Auth & perms
2fa
 activedirectory
 authentication
 authorization
 credentials
 iam
 jwt
 kerberos
 ldap
 lsass
 mfa
 ntlm
 openid
 permissions
 privesc
 totp
 uac
Bug bounty
bugcrowd
 detectify
 federacy
 hackenproof
 hackerone
 immunefi
 intigriti
 platforms
 reports
 scope
 synack
 writeups
 yeswehack
Cloud & services
alibaba
 aws
 azure
 bazaar
 bing
 buckets
 cdn
 censys
 certspotter
 cloudflare
 cloudfront
 commoncrawl
 crtsh
 digitalocean
 firebase
 google
 instagram
 linkedin
 linode
 lync
 o365
 pastebin
 postman
 salesforce
 securitytrails
 shodan
 skype
 slack
 telegram
 twitter
 virustotal
 vultr
 webarchives
 yahoo
CMS
aem
 drupal
 joomla
 moodle
 wordfence
 wordpress
Cryptanalysis
cryptography
 encoding
 encryption
 hash
 obfuscation
 rsa
 ssl
 steganography
 stripping
 tls
Databases
couchdb
 database
 graphql
 mongodb
 mssql
 redis
 sqlserver
Development
angular
 api
 asp
 backend
 cargo
 composer
 cookies
 dependencies
 django
 dotnet
 flask
 html
 j2ee
 java
 javascript
 jquery
 json
 laravel
 markdown
 maven
 nodejs
 nosql
 npm
 php
 powershell
 rails
 react
 rest
 sql
 symfony
 vuejs
 webservices
 websocket
 wsdl
 xml
 yaml
Informations gathering
asn
 backups
 certificates
 codeanalysis
 companies
 directories
 dns
 documents
 domains
 emails
 endpoints
 favicon
 fingerprint
 geolocation
 ips
 metadata
 osint
 parameters
 passwords
 phones
 pii
 ports
 reverse-engineering
 screenshots
 secrets
 social-engineering
 software-analysis
 subdomains
 swagger
 usernames
 vhosts
 webcam
Network
bluetooth
 firewall
 ftp
 headers
 http
 imap
 ipsec
 lan
 netbios
 protocols
 proxy
 rdp
 requests
 router
 shares
 ssdp
 ssh
 tcp
 udp
 voip
 vpn
 wifi
 wireless
 wpa
Operating systems
android
 ios
 iot
 linux
 macos
 mobile
 windows
Resources
challenges
 cheatsheets
 exercices
 hackers
 learning
 owasp
 training
 videos
 wordlists
Source code management
bitbucket
 cvs
 git
 github
 gitlab
 mercurial
 svn
Tools categories
allinone
 altdns
 automation
 backdoor
 bruteforce
 bypass
 c2c
 cloner
 collaboration
 cracker
 crawler
 disassembler
 enumeration
 evasion
 exfiltration
 exploits
 export
 forensic
 framework
 fuzzing
 honeypot
 malware
 mapping
 monitoring
 orchestration
 organizer
 parser
 payloads
 phishing
 pivot
 postexploitation
 probing
 scanner
 scraper
 sniffer
 spoofing
 spraying
 toolkit
 tracker
 tunnel
Virtualization
clusters
 containers
 docker
 kubernetes
 vm
Vulnerabilities
clickjacking
 cors
 crlf
 csp
 csrf
 deserialization
 directorylisting
 fileupload
 hrs
 idor
 jsonp
 lfd
 lfi
 mitm
 nosqli
 oob
 openredirect
 overflow
 postmessage
 racecondition
 ratelimit
 rce
 rfi
 second-order
 spf
 sqli
 ssji
 ssrf
 ssti
 subto
 xss
 xxe
Well known products
burpsuite
 chrome
 cobaltstrike
 confluence
 firefox
 frida
 grafana
 iis
 jira
 metasploit
 meterpreter
 nessus
 nmap
 office
 oracle
 samba
 sentry
 sqlmap
 webdav
 word
Misc
apk
 browser
 ctf
 cves
 dorks
 files
 gpt
 images
 leaks
 logs
 online
 recon
 regexp
 shell
 utils
 zip