# Awesome Resources For Learning Hacking & Pentesting ![Awesome Hacking](https://img.shields.io/badge/awesome-hacking-red.svg) ![Awesome community](https://img.shields.io/badge/awesome-community-green.svg) What I’m sharing here is a collection of some best resources about Hacking & Penetration Testing to make you learn faster! (Maybe i forgot to add some of my notes but i'll do regular updates!) **Let's make it the biggest resource repository for our community.** Also you can find my own writeups/tutorials on medium : @hussnainfareed :) ## Books 1. The Hacker Playbook 2: Practical Guide To Penetration Testing 2. The Basics of Hacking and Penetration Testing, Second Edition: Ethical Hacking and Penetration Testing Made Easy 3. Breaking into Information Security: Learning the Ropes 101 4. Penetration Testing: A Hands-On Introduction to Hacking 5. Social Engineering: The Art of Human Hacking 6. Hacking: The Art of Exploitation, 2nd Edition 7. Web Hacking 101 8. OWASP Testing Guide (A must read for web application developers and penetration testers) ## Learning Platforms ### Online Name | Description ---- | ---- * [Hack The Box :: Penetration Testing Labs](https://www.hackthebox.eu) | * [OWASP Vulnerable Web Applications Directory Project (Online)](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project#tab=On-Line_apps) | List of online available vulnerable applications for learning purposes. * [Pentestit labs](https://lab.pentestit.ru) | Hands-on Pentesting Labs (OSCP style) * [Root-me.org](https://www.root-me.org) | Hundreds of challenges are available to train yourself in different and not simulated environments * [Vulnhub.com](https://www.vulnhub.com) | Vulnerable By Design VMs for practical 'hands-on' experience in digital security * [Infosecinstitute.com](http://resources.infosecinstitute.com/) | * [PentesterLab.com](https://pentesterlab.com/) | * [Complete Penetration Testing Tutorials by OWASP](https://www.owasp.org/index.php/Web_Application_Penetration_Testing) | * [Silesia Security Lab](https://silesiasecuritylab.com/blog/) | * [Rafay Hacking Articles, a great blog](http://www.rafayhackingarticles.net/) | * [Troyhunt](https://www.troyhunt.com/) | ### Off-Line * [Damn Vulnerable Xebia Training Environment](https://github.com/davevs/dvxte) | Docker Container including several vurnerable web applications (DVWA,DVWServices, DVWSockets, WebGoat, Juiceshop, Railsgoat, django.NV, Buggy Bank, Mutilidae II and more) * [OWASP Vulnerable Web Applications Directory Project (Offline)](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project#tab=Off-Line_apps) | List of offline available vulnerable applications for learning purposes ## Vulnerable Machines/Websites 1. [FiringRange](https://public-firing-range.appspot.com/) ## Vulnerability Databases And Resources Vulnerability Databases are the first place to start your day as a security professional. Any new vulnerability detection is generally available through the public vulnerability databases. These databases are a big source of information for hackers to be able to understand and exploit/avoid/fix the vulnerability. http://www.exploit-db.com/ http://1337day.com/ http://securityvulns.com/ http://www.securityfocus.com/ http://www.osvdb.org/ http://www.securiteam.com/ http://secunia.com/advisories/ http://insecure.org/sploits_all.html http://zerodayinitiative.com/advisories/published/ http://nmrc.org/pub/index.html http://web.nvd.nist.gov http://www.vupen.com/english/security-advisories/ http://www.vupen.com/blog/ http://cvedetails.com/ http://www.rapid7.com/vulndb/index.jsp