My "hacking" bookmarks / tools
Tags: security
Published: 2021-08-17 10:07:14

Hello! These are some websites I have bookmarked while studying. They are definitely not pro hacking tools but should be useful for open-source intelligence (OSINT) and for cybersecurity certifications. 

# Contents <a name="contents"></a>
* [Weak Site 1](#weak site1)
* [Weak Site 2](#weak site2)
* [Computer Laws in Singapore](#CLI)
* [CVE](#cve)
* [OSSA Notes](#ossa)
* [Whois](#whois)
* [NMAP cheatsheet 1](#nmap1)
* [NMAP cheatsheet 2](#nmap2)
* [TCP Port Numbers](#tcp)
* [Tripwire Reports](#tripwire)
* [Wireshark Filters](#wireshark)
* [Wireshark Filters 2](#wireshark2)
* [Snort Rules](#snort)
* [Virus Total](#virustotal)
* [Fileless Malware](#fileless)
* [IP Logger](#ip)
* [File Analysis](#fileanal)
* [Explain Shell Code](#shell)
* [Check Process](#processlibrary)
* [Security Policy Templates](#sans)
* [Microsoft Keys](#keys)
* [OWASP Risk Rating](#owasp)
* [Download Windows 10](#win10)
* [OSSTMM](#osstmm)
* [Change Windows Password](#chntpw)
* [ARP Poisoning](#arp)
* [DROP vs REJECT](#drop)
* [NodeJS Hacks](#node)
* [LockHeed Killchain](#killchain)
* [DirBuster](#dirbuster)
* [CyberChef](#cyberchef)
* [NIST](#nist)
* [Payloads](#payloads)
* [OWASP Zap](#zap)
* [DDE Auto Exploit](#dde)
* [EKANS Ransomware](#ekans)
* [Maze Ransomware](#maze)
* [Syntax Highlighter](#syntax)


## Weak Site 1 <a name="weak site1"></a>
Vulnerable website to perform pen testing
http://www.vulnweb.com/

[🚀 back to contents](#contents)

## Weak Site 2 <a name="weak site2"></a>
Another Vulnerable website to perform pen testing
https://demo.testfire.net/

[🚀 back to contents](#contents)

## Computer Laws in Singapore <a name="cli"></a>
Computer laws in Singapore are defined in the Computer Misuse Act
https://sso.agc.gov.sg/Act/CMA1993

[🚀 back to contents](#contents)

## CVE <a name="cve"></a>
Discover more about reported vulnerabilities and exploits
https://www.cvedetails.com/

[🚀 back to contents](#contents)

## OSSA Notes <a name="ossa"></a>
Notes for a cybersecurity certification, Organisational Systems Security Analyst
https://github.com/exetr/OSSA-Notes#osi-model

[🚀 back to contents](#contents)

## Whois <a name="whois"></a>
Discover more about a website's domain with this online Whois tool
http://whois.domaintools.com/

[🚀 back to contents](#contents)

## NMAP cheatsheet 1 <a name="nmap1"></a>
NMAP is a very popular hacking tool. This is one cheatsheet I used to operate NMAP
https://hackertarget.com/nmap-cheatsheet-a-quick-reference-guide/

[🚀 back to contents](#contents)

## NMAP cheatsheet 2 <a name="nmap2"></a>
NMAP is a very popular hacking tool. This is one cheatsheet I used to operate NMAP
https://highon.coffee/blog/nmap-cheat-sheet/

[🚀 back to contents](#contents)

## TCP Port Numbers <a name="tcp"></a>
Good for both blue and red teaming or for exams

http://www.meridianoutpost.com/resources/articles/well-known-tcpip-ports.php

[🚀 back to contents](#contents)

## Tripwire Reports <a name="tripwire"></a>
Tripwire is a network intrusion detection system (NIDS). Usually used in schools and beginner courses as proof of concept. I doubt it's used in production now. I believe SIEMs such as Splunk and IBM QRadar are more popular.

However if you do use the tripwire application, this might help
https://www-uxsup.csx.cam.ac.uk/pub/doc/redhat/redhat8/rhl-rg-en-8.0/s1-tripwire-twprint.html

[🚀 back to contents](#contents)

## Wireshark Filters <a name="wireshark1"></a>
Wireshark needs no introduction. This is one cheatsheet I used
https://www.thegeekstuff.com/2012/07/wireshark-filter/

[🚀 back to contents](#contents)

## Wireshark Filters 2 <a name="wireshark2"></a>
Wireshark needs no introduction. This is one cheatsheet I used
https://wiki.wireshark.org/DisplayFilters

[🚀 back to contents](#contents)

## Snort Rules <a name="snort"></a>
Similar to tripwire, Snort is an intrusion detection system (IDS) that's very outdated and surpassed by modern holistic SIEMs

