All Security Engineering Courses
前往频道在 Telegram
This channel is being updated often with older than 2020 courses, ebooks, videos, code, etc. to be used responsibly by everyone in CyberSecurity in an ethical manner. Lots of content is being downloaded from other channels or forwarded here. Bookmark me!
显示更多📈 Telegram 频道 All Security Engineering Courses 的分析概览
频道 All Security Engineering Courses (@allsecurityengineeringcourses) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 19 213 名订阅者，在 技术与应用 类别中位列第 6 651，并在 俄罗斯 地区排名第 34 103 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 19 213 名订阅者。
根据 17 九月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 108，过去 24 小时变化为 2，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 16.36%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
- 主题关注点： 内容集中在 git, strace, github, linux, docker 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“This channel is being updated often with older than 2020 courses, ebooks, videos, code, etc. to be used responsibly by everyone in CyberSecurity in an ethical manner. Lots of content is being downloaded from other channels or forwarded here. Bookmar...”
凭借高频更新（最新数据采集于 18 九月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
19 213
订阅者
+224 小时
+157 天
+10830 天
帖子存档
Repost from 1N73LL1G3NC3
UnderlayCopy
PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads.
Repost from 1N73LL1G3NC3
Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation
In an attack exploiting CVE‑2025‑58726, a bad actor would perform the following steps:
• Identify a Ghost SPN on the target machine.
• Register a DNS record for the Ghost SPN pointing to the attacker machine.
• Use a Kerberos relay tool (e.g., my KrbRelayEx script, available on GitHub) to intercept the Kerberos authentication.
• Trigger authentication for the target machine (e.g., using Printer Bug, PetitPotam, or similar).
• Relay the Kerberos ticket back to the target machine.
• Gain SYSTEM access via SMB and execute arbitrary commands.
P.S.
This attack targets Kerberos by abusing misconfigured SPNs; it does not affect NTLM. The fix for CVE-2025-33073 (Windows SMB Client Elevation of Privilege Vulnerability) addressed a specific SMB client issue. However, the Ghost SPN attack method bypasses that fix. The vulnerability lies in Kerberos itself, which fails to prevent authentication reflection. The same approach can be applied to other protocols that rely on Kerberos.
Repost from N/a
#hardening
#Whitepaper
#Hardware_Security
"Windows 11 Security Book:
Security by design. Security by default", Nov. 2024.
See also:
]-> Windows 11 Secured-core PCs
]-> Win10/11/2016/2019/2022 Trusted Platform Module (TPM) Settings
]-> System Guard Secure Launch and SMM protection (Win10/11)
]-> Configure BitLocker (Win10/11/2016/2019/2022/2025)
]-> Enable virtualization-based protection of code integrity
]-> Memory integrity and VBS controls
]-> Configure Hyper-V firewall (Win11 22H2)
]-> Configure Group Policy settings for MS Defender Application Guard
]-> Configure Win10/11 Sandbox
]-> Deploy App Control by using Group Policy (Win10/11/2016/2019/2022/2025)
]-> Windows 10/11 Hardening Script
Repost from N/a
#DFIR
#tools
#Blue_Team_Techniques
"Detecting Pass-the-Hash Attack in a Microsoft Active Directory Environment using an Open-Source Approach", 2024.
]-> Pass the hash in Windows 10
]-> Pass-the-hash attacks: Tools and Mitigation (.pdf)
]-> Tool to detect suspicious privileged NTLM connections (PtH attack) based on event viewer logs
Repost from Blue Team
𝗘𝗫𝗣𝗟𝗢𝗜𝗧 𝗗𝗘𝗩𝗘𝗟𝗢𝗣𝗠𝗘𝗡𝗧 🐌
🔗 Part 1 : Intro :-
https://0xninjacyclone.github.io/posts/exploitdev_1_intro/
🔗 Part 2 : Understanding Stack Memory :-
https://0xninjacyclone.github.io/posts/exploitdev_2_stack/
🔗 Part 3 : Understanding Heap Memory :-
https://0xninjacyclone.github.io/posts/exploitdev_3_heap/
🔗 Part 4 : Understanding Binary Files :-
https://0xninjacyclone.github.io/posts/exploitdev_4_binfiles/
🔗 Part 5 : Dealing with Windows PE files programmatically :-
https://0xninjacyclone.github.io/posts/exploitdev_5_winpe/
🔗 Part 6 : Dealing with ELF files programmatically :-
https://0xninjacyclone.github.io/posts/exploitdev_6_elf/
🔗 Part 7 : How to do magic with string format bugs :-
https://0xninjacyclone.github.io/posts/exploitdev_7_strfmt/
🔗 Part 8 : Buffer Over-Read Attacks and Developing a Real Exploit :-
https://0xninjacyclone.github.io/posts/exploitdev_8_bor/
@BlueTeamKit #exploit_development #binary_exploitation #vulnerability_research #buffer_overread
Repost from CyberSecurityTechnologies
#tools
#Space_Security
"Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites", Oct. 2025.
]-> IP encapsulation parser from raw DVB-S2(X) captures
// A shockingly large amount of sensitive traffic is being broadcast unencrypted, including critical infrastructure, internal corporate and government communications, private citizens’ voice calls and SMS, and consumer Internet traffic from in-flight wifi and mobile networks. This data can be passively observed by anyone with a few hundred dollars of consumer-grade hardware..
Repost from CyberSecurityTechnologies
#AppSec
#Offensive_security
"Finding Critical Bugs in Adobe Experience Manager", BSides 2025.
]-> Security research
]-> AEM hacking toolkit
// In this blog post, we provide an in-depth look at how AEM operates under the hood, including modern dispatcher bypasses that target real systems (CVE-2025-54251, CVE-2025-54249, CVE-2025-54252, CVE-2025-54250, CVE-2025-54247, CVE-2025-54248, CVE-2025-54246)
Repost from N/a
☠️ Kubernetes for Pentesters ☠️
A selection of articles on practical Kubernetes penetration testing:
👉 Kubernetes for Pentesters: Part 1
👉 A Pentester’s Approach to Kubernetes Security — Part 1
👉 A Pentester’s Approach to Kubernetes Security — Part 2
#red_team #kubernetes
Using_Asyncio_in_Python_Understanding_Python's_Asynchronous_Programming
Silas_Toms_ArcPy_and_ArcGIS_–_Geospatial_Analysis_with_Python_2015
Jenkins_2_–_Up_and_Running_Evolve_Your_Deployment_Pipeline_for_Next.pdf30.76 MB
Jenkins 2 – Up and Running - Evolve Your Deployment Pipeline for Next Generation Automation
