Cyber

[ZF]

Blacklists
---------
www.malwaredomainlist.com/mdl.php
www.barracudacentral.org/lookups
www.urlblacklist.com/?sec=search
www.avgthreatlabs.com/ww-en/website-safety-reports/
www.brightcloud.com/tools/url-ip-lookup.php
www.brightcloud.com/services/ip-reputation.php
zeustracker.abuse.ch/blocklist.php
www.senderscore.org/blacklistlookup/
ers.trendmicro.com/reputations
ipremoval.sms.symantec.com/lookup/
www.cyren.com/ip-reputation-check.html
www.borderware.com/
www.senderbase.org/
www.ipvoid.com/
mxtoolbox.com/blacklists.aspx
uribl.com/about.shtml
www.surbl.org/surbl-analysis
dshield.org/
centralops.net/co/
makensi.es/stf/
www.geektools.com
whois.arin.net/ui/advanced.jsp
wq.apnic.net/whois-search/static/search.html

//To block IP address by country, use:
www.ip2location.com
www.blockacountry.com

support.clean-mx.de/clean-mx/viruses
www.avg.com.au/resources/web-page-scanner/
www.brightcloud.com/support/lookup.php
app.webinspector.com/
www.senderbase.org/
www.cyscon-sirt.org/
www.isithacked.com/
www.knownsec.com/
safeweb.norton.com/
www.phishtank.com/
www.malwaredomainlist.com/mdl.php
www.malwareurl.com/listing-urls.php
www.siteadvisor.com/
www.trustedsource.org/
mxtoolbox.com/blacklists.aspx
quttera.com/
www.reputationauthority.org/
sitecheck.sucuri.net/
reclassify.wrs.trendmicro.com/
www.unmaskparasites.com/security-report/
urlblacklist.com/?sec=search
urlquery.net/
urlvoid.com/
www.virustotal.com/
vurl.mysteryfcm.co.uk/
wepawet.iseclab.org/
zulu.zscaler.com/

[ZF]

Cyber Related Info and Blog
---------------------------
zeltser.com/
isc.sans.edu
software-security.sans.org/blog
www.securingthehuman.org/blog/
blog.commandlinekungfu.com/
ddosattackprotection.org/blog/cyber-security-blogs/
null-byte.wonderhowto.com/
hackdb.org/
www.pretentiousname.com/
blog.malwaremustdie.org/
www.schneier.com/
www.mandiant.com/blog/
www.hackmageddon.com/
www.madleets.com/
malwageddon.blogspot.sg/
ondailybasis.com/blog/
blog.malcovery.com/
dustri.org/b/
www.codeandsec.com/
www.kahusecurity.com/
www.attacker-domain.com/index.html
www.cerias.purdue.edu/site/blog/author/spaf
googleonlinesecurity.blogspot.sg/
bhconsulting.ie/securitywatch/
www.computerweekly.com/blogs/david_lacey/
garwarner.blogspot.sg/
krebsonsecurity.com/
www.stopbadware.org/blog/
taosecurity.blogspot.sg/
www.honeynet.org/
blog.unmaskparasites.com/
www.xylibox.com/
www.hotforsecurity.com/
www.itproportal.com/
www.mckeay.net/
www.howtogeek.com/school/
www.hackerfactor.com/blog/index.php
www.welivesecurity.com/
blog.wh1t3rabbit.net/
dwaterson.com/
kevtownsend.wordpress.com/
www.itscolumn.com/
nagareshwar.securityxploded.com/
rud.is/b/
securityuncorked.com/
www.securitygeeks.net/
www.mcgrewsecurity.com/
www.liquidmatrix.org/blog/
www.exoticliability.com/
blog.erratasec.com/
ddanchev.blogspot.sg/
carnal0wnage.attackresearch.com/
1raindrop.typepad.com/
www.troyhunt.com/
www.thoughtcrime.org/blog/
securosis.com/blog/
johnny.ihackstuff.com/
www.seculert.com/blog/
rdist.root.org/
www.rationalsurvivability.com/blog/
www.pandasecurity.com/mediacenter/
www.darknet.org.uk/
csrc.nist.gov/publications/PubsSPs.html#SP%20800

