IT security resources

IT security resources:

Domain/IP investigation tools:

https://www.domaintools.com/ OR more specifically http://whois.domaintools.com/
https://mxtoolbox.com/
https://whois.arin.net
https://www.ripe.net/
https://atlas.ripe.net/
http://www.urlvoid.com/
http://www.ipvoid.com/
https://urlscan.io/
https://www.threatcrowd.org/
https://www.abuseipdb.com/
https://www.virustotal.com/
https://censys.io/
https://www.shodan.io/
https://cli.shodan.io/

"No touch" Passive Domain/IP investigation tools:

https://cymon.io/
https://www.talosintelligence.com/reputation_center
PassiveTotal from RiskIQ: https://community.riskiq.com

ASN & BGP info:  https://bgp.he.net

Email Reputation & Spam investigation:

https://www.senderscore.org/
https://mxtoolbox.com/
https://www.talosintelligence.com/reputation_center
https://www.spamhaus.org/

Web Vulnerability scanners:

https://portswigger.net/burp

https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project

SQL injection within Web Vuln Scanners: 

SQLMap: https://github.com/sqlmapproject/sqlmap

Shortened URL checker:

http://checkshorturl.com/

Java unpacker for strange websites:

http://jsunpack.jeek.org/

SysAdmin tools:

https://www.reddit.com/r/homelab/comments/5ldiel/so_you_wantgot_an_r710/
http://www.opsreportcard.com/
A better version of Putty:  https://mremoteng.org/
https://www.wireshark.org/
Windows Sysinternals
Netcat, the Swiss-army knife of network utilities: http://netcat.sourceforge.net/
Sysmon for Windows
PowerShell for Windows

learn - Reddit/r/sysadmin

Draw.io is great for documenting systems and connections if you don't have Microsoft Visio: https://www.draw.io/

Tools:

https://www.offensive-security.com/metasploit-unleashed/
https://www.ethicalhacker.net/features/special-events/free-armitage-and-metasploit-video-training
http://resources.infosecinstitute.com/security-hacking-apps-android/

Damn Vulnerable Web App (DVWA) is a good tool which includes insecure web pages to try varios hacking techniques:   http://www.dvwa.co.uk/

Cyber Security news:

https://threatpost.com/
https://www.troyhunt.com/
Malwarebyte's blog: https://blog.malwarebytes.com/
Cisco Talos' blog: https://blog.talosintelligence.com/
https://www.blackhillsinfosec.com/
https://securityweekly.com/
https://www.reddit.com/r/netsec/
https://www.darkreading.com/
ESET's blog: https://www.welivesecurity.com/
Rapid7's blog: https://blog.rapid7.com/
https://arstechnica.com/
Sophos' Security blog: https://nakedsecurity.sophos.com/

https://www.zerodayinitiative.com/

Project Zero blog:  https://googleprojectzero.blogspot.com/

https://chronicle.security/blog/

https://www.securityweek.com/

http://arstechnica.com/

https://www.peerlyst.com/

http://www.bleepingcomputer.com/

http://www.tripwire.com/state-of-security

https://securelist.com/

Industry specific Information Sharing and Analysis Centers (ISAC):

https://www.us-cert.gov/

https://www.nationalisacs.org/

https://h-isac.org/

https://www.fsisac.com/

http://www.dngisac.com/

http://www.eisac.com/

http://www.it-isac.org/

http://www.ms-isac.org/

https://ndisac.org/

http://www.waterisac.org/

Training resources:

http://www.tomsitpro.com/articles/free-infosec-training-for-it-pros,1-2707.html

https://ocw.mit.edu/index.htm
http://www.afrotechmods.com
This is a great resources for AWS learnin':  https://acloud.guru/courses
Security Awareness training: https://www.knowbe4.com/
Security data sample repository: http://www.secrepo.com/
https://www.azcwr.org/
https://www.udemy.com/

Free learning resources:

https://www.cybrary.it/
https://www.reddit.com/r/netsecstudents/
This is a great resources for CompTIA A+, Network+, Security+, Microsoft training, and some Cisco coverage as well:  https://www.professormesser.com/
Microsoft free learning resources, previously listed as "Microsoft Virtual Academy":

https://docs.microsoft.com/en-us/learn/

Codecademy: https://www.codecademy.com/