brcyrr/practicalcybersecurityresources

This repository contains a curated list of resources I suggest on LinkedIn and Twitter.📝🌝

Practical Cyber Security Resources 🌟

This repository contains a curated list of resources I suggest on LinkedIn and Twitter.📝🌝 I hope you find it useful.🌸😌

In addition, other platforms where you can connect with me for articles, repositories, and more that I will publish in the new year;

• https://www.linkedin.com/in/brcyrr/

• https://twitter.com/brcyrr

• https://medium.com/@brcyrr

Contents

• Pentest General Resources
• Web Pentest
• Mobile Pentest
• Cloud Security & Pentest
• Bug Bounty
• OSINT & Google Dorks
• API Security & Pentest
• Active Directory
• Red Teaming
• Exploit Development
• AppSec & Code Review
• DevSecOps
• CTFs & Writeups
• Social Engineering
• Certifications
• Roadmaps
• Security Architecture
• IoT Security
• Container Security
• Blockchain Security
• Threat Modelling
• Kubernetes Security
• General Resources

Happy hunting❗️👻

Pentest General Resources 📝

• https://github.com/enaqx/awesome-pentest

• https://blog.compass-security.com/2019/10/hacking-tools-cheat-sheet/

• https://www.ired.team/offensive-security-experiments/offensive-security-cheetsheets

• https://github.com/Hack-with-Github/Awesome-Hacking

• https://github.com/juliocesarfort/public-pentesting-reports

• https://github.com/vlakhani28/Cyber-Security-Resources

• https://github.com/wtsxDev/Penetration-Testing

• https://github.com/wwong99/pentest-notes

• https://github.com/Kitsun3Sec/Pentest-Cheat-Sheets

• https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources

• https://github.com/Samsar4/Ethical-Hacking-Labs

• https://github.com/swisskyrepo/PayloadsAllTheThings

• https://github.com/netbiosX/Checklists

• https://hariprasaanth.notion.site/hariprasaanth/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0

• https://github.com/SubediBibek-cmd/awesome-network-security

• https://github.com/carpedm20/awesome-hacking

• https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE

• https://www.lifars.com/knowledge-center/python-penetration-testing-cheat-sheet/

• https://github.com/purabparihar/Infrastructure-Pentesting-Checklist

• https://github.com/Orange-Cyberdefense/arsenal/tree/master/mindmap

• https://github.com/RafaelFunchal/wordpress-security-checklist/blob/master/items.md

• https://viperone.gitbook.io/pentest-everything/

• https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/

---

Web Pentest 📝

• https://pentestbook.six2dez.com/others/web-checklist

• https://github.com/Ignitetechnologies/Web-Application-Cheatsheet

• https://infosecwriteups.com/serialization-deserialization-attacks-on-php-d5fb02e29248

• https://github.com/infoslack/awesome-web-hacking

• https://github.com/qazbnm456/awesome-web-security

• https://github.com/5bhuv4n35h/pentestmindmap/blob/master/web_application_penetration_testing.png

• https://guidesmiths.github.io/cybersecurity-handbook/attacks_explained/

• https://github.com/dhaval17/awsome-security-write-ups-and-POCs

• https://hariprasaanth.notion.site/hariprasaanth/WEB-APPLICATION-PENTESTING-CHECKLIST-0f02d8074b9d4af7b12b8da2d46ac998

• https://alike-lantern-72d.notion.site/Web-Application-Penetration-Testing-Checklist-4792d95add7d4ffd85dd50a5f50659c6

---

Mobile Pentest 📝

• https://0xn3va.gitbook.io/cheat-sheets/

• https://github.com/muellerberndt/android_app_security_checklist

• https://medium.com/vakifbank-teknoloji/android-application-security-penetration-tests-1-2da29240093d

• https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet

• https://github.com/vaib25vicky/awesome-mobile-security

---

Cloud Security & Pentest 📝

• https://github.com/dafthack/CloudPentestCheatsheets

• https://github.com/TROUBLE-1/Cloud-Pentesting/blob/main/Note %26 Mind Map/Cloud Pentesting/Attacking Cloud.pdf

• https://raw.githubusercontent.com/5bhuv4n35h/pentestmindmap/master/cloud_penetration_testing.png

