Skip to content
Back to portfolio
23 categories240+ links

Personal Bookmarks

Collection Hub

A curated, living collection of the tools, trackers, sandboxes, cheatsheets, and reading lists I actually use day to day in cybersecurity, IT, and DFIR/OSINT work — plus a few things I just find genuinely useful.

Cert Roadmap

Technical Security Certification Roadmap

225 hands-on cybersecurity certifications across 13 technical domains (pentest, malware RE, cloud, OT/ICS, AI security) — positioned by real depth, not marketing tier. My own styled version, data sourced and credited below.

Source: PHK Knowledge Sharing

Alerts

5
  • JPCERT Coordination Center
  • ENISA
  • CVE — Common Vulnerabilities and Exposures
  • CVE Details
  • Exploit-DB

Blogs

3
  • Huntress Blog
  • SANS Internet Storm Center
  • Forensic Focus

SOC Tools

23
  • TheresAFewConors/Sooty
  • Pulsar — network footprint scanner
  • smicallef/spiderfoot
  • TheHive-Project/TheHive
  • TheHive-Project/Cortex
  • danieleperera/SocAnalystArsenal
  • CyberChef
  • Harpoon (Threat Intel/OSINT)
  • FoxyRecon (OSINT)
  • Domain Analyzer
  • peepdf — PDF Analysis Tool
  • PyREBox — Python scriptable RE sandbox
  • OSSEC
  • Chkrootkit
  • Process Hacker
  • Wazuh
  • Security Onion Solutions
  • CAINE Live
  • OSSIM — The Open Source SIEM
  • Redline (FireEye/Mandiant)
  • MISP
  • Mimikatz
  • Mushy

Frameworks

8
  • MITRE ATT&CK
  • D3FEND Matrix
  • Cyber Kill Chain (Lockheed Martin)
  • NIST Cybersecurity Framework
  • Cybersecurity & Infrastructure Security Agency (CISA)
  • ISO/IEC 27001
  • Health Information Privacy (HIPAA)
  • GDPR.eu

Hash

2
  • Hashes.com — Decrypt MD5, SHA1, NTLM, SHA256...
  • CrackStation

CTFs

6
  • CTFtime
  • Hacker101 CTF
  • picoCTF
  • Google CTF
  • GitHub Security Lab — Capture the Flag
  • BelkaCTF

Training Platforms

7
  • Blue Team Labs Online
  • CyberDefenders
  • LetsDefend
  • RangeForce
  • Hack The Box
  • TryHackMe
  • CyberTalents

Training

1
  • Cyber training resources

Vulnerability Assessment Tools

6
  • Nikto2
  • OpenVAS
  • w3af
  • Acunetix
  • Nmap — the Network Mapper
  • Nexpose (Rapid7)

POCs

2
  • MS-MSDT "Follina" POC — JohnHammond
  • n1shhth/CVE-POC — collection of latest CVE PoCs

Bounty Programs

7
  • SOC Prime
  • YesWeHack
  • OpenBugBounty
  • Bugcrowd
  • SafeHats
  • Intigriti
  • Synack

Certifications

7
  • GIAC GCIH
  • Blue Team Level 1 (BTL1)
  • CompTIA CySA+
  • eLearnSecurity (INE)
  • Mile2
  • (ISC)²
  • Paul Jerimy — Security Certification Roadmap

Analysis

72
  • VirusTotal
  • Intezer Analyze
  • Joe Sandbox
  • Any.Run — Interactive Malware Sandbox
  • InQuest Labs
  • Hatching Triage
  • CAPEv2 Sandbox
  • FileScan.IO
  • MalwareBazaar
  • Feodo Tracker
  • SSLBL — Malicious SSL Certificates
  • ThreatFox
  • AbuseIPDB
  • IPinfo — IP Address API and Data
  • IBM X-Force Exchange
  • IPQualityScore
  • AlienVault OTX
  • URLhaus
  • urlscan.io — URL and website scanner
  • SecurityTrails
  • Shodan
  • IP Geolocation & Fraud Prevention (ipdata)
  • Talos Intelligence — Reputation Center
  • DomainTools Whois
  • dnstwister
  • ThreatCrowd
  • Dig — DNS lookup
  • Hunter — email finder
  • Email Header Analyzer (Google Admin Toolbox)
  • RFC822 Header Parser
  • Decent Security
  • abuse.ch — I Got Phished, Get Notified
  • YARAify
  • Cipher Identifier (dCode)
  • URL2PNG
  • NirSoft Utilities
  • ExtAnalysis — Tuhinshubhra
  • JSON Crack
  • CRXcavator
  • dnsdumpster
  • Sucuri SiteCheck
  • Where's It Up — API
  • PhishTank
  • CheckPhish
  • Censys
  • IPVOID
  • Comodo Valkyrie
  • Talos File Reputation
  • abelcheung/rifiuti2
  • WADComs
  • persistence-info.github.io
  • Unprotect Project
  • LOLBAS
  • LOLDrivers
  • GTFOBins
  • LOTS Project
  • Filesec.io
  • MalAPI.io
  • HijackLibs
  • Malpedia
  • urlquery.net
  • DocGuard
  • URLVoid
  • Palo Alto Networks — URL Filtering Test
  • Device Hunt
  • Hash Type Identifier
  • WhatIsMyIP — IP/WHOIS Lookup
  • DNS Checker
  • Recorded Future — Cyber Threat Intelligence
  • VPN & Proxy Detection (IPQS)
  • ALEAPP — Android Logs Events Parser
  • iLEAPP — iOS Logs, Events, Plists Parser

