Sysadmin > SecurityAndPentests
Security
- "A designer knows he has achieved perfection not when there is nothing left to add, but when there is nothing left to take away."
- Antoine de Saint-Exupery
- ”Security ist Nachdenken über Verantwortung, Risiko und Kosten. Dieses Nachdenken kann einem niemand abnehmen.”
- Stephan Pietzko
- SimpleSecurityManifesto
- ITSecurityInaNutshell
- SecurityFrameworksMerged
- RisikoAnalyse
- RisikoLifeCycle
- IsMS
- PkI
- StartWithAPolicy (i.e. trust model) — If you have no security policy, you have no security
- SecurityModels
- NIST Cybersecurity Framework
- Top10SecurityTools
- LookAtYourLogs
- SolarisTelnetExploit
- NessusSignPlugin
- nmap — A light but powerful network scanner
- metasploit
- PlotHydraLogins
- PeakflowXPassword
- PeakflowXsshQuery
- ForensiC
- DDOS
- TOTP with YubiKey
- SMiME
- PGP
- TnftpVulnerability Checker
- SunCryptoAccelerator6000Board
- DefaultPasswords
- ssh
- Private VLAN
- ApacheSecurity
- SecurityBookmarks
- IsmsFrameworks
- SnowdenLinks
- PlayWithRandomNumbers
Local checks
- LinPEAS
- Linuxprivchecker.py
- unix-privesc-check
- vuls
- LES: Linux privilege escalation auditing tool
- Lynis
Best Practices
- Very short list of best practices from the US-CERT
you don't need much more.
