Alati

Abuse.ch - a collection of malware and threat intelligence feeds.
Ahmia - search engine for hidden services on the Tor network
AI Generated Photos - 100.000 AI generated faces.
Aperisolve - all in one steganography analysis
Archive.org - internet Archieve
ASCII Converter - Hex, decimal, binary, base64, and ASCII converter
Assembly Tutorials - assembly tutorials
Base64 Decodr/Encoder - base64 decoder/encoder
Bcrypt Generator - a simple bcrypt generator
Bug Bounty - a list of bug bounty programs
Can I use - provides up-to-date browser support tables for support of front-end web technologies.
Censys - search engine for internet connected devices
Cheatography - over 3,000 free cheat sheets, revision aids and quick references.
CodeBeautify - code Beautifier, Viewer and converter
Common ports - a lists of the most common ports
Cipher Identifier - cipher identifier
Convert Binary - a wide range of different converters for binary numbers
Convertcsv - convert SQL to CSV
Crackstation (Rainbow tables) - hash cracker
CSS Reference - CSS reference
CVECrowd - a platform for sharing and discussing cybersecurity vulnerabilities.
CVE Details - CVE security vulnerability advanced database.
CVE Mitre - list of publicly known cybersecurity vulnerabilities.
CVS - Scoring System Calculator
CyberChef - a web app for encryption, encoding, compression and data analysis.
Cybercrime Tracker - monitors and tracks various malware families that are used to perpetrate cyber crimes.
crt.sh - Certificate Transparency Log Search Engine for subdomain enumeration.
CTF 101 - learn the different CTF topics in cybersecurity
CTF Cryptography - ctf cryptography for beginners
dCode - dcode.fr has many decoders for a lot of ciphers
dehashed - is a hacked database search engine.
Diff Checker - compare images
DNSDumpster - free domain research tool that can discover hosts related to a domain
DogBolt - decompiler explorer
EmailHippo - a free email verification tool.
Explain Shell - a tool to help you understand shell commands.
ExploitDB - searchable archive from The Exploit Database.
fakenamegenerator - your randomly generated identity.
Feodo Tracker - a project by abuse.ch tracking the C2 infrastructure of the Feodo Tracker Botnet.
File Signature - a table of file signatures (aka "magic numbers")
File Signature Wiki - another list of file signatures (aka "magic numbers")
Forensically - a tool to analyze images.
Godbolt - compiler explorer
Google advanced search - google dorking made easy
Google Hacking Database - juicy information found by dorking
GTFOBins - list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.
HackerOne - HackerOne is a vulnerability coordination and bug bounty platform.
Hacking Glossary - a glossary of hacking terms made by HackTheBox.
Hash Analyzer - tool to identify hash types
Hash Identifier - hash identifier using CyberChef
have i been pwned? - check if you have an account that has been compromised in a data breach.
HexEd - HexEd is a powerful online hex editor running in your web browser
hilite.me - converts your code snippets into pretty-printed HTML formats
HSV to RGB - HSV to RGB color converter
HTML Reference - HTML reference
HTTrack - website copier
Hunter.io - find email addresses in seconds.
Image Color Picker - select a color and get the HTML Color Code of this pixel
Intelix - Search Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more.
JoomScan - Joomla Vulnerability Scanner
k8s-security - kubernetes security notes and best practices.
Kali Linux Tutorials - Kali Linux Tutorials
Keybase - it's open source and powered by public-key cryptography.
LFI - learn about local file inclusion
Linux Commands - a list of linux commands
malc0de - malware search engine.
Malware Bazaar - malware search engine.
MD5 Online - md5Online offers several tools related to the MD5 cryptographic algorithm.
Morse Code Translator a morse code translator
Morse Code Adaptive Audio Decoder - a morse code adaptive audio decoder
Morse Code Audio Decoder - a morse code audio decoder
Morse Code Sound & Vibration Listener - a morse code sound & vibration listener
Namechk - check if your desired username is available on over 500 social networks (username OSINT).
NerdyData - the search engine for source code
ntlm.pw - NTLM password cracker
Observatory by Mozilla- set of tools to analyze your website.
Office Recovery - repair corrupt JPEG, PNG, GIF, BMP, TIFF, and RAW images.
PDF24 - free and easy to use online PDF tools
Phishtool - PhishTool is a free phishing simulation tool.
NPiet - Piet is an esoteric programming language based of using colored pixels to represent commands.
Ping.eu - online Ping, Traceroute, DNS lookup, WHOIS and others.
pipl - is the place to find the person behind the email address, social username or phone number.
Pixrecovery - repair corrupt JPEG, PNG, GIF, BMP, TIFF, and RAW images.
Rapid7 - vulnerability and exploit database.
Regex101 - online regex tester and debugger: PHP, PCRE, Python, Golang and JavaScript.
RegEx Pal - online regex testing tool + other tools.
RegExr - online tool to learn, build, & test Regular Expressions (RegEx / RegExp).
Revshell - reverse shell generator.
RequestBin - RequestBin gives you a URL that collects requests so you can inspect them in a human-friendly way
RGBA Color Picker - an RGBA color picker
ShellCheck - finds bugs in your shell scripts.
Shodan - learn various pieces of information about the client’s network, without actively connecting to it.
sploitus - the exploit and tools database.
SRI Hash Generator - Subresource Integrity (SRI) Hash Generator
SSL Scanner - analyze website security.
SSL Scan - sslscan tests SSL/TLS enabled services to discover supported cipher suites
Steganographic Decoder - decodes the payload that was hidden in a JPEG image or a WAV or AU audio file
Stego Tricks - learn stego tricks
Subnet Calculator - IPv4 to IPv6 subnet calculator
Subnet Cheatsheet - subnet cheatsheet
SSL Blacklist - a free SSL blacklist that can be used to detect malicious SSL certificates.
Tabulate - create clean looking tables
Talos Intelligence - threat intelligence from Cisco.
Threat Fox - a resource for sharing indicators of compromise (IOCs).
TIO - TIO is a free online interpreter, compiler and REPL.
URL Haus - a project by abuse.ch to collect and classify malicious URLs.
urlscan.io - service to scan and analyse websites.
urlvoid - this service helps you detect potentially malicious websites.
User-Agent Switcher switch and manage user agents
Vega - web security scanner and web security testing platform
ViewDNS - one source for free DNS related tools and information.
VirusTotal - analyze suspicious files and URLs to detect types of malware.
Visual Subnet Calculator - a visual subnet calculator
WebToolHub-LE - HTML hyperlink extractor
WebToolHub - lots of different web tools
WhatsMyName - social media username enumeration
WHOIS lookup - best whois lookup
Wigle - is a website for collecting information about the different wireless hotspots around the world
WPScan - WordPress security scanner


