Resources
๐ Herm’s Cyber Arsenal
Tools, cheat sheets, and tactical utilities from Offensive Security and the wider Red Team grid.
๐ฅ Offensive Security Downloads
- Kali Linux ISO โ The gold standard in penetration testing distros.
- Kali NetHunter โ Mobile pentest platform for Android.
- Exploit Database โ Public exploits curated by OffSec.
- Proving Grounds โ Online practice labs (paid/free tiers).
- OffSec PDF Courseware โ Available to enrolled students.
- Kali Tools Index โ Full catalog of built-in Kali tools.
- OffSec GitHub โ Scripts, tools, and legacy repos.
- Kali ISO Builder โ Build your own ISO with custom tools.
- Kali ARM Images โ Raspberry Pi, Pinebook, etc.
- Kali VMs โ Preconfigured for VMware/VirtualBox.
๐ ๏ธ External Red Team Tools
- Burp Suite โ Web app testing proxy. Get the Pro if you can.
- SecLists โ Payloads, usernames, fuzz lists, DNS bruteforce.
- ffuf โ Fast web fuzzer (Go-based).
- Nmap โ The reconnaissance king.
- Amass โ Subdomain enumeration & intel mapping.
- BloodHound โ AD recon and path-finding.
- PayloadsAllTheThings โ Exploits sorted by vulnerability type.
- CrackMapExec โ Swiss army knife for AD and SMB pillaging.
- Metasploit โ The OG post-exploitation framework.
- Responder โ LLMNR/NBT-NS/MDNS pwnage and credential capture.
Need more? Hit herm@t3h0n.com or check out my GitHub arsenal.