Curated references, tools, and frameworks I use and recommend.
Structured OSINT resource map
Search engine for internet-connected devices
Technology profiling for web targets
Official US National Vulnerability Database
Archive of public exploits and shellcode
Common Vulnerabilities and Exposures list
Web application security risks
Adversary tactics and techniques knowledge base
Cybersecurity framework for organizations
Penetration Testing Execution Standard
Hands-on penetration testing labs
Guided cybersecurity training rooms
Free web security training by Burp Suite creators