Pentest-bookmarks v1.5

Bookmarks

Bookmarks Menu

• Recently Bookmarked

• Recent Tags

  ---

• Mozilla Firefox

• Help and Tutorials

• Customize Firefox

• Get Involved

• About Us

• Recently Bookmarked

• Recent Tags

  ---

• Mozilla Firefox

• Help and Tutorials

• Customize Firefox

• Get Involved

• About Us

• Hackery

• http://www.ikkisoft.com/stuff/SMH_XSS.txt

• XFS 101: Cross-Frame Scripting Explained | SecureState Information Security Blog

• What The Fuck Is My Information Security Strategy?

• OWASP_DanielCutbert_Evolution_WebAppPenTest.mp4

• DeepSec 2007 - Aaron Portnoy Cody Pierce - RPC Auditing Tools and Techniques

• extern blog SensePost;

• Zen One: PCI Compliance - Disable SSLv2 and Weak Ciphers

• HD Moore on Metasploit, Exploitation and the Art of Pen Testing | threatpost

• Network Time Protocol (NTP) Fun | carnal0wnage.attackresearch.com

• black-box-scanners-dimva2010.pdf (application/pdf Object)

• Database_Pen_Testing_ISSA_March_25_V2.pdf (application/pdf Object)

• Stupid htaccess Tricks • Perishable Press

• Information Security Conferences Calnedar

• http://intruded.net/

• SmashTheStack Wargaming Network

• flack & hkpco.kr

• HC's Capture the Flag site

• The UCSB iCTF

• CTF Calendar

• pyrit - WPA/WPA2-PSK and a world of affordable many-core platforms - Google Project Hosting

• SQLi

• uploadtricks

• LFI/RFI

• XSS

• Coldfusion

• SharePoint

• Lotus

• jboss

• vmware web

• Oracle appserver

• SAP

• MSSQL Injection Cheat Sheet - pentestmonkey.net

• SQL Injection Cheat Sheet

• EvilSQL Cheatsheet

• RSnake SQL Injection Cheatsheet

• Mediaservice.net SQLi Cheatsheet

• MySQL Injection Cheat Sheet

• Full MSSQL Injection PWNage

• MS Access SQL Injection Cheat Sheet » krazl - â„¢ ķЯαž£ â„¢ - bloggerholic

• MS Access SQL Injection Cheat Sheet

• Penetration Testing: Access SQL Injection

• Testing for MS Access - OWASP

• Security Override - Articles: The Complete Guide to SQL Injections

• Obfuscated SQL Injection attacks

• Exploiting hard filtered SQL Injections « Reiners’ Weblog

• SQL Injection Attack

• YouTube - Joe McCray - Advanced SQL Injection - LayerOne 2009

• Joe McCray - Advanced SQL Injection - L1 2009.pdf (application/pdf Object)

• Joseph McCray SQL Injection

• sla.ckers.org web application security forum :: Obfuscation :: SQL filter evasion

• sqli2.pdf (application/pdf Object)

• SQL Server Version - SQLTeam.com

• Overlooked SQL Injection 20071021.pdf (application/pdf Object)

• SQLInjectionCommentary20071021.pdf (application/pdf Object)

• bypassing upload file type - Google Search

• Skeptikal.org: Adobe Responds... Sort Of

• Secure File Upload in PHP Web Applications | INSIC DESIGNS

• Stupid htaccess Tricks • Perishable Press

• Tricks and Tips: Bypassing Image Uploaders. - By: t3hmadhatt3r

• Security FCKeditor ADS File Upload Vulnerability - Windows Only

• Cross Site Scripting scanner â€「 Free XSS Security Scanner

• VUPEN - Microsoft IIS File Extension Processing Security Bypass Vulnerability / Exploit (Security Advisories - VUPEN/ADV-2009-3634)

• Uploading Files Using the File Field Control

• TangoCMS - Security #237: File Upload Filter Bypass in TangoCMS <=2.5.0 - TangoCMS Project

• Full Disclosure: Zeroboard File Upload & extension bypass Vulnerability

• Cross-site File Upload Attacks | GNUCITIZEN

• TikiWiki jhot.php Script File Upload Security Bypass Vulnerability

• FileUploadSecurity - SH/SC Wiki

• http://pastie.org/840199

• Exploiting PHP File Inclusion â€「 Overview « Reiners’ Weblog

• LFI..Code Exec..Remote Root!

