wiki/doku.php?id=example\_hashes](https://hashcat.net/wiki/doku.php?id=example_hashes) | | Mibbit | [http://www.mibbit.com/](http://www.mibbit.com/) | | Microsoft threat | [http://www.microsoft.com/security](http://www.microsoft.com/security) | | MIME types | [https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics\_of\_HTTP/MIME\_types/Complete\_list\_of\_MIME\_types](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Complete_list_of_MIME_types) | | MIME types | [https://slick.pl/kb/htaccess/complete-list-mime-types/](https://slick.pl/kb/htaccess/complete-list-mime-types/) | | MIME types | [https://www.iana.org/assignments/media-types/media-types.xhtml](https://www.iana.org/assignments/media-types/media-types.xhtml) ⭐ | | Mindmaps | [http://www.amanhardikar.com/mindmaps.html](http://www.amanhardikar.com/mindmaps.html) ⭐⭐⭐ | | Random data generator | [http://www.mockaroo.com/](http://www.mockaroo.com/) | | Sans | [http://isc.sans.edu/diary/](http://isc.sans.edu/diary/) ⭐⭐ | | Security wiki | [http://oss-security.openwall.org/wiki/](http://oss-security.openwall.org/wiki/) | | Understand your commands | [https://explainshell.com/](https://explainshell.com/) ⭐ | ## GNU/Linux | Name | URL | | --- | --- | | Chkrootkit | [https://packages.debian.org/en/jessie/chkrootkit](https://packages.debian.org/en/jessie/chkrootkit) | | Command collection | [https://github.com/tuwid/GNU-Linux-OpsWiki](https://github.com/tuwid/GNU-Linux-OpsWiki) | | Debsecan | [https://packages.debian.org/en/jessie/debsecan](https://packages.debian.org/en/jessie/debsecan) | | GNU/Linux containers | [https://github.com/Friz-zy/awesome-linux-containers#security](https://github.com/Friz-zy/awesome-linux-containers#security) | | GNU/Linux executable walkthrough | [https://i.imgur.com/q5nyHp7.png](https://i.imgur.com/q5nyHp7.png) | | GNU/Linux post exploitation | [https://github.com/mubix/post-exploitation/wiki/Linux-Post-Exploitation-Command-List](https://github.com/mubix/post-exploitation/wiki/Linux-Post-Exploitation-Command-List) ⭐ | | GNU/Linux workstation | [https://github.com/lfit/itpol/blob/master/linux-workstation-security.md](https://github.com/lfit/itpol/blob/master/linux-workstation-security.md) ⭐⭐ | | Kernel exploitation | [https://github.com/xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) | | Lynis | [https://packages.debian.org/en/jessie/lynis](https://packages.debian.org/en/jessie/lynis) | | RE 101 | [https://github.com/michalmalik/linux-re-101](https://github.com/michalmalik/linux-re-101) | | RKhunter | [https://packages.debian.org/en/jessie/rkhunter](https://packages.debian.org/en/jessie/rkhunter) ⭐ | | Securing debian | [https://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html](https://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html) ⭐ | | Vulnerability scanner | [https://github.com/future-architect/vuls](https://github.com/future-architect/vuls) | ## Honeypots 🍯 | Name | URL | | --- | --- | | Awesome list - All of them ! | [https://github.com/paralax/awesome-honeypots#honeypots](https://github.com/paralax/awesome-honeypots#honeypots) ⭐⭐ | | Honeynet | [https://honeynet.org/project](https://honeynet.org/project) | | Live nothink | [http://www.nothink.org/honeypots.php](http://www.nothink.org/honeypots.php) | ## IP Research / Analysis / Investigation | Name | URL | | --- | --- | | Abuse IP DB | [https://www.abuseipdb.com/](https://www.abuseipdb.com/) | | BGP Toolkit | [http://bgp.he.net/](http://bgp.he.net/) ⭐ | | Bing dork | ip:$IP | | Black List Alert | [http://www.blacklistalert.org/](http://www.blacklistalert.org/) | | Black List Check | [http://whatismyipaddress.com/blacklist-check/](http://whatismyipaddress.com/blacklist-check/) | | Check host | [http://check-host.net/](http://check-host.net/) | | FireHOL IP list | [https://github.com/firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ⭐ | | Google dork | β€œ$IP” | | Host file | [https://hosts-file.net/](https://hosts-file.net/) | | IP void | [http://www.ipvoid.com/](http://www.ipvoid.com/) | | Multi RBL | [http://multirbl.valli.org/lookup/](http://multirbl.valli.org/lookup/) ⭐ | | Nirsoft country IP | [http://www.nirsoft.net/countryip/](http://www.nirsoft.net/countryip/) | | Project Honeypot | [https://www.projecthoneypot.org/search\_ip.php](https://www.projecthoneypot.org/search_ip.php) | | RIPE stat | [https://stat.ripe.net/](https://stat.ripe.net/) | | Spamhaus | [https://www.spamhaus.org/lookup/](https://www.spamhaus.org/lookup/) | | Virus total | [https://www.virustotal.com/gui/search/$IP](https://www.virustotal.com/gui/search/$IP) | | Whatch Guard | [http://www.reputationauthority.org/](http://www.reputationauthority.org/) | ## Leak / Defaced πŸš‘ | Name | URL | | --- | --- | | Biggest db leaks | [https://cdn.databases.today/](https://cdn.databases.today/) | | Breach alarm | [https://breachalarm.com/](https://breachalarm.com/) | | Darknet leaks | [https://darknetleaks.ru/archive/leaked/dumps/](https://darknetleaks.ru/archive/leaked/dumps/) | | Hacked emails | [https://hacked-emails.com/](https://hacked-emails.com/) | | Have I been pwned | [https://haveibeenpwned.com/](https://haveibeenpwned.com/) | | Isithacked | [http://www.isithacked.com](http://www.isithacked.com/) | | Leakedin | [http://www.leakedin.com/](http://www.leakedin.com/) | | Siph0n | [https://twitter.com/datasiph0n](https://twitter.com/datasiph0n) | | Zone-H | [https://zone-h.org/](https://zone-h.org/) | ## Learning / Exercises πŸŽ“ | Name | URL | | --- | --- | | Awesome training | [http://opensecuritytraining.info/Training.html](http://opensecuritytraining.info/Training.html) ⭐⭐ | | Cybrary training | [https://www.cybrary.it/](https://www.cybrary.it/) | | Essential basics | [https://github.com/alex/what-happens-when](https://github.com/alex/what-happens-when) ⭐⭐ | | Exploits | [https://thesprawl.org/research/](https://thesprawl.org/research/) | | F-Secure training | [https://moocfi.github.io/courses/2017/cybersecurity/](https://moocfi.github.io/courses/2017/cybersecurity/) | | Malware Analysis course | [https://github.com/RPISEC/Malware](https://github.com/RPISEC/Malware) ⭐⭐ | | Malware traffic training | [http://www.malware-traffic-analysis.net/training-exercises.html](http://www.malware-traffic-analysis.net/training-exercises.html) ⭐ | | Practical analysis | [https://practicalmalwareanalysis.com/labs/](https://practicalmalwareanalysis.com/labs/) | | Reverse - Malware | [http://fumalwareanalysis.blogspot.se/p/malware-analysis-tutorials-reverse.html](http://fumalwareanalysis.blogspot.se/p/malware-analysis-tutorials-reverse.html) | | Security courses | [https://bitvijays.github.io/](https://bitvijays.github.io/) ⭐ | | Security training | [https://github.com/rmusser01/Infosec\_Reference/blob/master/Draft/Courses\_Training.md](https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Courses_Training.md) | | Security talks | [https://github.com/PaulSec/awesome-sec-talks](https://github.com/PaulSec/awesome-sec-talks) ⭐ | ## Lock picking πŸ” | Name | URL | | --- | --- | | Awesome lockpicking | [https://github.com/meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) | | Lock pick guide | [http://lockpickguide.com](http://lockpickguide.com/) ⭐ | | Bosnianbill video | [https://www.youtube.com/user/bosnianbill/videos](https://www.youtube.com/user/bosnianbill/videos) ⭐ | | Lock lab | [https://lock-lab.com/](https://lock-lab.com/) | | Lock wiki | [http://www.lockwiki.com/](http://www.lockwiki.com/) | ## Mail utilities πŸ“¬ | Name | URL | | --- | --- | | 10 Minute Mail | [http://10minutemail.com](http://10minutemail.com/) | | DNSBL | [https://en.wikipedia.org/wiki/DNSBL](https://en.wikipedia.org/wiki/DNSBL) | | DKIM validator | [http://dkimvalidator.com/](http://dkimvalidator.com/) | | Email recon | [https://github.com/laramies/theHarvester](https://github.com/laramies/theHarvester) | | Get air mail | [http://en.getairmail.com/](http://en.getairmail.com/) | | Google Phishing quiz | [https://phishingquiz.withgoogle.com/](https://phishingquiz.withgoogle.com/) β­πŸ“§πŸ“Š | | Gophish | [https://github.com/gophish/gophish](https://github.com/gophish/gophish) | | Mailinator | [https://www.mailinator.com/](https://www.mailinator.com/) # [https://gist.github.com/nocturnalgeek/1b8fa44283314544c487](https://gist.github.com/nocturnalgeek/1b8fa44283314544c487) | | Mailnesia | [http://mailnesia.com/](http://mailnesia.com/) | | Mailcatch | [http://mailcatch.com/](http://mailcatch.com/) | | Mxtoolbox | [http://www.mxtoolbox.com/](http://www.mxtoolbox.com/) | | Open phish | [https://openphish.com/](https://openphish.com/) ⭐ | | Openresolver JP | [http://www.openresolver.jp/en/](http://www.openresolver.jp/en/) | | Phishing Framework | [https://github.com/pentestgeek/phishing-frenzy](https://github.com/pentestgeek/phishing-frenzy) | | Phish tank | [http://www.phishtank.com/](http://www.phishtank.com/) ⭐ | | SimplyEmail | [https://github.com/killswitch-GUI/SimplyEmail](https://github.com/killswitch-GUI/SimplyEmail) | | Spam DB | [http://www.dnsbl.info/dnsbl-database-check.php](http://www.dnsbl.info/dnsbl-database-check.php) | | Spam encode secret | [http://spammimic.com/encode.cgi](http://spammimic.com/encode.cgi) | | SpeedPhish Framework | [https://github.com/tatanus/SPF](https://github.com/tatanus/SPF) | | Yop mail | [http://www.yopmail.com/](http://www.yopmail.com/) | ## Malicious traffic detection 🚦 | Name | URL | | --- | --- | | 10 strategies cyber ops center | [pr-13-1028-mitre-10-strategies-cyber-ops-center.pdf](https://www.mitre.org/sites/default/files/publications/pr-13-1028-mitre-10-strategies-cyber-ops-center.pdf) | | Awesome threat detection | [https://github.com/0x4D31/awesome-threat-detection](https://github.com/0x4D31/awesome-threat-detection) | | Maltrail | [https://github.com/stamparm/maltrail](https://github.com/stamparm/maltrail) | | Packetbeat | [https://www.elastic.co/products/beats/packetbeat](https://www.elastic.co/products/beats/packetbeat) | | p0f | [http://lcamtuf.coredump.cx/p0f3/](http://lcamtuf.coredump.cx/p0f3/) | | Tsusen | [https://github.com/stamparm/tsusen](https://github.com/stamparm/tsusen) | ## Malware / Botnet sources πŸ‘Ό | Name | URL | | --- | --- | | 0btemoslab tracker | [http://tracker.0btemoslab.com/](http://tracker.0btemoslab.com/) | | Abuse CH | [https://www.abuse.ch/](https://www.abuse.ch/) | | Benkow.cc tracker | [http://benkow.cc/](http://benkow.cc/) | | [Botnet.fr](http://Botnet.fr) | [https://www.botnets.fr/wiki/Main\_Page](https://www.botnets.fr/wiki/Main_Page) | | Clean MX | [http://support.clean-mx.de/clean-mx/viruses.php](http://support.clean-mx.de/clean-mx/viruses.php) | | Contagio | [http://contagiodump.blogspot.se/](http://contagiodump.blogspot.se/) | | Custom Google search engine | [https://cse.google.com/cse/home?cx=011750002002865445766%3Apc60zx1rliu](https://cse.google.com/cse/home?cx=011750002002865445766%3Apc60zx1rliu) (from Corey Harrell) | | Cybercrime tracker | [http://cybercrime-tracker.net/](http://cybercrime-tracker.net/) | | Dont need coffee | [http://malware.dontneedcoffee.com/](http://malware.dontneedcoffee.com/) | | Exposed Botnets | [http://www.exposedbotnets.com/](http://www.exposedbotnets.com/) | | H3X tracker | [http://tracker.h3x.eu/](http://tracker.h3x.eu/) | | Malc0de | [http://malc0de.com/database/](http://malc0de.com/database/) | | No more ransom | [https://www.nomoreransom.org/](https://www.nomoreransom.org/) | | Kernel mode | [http://www.kernelmode.info](http://www.kernelmode.info/) | | Malware domain list | [http://www.malwaredomainlist.com](http://www.malwaredomainlist.com/) | | Malware domain blocklist | [http://www.malwaredomains.com](http://www.malwaredomains.com/) | | Malware museum | [https://archive.org/details/malwaremuseum](https://archive.org/details/malwaremuseum) | | Malware src | [https://malwares.github.io/](https://malwares.github.io/) | | Malware.lu | [https://malware.lu/](https://malware.lu/) | | Mirai tracker | [https://mirai.security.gives/](https://mirai.security.gives/) | | MISP | [https://github.com/MISP/MISP](https://github.com/MISP/MISP) | | Ransomware overview | [https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml#](https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml#) | | Ransomware simulator | [https://shinolocker.com/](https://shinolocker.com/) | | Ransomware tracker | [https://ransomwaretracker.abuse.ch/tracker/](https://ransomwaretracker.abuse.ch/tracker/) | | SafeGroup | [http://www.malware.pl/](http://www.malware.pl/) - [https://www.scumware.org/](https://www.scumware.org/) | | Structured Threat Information eXpression | [https://stixproject.github.io/](https://stixproject.github.io/) | | The Zoo aka Malware DB | [https://ytisf.github.io/theZoo/](https://ytisf.github.io/theZoo/) | | Total hash | [https://totalhash.cymru.com/](https://totalhash.cymru.com/) | | VirusBay | [https://beta.virusbay.io/](https://beta.virusbay.io/) | | VirusShare | [https://virusshare.com/](https://virusshare.com/) | | VX Vault | [http://vxvault.net/](http://vxvault.net/) | | Yararules | [https://github.com/Yara-Rules/rules](https://github.com/Yara-Rules/rules) | | ZeuS Tracker | [https://zeustracker.abuse.ch](https://zeustracker.abuse.ch/) | ## Malware analysis - Sandbox 😷 | Name | URL | | --- | --- | | Zeltser’s list | [https://zeltser.com/automated-malware-analysis/](https://zeltser.com/automated-malware-analysis/) | | Cuckoo Sandbox | [https://www.cuckoosandbox.org/](https://www.cuckoosandbox.org/) | | Mastiff | [https://github.com/KoreLogicSecurity/mastiff](https://github.com/KoreLogicSecurity/mastiff) | | Fastir | [https://github.com/SekoiaLab/Fastir\_Collector](https://github.com/SekoiaLab/Fastir_Collector) | | SysAnalyser | [https://github.com/dzzie/SysAnalyzer](https://github.com/dzzie/SysAnalyzer) | | Viper | [https://github.com/viper-framework/viper](https://github.com/viper-framework/viper) | | REMnux | [http://zeltser.com/remnux/](http://zeltser.com/remnux/) | | Zeltser analysis | [http://zeltser.com/reverse-malware/automated-malware-analysis.html](http://zeltser.com/reverse-malware/automated-malware-analysis.html) | | Manalyze | [https://github.com/JusticeRage/Manalyze](https://github.com/JusticeRage/Manalyze) | | Quarkslab IRMA | [http://irma.quarkslab.com/](http://irma.quarkslab.com/) | | Dorothy2 | [https://github.com/m4rco-/dorothy2](https://github.com/m4rco-/dorothy2) | | F-Secure see | [https://github.com/F-Secure/see](https://github.com/F-Secure/see) | | Noriben | [https://github.com/Rurik/Noriben](https://github.com/Rurik/Noriben) | | Malheur | [https://github.com/rieck/malheur](https://github.com/rieck/malheur) | | Drakvuf | [https://github.com/tklengyel/drakvuf](https://github.com/tklengyel/drakvuf) | | Zero Wine Tryouts | [http://zerowine-tryout.sourceforge.net/](http://zerowine-tryout.sourceforge.net/) | | RFI sandbox | [https://monkey.org/~jose/software/rfi-sandbox/](https://monkey.org/~jose/software/rfi-sandbox/) | | Malwasm | [https://github.com/malwarelu/malwasm](https://github.com/malwarelu/malwasm) | ## Malware analysis - Sandbox - Online 😷 | Name | URL | | --- | --- | | Any.run | [https://any.run/](https://any.run/) | | AVcaesar | [https://avcaesar.malware.lu/](https://avcaesar.malware.lu/) | | Cape | [https://cape.contextis.com/](https://cape.contextis.com/) | | Comodo | [https://cit.valkyrie.comodo.com/](https://cit.valkyrie.comodo.com/) | | Hybrid analysis | [https://www.hybrid-analysis.com/](https://www.hybrid-analysis.com/) | | ID Ransomware | [https://id-ransomware.malwarehunterteam.com/](https://id-ransomware.malwarehunterteam.com/) | | Jotti | [http://virusscan.jotti.org/it](http://virusscan.jotti.org/it) | | Joe sandbox | [https://www.joesandbox.com/](https://www.joesandbox.com/) | | Malwareconfig | [http://malwareconfig.com/](http://malwareconfig.com/) | | Malware tracker | [http://www.cryptam.com/](http://www.cryptam.com/) | | Malwr - Cuckoo | [https://malwr.com/](https://malwr.com/) | | Other list | [http://cleanbytes.net/malware-online-scanners](http://cleanbytes.net/malware-online-scanners) | | PDF examiner | [http://www.pdfexaminer.com/](http://www.pdfexaminer.com/) | | PE dump | [https://github.com/zed-0xff/pedump](https://github.com/zed-0xff/pedump) | | Randomly changes Win32/64 PE Files | [https://github.com/secretsquirrel/recomposer](https://github.com/secretsquirrel/recomposer) | | ViCheck | [https://www.vicheck.ca/](https://www.vicheck.ca/) | | Virscan | [http://www.virscan.org/](http://www.virscan.org/) | | VirusTotal | [http://www.virustotal.com/](http://www.virustotal.com/) | | Virus Total Notifier | [https://github.com/mubix/vt-notify](https://github.com/mubix/vt-notify) | ## Mobile πŸ“± | Name | URL | | --- | --- | | APK Analzyer | [http://www.apk-analyzer.net/](http://www.apk-analyzer.net/) | | Droid Sec wiki | [http://www.droidsec.org/wiki/](http://www.droidsec.org/wiki/) | | Joebox Cloud | [https://jbxcloud.joesecurity.org/login](https://jbxcloud.joesecurity.org/login) | | Mobile security wiki | [https://mobilesecuritywiki.com/](https://mobilesecuritywiki.com/) ⭐ | | OWASP Goat Droid | [https://www.owasp.org/index.php/Projects/OWASP\_GoatDroid\_Project](https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project) | | Sand droid | [http://sanddroid.xjtu.edu.cn](http://sanddroid.xjtu.edu.cn/) | | Wiki secmobi | [https://github.com/secmobi/wiki.secmobi.com](https://github.com/secmobi/wiki.secmobi.com) πŸ† | ## Network | Name | URL | | --- | --- | | Awesome PCAP | [https://github.com/caesar0301/awesome-pcaptools](https://github.com/caesar0301/awesome-pcaptools) ⭐ | | BGPlay | [https://stat.ripe.net/widget/bgplay](https://stat.ripe.net/widget/bgplay) ⭐ | | GNU/Linux monitoring | [https://blog.serverdensity.com/80-linux-monitoring-tools-know/](https://blog.serverdensity.com/80-linux-monitoring-tools-know/) | | MAC address block | [http://standards-oui.ieee.org/oui/oui.txt](http://standards-oui.ieee.org/oui/oui.txt) | | MAC find | [http://www.coffer.com/mac\_find/](http://www.coffer.com/mac_find/) | | MAC find | [http://hwaddress.com](http://hwaddress.com/) | | Packet total | [http://www.packettotal.com/](http://www.packettotal.com/) | | Ping.eu | [http://ping.eu/](http://ping.eu/) | | Project honeypot | [https://www.projecthoneypot.org/](https://www.projecthoneypot.org/) | | Protocol Numbers | [http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml](http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) | | Publicly PCAP files | [http://www.netresec.com/?page=PcapFiles](http://www.netresec.com/?page=PcapFiles) | | Service Port Number Registry | [https://www.iana.org/assignments/service-names-port-numbers/](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml) ⭐⭐ | | Service Port Number Registry | [https://en.wikipedia.org/wiki/List\_of\_TCP\_and\_UDP\_port\_numbers](https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers) | | Subnet calculator | [http://www.subnet-calculator.com/cidr.php](http://www.subnet-calculator.com/cidr.php) | | Subnet calculator | [http://www.subnetonline.com/pages/subnet-calculators.php](http://www.subnetonline.com/pages/subnet-calculators.php) | | Security Onion tools | [https://github.com/Security-Onion-Solutions/security-onion/wiki/Tools](https://github.com/Security-Onion-Solutions/security-onion/wiki/Tools) | ## OSINT | Name | URL | | --- | --- | | Osint list | [https://github.com/jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) ⭐ | | List of social network | [https://en.wikipedia.org/wiki/List\_of\_social\_networking\_websites](https://en.wikipedia.org/wiki/List_of_social_networking_websites) ⭐ | | Reddit | [https://www.reddit.com/r/SocialEngineering/](https://www.reddit.com/r/SocialEngineering/) | | Maltego | [https://www.paterva.com/](https://www.paterva.com/) | | Hunter | [https://hunter.io/](https://hunter.io/) | | Pipl | [https://pipl.com/](https://pipl.com/) | | Peek you | [http://www.peekyou.com/](http://www.peekyou.com/) | | Lullar | [http://com.lullar.com/](http://com.lullar.com/) | | Lakako | [http://www.lakako.com/](http://www.lakako.com/) | | Yasni | [http://www.yasni.com/](http://www.yasni.com/) | | User search | [https://usersearch.org/](https://usersearch.org/) | | Google | [https://www.google.com/advanced\_search](https://www.google.com/advanced_search) | | Google dorks | `intext:lastName firstName` | | Google dorks | `insubject:lastName firstName` | | Google dorks | `intext:lastName firstName filetype:pdf | | Google Scraper | [https://github.com/NikolaiT/GoogleScraper](https://github.com/NikolaiT/GoogleScraper) | | Bing | [https://www.bing.com/](https://www.bing.com/) | | Bing dorks | `lastName firstName (filetype:doc OR filetype:ppt OR filetype:pps OR filetype:xls OR filetype:docx OR filetype:pptx OR filetype:ppsx OR filetype:xlsx OR filetype:sxw OR filetype:sxc OR filetype:sxi OR filetype:odt OR filetype:ods OR filetype:odg OR filetype:odp OR filetype:pdf OR filetype:wpd OR filetype:svg OR filetype:svgz OR filetype:indd OR filetype:rdp OR filetype:ica)` | | Yahoo | [https://search.yahoo.com/](https://search.yahoo.com/) | | Duck duck go | [https://duckduckgo.com/](https://duckduckgo.com/) | | Yandex | [https://www.yandex.com/](https://www.yandex.com/) | | Exa lead | [http://www.exalead.com](http://www.exalead.com/) | | Osint stalker | [https://github.com/milo2012/osintstalker](https://github.com/milo2012/osintstalker) | | Speed phish framework | [https://github.com/tatanus/SPF](https://github.com/tatanus/SPF) | | Browser exploitation framework | [https://github.com/beefproject/beef](https://github.com/beefproject/beef) | | The harvester | [https://github.com/laramies/theHarvester](https://github.com/laramies/theHarvester) | | Meta goofil | [https://github.com/laramies/metagoofil](https://github.com/laramies/metagoofil) | ## OS X | Name | URL | | --- | --- | | Awesome OSX & IOS sec list | [https://github.com/ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) | | OSX auditor | [https://github.com/jipegit/OSXAuditor](https://github.com/jipegit/OSXAuditor) | | OWASP iGoat Project | [https://www.owasp.org/index.php/OWASP\_iGoat\_Project](https://www.owasp.org/index.php/OWASP_iGoat_Project) | | Security and privacy guide | [https://github.com/drduh/OS-X-Security-and-Privacy-Guide](https://github.com/drduh/OS-X-Security-and-Privacy-Guide) | | stronghold - Easily configure MacOS security settings from the terminal. | [https://github.com/alichtman/stronghold](https://github.com/alichtman/stronghold) | ## Passwords πŸ”‘ | Name | URL | | --- | --- | | CrackStation | [https://crackstation.net/buy-crackstation-wordlist-password-cracking-dictionary.htm](https://crackstation.net/buy-crackstation-wordlist-password-cracking-dictionary.htm) | | Default password | [https://default-password.info/](https://default-password.info/) | | Default password | [https://cirt.net/passwords](https://cirt.net/passwords) | | Default password | [http://www.defaultpassword.com/](http://www.defaultpassword.com/) | | Default password | [http://www.defaultpassword.us/](http://www.defaultpassword.us/) | | Default cameras password | [https://github.com/jeanphorn/wordlist/blob/master/README.md](https://github.com/jeanphorn/wordlist/blob/master/README.md) | | Default password thc-hydra | [https://github.com/vanhauser-thc/thc-hydra/blob/master/dpl4hydra\_full.csv](https://github.com/vanhauser-thc/thc-hydra/blob/master/dpl4hydra_full.csv) | | Dafault router password | [http://www.cleancss.com/router-default/](http://www.cleancss.com/router-default/) | | Default router password | [https://github.com/jeanphorn/wordlist/blob/master/router\_default\_password.md](https://github.com/jeanphorn/wordlist/blob/master/router_default_password.md) | | Default VoIP password | [https://github.com/netbiosX/Default-Credentials/blob/master/VoIP-Default-Password-List.mdown](https://github.com/netbiosX/Default-Credentials/blob/master/VoIP-Default-Password-List.mdown) | | Fun secure password checker | [https://password.kaspersky.com/](https://password.kaspersky.com/) | | Hashcat WIKI | [https://hashcat.net/wiki/](https://hashcat.net/wiki/) | | Multiple dictionary | [https://github.com/danielmiessler/SecLists/tree/master/Passwords](https://github.com/danielmiessler/SecLists/tree/master/Passwords) | | Multiple dictionary | [https://github.com/duyetdev/bruteforce-database](https://github.com/duyetdev/bruteforce-database) | | Online CrackStation | [https://crackstation.net](https://crackstation.net/) | | Online Hask Killer | [https://hashkiller.co.uk](https://hashkiller.co.uk/) | | Online Hash crack | [http://www.onlinehashcrack.com/](http://www.onlinehashcrack.com/) | | Online MD5 and SHA1 db | [http://hashtoolkit.com/](http://hashtoolkit.com/) | | OpenWall | [http://www.openwall.com/passwords/wordlists/](http://www.openwall.com/passwords/wordlists/) or ftp://ftp.openwall.com/pub/wordlists/ | | Outpost9 | [http://www.outpost9.com/files/WordLists.html](http://www.outpost9.com/files/WordLists.html) | | Packets storm | [https://packetstormsecurity.com/Crackers/wordlists/](https://packetstormsecurity.com/Crackers/wordlists/) | | Password research | [http://www.passwordresearch.com/](http://www.passwordresearch.com/) | | Programming - Secure Password Storage | [https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016](https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016) | | SecLists | [https://github.com/danielmiessler/SecLists/tree/master/Passwords](https://github.com/danielmiessler/SecLists/tree/master/Passwords) | | Skull security | [https://wiki.skullsecurity.org/Passwords](https://wiki.skullsecurity.org/Passwords) | | SSH dictionary | [https://github.com/droope/pwlist](https://github.com/droope/pwlist) | ## Penetration testing πŸ”§ | Name | URL | | --- | --- | | Awesome pentest | [https://github.com/enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) | | Awesome WAF | [https://github.com/0xInfection/Awesome-WAF](https://github.com/0xInfection/Awesome-WAF) | | Footprinting - Procedure & tools | [http://www.0daysecurity.com/penetration-testing/network-footprinting.html](http://www.0daysecurity.com/penetration-testing/network-footprinting.html) | | GNU/Linux privilege escalation | [https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/) ⭐ | | Informaion gathering - Tools | [http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/information-gathering.html](http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/information-gathering.html) | | IppSec channel | [https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA](https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA) | | Organization of the Standard | [http://www.pentest-standard.org/index.php/Main\_Page](http://www.pentest-standard.org/index.php/Main_Page) ⭐ | | Owasp - Check list | [https://www.owasp.org/index.php/Testing\_Checklist](https://www.owasp.org/index.php/Testing_Checklist) | | Owasp testing guide | [https://www.owasp.org/images/1/19/OTGv4.pdf](https://www.owasp.org/images/1/19/OTGv4.pdf) ⭐⭐ | | Owasp - tools | [https://www.owasp.org/index.php/Category:OWASP\_Tool](https://www.owasp.org/index.php/Category:OWASP_Tool) | | Public pentest reports | [https://github.com/juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) ⭐ | | Python tools for pentest | [https://github.com/dloss/python-pentest-tools](https://github.com/dloss/python-pentest-tools) | | Report sample | [https://www.offensive-security.com/reports/sample-penetration-testing-report.pdf](https://www.offensive-security.com/reports/sample-penetration-testing-report.pdf) | | Reverse engineering | [http://wiki.yobi.be/wiki/Reverse-Engineering](http://wiki.yobi.be/wiki/Reverse-Engineering) | | SANS Penetration Testing | [http://pen-testing.sans.org](http://pen-testing.sans.org/) | | Services enumeration | [http://www.0daysecurity.com/penetration-testing/enumeration.html](http://www.0daysecurity.com/penetration-testing/enumeration.html) ⭐ | | Tools - BlackArch list | [https://blackarch.org/tools.html](https://blackarch.org/tools.html) | | Tools - Great list | [http://wiki.yobi.be/wiki/Table\_of\_contents#Security](http://wiki.yobi.be/wiki/Table_of_contents#Security) | | Tools - Kali list | [http://tools.kali.org/tools-listing](http://tools.kali.org/tools-listing) | | Web | [http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/web-application-analysis.html](http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/web-application-analysis.html) | | Web vulnerabilities | [http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/vulnerability-assessment.html](http://www.w4rri0r.com/hacking-tools-windows-os-x-linux-android-solaris-unixware/vulnerability-assessment.html) | | Webshell list | [https://github.com/tennc/webshell](https://github.com/tennc/webshell) | ## Port scanners 🎯 && Wide Scans πŸ—½ | Name | URL | | --- | --- | | Masscan | [https://github.com/robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) | | Masscan Defcon conference | [https://defcon.org/](https://defcon.org/images/defcon-22/dc-22-presentations/Graham-McMillan-Tentler/DEFCON-22-Graham-McMillan-Tentler-Masscaning-the-Internet.pdf) | | Network Scan Mon | [https://scan.netlab.360.com/#/dashboard](https://scan.netlab.360.com/#/dashboard) | | Nmap | [https://nmap.org/7/](https://nmap.org/7/) | | Nscan | [https://github.com/OffensivePython/Nscan](https://github.com/OffensivePython/Nscan) | | PFRing | [https://github.com/ntop/PF\_RING](https://github.com/ntop/PF_RING) | | Rapid7 Sonar Labs | [https://sonar.labs.rapid7.com/](https://sonar.labs.rapid7.com/) | | Rapid7 Sonar Blackhat conference | [https://www.blackhat.com/](https://www.blackhat.com/docs/asia-14/materials/Schloesser/Asia-14-Schloesser-Scan-All-The-Things.pdf) | | [Scans.io](http://Scans.io) | [https://scans.io/](https://scans.io/) | | Shadowserver | [https://www.shadowserver.org/](https://www.shadowserver.org/) ⭐⭐⭐⭐ | | Sonar similar projects | [https://github.com/rapid7/sonar/wiki/Similar-Projects](https://github.com/rapid7/sonar/wiki/Similar-Projects) | | Trending Ports | [https://isc.sans.edu/trends.html](https://isc.sans.edu/trends.html) | | Zmap | [https://zmap.io/](https://zmap.io/) | | Zgrab | [https://github.com/zmap/zgrab](https://github.com/zmap/zgrab) | ## Search engines πŸ“‘ | Name | URL | | --- | --- | | ZoomEye | [https://zoomeye.org/](https://zoomeye.org/) β­πŸ‡¨πŸ‡³ | | Shodan | [https://www.shodan.io/](https://www.shodan.io/) | | Censys | [https://censys.io/](https://censys.io/) | | Gegereka | [http://gegereka.com/](http://gegereka.com/) (not always up) | | Google | [https://www.google.com/advanced\_search](https://www.google.com/advanced_search) | | Google dorks | [https://gist.github.com/zbetcheckin/04e6a5d7f2d5ef8cfa3c298701f47f9c](https://gist.github.com/zbetcheckin/04e6a5d7f2d5ef8cfa3c298701f47f9c) | | List of search engines | [https://en.wikipedia.org/wiki/List\_of\_search\_engines](https://en.wikipedia.org/wiki/List_of_search_engines) | | Threat crowd | [https://www.threatcrowd.org/](https://www.threatcrowd.org/) | ## Security challenges / WarGames 🚩 | Name | URL | | --- | --- | | Zenk-Security | [https://www.zenk-security.com/](https://www.zenk-security.com/) | | Root-Me | [http://www.root-me.org/](http://www.root-me.org/) | | Overthewire | [http://overthewire.org/wargames/](http://overthewire.org/wargames/) | | Reversing | [http://reversing.kr/](http://reversing.kr/) | | Pwnable | [http://pwnable.kr/](http://pwnable.kr/) | | Newbiecontest | [https://www.newbiecontest.org/](https://www.newbiecontest.org/) | | OWASP VWAD list | [https://github.com/OWASP/OWASP-VWAD/](https://github.com/OWASP/OWASP-VWAD/) | | WeChall | [https://www.wechall.net/](https://www.wechall.net/) | | Vulnhub | [https://www.vulnhub.com/](https://www.vulnhub.com/) ⭐ | | Net Garage | [http://io.netgarage.org/](http://io.netgarage.org/) | | SmashTheStack | [http://smashthestack.org/](http://smashthestack.org/) | | Hackthissite | [http://www.hackthissite.org/](http://www.hackthissite.org/) | | [Hack.me](http://Hack.me) | [https://hack.me](https://hack.me/) | | HackThis! | [http://www.hackthis.co.uk/](http://www.hackthis.co.uk/) | | Backdoor.Sdslabs | [https://backdoor.sdslabs.co/](https://backdoor.sdslabs.co/) | | Bright-shadows | [http://www.bright-shadows.net/](http://www.bright-shadows.net/) | | SmashTheStack | [http://smashthestack.org/](http://smashthestack.org/) | | Ringzer0team | [https://ringzer0team.com/challenges](https://ringzer0team.com/challenges) | | Forensic contest | [http://forensicscontest.com/puzzles](http://forensicscontest.com/puzzles) | | Lost chall | [http://www.lost-chall.org/](http://www.lost-chall.org/) | | Rankk | [http://www.rankk.org/](http://www.rankk.org/) | | Happy Security | [http://www.happy-security.de/](http://www.happy-security.de/) | | Net force | [https://www.net-force.nl/challenges/](https://www.net-force.nl/challenges/) | | CanYouHack.it | [http://canyouhack.it/](http://canyouhack.it/) | | Hellboundhackers | [https://www.hellboundhackers.org/](https://www.hellboundhackers.org/) | | Microcorruption | [https://microcorruption.com/](https://microcorruption.com/) | ## Skimmer πŸƒ | Name | URL | | --- | --- | | Skimmer source from Krebs | [https://krebsonsecurity.com/all-about-skimmers/](https://krebsonsecurity.com/all-about-skimmers/) | | Great reverse engineering on skimmer | [https://trustfoundry.net/reverse-engineering-a-discovered-atm-skimmer/](https://trustfoundry.net/reverse-engineering-a-discovered-atm-skimmer/) | ## SSH | Name | URL | | --- | --- | | Bruteforce know hosts | [https://github.com/Churro/bruteforce-known-hosts](https://github.com/Churro/bruteforce-known-hosts) | | OpenSSH guidelines | [https://wiki.mozilla.org/Security/Guidelines/OpenSSH](https://wiki.mozilla.org/Security/Guidelines/OpenSSH) | | SSH audit | [https://github.com/arthepsy/ssh-audit.git](https://github.com/arthepsy/ssh-audit.git) | | SSH