Awesome-Hacking-Resources README

The project's README from github.com/vitalysim/Awesome-Hacking-Resources. As one markdown file: README.md.


awesome

Awesome Hacking Resources

A curated collection of hacking, penetration testing, and AI red-teaming resources to make you better.

Awesome Stars Forks Contributors Last commit License PRs welcome

Let's make it the biggest resource repository for our community.
You are welcome to fork and contribute.

We also maintain a companion tools list — contributions welcome there too.

Table of Contents

📚 Learning the Skills

Name Description
CS 642: Intro to Computer Security academic content, full semester course, includes assigned readings, homework and github refs for exploit examples. NO VIDEO LECTURES.
CyberSec WTF CyberSec WTF Web Hacking Challenges from Bounty write-ups
Cybrary coursera style website, lots of user-contributed content, account required, content can be filtered by experience level
Free Cyber Security Training Academic content, 8 full courses with videos from a quirky instructor sam, links to research, defcon materials and other recommended training/learning
Hak5 podcast-style videos covering various topics, has a forum, "metasploit-minute" video series could be useful
Hopper's Roppers Security Training Four free self-paced courses on Computing Fundamentals, Security, Capture the Flags, and a Practical Skills Bootcamp that help beginners build a strong base of foundational knowledge. Designed to prepare for students for whatever they need to learn next.
Mind Maps Information Security related Mind Maps
MIT OCW 6.858 Computer Systems Security academic content, well organized, full-semester course, includes assigned readings, lectures, videos, required lab files.
OWASP top 10 web security risks free courseware, requires account
Seed Labs academic content, well organized, featuring lab videos, tasks, needed code files, and recommended readings
TryHackMe Designed prebuilt challenges which include virtual machines (VM) hosted in the cloud ready to be deployed

(back to top)

