- The Hacker Playbook 2: Practical Guide To Penetration Testing
- The Basics of Hacking and Penetration Testing, Second Edition: Ethical Hacking and Penetration Testing Made Easy
- Penetration Testing: A Hands-On Introduction to Hacking
- Social Engineering: The Art of Human Hacking
- Hacking: The Art of Exploitation, 2nd Edition
- Ethical Hacking and Penetration Testing Guide
- OWASP Testing Guide (A must read for web application developers and penetration testers)
- Web hacking 101
- The Hackers playbook 3
- The web Application Hacker's Handbook:Finding and Exploiting Security Flaws 11.Hacking on Metasploit:Advanced pentesting 12.Kali Linux Revealed:Mastering the penetration Testing Distribution
- Infosecinstitute (http://resources.infosecinstitute.com/)
- Pentester Lab (https://pentesterlab.com/)
- Complete Penetration Testing Tutorials by OWASP (https://www.owasp.org/index.php/Web_Application_Penetration_Testing)
- Silesia Security Lab (https://silesiasecuritylab.com/blog/)
- Rafay Hacking Articles, a great blog (http://www.rafayhackingarticles.net/)
- Troyhunt (https://www.troyhunt.com/)
- FiringRange (https://public-firing-range.appspot.com/)
- Vulnhub (https://www.vulnhub.com/)
- Metasploitable.(http://information.rapid7.com/download-metasploitable.html?LS=1631875&CS=web)
- UltimateLAMP.(http://ronaldbradford.com/tmp/UltimateLAMP-0.2.zip)
- Web Security Dojo.(http://sourceforge.net/projects/websecuritydojo/files/)
- OWASP Hackademics.(https://code.google.com/p/owasp-hackademic-challenges/downloads/listhttp://)
- DVWA Damn Vulnerable Web Application.(http://www.dvwa.co.uk/)
- Mutillidae.(http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10)
- De-ICE.(http://www.de-ice.net/)
- OWASP Web Goat.(https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project) 11.google-gruyere (http://google-gruyere.appspot.com/)
- Computer Systems Security, MIT (http://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/)
- Cybrary(https://www.cybrary.it/catalog/cybersecurity/)
- CISCO networking academy (https://www.netacad.com/courses/cybersecurity)
- IBM's security learning academy (https://www.securitylearningacademy.com/)
- CISA : (https://us-cert.cisa.gov/ics/Training-Available-Through-ICS-CERT)
- HackersAcademy : (https://hackersacademy.com/)
- Web Hacking (https://www.youtube.com/playlist?list=PLJM73L2pQRd4lXBZjsHAmeCqsn5pENXxN)
- Ethical Hacking, A Comprehensive Playlist covering almost everything (https://www.youtube.com/playlist?list=PLkRo97mCIn9lgvE7AskNsmwJVOlJX2zaI)
- Security Tube (http://www.securitytube.net/)
- Kevin Mitnick: Live Hack at CeBIT (https://www.youtube.com/watch?v=Q7G3kKRdUl4)
- Ghost in the Cloud, Kevin Mitnick (https://www.youtube.com/watch?v=76yrWGzScgI)
- Kevin Mitnick | Talks at Google (https://www.youtube.com/watch?v=aUqes9QdLQ4)
- Complete Free Hacking Course: Go from Beginner to Expert Hacker Today (https://www.youtube.com/watch?v=7nF2BAfWUEg)
- The cyber mantor: (https://www.youtube.com/channel/UC0ArlFuFYMpEewyRBzdLHiw) 7.Vabs Tutorial: (https://www.youtube.com/channel/UCa0wCQEB8CRKzjJV2GZ_EzA)
- Z security : (https://www.youtube.com/user/zaidsabeeh)
- Blackhat (https://www.youtube.com/user/BlackHatOfficialYT)
- Defcon (https://www.youtube.com/user/DEFCONConference)
- hitb (https://www.youtube.com/user/hitbsecconf)
- HackerHalted : (https://www.hackerhalted.com/) 5.infosec-conferences :(https://infosec-conferences.com/)