https://pentestinglab.es/

https://pentestinglab.es/txus/

txuswashere/Gamaker

Ciberataques en tiempo real

• https://cybermap.kaspersky.com/es
• https://www.fireeye.com/cyber-map/threat-map.html
• https://threatmap.checkpoint.com/ThreatPortal/livemap.html
• https://threatmap.fortiguard.com/
• https://sicherheitstacho.eu/start/main
• https://www.digitalattackmap.com/

Brigadas de Investigación Tecnológica

• https://www.ertzaintza.eus/
• BIT https://www.policia.es/org_central/judicial/udef/bit_quienes_somos.html
• https://www.europol.europa.eu/
• https://www.interpol.int/
• https://www.fbi.gov/wanted/cyber

Menores en internet

• Internet Segura for Kids https://www.is4k.es
• Fundación ANAR - Ayuda a Niños y Adolescentes en Riesgo https://www.anar.org/
• Pantallas Amigas https://www.pantallasamigas.net/
• http://besmartonline.org.mt/

Oficina de Seguridad del Internauta

• https://www.osi.es/es
• https://stopviolenciadegenerodigital.com/

Derecho al olvido

• https://www.google.com/webmasters/tools/legal-removal-request?complaint_type=rtbf

Políticas de seguridad

• https://www.incibe.es/protege-tu-empresa/herramientas/politicas
• https://www.incibe.es/protege-tu-empresa/kit-concienciacion
• https://www.incibe.es/protege-tu-empresa/guias
• https://www.incibe.es/protege-tu-empresa/formacion
• https://www.incibe.es/protege-tu-empresa/que-te-interesa/plan-director-seguridad
• https://www.incibe.es/protege-tu-empresa/herramientas/servicio-antibotnet

Soluciones para PYME

• Linux Small Business Server https://zentyal.com/
• http://www.openldap.org/
• Cobian Backup https://www.cobiansoft.com
• https://www.baculasystems.com/
• https://www.bacula.org/git/cgit.cgi/bacula/
• http://git.bacula.org/bacula.git
• https://www.bacula-web.org/
• FreeNAS https://www.freenas.org
• Openfiler https://www.openfiler.com/
• https://www.virustotal.com/
• https://www.tofinosecurity.com
• https://snort.org/
• https://suricata-ids.org/
• https://archive.codeplex.com/?p=veracrypt
• https://play.google.com/store/apps/details?id=com.codexapps.andrognito
• https://cryptomator.org/
• https://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software
• https://ssd.eff.org/en/module-categories/tool-guides

OSINT

• https://osintframework.com/
• jivoi/awesome-osint
• Ph055a/awesome_osint
• https://whois.icann.org/es
• http://www.dominios.es/dominios/
• https://dnsdumpster.com/
• https://www.ripe.net/
• https://www.shodan.io/
• http://www.ipvoid.com/ip-blacklist-check/
• http://www.ipspamlist.com/ip-lookup/
• https://www.abuseat.org/lookup.cgi
• leebaird/discover
• laramies/theHarvester
• aboul3la/Sublist3r
• vesche/scanless
• 1N3/Sn1per
• ElevenPaths/FOCA

Vulnerabilidades

• https://cve.mitre.org/
• https://www.cvedetails.com/
• https://nvd.nist.gov/
• https://www.first.org/cvss/
• https://www.first.org/cvss/specification-document
• https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools
• https://www.securityfocus.com/
• https://www.certsi.es/suscripciones
• https://thehackernews.com/
• https://nvd.nist.gov/
• https://www.securityfocus.com/bid

