Ratschläge, was zu lesen ist. Teil 1

Es ist immer eine Freude, nützliche Informationen mit der Community zu teilen. Wir haben unsere Mitarbeiter gebeten, die Ressourcen, die sie selbst besuchen, zu beraten, um über die Entwicklungen in der Welt der Informationssicherheit auf dem Laufenden zu bleiben. Die Auswahl war groß, musste in zwei Teile geteilt werden. Teil eins.

Twitter

• NCC Group Infosec — , , / Burp.
• Gynvael Coldwind — , ctf- Dragon Sector.
• Null Byte — .
• HackSmith — SDR RF IoT, / .
• DirectoryRanger — Active Directory Windows.
• Binni Shah — , .

Telegram

• [MIS]ter & [MIS]sis Team — RedTeam. , Active Directory.
• — - -. , , .
• *e — .
• — .
• — . , .
• linkmeup — linkmeup, 2011 , . .
• Life-Hack [-]/ — ( ).
• r0 Crew (Channel) — RE, exploit dev malware analysis.

Github repository

• kabachook / k8s-security — kubernetes.
• Alexis Ahmed / hacker101 — -, , .
• Hack-with-Github / Awesome-Hacking — , . We need to go deeper.
• EdOverflow / bugbounty-cheatsheet
• infosecn1nja / AD-Attack-Defense

Blogs

• Project Zero — , : , "remote jailbreak for top iOS without user interaction", , .
• PortSwigger Blog — Burp Suite, - -. , , -.
• Firmware Security
• Active Directory Security
• Black Hills Information Security — /, , .
• Sjoerd Langkemper. Web application security
• Pentester Land — .

Youtube

• GynvaelEN — -, Gynvael Coldwind Google security team ctf- Dragon Sector, , , CTF- .
• LiveOverflow — — . BugBounty.
• STÖK — BugBounty, - HackerOne.
• IppSec — Hack the box.
• CQURE Academy — , Windows . Windows .

• ZeroNights
• Black Hat
• DEFCON
• Security Fest
• RUXCON
• OffensiveCon
• RECON
• SyScan
• TROOPERScon
• Shakacon LLC
• Infiltrate
• DEFCONConference
• CCC
• Hack In The Box Security Conference
• Microsoft BlueHat
• H2HC
• EkoParty security conference
• BugCrowd
• OwaspGlobal

• NDSS Symposium
• IEEE Symposium on Security and Privacy
• FOSDEM
• USENIX
• USENIX Enigma Conference
• International Symposium on Research in Attacks, Intrusions and Defenses (RAID)

• The Linux Foundation
• LLVM

Systematization of Knowledge (SoK)

. , :

• SoK: (State of) The Art of War: Offensive Techniques in Binary Analysis
• SoK: Eternal War in Memory
• SoK: Make JIT-Spray Great Again
• SoK: Consensus in the Age of Blockchains
• SoK: Shining Light on Shadow Stacks
• SoK: Sanitizing for Security
• SoK: Automated Software Diversity
• SoK: A Systematic Review of Software-Based Web Phishing Detection
• SoK: Applying Machine Learning in Security — A Survey
• SoK: Single Sign-On Security

, - . , , , , , , jailbreak iOS .

, .