Authors: < nixawk >, < m1guelpf >, < binarymist >

---

is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Contents

• 

• 

  • Network Analysis

    • IP
    • Whois
    • DNS
    • Identify Live Hosts
    • IDS/IPS Identification

  • Web Application

    • Web Application Fingerprint
    • CMS Identification
    • Open Source Analysis
    • IDS/IPS Identification

  • OSINT

    • GHDB
    • People
    • Pictures
    • Media
    • Company
    • Document

• 

  • Vulnerability Scanners

  • Network Assessment

  • Web Application Assessment

    • OWASP CheatSheetSeries

  • Database Assessment

    • MongoDB
    • MySQL
    • Postgresql
    • Sqlite

  • Mobile Assessment

    • Android
    • OWASP-MASVS
    • OWASP-MSTG

  • OS Assessment

    • Mac OSX

• &

  • Network Exploitation
    • Vulnerable Ports List
    • Cisco ASA CVE-2016-6366
  • OS Exploitation
    • Windows
      • Windows 2008 Active Directory Hacking
      • Windows 2012 Credentials dump
      • Metasploit - run vbs payload in cmd.exe
      • Windows Vssadmin
  • Web Exploitation
  • Database Exploitation
  • Wireless Exploitation
  • Social Engineering
  • Physical Exploitation
  • Open Source Exploitation

• 

  • Password Attacks

  • Privilege Escalation Media

    • Windows Privilege Escalation Fundamentals
    • Basic Linux Privilege Escalation

  • Protocol Analysis

  • Spoofing Analysis

• 

  • OS Backdoors
  • Tunneling
  • Web Backdoors

• 

  • Public pentesting reports

• 

  • Penetration Testing Books
  • Hackers Handbook Series
  • Defensive Development
  • Network Analysis Books
  • Reverse Engineering Books
  • Malware Analysis Books
  • Windows Books
  • Social Engineering Books
  • Lock Picking Books
  • OSINT Books

• 

  • Flick
  • Nebula
  • NullByte-1

• 

• 

  • FTP
  • HTTP

How to contribute

1. Check for open issues or open a fresh issue to start a discussion around a feature idea or a bug.
2. Fork the repository on GitHub to start making your changes to the master branch (or branch off of it).
3. Send a pull request and bug the maintainer until it gets merged and published.

Links

• The Penetration Testing Execution Standard
• Penetration Testing Framework 0.59
• How To Become A Hacker
• Github - awesome-pentest