A series of resources which can help you highly secure your VPS, Front-end code, back-end code etc.
- Burp - pen testing tool
- ZEP proxy - Burp alternative
- haveibeenpwned - check email if it was leaked
- file-buster - scan routes on domains
- testssl - test for ssl vul
- slowhttp - test for Slow Loris
- metasploit - the mother load
- JSParser - parse js files and expose link concatenations
- nmap - scanning tool
- sqlmap - sql injection tool
- Nessus - highly advanced security testing tool
- wappalyzer - analyze technologies used
- Maltrail - exploit monitor UI
- cve Exploits DB
- google cheatsheet
- searchsploit - cli exploit search
- xss-payloads
- https://cirt.net/passwords default passwords
- Seclist - lists of usefull data (pass lists etc.)
- Probable passwords
- altormutual - vulnerable site to excercise on
- OWASP JuiceShop - hackable app
- OWASP bWAPP - another hackable web app
- Vulnhub - vulnerable VMs to practice on
- NodeGoat - vulnerable nodejs app
- OWASP ASVS - security standard
- Security framework - a comprehensive security checklist
- OWASP security checklist
- OWASP testing guide - for QA and Pen Testers
- http://owaspsamm.org/ - enterprise security model
- BDD security - CI security scan
- JS security code practices
- https://highon.coffee/blog/ - found this blog with useful pen testing info
