Learning

Curated list of Unix binaries that can be abused to escalate privileges, bypass restrictions or transfer files.

Payloads and bypasses for web security: XSS, SQLi, SSRF, SSTI, deserialization and much more.

The most complete pentesting techniques wiki: Linux, Windows, web, cloud, AD and more.

Free Arizona State University course: from Linux basics to binary and kernel exploitation.

Step-by-step HackTheBox machine walkthrough videos, searchable by technique on ippsec.rocks.

Interactive lessons on common web vulnerabilities.

Structured HTB courses with learning paths for different roles.

Official OffSec courses including PEN-200 (OSCP) and others.

Elite cybersecurity training. GPEN, GWAPT, GCIH and more certifications.

Practical web security labs with progressive exercises.

Practical ethical hacking courses at affordable prices.

Intensive malware analysis course. From zero to automation.

The bible of web pentesting. Covers all web vulnerabilities in depth.

Red Team edition. Advanced offensive strategies used in simulations.

Classic on binary exploitation. Buffer overflows, shellcode and more.

Practical guide to analyze and dissect malware. Very hands-on.

Python programming for hackers and pentesters. Offensive tools.

Practical introduction to pentesting. Ideal for beginners.

The definitive book on social engineering by Christopher Hadnagy.

Cisco introductory course. Learn trends, threats and how to stay safe.