115 lines
6.4 KiB
Markdown
115 lines
6.4 KiB
Markdown
## Awesome Resources For Learning Hacking & Pentesting [](https://github.com/sindresorhus/awesome)
|
||
|
||
Basically What I’m sharing here is a Collection of some best resources about Penetration Testing & Reverse Engineering, I made this repository to help the new members on this field with my own personal notes! :D
|
||
|
||
(Maybe i forgot to add some of my notes but i'll do daily updates!)
|
||
|
||
Also you can find my own writeups/tutorials on medium : @hussnainfareed :)
|
||
|
||
### Contribution
|
||
Your contributions and suggestions are heartily welcome. Please check the [Contributing Guidelines](.github/CONTRIBUTING.md) for more details.
|
||
|
||
## Books
|
||
|
||
1. The Hacker Playbook 2: Practical Guide To Penetration Testing
|
||
2. The Basics of Hacking and Penetration Testing, Second Edition: Ethical Hacking and Penetration Testing Made Easy
|
||
3. Breaking into Information Security: Learning the Ropes 101
|
||
4. Penetration Testing: A Hands-On Introduction to Hacking
|
||
5. Social Engineering: The Art of Human Hacking
|
||
6. Hacking: The Art of Exploitation, 2nd Edition
|
||
7. Web Hacking 101
|
||
8. OWASP Testing Guide (A must read for web application developers and penetration testers)
|
||
|
||
|
||
## Learning Platforms
|
||
|
||
### Online
|
||
* [Hack The Box :: Penetration Testing Labs](https://www.hackthebox.eu)
|
||
* [OWASP Vulnerable Web Applications Directory Project (Online)](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project#tab=On-Line_apps) - List of online available vulnerable applications for learning purposes
|
||
* [Pentestit labs](https://lab.pentestit.ru) - Hands-on Pentesting Labs (OSCP style)
|
||
* [Root-me.org](https://www.root-me.org) - Hundreds of challenges are available to train yourself in different and not simulated environments
|
||
* [Vulnhub.com](https://www.vulnhub.com) - Vulnerable By Design VMs for practical 'hands-on' experience in digital security
|
||
|
||
* [Infosecinstitute.com](http://resources.infosecinstitute.com/)
|
||
* [PentesterLab.com](https://pentesterlab.com/)
|
||
* [Complete Penetration Testing Tutorials by OWASP](https://www.owasp.org/index.php/Web_Application_Penetration_Testing)
|
||
* [Silesia Security Lab](https://silesiasecuritylab.com/blog/)
|
||
* [Rafay Hacking Articles, a great blog](http://www.rafayhackingarticles.net/)
|
||
* [Troyhunt](https://www.troyhunt.com/)
|
||
|
||
### Off-Line
|
||
* [Damn Vulnerable Xebia Training Environment](https://github.com/davevs/dvxte) - Docker Container including several vurnerable web applications (DVWA,DVWServices, DVWSockets, WebGoat, Juiceshop, Railsgoat, django.NV, Buggy Bank, Mutilidae II and more)
|
||
* [OWASP Vulnerable Web Applications Directory Project (Offline)](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project#tab=Off-Line_apps) - List of offline available vulnerable applications for learning purposes
|
||
|
||
|
||
## Vulnerable Machines/Websites
|
||
|
||
1. [FiringRange](https://public-firing-range.appspot.com/)
|
||
|
||
|
||
|
||
## Courses
|
||
|
||
1. [Computer Systems Security, MIT](http://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/)
|
||
|
||
For those who want to do CEH, the following links are for you.
