Skip to content
69

Awesome Resources For Learning Ethical Hacking & Pentesting

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

3.8k stars562 forks96 entriesLast push Apr 18, 2026 (5 months ago)License MIT

This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.

Learning Platforms to Sharpen Your Skills >Online

CTF Hacker101

The Hacker101 CTF is a game designed to let you learn to hack in a safe, rewarding environment. Hacker101 is a free educational site for hackers.

In 2 lists

Hack The Box :: Penetration Testing Labs

An online platform to test and advance your skills in penetration testing and cyber security. Join today and start training in our online labs.

In 7 listsDetails

TryHackMe

TryHackMe is an online platform that teaches cyber security through short, gamified real-world labs.

In 7 listsDetails

CTF365

An account-based ctf site, awarded by Kaspersky, MIT, and T-Mobile.

Backdoor

Pen testing labs that have a space for beginners, a practice arena, and various competitions, account required.

In 2 lists

Hack.me

Lets you build/host/attack vulnerable web apps.

CTFLearn

An account-based ctf site, where users can go in and solve a range of challenges.

OWASP Vulnerable Web Applications Directory Project (Online)

List of online available vulnerable applications for learning purposes.

In 3 lists

Pentestit labs

Hands-on Pentesting Labs (OSCP style)

In 2 lists

Root-me.org

Hundreds of challenges are available to train yourself in different and not simulated environments

In 6 listsDetails

Vulnhub.com

Vulnerable By Design VMs for practical 'hands-on' experience in digital security

In 5 listsDetails

Windows / Linux Local Privilege Escalation Workshop

Practice your Linux and Windows privilege escalation.

In 4 lists

Hacking Articles

CTF Brief Write-up collection with a lot of screenshots good for beginners.

Rafay Hacking Articles, a great blog

Write up collections by Rafay Baloch.

PentesterLab

20$ signature, complete content basic to write exploits, web, android.

In 7 listsDetails

CyberSec WTF

Emulated web pentesting challenges from bounty write-ups

Pentest-Ground

Pentest Ground is a free playground with deliberately vulnerable web applications and network services.

In 4 lists

pwn.guide

A cybersecurity education website, offering about 100 tutorials, ranging from web, wireless... hacking to defense tutorials & forensics. Offers free plan.

HTB Writeups

The most comprehensive collection of Hack The Box writeups on GitHub - 500+ machines, 400+ challenges, ProLabs, Sherlocks (DFIR), endgames, and CTF events with full walkthroughs.

In 2 lists

Learning Platforms to Sharpen Your Skills >Off-Line

Damn Vulnerable Xebia Training Environment

Docker Container including several vulnerable web applications (DVWA, DVWServices, DVWSockets, WebGoat, Juiceshop, Railsgoat, django.NV, Buggy Bank, Mutilidae II and more)

In 3 lists

OopsSec Store

An intentionally vulnerable e-commerce app built with Next.js for web security training (OWASP Top 10, API security, CTF challenges). Quick start with npx create-oss-store.

In 4 listsDetails

OWASP Vulnerable Web Applications Directory Project (Online)

List of online available vulnerable applications for learning purposes.

In 3 lists

Vulnerable Machines/Websites

FiringRange

Vulnerability Databases And Resources

http://www.exploit-db.com/

http://1337day.com/

http://securityvulns.com/

http://www.securityfocus.com/

http://www.osvdb.org/

http://www.securiteam.com/

Independent source of software vulnerability information.

In 2 lists

http://secunia.com/advisories/

http://insecure.org/sploits_all.html

http://zerodayinitiative.com/advisories/published/

Bug bounty program with publicly accessible archive of published security advisories, operated by TippingPoint.

