Self employed

Self Employed

Safety Enterprises

Inventory Officer | IT Staff

A dedicated tech enthusiast with a passion for all things related to technology and innovation.

🌟🚀 Full Library of FREE Simulated Practice Exams to Elevate Your IT and Cybersecurity Career! 🚀🌟

📚 Here's the treasure trove:

🛡️ CompTIA Security+ SY0-601 (34 Full-Length Practice Exams): https://lnkd.in/d5tCbQX8

🛡️ CompTIA Security+ SY0-701(20 Full-Length Practice Exams): https://lnkd.in/de2Mf7YU

🌐 CompTIA Network+ N10-008 (20 Full-Length Practice Exams): https://lnkd.in/dZmxZ8dS

💻 CompTIA CySA+ CS0-003 (10 Full-Length Practice Exams): https://lnkd.in/dfcGKsPt

🖥️ CompTIA A+ Core 1 220-1101 (12 Full-Length Practice Exams): https://lnkd.in/dueMuvB6

☁️ AWS CCP CLF-C02 (20 Full-Length Practice Exams): https://lnkd.in/dHd_Nxgi

☁️ Microsoft Azure Fundamentals AZ-900 (10 Full-Length Practice Exams): https://lnkd.in/d4Zm9r-N

🔐 ISO/IEC 27005:2022 Lead Risk Manager (10 Full-Length Practice Exams): https://lnkd.in/dthfBUDa

📈 Project Management Professional PMP (4 Full-Length Practice Exams): https://certpreps.com/pmp/

🌐 CCNA 200-301 (4 Full-Length Practice Exams): https://lnkd.in/dgPtEX6F

🛡️ ISC2 CC (4 Full-Length Practice Exams): https://certpreps.com/cc/

#Cybersecurity #CompTIA #AWS #MicrosoftAzure #ProjectManagement #ITCertifications #FreeResources #CertPreps ✨🖥️🔗

Neil Bry

🚨SHARE SOMEONE REALLY NEED IT 🚨
Full Library of FREE Simulated Practice Exams to Elevate Your IT and Cybersecurity Career! 🌟

📚 Here's the treasure trove:

🛡️ CompTIA Security+ SY0-601 (34 Full-Length Practice Exams): https://lnkd.in/d5tCbQX8

🛡️ CompTIA Security+ SY0-701(20 Full-Length Practice Exams): https://lnkd.in/de2Mf7YU

🌐 CompTIA Network+ N10-008 (20 Full-Length Practice Exams): https://lnkd.in/dZmxZ8dS

💻 CompTIA CySA+ CS0-003 (10 Full-Length Practice Exams): https://lnkd.in/dfcGKsPt

🖥️ CompTIA A+ Core 1 220-1101 (12 Full-Length Practice Exams): https://lnkd.in/dueMuvB6

☁️ AWS CCP CLF-C02 (20 Full-Length Practice Exams): https://lnkd.in/dHd_Nxgi

☁️ Microsoft Azure Fundamentals AZ-900 (10 Full-Length Practice Exams): https://lnkd.in/d4Zm9r-N

🔐 ISO/IEC 27005:2022 Lead Risk Manager (10 Full-Length Practice Exams): https://lnkd.in/dthfBUDa

📈 Project Management Professional PMP (4 Full-Length Practice Exams): https://certpreps.com/pmp/

🌐 CCNA 200-301 (4 Full-Length Practice Exams): https://lnkd.in/dgPtEX6F

🛡️ ISC2 CC (4 Full-Length Practice Exams): https://certpreps.com/cc/

🚨Credit goes to Femi Reis & Mohamed Hamdi & G M Faruk Ahmed for sharing those amazing ressources

#cybersecurity #CompTIA #Azure #iso #certifiedincybersecurity #securityplus

Active Directory comes with several features that can prove especially appealing for attackers. One in particular is the LLMNR protocol. 👀 The vulnerabilities inherent to this protocol can provide a gateway for attackers, so understanding how to secure it is paramount. 

This visual walks through how #LLMNR is commonly exploited (or "poisoned") and how you can mitigate against this potentially high-impact threat.

A reminder that registration is now open for our Hacking (And Defending) Active Directory Live Training next month, where you can take a deep dive into all things AD security.

https://lnkd.in/g9d4_eQ6

#ActiveDirectory #livetraining 

LLMNR Poisoning (And How To Prevent It) 

[𝐅𝐑𝐄𝐄 𝐑𝐄𝐒𝐎𝐔𝐑𝐂𝐄𝐒 - 𝐑𝐄𝐃 𝐓𝐄𝐀𝐌]

Pentesting is primarily concerned with identifying and exploiting vulnerabilities within a specific target system, striving to uncover as many weaknesses as possible. 
This process aids in shoring up an organization's defenses by pinpointing areas of vulnerability.

