Cyber Training Club🇺🇿
Open in Telegram
Group🛡️ https://t.me/+_aVSrT88-7k2OGIx Admin bilan bog'lanish >> @blacksamura_bot
Show more671
Subscribers
No data24 hours
No data7 days
No data30 days
Posts Archive
\" width=\"2000\" height=\"900\">\n","datePublished":"2023-09-02T07:35:28Z","dateModified":"2023-09-02T07:35:28Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":1,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":703},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/395","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/395","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/395","headline":"2 qism. 4. Fon tovushlarini masofadan turib tinglash va yozib olish Simsiz minigarnituralardan foydalanish, s…","articleBody":"2 qism. \n\n4. Fon tovushlarini masofadan turib tinglash va yozib olish\nSimsiz minigarnituralardan foydalanish, smartfon atrofida tovushlarni yozib olish ham mumkin bo'lgan xususiyatdir, ammo shuni yodda tutingki, bunday usullardan foydalanish noqonuniy bo'lishi va shaxsiy va qonuniy huquqlarni buzishi mumkin. Shu bilan birga, smartfondan tinglash moslamasi sifatida foydalanish turli xil hayotiy vaziyatlarda foydali bo'lishi mumkin.\nTinglashning eng oson yo'li telefoningizga maxsus dasturlarni o'rnatishdir. Android smartfonlari uchun bunday turdagi bir nechta ilovalar mavjud va eng mashhurlaridan biri bu bepul Ear Agent ilovasi, ammo uning analoglari ham mavjud. Aslini olganda, bunday ilovalar eshitish qobiliyati past odamlar uchun umumiy ovoz kuchaytirgichidir. To'g'ri, siz smartfoningizni boshqa joyda \"unutgan\" paytingizgacha.\n5. Masofadan suratga olish va video yozish.\nBu erda hamma narsa oddiy. Agar qurilmalar bizga kerak bo'lgan funksiyalarga ega bo'lsa va tegishli aloqa protokollarini qo'llab-quvvatlasa, biz aqlli soatlar yordamida kichik kamerachalarni qo'shishimiz mumkin. Bu funksionallik uzoq vaqtdan beri ko'pchilik aqlli soatlar uchun odatiy hol bo'lib kelgan va qo'shimcha ilovalarni o'rnatishni talab qilmaydi. Foydalanish, lekin qonun haqida unutmang.\nAgar masofaviy suratga olish uchun aqlli soatning funksionalligi etarli bo'lmasa, uni uchinchi tomon ilovalari yordamida kengaytirish mumkin. Masalan, DroidCam telefoningizdan shaxsiy kompyuter veb-kamerasi sifatida foydalanish imkonini beradi. Shu kabi ilovalar telefoningiz kamerasini planshet orqali boshqarish imkonini beradi. Bu erda hamma narsa faqat sizning so'rovlaringiz va tasavvurlaringiz bilan cheklangan, chunki smartfonni masofadan suratga olish va video suratga olish vositasi sifatida ishlatish.\n6. NFC kartalarini o'qing, nusxa ko'chiring va yozing.\nVa bu, o'z navbatida, bunday funktsiyani qo'llab-quvvatlaydigan maxsus uskunalar va dasturiy ta'minot mavjudligi bilan mumkin bo'ladi. Shunga qaramay, undan foydalanish qonuniy va axloqiy me'yorlarga mos kelishi kerak. Ushbu hackdagi mutlaq sevimli narsa NFC Tools ilovasi bo'lib, u o'z NFC teglaringizni o'qish va yaratish imkonini beradi.\nXususan, NFC Tools bir NFC kartasidan boshqasiga ma'lumot nusxalash yoki turli qurilmalarda foydalanish uchun kartaning klonini yaratish imkonini beradi. Bundan tashqari, NFC Tools ilovasidan foydalanib, siz NFC teglari yoki teglaridan ma'lumotlarni o'qishingiz va ularga yangi ma'lumotlarni yozishingiz mumkin. Bu, masalan, qo'riqchilarning hudud bo'ylab yurishi uchun jismoniy marshrutni yaratish, shuningdek, bunday yurishlarning muntazamligini nazorat qilish imkonini beradi.\n7. Videokuzatuv tizimlariga masofadan kirish\nShuni esda tutish kerakki, ofis ish joyiga va maxsus dasturiy mahsulotlarga kirish xavfsizlik siyosatiga muvofiq amalga oshirilishi va tegishli ruxsatlarga ega bo'lishi kerak. Ammo, o'z navbatida, bu tizimlar yoki ilovalarni masofadan nazorat qilish va boshqarish uchun foydali xususiyat bo'lishi mumkin. Hammasi oddiy, lekin zarur. E'tiboringiz uchun rahmat.","datePublished":"2023-09-02T04:29:42Z","dateModified":"2023-09-02T04:29:42Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":3,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":681},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/393","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/393","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/393","headline":"Hammani mustaqillik bayrami bilan jamoamiz nomidan tabriklaymiz!!! https://g.co/doodle/mkv56by","articleBody":"Hammani mustaqillik bayrami bilan jamoamiz nomidan tabriklaymiz!!! https://g.co/doodle/mkv56by","datePublished":"2023-09-01T05:02:19Z","dateModified":"2023-09-01T05:02:19Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":536}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/392","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/392","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/392","headline":"Smartfon kiberxavfsizlik mutaxassislari va bo'lajak hackerlar uchun vosita sifatida.(1 qism) Yuqoridagi maqol…","articleBody":"Smartfon kiberxavfsizlik mutaxassislari va bo'lajak hackerlar uchun vosita sifatida.(1 qism) Yuqoridagi maqolani to'ldirib qo'yish maqsadida. \n\nHammaga salom! Bugungi maqolamizda smartfonni kiberxavfsizlik qiziquvchilari uchun foydali vosita sifatida ko'rib chiqamiz. Masofadan suratga olish va tinglash kabi aniq xususiyatlardan kuzatuvni aniqlash va yashirin kamerani aniqlashgacha. Odatdagidek, misollar, foydali ilovalar va boshqa tafsilotlar bilan.\nZamonaviy smartfonlar kiberxavfsizlik ishqibozlariga o'zlarining kasbiy vazifalarini samarali bajarishlari uchun ko'plab imkoniyatlarni taqdim etadi. Hozir aytib o'tishim kerak, muhokama qilinadigan ba'zi mobil ilovalarning sifatli ishlashi bevosita smartfoningizning tarkibiy qismlariga bog'liq. Misol uchun, agar qurilmangizda metall detektor bo'lmasa, yashirin simlarni aniqlash mumkin emas. \n🛡💡Link ostida berilgan hamma ilovalar play marketdan olingan va xavfsi, ilovalarning screenshot larini comment qismiga tashaladi.