BlakSec

CTF / Boot-to-Root VMs

• VulnHub
• OWASP Security Shepherd
• OWASP Broken Web Application Project

Shellcoding / Exploits / Reverse Engineering

• Exploit Exercises
• Shell-based CTF-style games

Courses / Training

• Open Security Training
• SEED Project

Website Reconnaissance Tools & Techniques

• BuiltWith
• Joomla Security Scanner
• Check Joomla version without hacking
• BlindElephant Web Application Fingerprinter
• ChromeSniffer Plus

Scanning

SQL Injection

• Beyond SQLi: Obfuscate and Bypass
• Exploiting hard filtered SQL Injections
• SQL Injection Cheat Sheet

Access & Escalation

• LFISuite - Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

Writing Exploits

• Writing your own shellcode
• A great primer on Buffer Overflow

Programming

Python

• Pygments - python syntax highlighter