Reference Wikis
| Resource | URL | Use It For |
|---|---|---|
| HackTricks | book.hacktricks.xyz | Best single reference for any service/vuln · check here first |
| InternalAllTheThings | swisskyrepo.github.io/InternalAllTheThings | AD attacks, internal PT, lateral movement techniques |
| PayloadsAllTheThings | swisskyrepo.github.io/PayloadsAllTheThings | Payloads for every vuln class: SQLi, XSS, LFI, SSTI, etc. |
| p3ta-tricks | p3ta-tricks.com | Aggregated offensive tricks and one-liners |
Live Tools
| Tool | URL | Use It For |
|---|---|---|
| RevShells | revshells.com | Generate any reverse shell one-liner, auto-URL-encoded |
| GTFOBins | gtfobins.github.io | Linux SUID/sudo binary escapes · look up any binary here |
| LOLBAS | lolbas-project.github.io | Windows living-off-the-land binaries for execution/transfer/bypass |
| WADComs | wadcoms.github.io | AD attack command generator · filter by what you have |
| CyberChef | gchq.github.io/CyberChef | Encode, decode, transform anything · base64, hex, URL, etc. |
| hashes.com | hashes.com | Online hash lookup and cracking · try before you crack locally |
Exploit Sources
| Source | URL | Use It For |
|---|---|---|
| Exploit-DB | exploit-db.com | Public exploits · searchsploit pulls from here |
| NIST NVD | nvd.nist.gov | CVE details, CVSS scores, official descriptions |
| Packet Storm | packetstormsecurity.com | Exploits, tools, advisories · sometimes has what ExploitDB misses |
Cheat Sheets
| Sheet | URL | Use It For |
|---|---|---|
| PentestMonkey | pentestmonkey.net | Reverse shells, SQL injection, cheat sheets |
| HighOn.Coffee | highon.coffee/blog/penetration-testing-tools-cheat-sheet | Condensed PT commands for all phases |
| sushant747 OSCP Guide | sushant747.gitbooks.io/total-oscp-guide | OSCP-focused methodology, great for exam prep |
Practice Platforms
| Platform | URL | Notes |
|---|---|---|
| OffSec Proving Grounds | offsec.com/labs/individual | Closest to real OSCP exam machines |
| HackTheBox | hackthebox.com | Huge variety, active community, good for skills |
| VulnHub | vulnhub.com | Offline VMs · no internet needed, great for lab practice |
| TJ Null's OSCP List | Google Sheet | Curated HTB/PG machines that mirror OSCP difficulty |
OSINT & Recon
| Resource | URL | Use It For |
|---|---|---|
| OSINT Framework | osintframework.com | A tree of OSINT resources organized by data type and goal |
| Google Hacking DB (GHDB) | exploit-db.com/google-hacking-database | Ready-made Google dorks for exposed files, panels, and creds |
| Shodan | shodan.io | Search internet-exposed devices, services, and versions |
| DNSDumpster | dnsdumpster.com | Fast DNS recon and subdomain mapping for a target domain |
Active Directory & Windows
| Resource | URL | Use It For |
|---|---|---|
| The Hacker Recipes | thehacker.recipes | Modern AD and Windows attack techniques, densely cross-linked |
| AD Security | adsecurity.org | Deep Active Directory attack and defense research |
| OCD Mindmaps | orange-cyberdefense.github.io/ocd-mindmaps | Visual AD and pentest attack-path maps |
| BloodHound Docs | bloodhound.specterops.io | Cypher queries and attack-path reference for BloodHound |
Web & API
| Resource | URL | Use It For |
|---|---|---|
| PortSwigger Web Security Academy | portswigger.net/web-security | Free, authoritative web-vuln labs and theory |
| OWASP Web Security Testing Guide | owasp.org/wstg | The web-app testing methodology standard |
| OWASP Cheat Sheet Series | cheatsheetseries.owasp.org | Per-topic attack and defense cheat sheets |
| OWASP API Security Top 10 | owasp.org/API-Security | The API-specific vulnerability classes |
| JWT.io | jwt.io | Decode, inspect, and tamper with JSON Web Tokens |
Cloud
| Resource | URL | Use It For |
|---|---|---|
| HackTricks Cloud | cloud.hacktricks.xyz | AWS, Azure, GCP, and Kubernetes attack techniques |
| Hacking the Cloud | hackingthe.cloud | Offensive AWS techniques, organized by attacker goal |
| CloudFox | github.com/BishopFox/cloudfox | Enumerate exploitable attack paths across cloud infrastructure |
| WeirdAAL | github.com/carnal0wnage/weirdAAL | AWS attack library for enumeration and credential abuse |
AI / LLM Security
| Resource | URL | Use It For |
|---|---|---|
| OWASP Top 10 for LLM Apps | genai.owasp.org | The standard LLM and GenAI vulnerability classes |
| MITRE ATLAS | atlas.mitre.org | The adversary tactics and techniques matrix for AI systems |
| PortSwigger: Web LLM Attacks | portswigger.net/web-security/llm-attacks | Hands-on labs for attacking LLM-backed web apps |
| LLM Security Research | github.com/greshake/llm-security | Prompt-injection research and real-world exploit examples |
Privilege Escalation
| Resource | URL | Use It For |
|---|---|---|
| PEASS-ng (winPEAS / linPEAS) | github.com/peass-ng/PEASS-ng | The definitive privesc enumeration scripts |
| g0tmi1k Linux PrivEsc | blog.g0tmi1k.com | The classic Linux privilege-escalation checklist |
| Priv2Admin | github.com/gtworek/Priv2Admin | Abusing Windows token privileges up to SYSTEM |
| WES-NG | github.com/bitsadmin/wesng | Windows exploit suggester from systeminfo output |
Methodology & Frameworks
| Resource | URL | Use It For |
|---|---|---|
| MITRE ATT&CK | attack.mitre.org | Adversary tactics and techniques knowledge base |
| PTES | pentest-standard.org | Penetration Testing Execution Standard |
| NIST SP 800-115 | csrc.nist.gov | Technical guide to information security testing |
| CISA KEV Catalog | cisa.gov/kev | CVEs known to be actively exploited in the wild |