diff --git a/README.md b/README.md
index 2c1b9e4..937cbb0 100644
--- a/README.md
+++ b/README.md
@@ -174,7 +174,7 @@ Only main chapters:
Rust Scan - to find all open ports faster than Nmap.
masscan - is the fastest Internet port scanner, spews SYN packets asynchronously.
pbscan - is a faster and more efficient stateless SYN scanner and banner grabber.
- hping - is a command-line oriented TCP/IP packet assembler/analyzer.
+ hping - is a command-line oriented TCP/IP packet assembler/analyzer.
mtr - is a tool that combines the functionality of the 'traceroute' and 'ping' programs in a single tool.
mylg - utility which combines the functions of the different network probes in one diagnostic tool.
netcat - utility which reads and writes data across network connections, using the TCP/IP protocol.
@@ -183,7 +183,7 @@ Only main chapters:
tshark - is a tool that allows us to dump and analyze network traffic (wireshark cli).
Termshark - is a simple terminal user-interface for tshark.
ngrep - is like GNU grep applied to the network layer.
- netsniff-ng - is a Swiss army knife for your daily Linux network plumbing if you will.
+ netsniff-ng - is a Swiss army knife for your daily Linux network plumbing if you will.
sockdump - dump unix domain socket traffic.
stenographer - is a packet capture solution which aims to quickly spool all packets to disk.
tcpterm - visualize packets in TUI.
@@ -264,7 +264,7 @@ Only main chapters:
sslscan - tests SSL/TLS enabled services to discover supported cipher suites.
testssl.sh - testing TLS/SSL encryption anywhere on any port.
cipherscan - a very simple way to find out which SSL ciphersuites are supported by a target.
- spiped - is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
+ spiped - is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
Certbot - is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server.
mkcert - simple zero-config tool to make locally trusted development certificates with any names you'd like.
certstrap - tools to bootstrap CAs, certificate requests, and signed certificates.
@@ -305,7 +305,7 @@ Only main chapters:
perf-tools - performance analysis tools based on Linux perf_events (aka perf) and ftrace.
bpftrace - high-level tracing language for Linux eBPF.
sysdig - system exploration and troubleshooting tool with first class support for containers.
- Valgrind - is an instrumentation framework for building dynamic analysis tools.
+ Valgrind - is an instrumentation framework for building dynamic analysis tools.
gperftools - high-performance multi-threaded malloc() implementation, plus some performance analysis tools.
glances - cross-platform system monitoring tool written in Python.
htop - interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.
@@ -313,7 +313,7 @@ Only main chapters:
nmon - a single executable for performance monitoring and data analysis.
atop - ASCII performance monitor. Includes statistics for CPU, memory, disk, swap, network, and processes.
lsof - displays in its output information about files that are opened by processes.
- FlameGraph - stack trace visualizer.
+ FlameGraph - stack trace visualizer.
lsofgraph - convert Unix lsof output to a graph showing FIFO and UNIX interprocess communication.
rr - is a lightweight tool for recording, replaying and debugging execution of applications.
Performance Co-Pilot - a system performance analysis toolkit.
@@ -368,7 +368,7 @@ Only main chapters:
sysadmin-util - tools for Linux/Unix sysadmins.
- incron - is an inode-based filesystem notification technology.
+ incron - is an inode-based filesystem notification technology.
lsyncd - synchronizes local directories with remote targets (Live Syncing Daemon).
GRV - is a terminal based interface for viewing Git repositories.
Tig - text-mode interface for Git.
@@ -461,7 +461,7 @@ Only main chapters:
SSLLabs Server Test (DEV) - performs a deep analysis of the configuration of any SSL web server.
ImmuniWeb® SSLScan - test SSL/TLS (PCI DSS, HIPAA and NIST).
SSL Check - scan your website for non-secure content.
- SSL Scanner - analyze website security.
+ SSL Scanner - analyze website security.
