# Awesome Hacking | Massive Resources & Collection On The Internet ⭐ **URL:** \ **Category:** Give-Away and Freebies\ **Tags:** tools, hacking, freebies\ **Created:** [March 19, 2021, 11:13am UTC](https://onehack.st/t/awesome-hacking-massive-resources-collection-on-the-internet/175879 "2021-03-19T11:13:11Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [March 19, 2021, 11:13am UTC](https://onehack.st/t/awesome-hacking-massive-resources-collection-on-the-internet/175879/1 "2021-03-19T11:13:11Z")
![-](https://onehack.st/uploads/default/original/3X/0/d/0d72f21432c9ff1c9c01e2a0d073ada677a66c44.jpeg) # Awesome Hacking -An Amazing Project ![image](https://onehack.st/uploads/default/original/3X/4/b/4b40d927347f9cc7a1c1d4cf1941b98e3186dede.png) A curated list of awesome Hacking. # Table of Contents - System - Tutorials - Tools - Docker - General - Reverse Engineering - Tutorials - Tools - General - Web - Tools - General - Network - Tools - Forensic - Tools - Cryptography - Tools - Wargame - System - Reverse Engineering - Web - Cryptography - Bug bounty - CTF - Competition - General - OS - Online resources - Post exploitation - tools - ETC # System ## Tutorials - [Corelan Team’s Exploit writing tutorial](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/) - [Exploit Writing Tutorials for Pentesters](http://www.punter-infosec.com/exploit-writing-tutorials-for-pentesters/) - [Understanding the basics of Linux Binary Exploitation](https://github.com/r0hi7/BinExp) - [Shells](https://www.youtube.com/playlist?list=PLyzOVJj3bHQuloKGG59rS43e29ro7I57J) - [Missing Semester](https://missing.csail.mit.edu/2020/course-shell/) ## Tools - [Metasploit](https://github.com/rapid7/metasploit-framework) A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. - [mimikatz](https://github.com/gentilkiwi/mimikatz) - A little tool to play with Windows security - [Hackers tools](https://www.youtube.com/playlist?list=PLyzOVJj3bHQuiujH1lpn8cA9dsyulbYRv) - Tutorial on tools. ### Docker Images for Penetration Testing & Security - `docker pull kalilinux/kali-linux-docker` [official Kali Linux](https://hub.docker.com/r/kalilinux/kali-linux-docker/) - `docker pull owasp/zap2docker-stable` - [official OWASP ZAP](https://github.com/zaproxy/zaproxy) - `docker pull wpscanteam/wpscan` - [official WPScan](https://hub.docker.com/r/wpscanteam/wpscan/) - `docker pull metasploitframework/metasploit-framework `- [Official Metasploit](https://hub.docker.com/r/metasploitframework/metasploit-framework/) - `docker pull citizenstig/dvwa` - [Damn Vulnerable Web Application (DVWA)](https://hub.docker.com/r/citizenstig/dvwa/) - `docker pull wpscanteam/vulnerablewordpress` - [Vulnerable WordPress Installation](https://hub.docker.com/r/wpscanteam/vulnerablewordpress/) - `docker pull hmlio/vaas-cve-2014-6271` - [Vulnerability as a service: Shellshock](https://hub.docker.com/r/hmlio/vaas-cve-2014-6271/) - `docker pull hmlio/vaas-cve-2014-0160` - [Vulnerability as a service: Heartbleed](https://hub.docker.com/r/hmlio/vaas-cve-2014-0160/) - `docker pull opendns/security-ninjas` - [Security Ninjas](https://hub.docker.com/r/opendns/security-ninjas/) - `docker pull usertaken/archlinux-pentest-lxde` - [Arch Linux Penetration Tester](https://hub.docker.com/r/usertaken/archlinux-pentest-lxde/) - `docker pull diogomonica/docker-bench-security` - [Docker Bench for Security](https://hub.docker.com/r/diogomonica/docker-bench-security/) - `docker pull ismisepaul/securityshepherd` - [OWASP Security Shepherd](https://hub.docker.com/r/ismisepaul/securityshepherd/) - `docker pull danmx/docker-owasp-webgoat` - [OWASP WebGoat Project docker image](https://hub.docker.com/r/danmx/docker-owasp-webgoat/) - `docker pull vulnerables/web-owasp-nodegoat` - [OWASP