On the other hand, a red team engagement shifts its focus. Instead of merely finding vulnerabilities, it aims to assess an organization's defensive capabilities by simulating real-world attacks. 
The goal is to evaluate how well the organization can detect and respond to these simulated threat actors.

You will find below a list of resources for Red Teaming.

👉𝗪𝗛𝗔𝗧 𝗜𝗦 𝗥𝗘𝗗 𝗧𝗘𝗔𝗠?
🌟Red Team definition, redteam guide by Joe Vest & James Tubberville
https://lnkd.in/eUaZcWvg

🌟Red Teaming Handbook, UK Ministry of Defense
https://lnkd.in/euUkwQRq

👉𝗪𝗛𝗔𝗧 𝗔𝗥𝗘 𝗥𝗘𝗗 𝗧𝗘𝗔𝗠 𝗘𝗫𝗘𝗥𝗖𝗜𝗦𝗘𝗦?
🌟NIST’s Definition of Red Team Exercise
https://lnkd.in/eZVzn5AW

🌟Red Team Plan by Magoo
https://lnkd.in/eFUBzxEY

🌟Anatomy of a red Exercise (3 chapters) by Cyberforce Offensive Security Team
https://lnkd.in/eWNXrVGx
https://lnkd.in/esvyKQ4Z
https://lnkd.in/ea-9Cxxr

👉𝗧𝗘𝗖𝗛𝗡𝗜𝗤𝗨𝗘𝗦 𝗔𝗡𝗗 𝗠𝗘𝗧𝗛𝗢𝗗𝗢𝗟𝗢𝗚𝗜𝗘𝗦
🌟MITRE ATT&CK Matrix for Enterprise
https://attack.mitre.org/

🌟Red Team Guides by Joe Vest & James Tubberville 
https://lnkd.in/eXPxchUk

🌟Red Team Operations Part 1 and 2 Joas A Santos
https://lnkd.in/e7m3XzE7
https://lnkd.in/es7uSQA4

🌟Red Team Notes 2.0 by dmcxblue
https://lnkd.in/ekGaQASx

👉𝗖𝗢𝗨𝗥𝗦𝗘𝗦 𝗔𝗡𝗗 𝗛𝗔𝗡𝗗𝗦 𝗢𝗡
🌟Hackersploit Red Team Series (video and guide)
https://lnkd.in/ek5naA4Q
https://lnkd.in/e4U2tW2z

🌟Responsible Red Teaming by The Taggart Institute
https://lnkd.in/eur4_nFn

🌟Red Teaming rooms on TryHackme
https://lnkd.in/e8G9eMS5
https://lnkd.in/eYa9mHmk 
https://lnkd.in/eQcnuu-m

🌟Board games by Hadess | حادث
https://lnkd.in/ee2EEyEh

👉𝗧𝗢𝗢𝗟𝗦
🌟Red Teaming Toolkit by infosecn1nja
https://lnkd.in/e8VnsYVH

🌟Red Team tools by A-poc
https://lnkd.in/evPBDZRm

🌟Red Teaming Toolkit Collection by 0xsp
https://lnkd.in/eP7jNUE4

🌟Red Team Ops Cobalt
https://lnkd.in/euMjeFEx

👉𝗕𝗢𝗡𝗨𝗦
🌟Red Team Resources by J0hnBx
https://lnkd.in/eeYCQ-Db

🌟Red Team Village talks
https://lnkd.in/eHwKj5gB

🌟A Beginner's Guide to Obfuscation by BC Security
https://lnkd.in/e92JuwPR

🚨 𝐒𝐇𝐀𝐑𝐄 - Do you know other resources? Please share them in the comment🚨

➡️ 𝐅𝐎𝐋𝐋𝐎𝐖 𝐌𝐄 on Github for more pentest tips: https://github.com/CSbyGB ⬅️

⚠️Disclaimers: 
*1 This is provided for educational and informational purpose only
*2 "Pentesting" or other similar terms refer to legal intrusion tests that aim to identify vulnerabilities and improve cybersecurity, rather than for malicious purposes.⚠️

#cybersecurity #cybersécurité #redteam


Here's how to get started on reproducing some findings from the recent disclosure of a backdoor in upstream xz/liblzma: https://lnkd.in/dAeimKnj

kali.org • 4 min read

xz-utils backdoor: how to get started | Kali Linux Blog

7 really cool PENTESTING PROJECTS for resume to help you build a strong personal brand in cybersecurity for #FREE🔥

1 for each networking layer 

Below are useful tools and a note describing the project.

