Pat13nt0 Pentesting Recources Save

Free-resources to learn Pentesting

Note: This Repo will be Frequently Updated

linux

https://linuxjourney.com/
https://linuxsurvival.com/linux-tutorial-introduction/
https://training.linuxfoundation.org/resources/?_sft_content_type=free-course
https://opensource.com/resources/linux
https://www.youtube.com/watch?v=ZtqBQ68cfJc
https://www.youtube.com/watch?v=HbgzrKJvDRw
https://www.youtube.com/watch?v=A3G-3hp88mo
https://www.youtube.com/watch?v=42iQKuQodW4
https://tryhackme.com/room/linuxfundamentalspart1
https://tryhackme.com/room/linuxfundamentalspart2
https://tryhackme.com/room/linuxfundamentalspart3
https://www.youtube.com/watch?v=rrB13utjYV4
https://www.youtube.com/watch?v=gd7BXuUQ91w
https://www.youtube.com/watch?v=ROjZy1WbCIA
https://www.youtube.com/watch?v=lZAoFs75_cs&t=15s
https://github.com/diego-treitos/linux-smart-enumeration





Scripting
https://cs50.harvard.edu/college/2022/spring/weeks/0/





Bash
https://www.youtube.com/watch?v=oxuRxtrO2Ag
https://tryhackme.com/room/bashscripting
https://learn-bash.org/
https://devhints.io/bash
https://learn-bash.org/
https://www.khanacademy.org/computing/computer-programming/programming
https://www.learnshell.org/
https://www.freecodecamp.org/news/search/?query=bash






Cryptography & Stegnography

https://www.youtube.com/watch?v=6_Cxj5WKpIw
https://www.youtube.com/watch?v=NuyzuNBFWxQ&t=102s
https://www.youtube.com/watch?v=b4b8ktEV4Bg
https://www.youtube.com/watch?v=GSIDS_lvRv4
https://www.youtube.com/watch?v=NmM9HA2MQGI
https://cyberchef.org/
https://hashes.com/en/tools/hash_identifier
https://www.dcode.fr/cipher-identifier
https://crackstation.net/






Networking

https://tryhackme.com/room/introtonetworking
https://tryhackme.com/room/whatisnetworking
https://tryhackme.com/room/introtolan
https://www.youtube.com/watch?v=vv4y_uOneC0
https://www.youtube.com/watch?v=0TLDTodL7Lc
https://www.youtube.com/watch?v=PG9oKZdFb7w
https://www.youtube.com/watch?v=AAssk2N_oPk
https://www.youtube.com/watch?v=iGPXkxeOfdk
https://www.youtube.com/watch?v=L6bDA5FK6gs
https://www.youtube.com/watch?v=5WfiTHiU4x8
https://www.youtube.com/watch?v=s_Ntt6eTn94
https://www.youtube.com/watch?v=86cQJ0MMses







Docker

https://www.youtube.com/watch?v=eGz9DS-aIeY
https://www.youtube.com/watch?v=Gjnup-PuquQ
https://www.youtube.com/watch?v=pTFZFxd4hOI







General

https://www.youtube.com/watch?v=vvKbMueRzrI
https://www.youtube.com/watch?v=keo0dglCj7I
https://www.youtube.com/watch?v=E_wX40fQwEA
https://tryhackme.com/room/historyofmalware
https://tryhackme.com/room/securityawarenessintro
https://www.youtube.com/watch?v=7U-RbOKanYs
https://www.youtube.com/watch?v=lVcbq_a5N9I
https://www.youtube.com/watch?v=8ZtInClXe1Q