CTF platforme

TryHackMe - TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs.
HackTheBox - HackTheBox is a massive, online cybersecurity practical training platform.
CTFLearn - An online platform built to help ethical hackers learn, practice, and compete.
Challenges - Reverse engineering CTF training platform
Cryptohack - Cryptography learning platform.
Root Me - Root Me is a platform for everyone to test and improve knowledge in computer security and hacking.
ROP Emperium - ROP Emporium is a series of challenges based around Return Oriented Programming (ROP).
pico CTF - picoCTF is a free computer security game targeted at middle and high school students.


Knjige

Penetration Testing
Linux Basics for Hackers
The Linux Command Line and Shell Scripting Bible
Black Hat Python
The Hacker PlayBook 2 & 3
Hacker Methodology Handbook
Gray Hat Hacking
Red Team Field Manual
Metasploit
The Web Application Hacker’s Handbook
Real-World Bug Hunting
Attacking Network Protocols

Quote:Zahvaljujući razvoju veštačke inteligencije (AI) i lakom pristupu ogromnim količinama podataka, pametni sistemi će pomoći, a ponekad i zameniti ljude u upravljanju rizikom od prevara. U hiperpovezanom okruženju, preduzeća će primeniti sveobuhvatne kontrole za praćenje i upravljanje rizikom u realnom vremenu u svojim poslovnim modelima, proizvodima i uslugama. Nauka o ponašanju će omogućiti da se bolje razumeju rizična ponašanja, efikasnije sprovodi prevencija i upravlja rizicima od prevara.

Quote:Čitav taj jedan digitalni svet, sa kojim smo se mi upoznali još ranije i koji bar donekle razumemo, za mališane predstavlja jednu potpuno neistraženu teritoriju. I upravo zato, edukaciju o online prostoru, pre svega o njegovim prednostima pa i manama, treba započeti još od malih nogu.

