# Awesome Hacking Resources | Hacking & Penetration Testing Massive Resources ⭐ **URL:** \ **Category:** Give-Away and Freebies\ **Tags:** hacking, freebies\ **Created:** [January 22, 2023, 1:57pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800 "2023-01-22T13:57:01Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [January 22, 2023, 1:57pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/1 "2023-01-22T13:57:02Z")
![Awesome Hacking Resources](https://onehack.st/uploads/default/original/3X/8/4/84c35f5dbbc15ab620834ca8e6c6e5f56f38e13b.png) # Awesome Hacking Resources ![image](https://onehack.st/uploads/default/original/3X/d/9/d976eea8ea49f6a122a8273aeb21774d8c909932.png) ![image](https://onehack.st/uploads/default/original/3X/7/f/7fa447ee496d5be35323b46eead6d939bf7abe06.png) A collection of hacking / penetration testing resources to make you better! ## Table of Contents - Learning the Skills - YouTube Channels - Companies - Conferences - NEWS - Sharpening Your Skills - Reverse Engineering, Buffer Overflow and Exploit Development - Privilege Escalation - Network Scanning / Reconnaissance - Malware Analysis - Vulnerable Web Application - Vulnerable OS - Exploits - Forums - Archived Security Conference Videos - Online Communities - Online News Sources - Linux Penetration Testing OS ### Learning the Skills | Name | Description | | --- | --- | | [CS 642: Intro to Computer Security](http://pages.cs.wisc.edu/~ace/cs642-spring-2016.html) | academic content, full semester course, includes assigned readings, homework and github refs for exploit examples. NO VIDEO LECTURES. | | [CyberSec WTF](https://cybersecurity.wtf/) | CyberSec WTF Web Hacking Challenges from Bounty write-ups | | [Cybrary](https://www.cybrary.it/) | coursera style website, lots of user-contributed content, account required, content can be filtered by experience level | | [Free Cyber Security Training](https://www.samsclass.info/) | Academic content, 8 full courses with videos from a quirky instructor sam, links to research, defcon materials and other recommended training/learning | | [Hak5](https://www.hak5.org/) | podcast-style videos covering various topics, has a forum, “metasploit-minute” video series could be useful | | [Hopper’s Roppers Security Training](https://hoppersroppers.org/training.html) | Four free self-paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next. | | [Learning Exploitation with Offensive Computer Security 2.0](http://howto.hackallthethings.com/2016/07/learning-exploitation-with-offensive.html) | blog-style instruction, includes: slides, videos, homework, discussion. No login required. | | [Mind Maps](http://www.amanhardikar.com/mindmaps.html) | Information Security related Mind Maps | | [MIT OCW 6.858 Computer Systems Security](https://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/) | academic content, well organized, full-semester course, includes assigned readings, lectures, videos, required lab files. | | [OffensiveComputerSecurity](https://www.cs.fsu.edu/~redwood/OffensiveComputerSecurity/lectures.html) | academic content, full semester course including 27 lecture videos with slides and assign readings | | [OWASP top 10 web security risks](https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project) | free courseware, requires account | | [SecurityTube](http://www.securitytube.net/) | tube-styled content, “megaprimer” videos covering various topics, no readable content on site. | | [Seed Labs](http://www.cis.syr.edu/~wedu/seed/labs.html) | academic content, well organized, featuring lab videos, tasks, needed code files, and recommended readings | | [TryHackMe](https://tryhackme.com/) | Designed prebuilt challenges which include virtual machines (VM) hosted in the cloud ready to be deployed | ### YouTube Channels Name Description [NetworkChuck](https://www.youtube.com/channel/UC9x0AN7BWHpCDHSm9NiJFJQ) T field through obtaining IT Certifications. I talk about Cisco Certifications, CompTIA, AWS, Microsoft…pretty much everything in IT. [0patch by ACROS Security](https://www.youtube.com/channel/UCwlGrzF4on-bjiBhD8lO3QA) few videos, very short, specific to 0patch [BlackHat](https://www.youtube.com/channel/UCJ6q9Ie29ajGqKApbLqfBOg) features talks from the BlackHat conferences around the world [Christiaan008](https://www.youtube.com/channel/UCEPzS1rYsrkqzSLNp76nrcg) hosts a variety of videos on various security topics, disorganized **Companies** [Detectify](https://www.youtube.com/channel/UCm6N84sAaQ-BiNdCaaLT4qg) very short videos, aimed at showing how to use Detictify scanner [Hak5](https://www.youtube.com/user/Hak5Darren) see Hak5 above [Kaspersky Lab](https://www.youtube.com/channel/UCGhEv7BFBWdo0k4UXTm2eZg) lots of Kaspersky promos, some hidden cybersecurity gems [Metasploit](https://www.youtube.com/channel/UCx4d2aRIfxfEUdS_5YIYKPg) collection of medium length metasploit demos, ~25minutes each, instructional [ntop](https://www.youtube.com/channel/UCUYWuYlYKD5Yq5qBz0AIXJw/feed) network monitoring, packet analysis, instructional [nVisium](https://www.youtube.com/channel/UCTE8R-Otq_kVTo08eLsfeyg) Some nVisum promos, a handful of instructional series on Rails vulns and web hacking [OpenNSM](https://www.youtube.com/user/OpenNSM/feed) network analysis, lots of TCPDUMP videos, instructional, [OWASP](https://www.youtube.com/user/OWASPGLOBAL) see