🎥 YouTube Channels

Name Description
0patch by ACROS Security few videos, very short, specific to 0patch
BlackHat features talks from the BlackHat conferences around the world
Christiaan008 hosts a variety of videos on various security topics, disorganized
Companies
Detectify very short videos, aimed at showing how to use Detictify scanner
Hak5 see Hak5 above
Kaspersky Lab lots of Kaspersky promos, some hidden cybersecurity gems
Metasploit collection of medium length metasploit demos, ~25minutes each, instructional
ntop network monitoring, packet analysis, instructional
nVisium Some nVisum promos, a handful of instructional series on Rails vulns and web hacking
OpenNSM network analysis, lots of TCPDUMP videos, instructional,
OWASP see OWASP above
Rapid7 brief videos, promotional/instructional, ~ 5 minutes
Securelist brief videos, interviews discussing various cyber security topics
Segment Security promo videos, non-instructional
SocialEngineerOrg podcast-style, instructional, lengthy content ~1 hr each
Sonatype lots of random videos, a good cluster of DevOps related content, large range of lengths, disorganized
SophosLabs lots of brief, news-style content, "7 Deadly IT Sins" segment is of note
Sourcefire lots of brief videos covering topics like botnets, DDoS ~5 minutes each
Station X handful of brief videos, disorganized, unscheduled content updates
Synack random, news-style videos, disorganized, non-instructional
TippingPoint Zero Day Initiative very brief videos ~30 sec, somewhat instructional
Tripwire, Inc. some tripwire demos, and random news-style videos, non-instructional
Vincent Yiu handful of videos from a single hacker, instructional
Conferences
44contv in
MIT OCW 6.858 Computer Systems Security Information security con based in London, lengthy instructional videos
BruCON Security Conference security and hacker conference based in b\Belgium, lots of lengthy instructinoal videos
BSides Manchester security and hacker con based in Mancheseter, lots of lengthy videos
BSidesAugusta security con based in Augusta, Georgia, lots of lengthy instructional videos
CarolinaCon security con based in North Carolina, associated with various 2600 chapters, lots of lengthy instructional content
Cort Johnson a handful of lengthy con-style talks from Hack Secure Opensec 2017
DevSecCon lenghty con videos covering DevSecOps, making software more secure
Garage4Hackers - Information Security a handful of lengthy videos, About section lacks description
HACKADAY lots of random tech content, not strictly infosec, some instructional
Hack In The Box Security Conference lengthy con-style instructional talks from an international security con
Hack in Paris security con based in paris, features lots of instructional talks, slides can be difficult to see.
Hacklu lots of lengthy con-style instructional videos
Hacktivity lots of lengthy con-style instructional videos from a con in central/eastern europe
Hardwear.io handful of lengthy con-style video, emphasis on hardware hacks
IEEE Symposium on Security and Privacy content from the symposium; IEEE is a professional association based in the us, they also publish various journals
LASCON lengthy con-style talks from an OWASP con held in Austin, TX
leHACK leHACK is the oldest ( 2003 ), leading, security conference in Paris, FR
Marcus Niemietz lots of instructional content, associated with HACKPRA, an offensive security course from an institute in Germany
Media.ccc.de The real official channel of the chaos computer club, operated by the CCC VOC - tons of lengthy con-style vids
NorthSec lengthy con-style talks from an applied security conference in Canada
Pancake Nopcode channel of Radare2 whiz Sergi "pancake" Alvarez, Reverse Engineering Content
Psiinon medium length instructional videos, for the OWASP Zed Attack Proxy
SJSU Infosec handful of lengthy instructional videos from San Jose State university Infosec
Secappdev.org tons of lengthy instructional lectures on Secure App Development
Security Fest medium length con-style talks from a security festival in Sweden
SecurityTubeCons an assortment of con-style talks from various cons including BlackHat and Shmoocon
ToorCon handful of medium length con videos from con based in San Diego, CA
USENIX Enigma Conference medium length "round table discussion with leading experts", content starts in 2016
ZeroNights a lot of con-style talks from international conference ZeroNights
News
0x41414141 Channel with couple challenges, well explained
Adrian Crenshaw lots of lengthy con-style talks
Corey Nachreiner security newsbites, 2.7K subscribers, 2-3 videos a week, no set schedule
BalCCon - Balkan Computer Congress Long con-style talks from the Balkan Computer Congress, doesn't update regularly
danooct1 lots of brief screenshot, how-to vids regarding malware, regular content updates, 186K followerss
DedSec lots of brief screenshot how-to vids based in Kali, no recent posts.
DEFCON Conference lots of lengthy con-style vids from the iconical DEFCON
DemmSec lots of pen testing vids, somewhat irregular uploads, 44K followers
Derek Rook - CTF/Boot2root/wargames Walkthrough lots of lengthy screenshot instructional vids, with
Don Does 30 amateur pen-tester posting lots of brief screenshot vids regularly, 9K Followers
Error 404 Cyber News short screen-shot videos with loud metal, no dialog, bi-weekly
Geeks Fort - KIF lots of brief screenshot vids, no recent posts
GynvaelEN Security streams from Google Researcher. Mainly about CTFs, computer security, programing and similar things.
HackerSploit regular posts, medium length screenshot vids, with dialog
HACKING TUTORIALS handful of brief screenshot vids, no recent posts.
iExplo1t lots of screenshot vids aimed at novices, 5.7K Followers, no recent posts
JackkTutorials lots of medium length instructional vids with some AskMe vids from the youtuber
John Hammond Solves CTF problems. contains penTesting tips and tricks
LionSec lots of brief screenshot instructional vids, no dialog
LiveOverflow Lots of brief-to-medium instructional vids, covering things like buffer overflows and exploit writing, regular posts.
Metasploitation lots of screenshot vids, little to no dialogue, all about using Metasploit, no recent vids.
NetSecNow channel of pentesteruniversity.org, seems to post once a month, screenshot instructional vids
Open SecurityTraining lots of lengthy lecture-style vids, no recent posts, but quality info.
Pentester Academy TV lots of brief videos, very regular posting, up to +8 a week
Penetration Testing in Linux DELETE
rwbnetsec lots of medium length instructional videos covering tools from Kali 2.0, no recent posts.
Samy Kamkar's Applied Hacking brief to medium length instructional vids from the creator of PoisonTap for the Raspberry Pi Zero, no recent content, last updated in 2016
SecureNinjaTV brief news bites, irregular posting, 18K followers
Security Weekly regular updates, lengthy podcast-style interviews with industry pros
Seytonic variety of DIY hacking tutorials, hardware hacks, regular updates
Shozab Haxor lots of screenshot style instructional vids, regular updates, windows CLI tutorial
SSTec Tutorials lots of brief screenshot vids, regular updates
Tradecraft Security Weekly Want to learn about all of the latest security tools and techniques?
Troy Hunt lone youtuber, medium length news videos, 16K followers, regular content
Waleed Jutt lots of brief screenshot vids covering web security and game programming
webpwnized lots of brief screenshot vids, some CTF walkthroughs
Zer0Mem0ry lots of brief c++ security videos, programming intensive
LionSec lots of brief screenshot instructional vids, no dialog
Adrian Crenshaw lots of lengthy con-style talks
HackerSploit regular posts, medium length screenshot vids, with dialog
Derek Rook - CTF/Boot2root/wargames Walkthrough lots of lengthy screenshot instructional vids, with
Tradecraft Security Weekly Want to learn about all of the latest security tools and techniques?
IPPSec Hackthebox.eu retired machine vulnerable machine walkthroughs to help you learn both basic and advanced processes and techniques
The Daily Swig Latest Cybersecurity News
Awesome Worldwide ITSec Specialists curated index of non-English-speaking IT security YouTubers and creators

