awesome-ethical-hacking-resources - 😎 🔗 Awesome list about all kinds of resources for

项目说明

Awesome Resources For Learning Ethical Hacking & Pentesting ⚡️ ![Awesome]() !Awesome Hacking !Awesome community

What I’m sharing here is a collection of some best resources about Hacking & Penetration Testing to make you learn faster! Let's make it the best resource repository for our community.

Contents

Books

Online

Offline

Machines and Websites

Databases And Resources

Malware Analysis

Linux Penetration Testing OS

Courses

Workshop Playlists

Security Talks and Conferences

YouTube Channels

Forums

You are welcome to fork and contribute.

Also you can find my writeups/tutorials on medium: :)

Books

1. The Hacker Playbook 2: Practical Guide To Penetration Testing
2. The Basics of Hacking and Penetration Testing, Second Edition: Ethical Hacking and Penetration Testing Made Easy
3. Breaking into Information Security: Learning the Ropes 101
4. Penetration Testing: A Hands-On Introduction to Hacking
5. Social Engineering: The Art of Human Hacking
6. Hacking: The Art of Exploitation, 2nd Edition
7. Web Hacking 101
8. OWASP Testing Guide (A must-read for web application de and penetration testers)
9. The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
10. The Basics of Web Hacking: Tools and Techniques to Attack the Web

Learning Platforms to Sharpen Your Skills

Online

Name | Description
---- | ----
CTF Hacker101 | The Hacker101 CTF is a game designed to let you learn to hack in a safe, rewarding en. Hacker101 is a free educational site for hackers.
Hack The Box :: Penetration Testing Labs | An online platform to test and advance your skills in penetration testing and cyber security. Join today and start training in our online labs.
TryHackMe | TryHackMe is an online platform that teaches cyber security through short, gamified real-world labs.
CTF365 | An account-based ctf site, awarded by Kaspersky, MIT, and T-Mobile.
Backdoor | Pen testing labs that have a space for beginners, a practice arena, and competitions, account required.
Hack.me | Lets you build/host/attack web apps.
CTFLearn | An account-based ctf site, where users can go in and solve a range of challenges.
OWASP Web Applications Directory Project (Online) | List of online a applications for learning purposes.
Pentestit labs | Hands-on Pentesting Labs (OSCP style)
Root-me.org | Hundreds of challenges are a to train yourself in different and not simulated en
.com | By Design VMs for practical 'hands-on' experience in digital security
Windows / Linux Local Pri Escalation Workshop | Practice your Linux and Windows pri escalation.
Hacking Articles | CTF Brief Write-up collection with a lot of screenshots good for beginners.
Rafay Hacking Articles, a great blog | Write up collections by Rafay Baloch.
PentesterLab | 20$ signature, complete content basic to write exploits, web, android.
CyberSec WTF| Emulated web pentesting challenges from bounty write-ups
Pentest-Ground | Pentest Ground is a free playground with deliberately web applications and network services.
pwn.guide | A cybersecurity education website, offering about 100 tutorials, ranging from web, wireless... hacking to defense tutorials & forensics. Offers free plan.
HTB Writeups | The most comprehensi of Hack The Box writeups on GitHub - 500+ machines, 400+ challenges, ProLabs, Sherlocks (DFIR), endgames, and CTF events with full walkthroughs.

Off-Line

Name | Description
---- | ----
Damn Xebia Training En | Docker Container including several web applications (DVWA, D, D, WebGoat, Juiceshop, Railsgoat, django.N Bank, Mutilidae II and more)
OopsSec Store | An intentionally e-commerce app built with Next.js for web security training (OWASP Top 10, API security, CTF challenges). Quick start with npx create-oss-store.
OWASP Web Applications Directory Project (Offline) | List of offline a applications for learning purposes

Machines/Websites

1. FiringRange

Databases And Resources

Databases are the first place to start your day as a security professional. Any new detection is generally a through the public databases. These databases are a big source of information for hackers to be able to understand and exploit/avoid/fix the .

*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*

Malware Analysis

Name | Description
---- | ----
Malware traffic analysis | list of traffic analysis exercises
Malware Analysis - CSCI 4976 | another class from the folks at RPISEC, quality content
Bad Binaries | walkthrough documents of malware traffic analysis exercises and some occasional malware analysis.

Linux Penetration Testing OS

Name | Description
---- | -----
Kali | the infamous pen-testing distro from the folks at Offensi
Parrot | Debian includes a full portable lab for security, DFIR, and de
Android Tamer | Android Tamer is a / Li for Android Security professionals.
BlackArch | Arch Linux-based pentesting distro, compatible with Arch installs
LionSec Linux | pentesting OS based on Ubuntu
NullSec Linux | Security-focused distro with automoti, forensics, and ad pentesting tools

Courses

1. Computer Systems Security, MIT
2. cisco's cources
3.cybrary
4.hackers academy

For those who want to do CEH, the following links are for you.
2. CBT Nuggets CEH Training
3. CEH Books
4. Guide to Binary Exploitation

Workshops/Playlists

1. Web Hacking
2. Ethical Hacking, A Comprehensi co almost e

Security Talks and Conferences

1. InfoCon - Hacking Conference Archive
2. Curated list of Security Talks and
3. Blackhat
4. Defcon
5. Security Tube
6. Ke: Live Hack at CeBIT
7. Ghost in the Cloud, Ke
8. Ke | Talks at Google
9. Complete Free Hacking Course: Go from Beginner to Expert Hacker Today

YouTube Channels

Now let’s get Towards YouTube Channel Links... These Channels are Shared By Hackers where They Upload their Video POCs.. Watching them u can actually understand how to demonstrate these types of attacks...

1. Li
2. Black Hat
3. Injector Pca
4. Hisham Mir
5. De
6. Suleman Malik
7. Dem0n
8. Frans Rosén
9. HackerOne
10. ak1t4 machine
11. Shawar Khan
12.
13. Bugcrowd
14. Vijay Kumar
15. Web De Tutorials
16. Jan Wikholm
17. Bharga
18. ErrOr SquaD
19. SecurityIdiots
20. Penetration Testing in Linux
21. Hussnain Fareed
22. Null Byte
23. ZAID
24. vabs tutorial
25. the cyber mentor
26. PwnFunction
27. GetCyber
28. Loi Liang Yang

Any Channel Link Missing? Kindly add it in the Comments

Forums

Name | Description
---- | ----
0x00sec | hacker, malware, computer engineering, Reverse engineering
Antichat | russian based forum
CODEBY.NET | hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum
EAST Exploit database | exploit DB for commercial exploits written for EAST Pentest Framework
Greysec | hacking and security forum
Hackforums | posting webstite for hacks/exploits/ discussion

Contribution

Your contributions and suggestions are heartily welcome. (emoji key)

NOTE:

All references are taken from the Internet and shared on the Internet xD Thanks to those who shared their opinion before that helped me learn 😉
if you have any questions, please ask in the comments. If you know about any good resource for beginners, please share it here.

<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
<!-- prettier-ignore-start -->
<!-- markdownlint-disable -->

<!-- markdownlint-restore -->
<!-- prettier-ignore-end -->

<!-- ALL-CONTRIBUTORS-LIST:END -->

项目信息

开发语言：未知

Star 数：3788

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。