Offence, Defence & OSINT — Useful Sites

Application Security Wiki

2026-10-18T00:00:00Z

A wiki that gathers application security resources (guides, tools, checklists, training) in one place. It is a starting point for the whole of appsec rather than a deep dive into one attack class.

https://appsecwiki.com/

Awesome Connected Things Security

2026-10-18T00:00:00Z

A list for security research on IoT, embedded, industrial and automotive systems, gathering hardware attacks, wireless protocols (BLE, Zigbee, LoRa, NFC) and firmware resources. Unlike web-focused security lists it centres on physical devices and the radio layer.

https://v33ru.github.io/awesome-connected-things-sec/

Awesome Cybersecurity List

2026-10-18T00:00:00Z

A year-by-year archive of cybersecurity blog posts, write-ups and papers, with entries up to 2026. Unlike tool lists the links are technical analyses to read (exploit chains, CVE write-ups); tools sit in a separate file.

https://github.com/0xor0ne/awesome-list

Awesome Industrial Protocols

2026-10-18T00:00:00Z

A security-oriented resource list on industrial network protocols such as Modbus, S7 and OPC UA, with a page and dataset per protocol. Unlike general security lists it goes down to the OT/ICS protocol level.

https://github.com/Orange-Cyberdefense/awesome-industrial-protocols

BuiltWith

2026-10-18T00:00:00Z

A profiler that identifies the CMS, analytics, hosting and JavaScript technologies a site uses from its address. Unlike browser extensions it rests on a wide database, including past usage and other sites running the same technology.

https://builtwith.com/

DNSdumpster

2026-10-18T00:00:00Z

Passive reconnaissance for a domain: subdomains, DNS records and a host map, with no scan of the target itself. Runs in the browser and shows results as both a graph and a table. Unlike tools that scan the target, it uses passive sources only.

https://dnsdumpster.com/

Exploit-DB

2026-10-18T00:00:00Z

Offensive Security's searchable archive of published exploits and vulnerability write-ups, indexed by CVE. It also hosts the GHDB of Google dorks, and is a common citation point in penetration test reports. Unlike CVE databases, it archives working exploit code.

https://www.exploit-db.com/

Ghidra

2026-10-18T00:00:00Z

The NSA's open source reverse engineering framework with disassembler, decompiler and scripting. Against paid tools like IDA, it stands out for being free including the decompiler and for supporting many architectures.

https://github.com/NationalSecurityAgency/ghidra

GTFOBins

2026-10-18T00:00:00Z

A list of Unix binaries that can be abused to escape restricted shells, escalate privileges or read files. Unlike general pentest notes, it gives a copy-ready command per binary, grouped by what it lets you do.

https://gtfobins.org/

HTML5 Security Cheatsheet

2026-10-18T00:00:00Z

A numbered collection of XSS vectors arising from HTML5 and browser quirks, each listing the browsers it works in. It is dated, but still used to understand how filter bypasses work. Unlike the OWASP guides, it lists detailed vectors based on browser quirks.

https://html5sec.org/

ICS Security Tools

2026-10-18T00:00:00Z

Tools, protocol notes, sample pcaps, configurations and guides for industrial control system (ICS/SCADA) security. Unlike general security lists it covers only OT/ICS environments, and includes packet captures and protocol material. Last updated 2025.

https://github.com/ITI/ICS-Security-Tools

Kicksecure Documentation

2026-10-18T00:00:00Z

The wiki of Kicksecure, a hardened Debian derivative, covering system hardening, kernel and browser settings, Tor and password management step by step. Unlike generic security checklists it shows how each recommendation is applied at operating-system level.

https://www.kicksecure.com/wiki/Documentation

mitmproxy

2026-10-18T00:00:00Z

An open source proxy that intercepts, inspects, modifies and replays HTTP(S) traffic, with terminal, web and scripting interfaces. Unlike GUI tools like Burp it is scriptable and runs on the command line.