Youtube Channels

Computer phile :https://www.youtube.com/@Computerphile ( One of my fav)
Cyber Mentor : https://www.youtube.com/@TCMSecurityAcademy
Network Chuck: https://www.youtube.com/@NetworkChuck
Ippsec       : https://www.youtube.com/@ippsec
John hammond : https://www.youtube.com/@_JohnHammond
Nullbyte     : https://www.youtube.com/@NullByteWHT
David bombal : https://www.youtube.com/@davidbombal
Oxdf         : https://www.youtube.com/@0xdf
Insider phd  : https://www.youtube.com/@InsiderPhD
pwn Function : https://www.youtube.com/@PwnFunction
LiveOverflow : https://www.youtube.com/@LiveOverflow
Malfind Labs : https://www.youtube.com/@MalfindLabs
Conda        : https://www.youtube.com/@c0nd4
Hacker/splain: https://www.youtube.com/@Hacksplained
Pwn Collage  :https://www.youtube.com/@pwncollege
Ymir Vigfusson:https://www.youtube.com/@YmirVigfussonPresents
Atck/detct/dfnd : https://www.youtube.com/@rot169
CwInfosec    :https://www.youtube.com/@cwinfosec
areyou1or0 : https://www.youtube.com/@areyou1or0
Day[0]  :  https://www.youtube.com/@dayzerosec
Crow    : https://www.youtube.com/@crr0ww







Newsletters

API security news.
Blockchain Threat Intelligence: Tools & threats.
We Live Security: News, views and insights.
SecPro: Analysis of threats, attacks and tutorials.
Gov Info Security: Governmental news.
Threatpost: Vulnerabilities and cybersecurity.
AWS Security Digest: AWS security updates.
Krebs On Security: Investigative journalism.
Risky Biz: Analysis of big cyber stories.
Schneier on Security: Cybersecurity news.
CyberSecNewsWeekly: News, articles and tools.
RTCSec: News around VOIP and WebRTC security.
This Week in 4n6: DFIR updates.
Hive Five Newsletter: Curated cybersecurity news.
Shift Security Left: Security and incidents.
TripWire’s State of Security: Corporate news.
Graham Cluley: Cybersecurity news and opinions.
Zero Day: Hackers, spies and cybercrime.
The Hacker News: Cybersecurity news.
CSO Online: Security and risk management.
Naked Security: Protect yourself from attacks.
AdvisoryWeek: Advisory roundups by vendors.
tl;dr sec Newsletter: Tools, blog posts & research.






Search-Engines

shodan.io
wigle.net
grep.app
app.binaryedge.io
onyphe.io
viz.greynoise.io
censys.io
hunter.io
fofa.so
zoomeye.org
leakix.net
intelx.io
app.netlas.io
searchcode.com
urlscan.io
publicwww.com







Google-Dorking

https://www.youtube.com/watch?v=u_gOnwWEXiA
https://www.youtube.com/watch?v=hrVa_dhD-iA
https://the-dark-web.com/google-dorking-commands-101/
https://www.youtube.com/watch?v=cEBkvm0-rg0&t=93s
https://www.youtube.com/watch?v=lESeJ3EViCo






EXPLOITS

https://www.exploit-db.com/
https://exploit.education/phoenix/
https://www.rapid7.com/
https://github.com/







WEBATTACKS

ZAP — https://www.owasp.org/index.php/OWASP...
DIRB — https://tools.kali.org/web-applicatio...
NIKTO — https://hackertarget.com/nikto-websit...
https://portswigger.net/web-security/learning-path
https://github.com/guelfoweb/knock






STABLE SHELLS (AKA TTY)

https://highon.coffee/blog/penetratio...







Privilage-Escalation

https://github.com/pentestmonkey/wind...
http://www.securitysift.com/download/...
https://exploit-notes.hdks.org/exploit/linux/privilege-escalation/ansible-playbook-privilege-escalation/







Capture the Flags

https://pwnable.kr/play.php
https://www.osint.games/
https://portal.offensive-security.com/labs/play
Hack the Box — https://www.hackthebox.eu/
Vulnhub — https://www.vulnhub.com/
https://www.abatchy.com/2017/02/oscp-...
https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms
https://overthewire.org/wargames/
https://www.picoctf.org/
https://pentesterlab.com/
https://evilzone.org/
https://ctftime.org/```





Api Hacking

https://university.apisec.ai/products/apisec-certified-expert/categories/2150251348/posts/2157505637






Blogs

https://www.seytonic.com/
https://null-byte.wonderhowto.com/
https://www.null-byte.org/blog/
https://nmap.org/book/firewall-subversion.html ( by passing firewall with Nmap)
https://firewallsdontstopdragons.com/






