Back to portfolio
23 categories240+ links
Personal Bookmarks
Collection Hub
A curated, living collection of the tools, trackers, sandboxes, cheatsheets, and reading lists I actually use day to day in cybersecurity, IT, and DFIR/OSINT work — plus a few things I just find genuinely useful.
Cert Roadmap
Technical Security Certification Roadmap
225 hands-on cybersecurity certifications across 13 technical domains (pentest, malware RE, cloud, OT/ICS, AI security) — positioned by real depth, not marketing tier. My own styled version, data sourced and credited below.
Source: PHK Knowledge Sharing
Alerts
5SOC Tools
23- TheresAFewConors/Sooty
- Pulsar — network footprint scanner
- smicallef/spiderfoot
- TheHive-Project/TheHive
- TheHive-Project/Cortex
- danieleperera/SocAnalystArsenal
- CyberChef
- Harpoon (Threat Intel/OSINT)
- FoxyRecon (OSINT)
- Domain Analyzer
- peepdf — PDF Analysis Tool
- PyREBox — Python scriptable RE sandbox
- OSSEC
- Chkrootkit
- Process Hacker
- Wazuh
- Security Onion Solutions
- CAINE Live
- OSSIM — The Open Source SIEM
- Redline (FireEye/Mandiant)
- MISP
- Mimikatz
- Mushy
Frameworks
8Training Platforms
7Training
1Vulnerability Assessment Tools
6Certifications
7Analysis
72- VirusTotal
- Intezer Analyze
- Joe Sandbox
- Any.Run — Interactive Malware Sandbox
- InQuest Labs
- Hatching Triage
- CAPEv2 Sandbox
- FileScan.IO
- MalwareBazaar
- Feodo Tracker
- SSLBL — Malicious SSL Certificates
- ThreatFox
- AbuseIPDB
- IPinfo — IP Address API and Data
- IBM X-Force Exchange
- IPQualityScore
- AlienVault OTX
- URLhaus
- urlscan.io — URL and website scanner
- SecurityTrails
- Shodan
- IP Geolocation & Fraud Prevention (ipdata)
- Talos Intelligence — Reputation Center
- DomainTools Whois
- dnstwister
- ThreatCrowd
- Dig — DNS lookup
- Hunter — email finder
- Email Header Analyzer (Google Admin Toolbox)
- RFC822 Header Parser
- Decent Security
- abuse.ch — I Got Phished, Get Notified
- YARAify
- Cipher Identifier (dCode)
- URL2PNG
- NirSoft Utilities
- ExtAnalysis — Tuhinshubhra
- JSON Crack
- CRXcavator
- dnsdumpster
- Sucuri SiteCheck
- Where's It Up — API
- PhishTank
- CheckPhish
- Censys
- IPVOID
- Comodo Valkyrie
- Talos File Reputation
- abelcheung/rifiuti2
- WADComs
- persistence-info.github.io
- Unprotect Project
- LOLBAS
- LOLDrivers
- GTFOBins
- LOTS Project
- Filesec.io
- MalAPI.io
- HijackLibs
- Malpedia
- urlquery.net
- DocGuard
- URLVoid
- Palo Alto Networks — URL Filtering Test
- Device Hunt
- Hash Type Identifier
- WhatIsMyIP — IP/WHOIS Lookup
- DNS Checker
- Recorded Future — Cyber Threat Intelligence
- VPN & Proxy Detection (IPQS)
- ALEAPP — Android Logs Events Parser
- iLEAPP — iOS Logs, Events, Plists Parser
Portals
1Cheatsheet
14- DFIR Cheatsheet — Jai Minton
- Bash Scripting Cheatsheet
- Active Directory Exploitation Cheat Sheet
- Hacking Tools Cheat Sheet
- Linux Command Line Forensics & Intrusion Detection
- Nmap Cheat Sheet
- Wireshark Cheat Sheet
- Metasploit Cheat Sheet
- IPv4 Subnet Cheat Sheet
- Linux Command Line Cheat Sheet
- Common Ports Cheat Sheet
- AWK Command Cheat Sheet & Quick Reference
- PowerShell Docs
- example_hashes — hashcat wiki
Useful Articles
14- Manually Exploiting MS17-010 (python2 → python3)
- Black Hat Ethical Hacking — Articles
- Hacking JWT Tokens: Bruteforcing Weak Signing Keys
- Follina — MSDT Remote Code Execution
- Digital Forensics Myanmar
- Windows Artifacts Cheat-Sheet
- Linux Forensics — Useful Artifacts
- Windows Security Log Encyclopedia
- Shadow Copies and Shadow Copy Sets (Win32 apps)
- It's All Fun and Games Until Ransomware Deletes the Shadow Copies
- What Is a Shadow Copy and How to Recover Files Using It
- iRed.team
- TheBinaryHick.blog
- mac4n6.com
News
7CTF Useful Links
41- Insecam
- spammimic — decode
- Exif.tools
- Stegseek
- zardus/ctf-tools
- decalage2/oletools Wiki (mraptor)
- CFReDS — NIST
- CTF Write-Ups
- Malware-Traffic-Analysis.net
- Applied Network Defense — Courses
- Seconds to HH:MM:SS Time Calculator
- DFIR — The Definitive Compendium Project
- WhatsMyName Web
- CalcResult
- DTMF Detection Demo
- Spam Message Generator
- Twin Hex Cipher
- Steganography Tools
- Aperi'Solve
- Bellingcat's Online Investigation Toolkit
- KeeWeb
- Imgur
- YouTube Metadata
- OCLC WorldCat Gateway
- Sherlock Project (username OSINT)
- Reverse Video Search
- StegCloak
- Search CTF Writeups and Solutions
- TikTok Video Data Extractor
- Ciphers and Codes (dCode)
- Arkham Intelligence
- Unfurl
- File Signatures (Gary Kessler)
- Unix Timestamp Converter
- User Agents Database
- Twitter ID Finder
- TPC to Map coordinates converter
- Gravatar
- GeoHints
- Plonkit.net
- GeoTips — Tips and Tricks for GeoGuessr
IOCs / Intels
4Other's Collection
2Built and maintained by Hein Htet Zaw. Found something broken or have a resource I should add?
minehhz69@gmail.comLink collection layout adapted from Kaung