Useful Links
Useful Links for education, training, CTFs and News
Cyber Security Training
This is a curated list of interactive platforms, games, CTFs, open-source intelligence tools, and educational resources for anyone interested in cybersecurity, threat hunting, or ethical hacking.
And own additions
๐ Learning Platforms
- INE โ Free cybersecurity and networking courses.
- Immersive Labs โ Advanced interactive cybersecurity labs.
- RangeForce โ Interactive and scalable cyber training.
- Pluralsight โ Developer & security skill-building platform.
- Haiku, Inc โ Platform for hosting cybersecurity ranges and challenges.
- Pentest Cheat Sheets โ Collection of red team tactics and commands.
- Darkstar7471 โ Blog of a TryHackMe admin with various security insights.
- Gian's GitHub Page โ Personal write-ups and insights from a LinkedIn security expert.
๐ง Learning Platforms & CTFs
-
Hacksplaining
Interactive lessons explaining common web vulnerabilities and their mitigations. -
picoCTF
Beginner-friendly CTF (Capture The Flag) competition platform created by cybersecurity experts at Carnegie Mellon. -
Letโs Defend
Blue team-focused simulation platform with SOC analyst tasks. -
OverTheWire
Classic wargames to learn Linux security, shell scripting, and exploitation. -
HackerOne CTF
A hacking playground hosted by HackerOne for web vulnerability training. -
Splunk Boss of the SOC
Realistic SOC analyst challenges using Splunk data. -
CyberDefenders
Blue team-oriented challenges and training platform. -
CyberDefenders Blue Team CTFs
Archive of practical detection and analysis challenges. -
EchoCTF
Competitive red/blue team CTF environment. -
Exploitation Education
Linux-based exploitation challenges covering stack overflows, heap, and format strings. -
Google CTF
Official Google-hosted cybersecurity CTFs. -
W3Challs
Various hacking challenges: web, forensics, and crypto. -
WeChall
Meta-CTF aggregator that tracks your challenge progress across sites. -
Webgoat
OWASP's deliberately insecure web app for learning web vulnerabilities. -
CMD Challenge
Solve problems using only Linux command line knowledge. -
CryptoHack
Learn cryptography by solving Python-based challenges. -
CTFtime
CTF competition calendar and team ranking tracker. -
Vulnmachines
Vulnerable machines and labs to practice penetration testing. -
Alert to Win
Fun JavaScript-based hacking challenge. -
TCM Security Academy
Practical cybersecurity courses including ethical hacking and OSINT.
๐ฎ Hacking-Themed Games
-
Duskers
Sci-fi tactical game using command-line-like interface. -
TIS-100
Assembly language puzzle game that simulates reverse engineering. -
ThreatGen Red vs. Blue
Turn-based strategy game teaching cyber offensive/defensive skills. -
Spudnet Board Game
Fun family board game teaching cybersecurity concepts. -
Nite Team 4
A tactical hacking simulation game with real-world inspired missions. -
Hacknet
Terminal-based hacking simulation game.
๐ Reports & Insights
-
2024 State of the Security Team โ TrendMicro
Research report on challenges faced by security teams. -
Backdoors & Breaches Card Game
A fun tabletop game to simulate incident response and detection.
Youtube
Youtube Channels
NetworkChuck
https://www.youtube.com/user/NetworkChuck
David Bombal
https://www.youtube.com/user/ConfigTerm
LiveOverflow
https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w
John Hammond
https://www.youtube.com/user/RootOfTheNull
The XSS rat
https://www.youtube.com/channel/UCjBhClJ59W4hfUly51i11hg
HackerSploit
https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q
freeCodeCamp Talks
https://www.youtube.com/c/freeCodeCampTalks
The Net Ninja
https://www.youtube.com/c/TheNetNinja
Loi Liang Yang
https://www.youtube.com/channel/UC1szFCBUWXY3ESff8dJjjzw
Cyber Insecurity
https://www.youtube.com/c/CyberInsecurity
Former NSA Hacker
Youtube Videos
MiTM attack
https://www.youtube.com/watch?v=-rSqbgI7oZM
Hacking step-by-step
https://www.youtube.com/watch?v=2TofunAI6fU
Whonix anonymize kali
https://www.youtube.com/watch?v=g8SzRhA8NXI&t=1s
CTFs explained
https://www.youtube.com/watch?v=Lus7aNf2xDg&t=84s
Wildcard injection
https://www.youtube.com/watch?v=HXikLrFVIXc&t=1844s
Get yourself free Membership
https://www.youtube.com/watch?v=MEyyegfvhwM
Make your LinkedIn better
https://www.youtube.com/watch?v=GclSqwKWCPE
Tipps how to boost your profile in the topic
Nice Links
Research & Academic Tools
- Sci-Hub - Provides free access to millions of research papers.
