lbonanomi
5 years ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 49 additions and 34 deletions
Split View
Diff Options
-
+0 -2.gitignore
-
+49 -32README.md
+ 0
- 2
.gitignore
View File
| @@ -1,2 +0,0 @@ | |||
| # This is where the result of the script output. | |||
| log/ | |||
+ 49
- 32
README.md
View File
| @@ -105,6 +105,7 @@ Before add pull request please see **[this](https://github.com/trimstray/the-boo | |||
| :small_orange_diamond: <a href="http://iptraf.seul.org/2.6/manual.html#installation"><b>iptraf-ng</b></a> - is a console-based network monitoring program for Linux that displays information about IP traffic.<br> | |||
| :small_orange_diamond: <a href="https://iperf.fr/"><b>iPerf3</b></a> - is a tool for active measurements of the maximum achievable bandwidth on IP networks.<br> | |||
| :small_orange_diamond: <a href="https://github.com/Microsoft/Ethr"><b>ethr</b></a> - is a Network Performance Measurement Tool for TCP, UDP & HTTP.<br> | |||
| :small_orange_diamond: <a href="https://github.com/jwbensley/Etherate"><b>Etherate</b></a> - is a Linux CLI based Ethernet and MPLS traffic testing tool.<br> | |||
| :small_orange_diamond: <a href="https://github.com/troglobit/nemesis"><b>Nemesis</b></a> - packet manipulation CLI tool; craft and inject packets of several protocols.<br> | |||
| :small_orange_diamond: <a href="https://github.com/packetfu/packetfu"><b>packetfu</b></a> - a mid-level packet manipulation library for Ruby.<br> | |||
| :small_orange_diamond: <a href="https://scapy.net/"><b>Scapy</b></a> - packet manipulation library; forge, send, decode, capture packets of a wide number of protocols.<br> | |||
| @@ -229,6 +230,15 @@ Before add pull request please see **[this](https://github.com/trimstray/the-boo | |||
| #### Web Tools | |||
| ##### :black_small_square: Browsers | |||
| <p> | |||
| :small_orange_diamond: <a href="https://caniuse.com/#home"><b>Can I use</b></a> - provides up-to-date browser support tables for support of front-end web technologies.<br> | |||
| :small_orange_diamond: <a href="https://panopticlick.eff.org/"><b>Panopticlick 3.0</b></a> - is your browser safe against tracking?<br> | |||
| :small_orange_diamond: <a href="https://privacy.net/analyzer/"><b>Privacy Analyzer</b></a> - see what data is exposed from your browser.<br> | |||
| :small_orange_diamond: <a href="https://browserleaks.com/"><b>Web Browser Security</b></a> - it's all about Web Browser fingerprinting.<br> | |||
| </p> | |||
| ##### :black_small_square: SSL/Security | |||
| <p> | |||
| @@ -249,28 +259,12 @@ Before add pull request please see **[this](https://github.com/trimstray/the-boo | |||
| :small_orange_diamond: <a href="https://crt.sh/"><b>crt.sh</b></a> - discovers certificates by continually monitoring all of the publicly known CT.<br> | |||
| </p> | |||
| ##### :black_small_square: Browsers | |||
| <p> | |||
| :small_orange_diamond: <a href="https://caniuse.com/#home"><b>Can I use</b></a> - provides up-to-date browser support tables for support of front-end web technologies.<br> | |||
| :small_orange_diamond: <a href="https://panopticlick.eff.org/"><b>Panopticlick 3.0</b></a> - is your browser safe against tracking?<br> | |||
| :small_orange_diamond: <a href="https://privacy.net/analyzer/"><b>Privacy Analyzer</b></a> - see what data is exposed from your browser.<br> | |||
| :small_orange_diamond: <a href="https://browserleaks.com/"><b>Web Browser Security</b></a> - it's all about Web Browser fingerprinting.<br> | |||
| </p> | |||
| ##### :black_small_square: Privacy | |||
| <p> | |||
