Network Security Channel

How I Found SQL Injection worth of $4,000 bounty https://medium.com/@roberto99/how-i-found-sql-injection-worth-of-4-000-bounty-16ca09cbf8ec @Engineer_Computer

بررسي يك خبر و ترند به شدت خانه مان سوز😀در امارات متحده عربي 💻🕵️‍♂️ Watch Out — Chinese-speaking threat actors known as Smishing Triad are impersonating UAE authorities to send malicious 📩 SMS messages, aiming to steal sensitive information from residents and foreigners. Details: https://thehackernews.com/2023/12/alert-chinese-hackers-pose-as-uae.html خوب بريم سراغ يك مميزي as GRC در تنظيمات امن دو سرويس مهم DNS,DHCP☺️ Invoke-DHCPCheckup.ps1: Invoke-DHCPCheckup is a tool meant to identify risky DHCP and DNS configurations in Active Directory environments. For additional information please refer to our blogpost: https://akamai.com/blog/security-research/spoofing-dns-by-abusing-dhcp The tool identifies the following misconfigurations: DNS Credential • DNS Credential is not configured • The configured DNS credential is of a strong user Name Protection • Name protection is not enabled on a scope • Name protection is not enabled by default on new scopes DNSUpdateProxy • Display group members • Specify whether the members are DHCP servers Weak record ACLs • List records owned by DHCP servers (Managed Records) • List records that could be overwritten by authenticated users https://github.com/akamai/Invoke-DHCPCheckup @Engineer_Computer

اکسپلویت استفاده از آسیب پذیریِ محصول محبوب اسپلانک (Splunk Enterprise) مبتنی بر CVE-2023-32707، که امکان تصاحب اکانت ادمین را برای مهاجم فراهم می‌سازد. این کد که به زبان پایتون نوشته شده است، امکان اجرا بر روی نسخه های آسیب پذیر زیر را دارد و از این رو توصیه می شود حتما سامانه خود را به آخرین نسخه به‌روز رسانی نمائید. نسخه‌های آسیب پذیر: > 8.1.0 to 8.1.13 > 8.2.0 to 8.2.10 > 9.0.0 to 9.0.4 لینک دانلود: https://www.exploit-db.com/exploits/51747 @Engineer_Computer

گزارش تحلیلی بدافزار https://securityscorecard.com/blog/an-analysis-of-menorah-malware/ @Engineer_Computer

۱۰ آلودگی برتر سایبری https://www.cisecurity.org/insights/blog/top-10-malware-q3-2023 @Engineer_Computer

SOC Capabilities matrix @Engineer_Computer

آزمایش‌های کشف نفوذ با سیسمان https://www.varonis.com/blog/sysmon-threat-detection-guide @Engineer_Computer

با این مجموعه تکنیک ها ، EDR خود را تست کنید https://github.com/wavestone-cdt/EDRSandblast @Engineer_Computer

به روز رسانی آفیس را در دستور کار خود بگذارید گروه‌های هکری حتی از آسیب پذیری های قدیمی نمی‌گذرند Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla. https://thehackernews.com/2023/12/hackers-exploiting-old-ms-excel.html @Engineer_Computer

Whitepaper Sec code review "Securing the Software Supply Chain: Recommended Practices for Managing Open-Source Software and Software Bill of Materials", Dec.2023. Good,Bad News🤓 + 🚨 Threat Alert: The notorious 8220 Gang is exploiting a high-severity flaw (CVE-2020-14883) in Oracle WebLogic Server to spread malware. Find details here: https://thehackernews.com/2023/12/8220-gang-exploiting-oracle-weblogic.html +Threat Research 1. Chaining Vulnerabilities to Achieve RCE on Outlook https://www.akamai.com/blog/security-research/chaining-vulnerabilities-to-achieve-rce-part-one 2. SMTP Smuggling - Spoofing E-Mails Worldwide https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide + Cloud_Security AWS Attacks Monitoring: IOC, malware and malware analysis associated with AWS cloud https://github.com/unknownhad/AWSAttacks

منبع عالی و جامع برای Pentest موبایل اپلیکیشن ها 🌐https://github.com/vaib25vicky/awesome-mobile-security #MobileApplicationSecurityTesting #MASTG #Github #Pentesting @Engineer_Computer

🛠 Awesome Censys Queries A collection of queries to Censys.io that allow to find: Industrial Control Systems Internet of Things Devices Security Applications Random Services https://github.com/thehappydinoa/awesome-censys-queries @Engineer_Computer

🛠 A collection of interesting, funny, and depressing search queries to plug into shodan.io https://github.com/jakejarvis/awesome-shodan-queries @Engineer_Computer

🔅 Use this Roadmap to Learn Python: Beginner to Advanced! Navigating the Python universe can be daunting, but with the right roadmap, your path to proficiency becomes clear. #Roadmap #Learn #Python #Beginner #Advanced #Path @Engineer_Computer

تفاوت‌ها رو یاد بگیریم Zero Trust, ZTA, and ZTNA https://www.csoonline.com/article/570475/zero-trust-zta-and-ztna-what-s-the-difference.html @Engineer_Computer