OWASP above [Rapid7](https://www.youtube.com/channel/UCnctXOUIeRFu1BR5O0W5e9w) brief videos, promotional/instructional, ~ 5 minutes [Securelist](https://www.youtube.com/user/Securelist/featured) brief videos, interviews discussing various cyber security topics [Segment Security](https://www.youtube.com/channel/UCMCI9TE3-PZ7CgKk7X6Qd_w/featured) promo videos, non-instructional [SocialEngineerOrg](https://www.youtube.com/channel/UCC1vbVVbYdNe-OZRldj-U6g) podcast-style, instructional, lengthy content ~1 hr each [Sonatype](https://www.youtube.com/user/sonatype/featured) lots of random videos, a good cluster of DevOps related content, large range of lengths, disorganized [SophosLabs](https://www.youtube.com/user/SophosLabs/featured) lots of brief, news-style content, “7 Deadly IT Sins” segment is of note [Sourcefire](https://www.youtube.com/user/SourcefireInc/featured) lots of brief videos covering topics like botnets, DDoS ~5 minutes each [Station X](https://www.youtube.com/channel/UC-vWmE-BHcUrYW5zwDijL1g) handful of brief videos, disorganized, unscheduled content updates [Synack](https://www.youtube.com/channel/UCRH0mvESjZ7eKY1LJZDPIbw/featured) random, news-style videos, disorganized, non-instructional [TippingPoint Zero Day Initiative](https://www.youtube.com/channel/UChbH7B5YhXANmlMYJRHpw0g) very brief videos ~30 sec, somewhat instructional [Tripwire, Inc.](https://www.youtube.com/user/TripwireInc/videos) some tripwire demos, and random news-style videos, non-instructional [Vincent Yiu](https://www.youtube.com/channel/UCFVI3_M1zqFzEok2sTeEP8w/featured) handful of videos from a single hacker, instructional **Conferences** [44contv](https://www.youtube.com/user/44contv) in [MIT OCW 6.858 Computer Systems Security](https://ocw.mit.edu/courses/electrical-engineering-and-computer-science) Information security con based in London, lengthy instructional videos [BruCON Security Conference](https://www.youtube.com/channel/UCqwMU1l90lf9BLersW6eAHw) security and hacker conference based in b\Belgium, lots of lengthy instructinoal videos [BSides Manchester](https://www.youtube.com/channel/UC1mLiimOTqZFK98VwM8Ke4w) security and hacker con based in Mancheseter, lots of lengthy videos [BSidesAugusta](https://www.youtube.com/channel/UC85CvsnrVlD_44eEgzb2OfA) security con based in Augusta, Georgia, lots of lengthy instructional videos [CarolinaCon](https://www.youtube.com/channel/UCTY3Dpz68CyrjwRzqkE4sFw) security con based in North Carolina, associated with various 2600 chapters, lots of lengthy instructional content [Cort Johnson](https://www.youtube.com/channel/UCV9r-yMeARWVCJEesim25Ag) a handful of lengthy con-style talks from Hack Secure Opensec 2017 [DevSecCon](https://www.youtube.com/channel/UCgxhfP2Hi8MQYz6ZkwpLA0A) lenghty con videos covering DevSecOps, making software more secure [Garage4Hackers - Information Security](https://www.youtube.com/channel/UCDqagqREZlmJitWco-yPtvw/feed) a handful of lengthy videos, About section lacks description [HACKADAY](https://www.youtube.com/channel/UCnv0gfLQFNGPJ5MHSGuIAkw) lots of random tech content, not strictly infosec, some instructional [Hack In The Box Security Conference](https://www.youtube.com/channel/UC0BJVNTIEbG8CLG-xVVWJnA) lengthy con-style instructional talks from an international security con [Hack in Paris](https://www.youtube.com/channel/UC7xJU9_oqw-vS6OJExS-2iA) security con based in paris, features lots of instructional talks, slides can be difficult to see. [Hacklu](https://www.youtube.com/channel/UCI6B0zYvK-7FdM0Vgh3v3Tg/feed) lots of lengthy con-style instructional videos [Hacktivity](https://www.youtube.com/user/hacktivity/feed) lots of lengthy con-style instructional videos from a con in central/eastern europe [Hardwear.io](https://www.youtube.com/channel/UChwYb9xc9tZXquQxu4G0l_g/featured) handful of lengthy con-style video, emphasis on hardware hacks [IEEE Symposium on Security and Privacy](https://www.youtube.com/channel/UC6pXMS7qre9GZW7A7FVM90Q) content from the symposium; IEEE is a professional association based in the us, they also publish various journals [LASCON](https://www.youtube.com/channel/UCDHsOiMPS-SLppAOAJRD37Q) lengthy con-style talks from an OWASP con held in Austin, TX [leHACK](https://www.youtube.com/channel/UCSxk_CUfES4ly5Sspc0Vorw) leHACK is the oldest ( 2003 ), leading, security conference in Paris, FR [Marcus Niemietz](https://www.youtube.com/channel/UCtThfJl65L04ukWp0XZi3yg/videos) lots of instructional content, associated with HACKPRA, an offensive security course from an institute in Germany [Media.ccc.de](https://www.youtube.com/channel/UC2TXq_t06Hjdr2g_KdKpHQg) The real official channel of the chaos computer club, operated by the CCC VOC - tons of lengthy con-style vids [NorthSec](https://www.youtube.com/channel/UCqVhMzTdQK5VAosAGkMtpJw) lengthy con-style talks from an applied security conference in Canada [Pancake Nopcode](https://www.youtube.com/channel/UC3G6k7XfTgcWD2PJR8qJSkQ) channel of Radare2 whiz Sergi “pancake” Alvarez, Reverse Engineering Content [Psiinon](https://www.youtube.com/channel/UC-3qyzm4f29C12KGp3-12bQ) medium length instructional videos, for the OWASP Zed Attack Proxy [SJSU Infosec](https://www.youtube.com/channel/UCDNzNvZlYK8jZLsUbdiGrsQ/videos) handful of lengthy instructional videos from San Jose State university Infosec [Secappdev.org](https://www.youtube.com/channel/UCSii2fuiLLlGqaR6sR_y0rA) tons of lengthy instructional lectures on Secure App Development [Security Fest](https://www.youtube.com/channel/UCByLDp7r7gHGoO7yYMYFeWQ) medium length con-style talks from a security festival in Sweden [SecurityTubeCons](https://www.youtube.com/channel/UC2wNN-Zqiq4J1PLPnyMBWUg) an assortment of con-style talks from various cons including BlackHat and Shmoocon [ToorCon](https://www.youtube.com/channel/UCnzjmL0xkTBYwFZD7agHGWw) handful of medium length con videos from con based in San Diego, CA [USENIX Enigma Conference](https://www.youtube.com/channel/UCIdV7bE97mSPTH1mOi_yUrw/feed) medium length “round table discussion with leading experts”, content starts in 2016 [ZeroNights](https://www.youtube.com/channel/UCtQ0fPmP4fCGBkYWMxnjh6A) a lot of con-style talks from international conference ZeroNights **News** [0x41414141](https://www.youtube.com/channel/UCPqes566OZ3G_fjxL6BngRQ) Channel with couple challenges, well explained [Adrian Crenshaw](https://www.youtube.com/user/irongeek) lots of lengthy con-style talks [Corey Nachreiner](https://www.youtube.com/channel/UC7dUL0FbVPGqzdb2HtWw3Xg) security newsbites, 2.7K subscribers, 2-3 videos a week, no set schedule [BalCCon - Balkan Computer Congress](https://www.youtube.com/channel/UCoHypmu8rxlB5Axh5JxFZsA) Long con-style talks from the Balkan Computer Congress, doesn’t update regularly [danooct1](https://www.youtube.com/channel/UCqbkm47qBxDj-P3lI9voIAw) lots of brief screenshot, how-to vids regarding malware, regular content updates, 186K followerss [DedSec](https://www.youtube.com/channel/UCx34ZZW2KgezfUPPeL6m8Dw) lots of brief screenshot how-to vids based in Kali, no recent posts. [DEFCON Conference](https://www.youtube.com/channel/UC6Om9kAkl32dWlDSNlDS9Iw) lots of lengthy con-style vids from the iconical DEFCON [DemmSec](https://www.youtube.com/channel/UCJItQmwUrcW4VdUqWaRUNIg) lots of pen testing vids, somewhat irregular uploads, 44K followers [Derek Rook - CTF/Boot2root/wargames Walkthrough](https://www.youtube.com/channel/UCMACXuWd2w6_IEGog744UaA) lots of lengthy screenshot instructional vids, with [Don Does 30](https://www.youtube.com/channel/UCarxjDjSYsIf50Jm73V1D7g) amateur pen-tester posting lots of brief screenshot vids regularly, 9K Followers [Error 404 Cyber News](https://www.youtube.com/channel/UC4HcNHFKshqj-aeyi6imW7Q) short screen-shot videos with loud metal, no dialog, bi-weekly [Geeks Fort - KIF](https://www.youtube.com/channel/UC09NdTL2hkThGLSab8chJMw) lots of brief screenshot vids, no recent posts [GynvaelEN](https://www.youtube.com/channel/UCCkVMojdBWS-JtH7TliWkVg) Security streams from Google Researcher. Mainly about CTFs, computer security, programing and similar things. [HackerSploit](https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q) regular posts, medium length screenshot vids, with dialog [HACKING TUTORIALS](https://www.youtube.com/channel/UCbsn2kQwNxcIzHwbdDjzehA) handful of brief screenshot vids, no recent posts. [iExplo1t](https://www.youtube.com/channel/UCx0HClQ_cv0sLNOVhoO2nxg/videos) lots of screenshot vids aimed at novices, 5.7K Followers, no recent posts [JackkTutorials](https://www.youtube.com/channel/UC64x_rKHxY113KMWmprLBPA) lots of medium length instructional vids with some AskMe vids from the youtuber [John Hammond](https://www.youtube.com/user/RootOfTheNull) Solves CTF problems. contains penTesting tips and tricks [Latest Hacking News](https://www.youtube.com/user/thefieldhouse/feed) 10K followers, medium length screenshot videos, no recent releases [LionSec](https://www.youtube.com/channel/UCCQLBOt_hbGE-b9I696VRow) lots of brief screenshot instructional vids, no dialog [LiveOverflow](https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w) Lots of brief-to-medium instructional vids, covering things like buffer overflows and exploit writing, regular posts. [Metasploitation](https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZrg) lots of screenshot vids, little to no dialogue, all about using Metasploit, no recent vids. [NetSecNow](https://www.youtube.com/channel/UC6J_GnSAi7F2hY4RmnMcWJw) channel of [pentesteruniversity.org](http://pentesteruniversity.org), seems to post once a month, screenshot instructional vids [Open SecurityTraining](https://www.youtube.com/channel/UCthV50MozQIfawL9a_g5rdg) lots of lengthy lecture-style vids, no recent posts, but quality info. [Pentester Academy TV](https://www.youtube.com/channel/UChjC1q6Ami7W0E71TzPZELA) lots of brief videos, very regular posting, up to +8 a week [Penetration Testing in Linux](https://www.youtube.com/channel/UC286ntgASMskhPIJQebJVvA) DELETE [rwbnetsec](https://www.youtube.com/channel/UCAJ8Clc3188ek9T_5XTVzZQ) lots of medium length instructional videos covering tools from Kali 2.0, no recent posts. [Samy Kamkar’s Applied Hacking](https://www.youtube.com/user/s4myk) brief to medium length instructional vids from the creator of PoisonTap for the Raspberry Pi Zero, no recent content, last updated in 2016 [SecureNinjaTV](https://www.youtube.com/channel/UCNxfV4yR0nIlhFmfwcdf3BQ) brief news bites, irregular posting, 18K followers [Security Weekly](https://www.youtube.com/channel/UCg--XBjJ50a9tUhTKXVPiqg) regular updates, lengthy podcast-style interviews with industry pros [Seytonic](https://www.youtube.com/channel/UCW6xlqxSY3gGur4PkGPEUeA) variety