In 2 lists

http://nmrc.org/pub/index.html

http://web.nvd.nist.gov

http://www.vupen.com/english/security-advisories/

http://www.vupen.com/blog/

http://cvedetails.com/

http://www.rapid7.com/vulndb/index.jsp

http://oval.mitre.org/

http://sploitus.com/

http://cxsecurity.com/

Vulnerability Databases And Resources >Malware Analysis

Malware traffic analysis

list of traffic analysis exercises

In 2 lists

Malware Analysis - CSCI 4976

another class from the folks at RPISEC, quality content

In 4 lists

Bad Binaries

walkthrough documents of malware traffic analysis exercises and some occasional malware analysis.

Vulnerability Databases And Resources >Linux Penetration Testing OS

Kali

the infamous pen-testing distro from the folks at Offensive Security

Parrot

Debian includes a full portable lab for security, DFIR, and development

In 4 listsDetails

Android Tamer

Android Tamer is a Virtual / Live Platform for Android Security professionals.

In 4 listsDetails

BlackArch

Arch Linux-based pentesting distro, compatible with Arch installs

In 5 listsDetails

LionSec Linux

pentesting OS based on Ubuntu

NullSec Linux

Security-focused distro with automotive hacking, forensics, and advanced pentesting tools

In 4 listsDetails

Courses

Computer Systems Security, MIT

cisco's cources

3.cybrary 4.hackers academy

Workshops/Playlists

Web Hacking

Ethical Hacking, A Comprehensive Playlist covering almost everything

Security Talks and Conferences

InfoCon - Hacking Conference Archive

In 3 lists

Curated list of Security Talks and Videos

A collected list of awesome security talks.

In 6 listsDetails

Blackhat

Defcon

Security Tube

Kevin Mitnick: Live Hack at CeBIT

Ghost in the Cloud, Kevin Mitnick

Kevin Mitnick | Talks at Google

Complete Free Hacking Course: Go from Beginner to Expert Hacker Today

YouTube Channels

LiveOverflow

Video tutorials on Exploitation.

In 3 lists

Black Hat

Injector Pca

Hisham Mir

Devil Killer

Suleman Malik

Dem0n

Frans Rosén

HackerOne

ak1t4 machine

Shawar Khan

vulnerability0lab

Bugcrowd

Vijay Kumar

Web Development Tutorials

Jan Wikholm

Bhargav Tandel

ErrOr SquaD

SecurityIdiots

Penetration Testing in Linux

Hussnain Fareed

Null Byte

Content about: Networking and security, Tutorials on Pentesting tools, Ethical hacking Featured playlists: Using Wireshark, NodeMCU, RaspberryPi, Cyber Weapons lab.

In 2 lists

ZAID

vabs tutorial

the cyber mentor

PwnFunction

GetCyber

Loi Liang Yang

YouTube Channels >Forums

0x00sec

hacker, malware, computer engineering, Reverse engineering

Antichat

russian based forum

CODEBY.NET

hacker, WAPT, malware, computer engineering, Reverse engineering, forensics - russian based forum

EAST Exploit database

exploit DB for commercial exploits written for EAST Pentest Framework

Greysec

hacking and security forum

Hackforums

posting webstite for hacks/exploits/various discussion

See category
86

Awesome Testing

TheJambo/awesome-testing

A curated list of testing resources

Fresh★ 2.4k176 entriesPushed 2 days ago
84

Awesome Playwright

mxschmitt/awesome-playwright

A curated list of awesome tools, utils and projects using Playwright

Fresh★ 1.6k92 entriesPushed 10 days ago
84

awesome-opensource-email

Mindbaz/awesome-opensource-email

Awesome Opensource Email Resources

Fresh★ 1.2k154 entriesPushed 5 days ago
83

Awesome Selenium

christian-bromann/awesome-selenium

A curated list of delightful Selenium resources.

Fresh★ 1.1k91 entriesPushed 10 days ago
83

Awesome Penetration Testing

enaqx/awesome-pentest

A collection of awesome penetration testing resources and tools

Active★ 27k592 entriesPushed 2 months ago
82

Awesome CodeRabbit

coderabbitai/awesome-coderabbit

Official awesome-list of CodeRabbit Starters & Resources ⚡️

Fresh★ 52838 entriesPushed today