- Gutenberg - Offers a library of over 70,000 free eBooks.
- Cymath - Solves any math problem.
- OceanofPDF - Provides access to free PDFs of books.
- MyBib - Creates citations in seconds, all in one place.
- UnstuckStudy - Chat with all of the files in your class at once and get cited answers.
- Scholarcy - Summarize any paper, article, or textbook. You can summarize videos too.
- Perplexity.ai - A free AI-powered answer engine providing accurate, trusted, and real-time answers to any question.
- Bookai.chat - Chat with your books in over 30 languages.
AI Tools
- Paperz.ai - Write your research paper 10x faster with AI.
- Flashka.ai - Writing flashcards with AI.
- Dende.ai - Turn your study notes into exam quizzes in seconds.
- Gamma.app - A new medium for presenting ideas, powered by AI.
- Otter.ai - Get transcripts, automated summaries, action items, and chat with Otter to get answers from your meetings.
- Krea.ai - The easiest way to generate with AI.
- Twaingpt - AI humanizer.
- Ryne.ai - Another AI tool.
- Sketch Meta Demo Lab - AI animation tool.
- Otio.ai - Understand & chat with your docs, links & videos. Automate complex research workflows with AI.
- Logomark.ai - Limitless creativity with prompt-based logo creation.
- Audioread - Use AI to listen to articles, PDFs, emails, etc., in your podcast player.
- AgentGPT - Allows you to configure and deploy autonomous AI agents.
- BlackBox.ai - Best AI model for code.
- InVideo.io - Unlock your creativity and turn any idea into a full-length video.
Miscellaneous Tools
- Stremio - Freedom to stream movies and TV shows.
- NuclearPlayer - Supports YouTube, SoundCloud, Bandcamp, and your local library to stream music.
- PlayPhrase - Search for movie and TV show dialogue clips using keywords.
- Tldraw - A free and instant collaborative whiteboarding tool.
- ChatDoc - Chat with documents and get instant answers with cited sources.
- Hissab.io - A text-based calculator app that does much more than calculations.
ย
Clear Brainfog
https://www.youtube.com/watch?v=QNKhJtQpboU
https://www.youtube.com/watch?v=Wk9p3dhMYdk
https://www.youtube.com/watch?v=lSwHXE9LohA
https://www.youtube.com/watch?v=zwmX4ADLjuE
Tools, OSINT & Open Source
๐ OSINT & Data Discovery Tools
These tools are useful for uncovering publicly accessible information, exposed data, malware indicators, code leaks, documents, and file indexing across the internet.
๐ Privacy Search Engines
- DuckDuckGo โ Privacy-focused search engine that doesnโt track users.
- Startpage โ Google results with privacy protection and no tracking.
๐๏ธ Paste, Code, and Source Scanning
- psbdmp โ Largest archive of leaked {paste} dumps from pastebin-style sites.
- Search-Pastebin โ Google CSE-powered meta-search across 33 paste sites.
- RedHuntlabs Online IDE Search โ Search keywords across online IDEs, code sharing platforms, and pastebins.
- NerdyData โ Find websites using specific technologies or HTML/JavaScript code.
- Publicwww โ Source code search engine indexing 480+ million pages.