of DIY hacking tutorials, hardware hacks, regular updates [Shozab Haxor](https://www.youtube.com/channel/UCBwub2kRoercWQJ2mw82h3A) lots of screenshot style instructional vids, regular updates, windows CLI tutorial [SSTec Tutorials](https://www.youtube.com/channel/UCHvUTfxL_9bNQgqzekPWHtg) lots of brief screenshot vids, regular updates [Tradecraft Security Weekly](https://wiki.securityweekly.com/Tradecraft_Security_Weekly) Want to learn about all of the latest security tools and techniques? [Troy Hunt](https://www.youtube.com/channel/UCD6MWz4A61JaeGrvyoYl-rQ) lone youtuber, medium length news videos, 16K followers, regular content [Waleed Jutt](https://www.youtube.com/channel/UCeN7cOELsyMHrzfMsJUgv3Q) lots of brief screenshot vids covering web security and game programming [webpwnized](https://www.youtube.com/channel/UCPeJcqbi8v46Adk59plaaXg) lots of brief screenshot vids, some CTF walkthroughs [Zer0Mem0ry](https://www.youtube.com/channel/UCDk155eaoariJF2Dn2j5WKA) lots of brief c++ security videos, programming intensive [LionSec](https://www.youtube.com/channel/UCCQLBOt_hbGE-b9I696VRow) lots of brief screenshot instructional vids, no dialog [Adrian Crenshaw](https://www.youtube.com/user/irongeek) lots of lengthy con-style talks [HackerSploit](https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q) regular posts, medium length screenshot vids, with dialog [Derek Rook - CTF/Boot2root/wargames Walkthrough](https://www.youtube.com/channel/UCMACXuWd2w6_IEGog744UaA) lots of lengthy screenshot instructional vids, with [Tradecraft Security Weekly](https://wiki.securityweekly.com/Tradecraft_Security_Weekly) Want to learn about all of the latest security tools and techniques? [IPPSec](https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA) Hackthebox.eu retired machine vulnerable machine walkthroughs to help you learn both basic and advanced processes and techniques [The Daily Swig](https://portswigger.net/daily-swig) Latest Cybersecurity News ### Sharpening Your Skills | Name | Description | | --- | --- | | [Backdoor](https://backdoor.sdslabs.co/) | pen testing labs that have a space for beginners, a practice arena and various competitions, account required | | [The cryptopals crypto challenges](http://cryptopals.com/) | A bunch of CTF challenges, all focused on cryptography. | | [Challenge Land](http://challengeland.co/) | Ctf site with a twist, no simple sign-up, you have to solve a challengeto even get that far! | | [Crackmes.de Archive (2011-2015)](https://tuts4you.com/download.php?view.3152) | a reverse engineering information Repo, started in 2003 | | [Crackmes.one](https://crackmes.one/) | This is a simple place where you can download crackmes to improve your reverse engineering skills. | | [CTFLearn](https://ctflearn.com/) | an account-based ctf site, where users can go in and solve a range of challenges | | [CTFs write-ups](https://github.com/ctfs) | a collection of writeups from various CTFs, organized by | | [CTF365](https://ctf365.com/) | account based ctf site, awarded by Kaspersky, MIT, T-Mobile | | [The enigma group](https://www.enigmagroup.org/) | web application security training, account based, video tutorials | | [Exploit exercises](https://exploit-exercises.com/) | hosts 5 fulnerable virtual machines for you to attack, no account required | | [Google CTF](https://github.com/google/google-ctf) | Source code of Google 2017, 2018 and 2019 CTF | | [Google CTF 2019](https://capturetheflag.withgoogle.com/) | 2019 edition of the Google CTF contest | | [Google’s XSS game](https://xss-game.appspot.com/) | XSS challenges, and potentially a chance to get paid! | | [Hack The Box](https://www.hackthebox.gr/en/login) | Pen testing labs hosting over 39 vulnerable machines with two additional added every month | | [Hacker test](http://www.hackertest.net/) | similar to “hackthissite”, no account required. | | [Hacker Gateway](https://www.hackergateway.com/) | ctfs covering steganography, cryptography, and web challengs, account required | | [Hacksplaining](https://www.hacksplaining.com/) | a clickthrough security informational site, very good for beginners. | | [hackburger.ee](http://hackburger.ee/) | hosts a number of web hacking challenges, account required | | [Hack.me](https://hack.me/) | lets you build/host/attack vulnerable web apps | | [Hack this site!](https://www.hackthissite.org/) | an oldy but goodie, account required, users start at low levels and progress in difficulty | | [knock.xss.moe](https://knock.xss.moe/) | XSS challenges, account required. | | [Lin.security](https://in.security/lin-security-practise-your-linux-privilege-escalation-foo/) | Practice your Linux privilege escalation | | [noe.systems](http://noe.systems/) | Korean challenge site, requires an account | | [Over the wire](http://overthewire.org/wargames/) | A CTF that’s based on progressive levels for each lab, the users SSH in, no account recquired | | [Participating Challenge Sites](http://www.wechall.net/active_sites/all/by/site_avg/DESC/page-1) | aims at creating a universal ranking for CTF participants | | [PentesterLab](https://pentesterlab.com/) | hosts a variety of exercises as well as various “bootcamps” focused on specific activities | | [Pentestit](https://lab.pentestit.ru/) | acocunt based CTF site, users have to install open VPN and get credentials | | [Pentest Practice](https://www.pentestpractice.com/) | account based Pentest practice, free to sign up, but there’s also a pay-as-you-go feature | | [Pentest.training](https://pentest.training/) | lots of various labs/VMS for you to try and hack, registry is optional. | | [PicoCTF](https://2017game.picoctf.com/) | CTF hosted by Carnegie Mellon, occurs yearly, account required. | | [pwnable.kr](http://pwnable.kr/) | Don’t let the cartoon characters fool you, this is a serious CTF site that will teach you a lot, account required | | [pwnable.tw](http://pwnable.tw/) | hosts 27 challenges accompanied with writeups, account required | | [Ringzer0 Team](https://ringzer0team.com/challenges) | an account based CTF site, hosting over 272 challenges | | [ROP Emporium](https://ropemporium.com/) | Return Oriented Programming challenges | | [SmashTheStack](http://smashthestack.org/wargames.html) | hosts various challenges, similar to OverTheWire, users must SSH into the machines and progress in levels | | [Shellter Labs](https://shellterlabs.com/en/) | account based infosec labs, they aim at making these activities social | | [Solve Me](http://solveme.safflower.kr/) | “yet another challenge”, account required. | | [Vulnhub](https://www.vulnhub.com/) | site hosts a ton of different vulnerable Virtual Machine images, download and get hacking | | [websec.fr](https://websec.fr/) | Focused on web challenges, registration is optional. | | [tryhackme](https://tryhackme.com/) | Awesome platform to start learning cybersecurity, account is needed | | [webhacking.kr](https://webhacking.kr/) | lots of web security challenges are available, recommended for beginners. You need to solve a simple challenge to sign up. | | [Stereotyped Challenges](https://chall.stypr.com/) | Challenges for web security professionals, account required. | | [Stripe CTF 2.0](https://github.com/stripe-ctf) | Past security contest where you can discover and exploit vulnerabilities in mock web applications. | | [Windows / Linux Local Privilege Escalation Workshop](https://github.com/sagishahar/lpeworkshop) | Practice your Linux and Windows privilege escalation | | [Hacking Articles](http://www.hackingarticles.in/ctf-challenges1/) | CTF Brief Write up collection with a lot of screenshots good for begginers | | [Hacker101 CTF](https://ctf.hacker101.com/) | CTF hosted by HackerOne, always online. You will receive invitations to some private programs on HackerOne platform as a reward. | | [Hacking Lab](https://www.hacking-lab.com/index.html) | European platform hosting lots of riddles, challenges and competitions | | [Portswigger](https://portswigger.net/) | Best Platform inorder to learn Web Pentesting, account required | ### Reverse Engineering, Buffer Overflow and Exploit Development | Name | Description | | --- | --- | | [A Course on Intermediate Level Linux Exploitation](https://github.com/nnamon/linux-exploitation-course) | as the title says, this course isn’t for beginners | | [Analysis and exploitation (unprivileged)](https://www.it-sec-catalog.info/analysis_and_exploitation_unprivileged.html) | huge collection of RE information, organized by type. | | [Binary hacking](http://liveoverflow.com/binary_hacking/index.html) | 35 “no bullshit” binary videos along with other info | | [Buffer Overflow Exploitation Megaprimer for Linux](http://www.securitytube.net/groups?operation=view&groupId=4) | Collection of Linux Rev. Engineering videos | | [Corelan tutorials](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/) | detailed tutorial, lots of good information about memory | | [Exploit tutorials](http://www.primalsecurity.net/tutorials/exploit-tutorials/) | a series of 9 exploit tutorials,also features a podcast | | [Exploit development](https://0x00sec.org/c/exploit-development) | links to the forum’s exploit dev posts, quality and post style will vary with each poster | | [flAWS challenge](http://flaws.cloud/) | Through a series of levels you’ll learn about common mistakes and gotchas when using Amazon Web Services (AWS). | | [Introduction to ARM Assembly Basics](https://azeria-labs.com/writing-arm-assembly-part-1/) | tons of tutorials from infosec pro Azeria, follow her on twitter | | [Introductory Intel x86](http://www.opensecuritytraining.info/IntroX86.html) | 63 days of OS class materials, 29 classes, 24 instructors, no account required | | [Lena’s Reversing for Newbies (Complete)](https://tuts4you.com/download.php?view.2876) | listing of a lengthy resource by Lena, aimed at being a course | | [Linux (x86) Exploit Development Series](https://sploitfun.wordpress.com/2015/06/26/linux-x86-exploit-development-tutorial-series/) | blog post by sploitfun, has 3 different levels | | [Megabeets journey into Radare2](https://www.megabeets.net/a-journey-into-radare-2-part-1/) | one user’s radare2 tutorials | | [Modern Binary Exploitation - CSCI 4968](https://github.com/RPISEC/MBE) | RE challenges, you can download the files or download the VM created by RPISEC specifically for challenges, also links to their home page with tons of infosec lectures | | [Recon.cx - reversing conference](https://recon.cx/) | the conference site contains recordings and slides of all talks!! | | [Reverse Engineering for Beginners](https://beginners.re/RE4B-EN.pdf) | huge textbook, created by Dennis Yurichev, open-source | | [Reverse engineering reading list](https://github.com/onethawt/reverseengineering-reading-list/blob/master/README.md) | a github collection of RE tools and books | | [Reverse Engineering challenges](https://challenges.re/) | collection of challenges from the writer of RE for Beginners | | [Reverse Engineering for beginners (GitHub project)](https://github.com/dennis714/RE-for-beginners) | github for the above | | [Reverse Engineering Malware 101](https://malwareunicorn.org/workshops/re101.html) | intro course created by Malware Unicorn, complete with material and two VM’s | | [Reverse Engineering Malware 102](https://malwareunicorn.org/workshops/re102.html) | the sequel to RE101 | | [reversing.kr challenges](http://www.reversing.kr/challenge.php) | reverse engineering challenges varying in difficulty | | [Shell storm](http://shell-storm.org/) | Blog style collection with organized info about Rev. Engineering. | | [Shellcode Injection](https://dhavalkapil.com/blogs/Shellcode-Injection/) | a blog entry from a grad student at SDS Labs | | [Micro Corruption — Assembly](https://microcorruption.com/) | CTF designed to learn Assembly by practicing | ### Privilege Escalation | Name | Description | | --- | --- | | [4 Ways get linux privilege escalation](http://www.hackingarticles.in/4-ways-get-linux-privilege-escalation/) | shows different examples of PE | | [A GUIDE TO LINUX PRIVILEGE ESCALATION](https://payatu.com/guide-linux-privilege-escalation/) | Basics of Linux privilege escalation | | [Abusing SUDO (Linux Privilege Escalation)](http://touhidshaikh.com/blog/?p=790) | Abusing SUDO (Linux Privilege Escalation) | | [AutoLocalPrivilegeEscalation](https://github.com/ngalongc/AutoLocalPrivilegeEscalation) | automated scripts that downloads and compiles from exploitdb | | [Basic linux privilege escalation](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/) | basic linux exploitation, also covers Windows | | [Common Windows Privilege Escalation Vectors](https://www.toshellandback.com/2015/11/24/ms-priv-esc/) | Common Windows Privilege Escalation Vectors | | [Editing /etc/passwd File for Privilege Escalation](http://www.hackingarticles.in/editing-etc-passwd-file-for-privilege-escalation/) | Editing /etc/passwd File for Privilege Escalation | | [Linux Privilege Escalation](https://securityweekly.com/2017/12/17/linux-privilege-escalation-tradecraft-security-weekly-22/) | Linux Privilege Escalation – Tradecraft Security Weekly (Video) | | [Linux Privilege Escalation Check Script](https://github.com/sleventyeleven/linuxprivchecker) | a simple linux PE check script | | [Linux Privilege Escalation Scripts](http://netsec.ws/?p=309#more-309) | a list of PE checking scripts, some may have already been covered | | [Linux Privilege Escalation Using PATH Variable](http://www.hackingarticles.in/linux-privilege-escalation-using-path-variable/) | Linux Privilege Escalation Using PATH Variable | | [Linux Privilege Escalation using Misconfigured NFS](http://www.hackingarticles.in/linux-privilege-escalation-using-misconfigured-nfs/) | Linux Privilege Escalation using Misconfigured NFS | | [Linux Privilege Escalation via Dynamically Linked Shared Object Library](https://www.contextis.com/blog/linux-privilege-escalation-via-dynamically-linked-shared-object-library) | How RPATH and Weak File Permissions can lead to a system compromise. | | [Local Linux Enumeration & Privilege Escalation Cheatsheet](https://www.rebootuser.com/?p=1623) | good resources that could be compiled into a script | | [OSCP - Windows Priviledge Escalation](http://hackingandsecurity.blogspot.com/2017/09/oscp-windows-priviledge-escalation.html) | Common Windows Priviledge Escalation | | [Privilege escalation for Windows and Linux](https://github.com/AusJock/Privilege-Escalation) | covers a couple different exploits for Windows and Linux | | [Privilege escalation linux with live example](http://resources.infosecinstitute.com/privilege-escalation-linux-live-examples/) | covers a couple common PE methods in linux | | [Reach the root](https://hackmag.com/security/reach-the-root/) | discusses a process for linux privilege exploitation | | [RootHelper](https://github.com/NullArray/RootHelper) | a tool that runs various enumeration scripts to check for privilege escalation | | [Unix privesc checker](http://pentestmonkey.net/tools/audit/unix-privesc-check) | a script that checks for PE vulnerabilities on a system | | [Windows exploits, mostly precompiled.](https://github.com/abatchy17/WindowsExploits) | precompiled windows exploits, could be useful for reverse engineering too | | [Windows Privilege Escalation](http://www.bhafsec.com/wiki/index.php/Windows_Privilege_Escalation) | collection of wiki pages covering Windows Privilege escalation | | [Windows Privilege Escalation](https://memorycorruption.org/windows/2018/07/29/Notes-On-Windows-Privilege-Escalation.html) | Notes on Windows Privilege Escalation | | [Windows privilege escalation checker](https://github.com/netbiosX/Checklists/blob/master/Windows-Privilege-Escalation.md) | a list of topics that link to pentestlab.blog, all related to windows privilege escalation | | [Windows Privilege Escalation Fundamentals](http://www.fuzzysecurity.com/tutorials/16.html) | collection of great info/tutorials, option to contribute to the creator through patreon, creator