| :small_orange_diamond: <a href="https://www.privacytools.io/"><b>privacytools.io</b></a> - provides knowledge and tools to protect your privacy against global mass surveillance.<br> | |||
| :small_orange_diamond: <a href="https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Test+Servers"><b>DNS Privacy Test Servers</b></a> - DNS privacy recursive servers list (with a 'no logging' policy).<br> | |||
| </p> | |||
| ##### :black_small_square: HTTP Headers | |||
| ##### :black_small_square: HTTP Headers & Web Linters | |||
| <p> | |||
| :small_orange_diamond: <a href="https://securityheaders.com/"><b>Security Headers</b></a> - analyse the HTTP response headers (with rating system to the results).<br> | |||
| :small_orange_diamond: <a href="https://observatory.mozilla.org/"><b>Observatory by Mozilla</b></a> - set of tools to analyze your website.<br> | |||
| :small_orange_diamond: <a href="https://enable-cors.org/index.html"><b>Enable CORS</b></a> - enable cross-origin resource sharing.<br> | |||
| :small_orange_diamond: <a href="https://webhint.io/"><b>webhint</b></a> - is a linting tool that will help you with your site's accessibility, speed, security and more.<br> | |||
| </p> | |||
| ##### :black_small_square: DNS | |||
| @@ -318,6 +312,13 @@ Before add pull request please see **[this](https://github.com/trimstray/the-boo | |||
| :small_orange_diamond: <a href="https://www.virustotal.com/#/home/upload"><b>VirusTotal</b></a> - analyze suspicious files and URLs to detect types of malware.<br> | |||
| </p> | |||
| ##### :black_small_square: Privacy | |||
| <p> | |||
| :small_orange_diamond: <a href="https://www.privacytools.io/"><b>privacytools.io</b></a> - provides knowledge and tools to protect your privacy against global mass surveillance.<br> | |||
| :small_orange_diamond: <a href="https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Test+Servers"><b>DNS Privacy Test Servers</b></a> - DNS privacy recursive servers list (with a 'no logging' policy).<br> | |||
| </p> | |||
| ##### :black_small_square: Code parsers/playgrounds | |||
| <p> | |||
| @@ -429,6 +430,7 @@ performance of any of your sites from across the globe.<br> | |||
| :small_orange_diamond: <a href="https://www.owasp.org/index.php/Main_Page"><b>OWASP</b></a> - worldwide not-for-profit charitable organization focused on improving the security of software.<br> | |||
| :small_orange_diamond: <a href="https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project"><b>OWASP ASVS 3.0.1</b></a> - OWASP Application Security Verification Standard Project.<br> | |||
| :small_orange_diamond: <a href="https://github.com/Santandersecurityresearch/asvs"><b>OWASP ASVS 3.0.1 Web App</b></a> - simple web app that helps developers understand the ASVS requirements.<br> | |||
| :small_orange_diamond: <a href="https://www.owasp.org/index.php/OWASP_Testing_Project"><b>OWASP Testing Guide v4</b></a> - includes a "best practice" penetration testing framework.<br> | |||
| :small_orange_diamond: <a href="http://www.hackingarticles.in/"><b>Hacking Articles</b></a> - LRaj Chandel's Security & Hacking Blog.<br> | |||
| :small_orange_diamond: <a href="https://github.com/toniblyx/my-arsenal-of-aws-security-tools"><b>AWS security tools</b></a> - make your AWS cloud environment more secure.<br> | |||
| :small_orange_diamond: <a href="https://inventory.rawsec.ml/index.html"><b>Rawsec's CyberSecurity Inventory</b></a> - an inventory of tools and resources about CyberSecurity.<br> | |||
| @@ -442,6 +444,7 @@ performance of any of your sites from across the globe.<br> | |||
| <p> | |||
| :small_orange_diamond: <a href="https://infosec.mozilla.org/guidelines/web_security.html"><b>Mozilla Web Security</b></a> - help operational teams with creating secure web applications.<br> | |||
