Resources
Awesome Lists
Awesome Appsec - A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes.
Awesome Bash - A curated list of delightful Bash scripts and resources.
Awesome CTF - A curated list of Capture The Flag (CTF) frameworks, libraries, resources, softwares and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs at one place.
Awesome Cyber Security - A collection of awesome software, libraries, documents, books, resources, and cool stuff about security.
Awesome Cyber Security - A curated list of cyber security resources and tools.
Awesome Forensics - Curated list of awesome free (mostly open source) forensic analysis tools and resources.
Awesome Hacking - A curated list of awesome Hacking.
Awesome Hacking - A collection of awesome lists for hackers, pentesters & security researchers.
Awesome Honeypots - A curated list of awesome honeypots, plus related components and much more, divided into categories such as Web, services, and others, with a focus on free and open source projects.
Awesome Incident Response - A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams.
Awesome Infosec - A curated list of awesome information security resources
Awesome Malware Analysis - A curated list of awesome malware analysis tools and resources.
Awesome Network Analysis - An awesome list of resources to construct, analyze and visualize network data.
Awesome Networking - A curated list of awesome networking libraries, resources and shiny things.
Awesome PCAP Tools - List of tools to help process pcap files for network traffic research.
Awesome Pentest - A collection of awesome penetration testing and offensive cybersecurity resources.
Awesome Powershell - A curated list of delightful PowerShell packages and resources.
Awesome Python - An opinionated list of awesome Python frameworks, libraries, software and resources.
Awesome README - A curated list of awesome READMEs.
Awesome Sec Talks - A curated list of awesome Security talks
Awesome Security Hardening - A collection of awesome security hardening guides, best practices, checklists, benchmarks, tools and other resources.
Awesome Security - A collection of awesome software, libraries, documents, books, resources and cool stuff about security.
Awesome SOC/DFIR Detections
Awesome SOC - A collection of sources of documentation, and field best practices, to build and run a SOC (including CSIRT).
Awesome Sysadmin - A curated list of amazingly awesome open source sysadmin resources.
Awesome Threat Detection - A curated list of awesome threat detection and hunting resources
Awesome Threat Intelligence - A curated list of awesome Threat Intelligence resources
Awesome Web Hacking - A list to learn more about web application security.
Awesome Yara - A curated list of awesome YARA rules, tools, and resources.
Books
Docker Images for Penetration Testing and Security
docker pull kalilinux/kali-linux-docker official Kali Linux
docker pull owasp/zap2docker-stable - official OWASP ZAP
docker pull wpscanteam/wpscan - official WPScan
docker pull metasploitframework/metasploit-framework - Official Metasploit
docker pull citizenstig/dvwa - Damn Vulnerable Web Application (DVWA)
docker pull wpscanteam/vulnerablewordpress - Vulnerable WordPress Installation
docker pull hmlio/vaas-cve-2014-6271 - Vulnerability as a service: Shellshock
docker pull hmlio/vaas-cve-2014-0160 - Vulnerability as a service: Heartbleed
docker pull opendns/security-ninjas - Security Ninjas
docker pull noncetonic/archlinux-pentest-lxde - Arch Linux Penetration Tester
docker pull diogomonica/docker-bench-security - Docker Bench for Security
docker pull ismisepaul/securityshepherd - OWASP Security Shepherd
docker pull danmx/docker-owasp-webgoat - OWASP WebGoat Project docker image
docker pull vulnerables/web-owasp-nodegoat - OWASP NodeGoat
docker pull citizenstig/nowasp - OWASP Mutillidae II Web Pen-Test Practice Application
docker pull bkimminich/juice-shop - OWASP Juice Shop
docker pull phocean/msf - Docker Metasploit