is an OSCP | | [Windows Privilege Escalation Guide](https://www.sploitspren.com/2018-01-26-Windows-Privilege-Escalation-Guide/) | Windows Privilege Escalation Guide | | [Windows Privilege Escalation Methods for Pentesters](https://pentest.blog/windows-privilege-escalation-methods-for-pentesters/) | Windows Privilege Escalation Methods for Pentesters | ### Malware Analysis | Name | Description | | --- | --- | | [Malware traffic analysis](http://www.malware-traffic-analysis.net/) | list of traffic analysis exercises | | [Malware Analysis - CSCI 4976](https://github.com/RPISEC/Malware/blob/master/README.md) | another class from the folks at RPISEC, quality content | | [Bad Binaries] ([https://www.badbinaries.com/](https://www.badbinaries.com/)) | walkthrough documents of malware traffic analysis exercises and some occasional malware analysis. | ### Network Scanning / Reconnaissance | Name | Description | | --- | --- | | [Foot Printing with WhoIS/DNS records](https://www.sans.org/reading-room/whitepapers/hackers/fundamentals-computer-hacking-956) | a white paper from SANS | | [Google Dorks/Google Hacking](https://d4msec.wordpress.com/2015/09/03/google-dorks-for-finding-emails-admin-users-etc/) | list of commands for google hacks, unleash the power of the world’s biggest search engine | ### Vulnerable Web Application | Name | Description | | --- | --- | | [bWAPP](http://www.itsecgames.com/) | common buggy web app for hacking, great for beginners, lots of documentation | | [Damn Small Vulnerable Web](https://github.com/stamparm/DSVW) | written in less than 100 lines of code, this web app has tons of vulns, great for teaching | | [Damn Vulnerable Web Application (DVWA)](http://www.dvwa.co.uk/) | PHP/MySQL web app for testing skills and tools | | [Google Gruyere](https://google-gruyere.appspot.com/) | host of challenges on this cheesy web app | | [OWASP Broken Web Applications Project](https://github.com/chuckfw/owaspbwa/) | hosts a collection of broken web apps | | [OWASP Hackademic Challenges project](https://github.com/Hackademic/hackademic/) | web hacking challenges | | [OWASP Mutillidae II](https://sourceforge.net/projects/mutillidae/files/) | another OWASP vulnerable app, lots of documentation. | | [OWASP Juice Shop](https://github.com/bkimminich/juice-shop) | covers the OWASP top 10 vulns | | [WebGoat: A deliberately insecure Web Application](https://github.com/WebGoat/WebGoat) | maintained by OWASP and designed to to teach web app security | ### Vulnerable OS | Name | Description | | --- | --- | | [General Test Environment Guidance](https://community.rapid7.com/docs/DOC-2196) | white paper from the pros at rapid7 | | [Metasploitable2 (Linux)](https://sourceforge.net/projects/metasploitable/files/Metasploitable2/) | vulnerable OS, great for practicing hacking | | [Metasploitable3](https://github.com/rapid7/metasploitable3) [[Installation](https://github.com/rapid7/metasploitable3/blob/master/README.md)] | the third installation of this vulnerable OS | | [Vulnhub](https://www.vulnhub.com/) | collection of tons of different vulnerable OS and challenges | ### Linux Penetration Testing OS | Name | Description | | --- | --- | | [Android Tamer](https://androidtamer.com//) | Android Tamer is a Virtual / Live Platform for Android Security professionals. | | [BackBox](https://backbox.org/index) | open source community project, promoting security in IT enivornments | | [BlackArch](https://blackarch.org/index.html) | Arch Linux based pentesting distro, compatible with Arch installs | | [Bugtraq](http://bugtraq-team.com/) | advanced GNU Linux pen-testing technology | | [Docker for pentest](https://github.com/aaaguirrep/pentest) | Image with the more used tools to create a pentest environment easily and quickly. | | [Kali](http://kali.org/) | the infamous pentesting distro from the folks at Offensive Security | | [LionSec Linux](https://lionsec-linux.org/) | pentesting OS based on Ubuntu | | [Parrot](https://www.parrotsec.org/) | Debian includes full portable lab for security, DFIR, and development | | [Pentoo](https://www.pentoo.ch/) | pentesting OS based on Gentoo | ### Exploits | Name | Description | | --- | --- | | [0day.today](http://0day.today/) | Easy to navigate database of exploits | | [Exploit Database](https://www.exploit-db.com/) | database of a wide variety exploits, CVE compliant archive | | [CXsecurity](https://cxsecurity.com/exploit/) | Indie cybersecurity info managed by 1 person | | [Snyk Vulnerability DB](https://snyk.io/vuln/) | detailed info and remediation guidance for known vulns, also allows you to test your code | ### Forums | Name | Description | | --- | --- | | [0x00sec](https://0x00sec.org/) | hacker, malware, computer engineering, Reverse engineering | | [Antichat](https://forum.antichat.ru/) | russian based forum | | [CODEBY.NET](https://codeby.net/) | hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum | | [EAST Exploit database](http://eastexploits.com/) | exploit DB for commercial exploits written for EAST Pentest Framework | | [Greysec](https://greysec.net/) | hacking and security forum | | [Hackforums](https://hackforums.net/) | posting webstite for hacks/exploits/various discussion | | [4Hat Day](http://4hatday.com/) | brazilian based hacker forum | | [CaveiraTech](https://caveiratech.com/forum) | brazilian based, general