• Local File Inclusion â€「 Tricks of the Trade « Neohapsis Labs

• Blog, When All You Can Do Is Read - DigiNinja

• The Anatomy of Cross Site Scripting

• Whitepapers - www.technicalinfo.net

• Cross-Site Scripting (XSS) â€「 no script required - Tales from the Crypto

• Guide Cross Site Scripting - Attack and Defense guide - InterN0T - Underground Security Training

• BlackHat-EU-2010-Lindsay-Nava-IE8-XSS-Filters-slides.pdf (application/pdf Object)

• sirdarckcat: Our Favorite XSS Filters and how to Attack them

• Filter Evasion â€「 Houdini on the Wire « Security Aegis

• HTML5 Security Cheatsheet

• XSS - Cross Site Scripting

• sla.ckers.org web application security forum :: XSS Info

• [DOM Based Cross Site Scripting or XSS of the Third Kind] Web Security Articles - Web Application Security Consortium

• What's Possible with XSS?

• ColdFusion directory traversal FAQ (CVE-2010-2861) | GNUCITIZEN

• Attacking ColdFusion. | Sigurnost i zastita informacija

• Attacking ColdFusion

• HP Blogs - Adobe ColdFusion's Directory Traversal Disaster - The HP Blog Hub

• 254_ShlomyGantz_August2009_HackProofingColdFusion.pdf (application/pdf Object)

• Adobe XML Injection Metasploit Module | carnal0wnage.attackresearch.com

• Computer Security Blog: PR10-08 Various XSS and information disclosure flaws within Adobe ColdFusion administration console

• The Ethical Hacker Network - Pen Testing Sharepoint

• Lotus Notes/Domino Security - David Robert's -castlebbs- Blog

• Penetration Testing: Re: Lotus Notes

• Hacking Lotus Domino | SecTechno

• Whitepaper-Hacking-jBoss-using-a-Browser.pdf (application/pdf Object)

• Minded Security Blog: Good Bye Critical Jboss 0day

• Metasploit Penetration Testing Framework - Module Browser

• hideaway [dot] net: Hacking Oracle Application Servers

• Testing for Oracle - OWASP

• OraScan

• NGSSQuirreL for Oracle

• hpoas.pdf (application/pdf Object)

• Onapsis | Research Labs

• '[john-users] patch for SAP-passwords (BCODE & PASSCODE)' - MARC

• Phenoelit SAP exploits

• Sec / Hacking

• Metasploit

• Programming

• Other/Misc

• Penetration Testing and Vulnerability Analysis - Home

• Network Sniffers Class for the Kentuckiana ISSA 2011 (Hacking Illustrated Series InfoSec Tutorial Videos)

• CNIT 124: Advanced Ethical Hacking -- Sam Bowne

• CS 279 - Advanced Topics in Security

• CS142 Web Programming and Security - Stanford

• CS155 Computer and Network Security - Stanford

• CSE 227: Computer Security - UCSD

• CS 161: Computer Security - UC Berkley

• Security Talks - UCLA

• CSCI 4971 Secure Software Principles - RPI

• MCS 494 UNIX Security Holes

• Software Security - CMU

• T-110.6220 Special Topics in Ifocsec -TKK

• Sec and Infosec Related - MIT

• Metasploit Unleashed

• Metasploit Class Videos  (Hacking Illustrated Series InfoSec Tutorial Videos)

• Metasploit Megaprimer 300+ mins of video

• Metasploit Tips and Tricks - Ryan Linn

• OffSecOhioChapter, Metasploit Class2 - Part1

• OffSecOhioChapter, Metasploit Class2 - Part2

• OffSecOhioChapter, Metasploit Class2 - Part3

• Video Tutorials - Technology Demonstrations - tekniqal.com

• Google's Python Class - Google's Python Class - Google Code

• Python en:Table of Contents - Notes

• TheNewBoston â€「 Free Educational Video Tutorials on Computer Programming and More! » Python

• Python Videos, Tutorials and Screencasts

• Learning Python Programming Language Through Video Lectures - good coders code, great reuse

• Python

• Ruby

• CS490 Windows Internals

• T-110.6220 Lectures - Noppa - TKK

• Index of /edu/training/ss/lecture/new-documents/Lectures

•  InfoSec Resources

• Robert Hansen on Vimeo

• OSINT

• Google Hacking

• Web

• Social Engineering

• Password

• Metasploit

• NSE

• Net Scanners & Scripts

• Post Exploitation

• Netcat

• Source Inspection

• Firefox Addons

• Tool Listings

• document-metadata-silent-killer_32974 (application/pdf Object)

• [strike out]

