cyber-security-resources/programming_and_scripting_for_cybersecurity/basic_programming_resources.md

Basic Programming Resources and Tutorials

Python

• Awesome Python - GitHub Repo
• Python Tutorials in W3 Schools
• Full Stack Python
• Python Cheatsheet
• Real Python
• The Hitchhiker’s Guide to Python
• Ultimate Python study guide
• Python @LibHunt
• Python ZEEF
• Pythonic News
• What the f*ck Python!

Bash and other Linux Shells

• Awesome Shell
• Bash One-Liners - A collection of practical or just pure awesome bash one-liners (repos by @janosgyerik)
• commandlinefu - A repository for the most elegant and useful UNIX commands
• Stack Overflow - Bash tag on Stack Overflow
• /r/Bash - A subreddit dedicated to bash scripting
• /r/CommandLine - for anything regarding the command line, in any operating system
• #bash IRC Channel
• The Bash-Hackers Wiki - Human-readable documentation of any kind about GNU Bash
• Bash beginner's mistakes (by the Bash-Hackers Wiki)
• Bash Guide - A bash guide for beginners. (by Lhunath)
• Bash FAQ - Answers most of your questions (by Lhunath)
• Bash Pitfalls - Lists the common pitfalls beginners fall into, and how to avoid them
• Bash manual - Bourne-Again Shell manual
• Bash FAQ (by Chet Ramey)
• Advanced Bash-Scripting Guide - An in-depth exploration of the art of shell scripting
• Bash Guide for Beginners (by Machtelt Garrels)
• Bash Programming - Intro/How-to
• bash-handbook - A handbook for those who want to learn Bash without diving in too deeply
• Google's Shell Style Guide - Reasonable advice about code style
• Sobell's Book - A practical guide to commands, editors, and shell programming
• WikiBooks: Bash Shell Scripting
• Use the Unofficial Bash Strict Mode (Unless You Looove Debugging)
• learnyoubash - An interactive workshopper which will teach you how to use the terminal and write your the first Bash script.
• Defensive BASH Programming - Methods to defend your programs from breaking as well as keeping the code tidy and clean.
• Pure Bash Bible - A collection of pure bash alternatives to external processes.

PowerShell

• PowerShell.org - Forums, summits, community blog posts, and more.
• /r/PowerShell - Reddit PowerShell community.
• Slack PowerShell team - Large chat room dedicated to PowerShell. Bridged with #PowerShell on irc.freenode.net.
• Research Triangle PowerShell User Group - Very active PowerShell and automation user group. Meets on first and third Wednesdays. All skill levels welcome.
• platyPS - Write PowerShell External Help in Markdown.
• Invoke-CreateModuleHelpFile - PowerShell function to create a HTML help file for a module and all it's commands.
• PScribo - PowerShell documentation framework what can create HTML, Word, text files based on PowerShell-based DSL (domain specific language).
• PSKoans - A simple, fun, and interactive way to learn the PowerShell language through Pester unit testing.
• Jupyter-PowerShell - Jupyter Kernel for PowerShell.
• PowerScripting - Weekly show run by Jon Walz and Hal Rottenberg.
• The PowerShell News Podcast - This podcast is the latest news on PowerShell.
• File System Security - Allows a much easier management of permissions on files and folders.
• PowerShellArsenal - Module used to aid a reverse engineer.
• PowerTools - Collection of projects with a focus on offensive operations.
• PowerForensics - Popular live disk forensics platform for windows.
• PowerSploit - Post-exploitation framework.
• PowerShellEmpire - Post-exploitation agent.
• PSReflect - Easily define in-memory enums, structs, and Win32 functions in PowerShell. Useful for attacks, example.
• BloodHound - Easily identify highly complex attack paths that would otherwise be impossible to quickly identify.
• Nishang - Enables scripting for red team, penetration testing, and offensive security.
• Harness - Interactive remote PowerShell Payload.
• Invoke-Obfuscation - PowerShell Obfuscator.
• p0wnedShell - PowerShell Runspace Post Exploitation Toolkit.
• PESecurity - Module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
• Powershellery - Powershell scripts used for general hackery.
• PowerUpSQL - Toolkit for Attacking SQL Server.
• Getting Started With PowerShell 3.0 Jump Start - Jump starts series are for IT professionals with no previous experience with PowerShell, and want to learn it fast.
• Advanced Tools & Scripting with PowerShell 3.0 - IT pros, take this advanced PowerShell course to find out how to turn your real time management and automation scripts into useful reusable tools and cmdlets.
• What's New in PowerShell v5 - Through description on some of the exciting new features in PowerShell version 5.0.
• PowerShell Open Source Project - Collection of videos thoroughly demonstrate how PowerShell open source project runs on Linux.
• PowerShell on Linux and Open Source - Brief introduction to PowerShell open source project and how it runs on Linux.
• PowerShell - This show will include videos talking about the PowerShell automation platform, Desired State Configuration (DSC), infrastructure as code, and related concepts!! These videos are created by Trevor Sullivan, a Microsoft MVP for Windows PowerShell.
• Learn Windows PowerShell in a Month of Lunches - Don Jones - Video companion to the book of the same title.
• Best Practices for Script Design - Don Jones - Don Jones discusses script design principles and best practices.
• PowerShell Toolmaking (1 of 3) - Don Jones - Toolmaking (1 of 3) - Don Jones.
• PowerShell Toolmaking (2 of 3) - Don Jones - Toolmaking (2 of 3) - Don Jones.
• PowerShell Toolmaking (3 of 3) - Don Jones - Toolmaking (3 of 3) - Don Jones.
• Sophisticated Techniques of Plain Text Parsing - Tobias Weltner - Great reference for text parsing.
• Monad Manifesto Revisited - Jeffrey Snover - Jeffrey Snover reflects on the beginnings of the language and where it's going.
• AD Forensics with PowerShell - Ashley McGlone - A lot of AD related scripting and analysis techniques.
• Windows PowerShell What's New in V2 - SAPIEN - Old but gold. Most of this is still very relevant.
• All Things Microsoft PowerShell - Another general language reference.
• Research Triangle PowerShell User Group YouTube Channel - large catalog of user group meetings and demos by community members. 150+ hours of content.

