Halaman utama Jelajahi Bantuan
Daftar Masuk
pulitux
/
seguridad
1
0
Fork 0
Berkas Masalah 0 Permintaan Tarik 0 Wiki
Cabang: master
Ranting Tag
seguridad
/
3.- Extras
/
IncidentResponseTool-ACTUALIZADAMIA
/
Busqueda Vulnerabilidades

Busqueda Vulnerabilidades 1.9 KB
Permalink Riwayat Mentahan

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374 
  1. Lista:
    2. 

  2. 

  3. https://www.exploit-db.com/papers : Relacionado con las vulnerabilidades y como son explotadas por los ciberatacantes.
    4. 

  4. 

  5. Detectando un Movimiento lateral en SPLUNK: https://medium.com/threatpunter/detecting-lateral-movement-using-sysmon-and-splunk-318d3be141bc
    6. 

  6. 

  7. Burp Suite - Framework.
    8. 

  8. 

  9. 2. ZAP Proxy - Framework.
    10. 

  10. 

  11. 3. Dirsearch - HTTP bruteforcing.
    12. 

  12. 

  13. 4. Nmap - Port scanning.
    14. 

  14. 

  15. 5. Sublist3r - Subdomain discover
    16. 

  16. 

  17. 6. Amass - Subdomain discovery.
    18. 

  18. 

  19. 7. SQLmap - SQLi exploitation.
    20. 

  20. 

  21. 8. Metasploit - Framework.
    22. 

  22. 

  23. 9. WPscan - WordPress exploitation.
    24. 

  24. 

  25. 10. Nikto - Webserver scanning.
    26. 

  26. 

  27. 11. HTTPX - HTTP probing.
    28. 

  28. 

  29. 3. FFUF - HTTP probing.
    30. 

  30. 

  31. 14. Subfinder - Subdomain discovery.
    32. 

  32. 

  33. 15. Masscan - Mass IP and port scanner.
    34. 

  34. 

  35. 16. Lazy Recon - Subdomain discovery.
    36. 

  36. 

  37. 18. XSS Hunter - Blind XSS discovery.
    38. 

  38. 

  39. 19. Aquatone - HTTP based recon.
    40. 

  40. 

  41. 20. LinkFinder - Endpoint discovery through JS files
    42. 

  42. 

  43. 21. JS-Scan - Endpoint discovery through JS files
    44. 

  44. 

  45. 22 GAU - Historical attack surface mapping
    46. 

  46. 

  47. 23 Parameth - Bruteforce GET and POST parameters
    48. 

  48. 

  49. 24 truffleHog - Find credentials in GitHub commits
    50. 

  50. 

  51. Herameintas: uclei - YAML based template scanning.
    52. 

  52. 

  53. Feed de vulnerabilidades: https://inthewild.io/feed
    54. 

  54. 

  55. Identificación de brechas sobre Malawre o ransomware: https://www.binalyze.com/air  --- Busqueda proactiva: https://cybermeisam.medium.com/blue-team-system-live-analysis-part-1-a-proactive-hunt-8258feb7cb14
    56. 

  56. 

  57. Detectar vulnerabilidades en Linux: https://betterprogramming.pub/3-tools-to-detect-linux-vulnerabilities-ec42122cc41b
    58. 

  58. 

  59. Catalogo de Vulnerabilidades Explotadas: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
    60. 

  60. 

  61. Validación en el sistema: ((https://medium.com/@wondersome/reconnaissance-tools-for-hacking-d8404399d1f5))
    62. 

  62. 

  63. -----https://github.com/projectdiscovery/chaos-client
    64. 

  64. -----https://github.com/aboul3la/Sublist3r : Enlistar servicios para explotar
    65. 

  65. 

  66. 

  67. Tacticas blueTeam:
    68. 

  68. 

  69. 

  70. ----https://www.kitploit.com/search/label/PowerShell
    71. 

  71. 

  72. 

  73. 

  74.