Layer 1: 
-Nmap https://nmap.org/
-Rogue device detection https://lnkd.in/et_Actfn
Project: Use Nmap to investigate rogue devices. 

Layer 2: 
-Yersinia https://lnkd.in/e6C9eFSH
-Wireshark https://www.wireshark.org/
Project: Run Wireshark, capture and attack with Yersinia.

Layer 3:
-Ettercap https://lnkd.in/eW3XSDxy
Project: Use Ettercap for MITM attacks.

Layer 4:
-Dsniff https://lnkd.in/eptT256D
Project: Try TCP spoofing or password sniffing.

Layer 5:
-Sslstrip https://lnkd.in/exmfjpWP
Project: Utilize for session hijacking.

Layer 6:
-Scapy https://lnkd.in/eq-PkxsD
Project: Use Scapy to generate fake ICM and ARP packets.

Layer 7:
-BruteX https://lnkd.in/exkDCzjd
Project: Scan using Nmap and use BruteX to force open services. 

NOTE: Document your findings, preferably in a quantifiable way. This will help when writing your CV. This is a project idea to get you familiar with pentesting, this is NOT a comprehensive pentesting instructional. 

The idea is to explore, have fun, and document your findings in a legal manner.

PS:
💥I'm also hosting a Pay what you wish "How to Break into Cybersecurity By Leveraging LinkedIn" course on Sat, May 18th. If anyone would like to attend you can sign up below: 👇👇

Join webinar here👇👇
https://lnkd.in/gtnxkU7G

🟢If you cannot attend a recording of the webinar is also available for purchase.

Here is some key information that I'll be teaching in the webinar: 👇

📌 I'll teach you methods on how to gain visibility to recruiters and hiring managers, and how to become a thought leader in the industry.

📌 I'll give you step-by-step instructions on techniques I used to grow your online presence so you can get thousands of views on your LinkedIn profile.

📌 We'll also unlock secrets I used to grow my LinkedIn account from 200 followers to over 70,000 in less than 2 years.

📌 Plus, we'll learn how utilize personal branding techniques to help you stand out from the crowd.

📌 My last webinar I had over 30 people join. :) Please check out what other folks are saying about my webinar in the testimonial section of Topmate.

🟢 Get your seat to join webinar here👉🏻 https://lnkd.in/gtnxkU7G

#cybersecurity #infosecurity #infosec #leadershipbyexample #pentesting 

CyberSecurity Training FREE Courses.

