Cybersecurity Resources

General Tools

Exploits and Vulnerabilities

• AttackKB - CVE assessments
• AssetNote blog of exploit writeups
• Nuclei FOSS vulnerability scanner
• Payload All The Things
• SecLists
• vxunderground malware source codes
• Inquest labs - virus file hash database

Leak Analysis

• Intelx leak search
• Checkleaked search (dehashed+snus)
• DDOSecrets - leaked info repository

Security Research

• FOFA - search internet-connected devices and systems
• GreyNoise - see what hackers are trying to do
• CriminalIP - IP address lookup

Tools

• amass - Subdomain enumeration from the owasp foundation
• MASSCAN - An Internet-scale port scanner capable of scanning the entire Internet in under 5 minutes from a single machine.
• SmbCrawler - A tool that takes credentials and a list of hosts and crawls through those shares.
• ProxyBroker - Tool to find open/unauthenticated proxies around the Internet.
• Shadowbrokers leaked hacking tools
• SSLyze SSL/TLS analysis tool
• WhatWeb HTTP Crawler - Kali built-in tool.
• ZMap - A fast single packet network scanner for Internet-wide network surveys. Follow up with Zgrab for handshakes.
• Feroxbuster - An open-source web directory and file brute-forcing tool for discovering hidden or protected files and directories on web servers.
• Ncrack - Brute force tool for networks.
• Nuclei - Fast and customizable vulnerability scanner based on a simple YAML based DSL.
• httpx - A fast and multi-purpose HTTP toolkit that allows running multiple probes.

Shodan Resources

• Awesome Shodan queries
• 100 great Shodan queries
• Use amass to enumerate subdomains, use nuclei template to find xss
• Shodan cookbook with filters