General – Windows/AD – PWN – Web – Mobile – Password Cracking – Boot-2-Root/Wargames – Misc.
General
| Title | Link | Description |
|---|---|---|
| picoPrimer | Link! | Wonder what the shell is and how to use it? Maybe you haven’t thought about cryptography in ages and need a refresh? Revisit concepts you are familiar with or read something new to you in the picoPrimer. Authored by the picoCTF education team, the picoPrimer reviews cybersecurity principles used in our competition challenges. You do not need any additional software to read the picoPrimer or solve the challenges at the end of each chapter. |
| FuzzySecurity | Link! | Collection of security related topic by FuzzySecurity |
| Security and Pentesting Resources | Link! | A collection of online resources |
| 0x00sec | Link! | “The home of the Hacker” |
| Awesome Hacking | Link! | A collection of various awesome lists for hackers, pentesters and security researchers |
| CTF 101 | Link! | In this guide/wiki/handbook you’ll learn the techniques, thought processes, and methodologies you need to succeed in Capture the Flag competitions. |
| CTF Time Write-ups | Link! | A repository of write-ups for past CTFs hosted on ctftime.org |
| H4cker | Link! | This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more. |
Windows/AD
| Title | Link | Description |
|---|---|---|
| Windows Command List | Link! | This set of documentation describes the Windows Commands you can use to automate tasks by using scripts or scripting tools. |
| Active Directory Exploit Cheatsheet | Link! | A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. |
| Active Directory Kill Chain Attack & Defense | Link! | Attack and defend active directory using modern post exploitation adversary tradecraft activity |
| Awesome Windows Red Team | Link! | A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams |
| Active Directory Security | Link! | ADSecurity.org (Active Directory Security) is a place where he (Sean Metcalf) shares Microsoft enterprise security guidance and information about current threats to enterprise networks & mitigation for these threats, Active Directory design and configuration tips, as well as leveraging PowerShell in an Active Directory environment. |
| Attacking Active Directory | Link! | Attacking Active Directory: 0 to 0.9 |
| Post-Graduate AD Studies | Link! | Readings to amp up your AD skills |
Pwn
| Title | Link | Description |
|---|---|---|
| pwn.college | Link! | pwn.college is a first-stage education platform for students (and other interested parties) to learn about, and practice, core cybersecurity concepts in a hands-on fashion. It is designed to take a “white belt” in cybersecurity to becoming a “yellow belt”, able to approach (simple) CTFs and wargames. |
| ROP Emporium | Link! | Learn return-oriented programming through a series of challenges designed to teach ROP techniques in isolation, with minimal reverse-engineering or bug hunting. |
| Interactive Beginner’s Guide to ROP | Link! | Vetie’s Guide on ROP – Includes an interactive console |
| Linux Kernel Teaching | Link! | This is a collection of lectures and labs Linux kernel topics. The lectures focus on theoretical and Linux kernel exploration. |
| Nightmare | Link! | Nightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges |
| pwntools Tutorial | Link! | This repository contains some basic tutorials for getting started with pwntools (and pwntools). |
| Libc Database | Link! | libc database that allows version enumeration from a libc leak. Also includes the BuildID for use with One_Gadget |
| One_Gadget | Link! | The best tool for finding one gadget RCE in libc.so.6 |
Web
| Title | Link | Description |
|---|---|---|
| PortSwigger’s Web Security Academy | Link! | Brought to you by the creators of BurpSuite & the author of The Web Application Hacker’s Handbook |
| PentesterLab | Link! | Excellent resource to learn Web Hacking |
| OWASP’s Web Security Testing Guide | Link! | The WSTG is a comprehensive guide to testing the security of web applications and web services. |
Mobile
| Title | Link | Description |
|---|---|---|
| Mobile Application Penetration Testing Cheat Sheet | Link! | The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics. |
| Android App Reverse Engineering 101 | Link! | This workshop’s goal is to give you the foundations to begin reverse engineering Android applications. |
| OWASP Mobile Security Testing Guide | Link! | The MSTG is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android mobile security testers. |
| OverSecured | Link! | Oversecured is a company working on mobile app security. Their goal is to improve protection for the whole field, by researching and uncovering mobile vulnerabilities, automating the search for them, and also educating developers. Their blog is an excellent resource for learning different techniques. |
Password Cracking
| Title | Link | Description |
|---|---|---|
| One Rule to Rule Them All – Blog Post | Link! | |
| one Rule to Rule Them All – Rule | Link! | One rule to crack all passwords. or atleast we hope so. |
| J3rryBla4nks’ Password Cracking Methodology | Link! | |
| Probable Wordlists | Link! | Wordlists sorted by probability originally created for password generation and testing – make sure your passwords aren’t popular! |
Boot-2-Root/Wargames
| Title | Link | Description |
|---|---|---|
| HackTheBox | Link! | Cyber Security Gamified |
| VulnHub | Link! | To provide materials that allows anyone to gain practical ‘hands-on’ experience in digital security, computer software & network administration. |
| TryHackMe | Link! | A site geared toward beginners in cybersecurity, complete with public walkthroughs for most machines. |
| picoGym | Link! | picoGym is a noncompetitive practice space where you can explore and solve challenges from previously released picoCTF competitions, find fresh never before revealed challenges, and build a knowledge base of cybersecurity skills in a safe environment. |
| Root-Me | Link! | Root Me allows everyone to test and improve their knowledge in computer security and hacking. Legal. Free. Realistic. |
| Exploit Education | Link! | exploit.education provides a variety of resources that can be used to learn about vulnerability analysis, exploit development, software debugging, binary analysis, and general cyber security issues. |
| OverTheWire | Link! | The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games. |
| PWNABLE.KR | Link! | ‘pwnable.kr’ is a non-commercial wargame site which provides various pwn challenges regarding system exploitation. the main purpose of pwnable.kr is ‘fun’. |
| crackmes.one | Link! | This is a simple place where you can download crackmes to improve your reverse engineering skills. |
| TJNull’s Vulnerable Machines list | Link! | TJNull has curated a list of vulnerable machines from several platform to help practice for various certification. |
Misc.
| Title | Link | Description |
|---|---|---|
| Crypto101 | Link! | Crypto 101 is an introductory course on cryptography, freely available for programmers of all ages and skill levels. |
| CryptoHack | Link! | Learn about modern cryptography by solving a series of interactive puzzles and challenges. Get to know the ciphers and protocols that secure the digital world by breaking them. |
| Powershell for Pentesters | Link! | A GitHub repo containing lessons for approaching powershell from the perspective of a pentester |
| How to Prepare to Take the Offensive Security Certified Professional (OSCP) Exam | Link! | |
| Introduction to Malware Analysis and Reverse Engineering | Link! | This class will introduce the CS graduate students to malware concepts, malware analysis, and black-box reverse engineering techniques. The target audience is focused on computer science graduate students or undergraduate seniors without prior cyber security or malware experience. It is intended to introduce the students to types of malware, common attack recipes, some tools, and a wide array of malware analysis techniques. |
| Reverse Engineering 101 | Link! | This workshop provides the fundamentals of reversing engineering (RE) Windows malware using a hands-on experience with RE tools and techniques. |
| Hookbin | Link! | Hookbin is a free service that enables you to collect, parse, and view HTTP requests. Create your unique endpoints to inspect headers, body, query strings, cookies, uploaded files, and much more |