Bookmarks

Curated links and external resources

Curated Collection: Unique and valuable resources for security research, infrastructure, and systems engineering. No fluff - just the tools and sites that actually matter.

No-Cost Security Services (CISA curated)

Cloudflare DDoS Protection

Free edge protection against volumetric and L7 attacks

Cloudflare Zero Trust

Access proxy, DNS filtering, and identity-aware controls

Project Shield

Google's free DDoS protection for news, human rights, and elections sites

Quad9

Anycast DNS filtering with malware blocking (free)

Let's Encrypt

Automated free TLS certificates

Zed Attack Proxy (ZAP)

Open-source web application security testing proxy

Burp Suite Community

Free edition of the Burp interception proxy for web testing

Checkov

IaC security scanning for Terraform, K8s, CloudFormation, ARM/Bicep

Tsunami Security Scanner

Automated network vulnerability scanner with plugin system

runZero Community

Asset discovery without agents

OpenVAS

Open-source vulnerability scanning platform

Nessus Essentials

Free vulnerability scanner for up to 16 IPs

Grype

SBOM-aware vulnerability scanner for container images

Syft

SBOM generator for images, directories, and archives

Security Onion

Network security monitoring and log analysis distro

Clear NDR Community (SELKS)

Suricata-centered IDS/NSM stack

Velociraptor

Endpoint visibility, hunting, and IR at scale

Timesketch

Collaborative digital forensics timeline analysis

Turbinia

Scalable digital forensics and incident response automation

dfTimewolf

DFIR data acquisition and processing automation

GRR Rapid Response

Remote live forensics framework

CISA Free Tools (Full List)

Complete list of free cybersecurity services from CISA

Security Research

Wireless Security

Will Hack For SUSHI

Josh Wright's wireless security research and tools

Wigle.net

Worldwide wireless network mapping

Kismet Wireless

Wireless network detector and sniffer

Security Tools & Resources

GTFOBins

Unix binaries for bypassing local security restrictions

LOLBAS

Living Off The Land Binaries (Windows)

HackTricks

Massive collection of hacking tricks

PayloadsAllTheThings

Payloads and bypasses for web security

CyberChef

Encryption, encoding, and data analysis

Cover Your Tracks

Browser fingerprinting test

Objective-See

Free macOS security tools

GreyNoise

Internet threat intelligence

Shodan

Search engine for IoT devices

Censys

Internet-wide scanning

Test My NIDS

Test intrusion detection systems

Exploits & Learning

Exploit Database

Archive of exploits

Packet Storm

Security tools and advisories

Web Security Academy

Free online security training

SANS Reading Room

Free security research papers

Krebs on Security

In-depth security news

SkullSecurity

Security research and tutorials

Hackaday

Hardware hacking and maker news

3Blue1Brown

Math and CS education videos

Cloud & Infrastructure

AWS Architecture Center

Reference architectures

AWS Health Dashboard

Real-time service status

Instance.fyi

EC2 instance comparison

Prowler

AWS security assessment

Linux & Systems

ExplainShell

Parse shell commands

ShellCheck

Script static analysis

regex101

Regex tester

Crontab Guru

Cron schedule editor

SSL Labs

TLS configuration analyzer

Mozilla Observatory

Website security scanner

CIS Benchmarks

Security configuration guides

Ninite

Install and update multiple Windows applications at once

Ubuntu Keyserver

OpenPGP public key server

Networking

icanhazip

Simple public IP lookup (ipv4/ipv6 subdomains available)

MXToolbox

DNS and email diagnostics

AdGuard DNS

Privacy-focused public DNS

NTP Pool Project

Public NTP time servers

Development & Scripting

Python

Full Stack Python

Python web development guide

Git & Version Control

Oh Shit, Git!?!

Fix common Git mistakes

Git Flight Rules

What to do when things go wrong

Conventional Commits

Commit message specification

Data & Visualization

JSON Crack

Visualize JSON as graphs

Transform

Transform JSON, GraphQL, XML

Research & Analytics

Google Trends

Explore search trends and interest over time

Wayback Machine

Internet Archive's historical website snapshots

Archive.is

Take permanent snapshots of web pages

Wolfram Alpha

Computational knowledge engine

Standards & References

NIST NVD

National Vulnerability Database

CVE MITRE

Common Vulnerabilities

OWASP Top 10

Web security risks