resources

KO | EN

gitlite — search

#javascript #typescript #llm #go #android #rust #macos #nodejs #java #cli #vue #mcp #openai #open-source

(★ 14)

Resources I've found helpful for learning computing security.

resources Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Resources

## Introduction
This is a collection of resources for learning computing security. They are mostly interactive, but some sections may contain reading or tools that I feel are worth including. This is not meant to be comprehensive whatsoever, this is meant to just be a collection of stuff that people have found top be useful. Feel free to make pull requests to add whatever you would like. This is listed in no order whatsoever.

## Table of Contents
- [Resources](#resources)
  - [Introduction](#introduction)
  - [Table of Contents](#table-of-contents)
    - [Coding](#coding)
    - [Introduction to Linux](#introduction-to-linux)
    - [Networking](#networking)
    - [Infrastructure](#infrastructure)
    - [Windows Blue Team](#windows-blue-team)
    - [Web Application Security](#web-application-security)
    - [Mobile Application Security](#mobile-application-security)
    - [Network Penetration Testing](#network-penetration-testing)
    - [CTF](#ctf)
    - [Reversing &amp; Binary Exploitation](#reversing-amp-binary-exploitation)
    - [Crypto](#crypto)
    - [Cheat Sheets](#cheat-sheets)
    - [Useful Subreddits (needs descriptions)](#useful-subreddits-needs-descriptions)
    - [Youtube Channels (needs descriptions)](#youtube-channels-needs-descriptions)
    - [Books/Publishers](#bookspublishers)
    - [Bug Bountys](#bug-bountys)
    - [##TODO](#todo)

### Coding
- [Introduction to Git](https://git-scm.com/book/en/v2)
  - An easy guide on learning how to use git
- [Code Academy](https://www.codecademy.com/)
  - Interactive courses for learning new languages.
- [Automate the Boring Stuff with Python](https://automatetheboringstuff.com/)
  - Book on using python to automate repetitive tasks.
- [Build your own X](https://github.com/danistefanovic/build-your-own-x)
  - A list of projects for you to complete in many different languages.
- [Free Code Camp](freeCodeCamp.org)
  - A free website to learn web Development and their [YouTube channel](https://www.youtube.com/channel/UC8butISFwT-Wl7EV0hUK0BQ) has a lot of great tutorials. 
  
### Introduction to Linux
- [OverTheWire: Bandit](https://overthewire.org/wargames/bandit/)
  - War games designed to learn the basics of linux.
- [Linux Journey](https://linuxjourney.com/)
  - Interactive course to learn the basics of linux.
  
### Networking 
- [Vinsolev Academy](https://www.youtube.com/watch?v=rIZ61PyDkH8&list=PLR0bgGon_WTKY2irHaG_lNRZTrA7gAaCj)
  - Introduction to networking course on YouTube.
 
### Infrastructure
- [Introduction to Docker](https://www.katacoda.com/courses/docker/)
  - Interactive course on understanding docker.
- [Introduction to Vagrant](https://psadmin.io/2016/10/04/introduction-to-vagrant/)
  - Introduction on how to use vagrant for fast deployment of virtual machines.

### Windows Blue Team
- [Introduction to Sysintenals](https://docs.microsoft.com/en-us/sysinternals/learn/troubleshooting-book)
  - A book on the usage of Windows Sysinternals Tools, a powerful set of tools for gaining insight to a windows OS.

### Web Application Security
- [OWASP Top 10](https://www.owasp.org/index.php/Main_Page)
  - A list of the top 10 most common web app vulnerabilities.
- [The Web Application Hacker's Handbook 2](https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting-ebook/dp/B005LVQA9S)
  - The bible. There are probably cheaper options out there somewhere on the internet 👀
- [OverTheWire: Natas](https://overthewire.org/wargames/natas/)
  - Wargames designed to learn the basics of server side web security.
- [Damn Vulnerable Web Application](http://www.dvwa.co.uk/)
  - A beginner PHP/Mysql vulnerable web application.
- [OWASP Juice Shop](https://www2.owasp.org/www-project-juice-shop/)
  - Vulnerable application written in javascript.
- [Web Security Academy by Port Swigger](https://portswigger.net/web-security)
  - Free online web security training by the creators of burp suite.
- [Pentester Labs](https://www.pentesterlab.com/)
  - Interactive web security challenges ranging over many topics.
- [Google-Gruyere](https://google-gruyere.appspot.com)
  - Shows how web application vulnerabilities can be exploited and how to defend against these attacks.

