Favoris

Threat Intelligence

CVE - CVE https://cve.mitre.org/

Exploit-DB https://www.exploit-db.com/

NVD - Search and Statistics https://nvd.nist.gov/vuln/search

CERT-EU - Publications https://cert.europa.eu/publications

AbuseIPDB https://www.abuseipdb.com/

IoC Lookup - RST Cloud: Threat Intelligence Solutions https://www.rstcloud.com/ioc-lookup/

Have I Been Pwned https://haveibeenpwned.com/

Tools

No More Ransom https://www.nomoreransom.org/fr/index.html

GitHub - ius/rsatool: rsatool can be used to calculate RSA and RSA-CRT parameters https://github.com/ius/rsatool

GitHub - Ganapati/RsaCtfTool: RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data https://github.com/Ganapati/RsaCtfTool

FotoForensics https://www.fotoforensics.com/

CyberChef https://gchq.github.io/CyberChef/

Beeceptor - Zero Coding Rest API Mocking - Rest API Mock Server https://beeceptor.com/

Online - Reverse Shell Generator https://www.revshells.com/

CrackStation - Online Password Hash Cracking - MD5, SHA1, Linux, Rainbow Tables, etc. https://crackstation.net/

Interactive Online Malware Analysis Sandbox - ANY.RUN https://app.any.run/

Chall

Root Me https://www.root-me.org/?lang=fr

Defend the Web https://defendtheweb.net/dashboard

Blue Team CTF Challenges https://cyberdefenders.org/labs/

Giskard LLMs chall https://red.giskard.ai/

Cheatsheet

GTFOBins https://gtfobins.github.io/

TechExpert.Tips https://techexpert.tips/fr/

GitHub - PayloadsAllTheThings https://github.com/swisskyrepo/PayloadsAllTheThings

GitHub - danielmiessler/SecLists: SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. https://github.com/danielmiessler/SecLists

HackTricks - HackTricks https://book.hacktricks.xyz/

example_hashes [hashcat wiki] https://hashcat.net/wiki/doku.php?id=example_hashes

pentestmonkey | Taking the monkey work out of pentesting http://pentestmonkey.net/

shell-storm | Shellcodes Database http://shell-storm.org/shellcode/

Attacking Active Directory: 0 to 0.9 | zer1t0 https://zer1t0.gitlab.io/posts/attacking_ad/

Veille

Vulnérabilités - Guide des mises à jour de sécurité - Microsoft https://msrc.microsoft.com/update-guide/vulnerability

Cybersecurity News, Insights and Analysis | SecurityWeek https://www.securityweek.com/

The Hacker News | #1 Trusted Cybersecurity News Site https://thehackernews.com/

LinuxFr.org https://linuxfr.org/

DevOps

GitHub - stephrobert/awesome-french-devops https://github.com/stephrobert/awesome-french-devops#ChainesYoutube

GitHub - cloudcommunity/Free-Certifications: A curated list of free courses & certifications. https://github.com/cloudcommunity/Free-Certifications

LinuxOPsys https://linuxopsys.com/#

Accueil | Wiki-Tech https://wiki-tech.io/

WTerm Shortcuts https://allthings.how/how-to-use-windows-terminal-keyboard-shortcuts/

Cron expression generator by Cronhub https://crontab.cronhub.io/

Learning

LPIC-1 - Linux Professional Institute https://www.lpi.org/our-certifications/lpic-1-overview

Cybercademy https://cybercademy.org/

CIS Downloads https://downloads.cisecurity.org/#/

Digital Learning Hub https://dlh.lu/

Misc

Bitoduc.fr : la référence selon nous-mêmes sur les termes informatiques en français https://bitoduc.fr/

Submarine Cable Map https://www.submarinecablemap.com/

SankeyMATIC: Make Beautiful Flow Diagrams https://sankeymatic.com/