First time? Get started here!
- https://networkchuck.com/ – NetworkChuck is dedicated to helping you hack your IT career.
- https://veteranit.net/ – We Are Dedicated to Helping US Military Veterans Make the Transition into a Civilian Career in Information Technology
- https://www.hackthebox.com/ – Hack The Box is a massive hacking playground, and infosec community of over 1.3m platform members who learn, hack, play, exchange ideas and methodologies.
- https://tryhackme.com/ – TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!
- https://darknetdiaries.com/ – This is a podcast about hackers, breaches, shadow government activity, hacktivism, cybercrime, and all the things that dwell on the hidden parts of the network. This is Darknet Diaries.
- https://owasp.org/ – The OWASP® Foundation works to improve the security of software through its community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.
- https://attack.mitre.org/ -MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
- https://www.issa.org/about-issa/ – ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure.
- https://cloudsecurityalliance.org/ – CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, certification, events and products.
- https://www.schneier.com/ – Bruce Schneier is an internationally renowned security technologist, called a “security guru” by The Economist.
- https://www.shodan.io/ – Shodan is the world’s first search engine for Internet-connected devices.
- https://censys.io/ – Censys is a platform that helps information security practitioners discover, monitor, and analyze devices that are accessible from the Internet.
- https://haveibeenpwned.com/ – Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.
- https://www.apivoid.com/ – APIVoid provides JSON API services used for cyber threat analysis, threat detection and threat prevention, reducing and automating the manual work of security analysts.
- https://hunter.io/ – Hunter is a cloud-based email marketing software that allows organizations to find emails on company websites, verify domains and handle follow-up activities.
- https://shop.hak5.org/ – Founded in 2005, Hak5’s mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.
- https://viz.greynoise.io/ – GreyNoise collects, analyzes, and labels data on IPs that scan the internet and saturate security tools with noise.
- https://www.zoomeye.org/ – ZoomEyeis a Cyberspace Search Engine recording information of devices, websites, services and components etc.
- https://wigle.net/ – WiGLE (or Wireless Geographic Logging Engine) is a website for collecting information about the different wireless hotspots around the world.
- https://publicwww.com/ – PublicWWW is a digital marketing and affiliate marketing research tool that finds any alphanumeric snippet, signature or keyword in the web pages HTML, JS and CSS code.
- https://pulsedive.com/ – Pulsedive is a free threat intelligence platform. Search, scan, and enrich IPs, URLs, domains and other IOCs from OSINT feeds or submit your own. Linked IPs return PTR records.
- https://intelx.io/ – Intelligence X is a search engine and data archive. Search Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more.
- https://exploit-db.com/ – Exploit Database (ExploitDB) is an archive of exploits for the purpose of public security, and it explains what can be found on the database.
- https://www.whois.com/ – WHOIS is a public database that houses the information collected when someone registers a domain name or updates their DNS settings.
- https://temp-mail.org/ – Disposable e-mail is a temporary and completely anonymous email address with a predetermined lifetime that does not require any registration.
- https://tinywow.com/ – TinyWow offers a huge selection of free, easy-to-use tools for PDF files, videos, images, and more.
- https://alternativeto.io/ – AlternativeTo is a free service that helps you find better alternatives to the products you love and hate.
- https://www.importyeti.com/ – ImportYeti is a free online tool that allows you to browse the US import database to find out where retailers are sourcing their goods.