https://www.mitmproxy.org/

Oh SHINT! It's a Blog

2026-10-18T00:00:00Z

A GitBook site gathering OSINT web-resource and tool lists plus blog posts, with a separate page of newly added resources per year. Unlike a single framework page it has many topic-specific sub-lists; last updated in 2024.

https://ohshint.gitbook.io/oh-shint-its-a-blog

OSINT Bible

2026-10-18T00:00:00Z

An OSINT guide of 450+ tools, methods and ethics/legal notes across 35 sections, which also publishes a link-audit report. Unlike pure tool lists it adds a four-step research methodology and legal-framework sections.

https://github.com/frangelbarrera/OSINT-BIBLE

OWASP MASTG

2026-10-18T00:00:00Z

The OWASP guide to security testing Android and iOS apps, with test cases, tools and techniques in one place. Unlike general web security material it covers mobile-specific storage, binary analysis and network testing.

https://mas.owasp.org/MASTG/

OWASP Threat Dragon

2026-10-18T00:00:00Z

An open source OWASP tool for drawing data flow diagrams and doing threat modelling with methods such as STRIDE, with web and desktop versions. Unlike generic diagram tools it ties threats and mitigations to each diagram element.

https://owasp.org/projects/threat-dragon

PayloadsAllTheThings

2026-10-18T00:00:00Z

Payloads and bypass notes for web security and CTFs, organised by vulnerability class (SQLi, SSRF, XXE, SSTI and more). Each folder has a short explanation and examples, so it works as a lookup by vulnerability class rather than as a tool.

https://github.com/swisskyrepo/PayloadsAllTheThings

Phrack

2026-10-18T00:00:00Z

An e-zine of the hacker community, published since 1985, with deep technical articles on exploitation, kernels and network security. Against blogs and news sites it publishes rarely but with far more depth per article.

https://phrack.org/

s0cm0nkey's Security Reference Guide

2026-10-18T00:00:00Z

A hand-curated guide to links and resources split by topic for SOC, pentesting, DFIR, threat intelligence and AppSec. Unlike awesome lists that cover a single area, it collects blue-team and red-team material in one gitbook.

https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide

Shodan

2026-10-18T00:00:00Z

A search engine for internet-facing devices, servers and services, indexed by their service banners. Unlike Google it indexes open ports and devices rather than web pages; a free account allows limited queries.

https://www.shodan.io/

urlscan.io

2026-10-18T00:00:00Z

A scanning service that opens a URL in a real browser and records every request the page makes, the domains it contacts, a screenshot and the DOM. Unlike VirusTotal it does not just give a reputation score; it shows the page's behaviour with evidence, and past public scans are searchable.

https://urlscan.io/

WebApps Security Tests MindMap

2026-10-18T00:00:00Z

A single page listing web application security tests as a mind map; each branch is a test area with its tools. Unlike text checklists it shows the whole scope at a glance.

https://www.amanhardikar.com/mindmaps/webapptest.html

WiGLE

2026-10-18T00:00:00Z

Map and search interface for volunteer-collected worldwide Wi-Fi, Bluetooth and cell-tower observations. Unlike IP geolocation services, it indexes wireless access points with location data.

https://wigle.net

Awesome CAPTCHA

2026-09-18T00:00:00Z

A list of CAPTCHA types and libraries used to tell humans from bots. Unlike a single CAPTCHA service, it sets the types and open-source libraries side by side.

https://github.com/ZYSzys/awesome-captcha

Awesome Crypto Papers

2026-09-18T00:00:00Z

A list of theory-basics papers on cryptography for non-cryptographers. Unlike textbooks, it points straight to the original papers and orders them for the non-specialist reader.

https://github.com/pFarb/awesome-crypto-papers

Awesome Cybersecurity Blue Team

2026-09-18T00:00:00Z

A list of detection, monitoring and response tools for the defensive (blue team) side. Unlike offensive lists it focuses on protecting systems and catching incidents.

