📖 Cyber Risks and Insurance: The Legal Principles.

• Дата выхода: 22 Апреля 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)
• Цена в онлайн магазине: 110$.

• VT.

• Full of tips, case studies, tables and checklists this new title sets out the parameters of liability in respect of potential and actual cyber insurance claims and examines the significant areas where such claims will have the greatest impact.

🧩 Софт для чтения.

#Cybersecurity #Risks #GDPR #Eng

📖 Practical Social Engineering: A Primer for the Ethical Hacker.

• Дата выхода: 14 Июня 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• How to use Open Source Intelligence tools (OSINT) like Recon-ng and whois;
• Strategies for capturing a target’s info from social media, and using it to guess their password;
• Phishing techniques like spoofing, squatting, and standing up your own webserver to avoid detection;
• How to collect metrics about the success of your attack and report them to clients;
• Technical controls and awareness programs to help defend against social engineering.

🧩 Софт для чтения.

#SE #Eng

SPAMMING TOOLS

https://github.com/trewisscotch?tab=repositories

📖 CASP+ CompTIA Advanced Security Practitioner Practice Tests: Exam CAS-004, 2nd Edition.

• Дата выхода: 13 Августа 2021 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• The CASP+ (CompTIA Advanced Security Practitioner) certification verifies that you have the technical knowledge and skills required to conceptualize, design, and engineer secure solutions across complex enterprise environments. CASP+ Practice Tests, Second Edition, prepares you for the certification exam covering over 1,000 practice questions, covering all four crucial domains and objectives. It’s the perfect study companion to Sybex’s CASP+ Study Guide: Exam CAS-004, Fourth Edition. Find out where you need additional review, know what type of questions you’ll face, and confront exam day with confidence.

🧩 Софт для чтения.

#CASP #Eng #Security #Exam #CompTIA

Exploit
https://github.com/c0pp3rGuardian
https://github.com/SkullCyberArmy-Official/awesome-automatic-sql-injection
https://github.com/Kedjaw3n/Psqli-dumper
https://github.com/XdBloo9712/cpanel_Cracker
https://github.com/XdBloo9712/Inbox_Hotmail
https://github.com/rebel-bit/boot
https://github.com/rebel-bit/al-tools
https://github.com/sonofescobar1337/kontolbox
https://github.com/maxamin/-0day-Mari-Source
https://github.com/0399obot/Sm5

​🔖 A selection of useful information and resources. Part 6

🖖🏻 Hello user_name.

💬 Here is the 6th part of the collections of useful material, thanks to this information you can upgrade your skill in the category you need and get unique knowledge - for free.


• Starting with a huge collection of OSINT resources. Tools, news, blogs, learning material, podcasts, videos, playlists, forums, CTFs, streams, etc.

https://start.me/p/DPYPMz/the-ultimate-osint-collection

• Useful material on penetration testing.

https://github.com/enaqx/awesome-pentest

https://github.com/Muhammd/Awesome-Pentest

https://github.com/oneplus-x/Awesome-Pentest

https://github.com/wtsxDev/Penetration-Testing

https://github.com/anubi5egypt/awesome-web-pentest

https://github.com/Nieuport/Awesome-Penetration-Testing

https://github.com/majidkalantarii/AwesomePenetrationTest

• Red Teaming for beginners and pros. A lot of useful material for every taste.

https://github.com/tcostam/awesome-command-control
https://github.com/marcosValle/awesome-windows-red-team

https://github.com/yeyintminthuhtut/Awesome-Red-Teaming

https://github.com/r3p3r/yeyintminthuhtut-Awesome-Red-Teaming

https://github.com/mishmashclone/yeyintminthuhtut-Awesome-Red-Teaming

• Selection of rootkits, with a different set of functions. From hidden SSH to a full-fledged keylogger with a built-in IRC bot.

https://github.com/milabs/awesome-linux-rootkits

• Reverse Engineering: books, courses, practice and more.

https://github.com/wtsxDev/reverse-engineering

• A selection of materials on the fight against Cobalt Strike.

https://github.com/MichaelKoczwara/Awesome-CobaltStrike-Defence

• A selection of vulnerable VMs and applications. Includes: Online platforms, Docker, SSO systems, Paid, Android.

https://github.com/vavkamil/awesome-vulnerable-apps/

• Useful material on the subject of Active Directory security testing.

https://github.com/balaasif6789/AD-Pentesting

• i2p and TOR. Software for Android and iOS, books, articles, server protection tools, presentations, distributions and much more.

