TORCH

ACADEMY

PortSwigger

The gold standard for web sec.

REF

OWASP Top 10

Critical web risks.

LEARN

PentesterLab

Web Pentest Bootcamps.

LEARN

Hacksplaining

Vulns explained simply.

LAB

OWASP Juice Shop

Modern broken web app.

LAB

DVWA

Damn Vulnerable Web App.

LAB

Gruyere

Cheesy web app exploit.

GAME

XSS Game

Google's XSS practice.

CTF

Hack The Box

Pentesting labs.

LEARN

TryHackMe

Guided cyber training.

RANK

CTFtime

Global CTF Tracker.

BEGINNER

PicoCTF

Best starting point.

SSH

OverTheWire

Bandit & Wargames.

CRYPTO

CryptoHack

Learn cryptography.

SHELL

RevShells

Reverse shell generator.

DATA

CyberChef

The Cyber Swiss Knife.

UNIX

GTFOBins

Unix binary bypass.

WIN

LOLBAS

Windows binary bypass.

HASH

CrackStation

Hash cracker.

WORDLIST

SecLists

Wordlists repository.

CHEATS

PayloadsAllTheThings

Attack cheat sheets.

PRACTICE

Blue Team Labs

Defensive security labs.

SCAN

VirusTotal

Analyze files & URLs.

SIEM

Splunk

Data-to-Everything.

EDR

Wazuh

Open source XDR.

DFIR

Velociraptor

Digital forensics tool.

IOT

Shodan

IoT Search Engine.

MAP

OSINT Framework

Reconnaissance map.

DB

Exploit-DB

CVE Archive.

SCAN

Censys

Internet asset search.

DNS

DNSDumpster

DNS recon tool.

HIST

Wayback Machine

Internet history.

PROXY

Burp Suite

Web vulnerability scanner.

NETWORK

Nmap

Network mapper.

PCAP

Wireshark

Packet analyzer.

EXPLOIT

Metasploit

Penetration framework.

SQLI

SQLMap

Auto SQL injection.