Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
Databricks Certification
Databricks offers multiple certification tracks to validate hands-on proficiency with their data lakehouse platform, Apache Spark, and machine learning workflows. Aimed at data engineers, analysts, and…
IBM SkillsBuild Learning Catalog | Free AI, Cybersecurity, Data & Technology Courses
Free structured courses from IBM covering cybersecurity, cloud, data, and AI, with learning paths and digital badges. Aimed at career starters and career-switchers. Useful as a…
What is Mimikatz? The Beginner's Guide
A primer on Mimikatz, the Windows credential-dumping utility that has become a fixture in both red-team toolkits and post-breach investigations. Covers what it does, how it…
Tryout Labs - Android Kernel UAF Exploitation ::
A hands-on walkthrough of exploiting a use-after-free flaw in a Linux kernel driver to escalate privileges. Covers the vulnerability mechanics, debugging with GDB, and the exploit…
Network Tools on a Mac: Terminal, ping, traceroute and Lookups
BeginnerIdea buildTime ~25 minTool TerminalOS macOSNeeds nothingCost freeExam N+ 5 0 / 6 steps The goal By the end you will have opened Terminal on a…
Read Email Headers and Report Phishing (Gmail, Outlook, Apple Mail)
BeginnerIdea buildTime ~20 minTool Your email appOS AnyNeeds nothingCost freeExam Sec+ 2 0 / 5 steps The goal By the end you will know how to…
Who Owns This Website? Check a Domain with RDAP and Spot a Phishing Email
BeginnerPartly testedTime ~25 minTool ICANN Lookup + curlOS Windows or MacNeeds nothingCost freeExam Sec+ 2 · CySA+ 1 0 / 6 steps The goal By the…
Wi-Fi Troubleshooting on Windows: Find Out Why Your Wi-Fi Is Slow or Dropping
BeginnerIdea buildTime ~30 minTool Windows Settings + a phone appOS Windows + AndroidNeeds nothingCost freeExam N+ 2, 5 0 / 9 steps The goal By the…
Traceroute on Windows (tracert): See Every Hop Between You and a Website
BeginnerPartly testedTime ~20 minTool tracert + pathpingOS WindowsNeeds nothingCost freeExam N+ 5 0 / 7 steps The goal By the end you will have run tracert…
DNSSEC Explained: What It Fixes, What It Does Not, and Why So Few Use It
IntermediateIdea buildTime ~25 minTool nslookup + a web toolOS Windows or MacNeeds DNS lessonCost freeExam Sec+ 2 · N+ 1 0 / 6 steps The goal…
DNS Explained: How a Name Becomes an Address (with nslookup)
BeginnerIdea buildTime ~25 minTool nslookupOS Windows (works on Mac too)Needs nothingCost freeExam N+ 1 · Sec+ 2 0 / 6 steps The goal By the end…
IPv6 Explained: Why It Exists and Why We Still Use IPv4 Too
BeginnerIdea buildTime ~25 minTool ipconfig + a browserOS Windows (Mac notes inside)Needs nothingCost freeExam N+ 1 0 / 7 steps The goal By the end you…
DHCP Explained: How Your Device Gets Its Address
BeginnerIdea buildTime ~25 minTool ipconfig + Wireshark (optional)OS Windows (Mac notes inside)Needs nothingCost freeExam N+ 1 · Sec+ 2 0 / 6 steps The goal By…
Subnetting Without Tears: Read Your Own Network and Split It Up
BeginnerIdea buildTime ~30 minTool Command prompt + Python (optional)OS Windows (Mac notes inside)Needs nothingCost freeExam N+ 1 · Sec+ 3 0 / 7 steps The goal…
How to Open a Command Prompt on Windows (3 Easy Ways)
BeginnerIdea buildTime ~5 minTool Command PromptOS WindowsNeeds nothingCost free 0 / 5 steps The goal By the end you will have opened a command promptIn plain…
sqlmapproject/sqlmap: Automatic SQL injection and database takeover tool
SQLMap automates SQL injection detection and exploitation against web applications. It handles payload generation, database fingerprinting, and data extraction across multiple database engines. Useful for penetration…
botherder/androidqf: androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.
A command-line tool for rapidly pulling forensic artifacts from Android devices: logs, installed packages, file metadata, process state, and other indicators useful for spotting compromise or…
sparkfunX/Skimmer_Scanner: A mobile app for detecting bluetooth gas pump credit card skimmers
Android app that detects Bluetooth devices near gas pumps, flagging potential skimming hardware before you swipe. Scans for known skimmer signatures and suspicious Bluetooth presence. Useful…
Infoooze
OSINT aggregator that bundles common reconnaissance queries into a single interface. Feed it a target—name, email, domain, IP—and it runs the usual lookups across public sources…
sherlock-project/sherlock: Hunt down social media accounts by username across social networks
Command-line tool that searches for a given username across hundreds of social media sites and returns matches with direct links. Useful for OSINT work, identity verification,…
Trufflehog
Scanner that hunts for leaked secrets in git repositories, filesystems and cloud storage. Trufflehog finds credentials, API keys and tokens, then verifies them against live services…
Study Once, Earn Two: How Cybersecurity Certs Stack, Renew Each Other and Shorten the CISSP Clock
ReferenceCareer · certificationsLevel Beginner to intermediateWritten guide · no lab neededExam Security+ · CySA+ · PenTest+ · CISSP Most cert advice treats every exam as its…
Linux Users, Passwords and Permissions: /etc/passwd, /etc/shadow and chmod Explained
TrainingLinux · blue teamLevel BeginnerWritten lesson · try it on any Linux machineExam Linux+ · Security+ V8 On Linux, password hashes live in /etc/shadow, which only…
Lab 14: Make Sense of Giant Logs (Time Windows, .gz Files, One Request Across Every File)
IntermediateTestedTime ~45 minTool grep, awk, zcat, rgNeeds Python 3 + a terminalCost freeExam Linux+ · CySA+ · Security+ 0 / 8 steps The goal You get…
SAML, OIDC and RADIUS in Plain English: What Breaks and Where to Look
TrainingService desk · identityLevel IntermediateWritten lesson · no lab neededExam Security+ V8 · Network+ SAML, OIDC and RADIUS turn up in the same vendor notices, the…
Mobile Verification Toolkit
Open-source framework for analyzing mobile devices to detect signs of compromise, spyware, or malware infection. Designed for investigators, journalists, and at-risk users who need to examine…
Canarytokens
Free honeypot tokens you scatter across your network—in code, configs, documentation, fake credentials—that phone home the moment an attacker finds and touches them. Generates alerts with…
Lab 13 — Diagnose DNS in Wireshark: Missing Answers, Stale Caches and the TCP Fallback
IntermediateIdea buildTime ~35 minTool Wireshark + tsharkNeeds Lab 12Cost freeExam Network+ · CySA+ · Linux+ 0 / 7 steps The goal Diagnose DNS the way a…
Lab 12 — Read Your First Packet Capture (Wireshark)
BeginnerIdea buildTime ~25 minTool WiresharkNeeds nothingCost freeExam Network+ · CySA+ · CC 0 / 7 steps The goal Capture thirty seconds of your own network traffic…
Lovemytool / Networkdatapedia : Master DNS Basics Fast with Chris Greer
A short-form DNS fundamentals course from Chris Greer, a network analyst known for packet analysis work. Covers DNS protocol basics, queries, responses, and common troubleshooting scenarios.…