old.md

Ressources

This project provides a wide variety of resources related to Information Security, CTFs, …
A collection of software, websites, libraries, documents, conferences, tools, books, resources and cool stuff about security.

Our website : [FR] https://insecurity-insa.fr/ // Our event : [FR] https://inshack.insecurity-insa.fr/

Security

Technical

Knowledge

Basic

General knowledge to have :

• [EN] https://www.owasp.org
• [FR] http://www.bases-hacking.org/failles-web.html
• [FR] https://hackademics.fr

Advanced

Exploit library, collection of tools or procedures AFTER getting an access :

• [EN] http://pwnwiki.io/#!index.md

Tutorial by common vulnerability

Multiple vulnerabilities :

• [EN] 🔥 https://www.hacksplaining.com/

XSS, Cross Site Scripting :

• [EN] http://breakthesecurity.cysecurity.org/2012/01/how-to-do-cookie-stealing-with-cross-site-scripting-vulnerability-xss-tutorials.html

SQLi, SQL Injection :

• [FR] http://www.6ma.fr/tuto/attaques%2Bpar%2Binjection%2Bsql-43

Cryptography :

• [FR] http://www.apprendre-en-ligne.net/crypto/stat/index.html

Buffer overflow, reverse :

• [EN] https://mcuoneclipse.com/2013/04/14/text-data-and-bss-code-and-data-size-explained/ (explanations on ELF structure)
• [FR] https://hackademics.fr/forum/hacking-connaissances-avancées/reversing/autres-aq/3096-reversing-tutorials-level-2-le-format-elf (French equivalent)

BugBounty

Tutorials, general informations, getting started :

• https://sites.google.com/site/bughunteruniversity/

Training supports

Library of challenges :

• [EN/FR] https://www.root-me.org
• [EN] https://exploit-exercises.com/
• [EN] https://www.hackthebox.eu/

Write-ups & Blogs

Write-ups :

• [FR] http://bases-hacking.org/
• [EN] http://hugodelval.com/bug_bounties

General articles :

• [FR] http://www.n0secure.org/

General Informations

Basic

About acronyms in security

• [EN] https://trailofbits.github.io/ctf/intro/

Advanced

DEFCon Conferences :

• [EN] https://www.youtube.com/user/DEFCONConference
• [EN] https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/

Tools

Basic

File analysis :

Binwalk :

• [EN] Binwalk : https://github.com/ReFirmLabs/binwalk

Password tools :

Password Recovery tools :

• [EN] Abel & Cain : http://www.oxid.it/cain.html
• [EN] John the Ripper : http://www.openwall.com/john/
• [EN] Ophcrack (Rainbow tables for LM & NTLM hashes) : http://ophcrack.sourceforge.net/
• [EN] BIOS Password Recovery for Laptops : https://bios-pw.org/

Network tools

Network discovery :

• [EN] NMAP : https://nmap.org/

Network Protection Bypass :

• [FR] Iodine : http://blog.gaetan-grigis.eu/systeme/iodine-et-dns-tunneling/#more-843

WiFi Network :

• [EN] Aircrack-ng : https://www.aircrack-ng.org/

Automatic tools :

Nessus :

• [EN] https://www.tenable.com/products/nessus-vulnerability-scanner

Sqlmap :

• [EN] http://sqlmap.org/

Burp :

• [EN] https://portswigger.net/burp

Nikto :

• [EN] https://cirt.net/Nikto2

Cryptography tool :

RSA decomposer :

• [EN] http://factordb.com

OpenSSL :

• [EN] https://www.openssl.org/

Forensic tool :

Volatility :

• [EN] https://www.volatilityfoundation.org/

TestDisk/PhotoRec :

• [EN] https://www.cgsecurity.org/wiki/Main_Page

Advanced

Books

Book list :

• [FR] https://securite.developpez.com/livres/index/?page=Securite-offensive-Pentesting-Ethical-hacking

Emulation

4G network (Basestation, User equipement, etc.) : [EN] https://github.com/srsLTE/srsLTE {EN] USRP B210 (card) : https://www.ettus.com/product/details/UB210-KIT

Not-Technical

Risk management

Incident Response :

• [EN/ES/RU] https://github.com/certsocietegenerale/IRM Risk related articles :
• [EN] https://www.securitynow.com/author.asp?section_id=610&doc_id=737258&
• [EN] https://www.securitynow.com/author.asp?section_id=613&doc_id=737062&

General articles

Wide-view articles :

• [FR] http://www.infoprotection.fr/CYBERSECURITE.htm

Funny stuff :

• [FR/EN] https://fr.wikipedia.org/wiki/Big_Brother_Awards

Other

Other awesome list of security related resources :

• https://github.com/sbilly/awesome-security
• https://github.com/onlurking/awesome-infosec
• https://github.com/PaulSec/awesome-sec-talks
• https://github.com/Hack-with-Github/Awesome-Hacking
• https://github.com/EdOverflow/bugbounty-cheatsheet

More generally, a list of awesome list :

• https://github.com/sindresorhus/awesome
• https://awesomelists.top

Not-(only)-security but related

Basic stuff

Training supports

Live platform for programming skills :

• [FR] https://codecombat.com/

Training for programming skills :

• [EN] https://www.youtube.com/playlist?list=PLUl4u3cNGP61Oq3tWYp6V_F-5jb5L2iHb

Python ressources :

• [EN] http://pub.phyks.me/sdz/sdz/utilisation-avancee-des-listes-en-python.html
• [FR] http://apprendre-python.com/page-apprendre-listes-list-tableaux-tableaux-liste-array-python-cours-debutant

Advanced stuff

Information about common languages :

• [EN] http://devdocs.io

Security Cheet-Sheet :

• [EN] http://html5sec.org/#html5

GDB - GNU symbolic debugger :

• https://sourceware.org/gdb/current/onlinedocs/gdb/

==========================================================================================

Contributing

Feel free to contact us, to add resources. PR welcomed. Help for contributing : https://codeburst.io/a-step-by-step-guide-to-making-your-first-github-contribution-5302260a2940

Authors

See also the list of [contributors] who participated in this project.

Our FB page : [FR] https://www.facebook.com/asso.securite.insa/ // Our Twitter : [FR/EN] https://twitter.com/insecurityasso