2014-08-04 18:29:52 +00:00
## Awesome Penetration Testing
2014-08-03 23:13:53 +00:00
2014-08-03 23:39:09 +00:00
2014-08-04 22:14:01 +00:00
A collection of awesome penetration testing resources, tools, books, , confs, magazines and other shiny things.
2014-08-04 17:29:04 +00:00
2014-08-04 21:32:07 +00:00
- [Awesome Penetration Testing ](#awesome-penetration-testing )
2014-08-04 21:28:22 +00:00
- [Online Resources ](#online-resources )
2014-08-04 21:32:07 +00:00
- [Penetration Testing Resources ](#penetration-testing-resources )
- [Social Engineering Resources ](#social-engineering-resources )
2014-08-04 21:28:22 +00:00
- [Tools ](#tools )
2014-08-04 21:32:07 +00:00
- [Penetration Testing Tools ](#penetration-testing-tools )
2014-08-04 22:10:15 +00:00
- [Vulnerability Scanners ](#vulnerability-scanners )
2014-08-04 22:11:50 +00:00
- [Network Tools ](#network-tools )
2014-08-04 22:10:15 +00:00
- [Hex Editors ](#hex-editors )
- [Windows Utils ](#windows-utils )
- [DDoS Tools ](#ddos-tools )
- [Social Engineering Tools ](#social-engineering-tools )
- [Anonimity Tools ](#anonimity-tools )
- [Reverse Engineering Tools ](#reverse-engineering-tools )
2014-08-04 21:28:22 +00:00
- [Books ](#books )
2014-08-04 22:10:15 +00:00
- [Penetration Testing Books ](#penetration-testing-books )
- [Hackers Handbook Series ](#hackers-handbook-series )
- [Network Analysis Books ](#network-analysis-books )
- [Reverse Engineering Books ](#reverse-engineering-books )
- [Malware Analysis Books ](#malware-analysis-books )
- [Windows Books ](#windows-books )
- [Social Engineering Books ](#social-engineering-books )
- [Information Security Conferences ](#information-security-conferences )
- [Information Security Magazines ](#information-security-magazines )
2014-08-04 23:02:50 +00:00
- [Awesome Lists ](#awesome-lists )
2014-08-04 22:10:15 +00:00
- [Contribution ](#contribution )
2014-08-04 21:28:22 +00:00
- [License ](#license )
### Online Resources
#### Penetration Testing Resources
2014-08-04 18:26:20 +00:00
* [Metasploit Unleashed ](http://www.offensive-security.com/metasploit-unleashed/ ) - Free Offensive Security metasploit course.
2014-08-04 18:28:29 +00:00
2014-08-04 23:45:23 +00:00
* [Shell Scripting ](http://www.freeos.com/guides/lsst/ ) - Linux Shell Scripting Tutorial
2014-08-04 21:28:22 +00:00
#### Social Engineering Resources
2014-08-04 17:43:26 +00:00
* [Social Engineering Framework ](http://www.social-engineer.org/framework/ ) - An information resource for social engineers.
2014-08-04 14:50:13 +00:00
2014-08-04 18:29:52 +00:00
### Tools
2014-08-04 21:28:22 +00:00
#### Penetration Testing Tools
2014-08-04 18:26:20 +00:00
* [Kali ](http://www.kali.org/ ) - A Linux distribution designed for digital forensics and penetration testing.
* [Metasploit ](http://www.metasploit.com/ ) - World's most used penetration testing software.
2014-08-04 23:02:50 +00:00
* [Burp ](http://portswigger.net/burp/ ) - An integrated platform for performing security testing of web applications.
2014-08-04 18:28:29 +00:00
2014-08-04 20:55:09 +00:00
#### Vulnerability Scanners
* [Nexpose ](https://www.rapid7.com/products/nexpose/ ) - Vulnerability Management & Risk Management Software.
* [Nessus ](http://www.tenable.com/products/nessus ) - Vulnerability, configuration, and compliance assessment.
* [OpenVAS ](http://www.openvas.org/ ) - Open Source vulnerability scanner and manager.
* [w3af ](https://github.com/andresriancho/w3af ) - Web application attack and audit framework.