[ZF]

News
----
www.sans.org/newsletters/newsbites/
www.cert.org/
www.us-cert.gov/
edition.cnn.com/TECH/
www.zdnet.com/topic/security/
www.zdnet.com/blog/security/
www.reuters.com/news/technology
news.ycombinator.com/news
www.zone-h.org/?zh=1
malware.dontneedcoffee.com/
news.softpedia.com/cat/Security/Security-Blog/
citizenlab.org/
www.welivesecurity.com/
isc.sans.edu/newssummary.html
www.hackread.com/
www.cio.com/category/security/
www.csoonline.com/
www.darkreading.com/
www.msnbc.com/
www.informationweek.com/security.asp
www.techrepublic.com/topic/security/
securelist.com/
www.theguardian.com/media-network/information-security
www.net-security.org/
www.infosecurity-magazine.com/
www.networkcomputing.com/
www.scmagazine.com/
searchsecurity.techtarget.com/
asia.pcmag.com/
www.techworld.com/security/
threatpost.com/
www.threattracksecurity.com/it-blog/
www.bankinfosecurity.com/#
www.forbes.com/sites/firewall/
www.govinfosecurity.com/
dhs-daily-report.blogspot.sg/
darkmatters.norsecorp.com/
www.newsnow.co.uk/h/Technology
securityweekly.com/watch/

[ZF]

VULNERABILITIES, LEAKS AND INTEL
--------------------------------
leaksource.info/
wikileaks.org/index.en.html
www.vulnerability-lab.com/
seclists.org/fulldisclosure/
www.teamshatter.com/
malc0de.com/news/
packetstormsecurity.com/
cxsecurity.com/wlb/
www.intelligentexploit.com/browse-exploit.html
brakertech.com/latest-exploits-tools/
www.bugsearch.net/
www.exploit-db.com/
www.securityfocus.com/
www.xssed.com/
pwnies.com/nominations/
cryptome.org/
siri-urz.blogspot.sg/
www.shadowserver.org/
www.team-cymru.org/
archives.neohapsis.com/archives/bugtraq/
pwnedlist.com/
atlas.arbor.net/
www.cymru.com/Documents/bogon-dd.html
osint.bambenekconsulting.com/feeds/dga-feed.txt
www.dshield.org/ipsascii.html
www.emergingthreats.net/index.php/rules-mainmenu-38.html
code.google.com/apis/safebrowsing/
hosts-file.net/
malc0de.com/database/
www.malwaredomains.com/wordpress/?page_id=66
www.malware-control.com/
www.malwaredomainlist.com/hostslist/hosts.txt
www.malware.com.br/lists.shtml
www.malwareurl.com/
openphish.com/
mdl.paretologic.com/
www.phishtank.com/phish_archive.php
www.projecthoneypot.org/list_of_ips.php
www.scumware.org/
www.shadowserver.org/wiki/pmwiki.php?n=Services/Reports
labs.snort.org/iplists/
mtc.sri.com/
sucuri.net/?page=tools&title=blacklist
www.threatstop.com/
urlblacklist.com/
zeustracker.abuse.ch/blocklist.php
www.blade-defender.org/eval-lab/

Check for bugs
www.securityfocus.com/bid

//Some exploits have hidden backdoor
www.sebug.net/

www.us-cert.gov/ncas/alerts
cve.mitre.org/
secunia.com/

//Free open source vulnerability database with search tool!!!
hackerstorm.co.uk/

//To sell non-zero day exploits
exploithub.com/

breachlevelindex.com/#!breach-database

intel.criticalstack.com/

[ZF]