Auditorías

• http://www.isecom.org/research/
• http://www.oissg.org/issaf.html
• http://www.pentest-standard.org/
• https://www.owasp.org/index.php/The_OWASP_Testing_Framework
• https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project
• https://www.owasp.org/images/5/5e/OWASP-Top-10-2017-es.pdf
• https://www.tenable.com/downloads/nessus
• http://www.openvas.org/
• https://nmap.org/
• robertdavidgraham/masscan
• ElevenPaths/EvilFOCA
• https://www.wireshark.org/
• http://www.hping.org/
• https://scapy.net/
• troglobit/nemesis
• https://www.ettercap-project.org/
• https://www.bettercap.org/
• bettercap/bettercap
• https://www.tcpdump.org/
• http://netcat.sourceforge.net/
• https://www.ccn-cert.cni.es/herramientas-ciberseguridad/clara.html
• https://cisofy.com/lynis/
• CISOfy/lynis
• rebootuser/LinEnum
• https://www.owasp.org/index.php/Category:Attack

Ingeniería Social

• trustedsec/social-engineer-toolkit
• v2-dev/awesome-social-engineering
• https://www.social-engineer.org/framework/general-discussion/

Laboratorios

• https://www.enisa.europa.eu/topics/trainings-for-cybersecurity-specialists/online-training-material/technical-operational
• https://www.kali.org/
• https://www.offensive-security.com/
• https://kali.training/
• https://kali.training/downloads/Kali-Linux-Revealed-1st-edition.pdf
• https://tools.kali.org/
• https://www.parrotsec.org/
• https://backbox.org/
• https://www.blackarch.org/
• https://blackarch.org/tools.html
• https://labs.fedoraproject.org/en/security/
• https://www.pentoo.ch/
• https://metasploit.help.rapid7.com/docs/metasploitable-2
• rapid7/metasploitable3
• http://www.dvwa.co.uk/
• https://developer.microsoft.com/es-es/windows/downloads/virtual-machines
• https://www.owasp.org/index.php/OWASP_Damn_Vulnerable_Web_Sockets_(DVWS)
• interference-security/DVWS
• WebGoat/WebGoat
• https://www.owasp.org/index.php/OWASP_Juice_Shop_Project
• bkimminich/juice-shop
• OWASP/NodeGoat
• https://railsgoat.cktricky.com/index.html
• http://opensecuritytraining.info/Training.html
• https://www.vulnhub.com/
• https://www.osboxes.org/
• https://www.hackthebox.eu/

Intrusión

• GHDB https://www.exploit-db.com/google-hacking-database/
• Exploit-DB https://www.exploit-db.com/
• https://sploitus.com/
• https://www.metasploit.com/
• https://www.offensive-security.com/metasploit-unleashed/
• http://fastandeasyhacking.com/
• http://exploitpack.com/
• juansacco/exploitpack
• Manisso/fsociety
• GDSSecurity/Windows-Exploit-Suggester
• InteliSecureLabs/Linux_Exploit_Suggester
• SecWiki/windows-kernel-exploits
• lucyoa/kernel-exploits
• threat9/routersploit
• http://routerpasswords.com/
• https://beefproject.com/
• gentilkiwi/mimikatz
• Cn33liz/p0wnedShell
• fdiskyou/PowerOPS
• https://github.com/PowerShellMafia/PowerSploit/
• FuzzySecurity/PSKernel-Primitives
• n1nj4sec/pupy
• trimstray/awesome-ninja-admins
• adon90/pentest_compilation
• coreb1t/awesome-pentest-cheat-sheets
• enaqx/awesome-pentest

Contraseñas

• https://haveibeenpwned.com/
• https://www.openwall.com/john/
• https://tools.kali.org/password-attacks/john
• vanhauser-thc/thc-hydra
• http://www.oxid.it/cain.html
• https://github.com/danielmiessler/SecLists/tree/master/Passwords
• duyetdev/bruteforce-database

Wireless

• 0x90/wifi-arsenal
• https://www.aircrack-ng.org/
• aircrack-ng/aircrack-ng
• https://kismetwireless.net/
• https://www.krackattacks.com/
• vanhoefm/krackattacks-scripts
• https://tools.kali.org/wireless-attacks/reaver
• FluxionNetwork/fluxion
• derv82/wifite2

