انصح بما تقرأ. الجزء الأول

مشاركة المعلومات المفيدة مع المجتمع دائما متعة. لقد طلبنا من موظفينا تقديم المشورة بشأن الموارد التي يزورونها بأنفسهم لمواكبة التطورات في عالم أمن المعلومات. كان الاختيار كبيرًا ، ويجب تقسيمه إلى قسمين. الجزء الأول.

تويتر

• NCC Group Infosec — , , / Burp.
• Gynvael Coldwind — , ctf- Dragon Sector.
• Null Byte — .
• HackSmith — SDR RF IoT, / .
• DirectoryRanger — Active Directory Windows.
• Binni Shah — , .

Telegram

• [MIS]ter & [MIS]sis Team — RedTeam. , Active Directory.
• — - -. , , .
• *e — .
• — .
• — . , .
• linkmeup — linkmeup, 2011 , . .
• Life-Hack [-]/ — ( ).
• r0 Crew (Channel) — RE, exploit dev malware analysis.

Github repository

• kabachook / k8s-security — kubernetes.
• Alexis Ahmed / hacker101 — -, , .
• Hack-with-Github / Awesome-Hacking — , . We need to go deeper.
• EdOverflow / bugbounty-cheatsheet
• infosecn1nja / AD-Attack-Defense

Blogs

• Project Zero — , : , "remote jailbreak for top iOS without user interaction", , .
• PortSwigger Blog — Burp Suite, - -. , , -.
• Firmware Security
• Active Directory Security
• Black Hills Information Security — /, , .
• Sjoerd Langkemper. Web application security
• Pentester Land — .

Youtube

• GynvaelEN — -, Gynvael Coldwind Google security team ctf- Dragon Sector, , , CTF- .
• LiveOverflow — — . BugBounty.
• STÖK — BugBounty, - HackerOne.
• IppSec — Hack the box.
• CQURE Academy — , Windows . Windows .

• ZeroNights
• Black Hat
• DEFCON
• Security Fest
• RUXCON
• OffensiveCon
• RECON
• SyScan
• TROOPERScon
• Shakacon LLC
• Infiltrate
• DEFCONConference
• CCC
• Hack In The Box Security Conference
• Microsoft BlueHat
• H2HC
• EkoParty security conference
• BugCrowd
• OwaspGlobal

• NDSS Symposium
• IEEE Symposium on Security and Privacy
• FOSDEM
• USENIX
• USENIX Enigma Conference
• International Symposium on Research in Attacks, Intrusions and Defenses (RAID)

• The Linux Foundation
• LLVM

Systematization of Knowledge (SoK)

. , :

• SoK: (State of) The Art of War: Offensive Techniques in Binary Analysis
• SoK: Eternal War in Memory
• SoK: Make JIT-Spray Great Again
• SoK: Consensus in the Age of Blockchains
• SoK: Shining Light on Shadow Stacks
• SoK: Sanitizing for Security
• SoK: Automated Software Diversity
• SoK: A Systematic Review of Software-Based Web Phishing Detection
• SoK: Applying Machine Learning in Security — A Survey
• SoK: Single Sign-On Security

, - . , , , , , , jailbreak iOS .

, .