A Curated Starting Point for Learning Ethical Hacking and Penetration Testing

So you want to learn ethical hacking, and you've just opened your browser to find roughly ten thousand tabs worth of tutorials, blog posts, and "definitive guides." Where do you actually start? That's the problem this repository tries to solve. It's a curated collection of books, labs, courses, and communities for learning ethical hacking and penetration testing, maintained by Husnain Fareed and open to contributions from anyone who wants to help it grow.

What It Does

At its core, this is an awesome-list style repository. It gathers resources across a fairly broad set of categories and organizes them so you can find what you need without wading through search results. The table of contents lays out the territory: books, online and offline learning platforms, vulnerable machines and websites, vulnerability databases, malware analysis, Linux penetration testing distributions, courses, workshop playlists, security talks and conferences, YouTube channels, and forums.

The entries themselves are practical rather than theoretical. Under books, you'll find titles like The Web Application Hacker's Handbook, Hacking: The Art of Exploitation, and the OWASP Testing Guide, which the README flags as a must-read for both web developers and pentesters. The online learning section is presented as a table with names and descriptions, covering platforms like Hack The Box, TryHackMe, CTF365, Hack.me, Root-me, and Vulnhub. There's also a note pointing to the maintainer's own writeups and tutorials on Medium, so the repo doubles as a hub for the author's content as well as a directory of outside resources.

Since it's a README-driven project, there's no code to install, no build step, and no runtime. It's a document, and its value comes entirely from the quality and breadth of what's listed in it.

Why It's Cool

• It solves the discovery problem, not the learning problem. Learning security is hard enough on its own. Figuring out which platform to practice on, which book is worth your money, and which forum actually has active discussions shouldn't be a separate research project. This repo collapses that search into a single page.

• The structure matches how people actually learn. Books give you theory. CTF platforms and vulnerable VMs give you hands-on practice. Forums and conferences keep you connected to the community. The categories here mirror that progression, so you can pick an entry point that fits where you are.

• It's honest about being a community effort. The README says it plainly: "Let's make it the best resource repository for our community," and invites you to fork and contribute. That framing matters. A list like this is only as good as the people maintaining it, and the project treats that as a feature rather than pretending one person can keep it current forever.

• The platform descriptions do real work. Rather than just dumping links, the online section explains what each site is for. Hacker101 CTF is described as a safe, rewarding environment for learning to hack. Pentestit labs are noted as OSCP-style hands-on labs. That context saves you from clicking through five sites to figure out which one suits your skill level.

• It covers the less obvious stuff too. Vulnerability databases, malware analysis, Linux pentesting distributions, workshop playlists—these are the categories beginners often don't know to look for. Having them listed alongside the more popular resources makes the repo useful beyond the first week of study.

How to Try It

There's nothing to install here. The whole thing is a README, so getting started is just a matter of reading it and picking a direction.

1. Open the repository at github.com/husnainfareed/awesome-ethical-hacking-resources.
2. Skim the table of contents and jump to whichever category matches your current goal. If you're brand new, the books section and the online platforms table are the natural starting points.
3. Pick one resource and commit to it for a few weeks. TryHackMe and Hack The Box are both listed and both designed for progressive, hands-on practice, so either works as a first lab.
4. If you find a resource that's missing, fork the repo and open a pull request. The README explicitly welcomes contributions, and that's how lists like this stay alive.

If you want to follow along with the maintainer's own writing, the README points to Medium at @hussnainfareed.

Final Thoughts

This isn't a course, a tool, or a framework. It's a list, and its usefulness depends on how well it's maintained and how much of it is still accurate. Some links in projects like this inevitably go stale, and you'll want to verify anything before you invest serious time in it. That said, as a starting map for someone who's overwhelmed by options, it does its job. It's best suited for beginners and early-intermediate learners who want a structured overview of what's out there, plus anyone who'd rather contribute to a shared resource than keep their own bookmarks folder. If that's you, forking it is a pretty low-effort way to give back.

Follow @githubprojects for more developer tools and open source projects.