1.jpg
411.6 KB
π§ +100 Linux Commands in one place! Fast lookup by category for files, processes, networking, text tools, Git, cron, and more. π π Educational use only πΈ Instagram: https://www.facebook.com/people/HexSec-Community/61587062189423/
π Facebook: https://www.instagram.com/ethicalshadow/
π Facebook: https://www.instagram.com/ethicalshadow/
β€6
π‘ Wireshark.pdf
6.1 MB
π‘ Master Wireshark β Stop Guessing, Start Analyzing
If youβre trying to get serious about cybersecurity, Wireshark isnβt optional. This guide cuts the nonsense and shows you how to analyze real traffic: Nmap scans, ARP spoofing, DNS/ICMP tunneling, cleartext creds, HTTP/FTP investigation, and even decrypting HTTPS.
π Website: https://hexsec.netlify.app
Level up your network analysis and hunting skills β the tools are right here.
If youβre trying to get serious about cybersecurity, Wireshark isnβt optional. This guide cuts the nonsense and shows you how to analyze real traffic: Nmap scans, ARP spoofing, DNS/ICMP tunneling, cleartext creds, HTTP/FTP investigation, and even decrypting HTTPS.
π Website: https://hexsec.netlify.app
Level up your network analysis and hunting skills β the tools are right here.
β€8π₯3
1.jpg
609.9 KB
π New PDF drop: Top 10 Mobile Penetration Testing Tools for Ethical Hackers π±π
A fast, practical, repeatable mobile AppSec workflow (MobSF, Frida, Objection, mitmproxy, JADX, Apktool, Drozer, Androguard, Quark Engine + more).
π HexSec links & social media on our profile.
π‘ Educational content for ethical use only.
If you found this useful, share it with others. π Website: https://hexsec.netlify.app
A fast, practical, repeatable mobile AppSec workflow (MobSF, Frida, Objection, mitmproxy, JADX, Apktool, Drozer, Androguard, Quark Engine + more).
π HexSec links & social media on our profile.
π‘ Educational content for ethical use only.
If you found this useful, share it with others. π Website: https://hexsec.netlify.app
π₯7β€5
Top Mobile Pentest Tools π±π
MobSF
Automated static & dynamic mobile app analysis
https://github.com/MobSF/Mobile-Security-Framework-MobSF
Frida
Runtime instrumentation and live app hooking
https://github.com/frida/frida
Objection
Frida-based mobile exploration toolkit
https://github.com/sensepost/objection
mitmproxy
Intercept and inspect HTTPS traffic
https://github.com/mitmproxy/mitmproxy
apk-mitm
Patch APKs for HTTPS traffic inspection
https://github.com/shroudedcode/apk-mitm
JADX
DEX to Java decompiler for fast code review
https://github.com/skylot/jadx
Apktool
Decode, modify and rebuild APK files
https://github.com/iBotPeaches/Apktool
Drozer
Android IPC and component security testing
https://github.com/FSecureLABS/drozer
Androguard
Python toolkit for APK and DEX analysis
https://github.com/androguard/androguard
Quark Engine
Rule-based Android malware and risk analysis
https://github.com/quark-engine/quark-engine
Ghidra
Advanced native code reverse engineering
https://github.com/NationalSecurityAgency/ghidra
radare2
Low-level binary analysis framework
https://github.com/radareorg/radare2
Wireshark
Network packet capture and analysis
https://github.com/wireshark/wireshark
ADB
Android Debug Bridge for device interaction
https://github.com/aosp-mirror/platform_system_core
π‘ Educational content for ethical use only
π All HexSec social media & links:
https://hexsec.netlify.app
MobSF
Automated static & dynamic mobile app analysis
https://github.com/MobSF/Mobile-Security-Framework-MobSF
Frida
Runtime instrumentation and live app hooking
https://github.com/frida/frida
Objection
Frida-based mobile exploration toolkit
https://github.com/sensepost/objection
mitmproxy
Intercept and inspect HTTPS traffic
https://github.com/mitmproxy/mitmproxy
apk-mitm
Patch APKs for HTTPS traffic inspection
https://github.com/shroudedcode/apk-mitm
JADX
DEX to Java decompiler for fast code review
https://github.com/skylot/jadx
Apktool
Decode, modify and rebuild APK files
https://github.com/iBotPeaches/Apktool
Drozer
Android IPC and component security testing
https://github.com/FSecureLABS/drozer
Androguard
Python toolkit for APK and DEX analysis
https://github.com/androguard/androguard
Quark Engine
Rule-based Android malware and risk analysis
https://github.com/quark-engine/quark-engine
Ghidra
Advanced native code reverse engineering
https://github.com/NationalSecurityAgency/ghidra
radare2
Low-level binary analysis framework
https://github.com/radareorg/radare2
Wireshark
Network packet capture and analysis
https://github.com/wireshark/wireshark
ADB
Android Debug Bridge for device interaction
https://github.com/aosp-mirror/platform_system_core
π‘ Educational content for ethical use only
π All HexSec social media & links:
https://hexsec.netlify.app
β€11π3π1
π₯ Top XSS Tools Every Ethical Hacker Must Know
π Real-world, open-source tools for discovering and exploiting XSS vulnerabilities.
