Hacking anything that you do not own, even some things you do own ‘@pple’ devices, can be illegal. Please practice your skills responsibly.

Legal Sites to Hack

• Hack Me – free sandbox to create a machine to hack
• Try Hack Me – pay for machines and related training
• Capture The Flag – hub for Capture the Flag sites
• Hack This Site – free site, blogs, news, tutorials, etc.
• Hack the Box – has free and pay for machines
• Game of Hacks – site to practice exploiting code, like SQL
• Hellhound Hackers – practice, articles, code examples, training, etc.
• Root Me – has free and pay for machines
• Enigma Group – security resource to develop your pen-testing skills
• Google Gruyere – codelab for black box techniques
• Pwnerz – security challenges to learn and practice hacking

Reddit

• Blue|Purple Team
• NIST
• Hack the Box– provides help and advise for the site ‘Hack the Box‘
• NetSec
• Cyber Security
• Hacking
• Live Over Flow
• How to Hack

Tools

• Nmap
• Snort
• pfSense
• Kali
• Metaspoilt
• Angry IP Scanner
• Burp Suite Spider – map out website page specifics
• Ettercap – provides a toold for MnM attacks
• John the Ripper – password cracking tool
• Nessus – vulnerability assessment kit
• Putty – terminal emulator for Windows
• NetCat – networking utility which reads and writes data across network connections, using the TCP/IP protocol

Free Training

• Defend the Web

Pay for Training

• Pen Tester Lab
• Root Me – has free and pay for training
• eLearning Security