Infosec House

Break the machines that think. Tools for attacking and defending AI systems.

Adversarial Robustness Toolbox (ART), Alibi Detect, Backdoor Box

Poke every endpoint. Tools for pentesting APIs.

Apache JMeter, Arjun, Astra

Keep track of your inventory. You can't protect what you don't see.

GLPI, LANSweeper, OSCInventory-NG

Read up before you break in. Blogs and zines from offensive security researchers.

0xSP, Archangel Amael, Brendon

Hack for cash. Test your skills and get paid for finding vulnerabilities.

Bug bounty Roadmaps, Bugscrowd, HackerOne

Command your implants. C2 tools and frameworks.

C3, Cobalt Strike, Covenant

Quick-reference cheat sheets for offensive and defensive security work.

Active Directory, AD Killchain Attack & Defense, API Security Checklist

Storm the cloud. Tools for hacking cloud platforms and containers.

Azurcar, Checkov, Clair

Hack together. Tools for red team collaboration.

Dradis, Mythic, tmate

Everything you need to crack all the hashes.

Cain & Abel, Hashcat, Hydra

How great is your cryptography?

Badkeys

Flex your skills. Offensive security capture-the-flag events.

Cryptohack, CTF Time, CTFLearn

Exfiltrate the data, and test your DLP.

Cloakify, DET, DNSExfiltrator

Phish, spoof, and pop inboxes. E-mail pentesting tools and resources.

MX-Takeover

Editors and viewers for digging into files of every format.

BStrings, CyberChef, dsieve

Level up. Training and courses to master your craft.

Antisyphon InfoSec Training, AQ Answers, Bug Bounty Hunter

Emulate the adversary.

Caldera, DumpsterFire

Lock down every endpoint before someone else does.

Avast, Avira, BitDefender

Evade getting caught.

ELFcrypt, IPObfuscator, NimShellcodeFluctuation

Gather all your exploits needed to pop that box.

Android Kernel, Beef, Exploit Database

Attack the castle doors.

Abuse SSL Bypass, Awesome WAF - Known Bypasses, ClearOS

Uncover the dirty little secrets of a recovered HDD, Image, malware, and more.

AFFLIBv3, AmcacheParser, Andriller

Gear up. The hardware every pentester keeps in their bag.

Ardunio, Attify Badge, Goodfet

Deploy honeypots to catch attackers in the act.

Cowrie, DemonHunter, Dionaea

Detect and block intrusions before they do damage.

CrowdSec, SecurityOnion, SELKS

Incident response tools and resources for when alarms pop off.

Cortex, DFIRTrack, ETWMonitor

Tools and resources for popping those Linux boxes.

GTFOBins, Linux Exploit Suggester, Mimipenguin

All the malware you could wish for, ready to reverse engineer.

Al-Khaser, Any.Run, Cape Sandbox

Root it, jailbreak it, break it. Tools for attacking and defending mobile applications.

adb, Airdroid, Android APK Decompiler

Kick back, relax, and enjoy some entertainment.

Beefy, Dual Core, FreqyXin

Sniff the network. Modify the packets.

armada, bettercap, CDNStrip

Operating systems for whatever task at hand.

Bitscout, Black Arch, CommandoVM

Seek out technologies and methods of remaining anonymous in this day and age of mass surveillance.

1Password, 2FAS, 404 City

Open-Source Intel. Get all the information needed for your target.

411, 411 (White Pages), Addresses (Intelius)

Go from limited access to full control. Escalate your privileges on Linux, macOS, and Windows.

LinPEAS, PinkPanther

Reverse engineering tools that both offensive and defensive operations can utilize.

Androguard, Angr, Binwalk

Understand your target. Perform in-depth research and discover new attack surfaces.

aiodnsbrute, Altdns, Amass

From pre-built webshells to fully custom ones.

Gecko, GoodSpeed, GoSH

Manipulation techniques that exploit human error to gain private information, access, or valuables.

espoofer, Evilgnix, Fierce Phish

Discover where the threats begin.

Ahmia, ARTIF, Arvin Club

Talks, livestreams, and presentations to sharpen your skills.

Anonymous - The Hacker Wars Full Documentary, Anonymous Comes to Town: The hackers who took on high school sexual assault in Ohio, Bsides San Francisco

Discover vulnerabilities fast, and automate the heavy lifting.

Acunetix, Alibaba Cloud Security Scanner, Amazon Inspector

Break that web application.

Bolt, Commix, Corsy

Tools and resources for popping those Windows boxes.

Aced, BadBlood, Bitleaker

Go wireless. Tools for exploiting Wi-Fi, Bluetooth, RFID, and more.

ACR122U USB NFC Reader, AirCheck G3 Pro, Aircrack-NG