\n\n1. Yashirin kameralar va xatolarni aniqlash\nAlbatta, bu xavfsizlik xizmatlari uchun muhim vazifadir. Xavfsizlik xodimlari yashirin qurilmalarni aniqlash uchun turli jihozlardan foydalanishi mumkin. U RF signal detektorlari, optik skanerlar, termal kameralar va elektromagnit nurlanishni yoki yashirin qurilmalarning boshqa belgilarini aniqlashga qodir bo'lgan boshqa qurilmalarni o'z ichiga olishi mumkin. Odatda, smartfonlarda xatolar va yashirin kameralarni aniqlash uchun o'rnatilgan funksiyalar mavjud emas. Biroq, bunday qurilmalarni qidirishda siz hali ham smartfoningizdan yordamchi vosita sifatida foydalanishingiz mumkin.\nSmartfon ilovalari do'konlarida siz yashirin kameralarni aniqlaydigan dasturlarni topishingiz mumkin. Bunday ilovalarning samaradorligi cheklangan bo'lishi mumkin, chunki ular ma'lum algoritmlarga va smartfon sensorlariga tayanadi. Misol uchun, ba'zi smartfonlarda yashirin kameralar yoki xatolardan (masalan, Yashirin Kamera Detektori yoki Glint Finder - Kamera Detektori) infraqizil signallarni aniqlash uchun ishlatilishi mumkin o'rnatilgan infraqizil qabul qiluvchi mavjud.\n\n2. Signal funksiyasi\nBiz ushbu funktsiyani ramkadagi harakatga javob berish, qurilmani harakatlantirish, yorug'lik yoki ovozni yoqishning turli usullari yordamida amalga oshirishimiz mumkin. Va bu, o'z navbatida, shubhali faoliyatni sezish va foydalanuvchini potentsial tahdid haqida ogohlantirish imkonini beradi. Bunday smartfon ilovasiga Haven ilovasini misol qilib keltirish mumkin.\n\n3. Texnik kuzatuvni aniqlash\nSmartfonlar, trekerlar, naushniklar va aqlli soatlar kabi BT/WiFi qurilmalari tashqi kuzatuv bilan bog'liq har qanday narsani aniqlash uchun ishlatilishi mumkin. Ulangan qurilmalar va ularning faolligini tekshirish potentsial muammolarni aniqlashga yordam beradi. Bu sohadagi eng sevimli ilovam WiGLE (Wireless Geographic Logging Engine tomonidan).\nWiGLE simsiz tarmoqlar haqidagi ma'lumotlarni to'playdigan va tahlil qiladigan ochiq kodli loyihadir. Ilova geolokatsiya asosida mobil saytlar, WiFi routerlar va Bluetooth qurilmalari haqida passiv maʼlumotlarni toʻplashi mumkin. Bu bizga biz bilan \"harakatlanuvchi\" qurilmalarni aniqlash imkonini beradi, ya'ni ular kuzatuvni amalga oshirishi mumkin. WiGLE bunday qurilmalarning taxminiy yaqinligini, ularning nomlarini va MAC manzillarini beradi. @ctc_uz\nMaqolani ulashing va keyingi qismlarini tez orada chop etasmiz.","datePublished":"2023-08-31T16:42:38Z","dateModified":"2023-08-31T16:42:38Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":5,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":1058},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":7},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":5}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/387","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/387","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/387","headline":"senado.pr.gov seat.sa.gov.au Jamoamiz azosning xss injection zaifligi bo'yicha izlanishlari davom etmoqda bir…","articleBody":"senado.pr.gov seat.sa.gov.au Jamoamiz azosning xss injection zaifligi bo'yicha izlanishlari davom etmoqda bir qator chet davlat saylari yetrlich zaifliklari bilan reportga berildi, bu hali hammasi emas bug uchun katta $$$ beradigan kompaniyalar ham nishonimizda va zaifliklardan hozirda yetarlicha ichkariga kirib borilyapti. Bu hali hammasi emas bu chet el saytlari bizga nima qiziq deyishingiz mumkin. Bizda 100+ .uz saytlaridagi qaynoq xssi to'plamini tuzdik, bilmadim qanchaga baholash mumkin bularni lekin hozircha bergan buglarning qadri ZERO /) H0Oops XSSi!! Mayli biz davom etamiz aytgancha, moodle saytlar uchun report tuzmoqdamiz jamoaga qo'shilmoqchi bo'lganlar va guruhimizda faol bo'linglar !!","datePublished":"2023-08-30T06:20:01Z","dateModified":"2023-08-30T06:20:01Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":6,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":511},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":13},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/385","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/385","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/385","headline":"🗂 Veb-ilova zaifliklaridan foydalanish bo'yicha videolar to'plami Quyidagi omborda turli xil zaifliklar uchun…","articleBody":"🗂 Veb-ilova zaifliklaridan foydalanish bo'yicha videolar to'plami\n\nQuyidagi omborda turli xil zaifliklar uchun veb-ilovalarni sinab ko'rish bo'yicha videolar to'plami mavjud. Qulaylik uchun zaifliklar turiga qarab toifalarga bo'lingan.\n\n⏺ Git Hub https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes\n\nQuyidagi videoda zaifliklari eng ko'p turi sanalmish XSSni aniqlash uçhun > XSSTRON - XSS qidiruvi uchun Chromium-ga asoslangan brauzer\nBrowzerdan shunchaki bitta saytga kiring va u sizga DOM XSS zaifliklarini avtomatik ravishda tekshiradi. Shuningdek, POST so'rovlarini qo'llab-quvvatlaydi. Zaiflik topilsa, uni ekspluatatsiya misoli bilan birga yangi oynada ko'rsatadi. Buni firefox uchin add-onga extensionlar orasidan ham topishingiz mumkin. Bu vositalar orqali kutilmagan XSSlarni ko'rib qolasiz, kirmagan joydan bug chiqib qolsa ajab emas .uz dan🫠\nLink > https://github.com/RenwaX23/XSSTRON","datePublished":"2023-08-28T15:18:13Z","dateModified":"2023-08-28T15:18:13Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":593},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":13}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/384","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/384","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/384","headline":"Kiberxavfsizlik yoki hackingda komputersiz iloji yo'qmi? Javob yo'q albatta. Ushbu maqola qaysidir manoda mot…","articleBody":"Kiberxavfsizlik yoki hackingda komputersiz iloji yo'qmi?\n\nJavob yo'q albatta.