{"id":4880,"date":"2018-04-13T18:44:22","date_gmt":"2018-04-13T18:44:22","guid":{"rendered":"http:\/\/devsec.smham2.org\/?page_id=4880"},"modified":"2020-11-23T21:15:46","modified_gmt":"2020-11-23T21:15:46","slug":"some-valuable-links-for-those-starting-in-information-security","status":"publish","type":"page","link":"https:\/\/devsec.smham2.org\/?page_id=4880","title":{"rendered":"Some valuable links for those starting in Information Security"},"content":{"rendered":"<p>These are some sites that I have bookmarked and refer to fairly regularly.\u00a0 I also have RSS feed links for a number of sites, so I see the new articles as they get posted.<br \/>\nIf you are interested in the RSS feed list, a opml is available on my Github site.<\/p>\n<h5>Blog Sites<\/h5>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Security Blogs&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>SANS ISC: <a href=\"https:\/\/isc.sans.edu\">https:\/\/isc.sans.edu<\/a><\/li>\n<li>Dark Reading: <a href=\"http:\/\/www.darkreading.com\/\">http:\/\/www.darkreading.com\/<\/a><\/li>\n<li>Brian Krebs Blog: <a href=\"http:\/\/krebsonsecurity.com\/\">http:\/\/krebsonsecurity.com\/<\/a><\/li>\n<li>Tony Perez: <a href=\"https:\/\/perezbox.com\/category\/security\/\">https:\/\/perezbox.com\/category\/security\/<\/a> (He is one of the founders of the Sucuri and his post are website security specific \u2013 Drupal, WordPress \u2013 but there are some good general topics included as well)<\/li>\n<li>Sucuri Blog: <a href=\"https:\/\/blog.sucuri.net\/\">https:\/\/blog.sucuri.net\/<\/a> (Same as above website security specific, but sometimes when they discover vulnerabilities or bugs they explain how a site got infected and what they did to find it)<\/li>\n<li>Holistic InfoSec: <a href=\"https:\/\/holisticinfosec.blogspot.com\/\">https:\/\/holisticinfosec.blogspot.com\/<\/a><\/li>\n<li>Security Ledger: <a href=\"https:\/\/securityledger.com\/\">https:\/\/securityledger.com\/<\/a><\/li>\n<li>Google Project Zero: <a href=\"https:\/\/googleprojectzero.blogspot.com\/\">https:\/\/googleprojectzero.blogspot.com\/<\/a><\/li>\n<li>I Am The Cavalry: <a href=\"https:\/\/www.iamthecavalry.org\/\">https:\/\/www.iamthecavalry.org\/<\/a> (Focuses on issues relating to devices -Medical, Home, Automotive and public infrastructure- and how it affects us)<\/li>\n<li>Security | DMA | Hacking: <a href=\"https:\/\/blog.frizk.net\/?m=0\">https:\/\/blog.frizk.net\/?m=0<\/a><\/li>\n<li>Adam Shostack &amp; friends: <a href=\"https:\/\/adam.shostack.org\/blog\/\">https:\/\/adam.shostack.org\/blog\/<\/a> (Was Emergent Chaos: http:\/\/emergentchaos.com\/ (They have an <a href=\"https:\/\/adam.shostack.org\/blog\/2016\/05\/security-lessons-from-c-3po\/\">interesting post<\/a> about C3PO in Star Wars and how it relates to INFOSEC)<\/li>\n<\/ul>\n<p><\/div><\/div>\n<h5>Training and Certification<\/h5>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Training &amp; Certifications&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>FairclothSec Training: <a href=\"http:\/\/training.fairclothsec.com\/www\/index.php\">http:\/\/training.fairclothsec.com\/www\/index.php<\/a><\/li>\n<li>Open Security Training:\u00a0<a href=\"http:\/\/opensecuritytraining.info\/Training.html\">http:\/\/opensecuritytraining.info\/Training.html<\/a> (It\u2019s free