🔗Introduction to Cybersecurity: https://lnkd.in/ghQY8cKA

🔗Network Security : https://lnkd.in/gSHx2tJQ

🔗Cybersecurity Essentials: https://lnkd.in/gZe6bf-t

🔗Networking Essentials: https://lnkd.in/gjipDpgG 

🔗NSE 1,2 & 3: https://lnkd.in/gsQJhn2a

🔗Vulnerability Management: https://lnkd.in/g64maMet

🔗Global IT Asset Inventory: https://lnkd.in/gXR5bD5N

🔗Risk Management by Open Learn: https://lnkd.in/gGPTDU2g

🔗Certified in Cybersecurity℠ - CC: https://lnkd.in/gW3w8Jqu

🔗CCNA Security Courses: https://lnkd.in/gfby3CR2

🔗Network Defense Essentials (NDE): https://lnkd.in/g6mRKt2t

🔗Ethical Hacking Essentials (EHE): https://lnkd.in/gRBGCud7

🔗Digital Forensics Essentials (DFE): https://lnkd.in/gPrkYcDH

🔗Dark Web, Anonymity, and Cryptocurrency: https://lnkd.in/gUrCCGdf

🔗Digital Forensics by Open Learn: https://lnkd.in/gdv8emgt

🔗AWS Cloud Certifications (Cybersecurity): https://lnkd.in/gaDGWdkm

🔗Microsoft Learn for Azure: https://lnkd.in/gDpkXiik

🔗Google Cloud Training: https://lnkd.in/get8rnkh

🔗Vulnerability Management: https://lnkd.in/gvNKJnni

🔗Software Security: https://lnkd.in/gG4P5bkn

🔗Developing Secure Software: https://lnkd.in/gQRwTzKU

🔗Port Swigger Web Hacking: https://lnkd.in/eEa-fNfu

🔗RedTeaming: https://lnkd.in/et_T2DEa

🔗Splunk: https://lnkd.in/et5bkjeY

🔗Secure Software Development: https://lnkd.in/ebGpA4wG

🔗Maryland Software Security: https://lnkd.in/e3z4zFmJ

🔗Stanford Cyber Resiliency: https://lnkd.in/eg9BM5Bv

🔗Vulnerability Management: https://lnkd.in/g64maMet

🔗Global IT Asset Inventory: https://lnkd.in/gXR5bD5N

🔗Scanning Strategies: https://lnkd.in/g6cQjQuh

🔗Reporting Strategies: https://lnkd.in/gs6Vn-DA

🔗Patch Management: https://lnkd.in/gnWVDCNp

🔗Policy Compliance: https://lnkd.in/g5SXKncJ

🔗PCI Compliance: https://lnkd.in/gZns6Xdf

🔗Endpoint Detection & Response: https://lnkd.in/gw22Y__E

🔗Vulnerability Management: https://lnkd.in/gYAFfAuT

🔗Introduction to Information Security : https://lnkd.in/ggdYxnUp

🔗Cloud Security Assessment & Response: https://lnkd.in/grrHivcW

🔗API Fundamentals: https://lnkd.in/gngVxhbu

🔗Cloud Agent: https://lnkd.in/gngVxhbu

🔗Container Security: https://lnkd.in/gYNCGY8A

🔗File Integrity Monitoring: https://lnkd.in/gYNCGY8A

🔗Palo Alto - https://lnkd.in/ebz4VZmQ

🔗AWS Cloud - https://lnkd.in/e_auX7VE

🔗Azure Cloud - https://lnkd.in/eCq_dvDq

🔗GCP Cloud - https://lnkd.in/eDNWnVsD

🔗SANS Aces - https://lnkd.in/eNCPrtdd

🔗ISC(2) Certified in Cyber - https://lnkd.in/e6jB_6af

🔗EC-Council - https://lnkd.in/ewiVUkYt

🔗Cyber Security - https://lnkd.in/eueCSF6A

🔗Cisco Cyber Induction - https://lnkd.in/e8C3jacc

🔗Cisco Cyber Essentials - https://lnkd.in/eTQNsbyF

🔗Cisco Network Essentials - https://lnkd.in/eMXXFBPN

🔗Palo Alto - https://lnkd.in/ebz4VZmQ

Share, don't be selfish, don't think only of yourself. Share them, but you can't sell them/use them as part of any paid training.

𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝𝐢𝐧𝐠 𝐈𝐃𝐒 𝐚𝐧𝐝 𝐈𝐏𝐒: 𝐄𝐧𝐡𝐚𝐧𝐜𝐢𝐧𝐠 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲



In today's digital environment, Protecting your network from cyberattacks is essential. That's where Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) come into play.


Before learning about IDS and IPS. The answer to "what is intrusion" is typically an attacker gaining unauthorized access to a device, network, or system.



𝐈𝐧𝐭𝐫𝐮𝐬𝐢𝐨𝐧 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐒𝐲𝐬𝐭𝐞𝐦 (𝐈𝐃𝐒):
-An IDS is an application that monitors network traffic and searches for known threats and suspicious or malicious activity. 
-The IDS sends alerts to IT and security teams when it detects any security risks and threats.
-The IDS is a listen-only device. 
-The IDS monitors traffic and reports results to an administrator. It cannot automatically take action to prevent a detected exploit from taking over the system.


𝐓𝐡𝐞𝐫𝐞 𝐚𝐫𝐞 𝐭𝐰𝐨 𝐭𝐲𝐩𝐞𝐬 𝐨𝐟 𝐈𝐃𝐒:
𝟏) 𝐍𝐞𝐭𝐰𝐨𝐫𝐤-𝐛𝐚𝐬𝐞𝐝 𝐈𝐃𝐒 (𝐍𝐈𝐃𝐒): Monitors network traffic in real-time and identifies suspicious patterns.
𝟐) 𝐇𝐨𝐬𝐭-𝐛𝐚𝐬𝐞𝐝 𝐈𝐃𝐒 (𝐇𝐈𝐃𝐒): Monitors activities on individual computers or hosts for suspicious behavior.




𝐈𝐧𝐭𝐫𝐮𝐬𝐢𝐨𝐧 𝐏𝐫𝐞𝐯𝐞𝐧𝐭𝐢𝐨𝐧 𝐒𝐲𝐬𝐭𝐞𝐦 (𝐈𝐏𝐒):
-An essential part of IPS is the network security technology that constantly monitors network traffic to identify threats. 
-The general meaning of IPS, IPS technology is also an intrusion detection prevention system (IDPS).
-IPS solutions are also very effective at detecting and preventing vulnerability exploits. 