\n Ushbu maqola qaysidir manoda motivatsion desak ham bo'ladi. Bu sohani dastlabki boshlovchilar yoki shunchaki vaqtincha qiziquvchilar, lyubiyellar uchun komputer juda ham muhim deb hisoblamayman, albatta moliyaviy tomoningiz ortiqcha yaxshi bo'lsa olganingiz maqulroq)). Lekin ko'pchilik qiziqadiganlardan eng ko'p eshitadigan savollar bu - Komputer shartmi? Linux bõlishi kerakmi? kabi savollar bõladi. Agar qiziqishingiz bo'lsa siz hamma sharoitga ega bo'lmasdan turib ham bu sohani boshlashingiz mumkin, qandayligini hozir ko'rib chiqamiz.\nAvvalo sizda o'zingizni malumotlarning kam saqlanadigan, social media rasmiy akkauntlaringiz bo'lmagan oddiyroq android telefon tavsiya qilaman(Nokia, Sony, Xiaomi yokida Redmi) va o'zingizni qiziqqan yonalish tarmoq xavfsizligi, kiberxavfsizlik buyicha android uchun ilovalarni o'rganishdan boshlash maqsadga muvofiq. https://www.guru99.com/best-hacking-apps-android.html\nhttps://www.geeksforgeeks.org/best-game-hacking-apps-for-android/\nUshbu ilovalar orqali pentesting, wifi scan, networking scan da kichkina hacklarni amalga oshirishingiz mumkin.\nKeyingi navbatda Termuxni(hozirda play marketdan o'chirilgan) o'rnatib olsangiz bu sizning Linux terminalingiz bo'ladi. Undan keyin git clonenni o'rnatishni orqali butun hackerlik vositalari jamlangan GitHub dan install qilib olishingiz mumkin. Tabriklayman ushbu bosqichgacha kelgan bo'lsangiz siz komputerda boshqalarga o'xshab nima ish qilishni bo'lmasdan o'tirmaysiz. Endi navbat shu oddiy androidga Kali Linuxning barcha hackerlik dasturlarini o'rnatishingiz mumkin, buning uchun siz Kali Net hunterni termux orqali o'rnatib olsangiz hammasi tayyor. \nHa aytishingiz bu hammasi oddiy gapdek bo'lyapti, хатя бы video chiqarmaysizmi deb, menimcha chin ko'ngildan qiziqqan inson bularni barchasini ilojini topadi, axir bu maqolani 6-7 yil oldin oddiy fleshkada oddiy frontend dasturlash tillari orqali yozilgan saytlarni sotib pul ishlagan inson yozmoqda, shu vaqtlar men hacking laptopimni faqat tasavvur qilardim. Ishoning sizda hmmasi o'xshaydi va hammasiga o'z kichingiz orqali erishasiz.\n Pls share much, more!)\n@ctc_uz Cyber training club- Kibermakonda har doim siz bilan.","datePublished":"2023-08-26T16:38:09Z","dateModified":"2023-08-26T16:38:09Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":5,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":919},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":10},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":5}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/383","url":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/383","mainEntityOfPage":"https://telemetr.io/en/channels/1322805503-ctc_uz/posts/383","headline":"Quyidagi postni davomi sifatida bugun pentesting va CTF bo'yicha bepul lobaratoriyalar sizning ko'nikmangizni…","articleBody":"Quyidagi postni davomi sifatida bugun pentesting va CTF bo'yicha bepul lobaratoriyalar sizning ko'nikmangizni oshirishga va komputer bilimlaringizni oshirishga yordam beradi.\nUshbu saytlardagi qancha ko'p labladan o'tsangiz shuncha tajribangiz oshib boradi. Hammaga OMAD!!!\n\n-> Try Hack Me https://tryhackme.com\n-> Attack-Defense https://attackdefense.com\n-> alert to win https://alf.nu/alert1\n-> CMD Challenge https://cmdchallenge.com\n-> Exploration Education https://exploit.education\n-> Google CTF https://capturetheflag.withgoogle.com\n-> HackTheBox https://www.hackthebox.com/\n-> Defendtheweb https://defendtheweb.net/\n-> Hacksplaining https://www.hacksplaining.com/lessons\n-> Hacker101 https://ctf.hacker101.com\n-> Hacker Security https://capturetheflag.com.br\n-> Hacking-Lab https://www.hacking-lab.com/events/\n-> HSTRIKE https://hstrike.com\n-> ImmersiveLabs https://immersivelabs.com\n-> NewbieContest https://www.newbiecontest.org/\n-> OverTheWire http://overthewire.org\n-> Practical Pentest Labs https://practicalpentestlabs.com\n-> Pentestlab https://pentesterlab.com\n-> Penetration Testing Practice Labs http://www.amanhardikar.com/mindmaps/Practice.html\n-> PentestIT LAB https://lab.pentestit.ru\n-> PicoCTF https://picoctf.com\n-> PWNABLE https://pwnable.kr/play.php\n-> Root-Me https://www.root-me.org\n-> SANS Challenger https://www.holidayhackchallenge.com\n-> SmashTheStack http://smashthestack.org/wargames.html\n-> The Cryptopals Crypto Challenges https://cryptopals.com/\n-> Vulnhub https://www.vulnhub.com\n-> W3Challs https://w3challs.com\n-> WeChall http://www.wechall.net\n-> HackerRank https://www.hackerrank.com\n-> kaggle https://www.kaggle.com/\n-> Zenk-Security\nhttps://www.zenk-security.com/\nPOSTED BY @ctc_uz","datePublished":"2023-08-25T15:46:11Z","dateModified":"2023-08-25T15:46:11Z","author":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"publisher":{"@type":"Organization","name":"Cyber Training Club🇺🇿","url":"https://telemetr.io/en/channels/1322805503-ctc_uz","image":"https://img.tlmtr.io/c/1rwm8D/5152267297296067423?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":566},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":30}]}}]}
+1
#motivation Компьютер трейнинг центр приставляет специальные для вас! @ctc_uz
Avval aytilganidek bir nechta web shell for learning, albatta hammasi free!!! To'g'ri maqsadda foydalaning demiman chunki backdoor hech qachon to'g'ri maqsadda qurilmaydi)) http://www.oticasnobrebsb.com/wp-admin/css/index.php
http://adanakepenk.com/repeater.php
http://angryheads.247savenow.com/alfanew.php7
http://gosteitop.000webhostapp.com/repeater.php
http://musicfashionweek.247savenow.com/alfanew.php7 http://dfc.dypixlab.com/alfanew.php7
https://proads.lk/wp-admin/css/index.php
Logs'll dump by @ctc_uz
🔍 Tosint (OSINT Telegram)
#OSINT Dan uzoqlashmagan holda izlanishlarni davom ettiramiz va gitlarga murojaat qilamiz, git hubda bilamizki ko'pgina scriptlar ishlamasligi yoki o'zgartirish kiritishga muxtoj bo'lgan codelar bor ularni o'zingiz hudud va sharoitga moslashni talab qiladi. Maslahatim gitlardan to'g'ri foydalanib ikkita uchta vositalarni jamlashtirsangiz albatta o'zingiz uchun universal vosita ixtiro qilgan bo'lasiz. Ushbu git ham qolganlari singari ko'pchilik vositalarni o'ziga jamlangan va asosiysi ishlaydi).