2014-08-04 18:28:29 +00:00
2014-08-04 21:28:22 +00:00
#### Networks Tools
2014-08-04 18:37:54 +00:00
* [nmap ](http://nmap.org/ ) - Free Security Scanner For Network Exploration & Security Audits.
* [tcpdump/libpcap ](http://www.tcpdump.org/ ) - A common packet analyzer that runs under the command line.
* [Wireshark ](http://www.wireshark.org/ ) - A network protocol analyzer for Unix and Windows.
2014-08-04 15:22:43 +00:00
* [Network Tools ](http://network-tools.com/ ) - Different network tools: pink, lookup, whois, etc.
2014-08-04 18:28:29 +00:00
2014-08-04 21:28:22 +00:00
#### Hex Editors
2014-08-04 20:55:09 +00:00
* [HexEdit.js ](http://hexed.it/ ) - Browser-based hex editing.
2014-08-04 21:28:22 +00:00
#### Windows Utils
2014-08-04 20:55:09 +00:00
* [Sysinternals Suite ](http://technet.microsoft.com/en-us/sysinternals/bb842062 ) - The Sysinternals Troubleshooting Utilities
2014-08-04 21:28:22 +00:00
#### DDoS Tools
2014-08-04 20:55:09 +00:00
* [LOIC ](https://github.com/NewEraCracker/LOIC/ ) - An open source network stress tool for Windows.
* [JS LOIC ](http://metacortexsecurity.com/tools/anon/LOIC/LOICv1.html ) - JavaScript in-browser version of LOIC.
2014-08-04 21:28:22 +00:00
#### Social Engineering Tools
2014-08-04 20:55:09 +00:00
* [SET ](https://github.com/trustedsec/social-engineer-toolkit ) - The Social-Engineer Toolkit from TrustedSec
2014-08-04 21:28:22 +00:00
#### Anonimity Tools
2014-08-04 20:55:09 +00:00
* [Tor ](https://www.torproject.org/ ) - The free software for enabling onion routing online anonymity.
* [I2P ](https://geti2p.net ) - The Invisible Internet Project
2014-08-04 21:28:22 +00:00
#### Reverse Engineering Tools
2014-08-04 19:36:04 +00:00
* [IDA Pro ](https://www.hex-rays.com/products/ida/ ) - A Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger.
* [WDK/WinDbg ](http://msdn.microsoft.com/en-us/windows/hardware/hh852365.aspx ) - Windows Driver Kit and WinDbg.
* [OllyDbg ](http://www.ollydbg.de/ ) - An x86 debugger that emphasizes binary code analysis
2014-08-04 18:28:29 +00:00
2014-08-04 18:29:52 +00:00
### Books
2014-08-04 21:28:22 +00:00
#### Penetration Testing Books
2014-08-04 18:26:20 +00:00
* [The Art of Exploitation by Jon Erickson, 2008 ](http://www.nostarch.com/hacking2.htm )
* [Metasploit: The Penetration Tester's Guide by David Kennedy and others, 2011 ](http://www.nostarch.com/metasploit )
* [Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman, 2014 ](http://www.nostarch.com/pentesting )
2014-08-04 19:11:49 +00:00
* [Rtfm: Red Team Field Manual by Ben Clark, 2014 ](http://www.amazon.com/Rtfm-Red-Team-Field-Manual/dp/1494295504/ )
* [The Hacker Playbook by Peter Kim, 2014 ](http://www.amazon.com/The-Hacker-Playbook-Practical-Penetration/dp/1494932636/ )
2014-08-04 23:02:50 +00:00
* [The Basics of Hacking and Penetration Testing by Patrick Engebretson, 2013 ](https://www.elsevier.com/books/the-basics-of-hacking-and-penetration-testing/engebretson/978-1-59749-655-1 )
* [Professional Penetration Testing by Thomas Wilhelm, 2013 ](https://www.elsevier.com/books/professional-penetration-testing/wilhelm/978-1-59749-993-4 )
* [Advanced Penetration Testing for Highly-Secured Environments by Lee Allen,2012 ](http://www.packtpub.com/advanced-penetration-testing-for-highly-secured-environments/book )
2014-08-04 18:49:17 +00:00
* [Violent Python by TJ O'Connor, 2012 ](http://www.elsevier.com/books/violent-python/unknown/978-1-59749-957-6 )
2014-08-04 21:32:07 +00:00
#### Hackers Handbook Series
* [The Shellcoders Handbook by Chris Anley and others, 2007 ](http://wiley.com/WileyCDA/WileyTitle/productCd-047008023X.html )
