Resources ~ VulnHub

Resources

Building VMs

DCAU7: Guide to Building Vulnerable VMs
FalconSpy: Creating Boxes for Vulnhub
Techorganic: Creating a virtual machine hacking challenge
Donavan: Building Vulnerable Machines: Part 1 — An Easy OSCP-like Machine
Donavan: Building Vulnerable Machines: Part 2 — A TORMENT of a Journey
Donavan: Building Vulnerable Machines: Part 3 — JOY is More Than One (Machine)

Community VulnHub Resources

Google Doc: NetSecFocus Trophy Room
GitHub: Ignitetechnologies/CTF-Difficulty
GitHub: Ignitetechnologies/Vulnhub-CTF-Writeups
GitHub: Ignitetechnologies/Linux-Privilege-Escalation
GitHub: Ignitetechnologies/Privilege-Escalation
GitHub: Ignitetechnologies/Web-Application-Cheatsheet

(Free) Virtual Networks (VPNs) + Custom Personal Targets

Command Challenge: cmdchallenge.com
Defend The Web: defendtheweb.net/dashboard
Hack Me: hack.me
OverTheWire - Bandit: overthewire.org/wargames/bandit
Root-Me: www.root-me.org
Smash The Stack: smashthestack.org
[VPN] ChaosVPN: wiki.hamburg.ccc.de/ChaosVPN
[VPN] PentestIT: lab.pentestit.ru
[VPN] OverTheWire - WarZone: overthewire.org/warzone

Programming

Codec Ademy: www.codecademy.com
Codec Wars: www.codewars.com
Full stack open 2020: fullstackopen.com
Learn {Python,Java,C,JavaScript,PHP,Shell,C#}: learn-c.org
Learn {Python,Ruby,C,Regex,SQL,CLI} The Hard Way: learnpythonthehardway.org/book
PHP - The Right Way.: www.phptherightway.com

Training Material

nets.ec (used to be called "Blackhat Library"): nets.ec/Main_Page
Corelan: www.corelan.be/index.php/articles
Hacking Cisco: hackingcisco.blogspot.com
Metasploit Unleashed: www.offensive-security.com/metasploit-unleashed
Open Security Training: opensecuritytraining.info
Pentest Standard: www.pentest-standard.org/index.php/Main_Page
SWEET (Secure WEb dEvelopment Teaching): www.csis.pace.edu/~lchen/sweet
Security Tube: www.securitytube.net

Misc

CTF Time: ctftime.org
Intense School: www.intenseschool.com/resources
We Chall: www.wechall.net

Books

The Web Application Hacker's Handbook (2nd Edition) [ISBN-13: 978-1-11802-647-2]: www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470
Bug Hunter's Diary [ISBN-13: 978-1-59327-385-9]: nostarch.com/bughunter
The Shellcoder's Handbook [ISBN-13: 978-0-76454-468-2]: www.amazon.com/The-Shellcoders-Handbook-Discovering-Exploiting/dp/0764544683
The Art of Exploitation (2nd Edition) [ISBN-13: 978-1-59327-144-2]: www.amazon.com/Hacking-Art-Exploitation-Jon-Erickson/dp/1593271441
Metasploit: The Penetration Tester's Guide [ISBN-13: 978-159-3-27288-3]: www.amazon.com/Metasploit-Penetration-Testers-David-Kennedy/dp/159327288X
Assembly Language Step-by-Step: Programming with Linux [ISBN-13: 978-047-04-9702-9]: www.amazon.com/Assembly-Language-Step-Step-Programming/dp/0470497025
Operating Systems Design and Implementation (3rd Edition) [ISBN-13: 978-013-142-938-3]: www.amazon.com/Operating-Systems-Design-Implementation-Edition/dp/0131429388
Brute Force Vulnerability Discovery [ISBN-13: 978-032-1-44611-4]: www.amazon.com/Fuzzing-Brute-Force-Vulnerability-Discovery/dp/0321446119