### Mobile Application Security
- [Android Security Internals](https://www.amazon.com/Android-Security-Internals-Depth-Architecture/dp/1593275811)
  - A book focused on android security internals. There are probably cheaper options out there somewhere on the internet 👀
- [OWASP Mobile Testing Guide](https://mobile-security.gitbook.io/mobile-security-testing-guide/)
  - Mobile Security Testing guide made by OWASP (very in depth).
- [Damn Insecure and Vulnerable Android Application](https://github.com/payatu/diva-android)
  - Intentionally insecure and vulnerable android application.
- [Mobile Security Framework](https://github.com/MobSF/Mobile-Security-Framework-MobSF)
  - Automated mobile application analysis framework (works better on android than iOS)
- [Frida](https://frida.re/)
  - Dynamic mobile application testing.

### Network Penetration Testing
- [Pentester Academy *Paid Access Only*](https://www.pentesteracademy.com/)
  - Over 1000 videos on security topics, mainly offensive network penetration testing.
- [Hack The Box](https://www.hackthebox.eu/)
  - Pentesting labs, adds new boxes over time.
- [IPPSEC’s HTB Walkthroughs](https://www.youtube.com/channel/UCa6eh7gCkpPo5XXUDfygQQA)
  - Walkthroughs of retired Hack The Box machines.
- [Vulnhub](https://www.vulnhub.com/)
  - Intentionally vulnerable VMs.
- [Intro to Cobalt Strike](https://www.youtube.com/watch?v=q7VQeK533zI&list=PL9HO6M_MU2nfQ4kHSCzAQMqxQxH47d1no)
  - Cobalt Strike youtube series made by the creator of cobalt strike.
- [Active Directory Attack and Defense](https://github.com/infosecn1nja/AD-Attack-Defense)
  - In depth guide on active directory attack and defense techniques.
- [Active Directory Security Blog](https://adsecurity.org/)
  - Blog on active directory security topics.

### CTF
- [CTFtime](https://ctftime.org/about/)
  - Your one stop shop for finding new CTFs. Includes writeups.
- [picoCTF](https://picoctf.com/)
  - An introduction to CTF.
- [TryHackMe](https://tryhackme.com/)
  - Prebuilt Security Courses in a CTF format.

### Reversing & Binary Exploitation
- [Introduction to Arm](https://azeria-labs.com/writing-arm-assembly-part-1/)
  - Introduction to ARM assembly.
- [Introduction to Arm Binary Exploitation](https://azeria-labs.com/writing-arm-shellcode/)
  - Arm exploit development.
- [Live Overflow](https://liveoverflow.com/)
  - Videos on RE, walkthroughs of CVEs, walkthroughs of CTFs, etc.
- [Pwnable.kr](http://pwnable.kr/)
  - Binary Exploitation challenges
- [Embedded Security](https://microcorruption.com/login)
  - Reverse engineering challenges
- [Intro to Android RE](https://maddiestone.github.io/AndroidAppRE/)
  - Course on getting into android reverse engineering

### Crypto
- [Cryptopals](https://www.cryptopals.com/)
  - A list of crypto challenges.

### Cheat Sheets
- [Assorted Code](https://devhints.io)
  - Helpful cheat sheets for remembering syntax.
- [Assorted Pentest](https://dostoevskylabs.gitbooks.io/dostoevskylabs-pentest-notes/content/)
  - Gitbook of some pentesting notes, slightly outdated.
- [List of Windows Logging Cheatsheets](https://www.malwarearchaeology.com/cheat-sheets)
  - List of useful windows logging cheatsheets
- [(Large) Windows Forensics Cheatsheet](https://www.jaiminton.com/cheatsheet/DFIR)
  - Large Cheetsheet on Windows Forensics
  