CryptCheck - test your TLS server configuration (e.g. ciphers).
urlscan.io - service to scan and analyse websites.
Report URI - monitoring security policies like CSP and HPKP.
@@ -496,7 +496,7 @@ Only main chapters:
##### :black_small_square: DNS
- ViewDNS - one source for free DNS related tools and information.
+ ViewDNS - one source for free DNS related tools and information.
DNSLookup - is an advanced DNS lookup tool.
DNSlytics - online DNS investigation tool.
DNS Spy - monitor, validate and verify your DNS configurations.
@@ -506,7 +506,7 @@ Only main chapters:
DNSdumpster - dns recon & research, find & lookup dns records.
DNS Table online - search for DNS records by domain, IP, CIDR, ISP.
intoDNS - DNS and mail server health checker.
- DNS Bajaj - check the delegation of your domain.
+ DNS Bajaj - check the delegation of your domain.
BuddyDNS Delegation LAB - check, trace and visualize delegation of your domain.
dnssec-debugger - DS or DNSKEY records validator.
PTRarchive.com - this site is responsible for the safekeeping of historical reverse DNS records.
@@ -523,7 +523,7 @@ Only main chapters:
smtp-tls-checker - check an email domain for SMTP TLS support.
MX Toolbox - all of your MX record, DNS, blacklist and SMTP diagnostics in one integrated tool.
Secure Email - complete email test tools for email technicians.
- blacklistalert - checks to see if your domain is on a Real Time Spam Blacklist.
+ blacklistalert - checks to see if your domain is on a Real Time Spam Blacklist.
MultiRBL - complete IP check for sending Mailservers.
DKIM SPF & Spam Assassin Validator - checks mail authentication and scores messages with Spam Assassin.
@@ -628,7 +628,7 @@ performance of any of your sites from across the globe.
Cybercrime Tracker - monitors and tracks various malware families that are used to perpetrate cyber crimes.
shhgit - find GitHub secrets in real time.
searchcode - helping you find real world examples of functions, API's and libraries.
- Insecam - the world biggest directory of online surveillance security cameras.
+ Insecam - the world biggest directory of online surveillance security cameras.
index-of - contains great stuff like: security, hacking, reverse engineering, cryptography, programming etc.
Rapid7 Labs Open Data - is a great resources of datasets from Project Sonar.
Common Response Headers - the largest database of HTTP response headers.
@@ -842,7 +842,7 @@ performance of any of your sites from across the globe.
bash-guide - is a guide to learn bash.
bash-handbook - for those who wanna learn Bash.
The Bash Hackers Wiki - hold documentation of any kind about GNU Bash.
- Shell & Utilities - describes the commands offered to application programs by POSIX-conformant systems.
+ Shell & Utilities - describes the commands offered to application programs by POSIX-conformant systems.
the-art-of-command-line - master the command line, in one page.
Shell Style Guide - a shell style guide for Google-originated open-source projects.
@@ -875,7 +875,7 @@ performance of any of your sites from across the globe.
Omnisecu - free Networking, System Administration and Security tutorials.
linux-cheat - Linux tutorials and cheatsheets. Minimal examples. Mostly user-land CLI utilities.
linuxupskillchallenge - learn the skills required to sysadmin.
- Unix Toolbox - Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users.
+ Unix Toolbox - Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users.
Linux Kernel Teaching - is a collection of lectures and labs Linux kernel topics.
htop explained - explanation of everything you can see in htop/top on Linux.
Linux Guide and Hints - tutorials on system administration in Fedora and CentOS.
@@ -926,7 +926,7 @@ performance of any of your sites from across the globe.
Rawsec's CyberSecurity Inventory - an inventory of tools and resources about CyberSecurity.
The Illustrated TLS Connection - every byte of a TLS connection explained and reproduced.
SSL Research - SSL and TLS Deployment Best Practices by SSL Labs.
- SELinux Game - learn SELinux by doing. Solve Puzzles, show skillz.
+ SELinux Game - learn SELinux by doing. Solve Puzzles, show skillz.
