🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE

Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team

Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts
Abide by the Legal Terms of Use & Disclaimer for the use and misuse of this repository.

"Under pressure, you don't rise to the occasion; you fall to the level of your training."

"It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so."

---

This is the repository's front door and master index.

Every guide, playbook, script folder, and reference in this project is linked from here.

Unlike START_HERE.md (a role-based navigation guide), this file is a flat catalog; the what exists, where it lives, and a description of each.

The START_HERE.md guide, can be used to route yourself through the sea of data by role/goal rather than listing EVERYTHING like it is here. But START_HERE.md does differ from the three Master Guides. The three Master Guides contain actual technical content, rather than just linking to everyting.

Master Guides:

• Ultimate_cybersecurity_master_guide.md
• ENHANCED_MASTER_GUIDE.md
• SPECIALIZED_TOPICS_GUIDE.md

This README is the entry point when landing on this repo:

• Gives a general overview of the repository
• Helps users look for specific subjects or topics, such as "What guide covers %TOPIC%"
• Check on what's been added/credited since a prior visit

From this main page you can find any resource in the repository within one click of this file, and understand at a glance what the project covers and how it's licensed/credited.

THANK YOU FOR CHECKING THIS OUT!

---

🎯 START HERE

🆕 New to IT/Computers/Networks in General? - READ OUR IT MANUAL TO GET YOURSELF STARTED!

⭐ START_HERE.md - START HERE IF YOU ARE READY TO JUMP IN!

Your complete navigation guide with quick paths for every role and purpose (Red Team, Blue Team, OSINT, Forensics, Homelab, Career).

---

📚 PRIMARY MASTER GUIDES

---

📖 SUPPORTING GUIDES & REFERENCE MATERIAL

Core References

Operational Sections

---

🆕 UNIQUE & PERSONAL CONTENT

Content sourced from PNWC's internal Notion knowledge base and real-world operations - not found in textbooks.

🔴 OPSEC & Operations

• Personal field rules ("ALWAYS use a 3rd-party network!")
• VM isolation and compartmentalization procedures
• Anonymity and identity-separation workflows

🔍 OSINT Arsenal

• 400+ tools organized by category
• Automated OSINT VM build scripts
• Full investigation methodology (target profiling → pivot → report)

📘 Team Playbooks

Purple Team

• Purple Team - Simple
• Purple Team - Detailed
• Purple Team - Multi-Script

Blue Team

• Blue Team - Incident Response Simple
• Blue Team - Incident Response Enhanced

Detection Pipeline & SIEM

• ELK Stack (Elastic) SIEM Deployment
• Wazuh SIEM Deployment
• Splunk SIEM Deployment
• Graylog SIEM Deployment
• Log Aggregation Guide

💻 Custom Scripts & Tools

• pnwc_install_tools.sh - Cross-distro Linux installer for all tools in this guide (apt · pacman · dnf)
• PowerShell - 12 scripts: AD testing, SMB auth, brute force, port scanning, reverse shells, system enumeration
• Python - 30+ scripts: network recon, credential analysis, Bluetooth, web, geolocation, exploitation tools
• Bash - System admin, recon, auditing, log analysis utilities (Scripts/Bash/)
• C - Low-level utilities: user enumeration, port scanning, system manipulation
• SQL - WordPress admin injection testing scripts
• Go - (Scripts/GO/)

🎯 Attack Case Studies (10+ Analyzed)

🔧 Hardware Arsenal Documented

Multi-tools: Flipper Zero · WiFi Pineapple · Proxmark3

📟 uConsole & Portable Operations

Field-side cybersecurity requires reliable, highly-portable hardware. This new section is dedicated to the ClockworkPi uConsole. It includes step-by-step documentation on turning the uConsole into a dedicated cyberdeck for mobile operations.

• OS & Toolkit Optimization: Customizing Kali Linux, Parrot OS, or custom Debian builds for the uConsole's unique form factor.
• SDR & Wireless Assessments: Configurations for running Wireshark, Kismet, and RTL-SDR in the field.
• Hardware Interfacing: Using the uConsole for serial connections, hardware debugging, and local network audits.