𝐁𝐞𝐧𝐞𝐟𝐢𝐭𝐬 𝐨𝐟 𝐈𝐃𝐒 𝐚𝐧𝐝 𝐈𝐏𝐒:
-Enhanced Security Posture
-Real-time Threat Response
-Regulatory Compliance



𝐊𝐞𝐲 𝐃𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐜𝐞𝐬:
-𝐅𝐮𝐧𝐜𝐭𝐢𝐨𝐧: IDS detects and reports intrusions, while IPS detects, prevents, and responds to intrusions in real-time.
-𝐃𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭: IDS can be deployed passively (out-of-band) to monitor traffic without affecting it, while IPS is typically deployed inline (in-band) to actively block or prevent threats.
-𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞: IDS only generates alerts, whereas IPS can take automated actions to block or prevent detected threats.
-𝐅𝐨𝐜𝐮𝐬: IDS focuses on detection, while IPS focuses on prevention.




In summary, while both IDS and IPS serve to enhance network security, IPS offers a more proactive approach by actively preventing intrusions in real-time, whereas IDS primarily focuses on detection and reporting.



Follow me here - Shiva A  



#Cybersecurity #IDS #IPS #ThreatDetection #Networking #NetworkSecurity 

Today's Training Tuesday Highlight is Security Blue Team/Blue Team Labs Online!

They have several FREE courses that come with certificates of completion including:

✅ Introduction to Digital Forensics
✅ Introduction to Network Analysis
✅ Introduction to Threat Hunting
✅ Introduction to Dark Web Operations
✅ Introduction to OSINT
✅ Introduction to Vulnerability Management
✅ Mental Health in Cybersecurity
✅ Cybersecurity Interview Preparation
and more!

If you complete the first 6 hands-on courses listed above, you also get a Blue Team Junior Analyst Pathway Certificate.

Blue Team Labs Online (provided by Security Blue Team) allows you to practice your skills with free and paid Investigations and free Challenges that include:

- Digital Forensics
- Incident Response
- Threat Intelligence
- Reverse Engineering
- Security Operations. 

Security Blue Team also has hands-on certifications that include training such as the Blue Team Level 1 that covers:

☑ Digital Forensics
☑ Incident Response
☑ Security Information and Event Monitoring (SIEM)
☑ Threat Intelligence
☑ Phishing Analysis
☑ Security Fundamentals

Free Courses & Paid Certifications: https://lnkd.in/e_r9uEKe

Blue Team Labs Online Investigations & Challenges: https://lnkd.in/d849ZVX6

Check out their YouTube Channel for walkthroughs of retired labs: https://lnkd.in/gmD4fH38

#DFIR #IncidentResponse #OSINT #Cybersecurity #DFIRDivaTTH

[𝐅𝐑𝐄𝐄 𝐑𝐄𝐒𝐎𝐔𝐑𝐂𝐄𝐒 - 𝐃𝐎𝐂𝐊𝐄𝐑 𝐏𝐄𝐍𝐓𝐄𝐒𝐓 - 𝐔𝐏𝐃𝐀𝐓𝐄𝐃]

Docker is a platform that utilizes container technology to automate the deployment of applications, ensuring consistent performance across diverse environments, facilitating portability, efficiency, version control, and orchestration for scalable and isolated application deployment.
Docker can have security issues, including vulnerabilities in container images, misconfigurations, and potential risks associated with shared kernel resources.

👉 𝗪𝗛𝗔𝗧 𝗜𝗦 𝗗𝗢𝗖𝗞𝗘𝗥?
🌟 Docker Overview on Docker docs
https://lnkd.in/eRkNTVNu

🌟 What is Docker and How it works on Simplilearn
https://lnkd.in/ep8T7yUM

🌟Linux Containers - Basic concepts by Lucian Carata
https://lnkd.in/eJDs9khW

👉 𝗗𝗢𝗖𝗞𝗘𝗥 𝗣𝗘𝗡𝗧𝗘𝗦𝗧 & 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬
🌟My pentips about Docker on C.S by G.B
https://lnkd.in/eV_fPjsP

🌟 2 amazing blog posts by Dana Epp (I suggest you subscribe to his newsletter)
⭐Defeating a dockerized API to get access to source code
https://lnkd.in/eYGpm3Pe
⭐Finding API secrets in hidden layers within Docker containers
https://lnkd.in/eFPJrejZ

🌟 Docker vulnerabilities on CVE Details
https://lnkd.in/eFjysgbX

🌟Privilege Escalation via Docker by Chris Foster
https://lnkd.in/e5cJtJcx

🌟The dirty COW kernel exploit
https://lnkd.in/ew-5vuEf

🌟 Breaking out of Docker via runC - CVE-2019-5736 by Yuval Avrahami
https://lnkd.in/ePhSRRmW