However it is still used in schools and exams. This might help
https://blog.rapid7.com/2016/12/09/understanding-and-configuring-snort-rules/

[🚀 back to contents](#contents)

## VirusTotal <a name="virustotal"></a>
Check any file or link for malware. Not completely foolproof, do your own testing. 
Usually used in schools and exams too
https://www.virustotal.com/gui/home

[🚀 back to contents](#contents)

## Fileless Malware <a name="fileless"></a>
Pretty cool stuff
https://github.com/chenerlich/FCL/blob/master/Malwares/Locky.md

[🚀 back to contents](#contents)

## IP Logger <a name="ip"></a>
Good for phishing attacks. Not really that malicious since any time you connect to a website or server your IP address is shown. This can be mitigated through many ways such as Tor, VPN, dynamic IP address, these are to name of but a few
https://iplogger.org/

[🚀 back to contents](#contents)

## File Analysis <a name="fileanal"></a>
Similar to VirusTotal
https://www.joesandbox.com/

[🚀 back to contents](#contents)

## Explain Shell Code <a name="shell"></a>
Pretty cool
https://explainshell.com/explain?cmd=netstat+-a#

[🚀 back to contents](#contents)

## Check Process <a name="processlibrary"></a>
Unknown process running on your PC? Check here
https://www.processlibrary.com/en/

[🚀 back to contents](#contents)

## Security Policy Templates <a name="sans"></a>
Boring stuff
https://www.sans.org/information-security-policy/

[🚀 back to contents](#contents)

## Microsoft Keys <a name="keys"></a>
I didn't know I had access to this with my school email account lol. Useful for setting up VMs for testing
https://azureforeducation.microsoft.com/devtools

[🚀 back to contents](#contents)

## OWASP Risk Rating <a name="owasp"></a>
Needs no introduction
https://owasp.org/www-community/OWASP_Risk_Rating_Methodology

[🚀 back to contents](#contents)

## Download Windows 10 <a name="win10"></a>
Windows 10 .iso literally on their website free to download
https://www.microsoft.com/en-au/software-download/windows10

[🚀 back to contents](#contents)

## OSSTMM <a name="osstmm"></a>
Similar to OWASP Top 10
https://kirkpatrickprice.com/blog/what-you-need-to-know-about-osstmm/

[🚀 back to contents](#contents)

## Change Windows Password <a name="chntpw"></a>
Old hack that works on old PCs
https://en.wikipedia.org/wiki/Chntpw

[🚀 back to contents](#contents)

## ARP Poisoning <a name="arp"></a>
I always forget what's the difference between ARP and DNS poisoning. This website has notes for CEH as well
https://ktflash.gitbooks.io/ceh_v9/content/74_arp_poisoning.html

[🚀 back to contents](#contents)

## DROP vs REJECT <a name="drop"></a>
I always forget the difference
http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-reject

[🚀 back to contents](#contents)

## NodeJS Hacks <a name="node"></a>
Cool stuff for NodeJS
https://github.com/aadityapurani/NodeJS-Red-Team-Cheat-Sheet

[🚀 back to contents](#contents)

## LockHeed Killchain <a name="killchain"></a>
LockHeed Martin Cyber Kill Chain. Useful for organisational security I suppose
https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html

[🚀 back to contents](#contents)

## DirBuster <a name="dirbuster"></a>
Useful for intrusive penetration testing. I believe this tool is included with Kali
https://tools.kali.org/web-applications/dirbuster

[🚀 back to contents](#contents)

## CyberChef <a name="cyberchef"></a>
Decrypt (not really) anything
https://gchq.github.io/CyberChef/

[🚀 back to contents](#contents)

## NIST <a name="nist"></a>
Another cybersecurity framework. Similar to OWASP
https://www.k2io.com/understanding-the-new-nist-sp800-53-guidelines-for-application-security/

[🚀 back to contents](#contents)

## Payloads <a name="payloads"></a>
Probably the most dangerous link here
https://github.com/swisskyrepo/PayloadsAllTheThings

[🚀 back to contents](#contents)

## OWASP Zap <a name="zap"></a>
I have never tried this. Always wanted to
https://www.google.com/search?q=owasp+xap

[🚀 back to contents](#contents)

## DDE Auto Exploit <a name="dde"></a>
Cool exploit good with phishing
https://pentestlab.blog/2018/01/16/microsoft-office-dde-attacks/

[🚀 back to contents](#contents)

## EKANS Ransomware <a name="ekans"></a>
Something I've always wanted to read up
https://www.google.com/search?q=ekans+hack

[🚀 back to contents](#contents)

## Maze Ransomware <a name="maze"></a>
Something I've always wanted to read up
https://www.google.com/search?q=maze+hackers

[🚀 back to contents](#contents)

## Syntax Highlighter <a name="syntax"></a>
Useful for writing reports
https://pinetools.com/syntax-highlighter

[🚀 back to contents](#contents)