Hak5 Suite: Rubber Ducky · Bash Bunny · LAN Turtle · Packet Squirrel · Shark Jack · O.MG Cable

RF / SDR: HackRF One · RTL-SDR · Ubertooth One · YardStick One

WiFi Adapters: Alfa AWUS036ACH · Alfa AWUS036NHA · TP-Link TL-WN722N

---

📊 REPOSITORY STATISTICS

---

🚀 WHAT YOU CAN DO WITH THIS GUIDE

Immediately

• ✅ Conduct professional penetration tests
• ✅ Perform OSINT investigations
• ✅ Execute incident response procedures
• ✅ Automate security tasks with ready-made scripts
• ✅ Assess IoT and embedded device security
• ✅ Develop and analyze exploits
• ✅ Build and operate a security homelab
• ✅ Analyze real-world attack campaigns
• ✅ Deploy Portable Cyberdecks: Set up and optimize the uConsole for on-the-go pentesting, SDR (Software Defined Radio), and field operations.

For Your Career

• ✅ Prepare for OSCP, CEH, GPEN, CySA+, CISSP
• ✅ Build skills for SOC analyst roles
• ✅ Work as a professional pentester or red teamer
• ✅ Specialize in OSINT, forensics, or hardware security
• ✅ Build automation tooling for security workflows

---

🙏 CREDITS & ACKNOWLEDGMENTS

This guide stands on the shoulders of the global cybersecurity community.

🛠️ Key Tools & Frameworks

Exploitation & Post-Exploitation

• Metasploit Framework - Rapid7
• Impacket - Fortra
• BloodHound - SpecterOps
• CrackMapExec / NetExec
• Empire - BC Security
• PowerSploit · Nishang
• PEASS-ng - Carlos Polop
• Responder - Laurent Gaffié

OSINT

• theHarvester · Sherlock · Maltego
• SpiderFoot · Recon-ng · Amass
• Maigret · Holehe · H8mail
• PhoneInfoga · Photon
• Michael Bazzell / IntelTechniques · Trace Labs

Network & Web Security

• Nmap · Wireshark · Burp Suite · OWASP ZAP
• Nikto · SQLmap · Gobuster · ffuf
• Nuclei · Subfinder · httpx - ProjectDiscovery
• AutoRecon - Tib3rius
• PayloadsAllTheThings · SecLists · ExploitDB

Password & Credentials

• Hashcat · John the Ripper · Hydra
• Mimikatz - Benjamin Delpy

Wireless & RF

• Aircrack-ng · Kismet · Wifite2
• Bettercap - Simone Margaritelli
• ChipWhisperer - NewAE Technology
• OpenOCD · Bus Pirate

Forensics & Reverse Engineering

• Volatility · Autopsy · Ghidra - NSA
• radare2 - pancake · IDA Pro - Hex-Rays
• Binwalk · YARA
• Sysinternals Suite - Mark Russinovich

Monitoring & Defense

• Snort · Suricata · Zeek · OSSEC
• Wazuh · Security Onion
• Elastic Stack · Splunk · Graylog

📚 Book Authors & Publishers

No Starch Press (primary reference publisher)

• David Kennedy et al. - Metasploit: The Penetration Tester's Guide
• Georgia Weidman - Penetration Testing: A Hands-On Introduction
• OccupyTheWeb - Linux Basics for Hackers
• Justin Seitz - Black Hat Python
• Al Sweigart - Automate the Boring Stuff with Python

Other key works: Ryan Barnett (Black Hat Bash) · Travis Goodspeed (Microcontroller Exploits) · Seth Enoka (Cybersecurity for Small Networks) · Peter Kim (The Hacker Playbook 3) · Ben Clark (RTFM / BTFM) · Christopher Hadnagy (Social Engineering) · Kevin Mitnick (The Art of Invisibility)

See the full 78-entry bibliography below.