Aplicaciones Web

• http://www.pentest-standard.org/
• https://www.owasp.org/index.php/OWASP_OWTF
• owtf/owtf
• https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
• https://github.com/zaproxy/zaproxy/wiki/Downloads
• trustedsec/ptf
• https://portswigger.net/burp/
• https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/
• https://cirt.net/nikto2
• sullo/nikto
• http://w3af.org/
• andresriancho/w3af
• http://www.commixproject.com/
• http://sqlmap.org/
• codingo/NoSQLMap
• http://sqlninja.sourceforge.net/
• http://www.guardicore.com/infectionmonkey/
• guardicore/monkey
• http://www.arachni-scanner.com/
• theInfectedDrake/TIDoS-Framework
• infoslack/awesome-web-hacking

Nubes

• https://www.ovh.es/

IaaS

• https://aws.amazon.com/s3/
• https://aws.amazon.com/es/ec2
• https://cloud.google.com/compute/

PaaS

• https://cloud.google.com/appengine/docs/
• https://azure.microsoft.com/es-es/overview/azure-stack/

SaaS

• https://www.dropbox.com
• https://www.box.com
• https://gsuite.google.com/

Forense de sistemas

• http://www.forensicswiki.org/wiki/Main_Page
• https://digital-forensics.sans.org/community/downloads
• https://digital-forensics.sans.org/community/cheat-sheets
• https://www.caine-live.net/
• http://www.deftlinux.net/
• https://www.sleuthkit.org/autopsy/
• https://cuckoosandbox.org/
• https://github.com/cuckoosandbox
• http://www.rekall-forensic.com/
• https://www.volatilityfoundation.org/
• Cugu/awesome-forensics
• rshipp/awesome-malware-analysis
• caesar0301/awesome-pcaptools
• USArmyResearchLab/Dshell
• gamelinux/passivedns

Smartphone

• https://mobilesecuritywiki.com/
• https://github.com/secmobi/wiki.secmobi.com
• https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Top_10_Mobile_Risks
• https://www.owasp.org/index.php/OWASP_Mobile_Security_Testing_Guide
• https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=M-Tools
• https://www.opensignal.com
• sh4hin/Androl4b
• https://santoku-linux.com/
• payatu/diva-android
• http://damnvulnerableiosapp.com/
• prateek147/DVIA-v2
• ashishb/android-security-awesome
• sundaysec/Android-Exploits
• ashishb/osx-and-ios-security-awesome
• https://apkpure.com/es/
• https://ibotpeaches.github.io/Apktool/
• iBotPeaches/Apktool
• http://jd.benow.ca/
• MobSF/Mobile-Security-Framework-MobSF
• pjlantz/droidbox
• https://hackmag.com/uncategorized/droidbox-for-dynamic-malware-analysis/
• https://dpnishant.github.io/appmon/
• https://www.radare.org/
• radare/radare2
• https://github.com/androguard/androguard/

Honeypot

• https://bruteforcelab.com/honeydrive
• https://honeynet.org/project
• https://threatstream.github.io/mhn/
• threatstream/mhn
• foospidy/HoneyPy
• mushorg/conpot
• paralax/awesome-honeypots

