mirror of
https://github.com/trimstray/the-book-of-secret-knowledge.git
synced 2024-12-19 09:56:14 +00:00
updated and added new resources
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray
parent
13ce3ad77b
commit
a9abfc3677
30
README.md
30
README.md
@ -46,6 +46,12 @@
|
||||
- they miss and cry for **[Slackware](http://www.slackware.com/)** on production
|
||||
- they love the old admin nix-world
|
||||
|
||||
## What is this list?
|
||||
|
||||
This list is a collection of various materials that I use every day in my work. It contain a lot of useful information gathered in one piece. It is intended for everyone and anyone who is or wants to become a Ninja Admin (and not only).
|
||||
|
||||
This is not a final and full version - I update it on an ongoing basis.
|
||||
|
||||
## :ballot_box_with_check: Todo
|
||||
|
||||
- [ ] Add useful shell functions
|
||||
@ -88,7 +94,11 @@ for transferring data with URLs.<br>
|
||||
:small_orange_diamond: <a href="https://www.wireshark.org/docs/man-pages/tshark.html"><b>tshark</b></a> - dump and analyze network traffic (wireshark cli).<br>
|
||||
:small_orange_diamond: <a href="https://github.com/mschwager/fierce"><b>fierce</b></a> - a DNS reconnaissance tool for locating non-contiguous IP space.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/aboul3la/Sublist3r"><b>sublist3r</b></a> - fast subdomains enumeration tool for penetration testers.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/OWASP/Amass"><b>amass</b></a> - the OWASP tool obtains subdomain names by scraping data sources, recursive brute forcing, crawling web archives and more.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/troglobit/nemesis"><b>Nemesis</b></a> - packet manipulation CLI tool; craft and inject packets of several protocols.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/packetfu/packetfu"><b>packetfu</b></a> - a mid-level packet manipulation library for Ruby.<br>
|
||||
:small_orange_diamond: <a href="https://scapy.net/"><b>Scapy</b></a> - packet manipulation library; forge, send, decode, capture packets of a wide number of protocols.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/GouveaHeitor/nipe"><b>Nipe</b></a> - script to make Tor Network your default gateway.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: SSL
|
||||
@ -104,6 +114,7 @@ for transferring data with URLs.<br>
|
||||
|
||||
<p>
|
||||
:small_orange_diamond: <a href="https://cisofy.com/lynis/"><b>lynis</b></a> - battle-tested security tool for systems running Linux, macOS, or Unix-based operating system.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/rebootuser/LinEnum"><b>LinEnum</b></a> - scripted Local Linux Enumeration & Privilege Escalation Checks.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: System Diagnostics/Debuggers
|
||||
@ -131,6 +142,16 @@ for transferring data with URLs.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/dbcli/mycli"><b>mycli</b></a> - terminal client for MySQL with autocompletion and syntax highlighting.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Pentesting
|
||||
|
||||
<p>
|
||||
:small_orange_diamond: <a href="https://www.metasploit.com/"><b>Metasploit</b></a> - tool and framework for pentesting system, web and many more, contains a lot a ready to use exploit.<br>
|
||||
:small_orange_diamond: <a href="https://portswigger.net/burp"><b>Burp Suite</b></a> - tool for testing Web application security, intercepting proxy to replay, inject, scan and fuzz HTTP requests.<br>
|
||||
:small_orange_diamond: <a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project"><b>OWASP Zed Attack Proxy</b></a> - intercepting proxy to replay, inject, scan and fuzz HTTP requests.<br>
|
||||
:small_orange_diamond: <a href="https://cirt.net/Nikto2"><b>Nikto2</b></a> - web server scanner which performs comprehensive tests against web servers for multiple items.<br>
|
||||
:small_orange_diamond: <a href="http://sqlmap.org/"><b>sqlmap</b></a> - tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.<br>
|
||||
</p>
|
||||
|
||||
#### Web Tools
|
||||
|
||||
##### :black_small_square: SSL
|
||||
@ -237,11 +258,12 @@ performance of any of your sites from across the globe.<br>
|
||||
:small_orange_diamond: <a href="http://wiki.bash-hackers.org/start"><b>The Bash Hackers Wiki</b></a> - hold documentation of any kind about GNU Bash.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Unix tutorials
|
||||
##### :black_small_square: Unix & Network
|
||||
|
||||
<p>
|
||||
:small_orange_diamond: <a href="https://www.cyberciti.biz/"><b>nixCraft</b></a> - linux and unix tutorials for new and seasoned sysadmin.<br>