https://github.com/mikalv/awesome-i2p
https://github.com/ajvb/awesome-tor

‼️ The list does not claim to be complete, we will supplement this collection with new material. Share with friends and save to favorites so as not to lose. You can find other useful information by hashtags in our group #Selection #Linux #OSINT #Cobalt_Strike #Pentest #Android # #Anonymity #Book #Course #Pentest. Your S.E.‌‌

This info is only shared in
t.me/githubx

web call
[ github.com/mehrvarz/webcall-android ]
[ f-droid.org/packages/timur.webcall.callee ]

P2P Communicator working via WebRTC on Android. Allows you to communicate in audio/video/file exchange format. As usual - using E2E encryption.

It can work via the Internet and directly within the local network. Of the interesting chips, there is NFC Connect, which allows you to use NFC to identify users.

The thing is quite interesting, we tried it at home - we liked the quality of the audio-video‌‌

Speek.Chat

Speek.Chat is a messaging app that is anonymous and censorship resistant. Plus, it doesn't compromise on ease of use and is just as easy to use as popular messaging apps.

Speek is serverless, stores no metadata, requires no ID or phone number, and all messages are fully encrypted and routed through the Tor network. This makes it possible for IP addresses to never be public and users to remain anonymous.

▫️You can chat without revealing your identity (or IP address) to anyone
▫️No one can know who your contacts are or when you speak (no metadata!)
▫️There are no servers or operators that could be compromised by exposing your information.
▫️Speek.Chat is cross-platform and easy for non-technical users.
▫️Works on OS X, GNU/Linux, Windows

https://github.com/speek-app/speek

📖 CompTIA Server+ Certification All-in-One Exam Guide, Second Edition (Exam SK0-005).

• Дата выхода: 3 Августа 2021 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• This highly effective self-study resource fully prepares you for the latest version of CompTIA’s Server+ certification exam. The book shows how to implement server-based hardware and software. In keeping with the All-in-One philosophy, this guide serves both as a study guide and as a valuable on-the-job reference.

🧩 Софт для чтения.

#Eng #Exam #CompTIA

Kali Linux Cheat Sheet for Penetration Testers

https://github.com/NoorQureshi/kali-linux-cheatsheet

#cheatsheet

https://baturite.ce.gov.br/radio.php

ACTIVE SHELL.
ENJOY

📖 Learning Modern Linux: A Handbook for the Cloud Native Practitioner.

• Дата выхода: 31 Мая 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• Use Linux as a modern work environment, rather than just from an admin perspective;
• Learn critical components such as the Linux kernel, terminal multiplexer, human-friendly shells, and portable shell scripting;
• Become familiar with access control, from file permissions to capabilities, and understand the role of filesystems as a fundamental building block;
• Learn about application dependency management and containers;
• Gain hands-on experience with the Linux networking stack and tooling, including DNS;
• Apply modern operating system observability to manage your workloads;
• Become familiar with interprocess communication, virtual machines, and selected security topics.

🧩 Софт для чтения.

#Eng #Cloud #Linux

Find public files in Google Drive
#OSINT

https://www.dedigger.com/#gsc.tab=0

Centralize and expedite #OSINT investigations

https://github.com/audioo/bitcrook

Moriarty-Project V3.0 - The tool provides information about the phone number you entered.
♾ https://github.com/AzizKpln/Moriarty-Project‌‌

CVE-2022-1329
WordPress-Elementor-3.6.0-3.6.1-3.6.2
type: RCE
#exploit #rce #poc

📖 Cloud Security Handbook: Find out how to effectively secure cloud environments using AWS, Azure, and GCP.

• Дата выхода: 3 Августа 2021 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• This book will enable information security and cloud engineers to recognize the risks involved in public cloud and find out how to implement security controls as they design, build, and maintain environments in the cloud. You'll begin by learning about the shared responsibility model, cloud service models, and cloud deployment models, before getting to grips with the fundamentals of compute, storage, networking, identity management, encryption, and more. Next, you'll explore common threats and discover how to stay in compliance in cloud environments. As you make progress, you'll implement security in small-scale cloud environments through to production-ready large-scale environments, including hybrid clouds and multi-cloud environments.

🧩 Софт для чтения.

#Eng #Cloud #Security #Azure #GCP #AWS

#python #hack #cam

https://sankethj.medium.com/advanced-camera-hacking-tool-using-python-c84721279c45