Resources

Resources

Tools, platforms, and reading material I recommend for anyone interested in cybersecurity.

Security Tools

Web Security

BurpSuite

The #1 web application security testing toolkit. Essential for intercepting, modifying, and replaying HTTP requests.

Visit
Network Security

Nmap

Network discovery and security auditing. The Swiss Army knife of network scanning.

Visit
Vulnerability Scanning

Nuclei

Fast, template-based vulnerability scanner. Community-driven templates for thousands of CVEs.

Visit
Exploitation

Metasploit

The world's most used penetration testing framework. Essential for exploit development and testing.

Visit
Network Analysis

Wireshark

Network protocol analyzer. Invaluable for deep packet inspection and network forensics.

Visit
Web Security

OWASP ZAP

Open-source web application security scanner. Great for automated and manual testing.

Visit

Learning Platforms

TryHackMe

Guided, hands-on cybersecurity training. Where I achieved top 10% global ranking.

HackTheBox

Advanced penetration testing labs and challenges for security professionals.

PortSwigger Web Security Academy

Free online training for web security. The best resource for learning web vulnerabilities.

OWASP Top 10

Standard awareness document for web application security. The starting point for every web security professional.

Reading List

The Web Application Hacker's Handbook

by Dafydd Stuttard & Marcus Pinto

The definitive guide to finding and exploiting web application security flaws.

Hacking: The Art of Exploitation

by Jon Erickson

Deep dive into the technical foundations of hacking — from C programming to network exploitation.

Practical Malware Analysis

by Michael Sikorski & Andrew Honig

Hands-on guide to dissecting malicious software.

The Tangled Web

by Michal Zalewski

A guide to securing modern web applications by understanding the browser security model.