Awesome Penetration Testing ("https://github.com/Muhammd/Awesome-Pentest")

Awesome Lists

• C/C++ Programming - One of the main language for open source security tools
• .NET Programming - A software framework for Microsoft Windows platform development
• Shell Scripting - Command-line frameworks, toolkits, guides and gizmos
• Ruby Programming by @markets - The de-facto language for writing exploits
• JavaScript Programming - In-browser development and scripting
• Node.js Programming by @vndmtrx - JavaScript in command-line
• Python Programming by @vinta - General Python programming
• Android Security - A collection of android security related resources
• Awesome Awesomness - The List of the Lists
• AppSec - Resources for learning about application security
• CTFs - Capture The Flag frameworks, libraries, etc
• Hacking - Tutorials, tools, and resources
• Honeypots - Honeypots, tools, components, and more
• Malware Analysis - Tools and resources for analysts
• PCAP Tools - Tools for processing network traffic
• Security - Software, libraries, documents, and other resources
• Ruby Programming by @dreikanter - The de-facto language for writing exploits
• Ruby Programming by @Sdogruyol - The de-facto language for writing exploits
• Node.js Programming by @sindresorhus - JavaScript in command-line
• Python tools for penetration testers - Lots of pentesting tools are written in Python
• Python Programming by @svaksha - General Python programming
• Infosec - Information security resources for pentesting, forensics, and more
• Awesome List - A curated list of awesome lists
• SecLists - Collection of multiple types of lists used during security assessments
• Security Talks - A curated list of security conferences
• SecTools - Top 125 Network Security Tools
• Kali Linux Tools - List of tools present in Kali Linux

Books

• The Database Hacker's Handbook, David Litchfield et al., 2005
• The Shellcoders Handbook by Chris Anley et al., 2007
• The Mac Hacker's Handbook by Charlie Miller & Dino Dai Zovi, 2009
• The Web Application Hackers Handbook by D. Stuttard, M. Pinto, 2011
• iOS Hackers Handbook by Charlie Miller et al., 2012
• Android Hackers Handbook by Joshua J. Drake et al., 2014
• The Browser Hackers Handbook by Wade Alcorn et al., 2014
• The Mobile Application Hackers Handbook by Dominic Chell et al., 2015
• Hacking the Xbox by Andrew Huang, 2003
• Practical Reverse Engineering by Bruce Dang et al., 2014
• The Art of Memory Forensics by Michael Hale Ligh et al., 2014
• Malware Analyst's Cookbook and DVD by Michael Hale Ligh et al., 2010
• The Art of Deception by Kevin D. Mitnick & William L. Simon, 2002
• The Art of Intrusion by Kevin D. Mitnick & William L. Simon, 2005
• Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010
• Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014
• Social Engineering in IT Security: Tools, Tactics, and Techniques by Sharon Conheady, 2014
• Fuzzing: Brute Force Vulnerability Discovery by Michael Sutton et al., 2007
• Advanced Persistent Threat Hacking: The Art and Science of Hacking Any Organization by Tyler Wrightson, 2014
• Black Hat Python: Python Programming for Hackers and Pentesters by Justin Seitz, 2014
• Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp, 2010
• Windows Internals by Mark Russinovich et al., 2012
• Rtfm: Red Team Field Manual by Ben Clark, 2014
• The Hacker Playbook by Peter Kim, 2014
• Penetration Testing: Procedures & Methodologies by EC-Council, 2010
• Network Forensics: Tracking Hackers through Cyberspace by Sherri Davidoff & Jonathan Ham, 2012
• Gray Hat Hacking The Ethical Hacker's Handbook by Daniel Regalado et al., 2015
• Nmap Network Scanning by Gordon Fyodor Lyon, 2009
• No Tech Hacking by Johnny Long & Jack Wiles, 2008
• Advanced Penetration Testing for Highly-Secured Environments by Lee Allen, 2012
• Reverse Engineering for Beginners by Dennis Yurichev

Information Security Conferences

• DerbyCon - An annual hacker conference based in Louisville
• DeepSec - Security Conference in Vienna, Austria
• SECUINSIDE - Security Conference in Seoul
• RSA Conference USA - An annual security conference in San Francisco, California, USA
• Swiss Cyber Storm - An annual security conference in Lucerne, Switzerland
• DEF CON - An annual hacker convention in Las Vegas
• PhreakNIC - A technology conference held annually in middle Tennessee
• ShmooCon - An annual US east coast hacker convention
• CarolinaCon - An infosec conference, held annually in North Carolina
• Hack3rCon - An annual US hacker conference
• DefCamp - Largest Security Conference in Eastern Europe, held anually in Bucharest, Romania
• Nullcon - An annual conference in Delhi and Goa, India
• AppSecUSA - An annual conference organised by OWASP
• Black Hat - An annual security conference in Las Vegas
• LayerOne - An annual US security conference held every spring in Los Angeles
• BalCCon - Balkan Computer Congress, annualy held in Novi Sad, Serbia
• BSides - A framework for organising and holding security conferences
• Virus Bulletin Conference - An annual conference going to be held in Denver, USA for 2016

License

• ![Creative Commons License
• Creative Commons Attribution 4.0 International License

Online Resources

• Exploit Writing Tutorials - Tutorials on how to develop exploits
• /r/lockpicking - Resources for learning lockpicking, equipment recommendations.
• Shellcode Tutorial - Tutorial on how to write shellcode
• Shellcode Examples - Shellcodes database
• GDB-peda - Python Exploit Development Assistance for GDB
• shellsploit - New Generation Exploit Development Kit
• OWASP - Open Web Application Security Project