• ExifTool by Phil Harvey

• Edge-Security - Metagoofil - Metadata analyzer - Information Gathering

• Security and Networking - Blog - Metadata Enumeration with FOCA

• Edge-Security - theHarvester- Information Gathering

• DNSTRACER man-page

• Maltego 3

• Metadata

• Midnight Research Labs - SEAT

• Google Hacking Diggity Project « Stach & Liu

• dorkScan.py

• Burp

• SensePost - reDuh - HTTP Tunneling Proxy

• OWASP WebScarab NG Project - OWASP

• Mallory: Transparent TCP and UDP Proxy â€「 Intrepidus Group - Insight

• Fiddler Web Debugger - A free web debugging tool

• Watcher: Web security testing tool and passive vulnerability scanner

• X5S

• fuzzing-approach-credentials-discovery-burp-intruder_33214 (application/pdf Object)

• Constricting the Web: The GDS Burp API - Gotham Digital Science

• Browse Belch - Burp External Channel v1.0 Files on SourceForge.net

• Burp Suite Tutorial â€「 Repeater and Comparer Tools « Security Ninja

• w3af in burp

• Attack and Defense Labs - Tools

• burp suite tutorial - English

• w3af - Web Application Attack and Audit Framework

• skipfish - Project Hosting on Google Code

• sqlmap: automatic SQL injection tool

• SQID - SQL Injection digger

• http://www.packetstormsecurity.org/UNIX/scanners/XSSscan.py.txt

• WindowsAttack - fimap - Windows Attacking Example - Project Hosting on Google Code

• fm-fsf - Project Hosting on Google Code

• Websecurify

• News :: Arachni - Web Application Security Scanner Framework

• rfiscan ≈ Packet Storm

• lfi-rfi2 scanner ≈ Packet Storm

• inspathx â€「 Tool For Finding Path Disclosure Vulnerabilities

• DotDotPwn - The Directory Traversal Fuzzer 2.1 ≈ Packet Storm

• SourceForge.net: Yokoso!

• AJAX/PHP Command Shell

• fuzzdb - Project Hosting on Google Code

• OWASP Fuzzing Code Database - OWASP

• BeEF

• BlindElephant Web Application Fingerprinter

• XSSer: automatic tool for pentesting XSS attacks against different applications

• RIPS | Download RIPS software for free at SourceForge.net

• http://www.divineinvasion.net/authforce/

• Attack and Defense Labs - Tools

• Browser_Exploitation_for_Fun&Profit

• Using sqid (SQL Injection Digger) to look for SQL Injection

• pinata-CSRF-tool

• XSSer: automatic tool for pentesting XSS attacks against different applications

• Clickjacker

• unicode-fun.txt ≈ Packet Storm

• WebService-Attacker

• Attack Strings

• Shells

• Scanners

• Proxies

• koto/squid-imposter - GitHub

• squid-imposter - Phishing attack w/HTML5 offline cache framework based on Squid proxy

• Social Engineering Toolkit

• Ncrack

• Medusa

• JTR

• Ophcrack

• keimpx in action | 0x3f

• keimpx - Project Hosting on Google Code

• hashkill

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• Tenable Network Security

• markremark: Reverse Pivots with Metasploit - How NOT to make the lightbulb

• WmapNikto - msf-hack - One-sentence summary of this page. - Project Hosting on Google Code

• markremark: Metasploit Visual Basic Payloads in action

• Metasploit Mailing List

• PaulDotCom: Archives

• OpenSSH-Script for meterpreter available !

• Metasploit: Automating the Metasploit Console

• 561

• Deploying Metasploit as a Payload on a Rooted Box Tutorial

• Metasploit/MeterpreterClient - Wikibooks, collection of open-content textbooks

• SecTor 2010 - HD Moore - Beyond Exploits on Vimeo

• XLSinjector « Milo2012's Security Blog

• Armitage - Cyber Attack Management for Metasploit

• Nsploit

• neurosurgery-with-meterpreter

• (automating msf) UAV-slides.pdf

• MSF Exploits or Easy

• Nmap Scripting Engine Primer Tutorial

• NSEDoc Reference Portal

• Nmap

• sambascan2 - SMB scanner

• SoftPerfect Network Scanner

• OpenVAS

• Nessus Community | Tenable Network Security

• Nexpose Community | Rapid7

• Retina Community

• http://www.awarenetwork.org/home/rattle/source/python/exe2bat.py

• Metacab | PHX2600

• Re: Your favorite Ncat/nc/Netcat trick? - ReadList.com

• ads.pdf (application/pdf Object)

• Netcat_for_the_Masses_DDebeer.pdf (application/pdf Object)

• netcat_cheat_sheet_v1.pdf (application/pdf Object)

• socat

• NetCat tutorial: Day1 [Archive] - Antionline Forums - Maximum Security for a Connected World

• Netcat tricks « Jonathan’s Techno-tales

• Nmap Development: Re: Your favorite Ncat/nc/Netcat trick?

