This page offers a range of information security cheat sheets from “Gary’s Cybersecurity Cheat Sheets,” covering various security assessment topics for organizations. It also includes code examples from Gary to streamline testing and verification.
Gary’s Cybersecurity Cheat Sheets Collection: https://www.axcelsec.com/2017/12/axcel-security-library.html
Penetration Testing
- Network
- CMS - WordPress
- Mobile - Android
- Mobile - iOS
- Web Service (API) Security
- Damn Vulnerable Web Services - Walkthrough
OWASP Series
- 2017 A1 Injection
- 2017 A3 Sensitive Data Exposure
- 2017 A4 XML External Entities (XXE)
- 2017 A6 Security Misconfiguration
- 2017 A7 Cross-Site Scripting (XSS)
- 2017 A8 Insecure Deserialization
Configuration Assessment
Web Server Hardening
Database Assessment
Host Device Hardening
Social Engineering
Malware
Physical Security
Awareness
- Cyber Security Awareness for Beginners
- Network Security Basics Handbook (Chinese)
- Online Security Page Compilation - Malaysia
- Phishing Compilation
- Adidas Whatsapp Scam Walkthrough
- Sensitive Information Leakage Compilation
Security Risk Management
ICS/SCADA
News Compilation
- Social Media Security
- Network Device Security
- Operating System Security - Mac OS
- Operating System Security - Windows
Mobile Security
Hardware Security
Remote Access Security
Automate Security Assessment
SCSA (Source Code Security Analyzer)
Purpose: Source Code Review
C#
Database Assessment Tool (DAT)
Purpose: Database Security Assessment
Oracle
Host Assessment Toolkit (HAT)
Purpose: Host Assessment
Windows
Cent OS
Forensic Kiddie
Purpose: Log Analysis
Windows
System Hardening Guides
Network
Automate Penetration Testing Reporting
Nmap
SSLScan
Nessus