Security

Articles

• A Complete Penetration Testing & Hacking Tools List for Hackers & Security Professionals

• Allow arbitrary URLs, expect arbitrary code execution - Positive Security

• Basic Linux Privilege Escalation - g0tm1k

• Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies - Alex Birsan

• Dynamic linker tricks: Using LD_PRELOAD to cheat, inject features and investigate programs - Rafał Cieślak

• Everything Public Key Infrastructure - Mike Malone

• Free Cybersecurity Services and Tools - CISA

• Free TryHackMe Training: The Ultimate Guide for Beginners - Ellie Gillard

• From CTFs to The Real-World: Overview (Part 1) - Day[0]

• From CTFs to Real-Vulnerabilities (Part 2) - Day[0]

• From CTFs to Real-Exploitation (Part 3) - Day[0]

• Hack The Box (HTB) OSCP-Like machines List 2022 - PentestBlog

• How To Become A Hacker - Eric Steven Raymond

• Introduction to Ethical Hacking Live Training Guide - Omar Santos

• Introduction to format string exploits - Code Arcana

• Linux Privilege Escalation Using Capabilities - Heino Sass Hallik

• Unofficial OSCP Approved Tools - FalconSpy

• Penetration Testing Cheat Sheet - HighOn.Coffee

• Privilege Escalation - Offensive Security

• Required Reading for the Discerning Technophile - DEFCON

• Reverse Shell Cheat Sheet - HighOn.Coffee

• Reverse Shell Cheat Sheet - Pentest Monkey

• Reversing for dummies - x86 assembly and C code - Sami Alaoui Kendil

• Smashing The Stack For Fun And Profit - Aleph One

  • Smashing the Stack For Fun and Profit (Today) - Travis Finkenauer

  • Smashing the Stack for Fun & Profit: Revived - avicoder

• So You Want to Be a Hacker: 2022 Edition - TCM Security

• Starting an InfoSec Career - Lesley Carhart, tisiphone.net

  • Chapters 1-3

  • Chapters 4-5

  • Chapter 6

  • Chapter 7

• Upgrading Simple Shells to Fully Interactive TTYs

• Windows Privilege Escalation Fundamentals - 2

Awesome

• Awesome Bug Bounty

• Awesome Hacking

• Awesome Security Gists

• Awesome Windows Domain Hardening

Blogs

• Corelan Cybersecurity Research

• Embee Research

• Filippo Valsorda

• harmj0y

• Krebs on Security

• SkullSecurity

Bug Bounty Programs

• HackerOne

• List of Bug Bounty Programs, Reward Systems & Security Acknowledgments

• Zero Day Initiative

Certifications

• Certified Ethical Hacker

• CompTIA PenTest+

• CompTIA Security+

• Offensive Security Certified Professional

• A Guide to Information Security Certifications (2020 Update) - Daniel Miessler

Conferences

• RomHack

Databases

• Metasploit Unleashed - OffSec

• Systems and Network Hacking - Giuseppe Lettieri, Università di Pisa

• Common Vulnerability Scoring System

• CVE Mitre

• CVEdetails.com

• Exploit Database

• National Vulnerability Database

Discords

• Hack The Box

• InfoSec Prep

• Offensive Security

• Try Hack Me

• Vulnhub

Frameworks

• MITRE ATT&CK

• NIST Cybersecurity Framework

• The Unified Kill Chain

GitHub Repositories

• 100 Red Team Projects for Pentesters and Network Managers

• Awesome AppSec

• Awesome Cyber Security

• Awesome Cyber Skills

• Awesome OSINT

• Awesome Penetration Testing

• Awesome Resources For Learning Ethical Hacking & Pentesting

• Awesome Social Engineering

• Cheatsheets - RedefiningReality

• Companies hiring remote

• corkami/formats - file formats

• corkami/pics - posters, drawings

• Crypton

• Cybersecurity Career Path

• Cybersecurity Educational Resources

• Ethical Hacking Tools

• FuzzDB

• Hacking Books

• hackingtool - ALL IN ONE Hacking Tool For Hackers

• How To Secure Anything - Veeral Patel

• Offensive Reverse Shell (Cheat Sheet)

