Resources

Curated security tools, references, and learning materials

> Reconnaissance

Shodan

Search engine for Internet-connected devices

shodan.io

crt.sh

Certificate transparency log search

crt.sh

DNSDumpster

DNS recon and research

dnsdumpster.com

> Web Security

Burp Suite

Web vulnerability scanner and proxy

portswigger.net

OWASP ZAP

Open source web app security scanner

owasp.org

SQLMap

Automatic SQL injection tool

sqlmap.org

> CTF Platforms

CTFtime

CTF event calendar and team rankings

ctftime.org

Hack The Box

Online penetration testing labs

hackthebox.com

TryHackMe

Learn cyber security with hands-on labs

tryhackme.com

> Learning Resources

PortSwigger Academy

Free web security training

portswigger.net

OWASP Testing Guide

Comprehensive web security testing methodology

owasp.org

HackTricks

Pentesting methodology and cheatsheets

hacktricks.xyz