links for learning

These links are collected from many TELEGRAM groups shared by other users and not belongs to this authors. This is shared only for educational purposes and author does not claim any copyright on these links.

Useful PuTTY Configuration Tips and Tricks

https://www.tecmint.com/putty-configuration-tips-and-tricks/

LaTeX: A document preparation system

https://www.latex-project.org

LaTeX Tutorials

https://youtube.com/playlist?list=PL1D4EAB31D3EBC449

How to troubleshoot routing protocols session flaps

https://routingcraft.net/how-to-troubleshoot-routing-protocols-session-flaps-part-1/

Wireshark's official Git repository.

https://gitlab.com/wireshark/wireshark

SF21VEU

https://youtube.com/playlist?list=PLz_ZpPUgiXqNNAirwvrwcrcNwCKIxBZkO

Offensive security

Escape from chrome sandbox to root

https://vul.360.net/archives/217

ZeroNights X:

"Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG".

https://a13xp0p0v.github.io/2021/08/25/lkrg-bypass.html

Malware analysis

Reverse Engineering Crypto Functions: RC4 and Salsa20

https://www.goggleheadedhacker.com/blog/post/reversing-crypto-functions

Cloud Security

1. Illogical Apps - Exploring and Exploiting Azure Logic Apps

https://www.netspi.com/blog/technical/cloud-penetration-testing/illogical-apps-exploring-exploiting-azure-logic-apps

2. AWS privilege escalation:

exploring odd features of the Trust Policy

https://rzepsky.medium.com/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861

📌 *Repositories For OSCP Prepration ::*

https://github.com/0x4D31/awesome-oscp

https://github.com/RustyShackleford221/OSCP-Prep

https://github.com/cpardue/OSCP-PWK-Notes-Public

https://github.com/gh0x0st/OSCP-A-Step-Forward

https://github.com/noraj/OSCP-Exam-Report-Template-Markdown

https://github.com/wwong99/pentest-notes/blob/master/oscp_resources/OSCP-Survival-Guide.md

https://github.com/omurugur/OSCP

https://gist.github.com/natesubra/5117959c660296e12d3ac5df491da395

https://github.com/0x4D31/awesome-oscp

https://github.com/whoisflynn/OSCP-Exam-Report-Template

https://github.com/strongcourage/oscp

https://github.com/CyDefUnicorn/OSCP-Archives

https://github.com/DriftSec/AutoRecon-OSCP

https://gist.github.com/unfo/5ddc85671dcf39f877aaf5dce105fac3

https://github.com/six2dez/OSCP-Human-Guide

https://github.com/tagnullde/OSCP

https://github.com/superhero1/OSCP-Prep

https://github.com/The-Lynx-Team/OSCP

https://github.com/chvancooten/OSCP-MarkdownReportingTemplates

https://github.com/ssstonebraker/oscp-scripts

https://github.com/CaptBoykin/oscp

https://github.com/burntmybagel/OSCP-Prep

https://github.com/alexiasa/oscp-omnibus

https://vladtoie.gitbook.io/secure-coding

1. Training:

 • ​https://application.security/free/owasp-top-10-API​

 • ​https://free.codebashing.com/​

 • ​https://github.com/ManicodeSecurity​

 • ​https://owasp.org/SecureCodingDojo/codereview101

 • ​https://wiki.owasp.org/index.php

 • ​https://portswigger.net/web-security​

 • ​https://www.shiftleft.io/learn

 • ​https://www.hacksplaining.com/exercises

2. Documentation:

 • ​https://checkmarx.gitbooks.io/js-scp/content​

 • ​https://about.gitlab.com/handbook/engineering/security/secure-coding-training.html​

 • ​https://owasp.org/www-project-secure-coding-dojo

 • ​https://github.com/nxvl/secure-coding-with-python​

 • ​https://github.com/OWASP/Go-SCP​

 • ​https://owasp.org/www-community/attacks

 • ​https://owasp.org/www-community/controls/Static_Code_Analysis​

 • ​https://code.google.com/archive/p/browsersec

 • ​https://nostarch.com/websecurity​

 • ​https://github.com/lirantal/awesome-nodejs-security​

 • ​https://owasp.org/www-pdf-archive/OWASP_Code_Review_Guide_v2.pdf​

 • Web Application Security: Exploitation and Countermeasures for Modern Web Applications

 • Web Security for Developers: Real Threats, Practical Defense [Malcolm McDonald]

 • ​https://seclab.stanford.edu/websec/​

 • ​https://www.offensive-security.com/offsec/white-box-web-application-pentesting/​

 • ​https://github.com/paragonie/awesome-appsec​

3. Tools and miscellaneous:

 • ​https://brakemanscanner.org/​

 • ​https://pyre-check.org/​

 • ​https://owasp.org/www-community/Source_Code_Analysis_Tools​

 • ​https://www.nist.gov/itl/ssd/software-quality-group/source-code-security-analyzers​

 • ​https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis

FROM INTERENET

1)Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1

https://hackerone.com/reports/1084342

2)Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)

https://hackerone.com/reports/746766

3)How To Get Started in Digital Forensics

https://medium.com/@pandeydipanshu57/how-to-get-started-in-digital-forensics-92b0ceef6460

4)Into the art of Binary Exploitation 0x000001 [Stack-Based Overflow]

https://7h3h4ckv157.medium.com/into-the-art-of-binary-exploitation-0x000001-stack-based-overflow-50fe48d58f10

5)Burp Suite and Beyond: Exploring non-HTTP protocols using MITM_RELAY

https://labs.jumpsec.com/burpsuite-and-beyond/

6)7 Ways to Secure Magento 1

https://blog.sucuri.net/2021/08/securing-magento-1.html?utm_campaign=Blog%20RSS&utm_medium=email&_hsmi=152780866&_hsenc=p2ANqtz--liWmisA3zuqvwiSzSGP2ZKe-MY7w62z4CGZJhCF_JOrdDx8XwmWMhFxJJSWEEPnlcoelY5qhA_CtbrT0imyerCm3MYw&utm_content=152780866&utm_source=hs_email

7)Newbie guide to create CTF VM

https://hacklido.com/blog/424-newbie-guide-to-create-ctf-vm

8)Automating Bug Bounty

https://is.muni.cz/th/de05t/master_thesis_final.pdf

9)Hakluke's huge list of resources for beginner hackers

https://labs.detectify.com/2021/08/24/hakluke-list-resources-for-beginner-hackers-2021/

10)Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit

https://www.theregister.com/2021/08/25/mirai_botnet_critical_vuln_realtek_radware/

11)dnsmonster

https://github.com/mosajjal/dnsmonster

Sharing internship opportunities for those looking!

Internship opportunities:                  

CISA: https://lnkd.in/e8V9_iUs

DHS: https://lnkd.in/eyiiVnS3

NSA: https://lnkd.in/ePeqf6zN

USCG: https://lnkd.in/e7B47zjm

MITRE: https://lnkd.in/e4F3Y6wD

FireEye: https://lnkd.in/eb_Sgv3i

Horizon Intelligence: https://lnkd.in/eze9cxb6

OPM Scholarship fir Service: https://lnkd.in/enE8Rheq

Presidential Management Fellows: https://lnkd.in/efT9XQY5

IBM X-Force: https://lnkd.in/e5kbg_cd

Src: Telegram 

Keep LEARNING 

#BESAFEONCYBERSAFE