189.7K
KE7 websites every security engineer should bookmark.
From privilege escalation references to real-time threat feeds.
GTFOBins — A curated list of Unix binaries that can be abused
for privilege escalation, reverse shells, and file operations.
First place to check after you land on a Linux box.
LOLBAS — Same concept, Windows side. Native binaries, scripts
and libraries that attackers use to blend in with normal system
activity. Essential for both red team and detection engineering.
CyberChef — 475+ operations for encoding, decoding, encryption
and data analysis, all in the browser. No install needed.
Analysts and CTF players use this daily.
Exploit-DB — The public exploit archive maintained by Offensive
Security. Search by CVE, platform or type. CVE research
starts here.
GreyNoise — Real-time intelligence on what is actively scanning
the internet. Helps you separate targeted attacks from background
noise in your logs. Invaluable for SOC and threat hunting.
revshells — Reverse and bind shell one-liners for every language
and OS. Enter your IP and port, pick your shell, copy and go.
No more googling mid-engagement.
crt.sh — Certificate transparency log search. Uncover subdomains
your target forgot they had. One of the best passive recon
starting points for bug bounty and pentesting.
Save this. You will need it.
#cybersecurity #informationsecurity #ethicalhacking #pentesting #securityengineer
@kerem.tech
