diff --git a/README.md b/README.md
index ccc85ff..85e24fc 100644
--- a/README.md
+++ b/README.md
@@ -191,17 +191,17 @@ Privilege Escalation
 * [Local Linux Enumeration & Privilege Escalation Cheatsheet](https://www.rebootuser.com/?p=1623)
 * [4 Ways get linux privilege escalation](http://www.hackingarticles.in/4-ways-get-linux-privilege-escalation/)
 
-Network Scanning / Reconnaissance
---
-* [NMAP](https://nmap.org/)
-* [Foot Printing with WhoIS/DNS records](https://www.sans.org/reading-room/whitepapers/hackers/fundamentals-computer-hacking-956)
-* [Google Dorks/Google Hacking](https://d4msec.wordpress.com/2015/09/03/google-dorks-for-finding-emails-admin-users-etc/)
-
 Malware Analysis
 --
 * [Malware traffic analysis](http://www.malware-traffic-analysis.net/)
 * [Malware Analysis - CSCI 4976](https://github.com/RPISEC/Malware/blob/master/README.md)
 
+Network Scanning / Reconnaissance
+--
+* [Foot Printing with WhoIS/DNS records](https://www.sans.org/reading-room/whitepapers/hackers/fundamentals-computer-hacking-956)
+* [Google Dorks/Google Hacking](https://d4msec.wordpress.com/2015/09/03/google-dorks-for-finding-emails-admin-users-etc/)
+* [NMAP](https://nmap.org/)
+
 Vulnerable Web Application
 --
 * [OWASP Hackademic Challenges project](https://github.com/Hackademic/hackademic/)