Home / Knowledge Base

Knowledge Base

Security resources, blogs, write-ups, and awareness materials for security education

Security Mentor Security Awareness Training Program
Free

Security Mentor Security Awareness Training Program

ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.

HacWare
Free

HacWare View HacWare

HacWare is a data-driven cybersecurity awareness solution designed to empower IT professionals in the fight against phishing and human error, the primary drivers of data breaches. By harnessing the power of machine learning and advanced user behavior analytics, HacWare automates critical security awareness tasks, educates employees on evolving threats, and proactively identifies individuals at risk of falling victim to social engineering tactics. Our proprietary AI-driven technology simulates real-world attack scenarios through automated phishing campaigns, significantly strengthening an organization's defense.

AI-driven phishing simulation and awareness training
Machine learning for threat identification
User behavior analytics for risk assessment
Increase Your Skills (IYS)
Free

Increase Your Skills (IYS) View Increase Your Skills (IYS)

Empower your organization to combat evolving cyber threats with the Increase Your Skills (IYS) Full-Service Awareness Platform. Our comprehensive solution delivers engaging, interactive training that equips employees with the knowledge to prevent, recognize, and respond to attacks, fostering a robust and sustainable security culture. Comprehensive phishing simulations provide a safe, practical environment for reinforcing learned behaviors and achieving measurable improvements in cyber resilience.

Comprehensive awareness training modules
Realistic phishing simulations
Interactive and engaging content
Bad Sector Labs Blog - Last Week in Security (LWiS)
Free

Bad Sector Labs Blog - Last Week in Security (LWiS)

Brian Krebs is a cybersecurity journalist and blogger, known for his in-depth reporting on cybercrime and cybersecurity issues.

BadCyber
Free

BadCyber

Infosec Resources provides extensive cybersecurity training and certifications to boost cybersecurity skills and careers.

Bleeping Computer
Free

Bleeping Computer

Report on a malicious module posing as a cookie parsing library on npm blog archive.

15 Best Practices for Protecting Your Email with Security Gateway
Free

15 Best Practices for Protecting Your Email with Security Gateway

A tool to quickly get all JavaScript sources/files

3GL
Free

3GL

A system for reserving classrooms at the University of Pisa.

@hapi/bourne
Free

@hapi/bourne

A microservice for string padding to prevent global issues like the left-pad incident.

0xf.at Hackits
Free

0xf.at Hackits

An evolving how-to guide for securing a Linux server with detailed steps and explanations.

ARM Assembly Tutorial Series
Free

ARM Assembly Tutorial Series

An article in Phrack Magazine discussing the creation of shellcode for StrongARM/Linux architecture.

Active Directory Exploitation Cheat Sheet
Free

Active Directory Exploitation Cheat Sheet

A collection of reports and resources highlighting Android security vulnerabilities and best practices.

APFS File System Format Reference Sheet
Free

APFS File System Format Reference Sheet

BPF+ is a generalized packet filter framework that achieves both high-level expressiveness and good performance for network monitoring and intrusion detection applications.

BPF+: Exploiting Global Data-flow Optimization in a Generalized Packet Filter Architecture
Free

BPF+: Exploiting Global Data-flow Optimization in a Generalized Packet Filter Architecture

Utilizing SIEM, SOAR, and EDR technologies to enhance security operations with a focus on reducing incident response time.

Cloudflare Learning Center
Free

Cloudflare Learning Center

A comprehensive cheat sheet for accessing Windows systems from Linux hosts using smbclient and rpcclient tools, covering password management, user and group enumeration, and more.