İbrahim BALOĞLU - Siber Güvenlik Paylaşımları

前往频道在 Telegram

Mevcut grup, Siber Güvenlik alanında paylaşımlar yapmak için oluşturulmuştur.

显示更多

土耳其11 965 技术与应用41 305

1 068

订阅者

+224 小时

+47 天

+2430 天

599

帖子浏览量

~ 19524 小时

~ 28048 小时

56.09%

参与率

无数据

每日帖子数

Ads index

beta

帖子存档

1 068

#tools #AIOps #MLSecOps #Offensive_security 0din AI Scanner (v.1.7.0) https://github.com/0din-ai/ai-scanner // AI model safety scanner built on NVIDIA garak

1 068

file_26090B9F-4593-4A55-B968-E33F60C268C7.pdf3.50 KB

1 068

#Kernel_Security #Malware_analysis DragonBreath: Dragon in the Kernel https://ransom-isac.org/blog/dragonbreath-dragon-in-the-kernel // A 0-day BYOVD vulnerability in dragoncore_k.sys signed by Zhengzhou 403 Network Technology, with shell company analysis, Dragon Breath APT-Q-27 attribution, and an APT31 / Wuhan Xiaoruizhi personnel nexus

1 068

#DFIR #OpSec #Offensive_security #Blue_Team_Techniques Dissecting Impacket: A public reference of protocol-level and implementation-level IoCs for detecting Impacket-driven activity https://github.com/ThatTotallyRealMyth/Impacket-IoCs

1 068

#Offensive_security Bypassing Windows (11 24H2/Server 2025) authentication reflection mitigations for SYSTEM shells Part 1 (CVE-2025-33073) Part 2 (CVE-2026-26128) // Authentication relay (or reflection) attacks will persist as long as integrity mechanisms are not enforced by default on Windows services

1 068

#Tech_book #Malware_analysis "MAoS - Malware Analysis on Steroids: Fighting Malware to the Death - Real-World Threats and Reverse Engineering Tactics", 2025. // This book takes you far beyond labs and simulations. It delivers a complete A-to-Z dissection walkthrough: from the first byte of a suspicious file all the way through unpacking, persistence, obfuscation, payload logic, and attacker tradecraft

1 068

PHP 8.5.5 — var_destroy __destruct reentrancy UAF. * Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed PoCs + leak primitive.

1 068

Lokal LLM’i RAG ile Zenginleştirmek https://medium.com/@sergenyanmis/lokal-llmi-rag-ile-zenginle%C5%9Ftirmek-18f3575dec0a

1 068

#tools #Offensive_security Kerberos with Titanis https://trustedsec.com/blog/kerberos-with-titanis // Titanis - Windows protocol library, including SMB and RPC implementations, among others

1 068

#Threat_Research #Malware_analysis 1⃣ Bad Apples: Weaponizing native macOS primitives for movement and execution https://blog.talosintelligence.com/bad-apples-weaponizing-native-macos-primitives-for-movement-and-execution 2⃣ WAV Malware https://isc.sans.edu/diary/A+WAV+With+A+Payload/32910 3⃣ Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting https://thedfirreport.com/2026/04/22/bissa-scanner-exposed-ai-assisted-mass-exploitation-and-credential-harvesting

1 068

#tools #DFIR #Malware_analysis 1⃣ Official IOCX Project // An extensible IOC extraction engine for PE binaries and text, built for SOC automation and modern threat‑analysis pipelines 2⃣ Crow Eye - Windows Forensics Engine // Comprehensive Windows forensics tool 3⃣ Microsoft Sentinel SIEM Log Source Analyzer // PowerShell module that connects to your MS Sentinel workspace (and Defender XDR), pulls every log table you’re ingesting

1 068

#DFIR #Whitepaper "Windows Forensic Analysis Playbook", Ver.2, Mar. 2026. // 6 Critical Windows Artifacts: Jump Lists, LNK Files, RecentDocs/OpenSave MRU, Prefetch, SRUM, Windows Event Logs

1 068

#Malware_analysis 1⃣ VIPERTUNNEL Python Backdoor https://labs.infoguard.ch/posts/slithering_through_the_noise 2⃣ We Dumped a Live Kimsuky C2 and Recovered Every Stage of the Kill Chain: CHM Dropper, VBScript Stager, PowerShell Keylogger https://intel.breakglass.tech/post/kimsuky-chm-nidlog-c2-dump-full-payload-recovery 3⃣ Inside an AI‑enabled device code phishing campaign https://www.microsoft.com/en-us/security/blog/2026/04/06/ai-enabled-device-code-phishing-campaign-april-2026

1 068

#Research #WLAN_Security "Beamforming Feedback as a Novel Attack Surface for Wi-Fi Physical-Layer Security", Apr. 2026. // BFIAttack - new attack that exploits Beamforming Feedback Information to reconstruct the CSI of a legitimate user or device, thereby compromising Wi-Fi-based physical-layer security

1 068

Windows Defender 0-Day Exploit * Allowing Attackers to Gain Full Access Full PoC

1 068

#WLAN_Security #Mobile_Security "LightGuard: Transparent WiFi Security via Physical-Layer LiFi Key Bootstrapping", Apr. 2026. ]-> https://github.com/Dorian47/Lightguard // cryptographic key establishment can be offloaded from WiFi to a physically confined LiFi channel to mitigate the risk of key exposure over RF

1 068

#Tech_book #Blue_Team_Techniques "Blue Team Handbook: Incident Response", 2026. ]-> Code from book chapters, commands, and manuals // This trusted and widely used f ield guide for cybersecurity incident responders, SOC analysts, and defensive security professionals distills incident response essentials into a concise, field-ready format

1 068

#Analytics #Threat_Research An analytical review of the main cybersecurity events for the week (Mar.28-Apr.4, 2026) 1⃣ Supply Chain Attack on Axios Pulls Malicious Dependency from npm // This is an active and developing incident... 2⃣ Remotely exploitable vulnerabilities in FreeBSD kernel, Vim, and Emacs // CVE-2026-4747, CVE-2026-34714, CVE-2026-33150, CVE-2026-34743 3⃣ Operation NoVoice: Rootkit Tells No Tales // The attack begins with apps that were previously available on Google Play that appear to be simple tools such as cleaners, games, or gallery utilities 4⃣ Nmap 7.99 Release // Changelog 5⃣ ghostsurf: From NTLM Relay to Browser Session Hijacking // NTLM HTTP relay tool with SOCKS proxy for browser session hijacking 6⃣ OpenSSH 10.3 Release // Changes 7⃣ Progress ShareFile Pre-Auth RCE Chain // CVE-2026-2699, CVE-2026-2701 ]-> Analytical review (Mar.21-28, 2026)

1 068

#tools #Offensive_security 1⃣ dexfinder - Cross-platform APK/DEX method & field reference finder with call chain tracing, ProGuard/R8 deobfuscation, and Android hidden API detection 2⃣ LogonTracer - tool to investigate malicious logon by visualizing and analyzing Windows AD event logs 3⃣ efiguard-detect - tool to detect EfiGuard 4⃣ ReDyne - iOS Decompiler/Reverse Engineering Suite 5⃣ Disconnected RSAT - launcher for running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

1 068

Unauthenticated MCP Endpoint Allows Remote Nginx Takeover * Detail and PoC