サイバーセキュリティ関連URL

自分用のメモ　TODO:体系的に整理する

CVE

• CVEdetails
  • https://www.cvedetails.com/
• cvemon
  • https://cvemon.intruder.io/
• inTheWild
  • https://inthewild.io/feed
• KEV
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=

IoC

• tenable
  • https://www.tenable.com/
• Rapid7
  • https://www.rapid7.com/ja/db/
• threatcrowd
  • http://ci-www.threatcrowd.org/
• sophoslabs
  • https://github.com/sophoslabs/IoCs

C2

• FEODO tracker
  • https://feodotracker.abuse.ch/
• C2 Matrix
  • https://howto.thec2matrix.com/

Threat Matrix

• MITRE ATT&CK
  • https://attack.mitre.org/
• ATT&CK Navigator
  • https://mitre-attack.github.io/attack-navigator/
• ATM
  • https://atm.automotiveisac.com/matrix
• D3FEND
  • https://d3fend.mitre.org/
  • (参考) https://www.scientia-security.org/entry/2021/06/24/225245
• RE&CT
  • https://atc-project.github.io/atc-react/

STIX

• sample
  • https://www.cisa.gov/sites/default/files/2024-08/AA23-061A-Aug-2024_2.stix_.xml

OSINT

• OSINT Framework
  • https://osintframework.com/
• OSINT.Link
  • https://osint.link/

Search Engine

• Shodan
  • https://www.shodan.io/dashboard
• BinaryEdge
  • https://app.binaryedge.io/services/query
• Censys
  • https://search.censys.io/
• ZoomEye
  • https://www.zoomeye.ai/
• Have I Been Pwned
  • https://haveibeenpwned.com/
• DeHashed
  • https://dehashed.com/
• BugMeNot
  • https://bugmenot.com/
• FOFA
  • https://en.fofa.info/upgrade

File Reputation

• VirusTotal
  • https://www.virustotal.com/gui/home/upload
• ANY.RUN
  • https://app.any.run/?_gl=110dpxny_gaMTg2NzYwNzUzLjE3MzYyOTU4NTI._ga_53KB74YDZR*MTczNjI5NTg1Mi4xLjAuMTczNjI5NTg1Ni4wLjAuNDAyODQxNDM1
• JoeSandbox
  • https://www.joesandbox.com/#windows
• Hybrid Analysis
  • https://www.hybrid-analysis.com/
• Intezer
  • https://analyze.intezer.com/scan

WebSiteReputation

• aguse.jp
  • https://www.aguse.jp/
• urlscan.io
  • https://urlscan.io/
• urlquery
  • https://urlquery.net/
• Sucuri SiteCheck
  • https://sitecheck.sucuri.net/
• URLVoid
  • https://www.urlvoid.com/
• AbuseIPDB
  • https://www.abuseipdb.com/
• Trend Micro Site Safety Center
  • https://global.sitesafety.trendmicro.com/

Zero-day/Exploit

• Zero-day Vulnerability Database
  • https://www.zero-day.cz/database/
• Upcoming | Zero Day Initiative
  • https://www.zerodayinitiative.com/advisories/upcoming/
• Exploit Database
  • https://www.exploit-db.com/
• SecurityHome.eu
  • https://www.securityhome.eu/

MS-Patch

• Zero Day Initiative — Blog
  • https://www.zerodayinitiative.com/blog?tag=Microsoft
• Bleeping Computer
  • https://www.bleepingcomputer.com/news/microsoft/
• SANS Internet Storm Center
  • https://isc.sans.edu/diaryarchive.html

Vuln DB

• NVD - Search and Statistics
  • https://nvd.nist.gov/vuln/search
• JVN iPedia
  • https://jvndb.jvn.jp/index.html
• Vumetric Cybersecurity Portal
  • https://cyber.vumetric.com/

SSL/TLS

• SSL Server Test (Powered by Qualys SSL Labs)
  • https://www.ssllabs.com/ssltest/
• Test TLS
  • https://testtls.com/
• Entrust Certificate Search
  • https://ui.ctsearch.entrust.com/ui/ctsearchui

DNS

• WHOXY
  • https://www.whoxy.com/
• DNS History
  • https://completedns.com/dns-history/

Email Leak

• Hunter: Domain Search
  • https://hunter.io/domain-search
• Anymail finder
  • https://anymailfinder.com/

Location

• eXTReMe-IP-Lookup.com
  • https://extreme-ip-lookup.com/

Exif

• EXIF Data Viewer Online
  • https://linangdata.com/exif-reader/
• EXIF確認君 - 画像情報解析ツール
  • http://exif-check.org/

Web Tech

• BuiltWith
  • https://builtwith.com/
• Wappalyzer
  • https://www.wappalyzer.com/

Phising

• PhishTank
  • https://www.phishtank.com/
• OpenPhish
  • https://www.openphish.com/
• isitPhishing
  • https://isitphishing.org/
• Free Phishing Email Templates
  • https://caniphish.com/free-phishing-test/phishing-email-templates

その他

• WiGLE: Wireless Network Mapping
  • https://wigle.net/
• EasyDMARC
  • https://easydmarc.com/