NodeGoat](https://github.com/owasp/nodegoat#option-3---run-nodegoat-on-docker) - `docker pull citizenstig/nowasp` - [OWASP Mutillidae II Web Pen-Test Practice Application](https://hub.docker.com/r/citizenstig/nowasp/) - `docker pull bkimminich/juice-shop` - [OWASP Juice Shop](https://github.com/bkimminich/juice-shop#docker-container--) - `docker pull phocean/msf` - [Docker Metasploit](https://hub.docker.com/r/phocean/msf/) ## General - [Exploit database](https://www.exploit-db.com/) - An ultimate archive of exploits and vulnerable software # Reverse Engineering ## Tutorials - [Begin RE: A Reverse Engineering Tutorial Workshop](https://www.begin.re/the-workshop) - [Malware Analysis Tutorials: a Reverse Engineering Approach](http://fumalwareanalysis.blogspot.kr/p/malware-analysis-tutorials-reverse.html) - [Malware Unicorn Reverse Engineering Tutorial](https://malwareunicorn.org/workshops/re101.html#0) ## Tools ### Disassemblers and debuggers - [IDA](https://www.hex-rays.com/products/ida/) - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger - [OllyDbg](http://www.ollydbg.de/) - A 32-bit assembler level analysing debugger for Windows - [x64dbg](https://github.com/x64dbg/x64dbg) - An open-source x64/x32 debugger for Windows - [radare2](https://github.com/radare/radare2) - A portable reversing framework - [plasma](https://github.com/joelpx/plasma) - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code. - [ScratchABit](https://github.com/pfalcon/ScratchABit) - Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API - [Capstone](https://github.com/aquynh/capstone) - [Ghidra](https://ghidra-sre.org/) - A software reverse engineering (SRE) suite of tools developed by NSA’s Research Directorate in support of the Cybersecurity mission ### Decompilers - JVM-based languages - [Krakatau](https://github.com/Storyyeller/Krakatau) - the best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully. - [JD-GUI](https://github.com/java-decompiler/jd-gui) - [procyon](https://bitbucket.org/mstrobel/procyon/wiki/Java%20Decompiler) - [Luyten](https://github.com/deathmarine/Luyten) - one of the best, though a bit slow, hangs on some binaries and not very well maintained. - [JAD](http://varaneckas.com/jad/) - JAD Java Decompiler (closed-source, unmaintained) - [JADX](https://github.com/skylot/jadx) - a decompiler for Android apps. Not related to JAD. - .net-based languages - [dotPeek](https://www.jetbrains.com/decompiler/) - a free-of-charge .NET decompiler from JetBrains - [ILSpy](https://github.com/icsharpcode/ILSpy/) - an open-source .NET assembly browser and decompiler - [dnSpy](https://github.com/0xd4d/dnSpy) - .NET assembly editor, decompiler, and debugger - native code - [Hopper](https://www.hopperapp.com/) - A OS X and Linux Disassembler/Decompiler for 32/64-bit Windows/Mac/Linux/iOS executables. - [cutter](https://github.com/radareorg/cutter) - a decompiler based on radare2. - [retdec](https://github.com/avast-tl/retdec) - [snowman](https://github.com/yegord/snowman) - [Hex-Rays](https://www.hex-rays.com/products/decompiler/) - Python - [uncompyle6](https://github.com/rocky/python-uncompyle6) - decompiler for the over 20 releases and 20 years of CPython. ### Deobfuscators - [de4dot](https://github.com/0xd4d/de4dot) - .NET deobfuscator and unpacker. - [JS Beautifier](https://github.com/beautify-web/js-beautify) - [JS Nice](http://jsnice.org/) - a web service guessing JS variables names and types based on the model derived from open source. ### Other - [nudge4j](https://github.com/lorenzoongithub/nudge4j) - Java tool to let the browser talk to the JVM - [dex2jar](https://github.com/pxb1988/dex2jar) - Tools to work with Android .dex and Java .class files - [androguard](https://code.google.com/p/androguard/) - Reverse engineering, malware and goodware analysis of Android applications - [antinet](https://github.com/0xd4d/antinet) - .NET anti-managed debugger and anti-profiler code - [UPX](http://upx.sourceforge.net/) - the Ultimate Packer (and unpacker) for eXecutables ### Execution logging and tracing - [Wireshark](https://www.wireshark.org/) - A free and open-source packet analyzer - [tcpdump](http://www.tcpdump.org/) - A powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture - [mitmproxy](https://github.com/mitmproxy/mitmproxy) - An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface - [Charles Proxy](https://charlesproxy.com/) - A cross-platform GUI web debugging proxy to view intercepted HTTP and HTTPS/SSL live traffic - [usbmon](https://www.kernel.org/doc/Documentation/usb/usbmon.txt) - USB capture for Linux. - [USBPcap](https://github.com/desowin/usbpcap) - USB capture for Windows. - [dynStruct](https://github.com/ampotos/dynStruct) - structures recovery via dynamic instrumentation. - [drltrace](https://github.com/mxmssh/drltrace) - shared library calls tracing. ### Binary files examination and editing #### Hex editors - [HxD](http://mh-nexus.de/en/hxd/) - A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size - [WinHex](http://www.winhex.com/winhex/) - A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security - [wxHexEditor](https://github.com/EUA/wxHexEditor) - [Synalize It](https://www.synalysis.net/)/[Hexinator](https://hexinator.com/) - #### Other - [Binwalk](https://github.com/ReFirmLabs/binwalk) - Detects signatures, unpacks archives, visualizes entropy. - [Veles](https://github.com/codilime/veles) - a visualizer for statistical properties of blobs. - [Kaitai Struct](https://github.com/kaitai-io/kaitai_struct) - a DSL for creating parsers in a variety of programming languages. The Web IDE is particularly useful for reverse-engineering. - [Protobuf inspector](https://github.com/jmendeth/protobuf-inspector) - [DarunGrim](https://github.com/ohjeongwook/DarunGrim) - executable differ. - [DBeaver](https://github.com/dbeaver/dbeaver) - a DB editor. - [Dependencies](https://github.com/lucasg/Dependencies) - a FOSS replacement to Dependency Walker. - [PEview](http://wjradburn.com/software/) - A quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files - [BinText](https://web.archive.org/web/http://www.mcafee.com/kr/downloads/free-tools/bintext.aspx) - A small, very fast and powerful text extractor that will be of particular interest to programmers. ## General - [Open Malware](http://www.offensivecomputing.net/) # Web ## Tools - [Spyse](https://spyse.com/) - Data gathering service that collects web info using OSINT. Provided info: IPv4 hosts, domains/whois, ports/banners/protocols, technologies, OS, AS, maintains huge SSL/TLS DB, and more… All the data is stored in its own database allowing get the data without scanning. - [sqlmap](https://github.com/sqlmapproject/sqlmap) - Automatic SQL injection and database takeover tool - [NoSQLMap](https://github.com/codingo/NoSQLMap) - Automated NoSQL database enumeration and web application exploitation tool. - [tools.web-max.ca](http://tools.web-max.ca/encode_decode.php) - base64 base85 md4,5 hash, sha1 hash encoding/decoding - [VHostScan](https://github.com/codingo/VHostScan) - A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. - [SubFinder](https://github.com/subfinder/subfinder) - SubFinder is a subdomain discovery tool that discovers valid subdomains for any target using passive online sources. - [Findsubdomains](https://findsubdomains.com/) - A subdomains discovery tool that collects all possible subdomains from open source internet and validates them through various