Penetration Testers resources repository to learn, practice and share online

This repository is created to try to accumulate the resources available on the Internet to learn and practice penetration testing and cybersecurity. This repository contains online or offline almost every aspect of penetration testing, whether it is web applications, mobile applications, encryption, cryptography, hardware pen-testing learning material, and labs to practice on those learning. I humbly request the readers to share it with your fellow beings and comment below your repository and suggestion so that we would look at it and include that here.

Must do Vulnhub Machines

Beginners Machines

NameDownload Link
KB-VULN: 3https://www.vulnhub.com/entry/kb-vuln-3,579/
Photographer: 1https://www.vulnhub.com/entry/photographer-1,519/
pWnOS: 2.0 (Pre-Release)https://www.vulnhub.com/entry/pwnos-20-pre-release,34/
Kioptrix: Level 1https://www.vulnhub.com/entry/kioptrix-level-1-1,22/
HOGWARTS: BELLATRIXhttps://www.vulnhub.com/entry/hogwarts-bellatrix,609/
SUMO: 1https://www.vulnhub.com/entry/sumo-1,480/
KB-VULN: 1https://www.vulnhub.com/entry/kb-vuln-1,540/
VULNOS: 2https://www.vulnhub.com/entry/vulnos-2,147/
VULNOS: 1https://www.vulnhub.com/entry/vulnos-1,60/
JIS-CTF: VULNUPLOADhttps://www.vulnhub.com/entry/jis-ctf-vulnupload,228/
RAVEN: 1https://www.vulnhub.com/entry/raven-1,256/
CTF KFIOFAN: 1https://www.vulnhub.com/entry/ctf-kfiofan-1,260/

Intermediate Machines

NameDownload Link
HackDay: Albaniahttps://www.vulnhub.com/entry/hackday-albania,167/
Pluck https://www.vulnhub.com/series/pluck,109/
Kioptrix: Level 1.1 (#2)https://www.vulnhub.com/entry/kioptrix-level-11-2,23/
Kioptrix: Level 1.2 (#3)https://www.vulnhub.com/entry/kioptrix-level-12-3,24/
Tr0ll: 1https://www.vulnhub.com/entry/tr0ll-1%2C100/
So Simplehttps://www.vulnhub.com/entry/so-simple-1,515/
pWnOS: 1.0https://www.vulnhub.com/entry/pwnos-10,33/
Kioptrix: 2014 (#5)https://www.vulnhub.com/entry/kioptrix-2014-5,62/
Holynix: v1https://www.vulnhub.com/entry/holynix-v1,20/
WinterMute: 1https://www.vulnhub.com/entry/wintermute-1,239/
Kvasirhttps://www.vulnhub.com/entry/kvasir-i,106/
Tr0ll: 3https://www.vulnhub.com/entry/tr0ll-3,340/
DEVGURU: 1https://www.vulnhub.com/entry/devguru-1,620/
KB-VULN: 2https://www.vulnhub.com/entry/kb-vuln-2,562/
FOWSNIFF: 1https://www.vulnhub.com/entry/fowsniff-1,262/#download
RAVEN: 2https://www.vulnhub.com/entry/raven-2,269/
FOURANDSIX: 2.01https://www.vulnhub.com/entry/fourandsix-201,266/
Typhoon: 1.02https://www.vulnhub.com/entry/typhoon-102,267/
ROOTTHIS: 1https://www.vulnhub.com/entry/rootthis-1%2C272/

Hard Machines

xerxes: 1https://www.vulnhub.com/entry/xerxes-1,58/
CYBOX: 1.1https://www.vulnhub.com/entry/cybox-1,607/
HA: VEDAShttps://www.vulnhub.com/entry/ha-vedas,587/