🌟Understanding Docker container escapes by Dominik Czarnota on trailofbits
https://lnkd.in/ee-9HJX6

🌟Awesome Docker Security by myugan
https://lnkd.in/esVcibK8

🌟Docker Security Cheat Sheet by OWASP® Foundation
https://lnkd.in/eGDBhgai

🌟Docker Security Course - Hackersploit
https://lnkd.in/ey-dVnh4

🌟Read Writeups
⭐Hack The Box UltraTech
https://lnkd.in/eRW8Xtyk

⭐Hack the box Toolbox
https://lnkd.in/e4R6BeRz

⭐Hack the box Shoppy
https://lnkd.in/e3iekCMJ

⭐Hack the box Mentor
https://lnkd.in/enXAHbKh

👉 𝗣𝗥𝗔𝗖𝗧𝗜𝗖𝗘
🌟TryHackMe 
⭐UltraTech Box
https://lnkd.in/eGHg-KZn

⭐Writeup UltraTech
https://lnkd.in/eRW8Xtyk

🌟Root-Me
⭐Docker - I am groot
https://lnkd.in/eyBwWC7J

⭐Docker - Talk through me
https://lnkd.in/eTYEtFKd

⭐Supply chain attack - Docker
https://lnkd.in/ezH7237x

⭐Docker Layers
https://lnkd.in/eZs5JQ7S

⭐Docker - Sys-Admin’s Docker
https://lnkd.in/enDBbwa3

🌟Damn Vulnerable Docker Container by Julian Scionti
https://lnkd.in/eyj8uyux

🌟Docker Host Attacks on attackdefense
https://lnkd.in/e78jYrz2

🚨🚨 𝐒𝐇𝐀𝐑𝐄 - Do you know other resources? Please share them in the comment🚨🚨

➡️ 𝐅𝐎𝐋𝐋𝐎𝐖 𝐌𝐄 on Github for more pentest tips: https://github.com/CSbyGB ⬅️

⚠️Disclaimers: 
*1 This is provided for educational and informational purpose only
*2 "Pentesting" or other similar terms refer to legal intrusion tests that aim to identify vulnerabilities and improve cybersecurity, rather than for malicious purposes.⚠️

#cybersecurity #cybersécurité #pentest


[𝐅𝐑𝐄𝐄 𝐑𝐄𝐒𝐎𝐔𝐑𝐂𝐄𝐒 - 𝐒𝐄𝐂𝐔𝐑𝐄 𝐂𝐎𝐃𝐄 𝐑𝐄𝐕𝐈𝐄𝐖]

For any pentest methodologies, it is always useful to know about code.
Furthermore, for white box pentest, you will need to do secure code review and be able to find vulnerabilities by reading the code.
Want to know more about this subject?
This post is for you.

👉 𝗪𝗵𝗮𝘁 𝗶𝘀 𝘀𝗲𝗰𝘂𝗿𝗲 𝗰𝗼𝗱𝗲 𝗿𝗲𝘃𝗶𝗲𝘄?
🌟 How to Identify Vulnerabilities in code – Manual Code Review on Hackingloops
https://lnkd.in/eGdQrB_Q

🌟 Security Code Review 101 by Paul Ionescu:
https://lnkd.in/en6gKsfJ

🌟 OWASP® Foundation Secure Coding Practice
https://lnkd.in/eEAA7Jcf

👉 𝗜𝗻𝘁𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗲 𝗰𝗼𝗱𝗲 𝗿𝗲𝘃𝗶𝗲𝘄
🌟 Farah Hawa’s post about the subject:
https://lnkd.in/eE_zZqdx

🌟 Introduction to Secure Code Review on PentesterLab 
https://lnkd.in/gXjm_MbJ

🌟 Freddy Macho’s Code review checklist
https://lnkd.in/e2vcqR4M

🌟 Check out the dedicated section on Secure Code Review on my pentips C.S by G.B
https://lnkd.in/ehp4M9rp

👉 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲 𝗮𝗻𝗱 𝘀𝗵𝗮𝗿𝗽𝗲𝗻 𝘆𝗼𝘂𝗿 𝗿𝗲𝘃𝗶𝗲𝘄𝗲𝗿 𝘀𝗸𝗶𝗹𝗹𝘀
🌟 Security training platform for devs Hacksplaining:
https://lnkd.in/gqrXr544

🌟 Join the We Hack Purple Community to talk about secure code practice and more
https://lnkd.in/e2FCKTx5

👉 𝗧𝗼𝗼𝗹𝘀
🌟 Code Review and Static Code Analysis on We Hack Purple
https://lnkd.in/er3qnSd7