JavaScript

• W3 Schools JavaScript Tutorials
• Awesome JavaScript
• DevDocs is an all-in-one API documentation reader with a fast, organized, and consistent interface.
• dexy is a free-form literate documentation tool for writing any kind of technical document incorporating code.
• docco is a quick-and-dirty, hundred-line-long, literate-programming-style documentation generator.
• styledocco generates documentation and style guide documents from your stylesheets.
• Ronn builds manuals. It converts simple, human readable textfiles to roff for terminal display, and also to HTML for the web.
• dox is a JavaScript documentation generator written with node. Dox no longer generates an opinionated structure or style for your docs, it simply gives you a JSON representation, allowing you to use markdown and JSDoc-style tags.
• jsdox is a JSDoc3 to Markdown documentation generator.
• ESDoc is a good documentation generator for JavaScript.
• YUIDoc is a Node.js application that generates API documentation from comments in source, using a syntax similar to tools like Javadoc and Doxygen.
• coddoc is a jsdoc parsing library. Coddoc is different in that it is easily extensible by allowing users to add tag and code parsers through the use of coddoc.addTagHandler and coddoc.addCodeHandler. coddoc also parses source code to be used in APIs.
• sphinx a tool that makes it easy to create intelligent and beautiful documentation
• Using JSDoc
• Beautiful docs is a documentation viewer based on markdown files.
• documentation.js - API documentation generator with support for ES2015+ and flow annotation.
• jsduck - API documentation generator made for Sencha JavaScript frameworks, but can be used for other frameworks too.
• codecrumbs is a visual tool for learning and documenting a codebase by putting breadcrumbs in source code.
• DOMPurify - A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
• js-xss - Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist.
• xss-filters - Secure XSS Filters by Yahoo.
• sanitize-html - sanitize-html provides a simple HTML sanitizer with a clear API.
• intro.js - A better way for new feature introduction and step-by-step users guide for your website and project.
• shepherd - Guide your users through a tour of your app.
• bootstrap-tour - Quick and easy product tours with Twitter Bootstrap Popovers.
• tourist - Simple, flexible tours for your app.
• chardin.js - Simple overlay instructions for your apps.
• pageguide - An interactive guide for web page elements using jQuery and CSS3.
• hopscotch - A framework to make it easy for developers to add product tours to their pages.
• joyride - jQuery feature tour plugin.
• focusable - Set a spotlight focus on DOM element adding a overlay layer to the rest of the page.
• driver.js - Powerful yet light-weight, vanilla JavaScript engine to drive the user's focus across the page
• JavaScript Air - The live video broadcast podcast all about JavaScript and the Web platform.
• Web of Tomorrow - Podcast about JavaScript for beginners.
• JavaScript Jabber - A weekly podcast about JavaScript, including Node.js, Front-End Technologies, Careers, Teams and more.

Ruby

• Awesome Ruby @LibHunt - Your go-to Ruby Toolbox. The Awesome Ruby collection + ordering by popularity, additional metadata and comparisons.
• GitHub Trending - Find what repositories the GitHub community is most excited about today.
• Open Source Rails - A gallery of the best open source rack and Ruby on Rails web applications.
• Ruby Bookmarks - Ruby and Ruby on Rails bookmarks collection.
• RubyDaily - Community driven news.
• RubyFlow - Ruby Programming Community Link Blog.
• Ruby Land - A well maintained Ruby/Rails aggregator that contains news, opinions, tutorials, and more.
• Ruby Rogues - Weekly panel discussion about programming, primarily in Ruby.
• Ruby Weekly - A free, once–weekly e-mail round-up of Ruby news and articles.
• The Ruby Bibliography - Research papers about Ruby.
• The Ruby Toolbox - A comprehensive catalog of Ruby and Rails plug-ins, gems, tools and resources for Ruby developers with popularity ratings based on GitHub watchers and Gem downloads.