Security Vendors
----------------
blogs.technet.com/b/mmpc/
nakedsecurity.sophos.com/
www.f-secure.com/weblog/
www.fireeye.com/blog.html
www.symantec.com/connect/symantec-blogs/sr
www.kaspersky.com/internet-security-center
www.zonealarm.com/blog/
www.secureworks.com/resources/blog/
safeandsavvy.f-secure.com/
blog.fox-it.com/
blog.fortinet.com/
blogs.mcafee.com/
blog.sucuri.net/
blog.trendmicro.com/
www.veracode.com/blog/
blog.cyveillance.com/
blog.imperva.com/
www.pandasecurity.com/mediacenter/
blog.malwarebytes.org/
blog.malcovery.com/
www.trustwave.com/Resources/SpiderLabs-Blog/
community.rapid7.com/community/infosec/blog

[ZF]

Localized News
---------------
www.tremeritus.com/
www.gosafeonline.sg/
www.singcert.org.sg/index.php
www.malaysiakini.com/en

[ZF]

TOR and Darknet Related
-----------------------
the-hidden-wiki.com/
thehiddenwiki.org/
torhiddenwiki.com/
onion.is-found.org/
hackertarget.com/tor-exit-node-visualization/
TORCH Search Engine: xmh57jrzrnw6insl.onion.to/
TOR Search: kbhpodhnfxl3clb4.onion/
Duck Duck GO: 3g2upl4pq6kufc4m.onion/

[ZF]

Online Tools
------------
www.tarasco.org/security/pwdump_7/
www.nirsoft.net/utils/nircmd.html
www.joeware.net/freetools/

hackarmoury.com/tools
hackarmoury.com
svn://hackarmoury.com
svn://hackarmoury.com
ipv6.hackarmoury.com

www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/
www.dban.org/
www.grc.com/misc/truecrypt/truecrypt.htm
www.clonezilla.org/
macosx.blog.co.in/

//Password Cracking
objectif-securite.ch/en/index.php
www.cloudcracker.com/
objectif-securite.ch/en/ophcrack.php

//oclHashcat is the best password cracker
hashcat.net/oclhashcat/

//Squid HTTP Proxy Log analysis tool
calamaris.cord.de
www.rillion.net/squidview/
sourceforge.net/projects/sarg/
eventid.net/

//Log
logstash.net/
code.google.com/p/enterprise-log-search-and-archive/
www.splunk.com/

//DNS
toolbar.netcraft.com/
whois.domaintools.com/

everytimezone.com

//Anonymizer
www.anonymouse.org
encrypted.google.com

//Reverse lookup for US phone numbers
www.allphonedirectory.com/

//Online Exploit Search Engine
www.exploitsearch.net

//OSINT recon
www.blackbookonline.info/

//Listing of tools
sectools.org/

//Listing of hacking forums
bo0om.ru/forums

//Online live Windows Internals tools
live.sysinternals.com/

//Check ciphers and strength offer by server; better then SSLDigger.
//Remember to check box "Do not show results on board"
www.ssllabs.com/ssldb/index.html

//Trusted Communication
wickr.com/

www.packet-craft.net/Apps/

//PT Information Sharing Tool
dradisframework.org/
www.gremwell.com/what_is_magictree
www.fishnetsecurity.com/lair

//Online Traceroute
//Might be useful if you suspect your recon is detected and you're being shunt!
//Might be violating NDA!
www.traceroute.org
www.kloth.net/services/traceroute.php
tracert.com/

[ZF]

LEARNING RESOURCES
------------------
www.regexr.com/
www.securitytube.net/
www.khanacademy.org/computing/computer-science/cryptography
www.offensive-security.com/metasploit-unleashed
0x27.me/HackBack/0x00.txt

//Capture the Flag
www.securifera.com/blog/
captf.com/practice-ctf/
captf.com/

//Evasion Techniques
www.integrigy.com/security-resources/evading-network-based-oracle-database-intrusion-detection-systems
www.integrigy.com/files/Integrigy_Evading_Oracle_IDS.pdf