— Telegram botlari va tegishli kanallardan maʼlumot olish vositasi.
Imkoniyatlar:
• Bot haqida ma'lumot olish (ism, foydalanuvchi nomi,
foydalanuvchi identifikatori, holati);
• Chat haqida ma'lumot olish (nomi, turi,
ID, foydalanuvchi nomi, taklif havolasi);
• Taklif havolasini yaratish;
• Yangilanishlarni qabul qilish (chatga yuborilgan so'nggi xabarlar);
• Chatdagi foydalanuvchilar sonini olish;
• Chat administratorlari haqida ma'lumot olish.
Izlanishdan to'xtamang deya @ctc_uz
⏺ GitHub
Assalom aleykum hurmatli kiberxavfsizlik ishqibozlari va obunachilar. Kuningiz hayrli bo'lsin deya yangi topilgan CVE orqali ishg'ol qilingan serverdagi saytlarni defance pagelarini taqdim etamiz.
https://allservicesandrepairs.com/Index.html
https://vscleaning.com/Index.html
https://dash.vscorporations.com/Index.html
https://gemsinvestment.rentals/Index.html
https://help.vscorporations.com/Index.html
https://paramountmarket.store/Index.html
https://vswaterdamage.com/Index.html
https://sidetech.shop/Index.html
https://vscorporations.com/Index.html
https://vsluxurycars.com/Index.html
Kanalimi @ctc_u
Ushbu websaytlarning aksar qismi joylashgan serverda yanada muhimro siz uchun juda mashhur bo'lgan backdoor bor, uni izlab ko'ring albatta topganlar aloqaga chiqinglar yoki faqat o'quv maqsadlarda foydalaning. Havola bilan ulashing.!!
Привет друзья с вами ещё одного аттакер из этого группа кто целый день путешествовать в #OSINT этот пост для использовать осинт в телеграмм. Давайте ребят проверьте свой Telegram на данные!Поиск осуществляется по любым данным через этого телеграм бот и сайты, да это более менее нормально, ну они работают и безопасно.
1. Telegago — находит публичные, приватные каналы и группы, Telegraph статьи, стикеры, боты, сообщения и прочее
2. lyzem.com — поисковик аналогичный buzzim
3. tgstat.com — поиск в публичных каналах
4. Exgram — поисковая система на основе Яндекса, поиск по 17 сайтам-агрегаторам, находит Telegraph статьи, контакты, приватные и публичным каналы с группами
5. Bingram — ищет во всех агрегаторах контента Telegram, на основе поисковика Bing
6. @MotherSearchBot — находит файлы и посты публичных каналов
7. Commentgram — поиск в комментариях к постам
8. Commentdex — поиск в комментариях к постам
9. @myseekerbot — находит посты из Иранских каналов
10. telegramdb.org — находит публичные группы их описание и ссылку
11. telemetr.me (r) — поиск в описании ботов, в описании и постах каналов, в Telegraph статьях, чтобы увидеть все посты используйте мобильную версию сайта @ctc_uz
12. tgramsearch.com — поиск в описании и названии каналов, найдет ссылку и картинку
13. smat-app.com — активность, упоминания, счетчик ссылок, есть фильтр по дате
14. kribrum.io — фильтры по дате, автору, необходимо выбрать в фильтрах платформу Telegram
15. @enSearchBot — ищет в названии групп и каналов и дает туда ссылку
16. tgdev.io — ищет в 700M постах, есть фильтры по дате
Дорогие зрители присоединяйтесь к нам and share much,more... @ctc_uz
Hammaga hayrli tong !!! Videodagi saytda backdoorni ko'rib albatta uyqingiz ochiladi, yo'q hali shoshmang bizda kechagi DDoS yakunlari va natijalar turbdi va biz ishlatishimiz mumkin bo'lgan ⚡ vositalar.
Hackerlarning ushbu vositalari yoki shu algoritm bilan ishlab chiqilgan dasturlari bugungi kunda serverlarga yetarlicha ziyon yetkazishmoqda, birgina
.uz Internet zonasiga uyushtirayotgan DDoS hujumlarni turli xil cybermaplardan topishingiz mumkin va bular hammasi ham chetdan emas afsus, o'zimizdan turib VPN yoqib oladigan "haskerlar. To'g'ri albatta qiziqishga uni ham tajriba qilar lekin shuncha kuch bo'la turib uni havova sovurish menimcha yaxshi emas. Aytmoqchimizki, qaysi server yoki saytga hujum qilishingizdan qat'iy nazar doimo aniq maqsad bilan reja boshlang va u reja o'zingizni ham va atrofdagilarni qoniqtirsin, sizning hujumlarining uchun UZ zonasiga boladimi boshqadami menimcha negativ va turli xil bo'lmag'ur saytlar va serverlar, web dasturlar bor. Всем спасибо с вами Ддоуз/) Happy nice day!
Bugun jamoamiz a'zosi o'zining har doimgi usulida def(ance) hujumlarini qilib, shell orqali bizning botnet kuchimizni yanada oshirdi. Ushbu hujumlardan maqsad so'reydiganlar uchun »» bu faqat learning maqsadida qilinyapti va sayt adminiga aytilgandan keyin o'chirilad, shellga keladigan bo'lsak u botnet uchun hali kerak bo'ladi.🫠🫥 http://ofoindia.com/def.html
http://aiofsindia.com/def.html
http://ayurvedatips.datadecade.com/def.html
http://ayurvedatips.info/def.html
https://bankindia.info/def.html
http://datadecade.com/def.html
http://rameshjewellers.co.in/def.html
http://socialkhushi.com/def.html Defanced by @ctc_uz
Google dorklar faqat o'quv maqsadlarda »» index of cpanel.txt site:*.gov.* allintext:static/uploads intext:"/login.php" intitle:"login" site:*.edu.* index of: admin.json site:.uz intitle:Web Image Monitor inurl:mainFrame.cgi intitle:"index of" "download.php?file=" inurl:/wp-login.php?action=register intext:"Register For This Site" Onlayn kameralar uchun "inurl:8080/dashboard/ intitle:Dashboard", "inurl:/index.php?enter=guest",
"inurl:CGI/Java/Serviceability?adapter=device.statistics.device",
"intitle:Marshall VS Server",
"intext:{{szErrorTip}} inurl:/doc/page/login.asp",
"intitle:openshift web console inurl:console inurl:/console",
"inurl:/hp_login.html",
police.gov.in Hindiston asosan Dehli police departamenti. Hozircha qarmoqqa ilinganlari . Jamoaning SQLi hujumlardan asosiy maqsad OSINT uchun mukkammal ma'lumotlar bazasi yaratish.
