justlinks.page
Essential Cybersecurity Tools and Learning Resources
Standards, threat intelligence and the free labs that teach exploitation better than any course I have paid for.
OWASPThe community reference for application security.Standards
OWASP Top 10The ten most critical web application risks, in plain language.Standards
NISTUS standards body publishing the frameworks most compliance maps to.Standards
CISAUS agency advisories, alerts and hardening guidance.Advisories
MITRE ATT&CKThe taxonomy of adversary tactics and techniques used across the industry.Threat Intel
CVE ProgramThe canonical identifier system for publicly disclosed vulnerabilities.Vulnerabilities
National Vulnerability DatabaseSeverity scoring and enrichment for every CVE.Vulnerabilities
Have I Been PwnedCheck whether an address has appeared in a known breach.Privacy
VirusTotalMulti-engine scanning for files, URLs and domains.Analysis
ShodanSearch engine for internet-facing devices and services.Analysis
SANS InstituteTraining and certification, plus an excellent free reading room.Learning
SANS Internet Storm CenterDaily handler diaries on what is actually being exploited.Advisories
Krebs on SecurityInvestigative reporting on breaches and cybercrime.News
The Hacker NewsFast coverage of actively exploited vulnerabilities.News
Bleeping ComputerPractical reporting on malware and enterprise incidents.News
Dark ReadingEnterprise security news and analysis.News
PortSwigger Web Security AcademyFree, hands-on labs covering every major web vulnerability class.Learning
Burp SuiteThe interception proxy most web testing is done through.Tools