Google Cloud Key Management Service (KMS) cloud.google.com

Google Cloud Platform - Securely store secrets within GCP.

Building Security In Maturity Model (BSIMM) bsimm.com

Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.

BeerSecOps blog.aquasec.com

Aqua Security - Breaking down the silos of Dev, Sec and Ops, discussing topics that span these subject areas.

Azure Key Vault azure.microsoft.com

Microsoft Azure - Securely store secrets within Azure.

AWS Secrets Manager aws.amazon.com

Amazon AWS - Securely store retrievable application secrets in AWS.

AppSec Day appsecday.io

OWASP - An Australian application security conference run by OWASP.

Semgrep Academy academy.semgrep.dev

Semgrep - Free, on-demand courses covering topics including API security, secure coding and application security.

SafeStack academy.safestack.io

SafeStack - Security training for software development teams, designed to be accessible to individuals and small teams as well as larger organisations.

Absolute AppSec absoluteappsec.com

Seth Law & Ken Johnson - Discussions about current events and specific topics related to application security.

StackSmashing youtube.com

Reverse engineering and hardware hacking of embedded devices.

Flashback Team youtube.com

A duo of hackers explaining their step by step approach to finding and exploiting vulnerabilities in embedded devices.

wrong baud wrongbaud.github.io

The Art of PCB Reverse Engineering visio-for-engineers.blogspot.com

FIE on Firmware: Finding Vulnerabilities in Embedded Systems using Symbolic Execution usenix.org

Embedded Security Testing with Peripheral Device Caching and Runtime Program State Approximation thinkmind.org

Hardware Security: Design, Threats, and Safeguards taylorfrancis.com

The SRecord package srecord.sourceforge.net

Collection of tools for manipulating EPROM files (can convert lots of binary formats).

Siliconpr0n siliconpr0n.org

A Wiki/Archive of all things IC reversing.

Abusing the Internet of Things: Blackouts, Freakouts, and Stakeouts shop.oreilly.com

J-Link segger.com

J-Link offers USB powered JTAG debug probes for multiple different CPU cores :euro:.

Saleae saleae.com

Easy to use Logic Analyzer that support many protocols :euro:.

A Large-Scale Analysis of the Security of Embedded Firmwares s3.eurecom.fr

Towards Automated Classification of Firmware Images and Identification of Embedded Devices s3.eurecom.fr

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces s3.eurecom.fr

RTL-SDR rtl-sdr.com

Embedded Device Vulnerability Analysis Case Study Using Trommel resources.sei.cmu.edu

Proxmark 3 RDV4 proxmark.com

Powerful general purpose RFID tool. From Low Frequency (125kHz) to High Frequency (13.56MHz) tags.

Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol pierrekim.github.io

Multiple vulnerabilities found in the D-link DWR-932B pierrekim.github.io

PenTestPartners pentestpartners.com

Patayu payatu.com

Database Triggers as Persistence Mechanisms trustwave.com

An in-depth write up about database triggers providing persistence.

Improving your firmware security analysis process with FACT passthesalt.ubicast.tv

Conference talk about FACT :tv:.

theevilbit's series "Beyond the good ol' LaunchAgents" theevilbit.github.io

List of macOS persistence beyond just the LaunchDaemons or LaunchAgents.

IoT Penetration Testing Cookbook packtpub.com

OWASP Internet of Things Project owasp.org

IoT common vulnerabilities and attack surfaces.

Autoruns technet.microsoft.com

A powerful persistence collection tool on Windows is Autoruns. It collects different categories and persistence information from a live system and in limited ways from offline images. There is a UI and a command line program and the output format can be set to CSV which can…

OWASP Embedded Application Security Project owasp.org

Development best practices and list of hardware and software tools.

Hunting for persistence via Microsoft Exchange Server or Outlook speakerdeck.com

Blog post about Microsoft Exchange server persistence.

OpenOCD openocd.org

Free and Open On-Chip Debugging, In-System Programming and Boundary-Scan Testing.

How malware persists on macOS sentinelone.com

List of macOS persistence mechanisms.

MoonBounce: the dark side of UEFI firmware securelist.com

An in-depth write up about one particular UEFI bootkit.

W3C Privacy Interest Group w3.org

Linux Malware Persistence with Cron sandflysecurity.com

Blog post about Linux persistence using cron jobs.

BladeRF 2.0 nuand.com

Software Defined Radio peripheral capable of transmission or reception of radio signals from 47 MHz to 6 GHz (full-duplex).

Troy Hunt: Data breach disclosure 101 troyhunt.com

Hacking the XBOX nostarch.com

Linux LKM Persistence righteousit.com

Rootkit leveraging Linux loadable kernel module (LKM).

The Hardware Hacking Handbook: Breaking Embedded Security with Hardware Attacks nostarch.com

Spread Privacy spreadprivacy.com