tools to provide accurate results. - [badtouch](https://github.com/kpcyrd/badtouch) - Scriptable network authentication cracker - [PhpSploit](https://github.com/nil0x42/phpsploit) - Full-featured C2 framework which silently persists on webserver via evil PHP oneliner - [Git-Scanner](https://github.com/HightechSec/git-scanner) - A tool for bug hunting or pentesting for targeting websites that have open `.git` repositories available in public - [CSP Scanner](https://cspscanner.com/) - Analyze a site’s Content-Security-Policy (CSP) to find bypasses and missing directives. ## General - [Strong node.js](https://github.com/jesusprubio/strong-node) - An exhaustive checklist to assist in the source code security analysis of a node.js web service. # Network ## Tools - [NetworkMiner](http://www.netresec.com/?page=NetworkMiner) - A Network Forensic Analysis Tool (NFAT) - [Paros](http://sourceforge.net/projects/paros/) - A Java-based HTTP/HTTPS proxy for assessing web application vulnerability - [pig](https://github.com/rafael-santiago/pig) - A Linux packet crafting tool - [findsubdomains](https://findsubdomains.com/) - really fast subdomains scanning service that has much greater opportunities than simple subs finder(works using OSINT). - [cirt-fuzzer](http://www.cirt.dk/) - A simple TCP/UDP protocol fuzzer. - [ASlookup](https://aslookup.com/) - a useful tool for exploring autonomous systems and all related info (CIDR, ASN, Org…) - [ZAP](https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project) - The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications - [mitmsocks4j](https://github.com/Akdeniz/mitmsocks4j) - Man-in-the-middle SOCKS Proxy for Java - [ssh-mitm](https://github.com/jtesta/ssh-mitm) - An SSH/SFTP man-in-the-middle tool that logs interactive sessions and passwords. - [nmap](https://nmap.org/) - Nmap (Network Mapper) is a security scanner - [Aircrack-ng](http://www.aircrack-ng.org/) - An 802.11 WEP and WPA-PSK keys cracking program - [Nipe](https://github.com/GouveaHeitor/nipe) - A script to make Tor Network your default gateway. - [Habu](https://github.com/portantier/habu) - Python Network Hacking Toolkit - [Wifi Jammer](https://n0where.net/wifijammer/) - Free program to jam all wifi clients in range - [Firesheep](https://codebutler.github.io/firesheep/) - Free program for HTTP session hijacking attacks. - [Scapy](https://github.com/secdev/awesome-scapy) - A Python tool and library for low level packet creation and manipulation - [Amass](https://github.com/OWASP/Amass) - In-depth subdomain enumeration tool that performs scraping, recursive brute forcing, crawling of web archives, name altering and reverse DNS sweeping - [sniffglue](https://github.com/kpcyrd/sniffglue) - Secure multithreaded packet sniffer - [RustScan][[https://github.com/rustscan/rustscan](https://github.com/rustscan/rustscan)] - Extremely fast port scanner built with Rust, designed to scan all ports in a couple of seconds and utilizes nmap to perform port enumeration in a fraction of the time. # Forensic ## Tools - [Autopsy](http://www.sleuthkit.org/autopsy/) - A digital forensics platform and graphical interface to [The Sleuth Kit](http://www.sleuthkit.org/sleuthkit/index.php) and other digital forensics tools - [sleuthkit](https://github.com/sleuthkit/sleuthkit) - A library and collection of command-line digital forensics tools - [EnCase](https://www.guidancesoftware.com/products/Pages/encase-forensic/overview.aspx) - The shared technology within a suite of digital investigations products by Guidance Software - [malzilla](http://malzilla.sourceforge.net/) - Malware hunting tool - [IPED - Indexador e Processador de Evidências Digitais](https://servicos.dpf.gov.br/ferramentas/IPED/) - Brazilian