en
Feedback
Network Security Channel

Network Security Channel

Open in Telegram

⭕️Start Channel From 2017⭕️ ✅ Security Operation Center (SOC) ✅ Bug Bounty ✅ Vulnerability ✅ Pentest ✅ Hardening ✅ Linux ✅ Reasearch ✅ Security Network ✅ Security Researcher ✅ DevSecOps ✅ Blue Team ✅ Red Team

Show more
Iran62 250Technologies & Applications25 880
2 884
Subscribers
+624 hours
+947 days
+13630 days
Posts Archive
Network Security Channel
Network Security Channel
2 885
Cloud Security Say Goodbye to Bad Passwords: How Azure Active Directory Password Protection can save the day https://improsec.com/tech-blog/say-goodbye-to-bad-passwords-how-azure-active-directory-password-protection-can-save-the-day -Cyber Security awareness- Up2date 4 Defence Today, Secure Tomorrow @CisoasaService 1402.03.06 @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
tools Threat_Research Crawlector - threat hunting framework designed for scanning websites for malicious objects https://github.com/MFMokbel/Crawlector @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
YARA YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. 🔗https://lnkd.in/dXm__xvA 🔗https://lnkd.in/dvZ5UbP9 ----------------------------------------- 2. LOKI LOKI is a free open-source IOC (Indicator of Compromise) scanner created/written by Florian Roth. 🔗https://lnkd.in/dvMEMKKu 🔗https://lnkd.in/duJNimDp ----------------------------------------- 3. THOR THOR Lite is Florian's newest multi-platform IOC AND YARA scanner. There are precompiled versions for Windows, Linux, and macOS. A nice feature with THOR Lite is its scan throttling to limit exhausting CPU resources. 🔗https://lnkd.in/d9yHH_ae ----------------------------------------- 4. FENRIR Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise (IOCs): Hashes, File Names, Strings, C2 Server and Hot Time Frame 🔗https://lnkd.in/d2dPWiXK ----------------------------------------- 5. YAYA YAYA is a new open-source too @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
⭕️Red team: Journey from RCE to have total control of Cloud Infrastructure ۱. ابتدا محقق با کشف یک RCE در وب اپ به docker container دسترسی گرفته ۲. سپس متوجه شده که در محیط restrict قرار داره و فقط microdnf نصب هست ۳. محقق متوجه میشه که به subnet های دیگه درون شبکه از طریق container دسترسی داره و از این طریق ip یه gitlab instance رو پیدا میکنه ۴. و بعد متوجه میشه که این instance به CVE-2021-22205 آسیب پذیر هست ۵. بعدش از طریق این CVE به Gitlab و دیتابیس اون دسترسی میگیره و بعد از طریق دسترسی admin استفاده میکنه تا یدونه ریپازیتوری و CI/CD pipeline بسازه برای pivot به Gitlab worker instance ۶. و در Gitlab worker node تونسته تعداد زیادی secret و API KEY و ... و همچنین kubeconfig فایل رو پیدا کنه برای جزيیات بیشتر مقاله زیر رو بخونید https://mr-r3bot.github.io/red/team/2023/05/22/From-RCE-to-owning-entire-cloud-infrastructure.html #RedTeam #RCE #Pivot #DevSecOps @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
تو پروسه آموزش و یاددادن همیشه کلی چیز برای یادگیری هست✌️🏻 دارم یه اپ Vue آسیب پذیر آماده میکنم برای آموزش XSS in Vue.js بعد
تو پروسه آموزش و یاددادن همیشه کلی چیز برای یادگیری هست✌️🏻 دارم یه اپ Vue آسیب پذیر آماده میکنم برای آموزش XSS in Vue.js بعد متوجه شدم این XSS ای که از طریق javascript scheme تو attribute href رخ میده زمانی که اتریبیوت target برابر blank_ باشه دیگ آسیب پذیر نیست مثالش تو عکس بالا #AppSec #XSS #web_security @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
cryptography Threat_Research "WhatsApp End-to-End Encrypted Backups", 2023 @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
Whitepaper Not-Too-Safe Boot: Remotely Bypassing Endpoint Security Solutions (AV/EDR/…) and Anti-Tampering Mechanisms", 2023 @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
Tech book Machine Learning Security Principles: Keep data, networks, users, and applications safe from prying eyes 2022 @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
WebApp Security Black Hat Asia 2023: "Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors" @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
exploit Black Hat Asia 2023: "PPLdump Is Dead. Long Live PPLdump!" ]-> https://github.com/gabriellandau/PPLFault ]-> https://github.com/trustedsec/PPLFaultDumpBOF @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
tools Offensive security 1. KeeFarce Reborn - standalone DLL that exports databases in cleartext once injected in the KeePass process https://github.com/d3lb3/KeeFarceReborn#make-keepass-inject-keefarce-reborn-as-a-plugin ]-> Extract Passphrase from Memory (CVE-2023-32784): https://ppn.snovvcrash.rocks/pentest/infrastructure/ad/credential-harvesting/keepass#abusing-the-keepass-plugin-cache 2. SSH-Harvester - Harvest passwords automatically from OpenSSH server https://github.com/jm33-m0/SSH-Harvester @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
tools Malware analysis Dumpulator - library for emulating memory dumps (useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing)) @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
tools Red Team Tactics Exploiting Windows’ vulnerabilities with HyperV: A hacker’s swiss army knife https://github.com/Xyrem/HyperDeceit @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
Offensive security PEASS-ng - Privilege Escalation Awesome Scripts Suite https://github.com/carlospolop/PEASS-ng @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
🚨 Attention KeePass users! A newly discovered security flaw (CVE-2023-32784) could expose your master password in cleartext! Read details here: https://thehackernews.com/2023/05/keepass-exploit-allows-attackers-to.html Upgrade to KeePass 2.54 once it's released. @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
Intel Suggests Dropping Everything But 64-Bit From X86 With Its X86-S Proposal | Hackaday https://hackaday.com/2023/05/21/intel-suggests-dropping-everything-but-64-bit-from-x86-with-its-x86-s-proposal/ @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
Top 5 Network Monitoring Tools Pre-requisites 📌 What is SNMP? https://lnkd.in/dQ_NbxDH 📌 Download VMware https://lnkd.in/d6gGFUYA 🟢 Nagios: A widely used network monitoring system that can monitor network services, hosts, and devices. 🔗 https://lnkd.in/dXmGUSkm 🟢 Zabbix: It supports agent-based and agentless monitoring, as well as SNMP and IPMI 🔗 https://lnkd.in/d8-qTMa5 🟢 Icinga: A fork of Nagios that aims to provide improved performance, scalability, and flexibility. 🔗 https://lnkd.in/dFrHrMSR 🟢 Cacti: A web-based network monitoring and graphing tool that can monitor a variety of network devices and services. 🔗 https://lnkd.in/dweisB-k 🟢 LibreNMS: It supports SNMP, Syslog, and SNMP Trap monitoring, and has a web-based interface for configuration and management. 🔗 https://lnkd.in/dQZucJar @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
#گزارش ارزیابی MITRE از EDRها (مخصوصا IBM ReaQta که به عنوان EDR محصول QRadar محسوب میشه!) @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
#راهنمای Scapy @Engineer_Computer

Network Security Channel
Network Security Channel
2 885
#راهنمای cobalt strike از Threat radar @Engineer_Computer