No description
Find a file
2014-12-17 14:47:05 +09:00
books.md reformat and add sources 2014-12-17 14:34:54 +09:00
LICENSE First commit 2014-12-16 21:16:22 +09:00
README.md update sources 2014-12-17 14:47:05 +09:00

Awesome Hacking

A curated list of awesome Hacking. Inspired by awesome-machine-learning

If you want to contribute to this list (please do), send me a pull request or contact me @carpedm20

For a list of free hacking books available for download, go here

Table of Contents

# System ## Tutorials

Tutorials for system hacking

## Tools

Tools for system hacking

  • Metasploit A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
  • mimikatz - A little tool to play with Windows security
## General * [Exploit database](http://www.exploit-db.com/) - An ultimate archive of exploits and vulnerable software # Reverse Engineering ## Tutorials

Tutorials for reverse engineering

## Tools

Tools for reverse engineering

Debugger

  • IDA - IDA is a Windows, Linux or Mac OS X hosted multi-processor disassembler and debugger
  • OllyDbg - A 32-bit assembler level analysing debugger for Windows

Decompiler

Java

  • dex2jar - Tools to work with android .dex and java .class files
  • JD-GUI - A standalone graphical utility that displays Java source codes of “.class” files
  • JAD - JAD Java Decompiler

.NET

  • dotPeek - a free-of-charge .NET decompiler from JetBrains

Unpacker

  • UPX - the Ultimate Packer for eXecutables

General purpose

  • androguard - Reverse engineering, Malware and goodware analysis of Android applications
## General * [Open Malware](http://www.offensivecomputing.net/) # Web ## Tools

Tools for web hacking

Encoding/Decoding

# Network ## Tools

Tools for network analysis

Packet Capture

TCP

  • Wireshark - A free and open-source packet analyzer
  • NetworkMiner - A Network Forensic Analysis Tool (NFAT)
  • tcpdump - a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture

HTTP/HTTPS

  • Paros - A Java based HTTP/HTTPS proxy for assessing web application vulnerability
  • ZAP - The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications

Man In The Middle

  • mitmproxy - An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface
  • mitmsocks4j - Man in the Middle SOCKS Proxy for JAVA

Packet Sniffer

Scanner

  • nmap - Nmap (Network Mapper) is a security scanner
# Forensic ## Tools

Tools for forensic

  • Autospy - A digital forensics platform and graphical interface to The Sleuth Kit and other digital forensics tools

Binary

  • malzilla - Malware hunting tool
  • PEview - a quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files

Hex Editor

  • HxD - A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size
  • WinHex - A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security

Others

  • BinText - A small, very fast and powerful text extractor that will be of particular interest to programmers

Cryptography

# Wargame ## System * [OverTheWire - Semtex](http://overthewire.org/wargames/semtex/) * [OverTheWire - Vortex](http://overthewire.org/wargames/vortex/) * [OverTheWire - Drifter](http://overthewire.org/wargames/drifter/) * [pwnable.kr](http://pwnable.kr/) - Provide various pwn challenges regarding system security * [Exploit Exercises - Nebula](https://exploit-exercises.com/nebula/) * [SmashTheStack](http://smashthestack.org/) ## Reverse Engineering * [Reversing.kr](http://www.reversing.kr/) - This site tests your ability to Cracking & Reverse Code Engineering * [CodeEngn](http://codeengn.com/challenges/) - (Korean) * [simples.kr](http://simples.kr/) - (Korean) ## Web * [Hack This Site!](https://www.hackthissite.org/) - a free, safe and legal training ground for hackers to test and expand their hacking skills * [Webhacking.kr](http://webhacking.kr/) ## Cryptography * [OverTheWire - Krypton](http://overthewire.org/wargames/krypton/) ## general # CTF ## Competition * [DEF CON](https://legitbs.net/) * [CSAW CTF](https://ctf.isis.poly.edu/) * [hack.lu CTF](http://hack.lu/) * [Pliad CTF](http://www.plaidctf.com/) * [RuCTFe](http://ructf.org/e/) * [Ghost in the Shellcode](http://ghostintheshellcode.com/) * [PHD CTF](http://phdays.com/) * [SECUINSIDE CTF](http://secuinside.com/) * [Codegate CTF](http://ctf.codegate.org/html/Main.html?lang=eng) * [Boston Key Party CTF](http://bostonkeyparty.net/) ## Information * [CTFtime.org](https://ctftime.org/) - All about CTF (Capture The Flag) * [WeChall](http://www.wechall.net/)