* [The Web Application Hackers Handbook by D. Stuttard, M. Pinto, 2011 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118026470.html )
* [iOS Hackers Handbook by Charlie Miller and others, 2012 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118204123.html )
* [Android Hackers Handbook by Joshua J. Drake and others, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-111860864X.html )
* [The Browser Hackers Handbook by Wade Alcorn and others, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118662091.html )
2014-08-04 19:05:33 +00:00
2014-08-04 21:28:22 +00:00
#### Network Analysis Books
2014-08-04 18:49:17 +00:00
* [Nmap Network Scanning by Gordon Fyodor Lyon, 2009 ](http://nmap.org/book/ )
2014-08-04 19:38:17 +00:00
* [Practical Packet Analysis by Chris Sanders, 2011 ](http://www.nostarch.com/packet2.htm )
2014-08-04 18:49:17 +00:00
* [Wireshark Network Analysis by by Laura Chappell, Gerald Combs, 2012 ](http://www.wiresharkbook.com/ )
2014-08-04 18:28:29 +00:00
2014-08-04 21:28:22 +00:00
#### Reverse Engineering Books
2014-08-04 19:36:04 +00:00
* [The IDA Pro Book by Chris Eagle, 2011 ](http://www.nostarch.com/idapro2.htm )
* [Practical Reverse Engineering by Bruce Dang and others, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118787315.html )
2014-08-04 21:28:22 +00:00
#### Malware Analysis Books
2014-08-04 19:36:04 +00:00
* [Practical Malware Analysis by Michael Sikorski, Andrew Honig, 2012 ](http://www.nostarch.com/malware )
* [The Art of Memory Forensics by Michael Hale Ligh and others, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118825098.html )
2014-08-04 21:28:22 +00:00
#### Windows Books
2014-08-04 17:57:51 +00:00
* [Windows Internals by Mark Russinovich, David Solomon, Alex Ionescu ](http://technet.microsoft.com/en-us/sysinternals/bb963901.aspx )
2014-08-04 18:28:29 +00:00
2014-08-04 21:28:22 +00:00
#### Social Engineering Books
2014-08-04 17:29:04 +00:00
* [The Art of Deception by Kevin D. Mitnick, William L. Simon, 2002 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0471237124.html )
* [The Art of Intrusion by Kevin D. Mitnick, William L. Simon, 2005 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0764569597.html )
* [Ghost in the Wires by Kevin D. Mitnick, William L. Simon, 2011 ](http://www.hachettebookgroup.com/titles/kevin-mitnick/ghost-in-the-wires/9780316134477/ )
* [No Tech Hacking by Johnny Long, Jack Wiles, 2008 ](http://www.elsevier.com/books/no-tech-hacking/mitnick/978-1-59749-215-7 )
* [Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010 ](http://wiley.com/WileyCDA/WileyTitle/productCd-0470639539.html )
* [Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014 ](http://wiley.com/WileyCDA/WileyTitle/productCd-1118608577.html )
2014-08-04 23:02:50 +00:00
#### Lock Picking
* [Practical Lock Picking by Deviant Ollam, 2012 ](https://www.elsevier.com/books/practical-lock-picking/ollam/978-1-59749-989-7 )
* [Keys to the Kingdom by Deviant Ollam, 2012 ](https://www.elsevier.com/books/keys-to-the-kingdom/ollam/978-1-59749-983-5 )
2014-08-04 17:57:51 +00:00
2014-08-04 21:28:22 +00:00
### Information Security Conferences
* [DEF CON ](https://www.defcon.org/ ) - An annual hacker convention in Las Vegas.
* [Black Hat ](http://www.blackhat.com/ ) - An annual security conference in Las Vegas.
* [BSides ](http://www.securitybsides.com/ ) - A framework for organising and holding security conferences.
* [CCC ](http://events.ccc.de/congress/ ) - An annual meeting of the international hacker scene in Germany.
* [DerbyCon ](https://www.derbycon.com/ ) - An annual hacker conference based in Louisville.
