Awesome Penetration Testing

A collection of awesome penetration testing resources, tools, confs, books, magazines and other shiny things.

Resources

Penetration Testing

• Metasploit Unleashed - Free Offensive Security metasploit course.

Social Engineering

• Social Engineering Framework - An information resource for social engineers.

Tools

Penetration Testing

• Kali - A Linux distribution designed for digital forensics and penetration testing.
• Metasploit - World's most used penetration testing software.

Social Engineering

• SET - The Social-Engineer Toolkit from TrustedSec

Anonimity

• Tor - The free software for enabling onion routing online anonymity.
• I2P - The Invisible Internet Project

Networks tools

• Network Tools - Different network tools: pink, lookup, whois, etc.

Hex editors

• HexEdit.js - Browser-based hex editing.

Windows utils

• Sysinternals Suite - The Sysinternals Troubleshooting Utilities

Conferences

• DEF CON - An annual hacker convention in Las Vegas.
• Black Hat - An annual security conference in Las Vegas.
• BSides - A framework for organising and holding security conferences.
• CCC - An annual meeting of the international hacker scene in Germany.
• DerbyCon - An annual hacker conference based in Louisville.
• PhreakNIC - A technology conference held annually in middle Tennessee.
• ShmooCon - An annual US east coast hacker convention.
• CarolinaCon - An infosec conference, held annually in North Carolina.
• HOPE - A conference series sponsored by the hacker magazine 2600.
• SummerCon - One of the oldest hacker conventions, held during Summer.
• Hack.lu - An annual conference held in Luxembourg.
• HITB - Deep-knowledge security conference held in Malaysia and The Netherlands.
• Troopers - Annual international IT Security event with workshops held in Heidelberg, Germany.
• Hack3rCon - An annual US hacker conference.
• ThotCon - An annual US hacker conference held in Chicago.
• LayerOne - An annual US security conerence held every spring in Los Angeles.
• DeepSec - Security Conference in Vienna, Austria.
• SkyDogCon - A technology conference in Nashville.

Books

Penetration Testing

• The Art of Exploitation by Jon Erickson, 2008
• Metasploit: The Penetration Tester's Guide by David Kennedy and others, 2011
• Penetration Testing: A Hands-On Introduction to Hacking by Georgia Weidman, 2014

Windows

• Windows Internals by Mark Russinovich, David Solomon, Alex Ionescu

Social Engineering

• The Art of Deception by Kevin D. Mitnick, William L. Simon, 2002
• The Art of Intrusion by Kevin D. Mitnick, William L. Simon, 2005
• Ghost in the Wires by Kevin D. Mitnick, William L. Simon, 2011
• No Tech Hacking by Johnny Long, Jack Wiles, 2008
• Social Engineering: The Art of Human Hacking by Christopher Hadnagy, 2010
• Unmasking the Social Engineer: The Human Element of Security by Christopher Hadnagy, 2014

Magazines

• 2600: The Hacker Quarterly - An American publication about technology and computer "underground".
• Hakin9 - A Polish online, weekly publication on IT Security.