information security training on different topics)<\/li>\n<li>Security Compass: <a href=\"https:\/\/www.securitycompass.com\/training\/\">https:\/\/www.securitycompass.com\/training\/<\/a><\/li>\n<li>Become (and stay) a CISSP on a Budget (blog post): <a href=\"http:\/\/avitria.com\/thriftycissp.html\">http:\/\/avitria.com\/thriftycissp.html<\/a><\/li>\n<li>Computer Security Student: <a href=\"http:\/\/www.computersecuritystudent.com\/HOME\/index.html\">http:\/\/www.computersecuritystudent.com\/HOME\/index.html<\/a><\/li>\n<li>SANS: <a href=\"https:\/\/www.sans.org\/\">https:\/\/www.sans.org\/<\/a><\/li>\n<li>ISACA: <a href=\"https:\/\/www.isaca.org\">https:\/\/www.isaca.org<\/a><\/li>\n<li>(ISC)2: <a href=\"https:\/\/www.isc2.org\">https:\/\/www.isc2.org<\/a><\/li>\n<li>Cybery: <a href=\"https:\/\/www.cybrary.it\/\">https:\/\/www.cybrary.it\/<\/a><\/li>\n<\/ul>\n<p><\/div><\/div>\n<h5>Valuable Tools and Resources for INFOSEC investigations<\/h5>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;WHOIS&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>Africa Internet Number Registry (AFRNIC): <a href=\"http:\/\/www.afrinic.net\/services\/whois-query\">http:\/\/www.afrinic.net\/services\/whois-query<\/a><\/li>\n<li>American Registry for Internet Numbers (ARIN): <a href=\"https:\/\/www.arin.net\/\">https:\/\/www.arin.net\/<\/a><\/li>\n<li>Asia Pacific (APNIC): <a href=\"https:\/\/www.apnic.net\/apnic-info\/whois_search\">https:\/\/www.apnic.net\/apnic-info\/whois_search<\/a><\/li>\n<li>Latin America and Caribbean (LACNIC): <a href=\"http:\/\/lacnic.net\/cgi-bin\/lacnic\/whois?lg=EN\">http:\/\/lacnic.net\/cgi-bin\/lacnic\/whois?lg=EN<\/a><\/li>\n<li>Europe (RIPE): <a href=\"https:\/\/apps.db.ripe.net\/search\/query.html\">https:\/\/apps.db.ripe.net\/search\/query.html<\/a><\/li>\n<li>North America (ARIN) IP Search: <a href=\"https:\/\/whois.arin.net\/ui\/\">https:\/\/whois.arin.net\/ui\/<\/a><\/li>\n<li>ICANN WHOIS Search: <a href=\"https:\/\/whois.icann.org\/en\">https:\/\/whois.icann.org\/en<\/a><\/li>\n<\/ul>\n<p><\/div><\/div>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Internet Tools&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>ip2geolocation: <a href=\"http:\/\/ip2geolocation.com\/?lang=en\">http:\/\/ip2geolocation.com\/?lang=en<\/a><\/li>\n<li>IP Location Finder (geolocation): <a href=\"https:\/\/www.iplocation.net\/\">https:\/\/www.iplocation.net\/<\/a><\/li>\n<li>MX Toolbox (DNS, MX Record Tools): <a href=\"https:\/\/mxtoolbox.com\/\">https:\/\/mxtoolbox.com\/<\/a><\/li>\n<li>WatchGuard Technologies \u2013 Reputation Authority: <a href=\"http:\/\/www.borderware.com\/index.php\">http:\/\/www.borderware.com\/index.php<\/a><\/li>\n<li>Shodan: <a href=\"https:\/\/www.shodan.io\/\">https:\/\/www.shodan.io\/<\/a><\/li>\n<li>Packet Total (Think VirusTotal for network packets): <a href=\"https:\/\/www.packettotal.com\/\">https:\/\/www.packettotal.com\/<\/a><\/li>\n<li>Down For Everyone of Just Me (Check if a website is up): <a href=\"http:\/\/downforeveryoneorjustme.com\/\">http:\/\/downforeveryoneorjustme.com\/<\/a><\/li>\n<li>URL Scan (Why go to a suspect site using you browser): <a href=\"https:\/\/urlscan.io\/\">https:\/\/urlscan.io\/<\/a><\/li>\n<li>GetLinkInfo (Expand shorten URL\u2019s to find the redirection): <a