1. XSStrike β (Smart XSS scanner)
https://github.com/s0md3v/XSStrike
2. DalFox β (Fast and modern)
https://github.com/hahwul/dalfox
3. OWASP ZAP β (Beginner-friendly GUI)
https://github.com/zaproxy/zaproxy
4. BeEF β (Post-XSS control)
https://github.com/beefproject/beef
5. XSS Hunter β (Blind XSS detector)
https://github.com/mandatoryprogrammer/xsshunter
6. XSSer β (Fuzzing brute-force tool)
https://github.com/epsylon/xsser
7. KXSS β (Reflection recon)
https://github.com/tomnomnom/hacks/tree/master/kxss
8. PwnXSS β (Simple Python scanner)
https://github.com/pwn0sec/PwnXSS
9. FinDOM-XSS β (DOM XSS finder)
https://github.com/dwisiswant0/findom-xss
10. XSpear β (Ruby-based hybrid)
https://github.com/hahwul/XSpear
π² Want to see how each tool works in action?
Follow me on social for daily hacking demos, tutorials & XSS breakdowns.
π Real-world, open-source tools for discovering and exploiting XSS vulnerabilities.
1. XSStrike β (Smart XSS scanner)
https://github.com/s0md3v/XSStrike
2. DalFox β (Fast and modern)
https://github.com/hahwul/dalfox
3. OWASP ZAP β (Beginner-friendly GUI)
https://github.com/zaproxy/zaproxy
4. BeEF β (Post-XSS control)
https://github.com/beefproject/beef
5. XSS Hunter β (Blind XSS detector)
https://github.com/mandatoryprogrammer/xsshunter
6. XSSer β (Fuzzing brute-force tool)
https://github.com/epsylon/xsser
7. KXSS β (Reflection recon)
https://github.com/tomnomnom/hacks/tree/master/kxss
8. PwnXSS β (Simple Python scanner)
https://github.com/pwn0sec/PwnXSS
9. FinDOM-XSS β (DOM XSS finder)
https://github.com/dwisiswant0/findom-xss
10. XSpear β (Ruby-based hybrid)
https://github.com/hahwul/XSpear
π² Want to see how each tool works in action?
Follow me on social for daily hacking demos, tutorials & XSS breakdowns.
β€14π₯4π€1
1.jpg
316.7 KB
π΅ Blue Team Toolkit β Essential Resources for Defenders π
The Blue Team Toolkit is a complete collection of tools and resources every cybersecurity defender needs. From network discovery and vulnerability management to incident response and malware analysis, this guide has you covered. π
Inside you will find:
πΈ Network Discovery & Mapping: Nmap, Masscan, Shodan, ZMap
π‘ Vulnerability Management: OpenVAS, Nessus, Nexpose
π‘ Security Monitoring: Sysmon, Wazuh, ELK, Splunk
π§© Threat Intelligence: MISP, VirusTotal, MITRE ATT&CK
β‘οΈ Incident Response: NIST 800-61, TheHive, Velociraptor
𧬠Malware Analysis: Cuckoo Sandbox, Ghidra, YARA, ClamAV
πΎ Data Recovery & Forensics: Autopsy, FTK, TestDisk, Volatility
This toolkit empowers defenders to detect, analyze, and respond to cyber threats effectively, making it a must-have for anyone in cybersecurity. π‘
π Tools β’ Tutorials β’ Community
π https://hexsec.netlify.app
The Blue Team Toolkit is a complete collection of tools and resources every cybersecurity defender needs. From network discovery and vulnerability management to incident response and malware analysis, this guide has you covered. π
Inside you will find:
πΈ Network Discovery & Mapping: Nmap, Masscan, Shodan, ZMap
π‘ Vulnerability Management: OpenVAS, Nessus, Nexpose
π‘ Security Monitoring: Sysmon, Wazuh, ELK, Splunk
π§© Threat Intelligence: MISP, VirusTotal, MITRE ATT&CK
β‘οΈ Incident Response: NIST 800-61, TheHive, Velociraptor
𧬠Malware Analysis: Cuckoo Sandbox, Ghidra, YARA, ClamAV
πΎ Data Recovery & Forensics: Autopsy, FTK, TestDisk, Volatility
This toolkit empowers defenders to detect, analyze, and respond to cyber threats effectively, making it a must-have for anyone in cybersecurity. π‘
π Tools β’ Tutorials β’ Community
π https://hexsec.netlify.app
β€14β‘2π₯1π―1
2.jpg
2.9 MB
Linux is the backbone of modern cybersecurity.