🌟 Code Review tools on HackTricks
https://lnkd.in/e93pWfni

🌟 Awesome DevSecOps by TaptuIT
https://lnkd.in/eWSpZWN6

🚨🚨 𝐒𝐇𝐀𝐑𝐄 - Do you know other resources? Please share them in the comment🚨🚨

➡️ 𝐅𝐎𝐋𝐋𝐎𝐖 𝐌𝐄 on github for more pentest tips: https://github.com/CSbyGB ⬅️

⚠️Disclaimers: 
*1 This is provided for educational and informational purpose only
*2 Please note that the term "pentesting" (or "hacking," "bug bounty," "red teaming," etc.) is used in a legal context as a type of intrusion test to identify vulnerabilities and improve security measures. It is not intended for malicious purposes but rather for the greater good of enhancing cybersecurity.⚠️

#cybersecurity #cybersécurité #pentest

🚨 You will need to understand networking (how computers talk to each other) if you're going to work in #cybersecurity. It can be intimidating....so how??...

📃 I've put together a "Cheat Sheet" with 60+ resources across 12 dimensions, including NETWORKING FUNDAMENTALS.

Take full advantage of these Networking Resources, but if you want all 60+ resources, Click Here➡️ https://lnkd.in/e7nxDqu7

📽️ The best part is I also made a short video explaining each of these resources and how and why to use them, so you don't just click on a resource and say "now what??".  

Check the video for the networking resources here: https://lnkd.in/eekc4Dce
-------------

Grab these networking resources today and start learning for free!

💥 Professor Messer CompTIA Network+ N10-007 Training: Course 

You don't need network+ certification, but the knowledge is valuable. Here's an entire course for free:

https://lnkd.in/ewqDPMvp

💥 Security Blue Team Introduction to Network Analysis:

Learn Wireshark and TCPDump for recording network traffic, and analyzing packet captures. Walk through a simulation of a network compromise!

https://www.securityblue.
team/courses/network-analysis-training-beginner


💥 Packet Tracer Network Simulation Tool 

Practice building simple and complex networks and visualize how data moves.

https://lnkd.in/eUjYF8Gz

💥 Malicious network packet captures and exercises to practice:

Brad at malware_traffic does an awesome job of curating malicious pcaps and having challenges associated with them to test yourself. Its like cyber Wordle. 

https://lnkd.in/eqfuwqJ3

😈 Because handling and working with malware can be dangerous, I’ve made a quick video about this malicious network packet capture you should watch before using this resource. 

You can watch it here:  https://lnkd.in/ecwXnmHz

💥 Wireshark (Application for looking at network packet captures) 

A great way to analyze, review, and 'see' network traffic. Helps reinforce learning the stack, grasping IP network concepts, and its a tool every practitioner knows about.

https://www.wireshark.org/
-----------------------

Once you get the hang of it other #cyber education will make more sense. 💪 

What 'learning networking' resource do you recommend to others?
Would love to hear in the comments below ⬇️
-------------------------

Repost ♻️ to share these resources and learning opportunities with your network.

If you like resources like this and want more, its easy! Follow 👉🏼 Gerald Auger, Ph.D.
--------------------------

#cyber #networking #it #freeresources #labs #practicalskills

Certified Red Team Professional (CRTP) Notes

Subscribe Our YouTube Channel:
https://lnkd.in/dAFg-Zgn

Join Our WhatsApp Group:https://lnkd.in/gS79mu28

#CyberSecurity #cyberdefense #offensivesecurity #bugbounty #bugbountytips #bughunting #ethicalhacking #ethicalhacker #penetrationtesting #penetrationtester 



CRTP Notes

We always talk about, one of the most important stages of Penetration Testing is the Recon stage.😈 So how about doing it like a Boss❗️❓👻 Today, I have a great resource suggestion on this topic❗️🌝 Don't forget to add it to your bookmarks.🤞🏻🌸

Thank you to the owner of this useful resource.🌟🙌🏻 I share the link of the related resource in the comment.⬇️

Have a nice day❗️😌

#cybersecurity #infosec #pentest #pentesting #pentester #recon #bugbounty #bughunting #bughunter #likeaboss #penetrationtesting #penetrationtester #osint #osintforgood #hacking #happyhunting #ethicalhacking #resourcesharing #guide #learningeveryday

Recon Like a Boss

💥[Gamified Cybersecurity Trainings]💥👇
💥13 fun #Cybersecurity GAMES to strengthen your cybersecurity skills today!👇👇