https://github.com/fabacab/awesome-cybersecurity-blueteam

Awesome Detection Engineering

2026-09-18T00:00:00Z

Resources for designing and operating the detection rules that catch attacks. Unlike ready tools it leans into the engineering of “how to write good detections”.

https://github.com/infosecB/awesome-detection-engineering

Awesome DevSecOps

2026-09-18T00:00:00Z

A list of tools and practices embedding security into the CI/CD pipeline. Unlike separate security tests it places the checks inside the development flow.

https://github.com/TaptuIT/awesome-devsecops

Awesome Honeypots

2026-09-18T00:00:00Z

A list of decoy systems (honeypots) set up to lure attackers. Unlike general defence lists it focuses only on deception and early-warning tools.

https://github.com/paralax/awesome-honeypots

Awesome IAM

2026-09-18T00:00:00Z

A resource list for user accounts, authentication and authorisation. Unlike a single identity provider’s docs it is vendor-neutral, treating password storage, sessions, MFA, OAuth and permission models at the level of concepts.

https://github.com/kdeldycke/awesome-iam

Awesome Prompt Injection

2026-09-18T00:00:00Z

A list of tools and papers on the “prompt injection” vulnerability specific to language models. Unlike classic security lists it looks only at the new attack surface of AI systems.

https://github.com/FonduAI/awesome-prompt-injection

Atypical OSINT Guide

2026-09-10T20:53:20Z

A guide gathering OSINT techniques the usual tool lists skip — blockchain tracing, metadata, unconventional sources. Against standard OSINT lists it goes to the corners: it covers little-known methods rather than the tools everyone already names.

https://github.com/OffcierCia/non-typical-OSINT-guide

Awesome Annual Security Reports

2026-09-10T20:53:20Z

A list gathering the annual cybersecurity reports of research consultancies and government agencies in one place. Unlike reading a single report it is vendor-neutral: it sets them side by side so you can strip the marketing and compare the trends.

https://github.com/jacobdjwilson/awesome-annual-security-reports

Awesome Black Hat Tools

2026-09-10T20:53:20Z

A list of tools officially presented at Black Hat events, and only those. Against general tool lists it has a bar to entry: each was demonstrated live on stage, so these are field-tested, vetted tools rather than random repositories.

https://github.com/UCYBERS/Awesome-Blackhat-Tools

Awesome Game Security

2026-09-10T20:53:20Z

A resource list specific to game security — anti-cheat, reverse engineering, protection bypasses. Unlike general reverse-engineering lists it centres on games, gathering domain-specific topics like anti-cheat systems and game protections together.

https://github.com/gmh5225/awesome-game-security

Awesome Hacking

2026-09-10T20:53:20Z

A list that collects awesome lists for hackers, pentesters and researchers. Unlike the individual topic lists it is the index above them: one door into dozens of sub-lists from OSINT to malware analysis.

https://github.com/Hack-with-Github/Awesome-Hacking

Awesome OSINT

2026-09-10T20:53:20Z

A category-by-category list of open-source intelligence tools and resources (people, domains, social media, geolocation). Unlike a single-purpose OSINT tool it is the map: the field’s most-cited starting index for which tool fits which job.

https://github.com/jivoi/awesome-osint

Awesome Web Security

2026-09-10T20:53:20Z

A resource list focused on web security, split by attack class (XSS, SSRF, deserialisation). Against general hacking lists it is narrow and deep: it targets the web layer alone, gathering articles, tools and labs together for each vulnerability type.

https://github.com/qazbnm456/awesome-web-security

HackTricks

2026-09-10T20:53:20Z

A knowledge base giving pentest, red-team, web, cloud and privilege-escalation techniques as step-by-step commands. Unlike conceptual security books it is directly runnable: every page is concrete enough to say “throw this command at that port, look for this in the output” — a field reference, not theory.

https://hacktricks.wiki/