• https://github.com/six2dez/pentest-book/tree/master/enumeration/cloud

• https://github.com/Funkmyster/awesome-cloud-security

• https://github.com/4ndersonLin/awesome-cloud-security

• https://github.com/aquasecurity/cloud-security-remediation-guides

---

Bug Bounty 📝

• https://bugbountyforum.com/tools/recon/

• https://infosecwriteups.com/bug-bounty-hunting-methodology-toolkit-tips-tricks-blogs-ef6542301c65

• https://infosecsanyam.medium.com/bug-bounty-methodology-ttp-tactics-techniques-and-procedures-v-2-0-2ccd9d7eb2e2

• https://github.com/djadmin/awesome-bug-bounty#write-ups--authors

• https://github.com/bobby-lin/study-bug-bounty

• https://github.com/hahwul/WebHackersWeapons

• https://github.com/jassics/security-study-plan/blob/main/web-pentest-study-plan.md

• https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

• https://bughacking.com/best-bug-bounty-platforms/

• https://github.com/tuhin1729/Bug-Bounty-Methodology

• https://github.com/daffainfo/AllAboutBugBounty

• https://www.infosecmatter.com/bug-bounty-tips-1/

• https://www.infosecmatter.com/bug-bounty-tips-2-jun-30/

• https://github.com/sehno/Bug-bounty/blob/master/bugbounty_checklist.md

• https://gowsundar.gitbook.io/book-of-bugbounty-tips/

• https://github.com/Neelakandan-A/BugBounty_CheatSheet

• https://github.com/vavkamil/awesome-bugbounty-tools

• https://github.com/ngalongc/bug-bounty-reference

• https://github.com/YaS5in3/Bug-Bounty-Wordlists

• https://mokhansec.medium.com/what-would-i-do-if-i-start-bug-hunting-from-0-again-79c7fa78b789

• https://bbinfosec.medium.com/collection-of-bug-bounty-tip-will-be-updated-daily-605911cfa248

• https://github.com/imran-parray/Mind-Maps/blob/master/Recon%20-%20Imran%20parray/My-recon.png

---

OSINT & Google Dorks 📝

• https://github.com/jivoi/awesome-osint

• https://github.com/TheBurnsy/Vehicle-OSINT-Collection

• https://blog.blockmagnates.com/open-source-intelligence-osint-996c8d2db362

• https://cyb3r.gitbook.io/pentest-journey/open-source-intelligence-osint-fundamentals/osint-flowcharts

• https://www.bruceclay.com/blog/bing-google-advanced-search-operators/

• https://www.hackthebox.com/blog/What-Is-Google-Dorking

• https://dnsdumpster.com/footprinting-reconnaissance/

• https://github.com/redhuntlabs/Awesome-Asset-Discovery

• https://github.com/Proviesec/google-dorks

---

API Security & Pentest 📝

• https://raw.githubusercontent.com/cyprosecurity/API-SecurityEmpire/main/assets/API Pentesting Mindmap.png

• https://github.com/cyprosecurity/API-SecurityEmpire/blob/main/assets/API Pentesting Mindmap ATTACK.pdf

• https://github.com/shieldfy/API-Security-Checklist

• https://github.com/erev0s/VAmPI

• https://github.com/roottusk/vapi

• https://danaepp.com/beginners-guide-to-api-hacking

• https://bughunters.google.com/learn/presentations/5783688075542528/android-app-hacking-workshop

• https://www.virtuesecurity.com/api-penetration-testing/

• https://university.apisec.ai/

• https://www.productsecurity.ai/course/api-security-training

---

Active Directory 📝

• https://1337red.wordpress.com/building-and-attacking-an-active-directory-lab-with-powershell/

• https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

• https://blog.spookysec.net/ad-lab-1/

• https://blog.spookysec.net/ad-lab-2/

• https://github.com/WazeHell/vulnerable-AD

---

Red Teaming 📝

• https://github.com/yeyintminthuhtut/Awesome-Red-Teaming

• https://github.com/infosecn1nja/Red-Teaming-Toolkit

• https://github.com/0xJs/RedTeaming_CheatSheet

---

Exploit Development 📝

• https://github.com/FabioBaroni/awesome-exploit-development

---

AppSec & Code Review 📝

• https://wehackpurple.com/blogs/page/2/

• https://wehackpurple.com/blogs/page/3/

• https://wehackpurple.com/blogs/page/4/

• https://google.github.io/eng-practices/review/

• https://github.com/MahdiMashrur/Awesome-Application-Security-Checklist

• https://github.com/paragonie/awesome-appsec

• https://erdemstar08.medium.com/source-code-scan-7448df9a1358

• https://erdemstar08.medium.com/java-source-code-scanning-with-maven-fortify-4514b61696b6

