Awesome Lists

Defcon Suggested Reading

• C/C++ Programming - One of the main language for open source security tools.
• .NET Programming - Software framework for Microsoft Windows platform development.
• Shell Scripting - Command line frameworks, toolkits, guides and gizmos.
• Ruby Programming by @markets - The de-facto language for writing exploits.
• JavaScript Programming - In-browser development and scripting.
• Python Programming by @vinta - General Python programming.
• Android Security - Collection of Android security related resources.
• Awesome Awesomness - The List of the Lists.
• AppSec - Resources for learning about application security.
• CTFs - Capture The Flag frameworks, libraries, etc.
• InfoSec § Hacking challenges - Comprehensive directory of CTFs, wargames, hacking challenge websites, pentest practice lab exercises, and more.
• Hacking - Tutorials, tools, and resources.
• Honeypots - Honeypots, tools, components, and more.
• Malware Analysis - Tools and resources for analysts.
• PCAP Tools - Tools for processing network traffic.
• Security - Software, libraries, documents, and other resources.
• ![CC-BY
• Creative Commons Attribution 4.0 International License
• Pentest Cheat Sheets - Awesome Pentest Cheat Sheets.
• Ruby Programming by @dreikanter - The de-facto language for writing exploits.
• Ruby Programming by @Sdogruyol - The de-facto language for writing exploits.
• Node.js Programming by @sindresorhus - Curated list of delightful Node.js packages and resources.
• Python tools for penetration testers - Lots of pentesting tools are written in Python.
• Python Programming by @svaksha - General Python programming.
• Infosec - Information security resources for pentesting, forensics, and more.
• Forensics - Free (mostly open source) forensic analysis tools and resources.
• Awesome Lockpicking - Awesome guides, tools, and other resources about the security and compromise of locks, safes, and keys.
• SecLists - Collection of multiple types of lists used during security assessments.
• Security Talks - Curated list of security conferences.
• OSINT - Awesome OSINT list containing great resources.
• YARA - YARA rules, tools, and people.
• Android Exploits - Guide on Android Exploitation and Hacks
• SecTools - Top 125 Network Security Tools.
• Kali Linux Tools - List of tools present in Kali Linux.

Books

Defcon Suggested Reading

• Defcon Suggested Reading

Defensive Development

• Holistic Info-Sec for Web Developers (Fascicle 0)
• Holistic Info-Sec for Web Developers (Fascicle 1)

Hackers Handbook Series

• The Database Hacker's Handbook, David Litchfield et al., 2005
• The Shellcoders Handbook by Chris Anley et al., 2007
• The Mac Hacker's Handbook by Charlie Miller & Dino Dai Zovi, 2009
• The Web Application Hackers Handbook by D. Stuttard, M. Pinto, 2011
• iOS Hackers Handbook by Charlie Miller et al., 2012
• Android Hackers Handbook by Joshua J. Drake et al., 2014
• The Browser Hackers Handbook by Wade Alcorn et al., 2014
• The Mobile Application Hackers Handbook by Dominic Chell et al., 2015

Malware Analysis Books

• The Art of Memory Forensics by Michael Hale Ligh et al., 2014
• Malware Analyst's Cookbook and DVD by Michael Hale Ligh et al., 2010

Network Analysis Books

• Nmap Network Scanning by Gordon Fyodor Lyon, 2009
• Wireshark Network Analysis by by Laura Chappell & Gerald Combs, 2012
• Network Forensics: Tracking Hackers through Cyberspace by Sherri Davidoff & Jonathan Ham, 2012

Penetration Testing Books

• Btfm: Blue Team Field Manual by Alan J White & Ben Clark, 2017
• Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton et al., 2007
• Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014
• Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp, 2010
• Advanced Persistent Threat Hacking: The Art and Science of Hacking Any Organization by Tyler Wrightson, 2014
• Advanced Penetration Testing by Wil Allsopp, 2017
• Rtfm: Red Team Field Manual by Ben Clark, 2014
• The Hacker Playbook by Peter Kim, 2014
• Penetration Testing: Procedures & Methodologies by EC-Council, 2010
• Advanced Penetration Testing for Highly-Secured Environments by Lee Allen, 2012

Reverse Engineering Books

• Hacking the Xbox by Andrew Huang, 2003
• Practical Reverse Engineering by Bruce Dang et al., 2014
• Gray Hat Hacking The Ethical Hacker's Handbook by Daniel Regalado et al., 2015
• Reverse Engineering for Beginners by Dennis Yurichev

Social Engineering Books

• The Art of Deception by Kevin D. Mitnick & William L. Simon, 2002
• The Art of Intrusion by Kevin D. Mitnick & William L. Simon, 2005
• Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010
• Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014
• Social Engineering in IT Security: Tools, Tactics, and Techniques by Sharon Conheady, 2014

Windows Books

• Windows Internals by Mark Russinovich et al., 2012
• Troubleshooting with the Windows Sysinternals Tools by Mark Russinovich & Aaron Margosis, 2016

