Links

---

• iOS
  • Pentesting
  • Code signing
  • Cycript
  • Objective-C
  • ARMv8
  • DYLD
  • Sandbox
  • IPC
  • Kernel
  • Reversing
  • Writeups
  • Certificate Pinning
  • Jailbreak
  • Cryptography
• Web
  • Client Side
  • Vulnerabilities
  • Cookies
  • SQL Injection
  • SSL/TLS
  • XML External Entity (XXE)
  • Cross Site Request Forgery (CSRF)
  • Crawler
  • Headers
  • File Upload
  • Cache Poisoning
  • SNV Version Control System
  • Path Traversal
  • Word Lists
  • Cross-Site Scripting (XSS)
  • Burp
  • Books
• Infraestructure
  • Enumeration
  • SSH
• Windows
  • NTFS
  • Privilege Escalation
  • Hardening
  • Active Directory
• Linux
  • Privilege Escalation
• Reversing
  • Challenges
  • Guides
• Anonimity
  • Tor
• Cryptography
• Botnet
• Bug Hunter
• Collections

iOS

Pentesting

• iOS analysis
• OWASP Mobile Security Testing Guide
• Total OSCP Guide
• Static Analysis vs. Dynamic Analysis

Code signing

• Jonathan Levin - The Apple Sandbox
• (tool) Frida iOS Dump
• (tool) Node Applesign
• Bypassing iPhone Code Signatures
• Code Signing

Cycript

• Advanced Cycript and Substrate
• cycript使用方法
• Dynamic Analysis with Cycript
• Crafting Tweaks with a Jailbroken iPhone: Part 1 - Cycript
• Class-Dumping with Cycript
• Cycript Official Manual

Objective-C

• Apple - Programming with Objective-C
• Difference between class and instance methods

ARMv8

• ARMv8 - Reference Manual
• ARM64 - Reference Manual
• ARM64 Assembly Crash Course

DYLD

• Jonathan Levin - DYLV DetaYLeD

Sandbox

• Jonathan Levin - The Apple Sandbox
• (video) Jonathan Levin - The Apple Sandbox

IPC

• Ian Beer - Apple IPC
• (video) Ian Beer - Apple IPC
• API Documentation - Mach
• Source Browser

Kernel

• Apple - Kernel Programming Guide
• Apple - IOKit Fundamentals
• Apple - About the Virtual Memory System
• qwertyoruiopz - Attacking XNU Part 1
• qwertyoruiopz - Attacking XNU Part 2
• Stefan Esser - Kernel Heap

Reversing

• qwertyoruiopz - iOS Reverse Engineering
• Reverse engineering Objective-C
• Julien Bachmann - iOS applications reverse engineering

Writeups

• Writeups - pdf, books, conferences

Certificate Pinning

• Cracking SSL pinning in AFNetworking
• Prevent bypassing of SSL certificate pinning in iOS application
• (tool) SSL KillSwitch 2

Jailbreak

• Jailbreak Detection and Evasion

Cryptography

• Cryptographic missuse in iOS Applications

Web

Client Side

• How Browsers Work

Vulnerabilities

• https://github.com/qazbnm456/awesome-web-security
• https://www.hacker101.com/
• Web Application Penetration Testing Cheat Sheet

Cookies

• Understanding Cookies Part 1
• Understanding Cookies Part 2
• Understanding Cookies Part 3

SQL Injection

• MySQL Injection

SSL/TLS

• SSL/TLS for dummies part 1
• SSL/TLS for dummies part 2
• SSL/TLS for dummies part 3
• SSL/TLS for dummies part 4

XML External Entity (XXE)

• XXE on Windows

Cross Site Request Forgery (CSRF)

• 10 Methods to Bypass Cross Site Request Forgery (CSRF)

Crawler

• (tool) Photon

Headers

• 7 Security Response Headers Every Security Tester Should Know

File Upload

• File Upload Restriction Bypass

Cache Poisoning

• Web cache poisoning

SNV Version Control System

• (tool) SVN extractor
• SVN example

Path Traversal

• (tool) Search for Directory Traversal Vulnerabilities

Word Lists

• Probable Wordlists

Cross-Site Scripting (XSS)

• XSS Payloads
• XSS Payloads

Burp

• Pro Tips: Testing Applications Using Burp, and More
• EasyCSRF extension

Books

• Hacking Books

Infraestructure

Enumeration

• Penetration Testing Enumeration

SSH

• SSH Local and Remote Port Forwarding with VNC

Windows

NTFS

• NTFS tricks collection

Privilege Escalation

• Mimikatz
• (tool) BeRoot
• Windows Privilege Escalation

Hardening

• Awesome Windows Domain Hardening

Active Directory

• Low Privilege AD Enumeration from a non-Domain Joined Host
• (tool) BloodHound 2.0
• Setting Up An Active Directory Part 1
• Setting Up An Active Directory Part 2
• Setting Up An Active Directory Part 3

Linux

Privilege Escalation

• Local Linux Enumeration & Privilege Escalation Cheatsheet

Reversing

Challenges

• Beginner Malware Reversing Challenges

Guides

• Reverse Engineering for Beginners
• Intro to x86 Assembly
• An Intro to x86_64 Reverse Engineering

Anonimity

Tor

• How Tor Users Got Caught - Defcon 22

Cryptography

• Awesome Crypto Papers

Botnet

• Buils your own botnet - BYOB

Bug Hunter

• LevelUp 2018 The Bug Hunters Methodology v3
• Bug Bounty Toolkit

Collections

• Awesome Penetration Testing