|
||
2. [CBT Nuggets CEH Training](http://goo.gl/JuW85U)
|
||
3. [CEH Books](https://goo.gl/gjCBLK)
|
||
4. [Guide to Binary Exploitation](https://github.com/r0hi7/binexp)
|
||
|
||
|
||
|
||
|
||
## Workshops/Playlists
|
||
|
||
1. [Web Hacking](https://www.youtube.com/playlist?list=PLJM73L2pQRd4lXBZjsHAmeEqsn5pENXxN)
|
||
2. [Ethical Hacking, A Comprehensive Playlist covering almost everything](https://www.youtube.com/playlist?list=PLkRo97mCIn9lgvE7AskNsmwJVOlJX2zaI)
|
||
|
||
|
||
## Security Talks and Conferences
|
||
|
||
1. [InfoCon - Hacking Conference Archive](https://infocon.org/cons/)
|
||
2. [Curated list of Security Talks and Videos](https://github.com/PaulSec/awesome-sec-talks)
|
||
3. [Blackhat](https://www.youtube.com/user/BlackHatOfficialYT)
|
||
4. [Defcon](https://www.youtube.com/user/DEFCONConference)
|
||
5. [Security Tube](http://www.securitytube.net/)
|
||
6. [Kevin Mitnick: Live Hack at CeBIT](https://www.youtube.com/watch?v=Q7G3kKRdUl4)
|
||
7. [Ghost in the Cloud, Kevin Mitnick](https://www.youtube.com/watch?v=76yrWGzScgI)
|
||
8. [Kevin Mitnick | Talks at Google](https://www.youtube.com/watch?v=aUqes9QdLQ4)
|
||
9. [Complete Free Hacking Course: Go from Beginner to Expert Hacker Today](https://www.youtube.com/watch?v=7nF2BAfWUEg)
|
||
|
||
|
||
## YouTube Channels
|
||
|
||
Now let’s get Towards YouTube Channel Links... These Channels are Shared By Hackers where They Upload their Video POCs.. Watching them u can actually understand how to demonstrate these type of attacks...
|
||
|
||
1. [SecurityIdiots](https://www.youtube.com/channel/UCPPAYs04kwfXcHnerm_ueFw)
|
||
2. [Black Hat](https://www.youtube.com/channel/UCJ6q9Ie29ajGqKApbLqfBOg)
|
||
3. [Injector Pca](https://www.youtube.com/channel/UCRFG_j0cgLWtJOG6fl_-rxQ)
|
||
4. [Hisham Mir](https://www.youtube.com/channel/UCYTK8lk8oLLaA330rqd0qgA)
|
||
5. [Devil Killer](https://www.youtube.com/channel/UCwfYw-C2xqemqrXq0IKF_Mg)
|
||
6. [Suleman Malik](https://www.youtube.com/channel/UC59IHQcCmgNw4GIvsXeLnDQ)
|
||
7. [Dem0n](https://www.youtube.com/channel/UC_jNs1biBixcQeSUoJxvNLw)
|
||
8. [Frans Rosén](https://www.youtube.com/channel/UCV89UhUtxqwP0j4o9tMipsA)
|
||
9. [HackerOne](https://www.youtube.com/channel/UCsgzmECky2Q9lQMWzDwMhYw)
|
||
10. [ak1t4 machine](https://www.youtube.com/channel/UCaftcKRiJJW0AJHmR1E5MAQ)
|
||
11. [Shawar Khan](https://www.youtube.com/channel/UCPxJLZCoIRJHs1VebWeaByA)
|
||
12. [vulnerability0lab](https://www.youtube.com/channel/UC4QJ7X4nnkAYXsnFQpdytcA)
|
||
13. [Bugcrowd](https://www.youtube.com/channel/UCo1NHk_bgbAbDBc4JinrXww)
|
||
14. [Vijay Kumar](https://www.youtube.com/channel/UCs2NmJGRecw_huNzvQNf2_A)
|
||
15. [Web Development Tutorials](https://www.youtube.com/channel/UCS0y5e-AMsZO8GEFtKBAzkA)
|
||
16. [Jan Wikholm](https://www.youtube.com/channel/UCOQtLXVJduZ4-YUFOi5EzIA)
|
||
17. [Bhargav Tandel](https://www.youtube.com/channel/UCh5MTJLt3LYr_rkwcOQJNWg)
|
||
18. [ErrOr SquaD](https://www.youtube.com/channel/UCou-7r8Mk4oQcBmazxp5uwg)
|
||
19. [Hussnain Fareed](https://www.youtube.com/channel/UCbq5fgcqUz-PlMs3RCOUrXw)
|
||
20. [Penetration Testing in Linux](https://www.youtube.com/channel/UC286ntgASMskhPIJQebJVvA)
|
||
|
||
Any Channel Link Missing? Kindly add it in Comments
|
||
|
||
# NOTE:
|
||
All references taken from Internet and shared on internet xD Thanks to those who shared their opinion before that helped me learn 😉
|
||
if you have any questions, please ask in the comments. If you know about any good resource for beginners, please share it.
|
||
|
||
For more articles on hacking you can follow me on Medium:
|
||
## medium.com/@hussnainfareed
|