| :small_orange_diamond: <a href="https://enable-cors.org/index.html"><b>Enable CORS</b></a> - enable cross-origin resource sharing.<br> | |||
| </p> | |||
| ##### :black_small_square: Other | |||
| @@ -512,8 +515,9 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| ##### :black_small_square: HTTP(s) Services | |||
| <p> | |||
| :small_orange_diamond: <a href="https://varnish-cache.org/"><b>Varnish HTTP Cache</b></a> - HTTP accelerator designed for content-heavy dynamic web sites.<br> | |||
| :small_orange_diamond: <a href="https://varnish-cache.org/"><b>Varnish Cache</b></a> - HTTP accelerator designed for content-heavy dynamic web sites.<br> | |||
| :small_orange_diamond: <a href="https://nginx.org/"><b>Nginx</b></a> - open source web and reverse proxy server that is similar to Apache, but very light weight.<br> | |||
| :small_orange_diamond: <a href="https://www.haproxy.org/"><b>HAProxy</b></a> - the reliable, high performance TCP/HTTP load balancer.<br> | |||
| </p> | |||
| ##### :black_small_square: Secure WebMail Providers | |||
| @@ -566,6 +570,7 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://github.com/alebcay/awesome-shell"><b>Awesome Shell</b></a> - awesome command-line frameworks, toolkits, guides and gizmos.<br> | |||
| :small_orange_diamond: <a href="https://github.com/k4m4/movies-for-hackers"><b>Movies for Hackers</b></a> - list of movies every hacker & cyberpunk must watch.<br> | |||
| :small_orange_diamond: <a href="https://github.com/Kickball/awesome-selfhosted"><b>Awesome-Selfhosted</b></a> - list of Free Software network services and web applications which can be hosted locally.<br> | |||
| :small_orange_diamond: <a href="https://github.com/qazbnm456/awesome-web-security"><b>Awesome Web Security</b></a> - curated list of Web Security materials and resources.<br> | |||
| :small_orange_diamond: <a href="https://github.com/caesar0301/awesome-pcaptools"><b>Awesome Pcaptools</b></a> - collection of tools developed by other researchers to process network traces.<br> | |||
| :small_orange_diamond: <a href="https://github.com/leandromoreira/linux-network-performance-parameters"><b>Linux Network Performance</b></a> - learn where some of the network sysctl variables fit into the Linux/Kernel network flow.<br> | |||
| :small_orange_diamond: <a href="https://github.com/binhnguyennus/awesome-scalability"><b>Awesome Scalability</b></a> - best practices in building High Scalability, High Availability, High Stability and more.<br> | |||
| @@ -611,6 +616,7 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://brutelogic.com.br/blog/"><b>Pentest Bookmarks</b></a> - there are a LOT of pentesting blogs.<br> | |||
| :small_orange_diamond: <a href="https://github.com/swisskyrepo/PayloadsAllTheThings"><b>PayloadsAllTheThings</b></a> - a list of useful payloads and bypass for Web Application Security and Pentest/CTF.<br> | |||
| :small_orange_diamond: <a href="https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/"><b>Pentesting Tools Cheat Sheet</b></a> - a quick reference high level overview for typical penetration testing engagements.<br> | |||
| :small_orange_diamond: <a href="https://github.com/rshipp/awesome-malware-analysis"><b>Awesome Malware Analysis</b></a> - a curated list of awesome malware analysis tools and resources.<br> | |||
| :small_orange_diamond: <a href="https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/"><b>SQL Injection Cheat Sheet</b></a> - detailed technical information about the many different variants of the SQL Injection.<br> | |||