href=\"http:\/\/www.getlinkinfo.com\/\">http:\/\/www.getlinkinfo.com\/<\/a><\/li>\n<li><a href=\"http:\/\/devsec.smham2.org\/?page_id=2303\">RegEx Validator<\/a><\/li>\n<li>List of User Agent Strings (great for wget and curl): <a href=\"http:\/\/www.useragentstring.com\/pages\/useragentstring.php\">http:\/\/www.useragentstring.com\/pages\/useragentstring.php<\/a><\/li>\n<li>Have I been pwned? (Check if your email has been compromised in a data breach): <a href=\"https:\/\/haveibeenpwned.com\/\">https:\/\/haveibeenpwned.com\/<\/a><\/li>\n<li>VirusTotal: <a href=\"https:\/\/virustotal.com\/\">https:\/\/virustotal.com\/<\/a><\/li>\n<li>CyberChef: <a href=\"https:\/\/gchq.github.io\/CyberChef\/#\">https:\/\/gchq.github.io\/CyberChef\/#<\/a><\/li>\n<li><a href=\"http:\/\/devsec.smham2.org\/?page_id=2287\">Clean URL\/email links<\/a> (Make a link inert before emailing or posting): Under Utilities<\/li>\n<li>DomainTools: <a href=\"https:\/\/whois.domaintools.com\/\">https:\/\/whois.domaintools.com\/<\/a><\/li>\n<li>Malware Domain List (MDL): <a href=\"https:\/\/www.malwaredomainlist.com\/\">https:\/\/www.malwaredomainlist.com\/<\/a><\/li>\n<li>DNSDB (You need a login account): <a href=\"https:\/\/www.dnsdb.info\/\">https:\/\/www.dnsdb.info\/<\/a><\/li>\n<li>AlienVault OTX (Open Threat Exchange): <a href=\"https:\/\/otx.alienvault.com\/\">https:\/\/otx.alienvault.com\/<\/a><\/li>\n<li>IBM X-Force Exchange: <a href=\"https:\/\/exchange.xforce.ibmcloud.com\/\">https:\/\/exchange.xforce.ibmcloud.com\/<\/a><\/li>\n<li>ViewDNS: <a href=\"http:\/\/viewdns.info\/\">http:\/\/viewdns.info\/<\/a><\/li>\n<\/ul>\n<p><\/div><\/div>\n<h5>Sites if you are interested in Penetration Testing<\/h5>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Pentesting Sites &amp; Tools&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>Building a Home Lab to Become a Malware Hunter: <a href=\"https:\/\/www.alienvault.com\/blogs\/security-essentials\/building-a-home-lab-to-become-a-malware-hunter-a-beginners-guide\">https:\/\/www.alienvault.com\/blogs\/security-essentials\/building-a-home-lab-to-become-a-malware-hunter-a-beginners-guide<\/a><\/li>\n<li>Free Virtual Machines from IE8 to Microsoft Edge: <a href=\"https:\/\/developer.microsoft.com\/en-us\/microsoft-edge\/tools\/vms\/\">https:\/\/developer.microsoft.com\/en-us\/microsoft-edge\/tools\/vms\/<\/a><\/li>\n<li>Penetration Testing Tools Cheat Sheet: <a href=\"https:\/\/highon.coffee\/blog\/penetration-testing-tools-cheat-sheet\/?imm_mid=0ecebf&amp;cmp=em-webops-na-na-newsltr_security_20170131\">https:\/\/highon.coffee\/blog\/penetration-testing-tools-cheat-sheet\/?imm_mid=0ecebf&amp;cmp=em-webops-na-na-newsltr_security_20170131<\/a><\/li>\n<li>Listing of default passwords: <a href=\"http:\/\/www.defaultpassword.com\/\">http:\/\/www.defaultpassword.com\/<\/a><\/li>\n<li>Vulnerable By Design ~ VulnHub: <a href=\"https:\/\/www.vulnhub.com\/\">https:\/\/www.vulnhub.com\/<\/a><\/li>\n<\/ul>\n<p><\/div><\/div>\n<h5>Sites if you are interested in Security Awareness<\/h5>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Security Awareness&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>Internet Storm Center: <a href=\"http:\/\/isc.sans.edu\">http:\/\/isc.sans.edu<\/a><\/li>\n<li>SANS Securing the Human: <a href=\"https:\/\/securingthehuman.sans.org\/\">https:\/\/securingthehuman.sans.org\/<\/a><\/li>\n<li>SANS