|
||||
:small_orange_diamond: <a href="https://www.tecmint.com/"><b>TecMint</b></a> - the ideal Linux blog for Sysadmins & Geeks.<br>
|
||||
:small_orange_diamond: <a href="http://www.omnisecu.com/"><b>Omnisecu</b></a> - Free Networking, System Administration and Security Tutorials.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Security
|
||||
@ -250,6 +272,7 @@ performance of any of your sites from across the globe.<br>
|
||||
:small_orange_diamond: <a href="https://www.owasp.org/index.php/Main_Page"><b>OWASP</b></a> - worldwide not-for-profit charitable organization focused on improving the security of software.<br>
|
||||
:small_orange_diamond: <a href="https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project"><b>OWASP ASVS 3.0.1</b></a> - OWASP Application Security Verification Standard Project.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/Santandersecurityresearch/asvs"><b>OWASP ASVS 3.0.1 Web App</b></a> - simple web app that helps developers understand the ASVS requirements.<br>
|
||||
:small_orange_diamond: <a href="https://www.offensive-security.com/"><b>Offensive Security</b></a> - true performance-based penetration testing training for over a decade.<br>
|
||||
:small_orange_diamond: <a href="http://www.hackingarticles.in/"><b>Hacking Articles</b></a> - LRaj Chandel's Security & Hacking Blog.<br>
|
||||
:small_orange_diamond: <a href="https://gtfobins.github.io/"><b>GTFOBins</b></a> - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/toniblyx/my-arsenal-of-aws-security-tools"><b>AWS security tools</b></a> - make your AWS cloud environment more secure.<br>
|
||||
@ -257,6 +280,7 @@ performance of any of your sites from across the globe.<br>
|
||||
:small_orange_diamond: <a href="http://www.pentest-standard.org/index.php/Main_Page"><b>PTES</b></a> - the penetration testing execution standard.<br>
|
||||
:small_orange_diamond: <a href="https://github.com/zardus/ctf-tools"><b>ctf-tools</b></a> - some setup scripts for security research tools.<br>
|
||||
:small_orange_diamond: <a href="https://guif.re/"><b>Guifre Ruiz Notes</b></a> - collection of secuirty, system, network and pentest cheatsheets.<br>
|
||||
:small_orange_diamond: <a href="https://inventory.rawsec.ml/index.html"><b>Rawsec's CyberSecurity Inventory</b></a> - an inventory of tools and resources about CyberSecurity.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Web Apps
|
||||
@ -293,6 +317,7 @@ performance of any of your sites from across the globe.<br>
|
||||
:small_orange_diamond: <a href="https://linuxsecurity.expert/"><b>
|
||||
Linux Security Expert</b></a> - trainings, howtos, checklists, security tools and more.<br>
|
||||
:small_orange_diamond: <a href="http://www.grymoire.com/"><b>The Grymoire</b></a> - collection of useful incantations for wizards, be you computer wizards, magicians, or whatever.<br>
|
||||
:small_orange_diamond: <a href="https://raymii.org/s/index.html"><b>raymii.org</b></a> - linux/unix sysadmin specializing in building high availability cloud environments.<br>
|
||||
</p>
|
||||
|
||||
#### Systems/Services
|
||||
@ -303,6 +328,8 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an
|
||||
:small_orange_diamond: <a href="http://www.slackware.com/"><b>Slackware</b></a> - the most "Unix-like" Linux distribution.<br>
|
||||
:small_orange_diamond: <a href="https://www.openbsd.org/"><b>OpenBSD</b></a> - multi-platform 4.4BSD-based UNIX-like operating system.<br>
|
||||
:small_orange_diamond: <a href="https://hardenedbsd.org/"><b>HardenedBSD</b></a> - HardenedBSD aims to implement innovative exploit mitigation and security solutions.<br>
|
||||
:small_orange_diamond: <a href="https://www.kali.org/"><b>Kali Linux</b></a> - Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments.<br>
|
||||
:small_orange_diamond: <a href="https://backbox.org/"><b>Backbox Linux</b></a> - penetration test and security assessment oriented Ubuntu-based Linux distribution.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Network
|
||||
@ -315,6 +342,7 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an
|
||||
|
||||
<p>
|
||||
:small_orange_diamond: <a href="https://varnish-cache.org/"><b>Varnish HTTP Cache</b></a> - HTTP accelerator designed for content-heavy dynamic web sites.<br>
|
||||
:small_orange_diamond: <a href="https://varnish-cache.org/"><b>Nginx</b></a> - open source web and reverse proxy server that is similar to Apache, but very light weight.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Security/hardening
|
||||
|
||||
Loading…
Reference in New Issue
Block a user