Tuesday 10 May 2016

Some great stuff for beginners to start with Information Security


How to be an InfoSec Geek : https://www.youtube.com/watch?v=OMS-NWKB2RI



Hacker Bootcamp : https://pentesterlab.com/bootcamp

Free Resources for Programming Languages

Web Technologies :
 http://www.w3schools.com/
 http://www.tutorialspoint.com/web_development_tutorials.htm
php videos : https://www.youtube.com/playlist?list=PL_c9BZzLwBRK-pdEkJHvsqd5yBDxvggbs

C & C++ :
http://gribblelab.org/CBootcamp/index.html
http://www.tutorialspoint.com/cprogramming/index.htm
http://www.tutorialspoint.com/cplusplus/index.htm
http://www.cplusplus.com/doc/tutorial/
http://www.java2s.com/Tutorials/C/C_Tutorial/index.htm
http://www.java2s.com/Tutorials/C/Cpp_Tutorial/index.htm

Python :
http://www.tutorialspoint.com/python/index.htm
http://learnpythonthehardway.org/book/

Shell Scripting :
https://bash.cyberciti.biz/guide/Main_Page
https://linuxconfig.org/bash-scripting-tutorial
http://www.tutorialspoint.com/unix/index.htm
http://linuxcommand.org/tlcl.php  [Book:The Linux Command line by William shotts]

Assembly Language :
http://www.securitytube.net/groups?operation=view&groupId=6 {securitytube video}
http://www.securitytube.net/groups?operation=view&groupId=5 {securitytube video}
http://www.tutorialspoint.com/assembly_programming/index.htm
http://www.plantation-productions.com/Webster/www.artofasm.com/Windows/index.html [HLA Book]
https://www.exploit-db.com/docs/16967.pdf {15 first dates with Assembly}


Sites To Learn Exploitation Techniques :

http://www.myne-us.com/2010/08/from-0x90-to-0x4c454554-journey-into.html {Links}
http://www.securitytube.net/groups?operation=view&groupId=4 {buffer Overflow videos}
http://www.securitytube.net/groups?operation=view&groupId=3 {format string videos}
http://www.securitytube.net/groups?operation=view&groupId=7 {videos}
http://x9090.blogspot.in/2010/03/tutorial-exploit-writting-tutorial-from.html
https://www.corelan.be/index.php/category/security/exploit-writing-tutorials/
http://www.thegreycorner.com/
http://fuzzysecurity.com/exploits.html
http://www.securitysift.com/windows-exploit-development-part-1-basics/


Web Application Security :

http://www.securitytube.net/user/Audi {Sql Injection Videos}
https://www.google.com/about/appsecurity/learning/xss/
https://www.steve.org.uk/Security/XSS/Tutorial/
https://www.owasp.org/index.php/Category:Attack
https://www.youtube.com/playlist?list=PL1A2CSdiySGIRec2pvDMkYNi3iRO89Zot {XSS video tutorials}

Metasploit Tutorials :

http://www.securitytube.net/groups?operation=view&groupId=10 {videos}
https://www.offensive-security.com/metasploit-unleashed/


Lab Setup :

Download and install virtualization software. {vmware or virtualbox}
Vulnerable Images Lists :
For web_App_Testing :
https://sourceforge.net/projects/owaspbwa/
https://sourceforge.net/projects/metasploitable/files/Metasploitable2/
https://pentesterlab.com/exercises/

Some posts about lab setup :
http://securityxploded.com/setup-your-pentest-hacker-network.php
http://resources.infosecinstitute.com/hacking-lab/ 


For Exploit Testing Download the LiveCD which provided with the book Hacking: The Art of Exploitation. Its an old live image and good for exploit testing.
https://www.nostarch.com/hackingCD.htm

And also download and install redhat 9 from here

http://redhat.lsu.edu/dist/9/iso/shrike-i386-disc1.iso
http://redhat.lsu.edu/dist/9/iso/shrike-i386-disc2.iso
http://redhat.lsu.edu/dist/9/iso/shrike-i386-disc3.iso

installation Process : https://www.youtube.com/watch?v=QKtzfwyspU0

and for windows test machine just download windows xp sp 2 and 3 both and install it.
for download links just search on google.


and Practice ..Practice ..Practice..!!!