Federal Police Tool for Forensic Investigation # Cryptography ### Tools - [xortool](https://github.com/hellman/xortool) - A tool to analyze multi-byte XOR cipher - [John the Ripper](http://www.openwall.com/john/) - A fast password cracker - [Aircrack](http://www.aircrack-ng.org/) - Aircrack is 802.11 WEP and WPA-PSK keys cracking program. - [Ciphey](https://github.com/ciphey/ciphey) - Automated decryption tool using artificial intelligence & natural language processing. # Wargame ## System - [OverTheWire - Semtex](http://overthewire.org/wargames/semtex/) - [OverTheWire - Vortex](http://overthewire.org/wargames/vortex/) - [OverTheWire - Drifter](http://overthewire.org/wargames/drifter/) - [pwnable.kr](http://pwnable.kr/) - Provide various pwn challenges regarding system security - [Exploit Exercises - Nebula](https://exploit-exercises.com/nebula/) - [SmashTheStack](http://smashthestack.org/) - [HackingLab](https://www.hacking-lab.com/) ## Reverse Engineering - [Reversing.kr](http://www.reversing.kr/) - This site tests your ability to Cracking & Reverse Code Engineering - [CodeEngn](http://codeengn.com/challenges/) - (Korean) - [simples.kr](http://simples.kr/) - (Korean) - [Crackmes.de](http://crackmes.de/) - The world first and largest community website for crackmes and reversemes. ## Web - [Hack This Site!](https://www.hackthissite.org/) - a free, safe and legal training ground for hackers to test and expand their hacking skills - [Hack The Box](https://www.hackthebox.eu/) - a free site to perform pentesting in a variety of different systems. - [Webhacking.kr](http://webhacking.kr/) - [0xf.at](https://0xf.at/) - a website without logins or ads where you can solve password-riddles (so called hackits). - [fuzzy.land](https://fuzzy.land/) - Website by an Austrian group. Lots of challenges taken from CTFs they participated in. - [Gruyere](https://google-gruyere.appspot.com/) - [Others](https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project#tab=On-Line_apps) ## Cryptography - [OverTheWire - Krypton](http://overthewire.org/wargames/krypton/) ## Bug bounty - [Awesome bug bounty resources by EdOverflow](https://github.com/EdOverflow/bugbounty-cheatsheet) ## Bug bounty - Earn Some Money - [Bugcrowd](https://www.bugcrowd.com/) - [Hackerone](https://www.hackerone.com/start-hacking) # CTF ## Competition - [DEF CON](https://legitbs.net/) - [CSAW CTF](https://ctf.isis.poly.edu/) - [hack.lu CTF](http://hack.lu/) - [Pliad CTF](http://www.plaidctf.com/) - [RuCTFe](http://ructf.org/e/) - [Ghost in the Shellcode](http://ghostintheshellcode.com/) - [PHD CTF](http://www.phdays.com/) - [SECUINSIDE CTF](http://secuinside.com/) - [Codegate CTF](http://ctf.codegate.org/html/Main.html?lang=eng) - [Boston Key Party CTF](http://bostonkeyparty.net/) - [ZeroDays CTF](https://zerodays.ie/) - [Insomni’hack](https://insomnihack.ch/) - [Pico CTF](https://picoctf.com/) - [prompt(1) to win](http://prompt.ml/) - XSS Challenges - [HackTheBox](https://www.hackthebox.eu/) ## General - [Hack+](http://hack.plus/) - An Intelligent network of bots that fetch the latest InfoSec content. - [CTFtime.org](https://ctftime.org/) - All about CTF (Capture The Flag) - [WeChall](http://www.wechall.net/) - [CTF archives (shell-storm)](http://shell-storm.org/repo/CTF/) - [Rookit Arsenal](https://amzn.com/144962636X) - OS RE and rootkit development - [Pentest Cheat Sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) - Collection of cheat sheets useful for pentesting - [Movies For Hackers](https://github.com/k4m4/movies-for-hackers) - A curated list of movies every hacker & cyberpunk must watch. - [Hopper’s Roppers Intro. to CTF Course](https://www.hoppersroppers.org/courseCTF.html) - A free course that teaches