Cross-site noscripting (XSS) cheat sheet by Portswigger's, 2023

This cross-site noscripting (XSS) cheat sheet contains many vectors that can help you bypass WAFs and filters. You can select vectors by the event, tag or browser and a proof of concept is included for every vector.

#web

Threat Hunting Framework, 2023

A threat-hunting framework is a structured approach cybersecurity professionals use to proactively search for and identify potential security threats within a digital wonderland.

Provides a structured and repeatable process to proactively identify and mitigate potential security threats and improve overall cyber defense.

Here is an excellent document by Cyborg Security that covers the following topics:

• Threat Hunting Security Operations
• Pre-Requisites to Threat Hunting
• Hunt Team Maturity
• Threat Hunting Cycle
• Hunting in Action
• Long-Term Benefits of the Hunt

#book #useful

Download HD (PNG)

Activated Directory Notes by Ethical Hackers Academy, 2023

#pentest

Blockchain Security. A Framework for Trust and Adoption by Nicolas Castellon, CGI Nederland, Peter Cozijnsen, CGI Nederland, Tjerk van Goor, CGI Nederland

#docs

Tshark Guide, 2023

In this article, we will learn about TShark which is a well-known network protocol analyser. It lets us capture the data packets, from the live network. It also allows us, to read or analyse the previously captured data packets of a saved file. Here we will the understand the Statistical Functionalities of TShark and the different ways in which we can sort our traffic capture so that we can analyse it faster and effectively. We will understand the reporting functionalities and some additional tricks that we found while tinkering with TShark.

#docs