OSCP Guides and Journies

Guides

https://oscpnotes.infosecsanyam.in/My_OSCP_Preparation_Notes.html
https://anhtai.me/oscp-fun-guide/
https://web.archive.org/web/20171017213738/https://github.com/frizb/OSCP-Survival-Guide
https://github.com/RustyShackleford221/OSCP-Prep
https://github.com/strongcourage/oscp
https://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/
https://medium.com/@parthdeshani/how-to-pass-oscp-like-boss-b269f2ea99d
https://github.com/areyou1or0/OSCP
https://sushant747.gitbooks.io/total-oscp-guide/content/
https://scund00r.com/all/oscp/2018/02/25/passing-oscp.html
https://acknak.fr/en/articles/oscp-tools/
https://github.com/six2dez/OSCP-Human-Guide
https://gist.github.com/unfo/5ddc85671dcf39f877aaf5dce105fac3
https://github.com/0x4D31/awesome-oscp
https://github.com/codingo/Reconnoitre

Journies

https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html
https://0xdarkvortex.dev/index.php/2018/04/17/31-days-of-oscp-experience/
https://medium.com/@ranakhalil101/my-oscp-journey-a-review-fa779b4339d9
https://medium.com/@infosecsanyam/my-oscp-journey-30-03-2020-48444af3d786
https://noobsec.net/oscp-journey/
http://www.minuszeros.com/my-oscp-journey/
https://infosecuritygeek.com/my-oscp-journey/
https://alex-labs.com/my-oscp-journey/
https://scriptkidd1e.wordpress.com/oscp-journey/
https://www.rustyhacker.net/post/oscp_journey
https://www.secjuice.com/oscp-prep-guidance/
https://h4ck.co/oscp-journey-pwk-course-review/
https://github.com/burntmybagel/OSCP-Prep
https://www.linkedin.com/pulse/my-oscp-journey-nyan-lin-steve/
https://acc3ssp0int.com/tag/oscp-journey/
https://tinyrex.me/The-OSCP-journey.html
https://noobshelly.com/home/another-oscp-blog/
https://fluidattacks.com/web/blog/oscp-journey/

Online pre build free labs for practice

Online boot2root, wargames and other labs

https://lab.pentestit.ru/
https://www.vulnhub.com/
https://www.wechall.net/
https://ctftime.org/
https://microcorruption.com/

Online Web Cross site scripting (XSS) labs

https://prompt.ml/0
https://www.google.com/about/appsecurity/learning/xss/
https://xss-game.appspot.com/
https://alf.nu/alert1
https://xss-quiz.int21h.jp/
http://sudo.co.il/xss/
https://hack.me/t/XSS
https://github.com/cure53/XSSChallengeWiki/wiki

Online Web SQL injections labs

https://www.hacksplaining.com/
https://hack.me/t/SQLi
http://leettime.net/sqlninja.com/
https://www.notsosecure.com/sql-injection-lab/
https://www.vulnspy.com/sqli-labs/

Offline free self build labs resources to practice

Vulnerable Web apps offline

Juice-Shophttps://owasp.org/www-project-juice-shop/
Peruggiahttps://sourceforge.net/projects/peruggia/
WebGoathttp://webappsecmovies.sourceforge.net/webgoat/
Bodgeithttps://github.com/psiinon/bodgeit
DVWAhttp://www.dvwa.co.uk/
bWAPPhttp://www.itsecgames.com/
Vulnerable OS Collectionhttps://github.com/pentesteracademy/vulnoscollection

Vulnerable IOS App offline

DVIAhttp://damnvulnerableiosapp.com/

Vulnerable Android Applications offline

PIVAAhttps://github.com/htbridge/pivaa
Vulnerable app https://github.com/appknox/vulnerable-application
InsecureBankv2https://github.com/dineshshetty/Android-InsecureBankv2
DVHMAhttps://github.com/logicalhacking/DVHMA
Divahttps://github.com/payatu/diva-android
Owasp securityshepherdhttps://github.com/OWASP/SecurityShepherd
owasp uncrackable mobile apphttps://github.com/OWASP/owasp-mstg/tree/master/Crackmes
VulnerableAndroidAppOraclehttps://github.com/dan7800/VulnerableAndroidAppOracle
DodoVulnerableBankhttps://github.com/CSPF-Founder/DodoVulnerableBank
Digitalbankhttps://github.com/CyberScions/Digitalbank
EVABShttps://github.com/abhi-r3v0/EVABS/releases
dvaahttps://code.google.com/archive/p/dvaa/
OWASP-GoatDroid-Projecthttps://github.com/nvisium-jack-mannino/OWASP-GoatDroid-Project

