For now, I would like to share a great collection of resources from the NahamSec’s Discord Server. Through my journey, I will collect more resources and share them here.
Table of contents
Open Table of contents
Getting Started
Video Guides
- Guide to learn hacking - LiveOverflow guide to learn hacking
- Finding your first bug - Tips from the Burp Suite community
Interactive Learning
- PortSwigger Web Security Academy - Free, hands-on web security training
- Hacker101 Videos - Free video lessons on web security
- Hextree Android Hacking - Android security learning path
YouTube Channels
These creators consistently produce high-quality security content:
| Channel | Focus |
|---|---|
| NahamSec | Bug bounty interviews & hunting techniques |
| Stök | Bug bounty tips & motivation |
| InsiderPhD | Application and API security |
| Jhaddix | Recon methodologies & advanced techniques |
Beginner-Friendly Series
- Series for new bug hunters - Step-by-step guidance for beginners
GitHub Resources
- NahamSec’s Beginner Repo - Comprehensive resource collection for newcomers
Books
Recommended Reading
- The Web Application Hacker’s Handbook - Guide to web application security testing. This book covers everything from basic web technologies to advanced exploitation techniques.
Tools & Platforms
Practice Platforms
- HackTheBox - Penetration testing labs
- TryHackMe - Guided cybersecurity training
- PentesterLab - Web penetration testing exercises
- PortSwigger Labs - Web security labs
Bug Bounty Platforms
This list will be updated as I discover more valuable resources. Feel free to reach out on X/Twitter if you have suggestions!