steps-ish.txt
42 KB
I tried to put every command I wrote here but couldn't to lack of time. I will send the related files on a different channles for files. SO not to mess things here.
❤1
The amounts of cats that came right now when mom was decapitating the chicken was crazy I saw cats I never saw in the neighborhood before
😁6
One website I recommend for anyone going into cybersecurity and wanting tools and methods to do each things.
MITRE ATT&CK
It's the swiss army knife, for Penetration testing. I will send the other tools too, from OSINT to Reverse Shell when I have time.
@Tetstack
MITRE ATT&CK
It's the swiss army knife, for Penetration testing. I will send the other tools too, from OSINT to Reverse Shell when I have time.
@Tetstack
❤1
The second ones are for Reverse Engineering & Malware Analysis.
CAPEC (Common Attack Pattern Enumeration and Classification) : This one is managed by MITRE, which categorizes the actual mechanisms and design patterns that attackers use to exploit vulnerabilities ("How they do it before what they do").
CWE (Common Weakness Enumeration): A formal Software and hardware weakness types.
SANS Malware Analysis playbook for step by step methodology (Triage -> Behavioral Analysis -> Code Analysis -> Memory Forensics).
@Tetstack
CAPEC (Common Attack Pattern Enumeration and Classification) : This one is managed by MITRE, which categorizes the actual mechanisms and design patterns that attackers use to exploit vulnerabilities ("How they do it before what they do").
CWE (Common Weakness Enumeration): A formal Software and hardware weakness types.
SANS Malware Analysis playbook for step by step methodology (Triage -> Behavioral Analysis -> Code Analysis -> Memory Forensics).
@Tetstack
capec.mitre.org
CAPEC -
Common Attack Pattern Enumeration and Classification (CAPEC™)
Common Attack Pattern Enumeration and Classification (CAPEC™)
Common Attack Pattern Enumeration and Classification (CAPEC) is a list of software weaknesses.
❤1👍1
Third, OSINT based tools were one is already popular.
The OSINT Framework: A full directory mind-map for each tool and resources available for gathering info on targets, domains, people and infrastructure.
The DIKUW (Data > Information > Knowledge > Wisdom)Model: This is more of a model describing the structure and functional relationship between set of components. (this will help you get rid of junk data you found about a target.)
@Tetstack
The OSINT Framework: A full directory mind-map for each tool and resources available for gathering info on targets, domains, people and infrastructure.
The DIKUW (Data > Information > Knowledge > Wisdom)Model: This is more of a model describing the structure and functional relationship between set of components. (this will help you get rid of junk data you found about a target.)
@Tetstack
❤1