Online Penetration Testing and Ethical Hacking Learning

Articles

Mix Articleshttps://defendtheweb.net
Metasploit guidehttps://www.offensive-security.com/metasploit-unleashed/
Cisco Securityhttps://hackingcisco.blogspot.com/
Mix Articleshttps://www.corelan.be/index.php/articles/
Mix Articleshttp://opensecuritytraining.info/Training.html
Pentesting standardshttp://www.pentest-standard.org/index.php/Main_Page
Secure-Web-Development articleshttp://www.csis.pace.edu/~lchen/sweet/
Mix Articleshttps://nets.ec/Main_Page
CTF and Vulnhub writeupshttps://emaragkos.gr/
Mix Articles and Writeupshttps://www.hackingarticles.in/
Network security articleshttp://resources.intenseschool.com/articles/
Web and security news articleshttps://portswigger.net/
Security for Developershttps://www.hacksplaining.com/
OWASP for mobile websitehttps://owasp.org/www-project-mobile-security/
OWASP for web websitehttps://owasp.org/
List of famous hacking toolshttps://sectools.org/

Videos

Infosec videos

Mix infosec videos and articleshttp://www.irongeek.com/
Mix infosec videoshttp://www.securitytube.net/
Metasploit videoshttp://www.securitytube.net/groups?operation=view&groupId=10
WiFi Pentesting videoshttp://www.securitytube.net/groups?operation=view&groupId=9
Exploit research videoshttp://www.securitytube.net/groups?operation=view&groupId=7
Windows Assembly languagehttp://www.securitytube.net/groups?operation=view&groupId=6
Linux Assembly Languagehttp://www.securitytube.net/groups?operation=view&groupId=5
Linux Buffer Overflowhttp://www.securitytube.net/groups?operation=view&groupId=4
Format String Vulnerabilitieshttp://www.securitytube.net/groups?operation=view&groupId=3
Router Hackinghttp://www.securitytube.net/groups?operation=view&groupId=1
IPPSEC Vulnerable machines video solutionshttps://www.youtube.com/c/ippsec/featured

Learn Python language coding

freeCodeCamp.orghttps://www.youtube.com/channel/UC8butISFwT-Wl7EV0hUK0BQ
Programming with Moshhttps://www.youtube.com/playlist?list=PLTjRvDozrdlxj5wgH4qkvwSOdHLOCx10f
edureka!https://www.youtube.com/playlist?list=PL9ooVrP1hQOHY-BeYrKHDrHKphsJOyRyu
Python in Hindihttps://www.youtube.com/watch?v=ihk_Xglr164
Python in Hindihttps://www.youtube.com/watch?v=RAwntanK4wQ&list=PLwgFb6VsUj_lQTpQKDtLXKXElQychT_2j

Learn Cryptography

Cryptography For Beginnershttps://www.youtube.com/watch?v=cqgtdkURzTE
Cryptography & Network Security Hindihttps://www.youtube.com/watch?v=9X1rSWLFhLY&list=PL9FuOtXibFjV77w2eyil4Xzp8eooqsPp8
edureka!https://www.youtube.com/watch?v=5jpgMXt1Z9Y
Cryptography: Crash Course Computer Science #33https://www.youtube.com/watch?v=jhXCTbFnK8o
cryptography tutorialhttps://www.youtube.com/watch?v=hizBOt3n2sc&list=PL2jykFOD1AWb07OLBdFI2QIHvPo3aTTeu
Shafi Goldwasser: Cryptography & Machine Learning: Past and Futurehttps://www.youtube.com/watch?v=bMJtCe1aK0w

Important Infosec Youtube channels

DEFCONConferencehttps://www.youtube.com/user/DEFCONConference/videos
LiveOverflowhttps://www.youtube.com/c/LiveOverflowCTF/videos
Black Hathttps://www.youtube.com/c/BlackHatOfficialYT/videos
HackerSploithttps://www.youtube.com/c/HackerSploit/videos 
RSA Conferencehttps://www.youtube.com/c/BlackHatOfficialYT/videos
Webpwnizedhttps://www.youtube.com/c/webpwnized/videos

Leave a Reply

Your email address will not be published. Required fields are marked *

Send us Query
close slider