Learning

Government sites

• 資通安全署 Administration for Cyber Security, moda
• 國家資通安全研究院 - 首頁 (nat.gov.tw)
• TWCERT/CC台灣電腦網路危機處理暨協調中心

Security sites

Security Platform

• Kali Linux
• ParrotOS

Threat Intelligence

Detection & Analysis Tools

• VirusTotal is a service that allows anyone to analyze suspicious files, domains, URLs, and IP addresses for malicious content. VirusTotal also offers additional services and tools for enterprise use.
• Jotti's malware scan is a free service that lets you scan suspicious files with several antivirus programs. There are some limitations to the number of files that you can submit.
• Urlscan.io is a free service that scans and analyzes URLs and provides a detailed report summarizing the URL information.
• MalwareBazaar is a free repository for malware samples. Malware samples are a great source of threat intelligence that can be used for research purposes.

Security Tools

• 10 Top Open Source Penetration Testing Tools
• OSV-Scanner
• 5 Tools to Scan a Linux Server for Malware and Rootkits (tecmint.com)

- Wazuh - The Open Source Security Platform

• https://wazuh.com/
• YT: this Cybersecurity Platform is FREE
• YT: you need this FREE CyberSecurity tool
• YT: Wazuh Open Source SIEM Tutorial - YouTube

- Web Check

All-in-one OSINT tool for analysing any website

• Web Check (web-check.xyz)
• GitHub: https://github.com/Lissy93/web-check 

- OWASP - Nettacker

Automated Penetration Testing Framework (自動滲透測試框架)

• OWASP/Nettacker: Automated Penetration Testing Framework

- WAF: Web Application Firewall

• GoTestWAF
• Test and evaluate your WAF before hackers
• SafeLine - A self-hosted WAF(Web Application Firewall)
  • YT: SafeLine: A Feature-Rich WAF with a Catch (or Two)

- Pi-Alert: WiFi/LAN 連網裝置偵測

• Pi.Alert
• [Video] Pi Alert - Open Source, Self Hosted, Network Device Change Notification and Intrusion Detection

- WatchYourLAN

• GitHub: https://github.com/aceberg/WatchYourLAN 

- VMs for Cybersecurity Professional

• TOP VIRTUAL MACHINES FOR CYBERSECURITY PROFESSIONALS | by Flavio Queiroz | CTI Flash Insights | Medium

- ntopng: Network traffic monitor

• ntopng – ntop
• YT: NTopNG - A Free, Open Source, Self Hosted, Network Monitoring and Analysis Tool. - YouTube

- ImHex: Hex Editor

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM

• GitHub: https://github.com/WerWolv/ImHex/ 

- OSSIEM

Open Source SIEM Stack, Wazuh + Graylog + Velociraptor + Copilot

• GitHub: https://github.com/socfortress/OSSIEM 

- Scanner

• RustScan : The Modern Port Scanner
• Vuls : Agentless Vulnerability Scanner for Linux/FreeBSD
  • GitHub: https://github.com/future-architect/vuls
  • Vuls: A Free, Open Source Vulnerability Scanner for Linux - The New Stack

- Fishing Test

• pfish - 轻量级的无害化钓鱼

- CISO Assistant

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management

• GitHub: https://github.com/intuitem/ciso-assistant-community 

AI Cybersecurity

• [pyimagesearch] Build a Network Intrusion Detection System with Variational Autoencoders

Security Jobs

Interview

• This blog offers lots of helpful tips, information, and practice scenarios on preparing for technical interviews in the cybersecurity field.