OUCH! Newsletter: <a href=\"https:\/\/securingthehuman.sans.org\/resources\/newsletters\/ouch\/2016\">https:\/\/securingthehuman.sans.org\/resources\/newsletters\/ouch\/2016<\/a><\/li>\n<li>University of Massachusetts Data Security Awareness and Education website: <a href=\"https:\/\/www.umassp.edu\/uits\/secure-computing\">https:\/\/www.umassp.edu\/uits\/secure-computing<\/a><\/li>\n<li>National Cyber Security Alliance: <a href=\"http:\/\/www.staysafeonline.org\">http:\/\/www.staysafeonline.org<\/a><\/li>\n<li>Microsoft Security Awareness Materials: <a href=\"https:\/\/www.microsoft.com\/about\/philanthropies\/youthspark\/youthsparkhub\/programs\/onlinesafety\/#Free-materials\">https:\/\/www.microsoft.com\/about\/philanthropies\/youthspark\/youthsparkhub\/programs\/onlinesafety\/#Free-materials<\/a><\/li>\n<li>Security Awareness Toolbox: <a href=\"http:\/\/www.iwar.org.uk\/comsec\/resources\/sa-tools\/\">http:\/\/www.iwar.org.uk\/comsec\/resources\/sa-tools\/<\/a><\/li>\n<\/ul>\n<p><\/div><\/div>\n<h5>Questionable INFOSEC Sites<\/h5>\n<p>When I first started in information security, an IT director told me that the last INFOSEC administrator looked at good sites and also reviewed questionable hacker sites to stay current. So I started to do the same but not as frequent as other sites.<\/p>\n<div class=\"claps-toggle-text\" data-title=\"&lt;strong&gt;Questionable INFOSEC Sites&lt;\/strong&gt;\" data-swaptitle=\"Collapse to read less\" data-icon=\"&#9660;\" data-swapicon=\"&#9650;\" data-ht=\"1px\" data-hf=\"50px\" data-above=\"0\"><div class=\"claps-text-inner claps-text-toggle-collapsed\"><\/p>\n<ul>\n<li>Packet Storm Security: <a href=\"https:\/\/packetstormsecurity.com\/\">https:\/\/packetstormsecurity.com\/<\/a> (The better of the questionable sites)<\/li>\n<li>Exploit DB by Offensive Security: <a href=\"https:\/\/www.exploit-db.com\/\">https:\/\/www.exploit-db.com\/<\/a> (Name says it all, from the makers of Kali Linux)<\/li>\n<li>VulDB: Vulnerability Database: https:\/\/vuldb.com\/<\/li>\n<li>Hacking Articles: <a href=\"http:\/\/www.hackingarticles.in\/\">http:\/\/www.hackingarticles.in\/<\/a> (Name says it all)<\/li>\n<li>Deep Dot Web: <a href=\"https:\/\/www.deepdotweb.com\/\">https:\/\/www.deepdotweb.com\/<\/a> (Site that search accesses the dark web content. Use caution!)<\/li>\n<\/ul>\n<p><\/div><\/div>\n<p><span class=\"expandall\">Expand All<\/span><br \/>\n<span class=\"collapseall\">Collapse All<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>These are some sites that I have bookmarked and refer to fairly regularly.\u00a0 I also have RSS feed links for a number of sites, so I see the new articles as they get posted. If you are interested in the RSS feed list, a opml is available on my Github site. Blog Sites Training and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4880","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/pages\/4880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4880"}],"version-history":[{"count":25,"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/pages\/4880\/revisions"}],"predecessor-version":[{"id":27879,"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=\/wp\/v2\/pages\/4880\/revisions\/27879"}],"wp:attachment":[{"href":"https:\/\/devsec.smham2.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}