Useful websites: Difference between revisions
From SecurityTools
Added a few more useful web sites. Thinking about how to organize so page isn't just a wall of text |
Fix typo, add 5 pillars |
||
| Line 2: | Line 2: | ||
* [https://www.shodan.io/ Shodan] web search engine - "Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions." | * [https://www.shodan.io/ Shodan] web search engine - "Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions." | ||
* [https://haveibeenpwned.com/ Have I Been Pwned?] - A site for checking whether your email or | * [https://haveibeenpwned.com/ Have I Been Pwned?] - A site for checking whether your email or password is in a data breach | ||
* [https://www.vulnhub.com/ Vulnhub] - A collection of intentionally vulnerable, downloadable virtual machines to practice your security skills | * [https://www.vulnhub.com/ Vulnhub] - A collection of intentionally vulnerable, downloadable virtual machines to practice your security skills | ||
* [https://github.com/fabacab/awesome-cybersecurity-blueteam Awesome Cybersecurity Blue Team] - A GitHub page loaded with resources for [[blue team]] specialists. | * [https://github.com/fabacab/awesome-cybersecurity-blueteam Awesome Cybersecurity Blue Team] - A GitHub page loaded with resources for [[blue team]] specialists. | ||
| Line 10: | Line 10: | ||
*[https://github.com/swisskyrepo/PayloadsAllTheThings PayloadsAllTheThings] - A list of useful payloads and bypasses for Web Application Security, security tool cheat sheets, books, and YouTube videos about security topics | *[https://github.com/swisskyrepo/PayloadsAllTheThings PayloadsAllTheThings] - A list of useful payloads and bypasses for Web Application Security, security tool cheat sheets, books, and YouTube videos about security topics | ||
*[https://adsecurity.org/ AD Security] - An infrequently updated but useful guide to attacking and defending Active Directory | *[https://adsecurity.org/ AD Security] - An infrequently updated but useful guide to attacking and defending Active Directory | ||
*[https://github.com/DFIRmadness/5pillars/blob/master/5-Pillars.md The Five Pillars of an Information/Cyber Security Professional] - A guide to the 5 key areas of proficiency necessary to excel in security | |||
Revision as of 03:52, 27 October 2021
Below are many websites which provide useful information for security practitioners and those learning about security. This topic is going to rapidly get unmanageable, and will need reorganized and broken down into some categories. However, until I start filling in some valuable sites, I'm not sure how I'm going to break it down. Expect changes in the near future.
- Shodan web search engine - "Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions."
- Have I Been Pwned? - A site for checking whether your email or password is in a data breach
- Vulnhub - A collection of intentionally vulnerable, downloadable virtual machines to practice your security skills
- Awesome Cybersecurity Blue Team - A GitHub page loaded with resources for blue team specialists.
- DFIR Diva's Digital Forensics and Incident Response Blog - Geared towards beginners, this links free and affordable training, resources, and a job board
- HackTricks - Penetration testing, red team testing, and CTF tips
- m0nad's Awesome Privilege Escalation - A collection of Linux, Windows, Docker, and Cloud privilege escalation tips.
- PayloadsAllTheThings - A list of useful payloads and bypasses for Web Application Security, security tool cheat sheets, books, and YouTube videos about security topics
- AD Security - An infrequently updated but useful guide to attacking and defending Active Directory
- The Five Pillars of an Information/Cyber Security Professional - A guide to the 5 key areas of proficiency necessary to excel in security