Information Security Conferences

Defcon Suggested Reading

• CCC - Annual meeting of the international hacker scene in Germany.
• DerbyCon - Annual hacker conference based in Louisville.
• CHCon - Christchurch Hacker Con, Only South Island of New Zealand hacker con.
• Hack.lu - Annual conference held in Luxembourg.
• HITB - Deep-knowledge security conference held in Malaysia and The Netherlands.
• DeepSec - Security Conference in Vienna, Austria.
• SECUINSIDE - Security Conference in Seoul.
• AppSecUSA - Annual conference organized by OWASP.
• RSA Conference USA - Annual security conference in San Francisco, California, USA.
• Swiss Cyber Storm - Annual security conference in Lucerne, Switzerland.
• 44Con - Annual Security Conference held in London.
• DEF CON - Annual hacker convention in Las Vegas.
• PhreakNIC - Technology conference held annually in middle Tennessee.
• ShmooCon - Annual US East coast hacker convention.
• CarolinaCon - Infosec conference, held annually in North Carolina.
• DefCamp - Largest Security Conference in Eastern Europe, held annually in Bucharest, Romania.
• Nullcon - Annual conference in Delhi and Goa, India.
• Black Hat - Annual security conference in Las Vegas.
• LayerOne - Annual US security conference held every spring in Los Angeles.
• BalCCon - Balkan Computer Congress, annually held in Novi Sad, Serbia.
• BSides - Framework for organising and holding security conferences.
• Virus Bulletin Conference - Annual conference going to be held in Denver, USA for 2016.
• Hackfest - Largest hacking conference in Canada.

Information Security Magazines

Defcon Suggested Reading

• 2600: The Hacker Quarterly - American publication about technology and computer "underground."

Online Resources

Exploit Development

• Exploit Writing Tutorials - Tutorials on how to develop exploits.
• Shellcode Examples - Shellcodes database.
• Shellcode Tutorial - Tutorial on how to write shellcode.

Lock Picking Resources

• /r/lockpicking - Resources for learning lockpicking, equipment recommendations.

Operating Systems

• Security related Operating Systems @ Rawsec - Complete list of security related operating systems.
• Digital Evidence & Forensics Toolkit (DEFT) - Live CD for forensic analysis runnable without tampering or corrupting connected devices where the boot process takes place.
• cuckoo - Open source automated malware analysis system.
• Tails - Live OS aimed at preserving privacy and anonymity.

OSINT Resources

• NetBootcamp OSINT Tools - Collection of OSINT links and custom Web interfaces to other services such as Facebook Graph Search and various paste sites.
• WiGLE.net - Information about wireless networks world-wide, with user-friendly desktop and web applications.
• OSINT Framework - Collection of various OSINT tools broken out by category.
• Intel Techniques - Collection of OSINT tools. Menu on the left can be used to navigate through the categories.

Penetration Testing Resources

• MITRE's Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) - Curated knowledge base and model for cyber adversary behavior.
• XSS-Payloads - Ultimate resource for all things cross-site including payloads, tools, games and documentation.
• PENTEST-WIKI - Free online security knowledge library for pentesters and researchers.
• Metasploit Unleashed - Free Offensive Security Metasploit course.
• Penetration Testing Framework (PTF) - Outline for performing penetration tests compiled as a general framework usable by vulnerability analysts and penetration testers alike.
• Open Web Application Security Project (OWASP) - Worldwide not-for-profit charitable organization focused on improving the security of especially Web-based and Application-layer software.

Security Courses

Defcon Suggested Reading

• Offensive Security Training - Training from BackTrack/Kali developers.
• CTF Field Guide - Everything you need to win your next CTF competition.
• Computer Security Student - Many free tutorials, great for beginners, $10/mo membership unlocks all content.
• SANS Security Training - Computer Security Training & Certification.
• ARIZONA CYBER WARFARE RANGE - 24x7 live fire exercises for beginners through real world operations; capability for upward progression into the real world of cyber warfare.
• Open Security Training - Training material for computer security classes.

Tools

Anonymity Tools

• Tor - Free software and onion routed overlay network that helps you defend against traffic analysis.
• OnionScan - Tool for investigating the Dark Web by finding operational security issues introduced by Tor hidden service operators.
• Nipe - Script to redirect all traffic from the machine to the Tor network.
• oregano - Python module that runs as a machine-in-the-middle (MITM) accepting Tor client requests.
• What Every Browser Knows About You - Comprehensive detection page to test your own Web browser's configuration for privacy and identity leaks.
• I2P - The Invisible Internet Project.

Anti-virus Evasion Tools

• Veil - Generate metasploit payloads that bypass common anti-virus solutions.
• peCloak.py - Automates the process of hiding a malicious Windows executable from antivirus (AV) detection.
• UniByAv - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.
• AntiVirus Evasion Tool (AVET) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.
• peCloakCapstone - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.
• Shellter - Dynamic shellcode injection tool, and the first truly dynamic PE infector ever created.

