Ethical-Hacking-Resources and Penetration Testing Resources

Here you can find the most useful resources ever for practical knowledge on Ethical Hacking

Collection of Github Repositories for Ethical hacking / Penetration Testing / Bug Bounty Hunting

1. Book of Secret Knowledge = https://lnkd.in/g2ft3ef
2. Awesome Hacking = https://lnkd.in/gK-WZSi
3. Awesome Bug Bounty = https://lnkd.in/grPb7BV
4. Awesome Penetration Testing = https://lnkd.in/fE3y_J3
5. Awesome Web Hacking = https://lnkd.in/fZrtWu6
6. Awesome Hacking Resources = https://lnkd.in/gjgwnZU
7. Awesome Pentest = https://lnkd.in/gBWKeiY
8. Awesome Red Teaming = https://lnkd.in/gCiPtCx
9. Awesome Web Security = https://lnkd.in/gptAkXx
10. Penetration Test Guide based on OWASP = https://lnkd.in/fq6imnb
11. Pentest Compilation = https://lnkd.in/gV2PWnx
12. Infosec Reference = https://lnkd.in/g6DKZiC

##Learning Platforms

Hack.me | Lets you build/host/attack vulnerable web apps..... CTFLearn | An account-based ctf site, where users can go in and solve a range of challenges...... OWASP Vulnerable Web Applications Directory Project (Online) | List of online available vulnerable applications for learning purposes..... Pentestit labs | Hands-on Pentesting Labs (OSCP style)..... Root-me.org | Hundreds of challenges are available to train yourself in different and not simulated environments..... Vulnhub.com | Vulnerable By Design VMs for practical 'hands-on' experience in digital security.... Windows / Linux Local Privilege Escalation Workshop | Practice your Linux and Windows privilege escalation...... CTF Hacker101 | The Hacker101 CTF is a game designed to let you learn to hack in a safe, rewarding environment. Hacker101 is a free educational site for hackers..... Hack The Box :: Penetration Testing Labs | An online platform to test and advance your skills in penetration testing and cyber security. Join today and start training in our online labs...... CTF365 | An account based ctf site, awarded by Kaspersky, MIT, T-Mobile.... Backdoor | Pen testing labs that have a space for beginners, a practice arena and various competitions, account required.... Hacking Articles | CTF Breif Write up collection with a lot of screenshots good for beggainers..... Rafay Hacking Articles, a great blog | Write up collections by Rafay Baloch..... PentesterLab | 20$ signature, complete content basic to write exploits, web, android.... CyberSec WTF| Emulated web pentesting challenges from bounty write-ups....

Books

1. The Hacker Playbook 2: Practical Guide To Penetration Testing
2. The Basics of Hacking and Penetration Testing, Second Edition: Ethical Hacking and Penetration Testing Made Easy
3. Breaking into Information Security: Learning the Ropes 101
4. Penetration Testing: A Hands-On Introduction to Hacking
5. Social Engineering: The Art of Human Hacking
6. Hacking: The Art of Exploitation, 2nd Edition
7. Web Hacking 101
8. OWASP Testing Guide (A must read for web application developers and penetration testers)
9. The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
10. The Basics of Web Hacking: Tools and Techniques to Attack the Web

Vulnerability Databases And Resources

Vulnerability Databases are the first place to start your day as a security professional. Any new vulnerability detection is generally available through the public vulnerability databases. These databases are a big source of information for hackers to be able to understand and exploit/avoid/fix the vulnerability.

• http://web.nvd.nist.gov
• http://www.vupen.com/english/security-advisories/
• http://www.vupen.com/blog/
• http://cvedetails.com/
• http://www.rapid7.com/vulndb/index.jsp
• http://oval.mitre.org/
• http://sploitus.com/
• http://cxsecurity.com/
• http://www.exploit-db.com/
• http://1337day.com/
• http://securityvulns.com/
• http://www.securityfocus.com/
• http://www.osvdb.org/
• http://www.securiteam.com/
• http://secunia.com/advisories/
• http://insecure.org/sploits_all.html
• http://zerodayinitiative.com/advisories/published/
• http://nmrc.org/pub/index.html

Malware Analysis

Malware traffic analysis | list of traffic analysis exercises Malware Analysis - CSCI 4976 | another class from the folks at RPISEC, quality content [Bad Binaries] (https://www.badbinaries.com/) | walkthrough documents of malware traffic analysis exercises and some occasional malware analysis.

Linux Penetration Testing OS

Kali | the infamous pentesting distro from the folks at Offensive Security

Parrot | Debian includes full portable lab for security, DFIR, and development

Android Tamer | Android Tamer is a Virtual / Live Platform for Android Security professionals.

BlackArch | Arch Linux based pentesting distro, compatible with Arch installs

LionSec Linux | pentesting OS based on Ubuntu

YouTube Channels

Now let’s get Towards YouTube Channel Links... These Channels are Shared By Hackers where They Upload their Video POCs.. Watching them u can actually understand how to demonstrate these type of attacks...

1. LiveOverflow
2. Black Hat
3. Injector Pca
4. Hisham Mir
5. Devil Killer
6. Suleman Malik
7. Dem0n
8. Frans Rosén
9. HackerOne
10. ak1t4 machine
11. Shawar Khan
12. vulnerability0lab
13. Bugcrowd
14. Vijay Kumar
15. Web Development Tutorials
16. Jan Wikholm
17. Bhargav Tandel
18. ErrOr SquaD
19. SecurityIdiots
20. Penetration Testing in Linux
21. Hussnain Fareed
22. Null Byte

Forums

0x00sec | hacker, malware, computer engineering, Reverse engineering Antichat | russian based forum CODEBY.NET | hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum EAST Exploit database | exploit DB for commercial exploits written for EAST Pentest Framework Greysec | hacking and security forum Hackforums | posting webstite for hacks/exploits/various discussion