Cursos/Certificaciones de Seguridad Informática

Hacking Ético / Pentest

OSCP

https://www.offensive-security.com/pwk-oscp/
Offensive Security
Curso estándar dentro de la industria. Certificación muy valorada. Desde hacking web a infraestructura. Tiene un laboratorio bastante bueno y la certificación es totalmente práctica. Lo único «malo» es que está un poco viejuno.
La teoría que dan con el curso es buena, cubre bastantes temas pero no van mucho en profundidad así que hay que hacer estudio extra buscando por internet.

PTS

https://www.elearnsecurity.com/course/penetration_testing_student
eLearnSecurity

ICPP

https://www.ihacklabs.com/individuals/
https://www.ihacklabs.com/public/ICPPv2_Spanish.pdf
iHackLabs
Certificación en español con un examen prátcio. Estilo OSCP. Laboratorio muy extenso. Examen práctico igual que OSCP pero con algo más de tiempo para la redacción del informe.

CEH

https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/
EC-Council
Certificación estándar de la industria. Era un examen tipo test pero parece que va a tener una parte práctica en la versión 10.

Exploiting

OSEE

https://www.offensive-security.com/awe-osee/
Curso de explotación en Windows por Offensive Security. Certificación práctica.

XDS

https://www.elearnsecurity.com/course/exploit_development_student/
Exploiting de binarios en Windows y Linux con laboratorio. Certificación práctica.

Web

OSWE

https://www.offensive-security.com/awae-oswe/
Offensive Security
Curso de pentest web. Está bastante orientado al análisis estático de código de aplicaciones web para luego poder vulnerarlas. Curso bastante técnico en cuanto al hacking web. El examen práctico trata de encontrar vulnerabilidades en el código para luego explotarlas en una máquina.

DFIR

Reversing

Wifi / Wireless

Threat Hunting

CISSP

https://www.isc2.org/Certifications/CISSP

Es una certificación de alto nivel profesional otorgada por la (ISC)2, con el objetivo de ayudar a las empresas a asegurar el dominio en las 8 disciplinas de la seguridad de la información:
• Seguridad y gestión de riesgos
• Seguridad de activos
• Arquitectura de seguridad e ingeniería
• Comunicación y seguridad de red
• Gestión de identidad y acceso (IAM)
• Evaluación de seguridad y pruebas
• Operaciones de seguridad
• Seguridad de desarrollo de software

Curso corto gratuito por Charles Sturt University:

http://www.itmasters.edu.au/free-short-course-cissp-security

CCCure preparation CISSP tutorial:

https://cccure .training/tutorials/CISSP2018/intro/presentation_html5.html

Guía de estudio, esquema de examen y Dumps de test:

https://drive.google.com/drive/folders/1mPPtVmujD-kzvNZGydo74DilF27iv62D?usp=sharing

VectorKernel - PoCs For Kernelmode Rootkit Techniques Research 18/04/2024

PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want to test the modules in old OSes, replace ExAllocatePool2 […]

Cookie-Monster - BOF To Steal Browser Cookies & Credentials 17/04/2024

Steal browser cookies for edge, chrome and firefox through a BOF or exe! Cookie-Monster will extract the WebKit master key, locate a browser process with a handle to the Cookies and Login Data files, copy the handle(s) and then filelessly download the target. Once the Cookies/Login Data file(s) are downloaded, the python decryption script can […]

NoArgs - Tool Designed To Dynamically Spoof And Conceal Process Arguments While Staying Undetected 16/04/2024

NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly. Default Cmd: Windows Event Logs: Using NoArgs: Windows Event Logs: Functionality Overview The tool primarily […]

Frameless-Bitb - A New Approach To Browser In The Browser (BITB) Without The Use Of Iframes, Allowing The Bypass Of Traditional Framebusters Implemented By Login Pages Like Microsoft And The Use With Evilginx 15/04/2024

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep into this, I recommend that you first check my […]

Toolkit - The Essential Toolkit For Reversing, Malware Analysis, And Cracking 14/04/2024

This tool compilation is carefully crafted with the purpose of being useful both for the beginners and veterans from the malware analysis world. It has also proven useful for people trying their luck at the cracking underworld. It's the ideal complement to be used with the manuals from the site, and to play with the […]

Porch-Pirate - The Most Comprehensive Postman Recon / OSINT Client And Framework That Facilitates The Automated Discovery And Exploitation Of API Endpoints And Secrets Committed To Workspaces, Collections, Requests, Users And Teams 12/04/2024

Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconaissance / OSINT framework for Postman. While existing tools are great proof of concepts, they only attempt to identify very specific keywords as "secrets", and in very limited locations, with no consideration to recon beyond […]

APKDeepLens - Android Security Insights In Full Spectrum 11/04/2024

APKDeepLens is a Python based tool designed to scan Android applications (APK files) for security vulnerabilities. It specifically targets the OWASP Top 10 mobile vulnerabilities, providing an easy and efficient way for developers, penetration testers, and security researchers to assess the security posture of Android apps. Features APKDeepLens is a Python-based tool that performs various […]

RemoteTLSCallbackInjection - Utilizing TLS Callbacks To Execute A Payload Without Spawning Any Threads In A Remote Process 10/04/2024

This method utilizes TLS callbacks to execute a payload without spawning any threads in a remote process. This method is inspired by Threadless Injection as RemoteTLSCallbackInjection does not invoke any API calls to trigger the injected payload. Quick Links Maldev Academy Home Maldev Academy Syllabus Related Maldev Academy Modules New Module 34: TLS Callbacks For Anti-Debugging New Module 35: Threadless […]

Sicat - The Useful Exploit Finder 09/04/2024

Introduction SiCat is an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively. With a focus on cybersecurity, SiCat allows users to quickly search online, finding potential vulnerabilities and relevant exploits for ongoing projects or systems. SiCat's main strength lies in its ability to […]

CloudGrappler - A purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure 08/04/2024

Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure. Notes To optimize your utilization of CloudGrappler, we recommend using shorter time ranges when querying for results. This approach enhances […]