* [PhreakNIC ](http://phreaknic.info/ ) - A technology conference held annually in middle Tennessee.
* [ShmooCon ](http://www.shmoocon.org/ ) - An annual US east coast hacker convention.
* [CarolinaCon ](http://www.carolinacon.org/ ) - An infosec conference, held annually in North Carolina.
* [HOPE ](http://hope.net/ ) - A conference series sponsored by the hacker magazine 2600.
* [SummerCon ](http://www.summercon.org/ ) - One of the oldest hacker conventions, held during Summer.
* [Hack.lu ](http://hack.lu/ ) - An annual conference held in Luxembourg.
* [HITB ](http://conference.hitb.org/ ) - Deep-knowledge security conference held in Malaysia and The Netherlands.
* [Troopers ](https://www.troopers.de ) - Annual international IT Security event with workshops held in Heidelberg, Germany.
* [Hack3rCon ](http://hack3rcon.org/ ) - An annual US hacker conference.
* [ThotCon ](http://thotcon.org/ ) - An annual US hacker conference held in Chicago.
* [LayerOne ](http://www.layerone.org/ ) - An annual US security conerence held every spring in Los Angeles.
* [DeepSec ](https://deepsec.net/ ) - Security Conference in Vienna, Austria.
* [SkyDogCon ](http://www.skydogcon.com/ ) - A technology conference in Nashville.
### Information Security Magazines
2014-08-04 14:50:13 +00:00
* [2600: The Hacker Quarterly ](http://www.2600.com/Magazine/DigitalEditions ) - An American publication about technology and computer "underground".
2014-08-04 20:57:20 +00:00
* [Hakin9 ](https://hakin9.org/ ) - A Polish online, weekly publication on IT Security.
2014-08-04 23:02:50 +00:00
### Awesome Lists
* [C/C++ Programming ](https://github.com/fffaraz/awesome-cpp ) - One of the main language for open source security tools.
2014-08-04 23:45:23 +00:00
* [.NET Programming ](https://github.com/quozd/awesome-dotnet ) - A software framework for Microsoft Windows platform development.
* [Shell Scripting ](https://github.com/alebcay/awesome-shell ) - Command-line frameworks, toolkits, guides and gizmos.
* [Ruby Programming by @dreikanter ](https://github.com/dreikanter/ruby-bookmarks ) - The de-facto language for writing exploits.
* [Ruby Programming by @markets ](https://github.com/markets/awesome-ruby ) - The de-facto language for writing exploits.
* [Ruby Programming by @Sdogruyol ](https://github.com/Sdogruyol/awesome-ruby ) - The de-facto language for writing exploits.
* [JavaScript Programming ](https://github.com/sorrycc/awesome-javascript ) - In-browser developpment and scripting.
* [Node.js Programming by @sindresorhus ](https://github.com/sindresorhus/awesome-nodejs ) - JavaScript in command-line.
* [Node.js Programming by @vndmtrx ](https://github.com/vndmtrx/awesome-nodejs ) - JavaScript in command-line.
* [Python tools for penetration testers ](http://www.dirk-loss.de/python-tools.htm ) - Lots of pentesting tools are written in Python.
* [Python Programming by @svaksha ](https://github.com/svaksha/pythonidae ) - General Python programming.
* [Python Programming by @vinta ](https://github.com/vinta/awesome-python ) - General Python programming.
* [Andorid Security ](https://github.com/ashishb/android-security-awesome ) - A collection of android security related resources.
* [Awesome Awesomness ](https://github.com/bayandin/awesome-awesomeness ) - The List of the Lists.
2014-08-04 23:02:50 +00:00
2014-08-04 21:01:19 +00:00
### Contribution
2014-08-04 21:03:27 +00:00
Your contributions and suggestions are heartily♥ welcome. (✿◕‿◕)
2014-08-04 21:01:19 +00:00
2014-08-04 20:57:20 +00:00
### License
[![Creative Commons License ](http://i.creativecommons.org/l/by/4.0/88x31.png )](http://creativecommons.org/licenses/by/4.0/)
This work is licensed under a [Creative Commons Attribution 4.0 International License ](http://creativecommons.org/licenses/by/4.0/ ).