Anjurkan apa yang harus dibaca. Bagian 1

Berbagi informasi bermanfaat dengan komunitas selalu menyenangkan. Kami meminta karyawan kami untuk memberi saran tentang sumber daya yang mereka kunjungi sendiri untuk tetap mengikuti perkembangan di dunia keamanan informasi. Seleksi itu besar, harus dibagi menjadi dua bagian. Bagian satu.

Indonesia

• NCC Group Infosec — , , / Burp.
• Gynvael Coldwind — , ctf- Dragon Sector.
• Null Byte — .
• HackSmith — SDR RF IoT, / .
• DirectoryRanger — Active Directory Windows.
• Binni Shah — , .

Telegram

• [MIS]ter & [MIS]sis Team — RedTeam. , Active Directory.
• — - -. , , .
• *e — .
• — .
• — . , .
• linkmeup — linkmeup, 2011 , . .
• Life-Hack [-]/ — ( ).
• r0 Crew (Channel) — RE, exploit dev malware analysis.

Github repository

• kabachook / k8s-security — kubernetes.
• Alexis Ahmed / hacker101 — -, , .
• Hack-with-Github / Awesome-Hacking — , . We need to go deeper.
• EdOverflow / bugbounty-cheatsheet
• infosecn1nja / AD-Attack-Defense

Blogs

• Project Zero — , : , "remote jailbreak for top iOS without user interaction", , .
• PortSwigger Blog — Burp Suite, - -. , , -.
• Firmware Security
• Active Directory Security
• Black Hills Information Security — /, , .
• Sjoerd Langkemper. Web application security
• Pentester Land — .

Youtube

• GynvaelEN — -, Gynvael Coldwind Google security team ctf- Dragon Sector, , , CTF- .
• LiveOverflow — — . BugBounty.
• STÖK — BugBounty, - HackerOne.
• IppSec — Hack the box.
• CQURE Academy — , Windows . Windows .

• ZeroNights
• Black Hat
• DEFCON
• Security Fest
• RUXCON
• OffensiveCon
• RECON
• SyScan
• TROOPERScon
• Shakacon LLC
• Infiltrate
• DEFCONConference
• CCC
• Hack In The Box Security Conference
• Microsoft BlueHat
• H2HC
• EkoParty security conference
• BugCrowd
• OwaspGlobal

• NDSS Symposium
• IEEE Symposium on Security and Privacy
• FOSDEM
• USENIX
• USENIX Enigma Conference
• International Symposium on Research in Attacks, Intrusions and Defenses (RAID)

• The Linux Foundation
• LLVM

Systematization of Knowledge (SoK)

. , :

• SoK: (State of) The Art of War: Offensive Techniques in Binary Analysis
• SoK: Eternal War in Memory
• SoK: Make JIT-Spray Great Again
• SoK: Consensus in the Age of Blockchains
• SoK: Shining Light on Shadow Stacks
• SoK: Sanitizing for Security
• SoK: Automated Software Diversity
• SoK: A Systematic Review of Software-Based Web Phishing Detection
• SoK: Applying Machine Learning in Security — A Survey
• SoK: Single Sign-On Security

, - . , , , , , , jailbreak iOS .

, .