KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#typescript #ai-agents #developer-tools #cli #codex #claude-code #react #mcp #open-source #deepseek-harness #dsh-plugin #ai

InfoSec-Learning-Materials

★ 115 Open GitHub ↗

Resource for developing infosec skills for OSCP

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Infosec Learning Materials

Resource for developing skills for OSCP exam and general infosec study

## Web App Hacking Resources

[Prototype Pollution - The Ultimate Guide](https://www.netspi.com/blog/technical-blog/web-application-pentesting/ultimate-guide-to-prototype-pollution/)

## OSCP Rules & Documents

[Exam Guide](https://support.offensive-security.com/#!oscp-exam-guide.md)

## Practice

[Exploit Exercises](https://exploit-exercises.com/)

[OverTheWire - Wargames](https://overthewire.org/wargames/)

[Hack This Site](https://www.hackthissite.org/)

[Flare-On](http://www.flare-on.com/)

[Reverse Engineering Challenges](https://challenges.re/)

[CTF Learn](https://ctflearn.com/)

[Mystery Twister - Crypto Challenges](https://www.mysterytwisterc3.org/en/)

## Buffer Overflows

[Buffer Overflow Practice](https://www.vortex.id.au/2017/05/pwkoscp-stack-buffer-overflow-practice/)

[Fuzzy Security - Windows Exploit Development](http://www.fuzzysecurity.com/tutorials.html)

[dostackbufferoverflowgood - easy to read](https://github.com/justinsteven/dostackbufferoverflowgood)

[Exploit Exercises](https://exploit-exercises.com/)

[Corelan's exploit writing tutorial](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/)

[Live Overflow's Binary Hacking Videos](https://www.youtube.com/watch?v=iyAyN3GFM7A&list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN)

[Introduction to 32-bit Windows Buffer Overflows](https://www.veteransec.com/blog/introduction-to-32-bit-windows-buffer-overflows)

[Getting Started with x86 Linux Buffer Overflows](https://scriptdotsh.com/index.php/2018/05/14/getting-started-with-linux-buffer-overflows-part-1-introduction/)

## Binary Exploitation

[Binary Exploitation ELI5](https://medium.com/@danielabloom/binary-exploitation-eli5-part-1-9bc23855a3d8)

[Exploit Development Roadmap](https://www.reddit.com/r/ExploitDev/comments/7zdrzc/exploit_development_learning_roadmap/)

## General OSCP Guides/Resources

[Real Useful OSCP Journey](https://infosecuritygeek.com/my-oscp-journey/)

[Tulpa PWK Prep](https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/)

[Tulpa PWK Prep PDF](https://tulpasecurity.files.wordpress.com/2016/09/tulpa-pwk-prep-guide1.pdf)

[Abatchy's Guide (apparently pretty good!)](https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob.html)

[Real good guide with many an info](https://www.securitysift.com/offsec-pwb-oscp/)

## Infosec News / Publications

[Security Affairs](http://securityaffairs.co/wordpress/)

[The Register](https://www.theregister.co.uk/security/)

[Risky Biz](https://risky.biz/)

[Vectra](https://blog.vectra.ai/blog)

## Infosec Blogs

[Nii Consulting](https://niiconsulting.com/checkmate/)

[Guido Vranken](https://guidovranken.com)

[SecJuice](https://medium.com/secjuice/)

## OSCP Reviews/Writeups

~~[Process Focused Review](https://occultsec.com/2018/04/27/the-oscp-a-process-focused-review/)~~

~~[Full marks in 90 days](https://coffeegist.com/security/my-oscp-experience/)~~

[Zero to OSCP in 292 days (still somewhat relevant)](https://blog.mallardlabs.com/zero-to-oscp-in-292-days-or-how-i-accidentally-the-whole-thing-part-2/)

[31-Day OSCP - with some useful info](https://scriptdotsh.com/index.php/2018/04/17/31-days-of-oscp-experience/)

## Fuzzing

[Fuzzing Adobe Reader](https://kciredor.com/fuzzing-adobe-reader-for-exploitable-vulns-fun-not-profit.html)

## Reverse Engineering

[Reverse Engineering x64 for Beginners](http://niiconsulting.com/checkmate/2018/04/reverse-engineering-x64-for-beginners-linux/)

[Backdoor - Reverse Engineering CTFs](https://backdoor.sdslabs.co/)

[Begin Reverse Engineering: workshop](https://www.begin.re/)

## Pivoting

[The Red Teamer's Guide to Pivoting](https://artkond.com/2017/03/23/pivoting-guide/)

## Github Disovered OSCP Tools/Resources

[Lots of OSCP Materials](https://gist.github.com/natesubra/5117959c660296e12d3ac5df491da395)

[Collection of things made during OSCP journey](https://github.com/ihack4falafel/OSCP)

[Notes from Study Plan](https://github.com/ferreirasc/oscp)

[Resource List - not overly thorough](https://github.com/secman-pl/oscp)

[Personal Notes for OSCP & Course](https://github.com/generaldespair/OSCP)

[Buffer Overflow Practice](https://github.com/mikaelkall/vuln)

[OSCP Cheat Sheet](https://github.com/mikaelkall/OSCP-cheat-sheet)

[Bunch of interesting 1-liners and notes](https://github.com/gajos112/OSCP)

[How to teach yourself infosec](https://github.com/thngkaiyuan/how-to-self-learn-infosec)

## Non-Preinstalled Kali Tools

[Doubletap - loud/fast scanner](https://github.com/benrau87/doubletap)

[Reconnoitre - recon for OSCP](https://github.com/codingo/Reconnoitre)

[Pandora's Box - bunch of tools](https://github.com/paranoidninja/Pandoras-Box)

[SleuthQL - SQLi Discovery Tool](https://github.com/RhinoSecurityLabs/SleuthQL)

[Commix - Command Injection Exploiter](https://github.com/commixproject/commix)

## Source Code Review / Analysis

[Static Analysis Tools](https://github.com/mre/awesome-static-analysis)

## Malware Analysis

[Malware Analysis for Hedgehogs (YouTube)](https://www.youtube.com/channel/UCVFXrUwuWxNlm6UNZtBLJ-A)

## Misc

[Windows Kernel Exploitation](https://rootkits.xyz/blog/2017/06/kernel-setting-up/)

[Bunch of interesting tools/commands](https://github.com/adon90/pentest_compilation)

[Forensics Field Guide](https://trailofbits.github.io/ctf/forensics/)

[Bug Bounty Hunter's Methodology](https://github.com/jhaddix/tbhm)

[**Fantastic** lecture resource for learning assembly](https://www.youtube.com/watch?v=H4Z0S9ZbC0g)

[Awesome WAF bypass/command execution filter bypass](https://medium.com/secjuice/waf-evasion-techniques-718026d693d8)

InfoSec-Learning-Materials

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README