- CybDetective Code Search โ Custom search across 20+ code hosting platforms.
- grep.app โ Fast regex-capable search engine for 500k+ Git repos.
- searchcode โ Search 75 billion lines of code from 40 million public projects.
๐ File & Directory Indexing
- Open Directory Search Tool โ Search files in unprotected open directories.
- Mamont FTP โ Largest public FTP search engine.
- NAPALM FTP Indexer โ Index of over 894 million FTP files across thousands of servers.
- DeDigger โ Discover publicly shared files in Google Drive.
- UVRX โ Search files from older hosting sites (e.g., Mega, Mediafire, Zshare).
๐ Document & Content Discovery
- PDF Drive โ Download from a library of over 75 million free PDFs.
- SlideShare โ Explore millions of user-submitted presentations.
- Scribd โ Document repository with 195+ million user-uploaded files.
๐งช Threat Intelligence & IOC Lookup
- VirusTotal โ Multi-engine scanner and IOC search platform for files, hashes, domains, and URLs.
- Hybrid Analysis โ Free malware sandbox that performs hybrid static/dynamic analysis.
- Sucuri SiteCheck โ Website malware and security scanner.
- URLhaus โ Malicious URL tracker and database.
- Feodo Tracker โ Monitor and block IPs related to Feodo/Bugat/Dridex botnets.
- SSL Blacklist โ Collection of blacklisted SSL certificates and JA3 fingerprints.
- MalwareBazaar โ Repository for sharing malware samples.
- Talos Reputation Center โ IP, domain, and file reputation check.
- PaloAlto URL Filtering โ Link classification and reputation check.
- OTX AlienVault โ Threat sharing platform with global IOC and pulse feeds.
- URLScan โ Scan and analyze websites in a sandboxed environment.
- McAfee Threat Center โ Threat intelligence and malware information.
- National Vulnerability Database (NVD) โ US government vulnerability database with CVSS scores.
- CVE Database โ Public list of common vulnerabilities and exposures.
- Website Reputation Checker (URLVoid) โ Checks domain/IP reputation using multiple sources.
- Google Safe Browsing Status โ Checks if a site is flagged by Google Safe Browsing.
- Looky Luu - Online Sandbox for Domain Checks
- URLscan - Online Sandbox for Domain Checks
๐ Network, Routing, and Metadata Tools
- Nmap โ Network scanner and host discovery tool.
- Yersinia โ Penetration testing tool for attacking network protocols.
- Passive OS Fingerprinter (p0f) โ Passive network OS fingerprinting tool.
๐ก๏ธ Offensive Security & Exploitation
- Kali Linux โ Penetration testing and security auditing Linux distribution.
- Metasploit โ Exploit development and penetration testing framework.
- Aircrack-ng โ Wireless network security auditing tool.
- Powerfuzzer โ Automated web application vulnerability scanner.
- ShellNoob โ Shellcode writing toolkit.
- Backdoor Factory โ Patch binaries with custom backdoors.
- Capstone Engine โ Multi-architecture disassembly framework.
๐งฐ Analysis & Development Utilities
- CyberChef โ Web-based data transformation and analysis toolkit.
- CyberChef (Offline) โ Local instance for offline data analysis and transformation.
- JavaScript Beautifier โ Formats and beautifies JavaScript code for readability.
- UnPacker โ JavaScript deobfuscation/unpacking tool.
- Awesome Malware Analysis โ Curated list of malware analysis tools and resources.
๐ฐ News & Security Feeds
- Inside-IT โ Swiss IT and tech news.
- Heise Security โ 7-Tage-News โ German IT security news overview (last 7 days).
- CERT-EU News Monitor โ EU cybersecurity news and advisories.
๐ฌ Disposable Email Services
- Trash-Mail โ Temporary disposable email inbox.
- Mailinator โ Public temporary email service.
๐ฅ๏ธ Internal/Local Resources
- Sandbox โ Likely internal sandbox environment for testing malware or files.
- DPI (NetWitness) โ Network analysis and deep packet inspection tool (internal link).