SUMMARY.md

Table of contents

• All of the Best Links and Resources on Cyber Security.
• Cyber Intelligence
  • OSINT
    • Search Engines
      • Goohak.sh Code
      • Google Dorking
    • Cyber Search Engines
    • Dark-Web Search
    • IP Address
    • Domain
    • Username/Email
    • Name, Phone, Gov Record
    • SOCMINT - Social Media
    • Files/Media/Breach/Paste/Code
    • Misc OSINT
  • Intel Feeds and Sources
  • Threat Data
• Red - Offensive Operations
  • Testing Methodology
    • Scanning/Active-Recon
      • NMAP
    • Exploit Research
    • Exploitation
    • Payloads and Obfuscation
      • MSFVenom Commands
    • Exploit Dev/Buffer Overflow
    • Post Exploitation
      • Defense Evasion
      • Persistence
      • Enumeration and Harvesting
      • Privilege Escalation
      • Meterpreter Post-Auth Runbook
    • Attacking Active Directory
    • File Transfer
    • Lateral Movement
    • Pivot/Proxy/Tunnel/Redirect
    • Network Attacks /Harvesting/MITM
    • Special Targets
    • Password Attacks
  • Offensive Toolbox
    • Recon Frameworks
    • Offensive Frameworks
    • C2 Frameworks
    • Shells
    • Utility Commands
  • Red/Purple Teaming
  • Physical Security Testing
  • Wireless Hacking
  • Social Engineering
• Red - Web App Hacking
  • Burp Suite
  • Web App Testing Frameworks
  • DNS Scanning/Enumeration - Mapping the Site
  • Scanning Utilities
  • Web Technologies
    • SSL/TLS and Certificates
    • OAuth 2.0
    • Web Application Firewall
  • Attacks and Vulnerabilities
    • Broken Authentication
    • Business Logic Flaws
    • Clickjacking
    • Command Injection
    • CSRF
    • Deserialization
    • HTTP Host Header Attacks
    • HTTP Request Smuggling
    • Insecure Direct Object Reference
    • SQL Injection
      • SQL Tips and Tricks
      • SQL Basics
      • Manual Injection Methodology
    • Web Cache Poisoning
    • Web Sockets
    • XXE - XML External Entity Attacks
    • XSS Cross-Site Scripting
• Blue - Defensive Operations
  • Standards, Frameworks, and Benchmarks
  • Query Languages
  • Event and Log analysis
  • Event Detection
    • SIEM and Enrichment
    • Sysmon
    • IDS/IPS
    • Detection Use Cases
      • DNS
      • HTTP(S)
      • Email
      • Endpoint
      • Command Line
      • Authentication/Logon
      • General Network Traffic
      • User Behavior monitoring
      • Detection Use Cases - Book Reference
      • Windows Event ID logging list
  • Packet Analysis
  • Threat Hunting
  • Active Defense
  • Device Auditing and Hardening
    • Windows Hardening Commands
    • AD Security Checks
  • Attack Research and Machine Learning
  • Stegonography
  • Asset and Vulnerability Management.
  • Blue ToolBox
  • Blue - DFIR: Digital Forensics and Incident Response
    • Interact with remote machine
    • Windows System Enumeration
    • Windows Process Information
    • Windows DFIR Checks
    • Windows DFIR Check by MITRE Tactic
    • Windows Event Logs
    • Windows Remediation Commands
    • IR Event Log Cheatsheet
    • Linux DFIR Commands
    • MacOS DFIR Commands
    • YARA
    • Memory Forensics
      • Volatility
    • Sandboxing
    • File/Binary Analysis
    • Malware
    • Reverse Engineering
• Yellow - NetEng/SysAdmin
• Yellow - Logging and Security Architecture
  • How create a logging strategy
  • Logging - Network Services
  • Logging - Endpoint Logs
  • Logging - User Behavior Monitoring
  • Logging - Cloud
  • Device Discovery and Asset Monitoring
  • Log Source Evaluation
• Yellow - Cloud
• Yellow - Containers
• Yellow - Code and CLI
  • Bash
    • CLI Components
    • Common Commands
    • Install Scripts
    • NMAP Diffing
    • Heartbleed Vuln Check
  • Powershell
    • Common Commands
  • Regex
  • Learn to Code
• Grey - Privacy/TOR/OPSEC
  • Jolly Roger's Security for Beginners
  • PGP Guide
• Training and Resources
  • Cyber Security Certifications
    • OSCP
  • Books and Reading
  • The Awesome Lists
  • Practice Lab
  • CTF