![](https://camo.githubusercontent.com/e87680291a000e0b2be6934deccdd6cb66ad4047b36011d5f92af7524e15fbfa/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6173742d636f6d6d69742f496e666f736563486f7573652f496e666f736563486f7573653f636f6c6f723d253233336338356434267374796c653d666f722d7468652d626164676529)
![](https://camo.githubusercontent.com/3ed8c4a1d9ca7a4d3edcd914839e0a616e49a1cd4b43b77267d2783470415122/68747470733a2f2f696d672e736869656c64732e696f2f747769747465722f666f6c6c6f772f696e666f736563686f7573653f7374796c653d736f6369616c)
![](https://camo.githubusercontent.com/687a89ed7bce6efdd5f379de1b42f3db088f38a24cd28af7deeb45bdc3f79bf7/68747470733a2f2f696d672e736869656c64732e696f2f646973636f72642f3734323236303836373334343839313931363f636f6c6f723d413635463546266c6162656c3d446973636f7264266c6f676f3d646973636f7264266c6f676f436f6c6f723d666666267374796c653d666c61742d737175617265)
Tools & Resources for Cyber Security Operations
A curated list of many tools and resources for both offensive and defensive security teams.
Please visit https://infosec.house for our website version of this repo. Found a resources that should be on here? Feel free to submit a pull request!
![asset-count](https://camo.githubusercontent.com/b52ad9c79c58a07419fa8815d04ae90ce1807471466ef5d5133233d8029922cb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f546f6f6c732532302532362532305265736f7572636573253230417661696c61626c652d3230352d3363383564343f7374796c653d666f722d7468652d6261646765)
Sub-Category |
Description |
Asset Management |
Keep track of your inventory. You can't protect what you don't see. |
Auditing |
Stay in compliance. |
Courses |
Training and courses to master your craft. Some of the below courses do offer professional certifications as add-ons to course purchase. |
Endpoint Protection |
Protect your endpoints. |
Forensics |
Uncover the dirty little secrets of a recovered HDD, Image, malware, and more. |
Honeypots |
Catch them with their hands/attacks sticky. |
IDS/IPS |
Intrusion Detection and Prevention Systems. |
Incident Response |
Incident response tools, and resources when alarms pop off. |
IOC |
Indicators of compromise. Discover if you've been compromised. |
Malware |
All the malware you can wish for to reverse engineer. |
Monitoring |
Monitor your network, e-mail, packets, and infrastructure. |
Operating Systems |
Operating system's solely focused for defensive security teams. |
Phishing |
Tools and resources for analyzing phishing attacks. |
Threat Intel |
Discover where the threats begin. |
![asset-count](https://camo.githubusercontent.com/0d757a34f9a7cfe4056b16fc20cb153c8a6c77cb1f1f2052d5c401d5e90ce1af/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f546f6f6c732532302532362532305265736f7572636573253230417661696c61626c652d3437372d3363383564343f7374796c653d666f722d7468652d6261646765)
Sub-Category |
Description |
API |
Tools and resources for pentesting against API endpoints. |
Blogs |
Reading material for offensive security researchers. |
Bug Bounty |
Test out your skills against other hackers. Get paid for finding vulnerabilities. |
Command & Control |
Command and Control tools and frameworks. |
Cheat Sheets |
Offensive security cheat sheets. |
Cloud |
Discover tools and resources dedicated to hacking cloud platforms. |
Collaboration |
Discover tools and frameworks for red team collaboration. |
Courses |
Training and courses to master your craft. Some of the below courses do offer professional certifications as add-ons to course purchase. |
Cracking |
Everything you need to crack all the hashes. |
CTF Offensive |
Compete your hacking skills against others. |
Data Exfiltration |
Exfiltrate the data, and test your DLP. |
Evasion |
Evade getting caught. |
Exploits |
Gather all your exploits needed to pop that box. |
Firewalls |
Attack the castle doors. |
Hardware |
Grab some of the most used hardware within the penetration testing industry. |
Linux |
Tools and resources for popping those linux boxes. |
Mobile |
Tools and resources for pentesting on mobile applications. |
Network |
Sniff the network. Modify the packets. |
Operating Systems |
Operating system's solely focused for offensive security teams. |
Reconnaissance |
Understand your target. Perform in-depth research and discover new attack surfaces. |
Shells |
Generating pre-built webshells to customizing your own. |
Social Engineering |
Manipulation techniques that exploits human error to gain private information, access, or valuables. |
Vulnerability Scanners |
Discover vulnerabilities fast, and automate some of the heavy loads. |
Web Application |
Break that web application. |
Windows |
Mirosoft Windows pentesting tools and resources. |
Wireless |
Discover tools and resources for exploiting Wi-Fi, bluetooth, RFID, and more. |
![asset-count](https://camo.githubusercontent.com/239a4a5247f267dfbdb0929946e2975fa5cba17385db18151100646d0c9557d1/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f546f6f6c732532302532362532305265736f7572636573253230417661696c61626c652d3130352d3363383564343f7374796c653d666f722d7468652d6261646765)
Sub-Category |
Description |
Anonymity |
The quality or state of being anonymous. Seek out technologies and methods of remaining anonymous in the day and age of mass surveillance. |
Anti-Forensics |
Destroy your data. |
Burners |
Everything for your temporary needs. |
Communication |
Protect your SMS messages, voice calls, and e-mails. Big brother is always watching. |
Operating Systems |
Hardening your operating system. |
Passwords & Authentication |
Secure your passwords, secrets, and notes. |
Search Engines |
Hardening your operating system. |
![asset-count](https://camo.githubusercontent.com/215de79fbaa45c181f95bc677e8cd78c362b6c603d8abb82cb5b5019955bb68d/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f546f6f6c732532302532362532305265736f7572636573253230417661696c61626c652d34322d3363383564343f7374796c653d666f722d7468652d6261646765)
Sub-Category |
Description |
Courses |
Training and courses to master your craft. |
Editors & Viewers |
Tools for editing/viewing files. |
Emulation |
Emulate the adversary. |
Network |
Network tools both offensive and defensive operations can utilize. |
OSINT |
Open-Source Intel. Get all the information needed for your target. |
Passwords |
1,000+ default passwords. |
Reverse Engineering |
Reverse engineering tools both offensive and defensive operations can utilize. |
Write-Ups |
Write-ups both offensive and defensive operataions can utilize. |
![asset-count](https://camo.githubusercontent.com/209ed9f01ccd389b90d28d80c6cedea01033f3a603058dcda02a8aaf3789d259/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f546f6f6c732532302532362532305265736f7572636573253230417661696c61626c652d33382d3363383564343f7374796c653d666f722d7468652d6261646765)
Sub-Category |
Description |
Music |
Kick back relax and enjoy some entertainment. |
Video |
Talks, livestreams, and presentations. |
Shoutout to the following amazing individuals for suggesting and adding resources during our livestream.
Anonymous, 0xgnnr, 0xrom, Binary.rip, CyberLola, DevNullZen, EightBitOni, GoProSlowYo, JR0ch17, projectdp, PaWNmUnCher, RySkill, Vander_Grift, chadb_n00b, footpics4sale, goldyautomation, halfamomo, p4r4n0ir, skyfire100, theGwar, and zuphzuph.