Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: An Introduction To Security

An Introduction To Security 13 years 2 months ago #803

  • sahirh
  • sahirh's Avatar
  • Offline
  • Honored Member
  • Posts: 1700
  • Karma: 0
As security is my pet topic and the amount of traffic on the security and firewalls forum is slow at best, I thought I'd just post a few links for people who want an introduction to security in general :

-- General Information --

www.securityfocus.com - A very good site with all the latest news, a very good library and tools collection as well as sections dedicated to basics, intrusion detection, penetration testing etc. Also home of the Bugtraq mailing list.

www.sans.org - A site with excellent resources in its reading room, people who submit papers there are trying for a certification and as a result its mostly original material and of a very high calibre.

www.security-portal.com - A good general security site.

-- Vulnerability Lists --

www.cert.org - The CERT coordination center provides updates on the latest threats and how to deal with them. Also has very good best practice tips for admins.

www.securityfocus.com/archive/1 - This is the link to Bugtraq, the best full disclosure security mailing list on the net. Here all the latest vulnerabilities get discussed way before you see them being exploited or in the press. The guys here predicted blaster and slammer weeks before they hit the net.

www.insecure.org - The mailing lists section has copies of bugtraq, full disclosure, security-basics, security-news etc etc. Also the home of nMap

-- Penetration Testing --

www.insecure.org/nmap - The top port scanner / network mapper ever. Totally free, supports advanced scans such as SYN stealth scans, ACK, FIN scans, FTP bounce scans, totally anonymous idle scans etc. Now also includes version grabbing (tells you what server is listening on a port, eg IIS webserver). It also features OS detection, and can tell you what OS the target is running.

www.grc.com - For windows home users, the site is home to Shields Up, which can test your home connection for file sharing vulnerabilities, do a port scan etc, all online

www.eeye.com - Home of the Retina Security Scanner. Considered the industry leader.

www.nessus.org - Open source vulnerability scanner, and IMNSHO the best one going. If you're a tiger team penetration tester and you don't point nessus at a target, you're either really bad at your job or have a very large ego. If there's a vulnerability in a system, nessus will find it.

-- Prevention --

www.zonelabs.com - ZoneAlarm personal firewall for windows, considered the best, and also the market leader

www.sygate.com - Sygate Personal Firewall, provides more configuration options than ZoneAlarm, but is consequently harder to use.

-- Libraries --

www.secinf.net - Huge selection of articles basically windows security related. Blatantly sponsored by GFI, but what the heck :)

www.searchsecurity.com - A techtarget site which you should sign up for, very good info. Chris writes for searchnetworking.com its sister site.. I don't think the references could be much better.

-- Exploit websites --
Note : these are not your run of the mill 'how to get my girlfriends hotmail password' type sites. They contain advanced information and research

www.antioffline.com - A very good library section on buffer overflows etc

www.packetstormsecurity.nl - The largest selection of tools possible.



That should provide you with ample reading and testing material :)
Just remember that what can be used for a legitimate purpose can be used for devious purposes as well.. Don't be an idiot, I can gaurantee you that if you run around trying to break into other peoples networks you will be caught. Don't confuse 'cracking' with 'hacking', crackers are the scourge of the net.. and we should be grateful to hackers who point out holes in the software we use and ensure that the net ends up being safer for us.


Have Fun,

Sahir.
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
The administrator has disabled public write access.

Re: An Introduction To Security 13 years 1 month ago #951

  • paul
  • paul's Avatar
  • Offline
  • New Member
  • Posts: 2
  • Karma: 0
thanks
The administrator has disabled public write access.

Re: An Introduction To Security 13 years 1 month ago #955

  • sahirh
  • sahirh's Avatar
  • Offline
  • Honored Member
  • Posts: 1700
  • Karma: 0
Glad you found the links useful.
Let me know if you have any queries.


Cheers,
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
The administrator has disabled public write access.

Re: An Introduction To Security 13 years 1 month ago #1481

  • moose
  • moose's Avatar
  • Offline
  • New Member
  • Posts: 2
  • Karma: 0
Very useful information, Sahir.
The administrator has disabled public write access.

Re: An Introduction To Security 13 years 1 month ago #1492

  • sahirh
  • sahirh's Avatar
  • Offline
  • Honored Member
  • Posts: 1700
  • Karma: 0
Oh while I'm at it, let me plug my blog.. tftfotw.blogspot.com
Its highly opinionated, and full of interesting security information from all over the net.

And when I have a good day I put up one of my homegrown tools or scripts.


Glad the info helped you moose.
Sahir Hidayatullah.
Firewall.cx Staff - Associate Editor & Security Advisor
tftfotw.blogspot.com
The administrator has disabled public write access.

Quick Links ? 13 years 1 month ago #1613

  • naddyboy
  • naddyboy's Avatar
  • Offline
  • Frequent Member
  • Posts: 37
  • Karma: 0
Hi Sahir,

Do you have some quick links on Security and Tools exclusive to Microsoft operating systems ?

A list of MS-DOS commands for Windows 2000 ?

some good tools for port scanning ?

Thanx

Syed :D
The administrator has disabled public write access.
Time to create page: 0.089 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup