Learning

Government sites

• 資通安全署 Administration for Cyber Security, moda
• 國家資通安全研究院 - 首頁 (nat.gov.tw)
• TWCERT/CC台灣電腦網路危機處理暨協調中心

Security sites

網站	功能描述
shodan.io	搜索互聯網連接設備的搜索引擎。
censys.io	提供互聯網設備和網絡資產信息的搜索平台。
hunter.io	查找與特定域名相關的電子郵件地址的工具。
fullhunt.io	自動化攻擊面管理和漏洞發現平台。
onyphe.io	網絡資產搜索和網絡安全信息收集引擎。
socradar.io	提供實時網絡威脅情報和數字風險保護服務。
binaryedge.io	互聯網範圍掃描和網絡風險評估平台。
ivre.rocks	開源網絡偵察框架。
crt.sh	搜索和查詢SSL/TLS證書的數據庫。
vulners.com	綜合性漏洞數據庫和安全內容存儲庫。
publicwww.com	源代碼搜索引擎,用於在網頁源碼中查找特定代碼片段。
pulsedive.com	威脅情報和網絡安全數據聚合平台。
intelx.io	多源開放源情報(OSINT)搜索和分析工具。
wigle.net	無線網絡數據庫和地圖服務。
viz.greynoise.io	分析和可視化互聯網噪聲和惡意活動的平台。

Security Platform

• Kali Linux
• ParrotOS

Threat Intelligence

Detection & Analysis Tools

• VirusTotal is a service that allows anyone to analyze suspicious files, domains, URLs, and IP addresses for malicious content. VirusTotal also offers additional services and tools for enterprise use.
• Jotti's malware scan is a free service that lets you scan suspicious files with several antivirus programs. There are some limitations to the number of files that you can submit.
• Urlscan.io is a free service that scans and analyzes URLs and provides a detailed report summarizing the URL information.
• MalwareBazaar is a free repository for malware samples. Malware samples are a great source of threat intelligence that can be used for research purposes.

Security Tools

• 10 Top Open Source Penetration Testing Tools
• OSV-Scanner
• 5 Tools to Scan a Linux Server for Malware and Rootkits (tecmint.com)

- Wazuh - The Open Source Security Platform

• https://wazuh.com/
• YT: this Cybersecurity Platform is FREE
• YT: you need this FREE CyberSecurity tool
• YT: Wazuh Open Source SIEM Tutorial - YouTube

- Web Check

All-in-one OSINT tool for analysing any website

• Web Check (web-check.xyz)
• GitHub: https://github.com/Lissy93/web-check 

- OWASP - Nettacker

Automated Penetration Testing Framework (自動滲透測試框架)

• OWASP/Nettacker: Automated Penetration Testing Framework

- WAF: Web Application Firewall

• GoTestWAF
• Test and evaluate your WAF before hackers
• SafeLine - A self-hosted WAF(Web Application Firewall)
  • YT: SafeLine: A Feature-Rich WAF with a Catch (or Two)

- Pi-Alert: WiFi/LAN 連網裝置偵測

• Pi.Alert
• [Video] Pi Alert - Open Source, Self Hosted, Network Device Change Notification and Intrusion Detection

- WatchYourLAN

• GitHub: https://github.com/aceberg/WatchYourLAN 

- VMs for Cybersecurity Professional

• TOP VIRTUAL MACHINES FOR CYBERSECURITY PROFESSIONALS | by Flavio Queiroz | CTI Flash Insights | Medium

- ntopng: Network traffic monitor

• ntopng – ntop
• YT: NTopNG - A Free, Open Source, Self Hosted, Network Monitoring and Analysis Tool. - YouTube

- ImHex: Hex Editor

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM

• GitHub: https://github.com/WerWolv/ImHex/ 

- OSSIEM

Open Source SIEM Stack, Wazuh + Graylog + Velociraptor + Copilot

• GitHub: https://github.com/socfortress/OSSIEM 

- Toolbox

• RustScan : The Modern Port Scanner

- Fishing Test

• pfish - 轻量级的无害化钓鱼

AI Cybersecurity

• [pyimagesearch] Build a Network Intrusion Detection System with Variational Autoencoders

Security Jobs

Interview

• This blog offers lots of helpful tips, information, and practice scenarios on preparing for technical interviews in the cybersecurity field.