the fundamentals of forensics, cryptography, and web-exploitation required to be successful in Capture the Flag competitions. # OS ## Online resources - [Security related Operating Systems @ Rawsec](http://rawsec.ml/en/security-related-os/) - Complete list of security related operating systems - [Best Linux Penetration Testing Distributions @ CyberPunk](https://n0where.net/best-linux-penetration-testing-distributions/) - Description of main penetration testing distributions - [Security @ Distrowatch](http://distrowatch.com/search.php?category=Security) - Website dedicated to talking about, reviewing and keeping up to date with open source operating systems # Post exploitation ## tools - [empire](https://github.com/EmpireProject/Empire) - A post exploitation framework for powershell and python. - [silenttrinity](https://github.com/byt3bl33d3r/SILENTTRINITY) - A post exploitation tool that uses iron python to get past powershell restrictions. - [PowerSploit](https://github.com/PowerShellMafia/PowerSploit) - A PowerShell post exploitation framework - [ebowla](https://github.com/Genetic-Malware/Ebowla) - Framework for Making Environmental Keyed Payloads # ETC - [SecTools](http://sectools.org/) - Top 125 Network Security Tools - [Hopper’s Roppers Security Training](https://www.hoppersroppers.org/training.html) - Four free courses designed to teach beginners the fundamentals of computing, security, and CTFs. # Free Hacking & Security eBooks A curated list of free Security and Pentesting related E-Books available on the Internet. ### Network Pentesting - [Wireshark Essentilals](https://github.com/cyberh3x/books/blob/master/9781783554638-WIRESHARK_ESSENTIALS.pdf) - [Mastering Wireshark](https://github.com/cyberh3x/books/blob/master/9781783989522-MASTERING_WIRESHARK.pdf) ### Defensive Security - [Holistic Info-Sec for Web Developers - Fascicle 0](https://f0.holisticinfosecforwebdevelopers.com/) - [Holistic Info-Sec for Web Developers - Fascicle 1](https://f1.holisticinfosecforwebdevelopers.com/) - [OWASP Hacking Tutorials and Web App Protection](https://www.owasp.org/images/d/d0/Web_Services_Hacking_and_Hardening.pdf) - [Threat Modeling - Designing for Security](https://news.asis.io/sites/default/files/Threat%20Modeling.pdf) ### Offensive Security - **Backtrack** - [Hack your Friend using Backtrack](http://hackerspace.cs.rutgers.edu/library/bt5tutorials/HackYourFriend.pdf) - **Kali Linux** - [Kali Linux Revealed Book](https://kali.training/) - [Windows Pentesting with Kali Linux v2](https://github.com/cyberh3x/books/blob/master/9781782168492-KALI_LINUX_2_WINDOWS_PENETRATION_TESTING.pdf) - **Hacking** - [Advanced SQL Injection Hacking and Guide](https://defcon.org/images/defcon-17/dc-17-presentations/defcon-17-joseph_mccray-adv_sql_injection.pdf) - [A Beginners Guide To Hacking Computer Systems](http://www.mediafire.com/download/dyewn6f3r3olnuw/A+Beginners+Guide+To+Hacking+Computer+Systems.zip) - [Blind SQL Injection Discovery & Exploitation](http://blueinfy.com/wp/blindsql.pdf) - [CEH – Hacking Database Secrets and Exploit](http://repo.thehackademy.net/depot_cehv6/) - [Ethical Hacking Complete E-book for Beginners](http://pdf.textfiles.com/security/palmer.pdf) - [Hackers High School 13 Complete Hacking Ebooks](http://www.mediafire.com/download/u2akquvibe6ia13/Hackers+High+School+13+Complete+Hacking+E-books.rar) - [Hacking attacks and Examples Test](http://www.mediafire.com/download/dpysbzboord42lo/Hacking+attacks+and+Examples+Test.zip) - [Hacking into Computer Systems](http://www.academia.edu/1153769/Hacking_into_computer_systems_-_a_beginners_guide) - [Hackers’ Secrets](http://www.onlinepot.org/security/HackersSecrets.pdf) - **Operating Systems** - **Windows** - [Modern Windows