• Few Useful Netcat Tricks « Terminally Incoherent

• Skoudis_pentestsecrets.pdf (application/pdf Object)

• Cracked, inSecure and Generally Broken: Netcat

• Ncat for Netcat Users

• Graudit - Just Another Hacker

• javasnoop - Project Hosting on Google Code

• David's Pen Testing (Security) Collection :: Collections :: Pengaya untuk Firefox

• OSVDB :: Add-ons for Firefox

• Packet Storm search plugin. :: Add-ons for Firefox

• Default Passwords - CIRT.net :: Add-ons for Firefox

• Offsec Exploit-db Search :: Add-ons for Firefox

• OVAL repository search plugin :: Add-ons for Firefox

• CVE ® dictionary search plugin :: Add-ons for Firefox

• HackBar :: Add-ons for Firefox

• .:[ packet storm ]:. - tools

• Security and Hacking Tools

• Introduction to dsniff - GIAC Certified Student Practical

• dsniff-n-mirror.pdf (application/pdf Object)

• dsniff.pdf (application/pdf Object)

• A Hacker's Story: Let me tell you just how easily I can steal your personal data - Techvibes.com

• ECCE101.pdf (application/pdf Object)

• 3.pdf (application/pdf Object)

• Seven_Deadliest_UC_Attacks_Ch3.pdf (application/pdf Object)

• cracking-air.pdf (application/pdf Object)

• bh-europe-03-valleri.pdf (application/pdf Object)

• Costa.pdf (application/pdf Object)

• defcon-17-sam_bowne-hijacking_web_2.0.pdf (application/pdf Object)

• Live_Hacking.pdf (application/pdf Object)

• PasstheParcel-MITMGuide.pdf (application/pdf Object)

• 2010JohnStrandKeynote.pdf (application/pdf Object)

• 18.Ettercap_Spoof.pdf (application/pdf Object)

• EtterCap ARP Spoofing & Beyond.pdf (application/pdf Object)

• Fun With EtterCap Filters.pdf (application/pdf Object)

• The_Magic_of_Ettercap.pdf (application/pdf Object)

• arp_spoofing.pdf (application/pdf Object)

• Ettercap(ManInTheMiddleAttack-tool).pdf (application/pdf Object)

• ICTSecurity-2004-26.pdf (application/pdf Object)

• ettercap_Nov_6_2005-1.pdf (application/pdf Object)

• MadIrish.net Mallory is More than a Proxy

• Thicknet: It does more than Oracle, Steve Ocepek securityjustice on USTREAM. Computers

• Password Exploitation Class

• Default Passwords Database

• Sinbad Security Blog: MS SQL Server Password Recovery

• Foofus Networking Services - Medusa::SMBNT

• LM/NTLM Challenge / Response Authentication - Foofus.Net Security Stuff

• MD5 Crackers | Password Recovery | Wordlist Downloads

• Password Storage Locations For Popular Windows Applications

• Online Hash Crack MD5 / LM / NTLM / SHA1 / MySQL - Passwords recovery - Reverse hash lookup Online - Hash Calculator

• Requested MD5 Hash queue

• Virus.Org

• Default Password List

• Electric Alchemy: Cracking Passwords in the Cloud: Breaking PGP on EC2 with EDPR

• Wordlists

• Pass the Hash

• "Crack Me If You Can" - DEFCON 2011

• Packet Storm Word Lists

• Passwords - SkullSecurity

• Index of /passwd/passwords

• pass-the-hash-attacks-tools-mitigation_33283 (application/pdf Object)

• crack-pass-hash_33219 (application/pdf Object)

• TiGa's IDA Video Tutorial Site

• Binary Auditing

• http://visi.kenshoto.com/

• radare

• Offensive Computing | Community Malicious code research and analysis

• Exploitation - it-sec-catalog - References to vulnerability exploitation stuff. - Project Hosting on Google Code

• Myne-us: From 0x90 to 0x4c454554, a journey into exploitation.

