white2hack 📚

SSH penetration test scenario The SSH protocol, also known as Secure Shell, is a technique for secure and reliable remote login from one computer to another. It offers several options for strong authentication, as it protects the connections and communications\ security and integrity with strong encryption. It is a secure alternative to the nonprotected login protocols (such as telnet, rlogin) and insecure file transfer methods (such as FTP). #pentest

A Journey Into a Red Team by Charles F. Hamilton, 2023 #pentest

Inside the Mind of a Hacker: 2023 Edition Bugcrowd, one of the world's largest crowdsourced security platforms managing many bug bounty and vulnerability disclosure programs, analyzed 1000 survey responses from hackers on it's platform. These responses, combined with millions of proprietary data points on vulnerabilities collected across thousands of programs, were used to create this year's "Inside the Mind of a Hacker" report. Interesting stats include: ➡️ 5% of hackers are under 18, and only 10% over the age of 35 ➡️ 93% of hackers are fluent in at least two languages ➡️ India and Bangladesh are the top 2 countries where hackers live ➡️ 96% are male ➡️ 77% of hackers report working in IT or cybersecurity ➡️ 75% of hackers identify non-financial factors as their main motivators ➡️ 91% of hackers expect AI to amplify the value of their work ➡️ 72% of hackers doubt AI will ever match their human creativity Download report #useful

IPv6 Attacks (Active Directory) DNS Attack or DNS Spoofing its an attack that try to spoof the DNS traffic to allows an attacker to gather very important information about the network. If IPv6 is turned on the attacker can even spoof the DNS traffic for a Domain Admin and with certain tools, create an user with exclusive privileges. Sometimes a bad practice is to store the password in the field of "description", that kind of issues allows to an attacker to break into the network in an easier way. #pentest

Первыми сломались те, кто верил, что скоро все закончится. Потом – те, кто не верил, что это когда-то закончится. Выжили те, кто сфокусировался на своих делах, без ожиданий того, что ещё может случиться. (с) Виктор Франкл, Австрийский психотерапевт, выживший в нацистском лагере. Топите за свои цели что бы не происходило вокруг! Ваша жизнь - ваша ответственность! Возможности всюду! Всем отличной недели!🤝

AllEng - Всем, кто учится Учебные пособия и тематические ссылки для школьников, студентов и всех, занимающихся самообразованием. Главная страница Зеркало #education #useful

Всем, кто учится. - alleng.me AllEng - Всем, кто учится Учебные пособия и тематические ссылки для школьников, студентов и всех, занимающихся самообразованием.

Simplified Implementation of the Microsoft SDL, Updated November 4, 2010 #SSDLC #docs

Practical Security for Agile and DevOps, Mark S. Merkow, 2022 Practical Security for Agile and DevOpsis a collection of best practices and effective implementation recommendations that are proven to work. The text leaves the boring details of software security theory out of the discussion as much as possible to concentrate on practical applied software security that is useful to professionals. It is as much a book for students’ own benefit as it is for the benefit of their academic careers and organizations. #book

OSWE Exam report, Offensive Security by hide01 Пример репорта с экзамена OSWE вендора Offensive Security от иранского товарища hide01 #pentest #docs #useful

Признавайтесь, есть хорошая работа на HH или надо искать в других местах? 😄 #fun

Microsoft Security Learning Path, march 2023 #useful