🐧 Security Linux Distributions

Kali Linux · BlackArch · Parrot Security OS · BackBox · Tails · Whonix

🌐 Knowledge Frameworks & Communities

MITRE ATT&CK · OWASP · NIST NVD · CVE · CISA · SANS

HackTheBox · TryHackMe · VulnHub · OverTheWire · PentesterLab

TryHackMe FREE Roadmap - 350+ free rooms, beginner → advanced, curated by Uttambodara

🔐 Privacy & Anonymity Tools

Tor Project · Mullvad VPN · ProtonVPN · IVPN VeraCrypt · ProtonMail · Signal

🎓 Certification Bodies

Offensive Security (OSCP, OSEP, OSCE) · EC-Council (CEH, CHFI) · GIAC (GPEN, GWAPT, GCIH) · CompTIA (Security+, PenTest+, CySA+) · (ISC)² (CISSP)

👥 Notable Security Researchers

Kevin Mitnick (1963–2023) · Bruce Schneier · Dan Kaminsky (1979–2021) · HD Moore · Tavis Ormandy · Marcus Hutchins · Brian Krebs · Troy Hunt · Katie Moussouris · Parisa Tabriz · The Grugq · and countless others

---

📚 Complete Bibliography

I. Foundational & General Hacking

1. Hacking: The Art of Exploitation (2nd Ed.) - Jon Erickson · No Starch Press · 2008 · ISBN 978-1593271442
2. The Basics of Hacking and Penetration Testing (2nd Ed.) - Patrick Engebretson · Syngress · 2013 · ISBN 978-0124116443
3. Gray Hat Hacking: The Ethical Hacker's Handbook (5th Ed.) - Allen Harper et al. · McGraw-Hill · 2018 · ISBN 978-1260108415
4. The Hacker's Underground Handbook - David Melnichuk · Self-published · 2008
5. Hacking: Computer Hacking Beginners Guide - Alan T. Norman · Self-published
6. The Code Book - Simon Singh · Anchor Books · 1999 · ISBN 978-0385495325
7. Steal This Computer Book 4.0 - Wallace Wang · No Starch Press · 2006 · ISBN 978-1593271053
8. Cybersecurity - Attack and Defense Strategies - Yuri Diogenes, Erdal Ozkaya · Packt · 2018 · ISBN 978-1788837074
9. The NICE Cyber Security Framework - Izzat Alsmadi · Springer · 2019 · ISBN 978-3030023591
10. Ethical Hacking MindMap - Educational material
11. Introduction to Ethical Hacking - Chinni Diwakar · Educational material

II. Penetration Testing & Operations

12. Penetration Testing: A Hands-On Introduction to Hacking - Georgia Weidman · No Starch Press · 2014 · ISBN 978-1593275648
13. The Hacker Playbook 3: Red Team Edition - Peter Kim · Secure Planet · 2018 · ISBN 978-1980901754
14. Advanced Penetration Testing - Wil Allsopp · Wiley · 2017 · ISBN 978-1119367680
15. Google Hacking for Penetration Testers, Vol. 2 - Johnny Long et al. · Syngress · 2007 · ISBN 978-1597491761
16. Real-World Bug Hunting - Peter Yaworski · No Starch Press · 2019 · ISBN 978-1593278618
17. Quick Start Guide to Penetration Testing - Sagar Rahalkar · Apress · 2019 · ISBN 978-1484242698
18. Offensive Security OSCP Exam with AD Preparation - Michael Mancao · Educational material · 2022
19. OSCP Like Vulns Machines - Joas Antonio · Educational material
20. Pentest in Office365 and Security - Joas Antonio · Educational material
21. Exploiting Misconfigurations (CSP Bypass) - Jamy Casteel · GIAC/SANS Gold Paper · 2021