• Past, Present, Future of Windows Exploitation | Abysssec Security Research

• Smash the Stack 2010

• The Ethical Hacker Network - Smashing The Modern Stack For Fun And Profit

• x9090's Blog: [TUTORIAL] Exploit Writting Tutorial From Basic To Intermediate

• X86 Opcode and Instruction Reference

• This reference is intended to be precise opcode and instruction set  reference (including x86-64). Its principal aim is exact definition  of instruction parameters and attributes.

• ISO's / VMs

• Vulnerable Software

• Test Sites

• Web Security Dojo

• OWASP Broken Web applications Project

• Pentest Live CDs

• NETinVM

• :: moth - Bonsai Information Security ::

• Metasploit: Introducing Metasploitable

• Holynix pen-test distribution

• WackoPico

• LAMPSecurity

• Hacking-Lab.com LiveCD

• Virtual Hacking Lab

• Badstore.net

• Mutillidae: A Deliberately Vulnerable Set Of PHP Scripts

• Damn Vulnerable Web App - DVWA

• pWnOS

• The ButterFly - Security Project

• Old Version Downloads - OldApps.com

• OldVersion.com

• Web Application exploits, php exploits, asp exploits

• wavsep - Web Application Vulnerability Scanner Evaluation Project

• OWASP SiteGenerator - OWASP

• Hacme Books | McAfee Free Tools

• Hacme Casino v1.0 | McAfee Free Tools

• Hacme Shipping | McAfee Free Tools

• Hacme Travel | McAfee Free Tools

• Test Site

• CrackMeBank Investments

• http://zero.webappsecurity.com

• acublog news

• acuforum forums

• Home of Acunetix Art

• Altoro Mutual

• NT OBJECTives

• BackTrack Linux

• Matriux

• nUbuntu

• Samurai Web Testing Framework

• OWASP Live CD Project

• Pentoo

• Katana

• KON-BOOT

• Welcome to Linux From Scratch!

• SUMO Linux

• pentesting packages for ubuntu

• BackBox Linux | Flexible Penetration Testing Distribution

• Big Port DB | Cirt

• Cheat Sheet : All Cheat Sheets in one page

• Security Advancements at the Monastery » Blog Archive » What’s in Your Folder: Security Cheat Sheets

• Information about developments at the Monastery

• Agile Hacking

• OS & Scripts

• Tools

• Agile Hacking: A Homegrown Telnet-based Portscanner | GNUCITIZEN

• Command Line Kung Fu

• Simple yet effective: Directory Bruteforcing

• The Grammar of WMIC

• Windows Command-Line Kung Fu with WMIC

• Windows CMD Commands

• running a command on every mac

• Syn: Command-Line Ninjitsu

• WMIC, the other OTHER white meat.

• Hacking Without Tools: Windows - RST

• Pentesting Ninjitsu 1

• Pentesting Ninjitsu 2 Infrastructure and Netcat without Netcat

• [PenTester Scripting]

• windows-scripting-COM-tricks

• Advanced-Command-Exploitation

• IPv4 subnetting reference - Wikipedia, the free encyclopedia

• All the Best Linux Cheat Sheets

• SHELLdorado - Shell Tips & Tricks (Beginner)

• Linux Survival :: Where learning Linux is easy

• BashPitfalls - Greg's Wiki

• Rubular: a Ruby regular expression editor and tester

• http://www.iana.org/assignments/port-numbers

• Useful commands for Windows administrators

• All the Best Linux Cheat Sheets

• Rubular: a Ruby regular expression editor

• netcat cheat sheet (ed skoudis)

• nessus/nmap (older)

• hping3 cheatsheet

• Nmap 5 (new)

• MSF, Fgdump, Hping

• Metasploit meterpreter cheat sheet reference

• Netcat cheat sheet

• The Exploit Database

• .:[ packet storm ]:.

• SecurityFocus

• SecurityForest

• NIST

• OSVDB: The Open Source Vulnerability Database

• SecDocs IT Security and Hacking knowledge base

• Nullbyte.Org.IL

• CVE security vulnerability database

• Secunia.com

• CVE - Common Vulnerabilities and Exposures (CVE)

• Presentations

• People and Orginizational

• Infastructure

• Enterprise Open Source Intelligence Gathering â€「 Part 1 Social Networks â€」 spylogic.net

• Enterprise Open Source Intelligence Gathering â€「 Part 2 Blogs, Message Boards and Metadata â€」 spylogic.net

• Enterprise Open Source Intelligence Gathering â€「 Part 3 Monitoring and Social Media Policies â€」 spylogic.net

• Tactical Information Gathering

• document_metadata_the_silent_killer__32974 (application/pdf Object)

• footprinting - passive information gathering before a pentest

• spokeo.com - People Search

• 123people.com

• Spoke.com - Business Directory

• Business Network - Social Network for Business Professionals

• ZoomInfo

• Pipl - People Search

• Free People Search by ZabaSearch!

