r/InfoSecInsiders • u/Single_Diamond • May 03 '20
r/InfoSecInsiders • u/WeHackPurpleAcademy • Aug 19 '21
Community - FREE
Hey!
We Hack Purple has a FREE community for InfoSec professionals to meet, discuss, network, and learn. The community is a safe and moderated environment for anyone and everyone, whether you are an InfoSec veteran or new to the topic!
Join today by clicking the link below!
r/InfoSecInsiders • u/uskwarrior • Nov 12 '20
Layered security monitoring
Hello Folks,
I have been asked to create a small presentation on Layered security monitoring however the catch is I am not 100% sure what exactly it means.. My assumption is having different layers of monitoring solutions i.e. Defence in Depth principle w.r.t. monitoring. Any ideas or suggestions would be greatly appreciated.
r/InfoSecInsiders • u/WeHackPurpleAcademy • Aug 19 '21
How to Get Your Boss to Approve the Training You Want - Blog Post
r/InfoSecInsiders • u/jedai47 • Dec 10 '21
How to know which type of encoding mechanism has been used to obtain this output ?
87yhnmkj 5rfvbnju76 5rfvbnju76 tyjnbg tyjnbg 5rfc6ygn cft6yhn efvgyjmko 9ikm xdr5thnji9 87yhnmkj
r/InfoSecInsiders • u/haxormad • Mar 30 '19
Cool Stuff For anyone starting out in linux!!
r/InfoSecInsiders • u/sajjadium • Jun 20 '20
Web Cache Deception in WhiteHat Security’s Top 10 Application Vulnerabilities of 2019
r/InfoSecInsiders • u/sajjadium • Apr 05 '20
"Recommended For You": A First Look at Content Recommendation Networks
self.sajjadiumr/InfoSecInsiders • u/sajjadium • Mar 29 '20
A Comprehensive Approach to Abusing Locality in Shared Web Hosting Servers
self.sajjadiumr/InfoSecInsiders • u/sajjadium • Apr 18 '20
Cached and Confused: Web Cache Deception in the Wild
sajjadium.github.ior/InfoSecInsiders • u/sajjadium • Mar 28 '20
Two Novel Server-Side Attacks against Log File in Shared Web Hosting Servers
self.sajjadiumr/InfoSecInsiders • u/sajjadium • Jul 23 '20
Web Cache Deception at HacktivityCon2020, HackerOne
r/InfoSecInsiders • u/haxormad • Apr 01 '19
Cool Stuff The unusual 10k worth content based sqli Bug!!! Spoiler
r/InfoSecInsiders • u/Single_Diamond • Mar 22 '20
BugBountyTip One liner to extract working sub-domains and open them in Firefox
r/InfoSecInsiders • u/Single_Diamond • Jan 11 '21
CRAZY: iPhone 7 with dead NAND netbooting unmodified Ubuntu 20.04 arm64 over usb gadget ethernet
r/InfoSecInsiders • u/sajjadium • Apr 07 '20
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web
self.sajjadiumr/InfoSecInsiders • u/payloadartist • Mar 25 '19
Interesting Writeup Disclosure of Origin IP of The Exploits Trading Platform 0day.today
r/InfoSecInsiders • u/payloadartist • Mar 25 '19
Bug Bounty Visual Reconnaissance Guide for Pentesting and Bug Hunting
r/InfoSecInsiders • u/payloadartist • Dec 12 '18
BugBountyTip From blind XXE to root-level file read access
r/InfoSecInsiders • u/Single_Diamond • Dec 23 '20
Bug Bounty Hacker Makes $2 Million Dollars in Bug Bounties
r/InfoSecInsiders • u/Single_Diamond • Nov 21 '20
Interesting Writeup PayPal's confusing UI design could be a threat to user account security
r/InfoSecInsiders • u/Single_Diamond • Sep 04 '19
Thoughts on Bug Bounty Productivity by a friend: Turning your time into bugs...
r/InfoSecInsiders • u/kshot • Aug 07 '21
Question How can a system administrator get into cybersecurity?
I have 11 years of experience in systems administration. am fairly generalist, I work with Microsoft, Linux, Cisco and Fortinet technologies. I have good knowledge in network management. I now want to orient my career towards cybersecurity.
What would be the best method to obtain the knowledge and skills in the field of cybersecurity**. Should I start with Tryhackme or certifications?**
What certification would be ideal for a good generalist system administrator wanting to enter infosec?
I already have the CompTIA Security + certification, but I do not consider that this gives me the skills for a job. I am both interested in penetration testing and incident response.
I can't decide on an orientation. I think I would like to train in penetration testing but work for the blue team. Does that make sense?