Introducing the Cyber Cache!

[Rick Butler]

So I've been talking about setting this up for a while, so I finally got it started.

The Cyber Cache is a CIN Resource where you can find things for your courses that are CySA / PenTest related. Of course, even I can't come up with a completely exhaustive list, so if you have something that didn't make the list, DM the link(s) over to me and I'll add it to the list. Every once in a while, I'll curate the list to make sure links don't end up broken. But the idea is for us to have a neat place to put this kind of stuff.

Eventually, we might do one of these Caches for different things for each exam. But for the moment, I wanted to start with this.

Since a lot of this came from Teresa Nash's CySA TTT, she gets the first shoutout.

So, let's get this built up!

/r

 

[Jarrel]

This is great. Thanks @Rick Butler !

 

[Rick Butler]

Glad to do it - it's been something I've been meaning to do

 

[Lee McWhorter]

Good stuff @Rick Butler!

 

[Rick Butler]

Good stuff @Rick Butler!

I'm hoping to get some additional submissions to fill that out. I'm quite sure there's got to be a bunch of stuff I don't have up there. /r

 

[Patrick Asamago]

So I've been talking about setting this up for a while, so I finally got it started.

The Cyber Cache is a CIN Resource where you can find things for your courses that are CySA / PenTest related. Of course, even I can't come up with a completely exhaustive list, so if you have something that didn't make the list, DM the link(s) over to me and I'll add it to the list. Every once in a while, I'll curate the list to make sure links don't end up broken. But the idea is for us to have a neat place to put this kind of stuff.

Eventually, we might do one of these Caches for different things for each exam. But for the moment, I wanted to start with this.

Since a lot of this came from Teresa Nash's CySA TTT, she gets the first shoutout.

So, let's get this built up!

/r

Thanks Rick for this

 

[Rod Oatis]

Thank you. This is a great list.

 

[Rick Butler]

Thank you. This is a great list.

Hope it comes in handy in your personal or in-class training!

 

[Hod Berman]

Thank you Rick B. Amazing list and resource. I look forward to my CC Espresso, Fedora Latte and a Server+ Calzone.

 

[Lee McWhorter]

Here's a few additions I like.

Vulnerable VMs and CTFs
Vulnhub: https://www.vulnhub.com/
Metasploitable 2: https://docs.rapid7.com/metasploit/metasploitable-2/
Metasploitable 3: https://github.com/rapid7/metasploitable3

Software:
VirtualBox: https://www.virtualbox.org/
GNS3: https://www.gns3.com/

My Docker images for use in GNS3: https://hub.docker.com/u/tleemcjr

Lee

 

[Hod Berman]

Here's a few additions I like.

Vulnerable VMs and CTFs
Vulnhub: https://www.vulnhub.com/
Metasploitable 2: https://docs.rapid7.com/metasploit/metasploitable-2/
Metasploitable 3: https://github.com/rapid7/metasploitable3

Software:
VirtualBox: https://www.virtualbox.org/
GNS3: https://www.gns3.com/

My Docker images for use in GNS3: https://hub.docker.com/u/tleemcjr

Lee

I tried to hit Like a few times.

 

[Hod Berman]

Thank you Rick B. Amazing list and resource. I look forward to my CC Espresso, Fedora Latte and a Server+ Calzone.

I totally thought it was Cyber Cafe.

 

[Rick Butler]

Here's a few additions I like.

Vulnerable VMs and CTFs
Vulnhub: https://www.vulnhub.com/
Metasploitable 2: https://docs.rapid7.com/metasploit/metasploitable-2/
Metasploitable 3: https://github.com/rapid7/metasploitable3

Software:
VirtualBox: https://www.virtualbox.org/
GNS3: https://www.gns3.com/

My Docker images for use in GNS3: https://hub.docker.com/u/tleemcjr

Lee

I was kinda wondering when you were gonna chime in, Lee. List has been updated with all your wonderful toys. Many thanks, my dude.

 

[Rick Butler]

Thank you Rick B. Amazing list and resource. I look forward to my CC Espresso, Fedora Latte and a Server+ Calzone.