hacker forum | ### Archived Security Conference Videos | Name | Description | | --- | --- | | [InfoCon.org](https://infocon.org/cons/) | hosts data from hundreds of cons | | [Irongeek](http://www.irongeek.com/) | Website of Adrien Crenshaw, hosts a ton of info. | | [infocondb.org](https://infocondb.org/) | a site that aims to catalog and cross-reference all hacker conferences. | ### Online Communities | Name | Description | | --- | --- | | [Hacktoday](https://www.hacktoday.net/) | requires an account, covering all kinds of hacking topics | | [Hack+](http://t.me/hacking_group_channel) | link requires telegram to be used | | [MPGH](http://mpgh.net/) | community of MultiPlayerGameHacking | ### Online News Sources | Name | Description | | --- | --- | | [InfoSec](http://www.infosecurity-magazine.com/) | covers all the latest infosec topics | | [Recent Hash Leaks](https://hashes.org/public.php) | great place to lookup hashes | | [Security Intell](https://securityintelligence.com/news/) | covers all kinds of news, great intelligence resources | | [Threatpost](https://threatpost.com/) | covers all the latest threats and breaches | | [Secjuice](https://github.com/vitalysim/Awesome-Hacking-Resources/blob/master/secjuice.com) | | | [The Hacker News](https://thehackernews.com/) | features a daily stream of hack news, also has an app | `Source: GitHub` # **ENJOY & HAPPY LEARNING!** ❤ Appreciate the share & feedback! don’t be cheap! ![](https://i.ibb.co/rwpPJZy/Leechers.gif) ---
**Author:** ![ragnarl](https://onehack.st/user_avatar/onehack.st/ragnarl/32/116746_2.png) [@ragnarl](https://onehack.st/u/ragnarl)\ **Post date:** [January 22, 2023, 2:35pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/3 "2023-01-22T14:35:29Z")
Perhaps you forgot to include network chuck’s youtube channel. You can learn more than you can think over there ---
**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [January 22, 2023, 5:40pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/4 "2023-01-22T17:40:53Z")
> [@ragnarl](#): > > network chuck’s youtube channel Added ✅ Thanks for making suggestion, though, this channel was shared on Awesome youtube already! ---
**Author:** ![leejiacheng1](https://onehack.st/user_avatar/onehack.st/leejiacheng1/32/94426_2.png) [@leejiacheng1](https://onehack.st/u/leejiacheng1)\ **Post date:** [January 23, 2023, 7:55am UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/5 "2023-01-23T07:55:11Z")
Fantastic share of these resources, thanks a lot 👍 ---
**Author:** ![WEBD](https://onehack.st/user_avatar/onehack.st/webd/32/117499_2.png) [@WEBD](https://onehack.st/u/WEBD)\ **Post date:** [January 23, 2023, 3:47pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/6 "2023-01-23T15:47:02Z")
Great Share .. Thanks @Aina ---
**Author:** ![ragnarl](https://onehack.st/user_avatar/onehack.st/ragnarl/32/116746_2.png) [@ragnarl](https://onehack.st/u/ragnarl)\ **Post date:** [January 23, 2023, 6:40pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/7 "2023-01-23T18:40:56Z")
I am new here. Idk what happened here before my arrival. Btw ty for appreciating. ---
**Author:** ![Mustafa\_Islam](https://onehack.st/user_avatar/onehack.st/mustafa_islam/32/112806_2.png) [@Mustafa\_Islam](https://onehack.st/u/Mustafa_Islam)\ **Post date:** [January 30, 2023, 5:31am UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/9 "2023-01-30T05:31:04Z")
Thanks chief. ---
**Author:** ![Shahriar\_Bro](https://onehack.st/user_avatar/onehack.st/shahriar_bro/32/24573_2.png) [@Shahriar\_Bro](https://onehack.st/u/Shahriar_Bro)\ **Post date:** [February 1, 2023, 8:45pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/10 "2023-02-01T20:45:31Z")
Thank you bro for another great share! ---
**Author:** ![Virus\_exe](https://onehack.st/user_avatar/onehack.st/virus_exe/32/38851_2.png) [@Virus\_exe](https://onehack.st/u/Virus_exe)\ **Post date:** [February 6, 2023, 8:50am UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/12 "2023-02-06T08:50:20Z")
I appreciate the knowledge you shared, it has made a big impact. SAM ❤ ---
**Author:** ![Shivam\_Agrawal](https://onehack.st/user_avatar/onehack.st/shivam_agrawal/32/20116_2.png) [@Shivam\_Agrawal](https://onehack.st/u/Shivam_Agrawal)\ **Post date:** [May 1, 2023, 6:13pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/13 "2023-05-01T18:13:04Z")
very helpfull as i get everything at oner place ---
**Author:** ![Pete\_Burke](https://onehack.st/user_avatar/onehack.st/pete_burke/32/115518_2.png) [@Pete\_Burke](https://onehack.st/u/Pete_Burke)\ **Post date:** [May 2, 2023, 1:24pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/14 "2023-05-02T13:24:42Z")
Sickboy says thanks heaps..Brilliant ---
**Author:** ![hass\_kess](https://onehack.st/user_avatar/onehack.st/hass_kess/32/91147_2.png) [@hass\_kess](https://onehack.st/u/hass_kess)\ **Post date:** [May 2, 2023, 2:13pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/15 "2023-05-02T14:13:23Z")
thank you so much ---
**Author:** ![pakuttuva](https://onehack.st/user_avatar/onehack.st/pakuttuva/32/33342_2.png) [@pakuttuva](https://onehack.st/u/pakuttuva)\ **Post date:** [May 8, 2023, 11:07pm UTC](https://onehack.st/t/awesome-hacking-resources-hacking-penetration-testing-massive-resources/231800/16 "2023-05-08T23:07:30Z")
This post is GOLD. I logged into this forum just to say this. THANK YOU!