III. Defense & Team Strategies

22. RTFM: Red Team Field Manual - Ben Clark · CreateSpace · 2014 · ISBN 978-1494295509
23. Blue Team Field Manual (BTFM) - Alan J. White, Ben Clark · CreateSpace · 2017 · ISBN 978-1541216044
24. Purple Team Field Manual (PTFM) - Tim Bryant · Self-published · 2020
25. Jump-start Your SOC Analyst Career - Tyler Wall, Jarrett Rodrick · Apress · 2021 · ISBN 978-1484269039

IV. Operating Systems, Tools & Frameworks

26. Kali Linux Revealed - Raphaël Hertzog, Jim O'Gorman, Mati Aharoni · Offsec Press · 2017 · ISBN 978-0-9976402-0-2
27. Mastering Kali Linux for Advanced Penetration Testing - Robert W. Beggs · Packt · 2014 · ISBN 978-1782169735
28. Linux Basics for Hackers - OccupyTheWeb · No Starch Press · 2019 · ISBN 978-1593278557
29. Metasploit: The Penetration Tester's Guide (2nd Ed.) - David Kennedy et al. · No Starch Press · 2023 · ISBN 978-1718501237
30. Metasploit Penetration Testing Cookbook - Abhinav Singh · Packt · 2012 · ISBN 978-1849517409
31. Nmap 6: Network Exploration and Security Auditing Cookbook - Paulino Calderón Pale · Packt · 2012 · ISBN 978-1849517447
32. Reconnaissance: Nmap and NSE Practical Guide - INVETECK GLOBAL · Educational material
33. Hacking Android - Kotipalli, Imran · Packt · 2016 · ISBN 978-1785883149
34. Developing Burp Suite Extensions - Luca Carettoni · DOYENSEC · Conference presentation
35. Linux for Beginners - Noah Herrmann · Self-published · 2021
36. How Linux Works (3rd Ed.) - Brian Ward · No Starch Press · 2021 · ISBN 978-1718500254
37. Linux Command Line and Shell Scripting Bible (3rd Ed.) - Blum, Bresnahan · Wiley · 2015 · ISBN 978-1118983843
38. Shell Scripting: Expert Recipes - Steve Parker · Wrox
39. Ultimate Linux Projects - Future PLC (Linux Format) · 2022

V. Web & Network Security

40. The Web Application Hacker's Handbook (2nd Ed.) - Stuttard, Pinto · Wiley · 2011 · ISBN 978-1118026472
41. Web Application Security for Dummies - Mike Shema · Wiley · 2011 · ISBN 978-1119994879
42. Network Security Assessment (3rd Ed.) - Chris McNab · O'Reilly · 2016 · ISBN 978-1491910955
43. The Shellcoder's Handbook (2nd Ed.) - Anley, Heasman, Lindner, Richarte · Wiley · 2007 · ISBN 978-0470080238
44. Web Scraping with Python (2nd Ed.) - Ryan Mitchell · O'Reilly
45. SAST Scanners Cheat Sheet - WeHackPurple / @SheHacksPurple · Educational material
46. Session Hijacking - Educational material
47. SQL Injection - Comprehensive Guide - Educational material
48. Learn SQL Using Squid Game - @codechips (Cody) · Educational material

VI. Wireless & Mobile Hacking

49. WiFi Hacking for Beginners - James Wells · Self-published
50. Kali Linux Wireless Pentesting and Security for Beginners - Hardeep Singh · 2017
51. WiFi: Hack Proof Your Wireless Network - Barnes, Bautts, Lloyd et al. · Syngress
52. Hacking HLR, HSS and MME Core Network Elements - Philippe Langlois · Black Hat USA 2014
53. Hacking LTE Public Warning Systems - Weiguang Li · HAXPO Conference

VII. Reverse Engineering & Exploit Development

54. Practical Reverse Engineering - Dang, Gazet, Bachaalany · Wiley · 2014 · ISBN 978-1118787311
55. Mastering Reverse Engineering - Reginald Wong · Packt · 2018 · ISBN 978-1788832918
56. Reverse Engineering for Beginners - Dennis Yurichev · Creative Commons · 2016
57. Reverse Engineering for Beginners (Lite) - Dennis Yurichev · Creative Commons