(back to top)

🎯 Sharpening Your Skills

Name Description
The cryptopals crypto challenges A bunch of CTF challenges, all focused on cryptography.
Crackmes.one This is a simple place where you can download crackmes to improve your reverse engineering skills.
CTFLearn an account-based ctf site, where users can go in and solve a range of challenges
CTFs write-ups a collection of writeups from various CTFs, organized by
CTF365 account based ctf site, awarded by Kaspersky, MIT, T-Mobile
The enigma group web application security training, account based, video tutorials
Exploit exercises hosts 5 fulnerable virtual machines for you to attack, no account required
Google CTF Source code

Awesome-Hacking-Resources (vitalysim/Awesome-Hacking-Resources)

Searching Database…

这是什么?一份精选的黑客技术、渗透测试和 AI 红队测试资源合集——包括课程、YouTube 频道、CTF 平台和指南,全部经过挑选,帮助你提升攻击性安全方面的能力。
这是能运行的工具,还是一份阅读清单?都不是——它就是一个大 README:一份精选链接列表,每个条目都是资源名称加一行简短说明,按主题分成不同的板块。
也就是说什么都不用安装——那我怎么在这个列表里找到方向?直接浏览就行:目录里的链接可以直接跳到权限提升、恶意软件分析、OSINT 或 AI 红队测试等板块,每个板块都是一张表格,扫一眼、点进去即可。
这些链接都还有效吗,还是有些已经过时了?要有心理准备,有些内容已经失效:备注里坦率地标出了薄弱条目——很多 YouTube 频道被标注为'no recent posts'(近期无更新),还有一个条目直接标着 DELETE——所以少数链接指向的是失效或过时的内容。
我是安全领域的新手——这是给已经懂行的人看的吗?不是,它覆盖了从入门到高级的整个学习曲线:免费的零基础训练营和完整的大学学期课程,与漏洞利用开发、权限提升和恶意软件分析资料放在一起。
这么大的列表,完全的新手应该从哪里入手?去 Learning the Skills 板块:Roppers 的课程提供了四门免费的自学课程(Computing Fundamentals、Security、Capture the Flags、Practical Skills Bootcamp),专门为零基础者打基础而设计;TryHackMe 则在云端虚拟机上提供现成的挑战。
它链接的资源收费吗?大部分不收费——免费课程、视频和挑战占了绝大多数,但有几条注明需要注册账号,比如 Cybrary、CTFLearn 和 OWASP top 10 课程。
这里有动手实践的内容吗,还是全是阅读和视频?有一个完整的 Sharpening Your Skills 板块专门收录 CTF 平台(Cryptopals、CTFLearn、Google CTF、Crackmes.one),Exploit Exercises 提供五个存在漏洞的虚拟机,还有专门的漏洞 Web 应用和漏洞操作系统板块。
简介里提到了 AI 红队测试——那是怎么回事?目录里有专门的 AI Security / AI Red Teaming 板块,与 OSINT、恶意软件分析等经典主题并列,所以这份列表也涵盖攻击 AI 系统的内容,不只是传统的基础设施。
Creator
vitalysim
Size
0.3 MB
Stars
17.5K
Updated
CommitMay 21
Age
9y
Commits · 90 Days