audit online | [https://sshcheck.com](https://sshcheck.com/) | | Who’s there | [https://github.com/FiloSottile/whosthere](https://github.com/FiloSottile/whosthere) | ## SSL | Name | URL | | --- | --- | | Certificate search | [https://crt.sh](https://crt.sh/) | | Bad SSL | [https://github.com/chromium/badssl.com](https://github.com/chromium/badssl.com) | | Htbridge - Online analysis | [https://www.htbridge.com/ssl/](https://www.htbridge.com/ssl/) | | Mozilla SSL Configuration Generator | [https://mozilla.github.io/server-side-tls/ssl-config-generator/](https://mozilla.github.io/server-side-tls/ssl-config-generator/) | | Observatory by Mozilla - Online analysis | [https://observatory.mozilla.org/](https://observatory.mozilla.org/) ⭐⭐⭐⭐ | | O-Saft - Tools | [https://www.owasp.org/index.php/O-Saft](https://www.owasp.org/index.php/O-Saft) | | OWASP tests - Procedure | [https://www.owasp.org/index.php/Testing\_for\_Weak\_SSL/TLS\_Ciphers](https://www.owasp.org/index.php/Testing_for_Weak_SSL/TLS_Ciphers,_Insufficient_Transport_Layer_Protection_(OTG-CRYPST-002)) | | Qualys SSL Labs - Online analysis | [https://www.ssllabs.com/ssltest/](https://www.ssllabs.com/ssltest/) | | SSLscan - Tools | [https://github.com/rbsec/sslscan](https://github.com/rbsec/sslscan) | | SSLyze - Tools | [https://github.com/iSECPartners/sslyze](https://github.com/iSECPartners/sslyze) | | Testssl.sh - Tools | [https://github.com/drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) ⭐ | ## TOR | Name | URL | | --- | --- | | Hidden services | [https://www.torproject.org/docs/hidden-services.html.en](https://www.torproject.org/docs/hidden-services.html.en) | | Hidden services scanner | [https://github.com/superp00t/sadonion](https://github.com/superp00t/sadonion) | | Reddit | [https://www.reddit.com/r/onions/](https://www.reddit.com/r/onions/) | | Scan Onion Services | [https://github.com/s-rah/onionscan](https://github.com/s-rah/onionscan) | | Search engine - Grams | [http://grams7enufi7jmdl.onion/](http://grams7enufi7jmdl.onion/) | | Search engine - Ahmia | [https://ahmia.fi/](https://ahmia.fi/) | | Search engine - TORCH | [http://xmh57jrzrnw6insl.onion/](http://xmh57jrzrnw6insl.onion/) | | Search engine - DuckDuckGo | [http://3g2upl4pq6kufc4m.onion/](http://3g2upl4pq6kufc4m.onion/) | | Tails | [https://tails.boum.org/](https://tails.boum.org/) | | The hidden wiki | [https://thehiddenwiki.org/](https://thehiddenwiki.org/) | | Tolerant ISP for exit node | [https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs](https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs) | | Tor Browser Fingerprint | [https://github.com/jonaslejon/tor-fingerprint](https://github.com/jonaslejon/tor-fingerprint) | | Tor Bulk exit list | [https://check.torproject.org/cgi-bin/TorBulkExitList.py](https://check.torproject.org/cgi-bin/TorBulkExitList.py) | | Tor IP history | [https://exonerator.torproject.org/](https://exonerator.torproject.org/) | | Tor Know exit nodes | [https://check.torproject.org/exit-addresses](https://check.torproject.org/exit-addresses) | | Tor Project | [https://www.torproject.org/](https://www.torproject.org/) | | Tor Relays bandwidth | [https://github.com/TheTorProject/bwscanner](https://github.com/TheTorProject/bwscanner) | | Tor Socks | [https://gitweb.torproject.org/torsocks.git](https://gitweb.torproject.org/torsocks.git) | | Tor Status | [https://torstatus.blutmagie.de/](https://torstatus.blutmagie.de/) | | URL onion inspector | [https://github.com/k4m4/onioff](https://github.com/k4m4/onioff) | ## VOIP ☎ | Name | URL | | --- | --- | | Penetration test | [http://0daysecurity.com/penetration-testing/VoIP-security.html](http://0daysecurity.com/penetration-testing/VoIP-security.html) | ## VPN | Name | URL | | --- | --- | | Open VPN | [https://github.com/OpenVPN](https://github.com/OpenVPN) | | Comparison | [https://thatoneprivacysite.net/vpn-comparison-chart/](https://thatoneprivacysite.net/vpn-comparison-chart/) | | Location test | [https://www.dnsleaktest.com/](https://www.dnsleaktest.com/) | | Location test | [https://ipleak.net/](https://ipleak.net/) | ## Vulnerable environments πŸ”“ | Name | URL | | --- | --- | | Owasp list | [https://www.owasp.org/index.php/OWASP\_Vulnerable\_Web\_Applications\_Directory\_Project/Pages/Offline](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project/Pages/Offline) | | Owasp BWA | [https://www.owasp.org/index.php/OWASP\_Broken\_Web\_Applications\_Project](https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project) | | DVWA | [http://www.dvwa.co.uk/](http://www.dvwa.co.uk/) | | WebGoat | [http://code.google.com/p/webgoat](http://code.google.com/p/webgoat) | | Metasploitable 3 | [https://github.com/rapid7/metasploitable3/wiki](https://github.com/rapid7/metasploitable3/wiki) | | Vulnerable systems list | [https://www.amanhardikar.com/mindmaps/Practice.html](https://www.amanhardikar.com/mindmaps/Practice.html) ⭐ | | VulnHub | [http://vulnhub.com/](http://vulnhub.com/) | | LampSecurity | [http://sourceforge.net/projects/lampsecurity/](http://sourceforge.net/projects/lampsecurity/) | | Hackademic-RTB1 | [http://www.aldeid.com/wiki/Hackademic-RTB1](http://www.aldeid.com/wiki/Hackademic-RTB1) | | Moth | [http://www.bonsai-sec.com](http://www.bonsai-sec.com/) | | Peruggia | [http://sourceforge.net/projects/peruggia/](http://sourceforge.net/projects/peruggia/) | ## Web browser | Name | URL | | --- | --- | | Amiunique project | [https://github.com/DIVERSIFY-project/amiunique](https://github.com/DIVERSIFY-project/amiunique) | | Browser exploit | [https://github.com/julienbedard/browsersploit](https://github.com/julienbedard/browsersploit) | | Browser