2014-08-03 23:39:09 +00:00
# Awesome Penetration Testing
2014-08-03 23:13:53 +00:00
2014-08-03 23:39:09 +00:00
2014-08-04 18:26:20 +00:00
A collection of awesome penetration testing resources, tools, confs, books, magazines and other shiny things.
2014-08-04 17:29:04 +00:00
## Resources
2014-08-04 18:26:20 +00:00
### Penetration Testing
* [Metasploit Unleashed ](http://www.offensive-security.com/metasploit-unleashed/ ) - Free Offensive Security metasploit course.
2014-08-04 17:29:04 +00:00
### Social Engineering
2014-08-04 17:43:26 +00:00
* [Social Engineering Framework ](http://www.social-engineer.org/framework/ ) - An information resource for social engineers.
2014-08-04 14:50:13 +00:00
2014-08-04 15:22:43 +00:00
## Tools
2014-08-04 18:26:20 +00:00
### Penetration Testing
* [Kali ](http://www.kali.org/ ) - A Linux distribution designed for digital forensics and penetration testing.
* [Metasploit ](http://www.metasploit.com/ ) - World's most used penetration testing software.
2014-08-04 17:29:04 +00:00
### Social Engineering
* [SET ](https://github.com/trustedsec/social-engineer-toolkit ) - The Social-Engineer Toolkit from TrustedSec
2014-08-04 16:09:17 +00:00
### Anonimity
* [Tor ](https://www.torproject.org/ ) - The free software for enabling onion routing online anonymity.
* [I2P ](https://geti2p.net ) - The Invisible Internet Project
2014-08-04 15:22:43 +00:00
### Networks tools
* [Network Tools ](http://network-tools.com/ ) - Different network tools: pink, lookup, whois, etc.
### Hex editors
2014-08-04 16:11:22 +00:00
* [HexEdit.js ](http://hexed.it/ ) - Browser-based hex editing.
2014-08-04 18:00:49 +00:00
### Windows utils
* [Sysinternals Suite ](http://technet.microsoft.com/en-us/sysinternals/bb842062 ) - The Sysinternals Troubleshooting Utilities
2014-08-04 17:29:04 +00:00
2014-08-04 14:50:13 +00:00
2014-08-04 18:26:20 +00:00
## Conferences
2014-08-04 14:50:13 +00:00
* [DEF CON ](https://www.defcon.org/ ) - An annual hacker convention in Las Vegas.
* [Black Hat ](http://www.blackhat.com/ ) - An annual security conference in Las Vegas.
2014-08-04 15:43:29 +00:00
* [BSides ](http://www.securitybsides.com/ ) - A framework for organising and holding security conferences.
2014-08-04 14:50:13 +00:00
* [CCC ](http://events.ccc.de/congress/ ) - An annual meeting of the international hacker scene in Germany.
* [DerbyCon ](https://www.derbycon.com/ ) - An annual hacker conference based in Louisville.
* [PhreakNIC ](http://phreaknic.info/ ) - A technology conference held annually in middle Tennessee.
* [ShmooCon ](http://www.shmoocon.org/ ) - An annual US east coast hacker convention.
* [CarolinaCon ](http://www.carolinacon.org/ ) - An infosec conference, held annually in North Carolina.
* [HOPE ](http://hope.net/ ) - A conference series sponsored by the hacker magazine 2600.
* [SummerCon ](http://www.summercon.org/ ) - One of the oldest hacker conventions, held during Summer.
* [Hack.lu ](http://hack.lu/ ) - An annual conference held in Luxembourg.
* [HITB ](http://conference.hitb.org/ ) - Deep-knowledge security conference held in Malaysia and The Netherlands.
2014-08-04 15:43:29 +00:00
* [Troopers ](https://www.troopers.de ) - Annual international IT Security event with workshops held in Heidelberg, Germany.
* [Hack3rCon ](http://hack3rcon.org/ ) - An annual US hacker conference.
* [ThotCon ](http://thotcon.org/ ) - An annual US hacker conference held in Chicago.
* [LayerOne ](http://www.layerone.org/ ) - An annual US security conerence held every spring in Los Angeles.
* [DeepSec ](https://deepsec.net/ ) - Security Conference in Vienna, Austria.
* [SkyDogCon ](http://www.skydogcon.com/ ) - A technology conference in Nashville.
2014-08-04 14:50:13 +00:00
2014-08-04 17:29:04 +00:00
## Books
2014-08-04 18:26:20 +00:00
### Penetration Testing
* [The Art of Exploitation by Jon Erickson, 2008 ](http://www.nostarch.com/hacking2.htm )
* [Metasploit: The Penetration Tester's Guide by David Kennedy and others, 2011 ](http://www.nostarch.com/metasploit )
* [Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman, 2014 ](http://www.nostarch.com/pentesting )
2014-08-04 17:57:51 +00:00
### Windows
* [Windows Internals by Mark Russinovich, David Solomon, Alex Ionescu ](http://technet.microsoft.com/en-us/sysinternals/bb963901.aspx )
2014-08-04 17:29:04 +00:00
### Social Engineering
* [The Art of Deception by Kevin D. Mitnick, William L. Simon, 2002 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0471237124.html )
* [The Art of Intrusion by Kevin D. Mitnick, William L. Simon, 2005 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0764569597.html )
* [Ghost in the Wires by Kevin D. Mitnick, William L. Simon, 2011 ](http://www.hachettebookgroup.com/titles/kevin-mitnick/ghost-in-the-wires/9780316134477/ )
* [No Tech Hacking by Johnny Long, Jack Wiles, 2008 ](http://www.elsevier.com/books/no-tech-hacking/mitnick/978-1-59749-215-7 )
* [Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0470639539.html )
* [Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118608577.html )
2014-08-04 17:57:51 +00:00
2014-08-04 14:50:13 +00:00
## Magazines
* [2600: The Hacker Quarterly ](http://www.2600.com/Magazine/DigitalEditions ) - An American publication about technology and computer "underground".
* [Hakin9 ](https://hakin9.org/ ) - A Polish online, weekly publication on IT Security.