Tools and Resources

Tools

• Kali Linux - Penetration testing distribution
• Burp Suite - Penetration testing toolkit
• Metasploit Framework - Penetration testing framework
• MITRE ATT&CK-Framework - Knowledge base of adversary tactics
• Proton VPN - partly free, reliable, fast and safe virtual private network

Top10 Vulnerabilities

• OWASP Top10

Cybersecurity training

• Web Security Academy - free cybersecurity training
• Try hack me - commercial (partly free) cybersecurity training
• Hack the box - commercial (partly free) cybersecurity training

Vulnerable web applications for training

• OWASP Juice Shop - Angular/Node.js based vulnerable web application
• OWASP WebGoat - Java based vulnerable web application
• DVWA - PHP based vulnerable web application
• XVWA - PHP/MYSQL based vulnerable web application
• bWAPP - PHP/MYSQL based vulnerable web application
• Vulnhub - free vulnerable virtual machines

Markdown

• Markdown guide
• Markdown cheat sheet

---

Last update: March 2, 2024