//Web App Firewall Evaluation Criteria
projects.webappsec.org/w/page/13246985/Web%20Application%20Firewall%20Evaluation%20Criteria

//SDR
www.funcubedongle.com/

//Odroid
www.hardkernel.com/main/main.php
www.kernelmode.info/

//Malware Sharing
contagiodump.blogspot.sg/

www.netresec.com/?page=PcapFiles

//New Certificate Authority!
letsencrypt.org/

[ZF]

Security Projects
-----------------
*** Try Xplico for Network Forensic!
www.xplico.org/download

GCAT uses gmail as a callback
github.com/byt3bl33d3r/gcat

Twittor uss twitter as a callback
github.com/PaulSec/twittor

Create meterpreter in VBA excel
github.com/trustedsec/unicorn

voiphopper.sourceforge.net/

Evil Maid Attack
theinvisiblethings.blogspot.sg/2009/10/evil-maid-goes-after-truecrypt.html
cansecwest.com/slides/2013/Evil%20Maid%20Just%20Got%20Angrier.pdf

blog.trendmicro.com/trendlabs-security-intelligence/backdoor-uses-evernote-as-command-and-control-server/

//Account bypass with no artifact on disk!
//Doesnt work with disk encryption
//online account authorization bypass!
www.piotrbania.com/all/kon-boot/

[ZF]

OTHERS
------

//Cyber Law
cryptolaw.org/

Boot Disc Helix
www.e-fense.com/products.php

Security Assessment tools
redseal.co/
www.skyboxsecurity.com/

Commercial Keylogger with no backdoor...
www.spector360.com/

//Testing of security products
www.nsslabs.com/
www.icsalabs.com/

//PT with Kali on Amazon cloud
aws.amazon.com/marketplace/pp/B00HW50E0M

Amazon EC2 PT T&C
aws.amazon.com/security/penetration-testing/

//Cheap alternative to Amazon EC2
www.linode.com/

//PT Authorization Sample
www.counterhack.net/permission_memo.html

[ZF]

CHEATSHEETS
----------

Security Standards Resources
www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/index.shtml
web.nvd.nist.gov/view/ncp/repository
technet.microsoft.com/en-us/security/default.aspx
benchmarks.cisecurity.org/downloads/benchmarks/

//Penetration Testing Resources
pen-testing.sans.org/resources
www.isecom.org/research/osstmm.html
www.pentest-standard.org/index.php/Main_Page
csrc.nist.gov/publications/nistpubs/800-115/SP800-115.pdf
nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53Ar4.pdf
www.owasp.org/index.php/Main_Page
www.vulnerabilityassessment.co.uk/Penetration%20Test.html

//SQL Injection cheatsheet
pentestmonkey.net/category/cheat-sheet/sql-injection

//XSS Evasion Cheatsheet
www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

//Social Engineering Framework
www.social-engineer.org/framework/general-discussion/

//Updated Google Hacking Database
www.exploit-db.com/google-hacking-database/
www.bishopfox.com/resources/tools/google-hacking-diggity/attack-tools/


//Bryce Public Dropbox
goo.gl/JqinSk

[ZF]

