Infosanity's Blog

OK, so we’d all like to be 1337 and know everything without missing a beat, but for mere mortals like myself I find that impossible so I’m a fan of the various cheat sheets that people and organisations put out for succinct, to the point memory joggers.

I’ve got links to these scattered in various places and I’ve been meaning to get them organised in single location for a while, Lenny Zeltser’s recent tweet (@lennyzeltser) pointing out a couple of new resources gave me a reminder that this has been on my to-do list for too long, so here goes:

• SANS – Intrusion Discovery (Linux)
• SANS – Intrusion Discovery (Windows)
• SANS – Netcat
• SANS – Misc. Tools (Hping, Metasploit & fgDump)
• SANS – Windows Commandline
• SANS – TCP/IP & tcpdump
• SANS – Google Hacking
• SANS Forensics – USB Forensics on XP
• SANS Forensics – USB Forensics on Vista/Win7

• Lenny Zeltser – DDoS incident handling
• Lenny Zeltser – Reverse Engineering
• Lenny Zeltser – Security Achitecture for Internet Applications (added 2009-06-22)
• Lenny Zeltser – Analysing Malicious Documents (added 2009-11-20)

• Josh Wright – IEEE802.11 Pocket Reference

• PacketLife – Too many to list (Direct download all .zip)
• PacketLife - Scappy

• SecGuru – Nessus & Nmap

• Security By Default – Nmap 5

• @NickHarbour - x86 Assembly

• DeviantArt – Visual Hardware

• TechNet – PowerShell Quick Referense

• Cheat Sheets.org – Too Numerous too list

• Greebo.net – OWASP 2010 Top 10

• BlueLiv – Meterpreter

• Counterhack – Permission Memo (OK, not strictly a cheat sheet, but still a handy template/guide)

• CERT Societe Generale – Worm Infection Incident Response Methodology (IRM)
• CERT Societe Generale – Windows Intrusion IRM

If you’ve got some resources I’ve missed, then please feel free to share.

Likewise, if you created one of the linked to resources and don’t want the link here, just let me know and I’ll remove it. These resources have saved my bacon on numerous occasions so I definitely don’t want to be stepping on anyone’s toes.

– Andrew Waite