Forums

https://pirates-forum.org/Forum-Hardware-Networking







Roadmaps

1. Basics — https://wiki.bi0s.in/basics/intro/
2. Reverse Engineering — https://wiki.bi0s.in/reversing/roadmap/
3. Pwning — https://wiki.bi0s.in/pwning/roadmap/
4. Forensics — https://wiki.bi0s.in/forensics/roadmap/
5. Crypto — https://wiki.bi0s.in/crypto/roadmap/
7. Web — https://wiki.bi0s.in/web/roadmap/








Handy tools & Github-repos

https://www.androidauthority.com/how-to-create-an-sms-app-721438/
https://demo.grammarly.com/
https://www.toolsley.com/
https://tio.run
https://www.decompiler.com)
https://github.com/intrigueio/intrigue-core
https://github.com/koalaman/shellcheck#installing
https://github.com/LasCC/Hack-Tools
https://github.com/vanhoefm/macstealer
https://addons.mozilla.org/en-US/firefox/addon/hacktools/
https://github.com/cytopia/fuzza
https://github.com/kleosdc/dns-exfil-infil
https://github.com/the-c0d3r/buffer-overflow
https://github.com/m8sec/CrossLinked







Active-Directory

https://www.youtube.com/watch?v=cTe5GsyhKUk
https://www.youtube.com/watch?v=Q4I2lKHboDw
https://adsecurity.org/?p=2293
https://posts.specterops.io/kerberoasting-revisited-d434351bd4d1 https://www.redsiege.com/wp-content/uploads/2020/04/20200430-
https://www.crowdstrike.com/cybersecurity-101/golden-ticket-attack/
https://www.alteredsecurity.com/
https://tryhackme.com/room/adenumeration
https://tryhackme.com/room/breachingad
https://tryhackme.com/room/persistingad
https://tryhackme.com/room/lateralmovementandpivoting
https://tryhackme.com/room/exploitingad
https://tryhackme.com/room/hololive







Binary Exploitation

Linux : https://gtfobins.github.io
Window : https://lolbas-project.github.io/#
Active-directory : https://wadcoms.github.io







Exploit-development

https://github.com/wtsxDev/Exploit-Development
https://github.com/midnightslacker/exploit_training
https://github.com/0xZ0F/Z0FCourse_ExploitDevelopment
https://github.com/gold1029/awesome-exploit-development
https://github.com/FULLSHADE/WindowsExploitationResources/
https://github.com/CyberSecurityUP/Awesome-Exploit-Development
https://github.com/infodox/exploits
https://github.com/karthik0x00/exploit-development
https://github.com/mgeeky/Exploit-Development-Tools
https://github.com/cranelab/exploit-development

"PDF's for expliot development"
https://www.exploit-db.com/papers

Linux ( exploitdevelopment)
https://www.exploit-db.com/docs/17008
https://www.exploit-db.com/docs/17154
https://www.exploit-db.com/docs/17131
https://www.exploit-db.com/docs/17208
https://www.exploit-db.com/docs/17286

Windows ( exploit-development)
https://www.exploit-db.com/docs/44085
https://www.exploit-db.com/docs/44086
https://www.exploit-db.com/docs/44087
https://www.exploit-db.com/docs/44088
https://www.exploit-db.com/docs/44089
https://www.exploit-db.com/docs/44090



malware-development 

https://0xpat.github.io/Malware_development_part_1/




AI's
chatgpt.com
dorkgpt.com (Generate Google Dorks with AI)




ETC . . .

Cheap Servers Vps : https://www.vultr.com/
https://guyinatuxedo.github.io
https://cugu.github.io/awesome-forensics
https://github.com/CompassSecurity/security_resource
https://www.begin.re
https://exploit.education
https://github.com/shellphish/how2heap

Ufw ( linux uncomplicated firewall) : https://www.digitalocean.com/community/tutorials/ufw-essentials-common-firewall-rules-and-commands

The only cheat sheet you need Unified access to the best community driven documentation repositories of the world : https://cht.sh/

Information about any port: https://www.speedguide.net/port.php?port=
A nice site to Learn basic Consepts: https://www.hacksplaining.com/lessons
Favicon database Owasp : https://wiki.owasp.org/index.php/OWASP_favicon_database
List of file Signatures: https://en.wikipedia.org/wiki/List_of_file_signatures