SOC

• wazuh/wazuh
• https://wazuh.com/
• https://documentation.wazuh.com/
• https://blog.wazuh.com/
• https://documentation.wazuh.com/current/getting-started/index.html
• OSSEC HIDS http://ossec.github.io/
• OpenSCAP https://www.open-scap.org/
• Elastic Stack https://www.elastic.co/
• https://www.elastic.co/products/beats/filebeat
• https://www.elastic.co/guide/en/beats/filebeat/current/index.html
• https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html
• https://github.com/elastic/beats/tree/master/filebeat
• ElasticSearch https://www.elastic.co/products/elasticsearch
• Logstash https://www.elastic.co/products/logstash
• Kibana https://www.elastic.co/products/kibana
• https://www.elastic.co/guide/en/kibana/current/index.html
• Beats: https://www.elastic.co/fr/products/beats
• X-Pack: https://www.elastic.co/products/x-pack
• https://www.elastic.co/guide/en/elasticsearch/reference/current/index.html
• https://documentation.wazuh.com/current/installation-guide/index.html
• https://www.elastic.co/guide/en/logstash/current/index.html
• https://www.elastic.co/guide/en/elasticsearch/reference/current/index.html
• https://www.elastic.co/guide/en/kibana/current/index.html
• https://documentation.wazuh.com/current/user-manual/index.html
• http://ossec.github.io/docs/
• https://logz.io/learn/complete-guide-elk-stack/
• http://www.ossec.net/
• ossec/ossec-hids
• http://www.ossec.net/blog.html
• http://www.ossec.net/docs/
• http://www.ossec.net/downloads.html
• https://atomicorp.com/atomic-secured-ossec/
• wazuh/ossec-rules
• https://documentation.wazuh.com/3.x/deploying-with-ansible/roles/wazuh-agent.html
• https://documentation.wazuh.com/3.x/installation-guide/installing-wazuh-agent/wazuh_agent_windows.html
• https://documentation.wazuh.com/3.x/user-manual/registering/index.html
• https://documentation.wazuh.com/3.x/deploying-with-ansible/reference.html#wazuh-ansible-reference-agent
• https://documentation.wazuh.com/3.x/installation-guide/packages-list/index.html
• https://documentation.wazuh.com/3.x/user-manual/capabilities/command-monitoring/command-configuration.html
• https://documentation.wazuh.com/3.x/installation-guide/installing-wazuh-agent/index.html
• https://documentation.wazuh.com/3.x/installation-guide/packages-list/index.html
• https://blog.wazuh.com/monitoring-usb-drives-in-windows-using-wazuh/

SIEM

• https://securityonion.net/
• https://github.com/Security-Onion-Solutions/security-onion/wiki
• https://blog.securityonion.net/
• https://www.alienvault.com/products/ossim
• http://spain.emc.com/security/security-analytics/security-analytics.htm
• http://www8.hp.com/es/es/software-solutions/arcsight-esm-enterprise-security-management/
• https://www.ibm.com/es-es/marketplace/ibm-qradar-siem
• https://es.logrhythm.com/products/threat-lifecycle-management-platform/
• https://es.logrhythm.com/
• https://www.mcafee.com/es/products/enterprise-security-manager.aspx
• https://www.solarwinds.com/es/siem-security-information-event-management-software
• https://www.solarwinds.com/es/log-event-manager-software
• https://www.splunk.com/en_us/software/enterprise-security.html
• https://www.splunk.com/es_es/products/splunk-enterprise.html
• https://www.s21sec.com/es/lookwise-enterprise-manager/
• https://www.graylog.org/
• http://loganalyzer.adiscon.com/
• https://rancher.com/
• rancher/rancher
• https://www.rabbitmq.com/
• rabbitmq/rabbitmq-tutorials
• https://dradisframework.com/ce/
• https://dradisframework.com/ce/documentation/
• dradis/dradis-ce
• https://www.open-audit.org/
• Opmantek/open-audit
• https://community.opmantek.com/display/OA/Home
• https://www.skedler.com/
• https://www.skedler.com/documentation/
• https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld
• PaloAltoNetworks/minemeld
• https://github.com/PaloAltoNetworks/minemeld/wiki
• https://grafana.com/
• grafana/grafana
• https://siemonster.com/
• https://kb.siemonster.com/help/get-started-with-knowledgeowl
• https://kb.siemonster.com/help/siemonster-v3-virtual-machine-build-guide
• https://dyzz9obi78pm5.cloudfront.net/app/image/id/5a6d75cd8e121c965f7a7a8c/n/siemonster-v3-vm-build-guide-v18.pdf
• https://kb.siemonster.com/help/siemonster-operations-guide
• https://dyzz9obi78pm5.cloudfront.net/app/image/id/5a5c82378e121c3358a273cf/n/siemonster-v3-operations-guide-v11.pdf
• https://kb.siemonster.com/help/siemonster-high-level-design
• https://dyzz9obi78pm5.cloudfront.net/app/image/id/5a5bfa2d6e121cc31ab45a9d/n/siemonster-v3-high-level-design-v14.pdf