VIII. Programming & Data Science for Security

58. Black Hat Python - Justin Seitz · No Starch Press · 2014 · ISBN 978-1593275907
59. Violent Python - TJ O'Connor · Syngress · 2012 · ISBN 978-1597499576
60. Understanding Network Hacks: Attack and Defense with Python - Bastian Ballmann · Springer · 2015 · ISBN 978-3662444368
61. Hacking with Python: The Ultimate Beginner's Guide - Steve Tale · Self-published · 2017
62. Perl Programming for Beginners - Nathan Metzler · Lightbulb Publishing
63. Malware Data Science - Joshua Saxe, Hillary Sanders · No Starch Press · 2018 · ISBN 978-1593278595
64. Machine Learning Mastery with Python - Jason Brownlee · Machine Learning Mastery · 2016
65. Deep Learning with Python - Jason Brownlee · Machine Learning Mastery · 2016
66. Long Short-Term Memory Networks with Python - Jason Brownlee · Machine Learning Mastery · 2017
67. Machine Learning with Python for Everyone - Mark E. Fenner · Addison-Wesley

IX. Social Engineering & Forensics

68. Social Engineering: The Science of Human Hacking - Christopher Hadnagy · Wiley · 2018 · ISBN 978-1119433385
69. The Art of Invisibility - Kevin Mitnick · Little, Brown & Company · 2017 · ISBN 978-0316380492
70. Digital Forensics Explained (2nd Ed.) - Greg Gogolin · CRC Press · 2018 · ISBN 978-1138491029
71. How to Hide Data in Audio Files (Steganography) - Ismael Nelson S. · Educational material

X. Dark Web & Lab Guides

72. Dark Web: Exploring and Data Mining the Dark Side of the Web - Hsinchun Chen · Springer · 2012 · ISBN 978-1461415565
73. Inside the Dark Web - Arun Adhikari · DARKNET
74. Footprinting and Reconnaissance LAB - Chinni Diwakar · Educational material
75. Sniffers LAB - Network Traffic Analysis & MITM - Chinni Diwakar · Educational material
76. DOS LAB - Denial of Service Attack Techniques - Chinni Diwakar · Educational material
77. Metasploit Framework Guide - Chinni Diwakar · Educational material
78. System Hacking LAB - Chinni Diwakar · Educational material

---

⚖️ Legal Disclaimer

Unauthorized access to computer systems is a federal crime under the CFAA and equivalent laws worldwide. This repository is for educational purposes and authorized security testing only.

Authorized Use Cases

• Professional penetration testing with signed client authorization
• Security research in isolated lab environments you own
• CTF (Capture the Flag) competitions
• Homelab and educational practice on your own systems
• Defensive security tooling and monitoring

See the full LEGAL.md for complete terms.

---

🏆 What Makes This Guide Different

---

📬 Contributing & Contact

This is a personal operational knowledge base, but the security community thrives on shared knowledge.

• PNWC Website: pnwcomputers.com
• Email: [email protected]
• GitHub: github.com/Pnwcomputers

Want to help the community?

• Contribute to the open-source tools referenced here
• Write and publish your own security research
• Mentor newcomers entering the field
• Practice responsible disclosure on vulnerabilities you find
• Purchase the original books to support the authors

---

Use it wisely. Use it ethically. Use it legally.
Learn → Practice → Contribute back to the community. 🚀

---

Last Updated: June 2026 · Maintained by PNW Computers · Vancouver, WA

Related Files

• START_HERE.md - Quick navigation guide to all sections
• ENHANCED_MASTER_GUIDE.md - Enhanced deep-dive guide
• SPECIALIZED_TOPICS_GUIDE.md - Third guide in the series
• LEGAL.md - Legal disclaimer and terms of use
• CHANGELOG.md - Repository change history