Za to su potrebne dve stvari – savesni roditelji svesni pretnji koje bi mogle da dođu sa interneta ali i edukativni alati koji bi mogli da im pomognu da svoju decu na vreme pripreme za pravilno i bezbedno korišćenje interneta. Upravo u tome im može pomoći nova knjiga Aleksandre Petrovski pod nazivom “Potraga za moćnom značkom Mrežoslav” o kojoj nam je ona govorila u intervjuu koji sledi.

Sa snimka koji sam video ovde na X-u https://x.com/zarkobns/status/1863868103085507014

Je primećena šifra za Guest mrežu nalepljena na vrata:

   

Navodno prema nekome ko mi je odgovorio na X-u ova šifra je takva još od 2017. godine kada je i postavljena.

Nije sad nešto preterano strašno jer je ipak Guest mreža u pitanju, ali ipak je loša praksa.

Quote:Društvenim mrežama kruži prevara u kojoj se korisnicima u zavisnosti od broja godina, nudi vaučer od 20.000 dinara za kupovinu u Maxiju. Link ove ponude odvešće vas na sajt advicebox.store gde treba da odigrate igru pogađanja – u kom paketu se nalazi poklon-vaučer. I pogađate, uvek dobijate!


Iz kompanije Delez Srbija, upozoravaju građane da se radi o prevari i ističu da kompanija nije organizator nagradne igre koja kruži društvenim mrežama.

Svi nagradni konkursi i nagradne igre koje organizuje kompanija Delez Srbija objavljuju se isključivo putem zvaničnih stranica www.maxi.rs i www.megamaxi.rs, kao i preko zvaničnih kanala brendova na društvenim mrežama, poručuju iz Delez Srbija.
Prema komentarima na društvenim mrežama, mnogi korisnici naseli su na ponudu, pa su unosili i brojeve računa i uplaćivali traženi simbolični iznos od 235 dinara.

Quote:Narodna banka Srbije upozorava građane i druge korisnike finansijskih usluga na porast pokušaja prevare putem elektronske pošte korišćenjem tehnike email spoofing. Naime, lica koja pokušavaju da izvrše prevare i time pribave sebi protivpravnu imovinsku korist falsifikuju imejl-adresu ili druge podatke o identitetu pošiljaoca elektronske pošte, tako da primaocima deluje da dobijaju elektronsku poštu sa zvanične adrese Narodne banke Srbije, dok je u stvarnosti reč o lažnim adresama.

U tom kontekstu, Narodna banka Srbije napominje da se nijedna zvanična komunikacija s građanima, bilo putem elektronske pošte ili drugih kanala za komunikaciju, ne koristi za traženje ličnih i osetljivih finansijskih podataka kao što su podaci o bankovnim računima, PIN-ovi ili druge poverljive finansijske ili lične informacije korisnika finansijskih usluga. Narodna banka Srbije ne učestvuje u neposrednom obavljanju plaćanja za potrebe korisnika finansijskih usluga i, u tom smislu, nikada vam se neće obratiti kako bi izvršila određeno plaćanje prema vama ili nekom drugom licu.
 
Apelujemo na korisnike da, ako primete elektronsku poštu koja izgleda kao da dolazi od Narodne banke Srbije, ali sadrži sumnjive linkove ili zahteve za dostavljanje ličnih podataka – ne otvaraju linkove i ne dostavljaju svoje poverljive lične i druge podatke nepoznatim licima. Ako ste u bilo kakvoj sumnji u vezi s takvom primljenom poštom, obratite se Narodnoj banci Srbije putem zvaničnih kanala komunikacije za potvrdu informacija. Za poslovne korisnike preporuka je da se za proveru verodostojnosti takvih imejlova obrate svojoj IT podršci ili osobama zaduženim za sajber bezbednost u njihovoj organizaciji.

Quote:Selling control panel access to a multinational environmental consulting company,
Includes the following: kubernetes clusters, Gitlab access,
Multiple source code projects, and an argo-cd instance.
There may be more as we haven't listed them all.
The company will be disclosed after purchase.
They have offices in three countries: Canada, Indonesia, Bosnia.

Quote:Nezakonita i neprofesionalna postupanja BIA ne iznenađuju jer je Agencija u prethodnih 12 godina vladavine SNS-a u potpunosti organizaciono, finansijski, kadrovski i ideološki upodobljena za ovakve akcije