https://prosoftesolutions.com/support/index.php/user_login/login:addlspknr-nodal@tspolice.gov.in:9440795187@Ss
http://pcc.delhipolice.gov.in/UserLogin.aspx:nk7235423@gmail.com:Arshad@1234
https://pcc.delhipolice.gov.in/Registration.aspx:lalit yadav:Abhi12345@@
http://pcc.delhipolice.gov.in/UserLogin.aspx:mohitgujjar8877@gmail.com:Mohit@1234
https://pcc.delhipolice.gov.in/UserLogin.aspx:lalityadav8917@gmail.com:Abhi12345@@
https://echallan.tspolice.gov.in/publicview/:Ramprasad Rao G:Bujji5163
http://pcc.delhipolice.gov.in/Registration.aspx:RESHMA:Reshma@1234
https://pcc.delhipolice.gov.in/Registration.aspx:VIPIN MAURYA:ABHI1234@
http://pcc.delhipolice.gov.in/UserLogin.aspx:sandeeptanwar55555@gmail.com:Sandeep@12
https://citizen.mppolice.gov.in/CitizenLogin.aspx:Ram@1992:Ram@1992
https://pcc.delhipolice.gov.in/Registration.aspx:DHEERU:aBHI12345@@
https://citizen.mppolice.gov.in/CitizenLogin.aspx:Sunil@1997:Sunil@2019
https://iaps.keralapolice.gov.in/iaps/login.htm:703340:vishmi2021
http://pcc.delhipolice.gov.in/Registration.aspx:sanjaylalitahansvi@gmail.com:sanjay123@
https://haryanapolice.gov.in/SignUp:SHEETAL5722:Sheetal@123
https://pcc.delhipolice.gov.in/UserLogin.aspx:mubarik3004@gmail.com:Mubarik@12
https://citizenportal.lakshadweeppolice.gov.in/citizen/citisignup.htm:cgshahil@gmail.com:102030---
http://recruitment.hppolice.gov.in/index.php/login:dharampalsingh078@gmail.com:NEHA4361h!
http://auth.tspolice.gov.in:8080/OpenAM/UI/Login:siddipet_cp:SP_123
https://recruitment.hppolice.gov.in/index.php/login:dharampalsingh078@gmail.com:NEHA4361h!
https://mail.tspolice.gov.in/webmail/:adcpadmin@sdpt.tspolice.gov.in:Test1234
http://www.eservices.tnpolice.gov.in/CCTNSNICSDC/Login:sho91578:sho91578
https://pcc.delhipolice.gov.in/Registration.aspx:preeti tiwari:Preeti@123
https://pcc.delhipolice.gov.in/UserLogin.aspx:rathormanishv1@gmail.com:NDeYtkTl
https://haryanapolice.gov.in/SignUp:vikas1300:vikas@1300
http://www.appolice.gov.in/jsp/citizenLogin.do:lohith6:N@lohith6
https://citizen.jhpolice.gov.in/citizen/citisignup.htm:pandeydhn@:Home99345@
https://haryanapolice.gov.in/SignUp:aasha1235:Ajit@123
https://pcc.delhipolice.gov.in/UserLogin.aspx:VATSV620@GMAIL.COM:NEELAM@123
https://pcc.delhipolice.gov.in/UserLogin.aspx:ashishrav423@gmail.com:toQKP55Y
https://pcc.delhipolice.gov.in/UserLogin.aspx:preetit809886@gmail.com:Preeti@123
http://pcc.delhipolice.gov.in/Registration.aspx:NEELAM:NEELAM@123
http://cctns.delhipolice.gov.in/movementservices/citisignup.htm:arunvats:@123a@123a
http://pcc.delhipolice.gov.in/Registration.aspx:artsanky@gmail.com:Ankush@123
https://haryanapolice.gov.in/SignUp:JOGENDER12:Jogender@321
https://www.tspolice.gov.in/jsp/citizenLogin:Pulivinaykumar:Vinay11@
https://haryanapolice.gov.in/:KIRSHANKUMARHARIYAWAS:Kirshan@123
https://citizen.jhpolice.gov.in/citizen/citisignup.htm:Umesh Murmu:03057976
https://pcc.delhipolice.gov.in/:pradeepmaan083@gmail.com:pradeep@123
http://pcc.delhipolice.gov.in/:Lori03209@gmail.com:O7p8QN1R
https://thuna.keralapolice.gov.in/citizen/login.htm:juliet:sandskuwait123@
https://haryanapolice.gov.in/Login:gujjarnitesh1998@gmail.com:Nitesh@321
https://pcc.delhipolice.gov.in/:Sourabhkumar51810@gmail.com:sourabh123@
http://citizenportal.hppolice.gov.in 8080/citizen/login.htm:p8219890240@gmail.com:Shimla@123
http://auth.tspolice.gov.in 8080/OpenAM/UI/Login:TG_USR_2030394:USR_123
http://citizenportal.hppolice.gov.in 8080/citizen/citisignup.htm:sonu1986:Sonu@1986
https://www.appolice.gov.in/jsp/citizenLogin.do:ssuriset:Vidhura$2014 http://citizenportal.hppolice.gov.in 8080/citizen/login.htm:jain.raunak30@gmail.com:New@barn1
https://enterprisesearch.appolice.gov.in 8181/eecops/login.htm:tirupathi_sp:USR_123
http://cgfir-dept.cgpolice.gov.in 9090/CCTNS_Citizen_Portal/UserLogout:spbijapur:Spbijapur@1234
Assalam aleykum!!! @ctc_uz >>>I'm new mamber<<<
Bugun sizlarga 2023 yildagi dolzarb XSS vositalari haqida batafsilroq yozishga harakat qilaman.
XSS (Cross site script)- bu ko'plab veb-ilovalarda topilishi mumkin bo'lgan "saytlararo skript" zaifligi. Uning tushunchasi oddiy, dastlab taqdim etilmagan sahifaga JavaScript kodini kiritish va tamom. Oxirgi vaqtlarda rec bo'lgan hack qilingan senat.uz va parliament.gov.uz syatlari ushbu zaiflik orqasidan buzilgan. Albatta bu ishni kimdir qilishni kerak edi, hali .uz domain da XSS bo'yicha report berilgan qancha saytlar yotibdi.
