Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
PentesterLab — Recon badge (free)
A hands-on lab covering reconnaissance fundamentals: file discovery, DNS enumeration, TLS certificate analysis, and target surface mapping. Designed for people building recon skills from scratch. Free…
Flare Academy — free threat intel training
Free self-paced threat intelligence training from Flare, covering attacker tradecraft, reconnaissance, and infrastructure analysis. Oriented toward practitioners who want to understand how adversaries operate rather than…
Black Hills InfoSec — free webcasts
Free security training webcasts covering incident response, threat hunting, red team tactics, and defensive operations. Produced by practitioners rather than vendors, so the focus stays on…
CAI — agent-based cybersecurity AI framework
Agent-based framework for building AI-driven security tools and simulations. Sits between raw ML and operational security work—lets you model threats, test defenses, and prototype detection logic…
Antisyphon — Pay What You Can courses
Live and on-demand security courses with a sliding-scale model that starts at free. Covers hands-on labs, cyber ranges, and certificates. Good entry point if you want…
BloodHound — AD attack path management
BloodHound maps Active Directory relationships and permission chains to surface attack paths that would be invisible in raw logs or GUI tools. It builds a graph…
Awesome Bug Bounty Tools
Curated collection of tools for bug bounty work, covering reconnaissance, scanning, payloads, and reporting. Organized by category so you can find what fits your workflow. Useful…
PentesterLab
Hands-on platform for learning web application security through realistic vulnerable code and documented CVEs. Covers exploitation techniques and code review methodology. Useful for developers who want…
Hack The Box
Hands-on platform for security training and practice. Offers a mix of capture-the-flag challenges, vulnerable machines, and labs across web, network, and system topics. Useful for building…
ZoomeyeSearch — ZoomEye recon CLI
CLI wrapper for ZoomEye's search API, designed to script reconnaissance at scale. Pulls data on exposed services and infrastructure from ZoomEye's public internet scans. Useful for…