From edf281631d2d94ab2f9a3f982acb11830093db46 Mon Sep 17 00:00:00 2001 From: trimstray Date: Wed, 19 Dec 2018 10:44:11 +0100 Subject: [PATCH] minor updates: Security & Pentesting chapters - signed-off-by: trimstray --- README.md | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/README.md b/README.md index f0ef94d..8581730 100644 --- a/README.md +++ b/README.md @@ -388,14 +388,8 @@ performance of any of your sites from across the globe.
  :small_orange_diamond: OWASP - worldwide not-for-profit charitable organization focused on improving the security of software.
  :small_orange_diamond: OWASP ASVS 3.0.1 - OWASP Application Security Verification Standard Project.
  :small_orange_diamond: OWASP ASVS 3.0.1 Web App - simple web app that helps developers understand the ASVS requirements.
-  :small_orange_diamond: Offensive Security - true performance-based penetration testing training for over a decade.
  :small_orange_diamond: Hacking Articles - LRaj Chandel's Security & Hacking Blog.
-  :small_orange_diamond: GTFOBins - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.
  :small_orange_diamond: AWS security tools - make your AWS cloud environment more secure.
-  :small_orange_diamond: HTML5 Security Cheatsheet - a collection of HTML5 related XSS attack vectors.
-  :small_orange_diamond: PTES - the penetration testing execution standard.
-  :small_orange_diamond: ctf-tools - some setup scripts for security research tools.
-  :small_orange_diamond: Guifre Ruiz Notes - collection of security, system, network and pentest cheatsheets.
  :small_orange_diamond: Rawsec's CyberSecurity Inventory - an inventory of tools and resources about CyberSecurity.
  :small_orange_diamond: Application Security Wiki - is an initiative to provide all application security related resources at one place.
  :small_orange_diamond: The Illustrated TLS Connection - every byte of a TLS connection explained and reproduced.
@@ -498,11 +492,7 @@ Linux Security Expert - trainings, howtos, checklists, security tools an

  :small_orange_diamond: Awesome Sysadmin - amazingly awesome open source sysadmin resources.
  :small_orange_diamond: Awesome Shell - awesome command-line frameworks, toolkits, guides and gizmos.
-  :small_orange_diamond: Awesome Hacking - awesome lists for hackers, pentesters and security researchers.
-  :small_orange_diamond: Awesome Hacking Resources - collection of hacking/penetration testing resources to make you better.
-  :small_orange_diamond: Hacking Cheat Sheet - author hacking and pentesting notes.
  :small_orange_diamond: Movies for Hackers - list of movies every hacker & cyberpunk must watch.
-  :small_orange_diamond: Awesome Pentest - collection of awesome penetration testing resources, tools and other shiny things.
  :small_orange_diamond: Awesome Pcaptools - collection of tools developed by other researchers to process network traces.
  :small_orange_diamond: SecLists - collection of multiple types of lists used during security assessments, collected in one place.
  :small_orange_diamond: Command-line-text-processing - from finding text to search and replace, from sorting to beautifying text and more.
@@ -522,19 +512,28 @@ Linux Security Expert - trainings, howtos, checklists, security tools an   :small_orange_diamond: Nikto2 - web server scanner which performs comprehensive tests against web servers for multiple items.
  :small_orange_diamond: sqlmap - tool that automates the process of detecting and exploiting SQL injection flaws.
  :small_orange_diamond: Faraday - an Integrated Multiuser Pentest Environment.
+  :small_orange_diamond: ctf-tools - some setup scripts for security research tools.

##### :black_small_square: Pentests bookmarks collection

+  :small_orange_diamond: PTES - the penetration testing execution standard.
  :small_orange_diamond: Brute XSS - master the art of Cross Site Scripting.
  :small_orange_diamond: Offensive Security Bookmarks - security bookmarks collection, all that things I need to pass OSCP.
  :small_orange_diamond: Awesome Pentest Cheat Sheets - collection of the cheat sheets useful for pentesting.
+  :small_orange_diamond: Awesome Hacking - awesome lists for hackers, pentesters and security researchers.
+  :small_orange_diamond: Awesome Hacking Resources - collection of hacking/penetration testing resources to make you better.
+  :small_orange_diamond: Hacking Cheat Sheet - author hacking and pentesting notes.
+  :small_orange_diamond: Awesome Pentest - collection of awesome penetration testing resources, tools and other shiny things.
  :small_orange_diamond: Pentest Bookmarks - there are a LOT of pentesting blogs.
  :small_orange_diamond: PayloadsAllTheThings - a list of useful payloads and bypass for Web Application Security and Pentest/CTF.
  :small_orange_diamond: Pentesting Tools Cheat Sheet - a quick reference high level overview for typical penetration testing engagements.
  :small_orange_diamond: SQL Injection Cheat Sheet - detailed technical information about the many different variants of the SQL Injection.
  :small_orange_diamond: Entersoft Knowledge Base - great and detailed reference about vulnerabilities.
+  :small_orange_diamond: HTML5 Security Cheatsheet - a collection of HTML5 related XSS attack vectors.
+  :small_orange_diamond: GTFOBins - list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.
+  :small_orange_diamond: Guifre Ruiz Notes - collection of security, system, network and pentest cheatsheets.

##### :black_small_square: Bounty programs @@ -563,9 +562,10 @@ Linux Security Expert - trainings, howtos, checklists, security tools an   :small_orange_diamond: Bodhi - is a playground focused on learning the exploitation of client-side web vulnerabilities.

-##### :black_small_square: Labs (ethical hacking platforms) +##### :black_small_square: Labs (ethical hacking platforms/trainings)

+  :small_orange_diamond: Offensive Security - true performance-based penetration testing training for over a decade.
  :small_orange_diamond: Hack The Box - online platform allowing you to test your penetration testing skills.
  :small_orange_diamond: Hacking-Lab - online ethical hacking, computer network and security challenge platform.
  :small_orange_diamond: pwnable.kr - non-commercial wargame site which provides various pwn challenges regarding system exploitation.