This is a list of Information Security resources and tools I've found useful at some time during my study of security and I hope that others will too.
This list is will be updated whenever I've found something awesome to add.
Contents
- Recon
- Web
- Vulnerable Web Applications
- Linux
- Exploit Development
- Cryptography
- Privilege Escalation
- Scripting
- Courses
- Labs
- CTF
- Wargames
- OSCP
- Penetration Testing
- Binary Exploitation
- Reverse Engineering
- Malware Samples
- Bug Bounty
- Hacker Blogs
- Controls
Recon
- DNS Dumpster
- SecLists
- Sublist3r
- Subfinder
- Amass
- httprobe
- dirsearch
- webscreenshot
- cc.py
- @ITSecurityguard Visual Recon Guide
Web
- Web Application Hacker’s Handbook 2nd Edition
- The Tangled Web
- OWASP Top 10 - 2017
- OWASP Top 10 - 2013
- Portswigger Web Security Blog
- detectify Web Security Blog
- HTTP Status Codes
- Dave Kukfa - Web Application Cheat Sheet
Vulnerable Web Applications
- Damn Vulnerable Web Application (DVWA)
- OWASP Mutillidae 2
- OWASP WebGoat
- Rapid7 Hackazon
- Google Gruyere
Linux
Exploit Development
- Exploit Exercises
- LiveOverflow - Binary Hacking Playlist
Cryptography
- A Stick Figure Guide to AES
- Cryptopals Challenges
- The Manga Guide to Cryptography
- Crypto 101
Privilege Escalation
- g0tmi1k's Basic Linux Privilege Escalation
- unix-privesc-check
Scripting
- Shell Scripting Tutorial
- Bash Academy
Courses
- OSCP
- Hacker101
- Bugcrowd University
- Cybrary
- Pluralsight - Information and Cyber Security
Labs
- PentesterLab
- Hack The Box
- AttackDefense Labs
- VulnHub
CTF
- Hacker101 CTF
- PicoCTF
- Google CTF
- CTF Time
Wargames
- OverTheWire
- SmashTheStack
- HackThisSite
OSCP
- Jeremy Chisamore's Zero to OSCP in 292 Days
- Tulpa Security - Prep Guide for Offsec's PWK
Penetration Testing
- Penetration Testing - A Systematic Approach
- The Red Team Field Manual (RTFM)
- The Hacker Playbook
- IppSec - Hack The Box Walkthrough Videos
Binary Exploitation
- Pwnable.tw
- Pwnable.kr
- Exploit-Exercises
Reverse Engineering
- malwareunicorn - How to start reverse engineering malware
- malwareunicorn - RE101
- Ophir Harpaz - Reverse Engineering for Beginners
- Reversing.Kr
Malware Samples
- VirusBay
- contagio malware dump
- VirusShare
- Malware.lu
- MalShare
Bug Bounty
- Bug Bounty Forum
- Bug Bounty World
- Bug Bounty Notes
- Pentester Land - List of bug bounty writeups
- FireBounty
- Improving your reports - Google Bughunter University
- Facebook Bounty Hunter's Guide
- Breaking into Information Security: Learning the Ropes 101
- Web Hacking 101
- jhaddix - The Bug Hunters Methodology
Hacker Blogs
- zseano
- Alyssa Herrera
- Jonathan Bouman
- LiveOverflow
Controls