| :small_orange_diamond: <a href="http://kb.entersoft.co.in/"><b>Entersoft Knowledge Base</b></a> - great and detailed reference about vulnerabilities.<br> | |||
| :small_orange_diamond: <a href="http://html5sec.org/"><b>HTML5 Security Cheatsheet</b></a> - a collection of HTML5 related XSS attack vectors.<br> | |||
| @@ -618,6 +624,7 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://gtfobins.github.io/"><b>GTFOBins</b></a> - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.<br> | |||
| :small_orange_diamond: <a href="https://guif.re/"><b>Guifre Ruiz Notes</b></a> - collection of security, system, network and pentest cheatsheets.<br> | |||
| :small_orange_diamond: <a href="http://blog.safebuff.com/2016/07/03/SSRF-Tips/index.html"><b>SSRF Tips</b></a> - a collection of SSRF Tips.<br> | |||
| :small_orange_diamond: <a href="http://shell-storm.org/repo/CTF/"><b>shell-storm repo CTF</b></a> - great archive of CTFs.<br> | |||
| </p> | |||
| ##### :black_small_square: Bounty programs | |||
| @@ -646,7 +653,7 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://github.com/amolnaik4/bodhi"><b>Bodhi</b></a> - is a playground focused on learning the exploitation of client-side web vulnerabilities.<br> | |||
| </p> | |||
| ##### :black_small_square: Labs (ethical hacking platforms/trainings) | |||
| ##### :black_small_square: Labs (ethical hacking platforms/trainings/CTFs) | |||
| <p> | |||
| :small_orange_diamond: <a href="https://www.offensive-security.com/"><b>Offensive Security</b></a> - true performance-based penetration testing training for over a decade.<br> | |||
| @@ -654,11 +661,14 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://www.hacking-lab.com/index.html"><b>Hacking-Lab</b></a> - online ethical hacking, computer network and security challenge platform.<br> | |||
| :small_orange_diamond: <a href="http://pwnable.kr/index.php"><b>pwnable.kr</b></a> - non-commercial wargame site which provides various pwn challenges regarding system exploitation.<br> | |||
| :small_orange_diamond: <a href="https://pwnable.tw/"><b>Pwnable.tw</b></a> - is a wargame site for hackers to test and expand their binary exploiting skills.<br> | |||
| :small_orange_diamond: <a href="https://picoctf.com/"><b>picoCTF</b></a> - is a free computer security game targeted at middle and high school students.<br> | |||
| :small_orange_diamond: <a href="https://ctflearn.com/"><b>CTFlearn</b></a> - is an online platform built to help ethical hackers learn and practice their cybersecurity knowledge and skills.<br> | |||
| :small_orange_diamond: <a href="https://silesiasecuritylab.com/"><b>Silesia Security Lab</b></a> - high quality security testing services.<br> | |||
| :small_orange_diamond: <a href="https://practicalpentestlabs.com/"><b>Practical Pentest Labs</b></a> - pentest lab, take your Hacking skills to the next level.<br> | |||
| :small_orange_diamond: <a href="https://www.root-me.org/?lang=en"><b>Root Me</b></a> - the fast, easy, and affordable way to train your hacking skills.<br> | |||
| :small_orange_diamond: <a href="https://rozwal.to/login"><b>rozwal.to</b></a> - a great platform to train your pentesting skills.<br> | |||
| :small_orange_diamond: <a href="https://tryhackme.com/"><b>TryHackMe</b></a> - learning Cyber Security made easy.<br> | |||
| :small_orange_diamond: <a href="https://hackxor.net/"><b>hackxor</b></a> - is a realistic web application hacking game, designed to help players of all abilities develop their skills.<br> | |||
| :small_orange_diamond: <a href="http://overthewire.org/wargames/"><b>OverTheWire</b></a> - can help you to learn and practice security concepts in the form of fun-filled games.<br> | |||
