Security resources and readings

Readings

• The Cuckoo's Egg
• Sandworm
• Countdown to Zero Day
• Intelligence-Driven Incident Response

Podcasts

• Malicious Life
• The CyberWire
• Smashing Security
• Darknet Diaries

Introductions

• Decent Security
• OWASP Top 10
• Introduction to Web Application Security

Intermediate

• Tufts: Defense Against The Dark Arts
• Damn Vulnerable Web Application
• VulnWeb - vulnerable PHP and all other stacks
• PCAP analysis
• CWE/SANS Top 25
• OWASP Cheat Sheet Series
• Crypto 101

Advanced

🤔

CTF

• picoCTF (beginner)
• OverTheWire
• Practice CTF List

Resources

• CTF Field Guide
• PayloadsAllTheThings

Useful tools

• CyberChef
• VirusTotal
• DomainTools Whois
• Pulsedive
• ThreatMiner
• ANY.RUN

ATT&CK

• Overview & Dashboard
• Pyramid of Pain

List of lists

• Awesome Forensics
• Awesome Malware Analysis
• Infosec Reference
• Awesome Web Security
• ThreatHunting Reading List
• Incident Response cheatsheet