Aconsejar qué leer. Parte 1

Compartir información útil con la comunidad siempre es un placer. Pedimos a nuestros empleados que asesoraran sobre los recursos que ellos mismos visitan para mantenerse al tanto de los desarrollos en el mundo de la seguridad de la información. La selección fue grande, tuvo que dividirse en dos partes. Parte uno.

Gorjeo

• NCC Group Infosec — , , / Burp.
• Gynvael Coldwind — , ctf- Dragon Sector.
• Null Byte — .
• HackSmith — SDR RF IoT, / .
• DirectoryRanger — Active Directory Windows.
• Binni Shah — , .

Telegram

• [MIS]ter & [MIS]sis Team — RedTeam. , Active Directory.
• — - -. , , .
• *e — .
• — .
• — . , .
• linkmeup — linkmeup, 2011 , . .
• Life-Hack [-]/ — ( ).
• r0 Crew (Channel) — RE, exploit dev malware analysis.

Github repository

• kabachook / k8s-security — kubernetes.
• Alexis Ahmed / hacker101 — -, , .
• Hack-with-Github / Awesome-Hacking — , . We need to go deeper.
• EdOverflow / bugbounty-cheatsheet
• infosecn1nja / AD-Attack-Defense

Blogs

• Project Zero — , : , "remote jailbreak for top iOS without user interaction", , .
• PortSwigger Blog — Burp Suite, - -. , , -.
• Firmware Security
• Active Directory Security
• Black Hills Information Security — /, , .
• Sjoerd Langkemper. Web application security
• Pentester Land — .

Youtube

• GynvaelEN — -, Gynvael Coldwind Google security team ctf- Dragon Sector, , , CTF- .
• LiveOverflow — — . BugBounty.
• STÖK — BugBounty, - HackerOne.
• IppSec — Hack the box.
• CQURE Academy — , Windows . Windows .

• ZeroNights
• Black Hat
• DEFCON
• Security Fest
• RUXCON
• OffensiveCon
• RECON
• SyScan
• TROOPERScon
• Shakacon LLC
• Infiltrate
• DEFCONConference
• CCC
• Hack In The Box Security Conference
• Microsoft BlueHat
• H2HC
• EkoParty security conference
• BugCrowd
• OwaspGlobal

• NDSS Symposium
• IEEE Symposium on Security and Privacy
• FOSDEM
• USENIX
• USENIX Enigma Conference
• International Symposium on Research in Attacks, Intrusions and Defenses (RAID)

• The Linux Foundation
• LLVM

Systematization of Knowledge (SoK)

. , :

• SoK: (State of) The Art of War: Offensive Techniques in Binary Analysis
• SoK: Eternal War in Memory
• SoK: Make JIT-Spray Great Again
• SoK: Consensus in the Age of Blockchains
• SoK: Shining Light on Shadow Stacks
• SoK: Sanitizing for Security
• SoK: Automated Software Diversity
• SoK: A Systematic Review of Software-Based Web Phishing Detection
• SoK: Applying Machine Learning in Security — A Survey
• SoK: Single Sign-On Security

, - . , , , , , , jailbreak iOS .

, .