• OSCP Survival Guide

• PayloadsAllTheThings

• Public Pentesting Reports - Julio Cesar Fort

• pwncat

• sec-tools

• SecLists

• Security Engineer Interview Questions

• statistically-likely-usernames

• Windows / Linux Local Privilege Escalation Workshop

Images

Linux Distributions

• Kali Linux - OffSec

  • Kali WSL

  • Win-KeX

• Parrot OS - Parrot Security

• Pentoo

Meetups

• BSides London

• DEF CON Groups

• OWASP Local Chapters

• Darknet Diaries

Podcasts

• Darknet Diaries

Subreddits

• r/hacking (wiki)

• r/HowToHack

• r/websec

Tools

• BeRoot - Privilege Escalation Project

• Dradis - Reporting and collaboration tool

• DNSExfiltrator - Data exfiltration over DNS request covert channel

• Ettercap - comprehensive suite for man in the middle attacks

• GTFOBins - curated list of Unix binaries that can be used to bypass local security restrictions

• Kaitai Struct - declarative binary format parsing language

• LaZagne - Credentials recovery project

• LinEnum - Scripted Local Linux Enumeration & Privilege Escalation Checks

• Linux Exploit Suggester 2

• Linux Privilege Escalation Check Script

• Metasploit

• Nessus - Vulnerability Assessment

• Pupy - C2 and post-exploitation framework

• pwncat (GitHub)

• pwntools (docs, GitHub)

• Security Tools

• SharpExfiltrate - Modular C# framework to exfiltrate loot over secure and trusted channels

• ShellPop

• Tails - Portable operating system that protects against surveillance and censorship

• Unshackle - Password Bypass Tool

Videos

• File Path Race Condition & How To Prevent It - LiveOverflow

• How the Best Hackers Learn Their Craft - David Brumley

• Introducing Pwncat: Automating Linux Red Team Operations - Caleb Stewart and John Hammond

• Network Penetration Testing for Beginners (2019) - The Cyber Mentor

Websites

• ANY.RUN - Interactive Online Malware Sandbox

• Blue Team Labs Online

• Compiler Explorer

• crt.sh - Certificate Search

• CSO Online

• Cyber Security Challenge UK

• CyberDefenders - Online Cyber Security Blue Team Training

• Cybersecurity

• Cybrary

• CySec Careers

• Dark Reading

• Deus x64 - A Pwning Campaign by RET2 Systems

• Google Security Operations Learning Portal

• Guided Hacking

• H4CK1NG G00GL3 (Writeup by Davide Guerri)

• HackMyVM

• Hack The Box

• HackerSploit - Red Team Security Series

• Hacksplaining - Security Training for Developers

• HackThisSite

• HackTricks

• HackMyVM

• Have I Been Pwned - Check if your email has been compromised in a data breach

• John Hammond

• Jotti's malware scan

• Kali Training - Mastering the Pentest Distribution

• KC7 - A Cybersecurity Game

• OffSec Proving Grounds

• OpenSecurityTraining2

• OverTheWire Wargames

• OWASP - Open Worldwide Application Security Project

  • DSOMM - DevSecOps Maturity Model

  • OWASP Testing Guide

• Privacy Tools

• pwn.college

• Pwnable.kr

• Red Team Development and Operations

• Red Team Notes

• Reversing.kr

• SANS - UK Cybersecurity Courses & Training

• Security Certification Roadmap - Paul Jerimy

• Security List (GitHub)

• SmashThe Stack Wargaming Network

• The Art of Hacking - Omar Santos

• The Cryptopals Crypto Challenges

• The Cyber Pulse Video Library

• The Hacker News - #1 Trusted Cybersecurity News Platform

• The Hacker Recipes

• The Hacker Tools

• TryHackMe

• US Cyber Challenge

• VulnHub

• WeChall

YouTube Channels

• 0xdf

• Abricto Security

• Chris Greer - Wireshark training

• Cyber Saiyan

• Cyberkraft

• David Bombal

• HackerSploit

• Hacksplained

• Infosec

• InsiderPhD

• IppSec

• John Hammond

• LiveOverflow

• Network Chuck

• Null Byte

• stacksmashing

• The Cyber Mentor

YouTube Playlists

• Buffer Overflows Made Easy - The Cyber Mentor

• Hacking Google