💥Jumpstart your career; w/ Gamified training!💥

👇👇👇👇

1. World of HAIKU 
 https://lnkd.in/gwA7kjMa

2. Cybersecurity Lab
https://lnkd.in/gchPJdMa

3.Cyber Awareness Challenge 2022
https://lnkd.in/g9_ZjA3Q

4. Keep Tradition Secure
https://lnkd.in/g9BwtmE9

5.Game of Threats
https://lnkd.in/gfX7PwNA

6. Defend the Crown
https://lnkd.in/gH9_GzcQ

7. Network Collapse
https://lnkd.in/gH9_GzcQ

8. Hotel Hijinks
https://lnkd.in/gH9_GzcQ

9. The Missing Link: A Cyber-Security Mystery
https://lnkd.in/gSxx9je5

10. Cybersecurity Circus
https://lnkd.in/gu7a8asZ

11. Fight Back
https://lnkd.in/giSF4f7Q

12. The Weakest Link
https://lnkd.in/gy-x___c

Does anyone have any suggestions on Cybersecurity games? If so, would love to hear about them. :) :) 

 📌3 more ways I can help you in your journey👇

1️⃣ Join my pay as you wish "How to Break Into Cyber: By Leveraging LinkedIn" Webinar here 
https://lnkd.in/gtnxkU7G

2️⃣ Come Join 50,000 folks in my "Get a job in Cyber" News letter for actionable tip on career and personal growth https://lnkd.in/g9TdqxKk

3️⃣ Join my free networking challenge here https://lnkd.in/gkrcCxMc

💥I love playing video games in spare time. Is there any Super Mario Brother Fans out there? Curious? 

#informationsecurity #infosec #leadershipbyexample

📍 20 FREE Tools For Cybersecurity Enthusiasts.




1. Kali Linux - Operating System
2. Wireshark - Network Protocol Analyzer 
3. Nmap - Port Scan
4. Burp Suite -  Web Hacking 
5. Gophish - Open Source Phishing Toolkit 
6. Aircrack-ng - Wi-Fi Security 
7. Have I Been Pwned - Email Security 
8. Metasploit Framework - PenTesting Tool
9. Nikto - Vulnerability Scanner 
10. HackTheBox - Training
11. PfSense - Firewall/Router 
12. Cyber Chef - Data Modification 
13. Snort - Intrusion Detection System 
14. Ghidra - Debugging 
15. Deshashed - Email Security 
16. OpenVAS - Vulnerability Scanner
17. OSSEC - Intrusion Detection and Prevention 
18. Sqlmap - Detect and Exploit SQL Injection 
19. REMnux - Reverse Engineering and Malware Analysis 
20. Zed Attack Proxy - Web App Security Scanner

🚀 Exciting Announcement from the Center for Cyber Security Studies and Research! 🚀

We are thrilled to reveal the lineup of distinguished speakers for our upcoming International Conference on AI in Cybersecurity. This groundbreaking event will bring together leading minds from around the globe to discuss the future of artificial intelligence in enhancing cyber defenses.

🌟 Speaker Highlights:
Mr. Hilol Biswas, Cyber Security Expert, WAPCOS Limited , Government of India.

Join us to gain invaluable insights and network with peers in the field. Whether you're a cybersecurity professional, an academic, or simply an enthusiast, this conference promises to be a catalyst for innovation and knowledge sharing.

📅 Date: 11 May 2024
📍 Location: Online
🔗 Register Now: https://lnkd.in/gjuuA9SF

Let's explore the transformative potential of AI in cybersecurity together. See you there!

#AIinCybersecurity #CyberSecurityConference #InternationalConference #CyberSecurity #ArtificialIntelligence

Try Hack Me CheatSheet 

Github Link For Full HD Images:
https://lnkd.in/daPFVTtn

Subscribe Our YouTube Channel:
https://lnkd.in/dAFg-Zgn

Join Our WhatsAppGroup: https://lnkd.in/dTmUfrPP

#CyberSecurity #cyberdefense #offensivesecurity #bugbounty #bugbountytips #bughunting #ethicalhacking #ethicalhacker #penetrationtesting #penetrationtester 

📣 TOP 100 CYBERSECURITY INTERVIEW QUESTIONS 📣

I am sharing an excellent resource with my friends who are interested in working in the field of cybersecurity or with my friends who are already hiring in this field.

You should definitely review it. 😊 

#cybersecurity #informationsecurity #infosec #ethicalhacking #personalbranding #careers #securitycareers #CareerRoadMap #interview #cybersecurityjob

Taplio

Neil Bry's Linkedin Analytics

Neil Bry

Neil Bry's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Neil Bry's Linkedin Analytics

Neil Bry

Neil Bry's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Neil Bry's Linkedin Analytics

Neil Bry's Best Posts (last 30 days)