http://oval.mitre.org/ ## Courses 1. [Computer Systems Security, MIT](http://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/) For those who want to do CEH, the following links are for you. 2. [CBT Nuggets CEH Training](http://goo.gl/JuW85U) 3. [CEH Books](https://goo.gl/gjCBLK) 4. [Guide to Binary Exploitation](https://github.com/r0hi7/binexp) ## Workshops/Playlists 1. [Web Hacking](https://www.youtube.com/playlist?list=PLJM73L2pQRd4lXBZjsHAmeEqsn5pENXxN) 2. [Ethical Hacking, A Comprehensive Playlist covering almost everything](https://www.youtube.com/playlist?list=PLkRo97mCIn9lgvE7AskNsmwJVOlJX2zaI) ## Security Talks and Conferences 1. [InfoCon - Hacking Conference Archive](https://infocon.org/cons/) 2. [Curated list of Security Talks and Videos](https://github.com/PaulSec/awesome-sec-talks) 3. [Blackhat](https://www.youtube.com/user/BlackHatOfficialYT) 4. [Defcon](https://www.youtube.com/user/DEFCONConference) 5. [Security Tube](http://www.securitytube.net/) 6. [Kevin Mitnick: Live Hack at CeBIT](https://www.youtube.com/watch?v=Q7G3kKRdUl4) 7. [Ghost in the Cloud, Kevin Mitnick](https://www.youtube.com/watch?v=76yrWGzScgI) 8. [Kevin Mitnick | Talks at Google](https://www.youtube.com/watch?v=aUqes9QdLQ4) 9. [Complete Free Hacking Course: Go from Beginner to Expert Hacker Today](https://www.youtube.com/watch?v=7nF2BAfWUEg) ## YouTube Channels Now let’s get Towards YouTube Channel Links... These Channels are Shared By Hackers where They Upload their Video POCs.. Watching them u can actually understand how to demonstrate these type of attacks... 1. [SecurityIdiots](https://www.youtube.com/channel/UCPPAYs04kwfXcHnerm_ueFw) 2. [Black Hat](https://www.youtube.com/channel/UCJ6q9Ie29ajGqKApbLqfBOg) 3. [Injector Pca](https://www.youtube.com/channel/UCRFG_j0cgLWtJOG6fl_-rxQ) 4. [Hisham Mir](https://www.youtube.com/channel/UCYTK8lk8oLLaA330rqd0qgA) 5. [Devil Killer](https://www.youtube.com/channel/UCwfYw-C2xqemqrXq0IKF_Mg) 6. [Suleman Malik](https://www.youtube.com/channel/UC59IHQcCmgNw4GIvsXeLnDQ) 7. [Dem0n](https://www.youtube.com/channel/UC_jNs1biBixcQeSUoJxvNLw) 8. [Frans Rosén](https://www.youtube.com/channel/UCV89UhUtxqwP0j4o9tMipsA) 9. [HackerOne](https://www.youtube.com/channel/UCsgzmECky2Q9lQMWzDwMhYw) 10. [ak1t4 machine](https://www.youtube.com/channel/UCaftcKRiJJW0AJHmR1E5MAQ) 11. [Shawar Khan](https://www.youtube.com/channel/UCPxJLZCoIRJHs1VebWeaByA) 12. [vulnerability0lab](https://www.youtube.com/channel/UC4QJ7X4nnkAYXsnFQpdytcA) 13. [Bugcrowd](https://www.youtube.com/channel/UCo1NHk_bgbAbDBc4JinrXww) 14. [Vijay Kumar](https://www.youtube.com/channel/UCs2NmJGRecw_huNzvQNf2_A) 15. [Web Development Tutorials](https://www.youtube.com/channel/UCS0y5e-AMsZO8GEFtKBAzkA) 16. [Jan Wikholm](https://www.youtube.com/channel/UCOQtLXVJduZ4-YUFOi5EzIA) 17. [Bhargav Tandel](https://www.youtube.com/channel/UCh5MTJLt3LYr_rkwcOQJNWg) 18. [ErrOr SquaD](https://www.youtube.com/channel/UCou-7r8Mk4oQcBmazxp5uwg) 19. [Hussnain Fareed](https://www.youtube.com/channel/UCbq5fgcqUz-PlMs3RCOUrXw) 20. [Penetration Testing in Linux](https://www.youtube.com/channel/UC286ntgASMskhPIJQebJVvA) Any Channel Link Missing? Kindly add it in Comments ### Contribution Your contributions and suggestions are heartily welcome. # NOTE: All references taken from Internet and shared on internet xD Thanks to those who shared their opinion before that helped me learn 😉 if you have any questions, please ask in the comments. If you know about any good resource for beginners, please share it. For more articles on hacking you can follow me on Medium: ## medium.com/@hussnainfareed