====== Security ======


   "A designer knows he has achieved perfection not when there is nothing left to add, but when there is nothing left to take away.": Antoine de Saint-Exupery

   ”Security ist Nachdenken über Verantwortung, Risiko und Kosten. Dieses Nachdenken kann einem niemand abnehmen.”: Stephan Pietzko


  * [[sysadmin:simplesecuritymanifesto|SimpleSecurityManifesto]]
  * [[sysadmin:itsecurityinanutshell|ITSecurityInaNutshell]]
  * [[sysadmin:securityframeworksmerged|SecurityFrameworksMerged]]
  * [[sysadmin:risikoanalyse|RisikoAnalyse]]
  * [[sysadmin:risikolifecycle|RisikoLifeCycle]]
  * [[sysadmin:isms|IsMS]]
  * [[sysadmin:pki|PkI]]
  * [[sysadmin:startwithapolicy|StartWithAPolicy]] (i.e. trust model) %D% //If you have no security policy, you have no security// %W%
  * [[sysadmin:securitymodels|SecurityModels]]
  * [[sysadmin:nistcsf|NIST Cybersecurity Framework]]
  * [[sysadmin:top10securitytools|Top10SecurityTools]]
  * [[sysadmin:lookatyourlogs|LookAtYourLogs]]
  * [[sysadmin:solaristelnetexploit|SolarisTelnetExploit]]
  * [[sysadmin:nessussignplugin|NessusSignPlugin]]
  * [[sysadmin:nmap|nmap]] %D% //A light but powerful network scanner//
  * [[sysadmin:metasploit|metasploit]]
  * [[sysadmin:plothydralogins|PlotHydraLogins]]
  * [[sysadmin:peakflowxpassword|PeakflowXPassword]]
  * [[sysadmin:peakflowxsshquery|PeakflowXsshQuery]]
  * [[sysadmin:forensic|ForensiC]]
  * [[sysadmin:ddos|DDOS]]
  * TOTP with [[sysadmin:yubikey|YubiKey]]
  * [[sysadmin:smime|SMiME]]
  * [[sysadmin:pgp|PGP]]
  * [[sysadmin:tnftpvulnerability|TnftpVulnerability]] Checker
  * [[sysadmin:suncryptoaccelerator6000board|SunCryptoAccelerator6000Board]]
  * [[sysadmin:defaultpasswords|DefaultPasswords]]
  * [[sysadmin:ssh|ssh]]
  * [[sysadmin:pvlan|Private VLAN]]
  * [[sysadmin:apachesecurity|ApacheSecurity]]
  * [[sysadmin:securitybookmarks|SecurityBookmarks]]
  * [[sysadmin:ismsframeworks|IsmsFrameworks]]
  * [[sysadmin:snowdenlinks|SnowdenLinks]]
  * [[sysadmin:playwithrandomnumbers|PlayWithRandomNumbers]]

===== Local checks =====
  * [[https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS|LinPEAS]]
  * [[https://github.com/sleventyeleven/linuxprivchecker|Linuxprivchecker.py]]
  * [[https://github.com/pentestmonkey/unix-privesc-check|unix-privesc-check]]
  * [[https://vuls.io|vuls]]
  * [[https://github.com/mzet-/linux-exploit-suggester|LES: Linux privilege escalation auditing tool]]
  * [[https://cisofy.com/lynis/|Lynis]]

===== Best Practices =====
  * Very short list of best practices from the [[https://www.us-cert.gov/ncas/current-activity/2015/07/31/Best-Practices-Protect-You-Your-Network-and-Your-Information|US-CERT]]%E% you don't need much more.

===== CERTs =====

Computer Emergency Response Team (CERT)
  * [[http://www.us-cert.gov/|US-CERT]]%E%
  * [[http://cert.uni-stuttgart.de/|RUS-CERT]]%E%
  * [[http://www.dfn-cert.de/|DFN-CERT]]%E%
  * [[https://www.cert-bund.de/|BUND-CERT]]%E%
  * [[https://www.buerger-cert.de/|Buerger CERT]]%E%

===== Others =====
  * [[http://seclists.org/|Security Mailing List Archive]]%E%
  * [[http://www.shodanhq.com/|Searchengine for unsecure Devices]]%E%
  * [[http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1|Reversing Industrial firmware for fun and backdoors I]]%E%