Network

2
  • Wireshark
  • TCPDUMP/LIBPCAP public repository

Portals

1
  • CFReDS — NIST

Cheatsheet

14
  • DFIR Cheatsheet — Jai Minton
  • Bash Scripting Cheatsheet
  • Active Directory Exploitation Cheat Sheet
  • Hacking Tools Cheat Sheet
  • Linux Command Line Forensics & Intrusion Detection
  • Nmap Cheat Sheet
  • Wireshark Cheat Sheet
  • Metasploit Cheat Sheet
  • IPv4 Subnet Cheat Sheet
  • Linux Command Line Cheat Sheet
  • Common Ports Cheat Sheet
  • AWK Command Cheat Sheet & Quick Reference
  • PowerShell Docs
  • example_hashes — hashcat wiki

Useful Articles

14
  • Manually Exploiting MS17-010 (python2 → python3)
  • Black Hat Ethical Hacking — Articles
  • Hacking JWT Tokens: Bruteforcing Weak Signing Keys
  • Follina — MSDT Remote Code Execution
  • Digital Forensics Myanmar
  • Windows Artifacts Cheat-Sheet
  • Linux Forensics — Useful Artifacts
  • Windows Security Log Encyclopedia
  • Shadow Copies and Shadow Copy Sets (Win32 apps)
  • It's All Fun and Games Until Ransomware Deletes the Shadow Copies
  • What Is a Shadow Copy and How to Recover Files Using It
  • iRed.team
  • TheBinaryHick.blog
  • mac4n6.com

News

7
  • BleepingComputer
  • The Hacker News
  • Infosec Resources
  • Microsoft Threat Intelligence
  • CrowdStrike Blog
  • The Red Canary Blog
  • Unit 42 (Palo Alto Networks)

Email

3
  • mha.azurewebsites.net
  • Emkei's Fake Mailer
  • Thunderbird

CTF Useful Links

41
  • Insecam
  • spammimic — decode
  • Exif.tools
  • Stegseek
  • zardus/ctf-tools
  • decalage2/oletools Wiki (mraptor)
  • CFReDS — NIST
  • CTF Write-Ups
  • Malware-Traffic-Analysis.net
  • Applied Network Defense — Courses
  • Seconds to HH:MM:SS Time Calculator
  • DFIR — The Definitive Compendium Project
  • WhatsMyName Web
  • CalcResult
  • DTMF Detection Demo
  • Spam Message Generator
  • Twin Hex Cipher
  • Steganography Tools
  • Aperi'Solve
  • Bellingcat's Online Investigation Toolkit
  • KeeWeb
  • Imgur
  • YouTube Metadata
  • OCLC WorldCat Gateway
  • Sherlock Project (username OSINT)
  • Reverse Video Search
  • StegCloak
  • Search CTF Writeups and Solutions
  • TikTok Video Data Extractor
  • Ciphers and Codes (dCode)
  • Arkham Intelligence
  • Unfurl
  • File Signatures (Gary Kessler)
  • Unix Timestamp Converter
  • User Agents Database
  • Twitter ID Finder
  • TPC to Map coordinates converter
  • Gravatar
  • GeoHints
  • Plonkit.net
  • GeoTips — Tips and Tricks for GeoGuessr

IOCs / Intels

4
  • sophoslabs/IoCs
  • Microsoft Security Response Center
  • Have I Been Pwned?
  • Threat Intel Blogs Collection — himynamesdave

Playbooks

2
  • Incident Response Plan Template (counteractive)
  • IncidentResponse.org

Other's Collection

2
  • DFM-SM-OSINT
  • Forensics Collection

Built and maintained by Hein Htet Zaw. Found something broken or have a resource I should add?

minehhz69@gmail.com

Link collection layout adapted from Kaung