Home

WIWIK (we-win)

This repo is dedicated to things I wish I knew as I was getting started in Cybersecurity, please feel free to add your own things.

Hackthebox and vulnhub exist
NIST SP 800-115 (for aspiring pentesters)
HELK Hunting Platform (for aspiring threat hunters and defenders)
MITRE ATT&CK Framework
Mandiant APT Research
You can basically make any Linux machine a Kali box by including the official kali repos in the sources list for the machine's package manager
NetHunter exists
Hak5 sells some really cool gear and 0 Day Clothing sells apparel for hackers
CompTIA has entry level certifications for pentesters and defenders
Some other notable certification bodies are the Offensive Security and eLearn Security
Great online videos are made by IppSec and The Cyber Mentor
"The Hacker Playbook 3: Practical Guide To Penetration Testing" is a very practical and easy to understand book on pentesting and is up to date as of Feb 2020
Pentestmonkey's reverse shell cheat sheet, I also have my own list here
Mandiant Cyber Attack Lifecycle
XKCD is where the comics/memes are at
Your first job in security may very well be one that you cannot talk about with friends and family
The OWASP Top Ten is a must-know for pentesters (in some cases)
That SecLists, crackmapexec, linenum, pentest monkey, and PEASS all exists
Hackerone and Bugcrowd are a good place to start for hands-on pentesting experience
The Google Cloud Platform offers a free tier that does not have a expiration date.