TryHackMe
Commercial browser-based cybersecurity training platform with guided rooms and paths, from beginner fundamentals to offensive and defensive roles.
Training & LabsFreemium
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
Hack The Box
Commercial hands-on cybersecurity training platform with labs, HTB Academy courses and capture-the-flag events for individuals and teams.
Training & LabsFreemium
Wireshark
Open-source network protocol analyser for capturing and inspecting traffic live or from saved files, with deep dissection and display filters.
Shodan
Commercial search engine for internet-connected devices and services, used to research exposure and monitor an organization’s attack surface.
OSINT & ReconnaissanceFreemium
Cobalt Strike
Commercial adversary-simulation platform for red teams, built around the Beacon post-exploitation agent and a shared team server.
ZAP (Zed Attack Proxy)
Open-source web application scanner and intercepting proxy for finding vulnerabilities manually or in automated CI pipelines.
Burp Suite
Commercial web application security toolkit centred on an intercepting proxy, with a free Community Edition and paid Professional and DAST editions.
Application SecurityFreemium