Certificates and PKI - everything you should know about certificates and PKI but are too afraid to ask.
The Art of Subdomain Enumeration - a reference for subdomain enumeration techniques.
Quitting Google - the comprehensive guide to quitting Google.
@@ -982,9 +982,9 @@ performance of any of your sites from across the globe.
50M_CTF_Writeup - $50 million CTF from Hackerone - writeup.
ctf-tasks - an archive of low-level CTF challenges developed over the years.
How to start RE/malware analysis? - collection of some hints and useful links for the beginners.
- The C10K problem - it's time for web servers to handle ten thousand clients simultaneously, don't you think?
+ The C10K problem - it's time for web servers to handle ten thousand clients simultaneously, don't you think?
How 1500 bytes became the MTU of the internet - great story about the Maximum Transmission Unit.
- poor man's profiler - like dtrace's don't really provide methods to see what programs are blocking on.
+ poor man's profiler - like dtrace's don't really provide methods to see what programs are blocking on.
HTTPS on Stack Overflow - this is the story of a long journey regarding the implementation of SSL.
Julia's Drawings - some drawings about programming and unix world, zines about systems & debugging tools.
Hash collisions - this great repository is focused on hash collisions exploitation.
@@ -997,15 +997,15 @@ performance of any of your sites from across the globe.
HTTPS in the real world - great tutorial explain how HTTPS works in the real world.
Gitlab and NFS bug - how we spent two weeks hunting an NFS bug in the Linux kernel.
Gitlab melts down - postmortem on the database outage of January 31 2017 with the lessons we learned.
- How To Become A Hacker - if you want to be a hacker, keep reading.
- Operation Costs in CPU - should help to estimate costs of certain operations in CPU clocks.
+ How To Become A Hacker - if you want to be a hacker, keep reading.
+ Operation Costs in CPU - should help to estimate costs of certain operations in CPU clocks.
Let's Build a Simple Database - writing a sqlite clone from scratch in C.
simple-computer - great resource to understand how computers work under the hood.
The story of "Have I been pwned?" - working with 154 million records on Azure Table Storage.
TOP500 Supercomputers - shows the 500 most powerful commercially available computer systems.
How to build a 8 GPU password cracker - hours of frustration like desktop components do.
CERN Data Centre - 3D visualizations of the CERN computing environments (and more).
- How fucked is my database - evaluate how fucked your database is with this handy website.
+ How fucked is my database - evaluate how fucked your database is with this handy website.
Linux Troubleshooting 101 , 2016 Edition - everything is a DNS Problem...
Five Whys - you know what the problem is, but you cannot solve it?
Maersk, me & notPetya - how did ransomware successfully hijack hundreds of domain controllers?
@@ -1111,9 +1111,9 @@ performance of any of your sites from across the globe.
##### :black_small_square: Geeky Persons
- Brendan Gregg's Blog - is an industry expert in computing performance and cloud computing.
+ Brendan Gregg's Blog - is an industry expert in computing performance and cloud computing.
Gynvael "GynDream" Coldwind - is a IT security engineer at Google.
- Michał "lcamtuf" Zalewski - white hat hacker, computer security expert.
+ Michał "lcamtuf" Zalewski - white hat hacker, computer security expert.
Mattias Geniar - developer, sysadmin, blogger, podcaster and public speaker.
Nick Craver - software developer and systems administrator for Stack Exchange.
Scott Helme - security researcher, speaker and founder of securityheaders.com and report-uri.com.
@@ -1137,7 +1137,7 @@ performance of any of your sites from across the globe.
Linux Audit - the Linux security blog about auditing, hardening and compliance by Michael Boelen.
Linux Security Expert - trainings, howtos, checklists, security tools, and more.
- The Grymoire - collection of useful incantations for wizards, be you computer wizards, magicians, or whatever.
+ The Grymoire - collection of useful incantations for wizards, be you computer wizards, magicians, or whatever.
