# 冷門紅隊滲透證照、課程學習資源

[TOC]

# 證照相關文章

## 國內大佬寫的文章
- [紅隊勇者的證照冒險攻略](https://tech-blog.cymetrics.io/posts/ken/redteam-cert/)
## 國外整理的相似文章
- https://www.synack.com/red-team/pathways/
- https://roadmap.sh/cyber-security

## 資通安全專業證照清單
- https://www-api.moda.gov.tw/File/Get/acs/zh-tw/epCm7MlcYGOKmPH

## Paul Jerimy Security Certification Roadmap
- https://pauljerimy.com/security-certification-roadmap/

# 個人認為常見 or 熱門的證照
臺灣的紅隊成員通常9成5離不開這些證照 ~~(不負責任言論)~~
- [Offsec](https://www.offsec.com/)：OSCP, OSEP, OSWE, OSWA, OSED ...
- [EC-Council](https://www.eccouncil.org/)：CPENT, LPT ...
- [Altered Security](https://www.alteredsecurity.com/certifications)：CRTP, CRTE, CRTM ...
- [Zero Point Security](https://training.zeropointsecurity.co.uk/courses/red-team-ops)：CRTO
- [Hack The Box](https://academy.hackthebox.com/preview/certifications)：CPTS, CBBH, CWEE, CAPE ...

# Web Security 證照
## Burp Suite
- https://portswigger.net/web-security/certification

# Pentest / Red Team 證照
## TCM Security
- PNPT：https://certifications.tcm-sec.com/pnpt/ (這張在國外其實算有名)

## INE Security(PentesterAcademy)
- https://security.ine.com/#shopvouchers

## Cyber Warfare Labs
優點：常有優惠券，打折常常可以便宜到 1 折或 2 折，台幣幾百塊到幾千塊就有課程+考照
缺點：知名度低、不在行政院資安證照清單(不能接政府案)、課程內容評價不一
- https://cyberwarfare.live/
- Red Team：https://cyberwarfare.live/red-team-path/
- Evansion：https://cyberwarfare.live/evansion-exploitation-path/

## The SecOps Group
優點：常有優惠券，打折常常可以便宜到 2 折或 5 折，台幣幾千塊就能考照、有免費模擬考
缺點：知名度低、不在行政院資安證照清單(不能接政府案)、沒有課程
- https://secops.group/
- https://secops.group/pentesting-exams/

## White Knight Labs
- https://training.whiteknightlabs.com/certifications

## Red Team Academy
- https://redteamacademy.com/courses/

## CREST
- https://www.crest-approved.org/skills-certifications-careers/crest-certified-red-team-specialist/

## Sektor7 Institute
- https://institute.sektor7.net/

## Infosec Institute
- https://www.infosecinstitute.com/courses/red-team-operations/
- https://www.infosecinstitute.com/skills/content-library/

# Cloud
## Cloud Breach
- https://cloudbreach.io/

# Intelligence
## McAfee
- https://www.mcafeeinstitute.com/collections/board-certifications

# 課程
- 國外整理的文章：https://mindgard.ai/blog/red-team-training
- [Paid] https://maldevacademy.com/
- [Paid] https://courses.zero2auto.com/adv-malware-analysis-course
- [Free] https://learn.microsoft.com/en-us/security/ai-red-team/
- [FREE] API Penetration Testing：https://university.apisec.ai/apisec-certified-expert
- https://www.xintra.org/
- https://extremeredlab.0x29a.it/redteamlabs
- https://redteamleaders.coursestack.com/courses