Security Courses

• Cybrary - online IT and Cyber Security training platform
• Offensive Security Training - Training from BackTrack/Kali developers
• CTF Field Guide - everything you need to win your next CTF competition
• SANS Security Training - Computer Security Training & Certification
• Open Security Training - Training material for computer security classes

Tools

• Parrot - A distribution similar to Kali, with multiple architecture
• docker-metasploit
• Arch Linux Penetration Tester
• Nexpose - Vulnerability Management & Risk Management Software
• Nikto - Web application vulnerability scanner
• OWASP Zed Attack Proxy - Penetration testing tool for web applications
• Secapps - Integrated web application security testing environment
• WebReaver - Web application vulnerability scanner for Mac OS X
• DNSDumpster - Online DNS recond and search service
• dsniff - a collection of tools for network auditing and pentesting
• Aircrack-ng - a set of tools for auditing wireless network
• Kismet - Wireless network detector, sniffer, and IDS
• sslstrip - a demonstration of the HTTPS stripping attacks
• Hexinator - World's finest Hex Editor
• Shodan - Shodan is the world's first search engine for Internet-connected devices
• recon-ng - A full-featured Web Reconnaissance framework written in Python
• Tor - The free software for enabling onion routing online anonymity
• WDK/WinDbg - Windows Driver Kit and WinDbg
• Bokken - GUI for Pyew Radare2.
• BeeF - The Browser Exploitation Framework Project
• faraday - Collaborative Penetration Test and Vulnerability Management Platform
• evilgrade - The update explotation framework
• routersploit - Automated penetration testing software for router
• official OWASP ZAP
• Vulnerability as a service: Shellshock
• Vulnerability as a service: Heartbleed
• Security Ninjas
• w3af - Web application attack and audit framework
• DVCS Ripper - Rip web accessible (distributed) version control systems: SVN/GIT/HG/BZR
• arachni - Web Application Security Scanner Framework
• pig - A Linux packet crafting tool
• Network Tools - Different network tools: ping, lookup, whois, etc
• netsniff-ng - A Swiss army knife for for network sniffing
• Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
• Zarp - Zarp is a network attack tool centered around the exploitation of local networks
• mitmproxy - An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers
• mallory - HTTP/HTTPS proxy over SSH
• DET - DET is a proof of concept to perform Data Exfiltration using either single or multiple channel(s) at the same time
• pwnat - punches holes in firewalls and NATs
• smbmap - a handy SMB enumeration tool
• Wifite - Automated wireless attack tool
• SSLyze - SSL configuration scanner
• sslstrip2 - SSLStrip version to defeat HSTS
• tls_prober - fingerprint a server's SSL/TLS implementation
• weevely3 - Weaponized web shell
• joomscan - Joomla CMS scanner
• WhatWeb - Website Fingerprinter
• Online MD5 cracker - Online MD5 hash Cracker
• PowerSploit - A PowerShell Post-Exploitation Framework
• Windows Exploit Suggester - Detects potential missing patches on the target
• Responder - A LLMNR, NBT-NS and MDNS poisoner
• Fibratus - Tool for exploration and tracing of the Windows kernel
• SET - The Social-Engineer Toolkit from TrustedSec
• theHarvester - E-mail, subdomain and people names harvester
• creepy - A geolocation OSINT tool
• metagoofil - Metadata harvester
• github-dorks - CLI tool to scan github repos/organizations for potential sensitive information leak
• OllyDbg - An x86 debugger that emphasizes binary code analysis
• Immunity Debugger - A powerful new way to write exploits and analyze malware
• Medusa disassembler - An open source interactive disassembler
• Pwntools - CTF framework for use in CTFs
• Wireshark - A network protocol analyzer for Unix and Windows
• Wapiti - Web application vulnerability scanner
• tgcd - a simple Unix network utility to extend the accessibility of TCP/IP based network services beyond firewalls
• Google Hacking Database - a database of Google dorks; can be used for recon
• nmap - Free Security Scanner For Network Exploration & Security Audits
• Pyew - A Python tool for static malware analysis.
• BackBox - Ubuntu-based distribution for penetration tests and security assessments
• Reaver - Brute force attack against Wifi Protected Setup
• wifiphisher - Automated phishing attacks against Wi-Fi networks
• Wappalyzer - Wappalyzer uncovers the technologies used on websites
• BlindElephant - Web Application Fingerprinter
• Empire - Empire is a pure PowerShell post-exploitation agent
• Linux Exploit Suggester - Linux Exploit Suggester; based on operating system release number.
• plasma - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
• Radare2 - Opensource, crossplatform reverse engineering framework.
• Intercepter-NG - a multifunctional network toolkit
• I2P - The Invisible Internet Project
• ExploitPack - Graphical tool for penetration testing with a bunch of exploits
• JS LOIC - JavaScript in-browser version of LOIC
• John the Ripper - Fast password cracker
• Sysinternals Suite - The Sysinternals Troubleshooting Utilities
• Pentoo - security-focused livecd based on Gentoo

Vulnerability Databases

• OSVDB - Open Sourced Vulnerability Database
• Bugtraq - Symantec SecurityFocus
• Inj3ct0r - Inj3ct0r Exploit Database
• Vulnerability Laboratory - Vulnerability Research Laboratory
• Fulldisclosure - Full Disclosure Mailing List
• SecuriTeam - Securiteam Vulnerability Information
• ZDI - Zero Day Initiative
• Exploit-DB - Offensive Security Exploit Database
• Packet Storm - Packet Storm Global Security Resource
• CXSecurity - CSSecurity Bugtraq List
• CERT - US Computer Emergency Readiness Team
• MS Bulletin - Microsoft Security Bulletin
• NVD - US National Vulnerability Database
• MS Advisory - Microsoft Security Advisories