Collaborative thread for collecting and sharing practical information about cybersecurity, system administration, and secure communications.
The goal is to gather commands, tools, examples, and short explanations covering different areas of information security in one place.
Topics can include:
Cryptography: symmetric and asymmetric encryption, GPG, RSA, hashing, digital signatures, steganography, public and private keys.
Networks and communications: SSH, VPNs, TLS/SSL, firewalls, DMZs, ACLs, proxies, ports, and perimeter security.
Detection and attacks: IDS/IPS, Snort, sniffing, MITM, spoofing, hijacking, DoS/DDoS, honeypots, and log analysis.
Systems: Linux, permissions, users, processes, services, authentication, and security-related commands.
Web security: authentication, injection attacks, access control, security misconfiguration, vulnerabilities, and OWASP.
Backups and recovery: backup strategies, data recovery, and information protection.
DevSecOps: integrating security into development, automation, and code analysis.
Malware: malware types, attack vectors, analysis, and protection measures.
Human factors: social engineering, phishing, passwords, and common user-related security issues.
Digital forensics: evidence collection, system analysis, and traceability.
Physical security and risk management: threats, vulnerabilities, risk assessment, and security controls.
Security legislation: legal and regulatory aspects related to information security.
The goal is to build a practical and easy-to-reference collection of commands, examples, and explanations that can help understand what each tool or concept does and when it can be useful.