Ushbu postda men sizlarga 2023 yilda bilishingiz kerak bo'lgan ba'zi XSS vositalari va ular XSS zaifliklarini aniqlash va tuzatish uchun mo'ljallangan, natijada veb-ilovalarni potentsial hujumlardan himoya qilish haqida aytib o'taman.
XSStrike- https://github.com/s0md3v/XSStrike veb-ilovvalardagi XSS zaifliklarini aniqlash va ulardan foydalanishga ixtisoslashgan vositadir. U XSS skanerlash usullari va foydali yuklarining to‘liq to‘plamini taklif etadi, bu esa uni professionallar uchun qimmatli manbaga aylantiradi.
Dalfox -https://dalfox.hahwul.com/ veb-ilovalarni XSS (saytlararo skriptlar) zaifliklari uchun skanerlashga ixtisoslashgan vositadir. Bu xavfsizlik mutaxassislari va axloqiy xakerlarga potentsial XSS zaif tomonlarini aniqlash va ulardan foydalanishning tez va samarali usulini taqdim etadi.
BruteXSS kuchli XSS (saytlararo skript) iteratsiya vositasidir.
BruteXSS https://github.com/rajeshmajumdar/BruteXSS turli xil operatsion tizimlarda ishlashi mumkin bo'lgan o'zaro faoliyat platformalar vositasidir.
Ushbu moslashuvchanlik uni kengroq professionallar uchun ochiq qiladi.
Bundan tashqari git hubdan keng foydalanadigan bir necha vositalarbilan ham tanishtirib o'tmoqchiman.
https://github.com/faiyazahmad07/xss_vibes hamda https://github.com/swoops/eval_villain va Pythonda yozilgan, xss topilmalaringizni avtomatlashtiradigan zamonaviy vosita.https://github.com/faiyazahmad07/xss_vibes. Ushbu vositalar pentesterlar va bo'lajak bug bounterlar uchun Juda zarur, chunki hozirgi kundagi bugbounty platformalarda eng katta bountyni sizga XSS olib beradi. Happy hacking!!) @ctc_uz XSS misollar kerak bo'lsa commentga yoki biodagi botga aynan qaysi domaindan XSS tashlashimizni yozila.
http://eadvmedia.odisha.gov.in/phpMyAdmin/ Information & Public Relations Department Login:impredvuser Password: Eadv@12@#12Impr
https://www.uzbeksites.com/index.php?gp=addpage&catid=71 SQLinjection Afsus kak drugix uzbeksites ekan. 438 184.82.190.229 weight loss transformation abc, weight loss pills phentermine, fitness connection greenville nc 0 0 1 2012-09-07 1 nuratrim http://www.nuratrimuk.com
Independent and informative reviews on the top slimming pills available to buy online in the UK. Find out which slimming pills come highly recommended ad which ones will actually help you to lose weight. guetta@spotlightgossip.com 0 446 184.82.190.238 healthy breakfast casserole, health o meter large dial scale 142kl, healthy breakfast ideas 0 0 0 2012-09-07 1 natox http://healthshack.co.uk/skin-care/botox-alternative/ Saytdan ozroq ma'lumotlar. Iltimos kanal linki bilan tarqating!!!
https://downloadyourcourse.com/website/ctc_uz/ctc_uz.html Ushbu ajoyib script sizning defanselaringizni bezashi aniq. index.html ga kiib yurmanglar yana 🫠🫠 <iframe/src="data:text/html,<body%20style=margin:0><canvas%20id=q%20/><script>var%20q=document.getElementById('q'),s=window.screen,w=q.width=s.width,h=q.height=s.height,p=Array(256).join(1).split(''),c=q.getContext('2d'),m=Math;setInterval(function(){c.fillStyle='rgba(0,0,0,0.05)';c.fillRect(0,0,w,h);c.fillStyle='rgba(0,255,0,1)';p=p.map(function(v,i){r=m.random();c.fillText(String.fromCharCode(m.floor(2720+r*33)),i*10,v);v+=10;%20return%20v>768+r*1e4?0:v})},33)</script>" width="2000" height="900">
</iframe>
2 qism.
4. Fon tovushlarini masofadan turib tinglash va yozib olish
Simsiz minigarnituralardan foydalanish, smartfon atrofida tovushlarni yozib olish ham mumkin bo'lgan xususiyatdir, ammo shuni yodda tutingki, bunday usullardan foydalanish noqonuniy bo'lishi va shaxsiy va qonuniy huquqlarni buzishi mumkin. Shu bilan birga, smartfondan tinglash moslamasi sifatida foydalanish turli xil hayotiy vaziyatlarda foydali bo'lishi mumkin.
Tinglashning eng oson yo'li telefoningizga maxsus dasturlarni o'rnatishdir. Android smartfonlari uchun bunday turdagi bir nechta ilovalar mavjud va eng mashhurlaridan biri bu bepul Ear Agent ilovasi, ammo uning analoglari ham mavjud. Aslini olganda, bunday ilovalar eshitish qobiliyati past odamlar uchun umumiy ovoz kuchaytirgichidir. To'g'ri, siz smartfoningizni boshqa joyda "unutgan" paytingizgacha.
5. Masofadan suratga olish va video yozish.
Bu erda hamma narsa oddiy. Agar qurilmalar bizga kerak bo'lgan funksiyalarga ega bo'lsa va tegishli aloqa protokollarini qo'llab-quvvatlasa, biz aqlli soatlar yordamida kichik kamerachalarni qo'shishimiz mumkin. Bu funksionallik uzoq vaqtdan beri ko'pchilik aqlli soatlar uchun odatiy hol bo'lib kelgan va qo'shimcha ilovalarni o'rnatishni talab qilmaydi. Foydalanish, lekin qonun haqida unutmang.
Agar masofaviy suratga olish uchun aqlli soatning funksionalligi etarli bo'lmasa, uni uchinchi tomon ilovalari yordamida kengaytirish mumkin. Masalan, DroidCam telefoningizdan shaxsiy kompyuter veb-kamerasi sifatida foydalanish imkonini beradi. Shu kabi ilovalar telefoningiz kamerasini planshet orqali boshqarish imkonini beradi. Bu erda hamma narsa faqat sizning so'rovlaringiz va tasavvurlaringiz bilan cheklangan, chunki smartfonni masofadan suratga olish va video suratga olish vositasi sifatida ishlatish.
