Useful websites: Difference between revisions
From SecurityTools
(Fix typo, add 5 pillars) |
(Reorganized existing links to be alphabetical. Added vx-underground link.) |
||
| Line 1: | Line 1: | ||
Below are many websites which provide useful information for security practitioners and those learning about security. This topic is going to rapidly get unmanageable, and will need reorganized and broken down into some categories. However, until I start filling in some valuable sites, I'm not sure how I'm going to break it down. Expect changes in the near future. | Below are many websites which provide useful information for security practitioners and those learning about security. This topic is going to rapidly get unmanageable, and will need reorganized and broken down into some categories. However, until I start filling in some valuable sites, I'm not sure how I'm going to break it down. Expect changes in the near future. | ||
* [https:// | *[https://adsecurity.org/ AD Security] - An infrequently updated but useful guide to attacking and defending Active Directory | ||
* [https://github.com/fabacab/awesome-cybersecurity-blueteam Awesome Cybersecurity Blue Team] - A GitHub page loaded with resources for [[blue team]] specialists. | * [https://github.com/fabacab/awesome-cybersecurity-blueteam Awesome Cybersecurity Blue Team] - A GitHub page loaded with resources for [[blue team]] specialists. | ||
*DFIR Diva's [https://dfirdiva.com/ Digital Forensics and Incident Response Blog] - Geared towards beginners, this links free and affordable training, resources, and a job board | *DFIR Diva's [https://dfirdiva.com/ Digital Forensics and Incident Response Blog] - Geared towards beginners, this links free and affordable training, resources, and a job board | ||
*[https://github.com/DFIRmadness/5pillars/blob/master/5-Pillars.md Five Pillars of an Information/Cyber Security Professional] - A guide to the 5 key areas of proficiency necessary to excel in security | |||
*[https://book.hacktricks.xyz/ HackTricks] - Penetration testing, red team testing, and [[CTF]] tips | *[https://book.hacktricks.xyz/ HackTricks] - Penetration testing, red team testing, and [[CTF]] tips | ||
* [https://haveibeenpwned.com/ Have I Been Pwned?] - A site for checking whether your email or password is in a data breach | |||
*[https://github.com/m0nad/awesome-privilege-escalation m0nad's Awesome Privilege Escalation] - A collection of Linux, Windows, Docker, and Cloud privilege escalation tips. | *[https://github.com/m0nad/awesome-privilege-escalation m0nad's Awesome Privilege Escalation] - A collection of Linux, Windows, Docker, and Cloud privilege escalation tips. | ||
*[https:// | *[https://www.shodan.io/ Shodan] web search engine - "Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions." | ||
*[https:// | * [https://www.vulnhub.com/ Vulnhub] - A collection of intentionally vulnerable, downloadable virtual machines to practice your security skills | ||
*[https://www.vx-underground.org/ VX-Underground] - The largest collection of malware source code, samples, and papers on the internet. For more information, also follow [https://twitter.com/vxunderground the vx-underground Twitter account] | |||
Revision as of 12:08, 25 January 2022
Below are many websites which provide useful information for security practitioners and those learning about security. This topic is going to rapidly get unmanageable, and will need reorganized and broken down into some categories. However, until I start filling in some valuable sites, I'm not sure how I'm going to break it down. Expect changes in the near future.
- AD Security - An infrequently updated but useful guide to attacking and defending Active Directory
- Awesome Cybersecurity Blue Team - A GitHub page loaded with resources for blue team specialists.
- DFIR Diva's Digital Forensics and Incident Response Blog - Geared towards beginners, this links free and affordable training, resources, and a job board
- Five Pillars of an Information/Cyber Security Professional - A guide to the 5 key areas of proficiency necessary to excel in security
- HackTricks - Penetration testing, red team testing, and CTF tips
- Have I Been Pwned? - A site for checking whether your email or password is in a data breach
- m0nad's Awesome Privilege Escalation - A collection of Linux, Windows, Docker, and Cloud privilege escalation tips.
- Shodan web search engine - "Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions."
- Vulnhub - A collection of intentionally vulnerable, downloadable virtual machines to practice your security skills
- VX-Underground - The largest collection of malware source code, samples, and papers on the internet. For more information, also follow the vx-underground Twitter account
