hacking-resources.md

TOC

• Tools

  • Networking
  • Bluetooth
  • Pentesting Frameworks
  • DNS
  • ARP
  • Web Application Hacking
  • Brute Forcing
  • FTP
  • Routers
  • Printers
  • XSS
  • SQL
  • Social Engineering
  • SSL
  • RE
  • Analysis
  • Git
  • Other
  • Backdoors
  • RFID / NFC
  • Fuzzers / Scanners
  • Prvilege Escalation Scanners
  • Cracking
  • Collections
  • Rootkits
  • Red Team Scripts / Utils
  • Emulators
  • Mobile - iOS
  • Mobile - Android

• Informational Online Resources

  • General
  • APIs
  • Username / Password / Word / Default lists

• Bug Bounty Programs

  • HackerOne
  • BugCrowd
  • FireBounty

• How-to's

  • Stack exploitation
  • Heap exploitation
  • Kernel exploitation

• Challenges

  • RE

• CTFs

  • Hosts
  • Walkthroughs
  • Vulnerable VMs

• Books / PDFs

  • Discrete Mathematics
  • Algorithms
  • OS Concept and Design
  • Programming
  • Security
  • Other

Tools

Networking

• Wifite
• Inject and spy on wifi users
• Wifijammer
• Kismet
• Mitmproxy (man in the middle tool)
• Net credential sniffer
• Sniffer Packet Trace Parser for TCP, SMTP Emails, and HTTP Cookies
• Sparta (network infrastructure pen testing)
• CyberScan
• Aircrack-ng (wifi security auditing tool suite)
• Netcat
• Wireshark
• MDK3
• PixieWPS - wps bruteforcing
• Fluxion - WPA MITM
• wifiphisher - rogue access point framework
• pig - network packet crafting utility
• scapy - interactive packet maniupulation library

Bluetooth

• Blue Hydra
• BlueZ

Penetration testing frameworks

• Metasploit
• BeEF - Browser explotation framework
• Empire
• PowerSploit - PowerShell post exploitation

DNS

• DNS / subdomain enumaration
• Dnssearch

ARP

• Arpspoof
• Ettercap
• Bettercap

Web Application Hacking

• Admin panel finder
• Burp Suite
• Filebuster (web fuzzer)
• WPForce

Brute Forcing

• Brutespray
• BruteX (automatically brute all services running on target)

FTP

• Ftp-fuzz (ftp fuzzer)
• Ftpscout (ftp)

Routers

• Router exploitation

Printers

• PRET (printer exploitation toolkit)

XSS

• XSS spider (66/66 owasp vulns used)

SQL

• Sqlmap (sql injection testing)

Social Engineering

• Social Engineering Toolkit
• Maltego - interactive data mining tool that renders directed graphs for link analysis
• Recon-NG - full featured web reconnassiance framework

SSL

• A2sv (ssl vulnerability scanner)
• SSLStrip
• SSLSniff - automated MITM on SSL connections
• SSLSplit

RE

• Androguard - Reverse engineer Android applications
• Apk2Gold - Yet another Android decompiler
• ApkTool - Android Decompiler
• Barf - Binary Analysis and Reverse engineering Framework
• BinUtils - Collection of binary tools
• BinWalk - Analyze, reverse engineer, and extract firmware images.
• Boomerang - Decompile x86 binaries to C
• Voltron - Debugger enhancements
• Radare2 - unix-like reverse engineering framework and commandline tools
• GEF - GDB Enhanced Features
• SMAP - Shellcode Mapper
• Cutter - Radare2 QT GUI
• MSFvenom
• pwntools
• Unicorn - CPU emulator
• OllyDBG v1/2 - assembler level debugger
• ROP Gadget
• DLL Injector

Analysis

• Angr - platform-agnostic binary analysis framework
• Binary Ninja - Binary analysis framework
• Sniffer (Packet Trace Parser for TCP, SMTP Emails, and HTTP Cookies)
• Tcpdump (networking packet analyzer)
• NFdump (networking flow analysis)
• binwalk - firmware analysis tool
• stoq
• volatility - advanced memory analysis framekwork