### Useful Subreddits (needs descriptions)
- [/r/netsec](https://www.reddit.com/r/netsec/)
- [/r/asknetsec](https://www.reddit.com/r/asknetsec/)
- [/r/netsecstudents](https://www.reddit.com/r/netsecstudents/)
- [/r/cybersecurity](https://www.reddit.com/r/cybersecurity)
- [/r/blueteamsec](https://www.reddit.com/r/blueteamsec/)
- [/r/ceos3c](https://www.reddit.com/r/ceos3c/)
- [/r/computer forensics](https://www.reddit.com/r/computerforensics/)
- [/r/cryptography](https://www.reddit.com/r/cryptography/)
- [/r/crypto](https://www.reddit.com/r/crypto/)
- [/r/encryption](https://www.reddit.com/r/encryption/)
- [/r/hackernews](https://www.reddit.com/r/hackernews/)
- [/r/hacking](https://www.reddit.com/r/hacking/)
- [/r/hacking_tutorials](https://www.reddit.com/r/Hacking_Tutorials/)
- [/r/homelab](https://www.reddit.com/r/homelab/)
- [/r/newtworking](https://www.reddit.com/r/networking/)
- [/r/howtohack](https://www.reddit.com/r/HowToHack/)
- [/r/sysadmin](https://www.reddit.com/r/sysadmin/)
- [/r/securityblueteam](https://www.reddit.com/r/SecurityBlueTeam/)
- [/r/security](https://www.reddit.com/r/security/)

### Youtube Channels (needs descriptions)
 - [Live Overflow](https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w)
 - [Network Chuck](https://www.youtube.com/channel/UC9x0AN7BWHpCDHSm9NiJFJQ)
 - [HackerSploit](https://www.youtube.com/channel/UC0ZTPkdxlAKf-V33tqXwi3Q)
 - [The Cyber Mentor](https://www.youtube.com/channel/UC0ArlFuFYMpEewyRBzdLHiw)
 - [DefCon](https://www.youtube.com/user/DEFCONConference)
 - [NullByte](https://www.youtube.com/channel/UCgTNupxATBfWmfehv21ym-g)
 - [/dev/null](https://www.youtube.com/channel/UCGISJ8ZHkmIv1CaoHovK-Xw/videos)
 - [DeviantOllam(Lock Picking)](https://www.youtube.com/user/DeviantOllam/videos)
 - [Devon Crawford](https://www.youtube.com/channel/UCDrekHmOnkptxq3gUU0IyfA/videos)
 - [Programming with Mosh](https://www.youtube.com/channel/UCWv7vMbMWH4-V0ZXdmDpPBA)
 - [Kalle Hallden](https://www.youtube.com/channel/UCWr0mx597DnSGLFk1WfvSkQ)
 - [Alex Lee](https://www.youtube.com/channel/UC_fFL5jgoCOrwAVoM_fBYwA)
 - [javidx9](https://www.youtube.com/channel/UC-yuWVUplUJZvieEligKBkA)
 - [Hak5](https://www.youtube.com/channel/UC3s0BtrBJpwNDaflRSoiieQ)
 - [The Shadow Brokers](https://www.youtube.com/channel/UCkpwPf2B4FphjqVcozDym0A)
 
 ### Books/Publishers
 - [No Starch Press](https://nostarch.com/catalog/)
    - Technical books on hardware, programming, hacking, firewalls, and much more.
 - [Packt Publishing](https://www.packtpub.com/free-learning)
     - Technical books. Packt also releases a free ebook every single day!
 
 ### Bug Bountys
  - [BugCrowd](https://www.bugcrowd.com/)
    - A site with a collection of bug bounty programs. This site also contains a feed of disclosed vulnerabilities for these programs, which can be helpful for learning.
  - [HackerOne](https://www.hackerone.com/)
    - A site with a collection of bug bounty programs. This site also contains a feed of disclosed vulnerabilities for these programs, which can be helpful for learning.
 
### \#\#TODO
- Things to add
  - Ansible
  - Terraform
  - More blue team stuff
  - Sorting System for the YouTube channels(Problem is some channels do more than one topic)
    - Descriptions? Tags? Etc. 
  - Anything else I haven't thought of

resources

resources Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

resources

resources Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README