• Free People Finder and Company Search | SearchBug

• Free People Search

• Addictomatic: Inhale the Web

• Real Time Search - Social Mention

• EntityCube

• yasni.com | No. 1 free people search - Find anyone on the web

• Tweepz.com - search, find and discover interesting people on twitter

• TweepSearch :: Twitter Profile and Bio Search

• Glassdoor.com - Company Salaries and Reviews

• Jigsaw Business Contact Directory

• Full Text Search

• TinEye Reverse Image Search

• PeekYou

• PicFog - Quick Image Search

• Twapper Keeper - "We save tweets" - Archive Tweets

• White Pages | Email Lookup | People Find Tools at The Ultimates

• Netcraft Uptime Survey

• SHODAN - Computer Search Engine

• Domain Tools: Whois Lookup and Domain Suggestions

• Free online network utilities - traceroute, nslookup, automatic whois lookup, ping, finger

• http://hackerfantastic.com/

• WHOIS and Reverse IP Service

• MSN IP Search

• SSL Labs - Projects / Public SSL Server Database - SSL Server Test

• MyIPNeighbors Reverse IP Lookup

• Google Hacking Database, GHDB, Google Dorks

• Domain - reports and all about ips, networks and dns

• net toolkit::index

• IHS |  GHDB

• Penetration Testing Framework

• The Penetration Testing Execution Standard

• Web Application Security Consortium (WASC)

• OWASP top 10

• social-engineer.org

• Blogs worth it

• Forums

• Magazines

• Video

• Carnal0wnage

• McGrew Security

• Blog | GNUCITIZEN

• Darknet

• spylogic.net

• TaoSecurity

• Room362.com

• SIPVicious

• PortSwigger.net

• Blog - pentestmonkey.net

• Jeremiah Grossman

• omg.wtf.bbq.

• Cатсн²² (in)sесuяitу

• SkullSecurity

• Metasploit

• Security and Networking

• Skeptikal.org

• Digital Soapbox

• tssci security

• Blog - Gotham Digital Science

• Reiners’ Weblog

• Bernardo Damele A. G.

• Laramies Corner

• Attack and Defense Labs

• Billy (BK) Rios

• Common Exploits

• extern blog SensePost;

• Weapons of Mass Analysis

• Exploit KB

• Security Reliks

• MadIrish.net

• sirdarckcat

• Reusable Security

• Myne-us

• www.notsosecure.com

• SpiderLabs Anterior

• Corelan Team | Peter Van Eeckhoutte (corelanc0d3r)

• DigiNinja

• Home Of PaulDotCom Security Podcast

• Attack Vector

• deviating.net

• Alpha One Labs

• SmashingPasswords.com

• wirewatcher

• gynvael.coldwind//vx.log

• Nullthreat Security

• Archangel Amael's BT Tutorials

• memset's blog

• ihasomgsecurityskills

• punter-infosec

• Security Ninja

• Security and risk

• GRM n00bs

• Kioptrix

• ::eSploit::

• PenTestIT — Your source for Information Security Related information!

• Your source for Information Security related information!

• BackTrack Forums

• EliteHackers.info

• InterN0T forum

• Government Security

• Hack This Site Forum

• iExploit Hacking Forum

• Security Override

• bright-shadows.net

• ethicalhacker.net

• sla.ckers.org

• (IN)SECURE Magazine

• http://hakin9.org/

• The Hacker News Network

• Security Tube

• Irongeek -Hacking Illustrated

• SecCon Archive

• 27c3-stream/releases/mkv

• YouTube - ChRiStIaAn008's Channel

• YouTube - HackingCons's Channel

• Hacker Media

• Methodologies

• OSINT

• Exploits and Advisories

• Cheat Sheets and Syntax

• Distros

• Labs

• Exploitation Intro

• Reverse Engineering & Malware

• Passwords and Hashes

• MitM

• Tools

• Training/Classes

• Web Vectors

• Wireless

• Capture the Flag/Wargames

• Conferences

• misc/unsorted

• Bookmarks Toolbar

• Add bookmarks to this folder to see them displayed on the Bookmarks Toolbar

• Most Visited

• Getting Started

• Latest Headlines