Hacking Resources

Have fun

Play more

We highly encourage you to expand your knowledge in the ever-evolving world of hacking.

Use this growing list of resources to explore many hacking tools, games & exercises.

Play more... Learn more...

OverTheWire: Bandit: Learn the Linux command line, basic scripting, gamified.
overthewire.org →
VulnHub: Downloadable vulnerable virtual machines of varying difficulty.
vulnhub.com →
PortSwigger Web Security Academy: Learn web hacking techniques from the creators of Burp Suite.
portswigger.net →
OWASP Testing Guide (Book): Methodology for web app assessments.
owasp.org →
MITRE ATT&CK Framework: Incredible resource for methodology development and researching TTPs.
attack.mitre.org →
CTFtime.org: Calendar for upcoming CTFs
ctftime.org →

TryHackMe: Pentesting, web hacking, forensics for all skill levels.
tryhackme.com →
TheCyberMentor (TCM Security): Many courses with certification paths, videos, labs, etc.
thecybermentor.com →

Hack The Box: CTF style vulnerable machines, cert prep for OSCP.
hackthebox.com →
PentesterLab: Web app pentesting labs/guides.
pentesterlab.com →
The Web Application Hacker's Handbook: Classic book that is a guide to all things web app security.
amazon.com →

HackerOne: The ultimate line of defense, uncovering novel and elusive vulnerabilities missed by other controls.
hackerone.com →
BugCrowd: The Bugcrowd Platform unleashes the ingenuity of skilled, trusted hackers and pentesters on demand for multiple offensive security use cases
bugcrowd.com →
Intigriti: A great bug bounty program on a secure platform.
intigriti.com →

There are two ways to find out if your defenses hold. One is a real attack. The other starts with a scoping call.