Exploit Development](https://userscloud.com/9ifscj08wllu) - **Web & WebApp** - [501 Website Hacking Secrets](http://www.mediafire.com/download/da8nhq8oh5iddae/501+Website+Hacking+Secrets.zip) - [Cross Site Scripting and Hacking Websites](http://www.objectif-securite.ch/research/xss_security_days.pdf) - [Dangerous Google Hacking Database and Attacks](http://www.mediafire.com/download/s3535s2yg1w26u7/Dangerours+Google+Hacking+Database+and+Attacks.zip) - [Hack any Website, Complete Web App Hacking](https://www.defcon.org/images/defcon-11/dc-11-presentations/dc-11-Gentil/dc-11-gentil.pdf) - [Hacking Website Database and owning systems](http://www.blackhat.com/presentations/bh-europe-07/Cerrudo/Whitepaper/bh-eu-07-cerrudo-WP-up.pdf) - [Internet Advanced Denial of Service (DDOS) Attack](http://www.mediafire.com/download/b4jmyl022rh48c0/Internet+Advanced+Denial+of+Service+%28DDOS%29+Attack.zip) - [Internet Security Technology and Hacking](http://www.mediafire.com/download/7tk860o8n777iqa/Internet+Security+Technology+and+Hacking.zip) - [The Web Application Hacker’s Handbook](https://leaksource.files.wordpress.com/2014/08/the-web-application-hackers-handbook.pdf) - [Vulnerability Exploit & website Hacking for Dummies](http://www.mediafire.com/download/j8cvosmvcb4vpw9/Vulnerability+Exploitation+%26+website+Hacking+for+Dummies.rar) - [Web App Hacking (Hackers Handbook)](http://www.mediafire.com/download/c7b18vtpc77sysi/Web+App+Hacking+%28Hackers+Handbook%29.zip) - [XSS, Vulnerability Exploitation & Website Hacking](http://www.cis.syr.edu/~wedu/seed/Labs/Attacks_XSS/XSS.pdf) ### Programming Languages - **Python** - [Violent Python : A Cookbook for Hackers (2013)](https://github.com/reconSF/python/blob/master/Syngress.Violent.Python.a.Cookbook.for.Hackers.2013.pdf) ### Reverse Engineering - [Reverse Engineering Hacking and Cracking](https://media.blackhat.com/bh-dc-11/Grand/BlackHat_DC_2011_Grand-Workshop.pdf) - [Reverse Engineering for Beginners](http://www.t-gr.com/fotis/books/re.pdf) ### Virus Botnet and Malware - [Black Book of Viruses and Hacking](http://www.mediafire.com/download/c8ilcobmyiqooyp/Black+Book+of+Viruses+and+Hacking.zip) - [Computer Hacking & Malware Attacks for Dummies](http://www.mediafire.com/download/8derf9dueyq64i5/Computer+Viruses%2C+Hacking+and+Malware+attacks+for+Dummies.zip) ### Misc - [Computer Hacking - Cyber Laws Harvard](https://cyber.harvard.edu/sites/cyber.law.harvard.edu/files/ComputerHacking.pdf) - [Ethical Hacking Value and Penetration testing](https://www.certconf.org/presentations/2003/Wed/WM4.pdf) - [Secrets of Super and Professional Hackers](http://www.mediafire.com/download/2sspb36u5gymd23/Secrets+of+Super+and+Professional+Hackers.zip) - [Hackers High School 13Complete Hacking E-books](http://www.mediafire.com/download/u2akquvibe6ia13/Hackers+High+School+13+Complete+Hacking+E-books.rar) - [Network Hacking and Shadows Hacking Attacks](http://www.mediafire.com/download/utp50jqd25ngw3q/Network_Hacking_and_Shadows_Hacking_Attacks.zip) Source: GitHub ## ENJOY & HAPPY LEARNING! ❤ DON’T BE CHEAP! LOL (APPRECIATE THE SHARE & HIT LIKE) ---
**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\ **Post date:** [March 19, 2021, 11:15am UTC](https://onehack.st/t/awesome-hacking-massive-resources-collection-on-the-internet/175879/3 "2021-03-19T11:15:54Z")
I’m speechless, the greatest topic as always ❤ ---
**Author:** ![Urooj\_Hamdard](https://onehack.st/user_avatar/onehack.st/urooj_hamdard/32/83667_2.png) [@Urooj\_Hamdard](https://onehack.st/u/Urooj_Hamdard)\ **Post date:** [March 19, 2021, 10:13pm UTC](https://onehack.st/t/awesome-hacking-massive-resources-collection-on-the-internet/175879/4 "2021-03-19T22:13:26Z")
Great work Bro.. You are Amazing… 👍 👍 👍 👍