info | [http://www.browser-info.net/](http://www.browser-info.net/) | | Browser leaks | [https://www.browserleaks.com/](https://www.browserleaks.com/) | | Browser recommendations | [https://gist.github.com/atcuno/3425484ac5cce5298932](https://gist.github.com/atcuno/3425484ac5cce5298932) ⭐ | | Browserling | [https://www.browserling.com/](https://www.browserling.com/) | | Fingerprint | [https://amiunique.org/](https://amiunique.org/) | | Fingerprint | [https://panopticlick.eff.org/](https://panopticlick.eff.org/) | | Flash | [http://isflashinstalled.com/](http://isflashinstalled.com/) | | Referer | [https://www.whatismyreferer.com/](https://www.whatismyreferer.com/) | | SSL | [https://www.ssllabs.com/ssltest/viewMyClient.html](https://www.ssllabs.com/ssltest/viewMyClient.html) | | URL Shorter List | [https://bit.do/list-of-url-shorteners.php](https://bit.do/list-of-url-shorteners.php) | | User agent | [http://useragentstring.com/pages/useragentstring.php](http://useragentstring.com/pages/useragentstring.php) | | User agent | [http://whatsmyuseragent.com/](http://whatsmyuseragent.com/) | | User agent | [https://www.projecthoneypot.org/robot\_useragents.php](https://www.projecthoneypot.org/robot_useragents.php) | | User agent | [https://www.whatismybrowser.com/developers/tools/user-agent-parser/browse](https://www.whatismybrowser.com/developers/tools/user-agent-parser/browse) | | Web technologies support tables | [https://caniuse.com/](https://caniuse.com/) | ## Windows | Name | URL | | --- | --- | | Anti forensic Windows | [https://www.reddit.com/r/security/comments/32fb1l/open\_guide\_to\_scrubbing\_windows\_oss\_from\_forensic/](https://www.reddit.com/r/security/comments/32fb1l/open_guide_to_scrubbing_windows_oss_from_forensic/) | | Security development | [https://github.com/ExpLife0011/awesome-windows-kernel-security-development](https://github.com/ExpLife0011/awesome-windows-kernel-security-development) | | Windows executable walkthrough | [https://i.imgur.com/pHjcI.png](https://i.imgur.com/pHjcI.png) | | Windows exploitation | [https://github.com/r3p3r/nixawk-awesome-windows-exploitation](https://github.com/r3p3r/nixawk-awesome-windows-exploitation) | | Windows hardening | [https://github.com/PaulSec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) | ## Wireless / Radio πŸ“Ά | Name | URL | | --- | --- | | Awesome wifi tools list | [https://github.com/0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) | | Penetration test | [http://0daysecurity.com/penetration-testing/wireless-penetration.html](http://0daysecurity.com/penetration-testing/wireless-penetration.html) | | Great wifi map | [https://wigle.net/](https://wigle.net/) | | RFSec-ToolKit | [https://github.com/cn0xroot/RFSec-ToolKit](https://github.com/cn0xroot/RFSec-ToolKit) | | RTL-SDR | [http://www.rtl-sdr.com/](http://www.rtl-sdr.com/) | | Wireless in airports | [https://www.google.com/maps/d/viewer?mid=1Z1dI8hoBZSJNWFx2xr\_MMxSxSxY](https://www.google.com/maps/d/viewer?mid=1Z1dI8hoBZSJNWFx2xr_MMxSxSxY) | Inspired by `nothink.org` ## **ENJOY & HAPPY LEARNING!** ❀ Appreciate the share & feedback! don’t be cheap! ![](https://i.ibb.co/rwpPJZy/Leechers.gif) ---
**Author:** ![leejiacheng1](https://onehack.st/user_avatar/onehack.st/leejiacheng1/32/94426_2.png) [@leejiacheng1](https://onehack.st/u/leejiacheng1)\ **Post date:** [June 8, 2024, 10:43pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/3 "2024-06-08T22:43:31Z")
Great collection of these list, appreciate πŸ‘ ---
**Author:** ![Bailey\_S](https://onehack.st/user_avatar/onehack.st/bailey_s/32/148187_2.png) [@Bailey\_S](https://onehack.st/u/Bailey_S)\ **Post date:** [June 9, 2024, 3:29am UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/4 "2024-06-09T03:29:32Z")
Amazing list and helpful list like always Sam, thank you much! ---
**Author:** ![princesk2024](https://onehack.st/user_avatar/onehack.st/princesk2024/32/146612_2.png) [@princesk2024](https://onehack.st/u/princesk2024)\ **Post date:** [June 10, 2024, 3:44pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/6 "2024-06-10T15:44:29Z")
Amazing! Thank you! ---
**Author:** ![Skuz](https://onehack.st/user_avatar/onehack.st/skuz/32/148948_2.png) [@Skuz](https://onehack.st/u/Skuz)\ **Post date:** [June 16, 2024, 7:50pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/7 "2024-06-16T19:50:36Z")
Brilliant, Thanks πŸ’― ---
**Author:** ![Pete\_Burke](https://onehack.st/user_avatar/onehack.st/pete_burke/32/115518_2.png) [@Pete\_Burke](https://onehack.st/u/Pete_Burke)\ **Post date:** [June 17, 2024, 4:02pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/8 "2024-06-17T16:02:34Z")
SICKBOY SAYS `WHAT A HOOTER..MANY THANKS` πŸ™Š πŸ™‰ ---
**Author:** ![Umm\_Guys](https://onehack.st/user_avatar/onehack.st/umm_guys/32/137200_2.png) [@Umm\_Guys](https://onehack.st/u/Umm_Guys)\ **Post date:** [July 9, 2024, 11:51pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/9 "2024-07-09T23:51:32Z")
**Thanks** Gotta dig for a while ---
**Author:** ![Bob.Smit](https://onehack.st/user_avatar/onehack.st/bob.smit/32/161700_2.png) [@Bob.Smit](https://onehack.st/u/Bob.Smit)\ **Post date:** [September 22, 2024, 11:29pm UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/10 "2024-09-22T23:29:29Z")
Awesome list indeed! ---
**Author:** ![Myownman](https://onehack.st/user_avatar/onehack.st/myownman/32/128175_2.png) [@Myownman](https://onehack.st/u/Myownman)\ **Post date:** [September 23, 2024, 3:10am UTC](https://onehack.st/t/awesome-security-list-for-fun-and-profit-massive-collection-resources/284246/11 "2024-09-23T03:10:19Z")
Just perfect my man! Thanks!