CTF Tools

• ctf-tools - Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.
• Pwntools - Rapid exploit development framework built for use in CTFs.
• RsaCtfTool - Decrypt data enciphered using weak RSA keys, and recover private keys from public keys using a variety of automated attacks.

DDoS Tools

• HOIC - Updated version of Low Orbit Ion Cannon, has 'boosters' to get around common counter measures.
• T50 - Faster network stress tool.
• SlowLoris - DoS tool that uses low bandwidth on the attacking side.
• UFONet - Abuses OSI layer 7 HTTP to create/manage 'zombies' and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.
• Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.
• JS LOIC - JavaScript in-browser version of LOIC.

Docker for Penetration Testing

• Official OWASP ZAP
• Vulnerability as a service: Shellshock
• Vulnerability as a service: Heartbleed
• Security Ninjas
• OWASP NodeGoat

File Format Analysis Tools

• Veles - Binary data visualization and analysis tool.
• Hachoir - Python library to view and edit a binary stream as tree of fields and tools for metadata extraction.

GNU/Linux Utilities

• Linux Exploit Suggester - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.

Hash Cracking Tools

• CeWL - Generates custom wordlists by spidering a target's website and collecting unique words.
• Rar Crack - RAR bruteforce cracker.
• JWT Cracker - Simple HS256 JWT token brute force cracker.
• BruteForce Wallet - Find the password of an encrypted wallet file (i.e. wallet.dat).
• StegCracker - Steganography brute-force utility to uncover hidden data inside files.
• John the Ripper - Fast password cracker.

Hex Editors

• Hexinator - World's finest (proprietary, commercial) Hex Editor.
• 0xED - Native macOS hex editor that supports plug-ins to display custom data types.
• Frhed - Binary file editor for Windows.
• HexEdit.js - Browser-based hex editing.

macOS Utilities

• EvilOSX - Modular RAT that uses numerous evasion and exfiltration techniques out-of-the-box.
• Bella - Pure Python post-exploitation data mining and remote administration tool for macOS.

Multi-paradigm Frameworks

• Metasploit - Software for offensive security teams to help verify vulnerabilities and manage security assessments.
• Armitage - Java-based GUI front-end for the Metasploit Framework.
• Faraday - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
• Pupy - Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.
• AutoSploit - Automated mass exploiter, which collects target by employing the Shodan.io API and programmatically chooses Metasploit exploit modules based on the Shodan query.
• ExploitPack - Graphical tool for automating penetration tests that ships with many pre-packaged exploits.

Network Tools

• dsniff - Collection of tools for network auditing and pentesting.
• Iodine - Tunnel IPv4 data through a DNS server; useful for exfiltration from networks where Internet access is firewalled, but DNS queries are allowed.
• zmap - Open source network scanner that enables researchers to easily perform Internet-wide network studies.
• nmap - Free security scanner for network exploration & security audits.
• DNSDumpster - Online DNS recon and search service.
• Wireshark - Widely-used graphical, cross-platform network protocol analyzer.
• Dripcap - Caffeinated packet analyzer.
• BetterCAP - Modular, portable and easily extensible MITM framework.
• pig - GNU/Linux packet crafting tool.
• Network-Tools.com - Website offering an interface to numerous basic network utilities like ping, traceroute, whois, and more.
• Intercepter-NG - Multifunctional network toolkit.
• Zarp - Network attack tool centered around the exploitation of local networks.
• scapy - Python-based interactive packet manipulation program & library.
• Printer Exploitation Toolkit (PRET) - Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.
• Praeda - Automated multi-function printer data harvester for gathering usable data during security assessments.
• routersploit - Open source exploitation framework similar to Metasploit but dedicated to embedded devices.
• CrackMapExec - Swiss army knife for pentesting networks.
• dnstwist - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.
• THC Hydra - Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.
• IKEForce - Command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities.
• DET - Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.
• pwnat - Punches holes in firewalls and NATs.
• scanless - Utility for using websites to perform port scans on your behalf so as not to reveal your own IP.
• CloudFail - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.
• dnstracer - Determines where a given DNS server gets its information from, and follows the chain of DNS servers.
• passivedns-client - Library and query tool for querying several passive DNS providers.
• passivedns - Network sniffer that logs all DNS server replies for use in a passive DNS setup.
• Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
• smbmap - Handy SMB enumeration tool.
• XRay - Network (sub)domain discovery and reconnaissance automation tool.
• ACLight - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.
• ScanCannon - Python script to quickly enumerate large networks by calling masscan to quickly identify open ports and then nmap to gain details on the systems/services on those ports.
• fierce - Python3 port of the original fierce.pl DNS reconnaissance tool for locating non-contiguous IP space.
• netsniff-ng - Swiss army knife for for network sniffing.