Skip to main content

listchan©

Search This Blog

List: Cybersecurity tools

on July 10, 2021

Get link
Facebook
X
Pinterest
Email
Other Apps

Photo from Pixabay

Basic tools in cybersecurity

1. Google Dork Cheatsheet https://gist.github.com/sundowndev/283efaddbcf896ab405488330d1bbc06

2. Metasploit https://www.metasploit.com/download and BEEF https://github.com/beefproject/beef/wiki/Installation

3. Nmap https://nmap.org/download.html

4. Burp Suite https://portswigger.net/burp/communitydownload and Zaproxy https://www.zaproxy.org/download/

5. Test labs e.g. https://information.rapid7.com/download-metasploitable-2017.html

6. Dirb https://tools.kali.org/web-applications/dirb and DirBuster https://sourceforge.net/projects/dirbuster/

7. WhatWeb https://github.com/urbanadventurer/WhatWeb or Wappalyzer https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/

8. LinEnum https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh or Linpeas https://raw.githubusercontent.com/carlospolop/privilege-escalation-awesome-scripts-suite/master/linPEAS/linpeas.sh

9. Winpeas https://raw.githubusercontent.com/carlospolop/privilege-escalation-awesome-scripts-suite/master/winPEAS/winPEASbat/winPEAS.bat

tools

Get link
Facebook
X
Pinterest
Email
Other Apps

More Articles

techniques
mindset
tools
moneymaking

Search This Blog

Popular Posts

List: Good References for Cybersecurity Experts

Photo from Pixabay Good References for Cybersecurity Experts Reading and learning are very important in cybersecurity. This is because a lot of new things in the infosec world happen all the time. 1. News compilations, Example: https://threatpost.com/ > These websites are good as compilations of different news from different topics related to cybersecurity. They are not limited to a specific specialization but have advisories on them from everything like webapp defense to CISA practices. 2. Vendor-specific news, Example: https://bits.debian.org/ > Some vendors ie Windows, Cisco, etc have their own blogs or news logs with their RSS feeds that are maintained by the vendor company itself. This means it is updated according to the software's needs 3. Cybersecurity-specific, enterprise blogs, Example: https://www.bitdefender.com/blog/hotforsecurity/ > Some vendors in enterprise solutions such as Kaspersky o...

Cybersecurity certification - certificates of the future

*Photo from Pixabay It is important that one has a proper roadmap of what certificate to have so as to do properly. Certificates from different organizations provide you with extra credibility. Some companies look for these certificates. Some companies also lean toward a specific skillset. You have to note that some organizations are more trustworthy than others, but in general, these certification organizations help make your CV more attractive. Organizations to look out for in cybersecurity are: 1. CompTIA 2. ISC(2) 3. Offensive Security 4. EC-Council And many more. You have to realize that this is not the only ones in the list of good companies -- there are plenty more out there. Each organization tends to follow a specific lineup of certificates, however it is possible to make your own along the way. They tend to go from entry-level to advanced. However, skipping can be an option. Examples of Offensive Security certificates https://www.offensive-security.com/ 1. PWK -...

List: Moneymaking Methods As A Cybersecurity Expert

Moneymaking Methods As A Cybersecurity Expert As a cybersecurity expert, you can have many sources of income. Here is a short list of some things you can do. 1. VAPT (Vulnerability Assessment and Penetration Testing) https://www.veracode.com/security/vulnerability-assessment-and-penetration-testing > Great for if you are trying to make a long-term career as an infosec expert in the offensive field. You will need certificates and workshops. You will also need consistent learning because it is not a static field. 2. Systems admin (defense) https://en.wikipedia.org/wiki/System_administrator > Great for people who like to protect and wait. This also comes hand-in-hand with some forensics skills like Finding Indicators of Compromise. This is good because it is in demand in the medium businesses. 3. Bug bounty https://hackerone.com/bug-bounty-programs > Great for people who have a passion for reverse-engineering and reading through code. However hav...

List: The Mindset of a Cybersecurity Expert

What makes a Cybersecurity Expert different from other experts? Cybersecurity is different from other fields not just because it is related to information technology but also in the methodology in which things are followed. 1. The desire to "learn the inner workings" of something https://en.wikipedia.org/wiki/Reverse_engineering > Cybersecurity is not all about "using tools" and "protecting". In fact a big chunk of it is endless reading and reconnaissance . (What is reconnaissance? https://en.wikipedia.org/wiki/Reconnaissance ) Always be prepared to stop at any time and learn more about your topic or subject. 2. Craving more knowledge, ie -- More tools and techniques > Cybersecurity is not a static field of knowledge and always includes more and more discoveries. You should always be prepared to learn more techniques, tools, and skills. This is not a field where you "instantly know it all" 3. Reading -- The patience to read m...

List: Protecting Your Facebook, Twitter, or Instagram Accounts

Protecting your Social Media Accounts (Facebook, Twitter, Instagram, etc) Your social media accounts can be hacked by those who want to ruin your day. There are many ways you can protect yourself for those hackers, and thankfully these are very easy and wouldn't take too much effort. You will only need a few minutes of your day to get them done. 1. Have different passwords for different accounts Different passwords for different accounts mean that if one account is compromised the others would not be in trouble. For example, you can have a different password for Facebook, Gmail, and Twitter, which means that if a hacker got the password for one, they won't get it for all of them. 2. Do not click links that you do not trust Some websites can have weaknesses (vulnerabilities) that can be used to attack your accounts if you were to click on them, sometimes by stealing cookies or infecting your device. 3. Do not download or run apps you do not trust Sometimes apps can be ...

List: Protecting your Windows Computer

*Photo from Pixabay Microsoft Windows has the biggest demographic of computer users in the world. Simply put: Most computers are Windows. It is thus very important to learn some basic cybersecurity skills and cybersecurity tools when using Microsoft Windows machines. This is a non-exhaustive list, however it should provide some background on how to properly protect a Windows PC, at least on the most basic level. 1. Windows Defender Update > Open Windows Defender by going to Start, then typing "Windows Defender". From there, click "Windows Security". Under "Virus and Threat Protection", go to "Virus and Threat Protection Updates", and update it. 2. Windows Defender Scan > The most basic is "Quick Scan", which is under the front page of "Virus and Threat Protection". It does a heuristic scan of the computer's running services and is generally well enough for simple malware. 3. System File Checker > Go to "c...

Powered by Blogger

listchan© 2021