Password Cracking

md5:
www.tmto.org/ (formerly md5lookup.com)
md5.rednoize.com (good with words)
nz.md5.crysm.net (English dictionary, nearly all one to four character alphanumeric. 27.8m records.) - seems to be down atm
us.md5.crysm.net (British, Jargon and American worldlist, IP addresses 16.0m records)
www.xmd5.org (good with numbers)
gdataonline.com (wordlist based, I think)
www.hashchecker.com (It seems to say its good, but I've never gotten many hits form here)
passcracking.ru
www.milw0rm.com/md5
plain-text.info (this one is quite good and generally returns results, but you have to submit things to be cracked, its not just an online database)
www.securitystats.com/tools/hashcrack.php (does various, including LM NTLM and SHA-1, but seems to return no results on anything than the most basic, so rather useless)
www.schwett.com/md5/ - Does Norwegian words too
passcrack.spb.ru/
shm.pl/md5/
www.und0it.com/
www.neeao.com/md5/
md5.benramsey.com/
www.md5decrypt.com/
md5.khrone.pl/
www.csthis.com/md5/index.php
www.md5decrypter.com/
www.md5encryption.com/
www.md5database.net/
md5.xpzone.de/
md5.geeks.li/
www.hashreverse.com/
www.cmd5.com/english.aspx
www.md5.altervista.org/
md5.overclock.ch/biz/index.php?p=md5crack&l=en
alimamed.pp.ru/md5/ (for those who can't read russian: put your md5 in the second box)
md5crack.it-helpnet.de/index.php?op=add (German, I have no idea....)
cijfer.hua.fi/ (Projects->md5 reverse lookup)
shm.hard-core.pl/md5/
www.mmkey.com/md5/HOME.ASP
www.thepanicroom.org/index.php?view=cracker
rainbowtables.net/services/results.php (I'm not sure i'd trust this site to give more than a tiny amount of results)
rainbowcrack.com/ (requires people to contribute rainbowtables to be able to query them, and continue contributing them constantly)
www.securitydb.org/cracker/
passwordsecuritycenter.com/index.php?main_page=product_info&cPath=3&products_id=7 (This is meant to be used as proof that they can actually reverse passwords to convince you to buy their stuff, but as long as they decrypt it it doesn't matter why, right?)
0ptix.co.nr/md5
www.astalavista.net/?cmd=rainbowtables
ice.breaker.free.fr/
www.md5this.com
www.pldsecurity.de/forum/md5.php
www.xeons.net/genesis/
hackerscity.free.fr/
bisix.cogia.net/
md5.allfact.info/
bokehman.com/cracker/
www.tydal.nu/article/md5-crack/
ivdb.org/search/md5/
md5.netsons.org/
md5.c.la/ (The form at the bottom left of the page)
www.jock-security.com/md5_database/?page=crack
c4p-sl0ck.dyndns.org/cracker.php
www.blackfiresecurity.com/tools/md5lib.php (Queries the MD5 Library AIM Bot)
www.md5-db.com/index.php
www.kevlardisk.org/
md5.idiobase.de/
md5search.deerme.org/
sha1search.com/

lm Only:
lasecwww.epfl.ch/~oechslin/projects/ophcrack/ (Currently Offline)
www.milw0rm.com/lm (Currently Offline)

lm + ntlm:
plain-text.info
www.securitystats.com/tools/hashcrack.php
rainbowtables.net/services/results.php
rainbowcrack.com/
passwordsecuritycenter.com/index.php?main_page=product_info&cPath=3&products_id=7
www.astalavista.net/?cmd=rainbowtables

md4:
www.securitystats.com/tools/hashcrack.php
rainbowtables.net/services/results.php
rainbowcrack.com/

sha1:
passcrack.spb.ru/
www.hashreverse.com/
rainbowcrack.com/
www.md5encryption.com/
www.shalookup.com/
md5.rednoize.com/
c4p-sl0ck.dyndns.org/cracker.php
www.tmto.org/
md5search.deerme.org/

[ZF]

Sandbox
-------

anubis.iseclab.org/
aerie.cs.berkeley.edu/
camas.comodo.com/
valkyrie.comodo.com/
eureka.cyber-ta.org/
malwr.com/submission/
www.malwareviz.com/
mastiff-online.korelogic.com/
www.hybrid-analysis.com/
www.threatexpert.com/submit.aspx
www.threattracksecurity.com/resources/sandbox-malware-analysis.aspx
www.vicheck.ca/


Android
akana.mobiseclab.org/
www.visualthreat.com/

Document
www.document-analyzer.net/
scan.xecure-lab.com/