Secjuice - is the only non-profit, independent and volunteer led publication in the information security space.
Decipher - security news that informs and inspires.
@@ -1219,7 +1219,7 @@ CyberTalks - talks, interviews, and article about cybersecurity.
##### :black_small_square: A piece of history
- How to Do Things at ARL - how to configure modems, scan images, record CD-ROMs, and other.*
+ How to Do Things at ARL - how to configure modems, scan images, record CD-ROMs, and other.*
##### :black_small_square: Other
@@ -1233,14 +1233,14 @@ CyberTalks - talks, interviews, and article about cybersecurity.
##### :black_small_square: Pentesters arsenal tools
- Sandcat Browser - a penetration-oriented browser with plenty of advanced functionality already built in.
+ Sandcat Browser - a penetration-oriented browser with plenty of advanced functionality already built in.
Metasploit - tool and framework for pentesting system, web and many more.
Burp Suite - tool for testing web app security, intercepting proxy to replay, inject, scan and fuzz.
OWASP Zed Attack Proxy - intercepting proxy to replay, inject, scan and fuzz HTTP requests.
w3af - is a Web Application Attack and Audit Framework.
mitmproxy - an interactive TLS-capable intercepting HTTP proxy for penetration testers.
Nikto2 - web server scanner which performs comprehensive tests against web servers for multiple items.
- sqlmap - tool that automates the process of detecting and exploiting SQL injection flaws.
+ sqlmap - tool that automates the process of detecting and exploiting SQL injection flaws.
Recon-ng - is a full-featured Web Reconnaissance framework written in Python.
AutoRecon - is a network reconnaissance tool which performs automated enumeration of services.
Faraday - an Integrated Multiuser Pentest Environment.
@@ -1257,7 +1257,7 @@ CyberTalks - talks, interviews, and article about cybersecurity.
dirhunt - find web directories without bruteforce.
John The Ripper - is a fast password cracker, currently available for many flavors of Unix, Windows, and other.
hashcat - world's fastest and most advanced password recovery utility.
- p0f - is a tool to identify the players behind any incidental TCP/IP communications.
+ p0f - is a tool to identify the players behind any incidental TCP/IP communications.
ssh_scan - a prototype SSH configuration and policy scanner.
LeakLooker - find open databases - powered by Binaryedge.io
exploitdb - searchable archive from The Exploit Database.
@@ -1331,7 +1331,7 @@ CyberTalks - talks, interviews, and article about cybersecurity.
Awesome Malware Analysis - a curated list of awesome malware analysis tools and resources.
SQL Injection Cheat Sheet - detailed technical stuff about the many different variants of the SQL Injection.
Entersoft Knowledge Base - great and detailed reference about vulnerabilities.
- HTML5 Security Cheatsheet - a collection of HTML5 related XSS attack vectors.
+ HTML5 Security Cheatsheet - a collection of HTML5 related XSS attack vectors.
XSS String Encoder - for generating XSS code to check your input validation filters against XSS.
GTFOBins - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.
Guifre Ruiz Notes - collection of security, system, network and pentest cheatsheets.
@@ -1416,7 +1416,7 @@ AWS deployment tool.
Offensive Security - true performance-based penetration testing training for over a decade.
Hack The Box - online platform allowing you to test your penetration testing skills.
Hacking-Lab - online ethical hacking, computer network and security challenge platform.
- pwnable.kr - non-commercial wargame site which provides various pwn challenges.
+ pwnable.kr - non-commercial wargame site which provides various pwn challenges.
Pwnable.tw - is a wargame site for hackers to test and expand their binary exploiting skills.
picoCTF - is a free computer security game targeted at middle and high school students.
CTFlearn - is an online platform built to help ethical hackers learn and practice their cybersecurity knowledge.
@@ -1427,12 +1427,12 @@ AWS deployment tool.
rozwal.to - a great platform to train your pentesting skills.
TryHackMe - learning Cyber Security made easy.
hackxor - is a realistic web application hacking game, designed to help players of all abilities develop their skills.