| :small_orange_diamond: <a href="https://labs.wizard-security.net/"><b>Wizard Labs</b></a> - is an online Penetration Testing Lab.<br> | |||
| :small_orange_diamond: <a href="https://pentesterlab.com/"><b>PentesterLab</b></a> - provides vulnerable systems that can be used to test and understand vulnerabilities.<br> | |||
| @@ -685,24 +695,13 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://blog.qualys.com/"><b>Qualys Blog</b></a> - expert network security guidance and news.<br> | |||
| :small_orange_diamond: <a href="https://www.darkreading.com/"><b>DARKReading</b></a> - connecting the Information Security Community.<br> | |||
| :small_orange_diamond: <a href="https://twitter.com/disclosedh1"><b>publiclyDisclosed</b></a> - public disclosure watcher who keeps you up to date about the recently disclosed bugs.<br> | |||
| :small_orange_diamond: <a href="https://packetstormsecurity.com/"><b>Packet Storm</b></a> - information security services, news, files, tools, exploits, aAdvisories and whitepapers.<br> | |||
| :small_orange_diamond: <a href="https://packetstormsecurity.com/"><b>Packet Storm</b></a> - information security services, news, files, tools, exploits, advisories and whitepapers.<br> | |||
| :small_orange_diamond: <a href="https://sekurak.pl/"><b>Sekurak</b></a> - about security, penetration tests, vulnerabilities and many others (PL/EN).<br> | |||
| :small_orange_diamond: <a href="https://nfsec.pl/"><b>nf.sec</b></a> - basic aspects and mechanisms of Linux operating system security (PL).<br> | |||
| </p> | |||
| #### Other Cheat Sheets | |||
| ###### DNS Servers list (privacy) | |||
| | <b><u>IP</u></b> | <b><u>URL</u></b> | | |||
| | :--- | :--- | | |||
| | **`84.200.69.80`** | [dns.watch](https://dns.watch/) | | |||
| | **`94.247.43.254`** | [opennic.org](https://www.opennic.org/) | | |||
| | **`64.6.64.6`** | [verisign.com](https://www.verisign.com/en_US/security-services/public-dns/index.xhtml) | | |||
| | **`89.233.43.71`** | [censurfridns.dk](https://blog.uncensoreddns.org/) | | |||
| | **`1.1.1.1`** | [cloudflare.com](https://www.cloudflare.com/dns/) | | |||
| | **`94.130.110.185`** | [dnsprivacy.at](https://dnsprivacy.at/) | | |||
| ###### Build your own DNS Servers | |||
| <p> | |||
| @@ -719,6 +718,24 @@ Linux Security Expert</b></a> - trainings, howtos, checklists, security tools an | |||
| :small_orange_diamond: <a href="https://jamielinux.com/docs/openssl-certificate-authority/"><b>OpenSSL Certificate Authority</b></a> - build your own certificate authority (CA) using the OpenSSL command-line tools.<br> | |||
| </p> | |||
| ###### Build your own System/Virtual Machine | |||
| <p> | |||
| :small_orange_diamond: <a href="https://github.com/cfenollosa/os-tutorial"><b>os-tutorial</b></a> - how to create an OS from scratch.<br> | |||
| :small_orange_diamond: <a href="https://justinmeiners.github.io/lc3-vm/"><b>Write your Own Virtual Machine</b></a> - how to write your own virtual machine (VM).<br> | |||
| </p> | |||
| ###### DNS Servers list (privacy) | |||
| | <b><u>IP</u></b> | <b><u>URL</u></b> | | |||
| | :--- | :--- | | |||
| | **`84.200.69.80`** | [dns.watch](https://dns.watch/) | | |||
| | **`94.247.43.254`** | [opennic.org](https://www.opennic.org/) | | |||
| | **`64.6.64.6`** | [verisign.com](https://www.verisign.com/en_US/security-services/public-dns/index.xhtml) | | |||
| | **`89.233.43.71`** | [censurfridns.dk](https://blog.uncensoreddns.org/) | | |||
| | **`1.1.1.1`** | [cloudflare.com](https://www.cloudflare.com/dns/) | | |||
| | **`94.130.110.185`** | [dnsprivacy.at](https://dnsprivacy.at/) | | |||
| ###### TOP 10 Browser extensions | |||
| | <b><u>Extension name</u></b> | <b><u>Description</u></b> | | |||