6. NFC kartalarini o'qing, nusxa ko'chiring va yozing.
Va bu, o'z navbatida, bunday funktsiyani qo'llab-quvvatlaydigan maxsus uskunalar va dasturiy ta'minot mavjudligi bilan mumkin bo'ladi. Shunga qaramay, undan foydalanish qonuniy va axloqiy me'yorlarga mos kelishi kerak. Ushbu hackdagi mutlaq sevimli narsa NFC Tools ilovasi bo'lib, u o'z NFC teglaringizni o'qish va yaratish imkonini beradi.
Xususan, NFC Tools bir NFC kartasidan boshqasiga ma'lumot nusxalash yoki turli qurilmalarda foydalanish uchun kartaning klonini yaratish imkonini beradi. Bundan tashqari, NFC Tools ilovasidan foydalanib, siz NFC teglari yoki teglaridan ma'lumotlarni o'qishingiz va ularga yangi ma'lumotlarni yozishingiz mumkin. Bu, masalan, qo'riqchilarning hudud bo'ylab yurishi uchun jismoniy marshrutni yaratish, shuningdek, bunday yurishlarning muntazamligini nazorat qilish imkonini beradi.
7. Videokuzatuv tizimlariga masofadan kirish
Shuni esda tutish kerakki, ofis ish joyiga va maxsus dasturiy mahsulotlarga kirish xavfsizlik siyosatiga muvofiq amalga oshirilishi va tegishli ruxsatlarga ega bo'lishi kerak. Ammo, o'z navbatida, bu tizimlar yoki ilovalarni masofadan nazorat qilish va boshqarish uchun foydali xususiyat bo'lishi mumkin. Hammasi oddiy, lekin zarur. E'tiboringiz uchun rahmat.
Hammani mustaqillik bayrami bilan jamoamiz nomidan tabriklaymiz!!! https://g.co/doodle/mkv56by
Smartfon kiberxavfsizlik mutaxassislari va bo'lajak hackerlar uchun vosita sifatida.(1 qism) Yuqoridagi maqolani to'ldirib qo'yish maqsadida.
Hammaga salom! Bugungi maqolamizda smartfonni kiberxavfsizlik qiziquvchilari uchun foydali vosita sifatida ko'rib chiqamiz. Masofadan suratga olish va tinglash kabi aniq xususiyatlardan kuzatuvni aniqlash va yashirin kamerani aniqlashgacha. Odatdagidek, misollar, foydali ilovalar va boshqa tafsilotlar bilan.
Zamonaviy smartfonlar kiberxavfsizlik ishqibozlariga o'zlarining kasbiy vazifalarini samarali bajarishlari uchun ko'plab imkoniyatlarni taqdim etadi. Hozir aytib o'tishim kerak, muhokama qilinadigan ba'zi mobil ilovalarning sifatli ishlashi bevosita smartfoningizning tarkibiy qismlariga bog'liq. Misol uchun, agar qurilmangizda metall detektor bo'lmasa, yashirin simlarni aniqlash mumkin emas.
🛡💡Link ostida berilgan hamma ilovalar play marketdan olingan va xavfsi, ilovalarning screenshot larini comment qismiga tashaladi.
1. Yashirin kameralar va xatolarni aniqlash
Albatta, bu xavfsizlik xizmatlari uchun muhim vazifadir. Xavfsizlik xodimlari yashirin qurilmalarni aniqlash uchun turli jihozlardan foydalanishi mumkin. U RF signal detektorlari, optik skanerlar, termal kameralar va elektromagnit nurlanishni yoki yashirin qurilmalarning boshqa belgilarini aniqlashga qodir bo'lgan boshqa qurilmalarni o'z ichiga olishi mumkin. Odatda, smartfonlarda xatolar va yashirin kameralarni aniqlash uchun o'rnatilgan funksiyalar mavjud emas. Biroq, bunday qurilmalarni qidirishda siz hali ham smartfoningizdan yordamchi vosita sifatida foydalanishingiz mumkin.
Smartfon ilovalari do'konlarida siz yashirin kameralarni aniqlaydigan dasturlarni topishingiz mumkin. Bunday ilovalarning samaradorligi cheklangan bo'lishi mumkin, chunki ular ma'lum algoritmlarga va smartfon sensorlariga tayanadi. Misol uchun, ba'zi smartfonlarda yashirin kameralar yoki xatolardan (masalan, Yashirin Kamera Detektori yoki Glint Finder - Kamera Detektori) infraqizil signallarni aniqlash uchun ishlatilishi mumkin o'rnatilgan infraqizil qabul qiluvchi mavjud.
2. Signal funksiyasi
Biz ushbu funktsiyani ramkadagi harakatga javob berish, qurilmani harakatlantirish, yorug'lik yoki ovozni yoqishning turli usullari yordamida amalga oshirishimiz mumkin. Va bu, o'z navbatida, shubhali faoliyatni sezish va foydalanuvchini potentsial tahdid haqida ogohlantirish imkonini beradi. Bunday smartfon ilovasiga Haven ilovasini misol qilib keltirish mumkin.
3. Texnik kuzatuvni aniqlash
Smartfonlar, trekerlar, naushniklar va aqlli soatlar kabi BT/WiFi qurilmalari tashqi kuzatuv bilan bog'liq har qanday narsani aniqlash uchun ishlatilishi mumkin. Ulangan qurilmalar va ularning faolligini tekshirish potentsial muammolarni aniqlashga yordam beradi. Bu sohadagi eng sevimli ilovam WiGLE (Wireless Geographic Logging Engine tomonidan).
WiGLE simsiz tarmoqlar haqidagi ma'lumotlarni to'playdigan va tahlil qiladigan ochiq kodli loyihadir. Ilova geolokatsiya asosida mobil saytlar, WiFi routerlar va Bluetooth qurilmalari haqida passiv maʼlumotlarni toʻplashi mumkin. Bu bizga biz bilan "harakatlanuvchi" qurilmalarni aniqlash imkonini beradi, ya'ni ular kuzatuvni amalga oshirishi mumkin. WiGLE bunday qurilmalarning taxminiy yaqinligini, ularning nomlarini va MAC manzillarini beradi. @ctc_uz
Maqolani ulashing va keyingi qismlarini tez orada chop etasmiz.
+1senado.pr.gov seat.sa.gov.au Jamoamiz azosning xss injection zaifligi bo'yicha izlanishlari davom etmoqda bir qator chet davlat saylari yetrlich zaifliklari bilan reportga berildi, bu hali hammasi emas bug uchun katta $$$ beradigan kompaniyalar ham nishonimizda va zaifliklardan hozirda yetarlicha ichkariga kirib borilyapti. Bu hali hammasi emas bu chet el saytlari bizga nima qiziq deyishingiz mumkin. Bizda 100+ .uz saytlaridagi qaynoq xssi to'plamini tuzdik, bilmadim qanchaga baholash mumkin bularni lekin hozircha bergan buglarning qadri ZERO /) H0Oops XSSi!! Mayli biz davom etamiz aytgancha, moodle saytlar uchun report tuzmoqdamiz jamoaga qo'shilmoqchi bo'lganlar va guruhimizda faol bo'linglar !!