If you work in Blue Team, Red Team, SOC, or Incident Response, mastering the Linux command line gives you speed, control, and confidence when incidents hit.
This guide focuses on real-world Linux commands for monitoring, forensics, incident response, and system hardening β practical knowledge, no theory fluff.
π Learn fast. Respond faster. Stay ahead.
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
If you work in Blue Team, Red Team, SOC, or Incident Response, mastering the Linux command line gives you speed, control, and confidence when incidents hit.
This guide focuses on real-world Linux commands for monitoring, forensics, incident response, and system hardening β practical knowledge, no theory fluff.
π Learn fast. Respond faster. Stay ahead.
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
β€15π2π₯1π1
1.jpg
1.8 MB
π¨ NEW FREE PDF (39 Pages)
Windows Event Log Analysis β Advanced Threat Detection
Most breaches arenβt missed because logs donβt exist.
Theyβre missed because teams donβt know which Event IDs to watch.
Whatβs inside:
π Critical Windows Event IDs (4624, 4625, 4648, 4688, more)
βοΈ Lateral movement & persistence detection
π Event correlation & attack timelines
π¬ DFIR & forensics procedures
β‘οΈ Performance optimization scripts
π‘ SIEM rules (Splunk, Elastic, Sentinel)
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
Windows Event Log Analysis β Advanced Threat Detection
Most breaches arenβt missed because logs donβt exist.
Theyβre missed because teams donβt know which Event IDs to watch.
Whatβs inside:
π Critical Windows Event IDs (4624, 4625, 4648, 4688, more)
βοΈ Lateral movement & persistence detection
π Event correlation & attack timelines
π¬ DFIR & forensics procedures
β‘οΈ Performance optimization scripts
π‘ SIEM rules (Splunk, Elastic, Sentinel)
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
β€11π₯2π₯°1
A-Z Kali Linux COMMAND.pdf
7 MB
π AβZ Kali Linux Commands cheat sheet π
A complete visual reference for ethical hackers and cybersecurity learners.
π File, process & user management
π Networking & DNS tools
βοΈ System monitoring & performance
π₯ Must-know Kali Linux terminal commands
Perfect for study, labs, and daily practice.
π Follow HexSec for books, guides & cybersecurity resources
π‘ Educational content for ethical use only.
A complete visual reference for ethical hackers and cybersecurity learners.
π File, process & user management
π Networking & DNS tools
βοΈ System monitoring & performance
π₯ Must-know Kali Linux terminal commands
Perfect for study, labs, and daily practice.
π Follow HexSec for books, guides & cybersecurity resources
π‘ Educational content for ethical use only.
β€12
1.jpg
176.9 KB
π§ Kali Linux Cheat Sheet for Penetration Testers
Quick reference for Kali Linux covering recon, exploitation, reverse shells, password attacks, and post-exploitation. Perfect for ethical hacking labs and fast CLI recall π
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
Quick reference for Kali Linux covering recon, exploitation, reverse shells, password attacks, and post-exploitation. Perfect for ethical hacking labs and fast CLI recall π
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
β€16
1.jpg
245 KB
π Complete Bug Bounty Hunting Guide 2025
Full methodology from Recon π to IDOR & Auth testing π
Covers Nmap, Burp Suite, Nuclei, OSINT, Subdomain enum, OWASP Top 10 & automation workflows β‘οΈ
Perfect for structured bug bounty learning π‘
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
Full methodology from Recon π to IDOR & Auth testing π
Covers Nmap, Burp Suite, Nuclei, OSINT, Subdomain enum, OWASP Top 10 & automation workflows β‘οΈ
Perfect for structured bug bounty learning π‘
π Follow us for more guides & tools
Instagram: https://www.instagram.com/ethicalshadow/
Facebook: https://www.facebook.com/hexsecteam
π‘ Educational content only.
β€12π2π1
1.png
2.6 MB
π Networking & Security Q&A Guide (226+ Questions)
OSI, TCP/IP, Routing, OSPF, BGP, EIGRP, VLAN, STP, VPN, IPsec, Firewall, ASA & more π
Perfect for CCNA/CCNP prep and interview revision π
OSI, TCP/IP, Routing, OSPF, BGP, EIGRP, VLAN, STP, VPN, IPsec, Firewall, ASA & more π
Perfect for CCNA/CCNP prep and interview revision π
β€15π1