white2hack 📚 – Telegram
white2hack 📚
12.4K subscribers
4.8K photos
135 videos
1.96K files
2.26K links
Кибербез. Книги, гайды, how to, ликбез. Аналитика, тренды, карьера, эвенты. Этичный хакинг и защита своих данных

🔊 Связь @w2hack_feed_bot
💬 Чат https://news.1rj.ru/str/+VdkEIWudTi5m3dsA
💡 Консультация https://forms.gle/iB9iX3BwyxJM4Ktx5
🏛 Обмен -- private --
Download Telegram
Пак из 2-х книг по разработке собственной ОС
The Pentester Blueprint. Starting a Career as an Ethical Hacker by Phillip L. and Wylie Kim Crawley, 2021

You'll learn about the role of a penetration tester, what a pentest involves, and the prerequisite knowledge you'll need to start the educational journey of becoming a pentester. Discover how to develop a plan by assessing your current skillset and finding a starting place to begin growing your knowledge and skills. Finally, find out how to become employed as a pentester by using social media, networking strategies, and community involvement.

#book #job
👍7
The_Pentester_BluePrint_Starting_a_Career_as_an_Ethical_Hacker.pdf
2.7 MB
The Pentester Blueprint. Starting a Career as an Ethical Hacker by Phillip L. and Wylie Kim Crawley, 2021
👍7
MITRE ATT&CK. AttackIQ Special Edition by Jonathan Reiber and Carl Wright, 2021

Extra:
Best Practices for MITRE ATT&CK® Mapping

#book #pentest
👍71
AttackIQ Asset - MITRE ATT&CK For Dummies.pdf
3.7 MB
MITRE ATT&CK. AttackIQ Special Edition by Jonathan Reiber and Carl Wright, 2021
👍7🔥1
UNIT 42 PLAYBOOK VIEWER

Viewer Playbook — это система для анализа контента STIX2, который содержит методы противника. Цель Playbook состоит в том, чтобы упорядочить инструменты, методы и процедуры, которые использует противник, в структурированный формат, которым можно делиться с другими.

Инфраструктура MITRE ATT&CK предоставляет имена, описания и ссылки на примеры использования противниками тактик во время операции, а также методы, используемые противником для их достижения.

Main page
GitHub

#defensive
👍7
Information Security Management Handbook (Sixth Edition) by
Harold F. Tipton, Micki Krause, 2007

Considered the gold-standard reference on information security, the Information Security Management Handbook provides an authoritative compilation of the fundamental knowledge, skills, techniques, and tools required of today's IT security professional.

Now in its sixth edition, this 3200 page, 4 volume stand-alone reference is organized under the CISSP Common Body of Knowledge domains and has been updated yearly. Each annual update, the latest is Volume 6, reflects the changes to the CBK in response to new laws and evolving technology.

#book #management
👍4
Book Information Security Mangement 6th ed.pdf
7.8 MB
Information Security Management Handbook (Sixth Edition) by Harold F. Tipton, Micki Krause, 2007
👍4
Forwarded from CyberSecBastion
Application Security Program Handbook, Derek Fisher, 2022

The book teaches you to implement a robust program of security throughout your development process. It goes well beyond the basics, detailing flexible security fundamentals that can adapt and evolve to new and emerging threats. Its service-oriented approach is perfectly suited to the fast pace of modern development. Your team will quickly switch from viewing security as a chore to an essential part of their daily work. Follow the expert advice in this guide and you’ll reliably deliver software that is free from security defects and critical vulnerabilities.

The file is provided for reference only. Trial period of use - 3 days. Please, buy a license copy!

#book #API
🔥51
Forwarded from CyberSecBastion
Application_Security_Program_Handbook.pdf
8.1 MB
Application Security Program Handbook, Derek Fisher, 2022

The file is provided for reference only. Trial period of use - 3 days. Please, buy a license copy!
👍3🔥31
Russia DevOps Report — основные тренды отечественного рынка DevOps DevSecOps в том числе)

Цель исследования заключалась в создании подробного и ежегодно обновляемого обзора рынка DevOps как для руководителей, которые уже активно используют практики для разработки собственных программных продуктов, так и для тех, кто только задумывается об их внедрении.

Исследование поможет «взглянуть на ситуацию сверху» и не только определить актуальные тренды, но и выявить тенденции, которые будут пользоваться популярностью в будущем.

Главная страничка
Отчет 2022 года
Отчет 2023 года (пока только анонс)

Дополнительно:
Статья на Хабре 2022 года
Тренды Security в разработке (Dec 2022)

#SecDevOps #analytics
👍2🤔2
Reverse Engineering with Radare 2, Geri Revay (Udemy), 2019

Harness the Power of the Open-Source Radare2 for Your Reverse Engineering Projects

Official page

Extra:
Radare2: Libre Reversing Framework for Unix Geeks
Radare2 Tutorial - Reverse Engineering using Radare2

#education #reverse
👍4
Reverse Engineering with Radare2_full_repacked.7z
41.1 MB
Reverse Engineering with Radare 2, Geri Revay (Udemy), 2019
👍6