• https://erdemstar08.medium.com/ios-source-code-scanning-fortify-b0cca71ab519

• https://erdemstar08.medium.com/android-source-code-scanning-fortify-f218df889eeb

• https://erdemstar08.medium.com/code-scan-with-sast-net-framework-4-8-876d42673c72

• https://erdemstar08.medium.com/code-scan-with-sast-net-core-3-49cb8c742ecc

---

DevSecOps 📝

• https://github.com/sottlmarek/DevSecOps

• https://github.com/hahwul/DevSecOps

• https://github.com/magnologan/awesome-k8s-security

• https://github.com/TaptuIT/awesome-devsecops

• https://github.com/We5ter/Awesome-DevSecOps-Platforms

• https://www.productsecurity.ai/course/devsecops-training

---

CTFs & Writeups 📝

• https://bitvijays.github.io/LFC-VulnerableMachines.html#ctf-series-vulnerable-machines

• https://uppusaikiran.github.io/hacking/Capture-the-Flag-CheatSheet/

• https://htbmachines.github.io/

• https://github.com/Crypto-Cat/CTF

---

Social Engineering 📝

• https://github.com/v2-dev/awesome-social-engineering

---

Certifications 📝

• https://brcyrr.medium.com/recommendations-of-oscp-433a08c86f27

• https://areyou1or0.it/index.php/2021/02/10/finally-oscp-may-the-force-be-with-you/

• https://brcyrr.medium.com/recommendations-review-of-emapt-819e72a27f06

• http://www.mannulinux.org/2022/07/covenant-c2-for-oscp-ad-lab.html

• https://www.mannulinux.org/2022/07/covenant-c2-for-oscp-ad-lab-part-2.html

• https://brcyrr.medium.com/recommendations-review-of-ewptxv2-66a114e450db

• https://brcyrr.medium.com/recommendations-of-oswp-c14ab45ae491

• https://github.com/brcyrr/OSWP

• https://twitter.com/Shubham_pen/status/1537657538795085824

---

Roadmaps 📝

• https://medium.com/@rezaduty/web-penetration-testing-roadmap-4e7bb9edf23b

• https://medium.com/@rezaduty/mobile-penetration-tester-roadmap-f2ec9bd68dcf

• https://github.com/rezaduty/cybersecurity-career-path

• https://github.com/CyberSecurityUP/PenTest-Certifications-Roadmap

---

Security Architecture 📝

• https://zeltser.com/security-architecture-cheat-sheet/

---

IoT Security 📝

• https://github.com/V33RU/IoTSecurity101

• https://github.com/nebgnahz/awesome-iot-hacks

---

Container Security 📝

• https://github.com/krol3/container-security-checklist

• https://www.productsecurity.ai/course/container-security-course

---

Blockchain Security 📝

• https://github.com/xxxeyJ/Awesome-Blockchain-Security

---

Threat Modelling 📝

• https://github.com/hysnsec/awesome-threat-modelling

• https://www.productsecurity.ai/course/threat-modeling-training

---

Kubernetes Security 📝

• https://www.productsecurity.ai/course/kubernetes-security-course

---

General Resources 📝

• https://danielmiessler.com/blog/the-difference-between-a-penetration-test-and-a-red-team-engagement/

• https://kalitut.com/

• https://hackermovie.club/

• https://github.com/PaulSec/awesome-sec-talks

• https://zeltser.com/information-security/

• https://infosecwriteups.com/finding-of-directory-path-in-linux-820be9ae759b

• https://cybersecuritybase.mooc.fi/

• https://www.cyberseek.org/pathway.html

• http://dfir.org/?q=node/8

practicalcybersecurityresources's Issues

Suggestion

Hi ! If you're ok with the idea, I'd like to add anchors to the titles listed in the "Contents", so you just need to click on it to go to the section :)

All productsecurity.ai links are broken

Hi,
It looks like all the links to productsecurity.ai are broken. It may be possible that the company got merged, acquired, or closed. Kindly look into it.

Thanks,
Pradip

Pentest