Introducing the Cyber Cache!

Rick Butler said:

So I've been talking about setting this up for a while, so I finally got it started.

The Cyber Cache is a CIN Resource where you can find things for your courses that are CySA / PenTest related. Of course, even I can't come up with a completely exhaustive list, so if you have something that didn't make the list, DM the link(s) over to me and I'll add it to the list. Every once in a while, I'll curate the list to make sure links don't end up broken. But the idea is for us to have a neat place to put this kind of stuff.

Eventually, we might do one of these Caches for different things for each exam. But for the moment, I wanted to start with this.

Since a lot of this came from Teresa Nash's CySA TTT, she gets the first shoutout.

So, let's get this built up!

/r

Click to expand...

Lee McWhorter said:

Here's a few additions I like.

Vulnerable VMs and CTFs
Vulnhub: https://www.vulnhub.com/
Metasploitable 2: https://docs.rapid7.com/metasploit/metasploitable-2/
Metasploitable 3: https://github.com/rapid7/metasploitable3

Software:
VirtualBox: https://www.virtualbox.org/
GNS3: https://www.gns3.com/

My Docker images for use in GNS3: https://hub.docker.com/u/tleemcjr

Lee

Click to expand...

Hod Berman said:

Thank you Rick B. Amazing list and resource. I look forward to my CC Espresso, Fedora Latte and a Server+ Calzone.

Click to expand...

Jarrel said:

Here are a few other resources:

ISAC

MEMBER ISACS | natlcouncilofisacs

www.nationalisacs.org

CISA

Home Page | CISA

us-cert.cisa.gov

Alienvault (threat intelligence)

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

otx.alienvault.com

MISP (Open source Threat Intelligence)

MISP Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing

MISP Threat Intelligence & Sharing

misp-project.org

Whois Lookup (DNS lookup)

Whois Lookup, Domain Availability & IP Search - DomainTools

Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.

whois.domaintools.com

Robtex (DNS lookup)

Welcome to Robtex!

www.robtex.com

ThreatCrowd (Threat - DNS lookup)

Threat Crowd | Threatcrowd.org Open Source Threat Intelligence

threatcrowd.org

Virustotal (malware analysis)

VirusTotal

VirusTotal

www.virustotal.com

Hybrid Analysis (malware analysis)

Free Automated Malware Analysis Service - powered by Falcon Sandbox

Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.

hybrid-analysis.com

CrackStation (Hash cracking)

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.

Crackstation is the most effective hash cracking service. We crack: MD5, SHA1, SHA2, WPA, and much more...

crackstation.net

GTFO Bins (for security bypass)

GTFOBins

gtfobins.github.io

Payloads All The Things (various payloads)

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

github.com

Click to expand...

Tess Sluijter said:

For people who would like to practice and learn individual vulnerabilities in web apps, instead of tackling a whole DVWA or JuiceShop, there's SKF Labs.

-> https://github.com/blabla1337/skf-labs

Every vulnerability on that list has its own, dedicated Docker container for practice. Plus a walkthrough.

Click to expand...