Awesome Hacking -An Amazing Project

A curated list of awesome Hacking. Inspired by awesome-machine-learning

If you want to contribute to this list (please do), send me a pull request!

For a list of free hacking books available for download, go here

Table of Contents

• System
  • Tutorials
  • Tools
  • Docker
  • General
• Reverse Engineering
  • Tutorials
  • Tools
  • General
• Web
  • Tools
  • General
• Network
  • Tools
• Forensic
  • Tools
• Cryptography
  • Tools
• Wargame
  • System
  • Reverse Engineering
  • Web
  • Cryptography
  • Bug bounty
• CTF
  • Competition
  • General
• OS
  • Online resources
• Post exploitation
  • tools
• ETC

System

Tutorials

• Roppers Computing Fundamentals
  • Free, self-paced curriculum that builds a base of knowledge in computers and networking. Intended to build up a student with no prior technical knowledge to be confident in their ability to learn anything and continue their security education. Full text available as a gitbook.
• Corelan Team's Exploit writing tutorial
• Exploit Writing Tutorials for Pentesters
• Understanding the basics of Linux Binary Exploitation
• Shells
• Missing Semester

Tools

• Metasploit A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
• mimikatz - A little tool to play with Windows security
• Hackers tools - Tutorial on tools.

Docker Images for Penetration Testing & Security

• docker pull kalilinux/kali-linux-docker official Kali Linux
• docker pull owasp/zap2docker-stable - official OWASP ZAP
• docker pull wpscanteam/wpscan - official WPScan
• docker pull metasploitframework/metasploit-framework - Official Metasploit
• docker pull citizenstig/dvwa - Damn Vulnerable Web Application (DVWA)
• docker pull wpscanteam/vulnerablewordpress - Vulnerable WordPress Installation
• docker pull hmlio/vaas-cve-2014-6271 - Vulnerability as a service: Shellshock
• docker pull hmlio/vaas-cve-2014-0160 - Vulnerability as a service: Heartbleed
• docker pull opendns/security-ninjas - Security Ninjas
• docker pull noncetonic/archlinux-pentest-lxde - Arch Linux Penetration Tester
• docker pull diogomonica/docker-bench-security - Docker Bench for Security
• docker pull ismisepaul/securityshepherd - OWASP Security Shepherd
• docker pull danmx/docker-owasp-webgoat - OWASP WebGoat Project docker image
• docker pull vulnerables/web-owasp-nodegoat - OWASP NodeGoat
• docker pull citizenstig/nowasp - OWASP Mutillidae II Web Pen-Test Practice Application
• docker pull bkimminich/juice-shop - OWASP Juice Shop
• docker pull phocean/msf - Docker Metasploit

General

• Exploit database - An ultimate archive of exploits and vulnerable software

Reverse Engineering

Tutorials

• Begin RE: A Reverse Engineering Tutorial Workshop
• Malware Analysis Tutorials: a Reverse Engineering Approach
• Malware Unicorn Reverse Engineering Tutorial
• Lena151: Reversing With Lena

Tools

Disassemblers and debuggers

• IDA - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger
• OllyDbg - A 32-bit assembler level analysing debugger for Windows
• x64dbg - An open-source x64/x32 debugger for Windows
• radare2 - A portable reversing framework
• plasma - Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code.
• ScratchABit - Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
• Capstone
• Ghidra - A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission

Decompilers

• JVM-based languages

• Krakatau - the best decompiler I have used. Is able to decompile apps written in Scala and Kotlin into Java code. JD-GUI and Luyten have failed to do it fully.

• JD-GUI

• procyon

  • Luyten - one of the best, though a bit slow, hangs on some binaries and not very well maintained.

• JAD - JAD Java Decompiler (closed-source, unmaintained)

• JADX - a decompiler for Android apps. Not related to JAD.

• .net-based languages

  • dotPeek - a free-of-charge .NET decompiler from JetBrains
  • ILSpy - an open-source .NET assembly browser and decompiler
  • dnSpy - .NET assembly editor, decompiler, and debugger