Thanks for that, Hod! Hope you and yours are able to make use of it. And if you have any additions, get 'em over to me and I'll get them added. /r

 

[Jarrel]

Here are a few other resources:

ISAC

MEMBER ISACS | natlcouncilofisacs

www.nationalisacs.org

CISA

Home Page | CISA

us-cert.cisa.gov

Alienvault (threat intelligence)

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

otx.alienvault.com

MISP (Open source Threat Intelligence)

MISP Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing

MISP Threat Intelligence & Sharing

misp-project.org

Whois Lookup (DNS lookup)

Whois Lookup, Domain Availability & IP Search - DomainTools

Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.

whois.domaintools.com

Robtex (DNS lookup)

Welcome to Robtex!

www.robtex.com

ThreatCrowd (Threat - DNS lookup)

Threat Crowd | Threatcrowd.org Open Source Threat Intelligence

threatcrowd.org

Virustotal (malware analysis)

VirusTotal

VirusTotal

www.virustotal.com

Hybrid Analysis (malware analysis)

Free Automated Malware Analysis Service - powered by Falcon Sandbox

Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.

hybrid-analysis.com

CrackStation (Hash cracking)

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.

Crackstation is the most effective hash cracking service. We crack: MD5, SHA1, SHA2, WPA, and much more...

crackstation.net

GTFO Bins (for security bypass)

GTFOBins

gtfobins.github.io

Payloads All The Things (various payloads)

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

github.com

 

[Rick Butler]

Here are a few other resources:

ISAC

MEMBER ISACS | natlcouncilofisacs

www.nationalisacs.org

CISA

Home Page | CISA

us-cert.cisa.gov

Alienvault (threat intelligence)

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

otx.alienvault.com

MISP (Open source Threat Intelligence)

MISP Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing

MISP Threat Intelligence & Sharing

misp-project.org

Whois Lookup (DNS lookup)

Whois Lookup, Domain Availability & IP Search - DomainTools

Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.

whois.domaintools.com

Robtex (DNS lookup)

Welcome to Robtex!

www.robtex.com

ThreatCrowd (Threat - DNS lookup)

Threat Crowd | Threatcrowd.org Open Source Threat Intelligence

threatcrowd.org

Virustotal (malware analysis)

VirusTotal

VirusTotal

www.virustotal.com

Hybrid Analysis (malware analysis)

Free Automated Malware Analysis Service - powered by Falcon Sandbox

Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.

hybrid-analysis.com

CrackStation (Hash cracking)

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.

Crackstation is the most effective hash cracking service. We crack: MD5, SHA1, SHA2, WPA, and much more...

crackstation.net

GTFO Bins (for security bypass)

GTFOBins

gtfobins.github.io

Payloads All The Things (various payloads)

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

github.com

Added them. Thanks for that!

 

[NATUNA]

Good stuffs! Thank for all!

 

[Patrick Asamago]

Here are a few other resources:

ISAC

MEMBER ISACS | natlcouncilofisacs

www.nationalisacs.org

CISA

Home Page | CISA

us-cert.cisa.gov

Alienvault (threat intelligence)

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

otx.alienvault.com

MISP (Open source Threat Intelligence)

MISP Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing

MISP Threat Intelligence & Sharing

misp-project.org

Whois Lookup (DNS lookup)

Whois Lookup, Domain Availability & IP Search - DomainTools

Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.

whois.domaintools.com

Robtex (DNS lookup)

Welcome to Robtex!

www.robtex.com

ThreatCrowd (Threat - DNS lookup)

Threat Crowd | Threatcrowd.org Open Source Threat Intelligence

threatcrowd.org

Virustotal (malware analysis)

VirusTotal

VirusTotal

www.virustotal.com

Hybrid Analysis (malware analysis)

Free Automated Malware Analysis Service - powered by Falcon Sandbox

Submit malware for free analysis with Falcon Sandbox and Hybrid Analysis technology. Hybrid Analysis develops and licenses analysis tools to fight malware.

hybrid-analysis.com

CrackStation (Hash cracking)

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc.

Crackstation is the most effective hash cracking service. We crack: MD5, SHA1, SHA2, WPA, and much more...

crackstation.net

GTFO Bins (for security bypass)

GTFOBins

gtfobins.github.io

Payloads All The Things (various payloads)

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

github.com

Thank you

 

[Tess Sluijter]

For people who would like to practice and learn individual vulnerabilities in web apps, instead of tackling a whole DVWA or JuiceShop, there's SKF Labs.

-> https://github.com/blabla1337/skf-labs

Every vulnerability on that list has its own, dedicated Docker container for practice. Plus a walkthrough.

 

[Patrick Asamago]

For people who would like to practice and learn individual vulnerabilities in web apps, instead of tackling a whole DVWA or JuiceShop, there's SKF Labs.

-> https://github.com/blabla1337/skf-labs

Every vulnerability on that list has its own, dedicated Docker container for practice. Plus a walkthrough.

This is nice, Thank you