Git

• Githack
• Gitrob (finding sensitive information on github)
• GitHarvester

Other

• Datasploit (gather information about a domain)
• Evercookie (persistent cookies)
• Random Insecure VM Generator

RFID / NFC

• Magspoof (magstrip spoofer)

Backdoors

• Poisontap (persistent backdoor via usb dropper)

Fuzzers / Scanners

• wpscan
• Findsploit
• Sn1p3r
• Google dork vulnerability scan
• Fast-recon (google / pastebin dorking)
• Striker (information and vulnerability recon)
• theHarvester
• Sparta (network infrastructure pen testing)
• Autopwn (automatically run vuln tests against host)
• CyberScan
• ShodanHat
• SearchSploit
• nmap vulnerability scanning
• nmap vulnerability scanning scripts
• masscan
• httrack - website copier
• Kadimus - LFI scanner

Privilege escalation scanners

• PrivEsc (collection of linux and windows priv esc vulns)

Cracking

• Hashcat - World's fastest and most advanced password recovery utility
• John The Ripper - A password cracker available for many distros of linux
• THC hydra - login cracker
• Ophcrack - Windows password cracked based on rainbow tables
• dCode.fr
• cryptii.com

Collections

• Pentest scripts
• 1N3/Exploits

Rootkits

• Nurupo Rootkit (kver 4.4.0 and 2.6.32)
• Reptile (Linux LKM kver 2.6.x/3.x/4.x)
• Ghost In The Shell - Persistant backdoor crafting
• Diamorphine kver 2.6.x/3.x/4.x (x86 and x86_64)
• suterusu - 2.6/3.x on x86(_64), and ARM)

Red Team Scripts

• Threat Express

Recon

• IntRec-Pack

Informational resources

General

• Generic Security Resources

APIs

• API security checklists

Username / Password / Word / Default lists

• Wordlist
• Default-Credentials
• defaultpassword.com
• SecLists/Passwords
• CeWL - (Wordlist generator)
• CrackStation wordlists

Neural Networks

• Darknet Neural Network

Emulators

• Metasploit Vulnerability Emulator

Mobile

iOS

Android

• MobSF
• ApkAnalyzer
• QARK
• DECAF
• smali

Challenges

RE

• 0x00sec

How-to write-ups

Exploitation

Stack

• ret2libc
• remote exploit - shellcode without sockets
• x64 ROP
• Smashing the Stack for Fun and Profit

Heap

• fastbin attack
• UAF (use after free)

Kernel

• Dereferencing a NULL pointer

CTFs

Hosts

• CTF365
• RHme3
• Hacking-Lab
• Practical Pentest Labs

Walkthroughs

• 0x00sec
• picoCTF - bypassing ASLR via format string bug
• Azeria labs ARM exploitation

Vulnerable VM sources

• vulnhub
• Metasploitable

Books / PDFs

Discrete Mathematics

• Concrete Mathematics

Algorithms

• The Algorithm Design Manual

OS Concepts and Design

• Design Patterns: Elements of Reusable Object-Oriented Software

Programming

C/C++

• Effective C++
• More Effective C++
• The Linux Programming Interface

Assembly

• The Art of Assembly Language
• Introduction to 64 Bit Intel Assembly Language Programming for Linux: Second Edition

Perl

• Learning Perl
• Intermediate Perl
• Mastering Perl

Security

Analysis & Forensics

• Practical Forensic Imaging
• Practical Malware Analysis
• Malware Analyst's Cookbook
• The Art of Memory Forensics
• Fuzzing for Software Security
• Art of Software Security Assessment

Reverse Engineering

• Hacking: The Art of Exploitation
• Practical Reverse Engineering
• Reversing: Secrets of Reverse Engineering
• Reverse Engineering for Beginners
• The IDA Pro Book
• Gray Hat Hacking
• The Antivirus Hacker's Handbook
• The Rootkit Arsenal
• Windows Internals Part 1 Part 2
• Inside Windows Debugging
• iOS Reverse Engineering

CVE sources

• Linux Kernel CVEs

Other

• Code: The Hidden Language of Computer Hardware and Software
• The GNU Make Book

Onions

• Fresh Onions