white2hack 📚

Practical Cyber Forensics. An Incident-Based Approach to Forensic Investigations by Niranjan Reddy, 2019 Following this, you will work with cloud and mobile forensic techniques by considering the concept of forensics as a service (FaSS), giving you cutting-edge skills that will future-proof your career. Building on this, you will learn the process of breaking down malware attacks, web attacks, and email scams with case studies to give you a clearer view of the techniques to be followed. Another tricky technique is SSD forensics, so the author covers this in detail to give you the alternative analysis techniques you’ll need. To keep you up to speed on contemporary forensics, Practical Cyber Forensics includes a chapter on Bitcoin forensics, where key crypto-currency forensic techniques will be shared. Finally, you will see how to prepare accurate investigative reports. #book #forensic

Getting started with the Red Team Guides by Hadess RedTeamGuides is a platform that provides red team tutorial and guidance along with cheatsheets. It is aimed at helping security professionals and enthusiasts to learn about red teaming and penetration testing techniques. The platform provides a wide range of resources, including step-by-step tutorials, how-to guides, and cheat sheets, that cover different topics related to red teaming, such as reconnaissance, exploitation, post-exploitation, and privilege escalation. The guides are regularly updated to keep up with the latest techniques and tools in the field. Main page GitHub Cheathsheet #pentest

Crypto Dictionary: 500 Tasty Tidbits for the Curious Cryptographer by Jean-Philippe Aumasson, 2023 Cryptography from A5/0 to ZRTP Expand your mind—and your crypto knowledge—with the ultimate desktop dictionary for all things cryptography. Written by a globally recognized cryptographer for fellow experts and novices to the field alike, Crypto Dictionary is rigorous in its definitions, yet easy to read and laced with humor. #english #book

Cloud - AWS Pentest GitHub #AWS #AttackDefense

Hacking and securiting Docker containers by Srinivasarao Kotipalli, Raksha Kannusami, Abhijeth Dugginapeddi, The Offensive Lab, 2023 #book #AttackDefense

Practical Guide to AWS Cloud Security by SANS, 2023 This book provides you with a comprehensive collection of technical resources that you can use to arm yourself with the foundational knowledge required in today’s cloud-first world. #book #AWS

OWASP ZAP : Website Hacking & Penetration Testing Course by Sagar Raghuwan, Udemy, 2022 Learn all about web application penetration testing and website hacking This course covers web application attacks and how to earn bug bounties. There is no prerequisite of prior hacking knowledge and you will be able to perform web attacks and hunt bugs on live websites and secure them. This course is not like other hacking or penetration testing course with outdated vulnerabilities and only lab attacks. This contains maximum live websites to make you comfortable with the Live Hunting Environment. This course will start from basic principles of each vulnerability and How to attack them using multiple bypass techniques, In addition to exploitation, you will also learn how to fix them. This course is completely focused over pen testing web applications with ZAP. Official page #education

PhoneSploit Pro - PhoneSploit with Metasploit Integration An all-in-one hacking tool written in Python to remotely exploit Android devices using ADB (Android Debug Bridge) and Metasploit-Framework. GitHub #pentest #hacktools

SQL Injection Strategies: Practical techniques to secure old vulnerabilities against modern attacks by Ettore Galluccio, Edoardo Caselli, Gabriele Lombari, 2020 Learn to exploit vulnerable database applications using SQL injection tools and techniques, while understanding how to effectively prevent attacks. You'll start with a thorough introduction to SQL injection and its impact on websites and systems. Later, the book features steps to configure a virtual environment, so you can try SQL injection techniques safely on your own computer. These tests can be performed not only on web applications but also on web services and mobile applications that can be used for managing IoT environments. Tools such as sqlmap and others are then covered, helping you understand how to use them effectively to perform SQL injection attacks. #book #web

Burp Suite Plugin Development Guide by Joas Antonio Dos Santos Burp Suite Plugins/Extender #web

Linux Bash Shell Cheat Sheet It works with about every distribution, except for apt-get which is Ubuntu/Debian exclusive #book