- Hack Yourself First - it's full of nasty app sec holes.
- OverTheWire - can help you to learn and practice security concepts in the form of fun-filled games.
+ Hack Yourself First - it's full of nasty app sec holes.
+ OverTheWire - can help you to learn and practice security concepts in the form of fun-filled games.
Wizard Labs - is an online Penetration Testing Lab.
PentesterLab - provides vulnerable systems that can be used to test and understand vulnerabilities.
RingZer0 - tons of challenges designed to test and improve your hacking skills.
- try2hack - several security-oriented challenges for your entertainment.
+ try2hack - several security-oriented challenges for your entertainment.
Ubeeri - preconfigured lab environments.
Pentestit - emulate IT infrastructures of real companies for legal pen testing and improving pentest skills.
Microcorruption - reversal challenges done in the web interface.
@@ -1474,7 +1474,7 @@ AWS deployment tool.
Bugcrowd University - open source education content for the researcher community.
OSCPRepo - a list of resources and scripts that I have been gathering in preparation for the OSCP.
OWASP Top 10: Real-World Examples - test your web apps with real-world examples (two-part series).
- phrack.org - an awesome collection of articles from several respected hackers and other thinkers.
+ phrack.org - an awesome collection of articles from several respected hackers and other thinkers.
Practical-Ethical-Hacking-Resources - compilation of resources from TCM's Udemy Course.
@@ -1621,7 +1621,7 @@ In Firefox's address bar, you can limit results by typing special characters bef
IP addresses can be shortened by dropping the zeroes:
```
-http://1.0.0.1 → http://1.1
+https://1.0.0.1 → http://1.1
http://127.0.0.1 → http://127.1
http://192.168.0.1 → http://192.168.1
@@ -3350,7 +3350,7 @@ exec 5<>/dev/tcp//; cat <&5 & cat >&5; exec 5>&-
___
-##### Tool: [tcpdump](http://www.tcpdump.org/)
+##### Tool: [tcpdump](https://www.tcpdump.org/)
###### Filter incoming (on interface) traffic (specific )
@@ -3501,7 +3501,7 @@ ngrep -l -q -d eth0 -i "User-Agent: curl*"
___
-##### Tool: [hping3](http://www.hping.org/)
+##### Tool: [hping3](https://www.hping.org/)
```bash
hping3 -V -p 80 -s 5050 www.google.com
@@ -3831,7 +3831,7 @@ socat TCP-LISTEN:1234,bind=127.0.0.1,reuseaddr,fork,su=nobody,range=127.0.0.0/8
___
-##### Tool: [p0f](http://lcamtuf.coredump.cx/p0f3/)
+##### Tool: [p0f](https://lcamtuf.coredump.cx/p0f3/)
###### Set iface in promiscuous mode and dump traffic to the log file
@@ -4043,7 +4043,7 @@ python -m base64 -e <<< "sample string"
python -m base64 -d <<< "dGhpcyBpcyBlbmNvZGVkCg=="
```
-##### Tool: [awk](http://www.grymoire.com/Unix/Awk.html)
+##### Tool: [awk](https://www.grymoire.com/Unix/Awk.html)
###### Search for matching lines
@@ -4182,7 +4182,7 @@ awk '/'$(date -d "1 hours ago" "+%d\\/%b\\/%Y:%H:%M")'/,/'$(date "+%d\\/%b\\/%Y:
___
-##### Tool: [sed](http://www.grymoire.com/Unix/Sed.html)
+##### Tool: [sed](https://www.grymoire.com/Unix/Sed.html)
###### Print a specific line from a file
@@ -4235,7 +4235,7 @@ sed '/start/,+4d' /path/to/file
___
-##### Tool: [grep](http://www.grymoire.com/Unix/Grep.html)
+##### Tool: [grep](https://www.grymoire.com/Unix/Grep.html)
###### Search for a "pattern" inside all files in the current directory