The links to articles, sites, and other resources will assume that you have some basic knowledge and experience. A proficient with college level education. Plus above all willingness to understand at the core level of anything one would like to “hack”.
Coders and hax0rs may go and read the latest O’Rielly book written by another coder/hax0r/SME. These most arcane of volumes are not for the faint of heart and week of mind. These resources come directly from the white towers that invented and implement the “toys” we all love to bend to our wills and are usually used on the daily by individuals in their fields be it InfoSec, Network Engineers and/or Software Engineers.
Below is the operating manual for the internet, the computer, the network, and everything in between.
Protocol Definitions, File formats, and other computing standards
- http://www.ietf.org/rfc/rfc-index.txt
- https://en.wikipedia.org/wiki/Rainbow_Books
- https://en.wikipedia.org/wiki/List_of_Ecma_standards
- https://www.w3.org/standards/
- https://cabforum.org/documents/
- https://en.wikipedia.org/wiki/Rainbow_Series (updated at https://fas.org/irp/nsa/rainbow.htm )
- https://www.niap-ccevs.org/cc-scheme/
- https://ieeexplore.ieee.org/document/7576486/
- https://www.nist.gov/itl/antd
- https://isocpp.org/about
- http://www.unix.org/what_is_unix/single_unix_specification.html
- http://www.pathname.com/fhs/ (super-seeded by https://wiki.linuxfoundation.org/lsb/fhs)
- https://developer.mozilla.org/en-US/
Networking Implementations
Governance (other than the standards bodies above)
- https://www.isaca.org/pages/default.aspx
- https://www.gartner.com/it-glossary/it-governance/
- https://www.iso.org/standard/62816.html
- https://www.itgovernance.co.uk/standards
Manuals
- https://www.kernel.org/doc/man-pages/
- https://www.cybrary.it/0p3n/advanced-google-dorking-commands/
- https://www.exploit-db.com/google-hacking-database/
Tips and tricks from the pros:
Peer Reviewed articles
Flash in the pan - buzz feed articles
The following are more for the fun of it than what we use on a daily
CTF that challenge and rank
The following are more for the fun of it than what we use on a daily
- http://wechall.net/ and https://www.wechall.net/site/details/18/HackThisSite ( prep for the main ctf of the year legitbs)
- https://legitbs.net
By no means is the complete set, most of these are floating around USENET and behind pay walls for governance orgs like MSDN and IEEE. But this gets one the bulk and we’ll continue to refine this set of resources.