🗂 Veb-ilova zaifliklaridan foydalanish bo'yicha videolar to'plami
Quyidagi omborda turli xil zaifliklar uchun veb-ilovalarni sinab ko'rish bo'yicha videolar to'plami mavjud. Qulaylik uchun zaifliklar turiga qarab toifalarga bo'lingan.
⏺ Git Hub https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
Quyidagi videoda zaifliklari eng ko'p turi sanalmish XSSni aniqlash uçhun > XSSTRON - XSS qidiruvi uchun Chromium-ga asoslangan brauzer
Browzerdan shunchaki bitta saytga kiring va u sizga DOM XSS zaifliklarini avtomatik ravishda tekshiradi. Shuningdek, POST so'rovlarini qo'llab-quvvatlaydi. Zaiflik topilsa, uni ekspluatatsiya misoli bilan birga yangi oynada ko'rsatadi. Buni firefox uchin add-onga extensionlar orasidan ham topishingiz mumkin. Bu vositalar orqali kutilmagan XSSlarni ko'rib qolasiz, kirmagan joydan bug chiqib qolsa ajab emas .uz dan🫠
Link > https://github.com/RenwaX23/XSSTRON
Kiberxavfsizlik yoki hackingda komputersiz iloji yo'qmi?
Javob yo'q albatta.
Ushbu maqola qaysidir manoda motivatsion desak ham bo'ladi. Bu sohani dastlabki boshlovchilar yoki shunchaki vaqtincha qiziquvchilar, lyubiyellar uchun komputer juda ham muhim deb hisoblamayman, albatta moliyaviy tomoningiz ortiqcha yaxshi bo'lsa olganingiz maqulroq)). Lekin ko'pchilik qiziqadiganlardan eng ko'p eshitadigan savollar bu - Komputer shartmi? Linux bõlishi kerakmi? kabi savollar bõladi. Agar qiziqishingiz bo'lsa siz hamma sharoitga ega bo'lmasdan turib ham bu sohani boshlashingiz mumkin, qandayligini hozir ko'rib chiqamiz.
Avvalo sizda o'zingizni malumotlarning kam saqlanadigan, social media rasmiy akkauntlaringiz bo'lmagan oddiyroq android telefon tavsiya qilaman(Nokia, Sony, Xiaomi yokida Redmi) va o'zingizni qiziqqan yonalish tarmoq xavfsizligi, kiberxavfsizlik buyicha android uchun ilovalarni o'rganishdan boshlash maqsadga muvofiq. https://www.guru99.com/best-hacking-apps-android.html
https://www.geeksforgeeks.org/best-game-hacking-apps-for-android/
Ushbu ilovalar orqali pentesting, wifi scan, networking scan da kichkina hacklarni amalga oshirishingiz mumkin.
Keyingi navbatda Termuxni(hozirda play marketdan o'chirilgan) o'rnatib olsangiz bu sizning Linux terminalingiz bo'ladi. Undan keyin git clonenni o'rnatishni orqali butun hackerlik vositalari jamlangan GitHub dan install qilib olishingiz mumkin. Tabriklayman ushbu bosqichgacha kelgan bo'lsangiz siz komputerda boshqalarga o'xshab nima ish qilishni bo'lmasdan o'tirmaysiz. Endi navbat shu oddiy androidga Kali Linuxning barcha hackerlik dasturlarini o'rnatishingiz mumkin, buning uchun siz Kali Net hunterni termux orqali o'rnatib olsangiz hammasi tayyor.
Ha aytishingiz bu hammasi oddiy gapdek bo'lyapti, хатя бы video chiqarmaysizmi deb, menimcha chin ko'ngildan qiziqqan inson bularni barchasini ilojini topadi, axir bu maqolani 6-7 yil oldin oddiy fleshkada oddiy frontend dasturlash tillari orqali yozilgan saytlarni sotib pul ishlagan inson yozmoqda, shu vaqtlar men hacking laptopimni faqat tasavvur qilardim. Ishoning sizda hmmasi o'xshaydi va hammasiga o'z kichingiz orqali erishasiz.
Pls share much, more!)
@ctc_uz Cyber training club- Kibermakonda har doim siz bilan.
Quyidagi postni davomi sifatida bugun pentesting va CTF bo'yicha bepul lobaratoriyalar sizning ko'nikmangizni oshirishga va komputer bilimlaringizni oshirishga yordam beradi.
Ushbu saytlardagi qancha ko'p labladan o'tsangiz shuncha tajribangiz oshib boradi. Hammaga OMAD!!!
-> Try Hack Me https://tryhackme.com
-> Attack-Defense https://attackdefense.com
-> alert to win https://alf.nu/alert1
-> CMD Challenge https://cmdchallenge.com
-> Exploration Education https://exploit.education
-> Google CTF https://capturetheflag.withgoogle.com
-> HackTheBox https://www.hackthebox.com/
-> Defendtheweb https://defendtheweb.net/
-> Hacksplaining https://www.hacksplaining.com/lessons
-> Hacker101 https://ctf.hacker101.com
-> Hacker Security https://capturetheflag.com.br
-> Hacking-Lab https://www.hacking-lab.com/events/
-> HSTRIKE https://hstrike.com
-> ImmersiveLabs https://immersivelabs.com
-> NewbieContest https://www.newbiecontest.org/
-> OverTheWire http://overthewire.org
-> Practical Pentest Labs https://practicalpentestlabs.com
-> Pentestlab https://pentesterlab.com
-> Penetration Testing Practice Labs http://www.amanhardikar.com/mindmaps/Practice.html
-> PentestIT LAB https://lab.pentestit.ru
-> PicoCTF https://picoctf.com
-> PWNABLE https://pwnable.kr/play.php
-> Root-Me https://www.root-me.org
-> SANS Challenger https://www.holidayhackchallenge.com
-> SmashTheStack http://smashthestack.org/wargames.html
-> The Cryptopals Crypto Challenges https://cryptopals.com/
-> Vulnhub https://www.vulnhub.com
-> W3Challs https://w3challs.com
-> WeChall http://www.wechall.net
-> HackerRank https://www.hackerrank.com
-> kaggle https://www.kaggle.com/
-> Zenk-Security
https://www.zenk-security.com/
POSTED BY @ctc_uz
