Security Blog & Resources

Curated collection of penetration testing articles, research papers, and technical resources organized by domain.

---

🌐 Web Application Security

Articles & Tutorials

• PortSwigger Web Security Academy - Comprehensive web security training
• OWASP Testing Guide - Official testing methodology
• HackTricks Web - Web pentesting techniques
• PayloadsAllTheThings - Payload repository

Bug Bounty Write-ups

• HackerOne Disclosed Reports - Real vulnerability reports
• Pentester Land - Write-up collection

Tools Documentation

• Burp Suite Documentation
• SQLMap Wiki

---

📱 Mobile Security

Android

• OWASP Mobile Testing Guide - Comprehensive mobile testing
• Android Security Internals - Oversecured blog
• Frida Documentation - Dynamic instrumentation
• Objection Wiki

iOS

• iOS Hacking Guide
• iPhoneDevWiki - iOS internals
• DVIA-v2 - Damn Vulnerable iOS App

---

🏢 Active Directory & Internal

Attack Techniques

• HackTricks AD - AD attack methodology
• The Hacker Recipes - AD & Windows attacks
• ired.team - Red team notes
• AD Security Blog - Sean Metcalf's blog

Tools & Frameworks

• BloodHound Documentation
• Impacket Examples
• Mimikatz Wiki
• CrackMapExec Wiki

Research Papers

• Kerberos Attacks Explained
• Attacking Active Directory

---

☁️ Cloud Security

Azure

• AzureAD Attack & Defense - HackTricks Azure
• Azure Threat Research Matrix
• ROADtools Blog - Dirk-jan Mollema's research
• SpecterOps Azure Posts

AWS

• HackTricks AWS
• Rhino Security Labs AWS
• Pacu Documentation

GCP

• GCP Security Best Practices
• HackTricks GCP

---

🔒 Network & Infrastructure

Network Penetration

• PNPT Course Notes
• Pentest Standard
• Nmap NSE Scripts

Wireless Security

• Aircrack-ng Documentation
• WiFi Pentesting Guide

Hardware/IoT

• OWASP IoT Project
• Exploiting IoT Devices

---

🛡️ Defensive & Blue Team

Detection Engineering

• Sigma Rules - Detection signatures
• MITRE ATT&CK - Framework
• Detection Lab

Incident Response

• SANS IR Poster
• TheHive Documentation

---

📚 Learning Platforms

Practice Labs

• HackTheBox - Penetration testing labs
• TryHackMe - Guided learning paths
• PentesterLab - Web security exercises
• VulnHub - Vulnerable VMs
• PortSwigger Labs

Certifications Prep

• OSCP Prep Guide
• OSWE Prep Resources
• CRTP Notes

---

🔧 Tool Collections

GitHub Repositories

• Awesome Hacking - Curated list
• SecLists - Wordlists
• Red Team Tools
• Pentest Tools

Cheat Sheets

• OWASP Cheat Sheets
• Reverse Shell Generator
• GTFOBins - Linux binaries
• LOLBAS - Windows binaries

---

📰 News & Updates

Security News

• The Hacker News
• Bleeping Computer
• Krebs on Security
• Dark Reading

Vulnerability Databases

• NVD - NIST
• CVE Details
• Exploit-DB

---

🎙️ Podcasts & Videos

Podcasts

• Darknet Diaries
• Security Now
• Risky Business

YouTube Channels

• IppSec - HTB walkthroughs
• John Hammond
• LiveOverflow
• The Cyber Mentor

---

💡 Submit new resources via contact form or GitHub PR Last updated: 2024