Off the beaten path: Zero Knock's DEN
There are possibly thousands of these sites. Just like this very blog as a matter of fact, that deal with security issues and provide access to whitepapers and other packages for knowledge.
infoSecond is run by a whitehat instructor and does does not often disclose 0-day or "underground" class information. I find stuff at the many websites I read and post what I think may be of interest to former and future students as examples. Every now and then I post something more personal or opinionated.
But what about the real good underground Russian or Chinese juicy stuff? Where are the sites that post exploits and sell botnets? As the saying goes "When the student is ready the teacher will appear" so if you haven't found these sites yet its either because: You haven't really been looking, you aren't ready, you haven't contributed original thought in the form of a malicious process, or you aren't interested in actually doing harm; you just want to protect and earn your keep honestly.
This post points you to a collection of links to whitepapers that can go either way. You can use them, and if so please avoid association and references to my training, or you can read them out of fascination and curiosity.
Zero Knock's Den
infoSecond is run by a whitehat instructor and does does not often disclose 0-day or "underground" class information. I find stuff at the many websites I read and post what I think may be of interest to former and future students as examples. Every now and then I post something more personal or opinionated.
But what about the real good underground Russian or Chinese juicy stuff? Where are the sites that post exploits and sell botnets? As the saying goes "When the student is ready the teacher will appear" so if you haven't found these sites yet its either because: You haven't really been looking, you aren't ready, you haven't contributed original thought in the form of a malicious process, or you aren't interested in actually doing harm; you just want to protect and earn your keep honestly.
This post points you to a collection of links to whitepapers that can go either way. You can use them, and if so please avoid association and references to my training, or you can read them out of fascination and curiosity.
Zero Knock's Den
