Martryohka doll play.picoctf.org

Beginner file analysis challenge.

Wireshark doo doo doo play.picoctf.org

Beginner packet analysis challenge.

Wireshark two two two play.picoctf.org

Beginner packet analysis challenge.

Trivial flag transfer protocol play.picoctf.org

Beginner packet analysis challenge.

Natas overthewire.org

Teaches the basics of serverside web-security.

Bandit overthewire.org

Aimed at absolute beginners and teaches the basics of remote server access.

WebTerm Learn learn.webterm.app

Free Linux command line courses where each lesson ends in hands-on exercises in a simulated terminal in the browser. A free account is needed after the first lesson.

Nmap Tutorials labex.io

Learn and practice the basics of network scanning using Nmap.

Practice Linux Commands labex.io

A free course with 41 hands-on labs to practice and master the most commonly used Linux commands.

Nmap,Curl and Netcat echoctf.red

Get experience with Nmap, Curl and Netcat for network communications.

Volatility cyberdefenders.org

Intro to memory analysis with volatility.

Detect Log4J cyberdefenders.org

Medium level disk forensics challenge.

Splunk Boss of the SOC V3 cyberdefenders.org

Splunk analysis vol 3.

Get PDF (Malicious Document) cyberdefenders.org

Reversing PDF malware.

Banking Troubles - Windows Memory Image Forensics cyberdefenders.org

Medium level memory forensics challenge.

Ulysses - Linux Disk Image Forensics cyberdefenders.org

Medium level disk forensics challenge.

Intel101 Challenge cyberdefenders.org

Medium level Threat Intel challenge.

Spotlight - Mac Disk Image Forensics cyberdefenders.org

Medium level disk forensics challenge.

Hunter - Windows Disk Image Forensics cyberdefenders.org

Medium level disk forensics challenge.

Splunk Boss of the SOC V2 cyberdefenders.org

Splunk analysis vol 2.

Introduction to Cryptohack cryptohack.org

Medium level cryptography challenge.

Reminiscent app.hackthebox.com

Medium level disk forensics challenge.

Obsecure app.hackthebox.com

Medium level forensics challenge.

Illumination app.hackthebox.com

Medium level forensics challenge.

Emo app.hackthebox.com

Medium level forensics challenge.

Xplico xplico.org

The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), FTP, TFTP, and so on. Xplico isn’t a network…

Workbench workbench.readthedocs.org

A scalable python framework for security research and development teams.

SecMobi Wiki wiki.secmobi.com

A collection of mobile security resources which including articles, blogs, books, groups, projects, tools and conferences. *

w3af w3af.org

w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.

Threat Jammer threatjammer.com

REST API service that allows developers, security engineers, and other IT professionals to access curated threat intelligence data from a variety of sources.

SSHGuard sshguard.net

A software to protect services in addition to SSH, written in C

Sqreen sqreen.io

Sqreen is a Runtime Application Self-Protection (RASP) solution for software teams. An in-app agent instruments and monitors the app. Suspicious user activities are reported and attacks are blocked at runtime without code modification or traffic redirection.

sqlmap sqlmap.org

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range…

SBL / XBL / PBL / DBL / DROP / ROKSO spamhaus.org

The Spamhaus Project is an international nonprofit organization whose mission is to track the Internet's spam operations and sources, to provide dependable realtime anti-spam protection for Internet networks, to work with Law Enforcement Agencies to identify and pursue spam and…

SpamAssassin spamassassin.apache.org

A powerful and popular email spam filter employing a variety of detection technique.

Bifrozt sourceforge.net

Bifrozt is a NAT device with a DHCP server that is usually deployed with one NIC connected directly to the Internet and one NIC connected to the internal network. What differentiates Bifrozt from other standard NAT devices is its ability to work as a transparent SSHv2 proxy…

The Security Engineer Handbook securityhandbook.io

A short read that discusses the dos and dont's of working in a security team, and the many tricks and tips that can help you in your day-to-day as a security engineer.

Scammer-List scammerlist.now.sh

A free open source AI based Scam and Spam Finder with a free API

sagan sagan.quadrantsec.com

Sagan uses a 'Snort like' engine and rules to analyze logs (syslog/event log/snmptrap/netflow/etc).

Rudder rudder-project.org

Rudder is an easy to use, web-driven, role-based solution for IT Infrastructure Automation & Compliance. Automate common system administration tasks (installation, configuration); Enforce configuration over time (configuring once is good, ensuring that configuration is valid…

Linux Malware Detect rfxn.com

A malware scanner for Linux designed around the threats faced in shared hosted environments.

Usable Security Course pt.coursera.org

Usable Security course at coursera. Quite good for those looking for how security and usability intersects.

Project Honey Pot projecthoneypot.org

Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to…

Portswigger portswigger.net

PortSwigger offers tools for web application security, testing & scanning. Choose from a wide range of security tools & identify the very latest vulnerabilities.

PhishTank phishtank.com

PhishTank is a collaborative clearing house for data and information about phishing on the Internet. Also, PhishTank provides an open API for developers and researchers to integrate anti-phishing data into their applications at no charge.

OWASP Testing Checklist v4 owasp.org

List of some controls to test during a web vulnerability assessment. Markdown version may be found here.

OSSEC ossec.github.io

Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems…

OpenVAS NVT Feed openvas.org

The public feed of Network Vulnerability Tests (NVTs). It contains more than 35,000 NVTs (as of April 2014), growing on a daily basis. This feed is configured as the default for OpenVAS.

OpenVAS openvas.org

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.

OpenFPC openfpc.org

OpenFPC is a set of tools that combine to provide a lightweight full-packet network traffic recorder & buffering system. It's design goal is to allow non-expert users to deploy a distributed network traffic recorder on COTS hardware while integrating into existing alert and log…