Cyber Station

واكيد طبعا ال TwinSanity Island احد احلى الاشياء الي ضفتها للعمل 🧡. هذا الموجود لليوم ب اذن الله الايام القادمة راح يتم نشر ال Notion Documentation. + ب اذن الله راح يكون هناك بث يشرح مراحل تطوير الاداة واستخداماتها وطريقة العمل 💻 And Of course one of the best thing i have implemented in the project is the TwinSanity Island , which gives a very interactive view of CVEs findings and make it more fun 🧡. In the Next few days i will publish the Full Documentation in notion.

السؤال هو: هل انت مليت وانت تبحث عن CVEs بداخل كل domain وال subdomain الخاص بيه؟.. ما تعرف نوع ال cves؟ , تاخذ النتائج بكل مرة وترسلها ل ai module ما الها معرفة كاملة ب الشيء الي ارسلتها وتعطي نتائج غير دقيقة؟. الحل هو TwinSanity Recon راح تختصر عليك كل هذا العمل... بحث تلقائي لكل ال subdomains الخاصة بل domain الرئيسي ,وايجاد ال CVEs بهذه المواقع بناءا على shodan engine الي يعمل على تصنيف كل CVE موجودة بموقع معين عبر تحليل ال responses او ال site technologies ومنها يعطي نوع ال CVE المصابة بكل موقع. تم توفير واجهة رسومية تسهل استخدام الاداة بشكل كبيرة مع اضافة ميزة CHAT مع AI MODULE تسهل عليك فهم الاشياء الي تم ايجادها بهذه المواقع. شكل تفاعلي و REFRENCE لكل cve متواجدة وشرح كامل ومفصل... والكثير من الميزات الاخرى ❤️‍🔥. سيتم نشر Demo تفاعلي عبر notion في الايام القادمة لتوضيح عمل المشروع بشكل اكبر🧡.

TwinSanity Recon V2 🧡

TwinSanity Recon is a comprehensive, web-based reconnaissance platform designed for security professionals and penetration testers. It combines traditional subdomain enumeration, port scanning, and vulnerability detection with modern AI-powered analysis capabilities.

Prompt Engineering for LLMs 💬🧠

The Art and Science of Building Large Language Model– Based Applications

Hands-On Large Language Models 🖥

Language Understanding and Generation

Are you ready for the surprise ? 😉

For more information about this topic you can see the lecture PDF & Lab in GitHub 🖥🎣

⏰🤖Real-Time Phishing Agents (Dynamic Phishing) ❓ why we use Real-time Phishing Agents (Dynamic Phishing) : When we relay on static templates the site will update continuously this will make the work more harder to Update the Phishing template every day, also if the user enabled MFA the full operation will fall down.. Because MFA code is temporary and we have 0 interaction with the Real Site to verify the token we got... That`s why the Dynamic Phishing Solve this matter. ℹ️ what is shown in the image above is example of Phishing operation in real time, where the attacker don`t relay on static template, instead its clone the server page in real-time , that`s will help the attacker to don`t relay on static templates and update it every day to mimic the real site. 😈 Adversary-in-the-Middle (AiTM): is a targeted, real-time phishing technique where the attacker operates a proxy between the victim and the legitimate service to intercept and manipulate the live authentication flow — capturing credentials, session cookies, tokens, or one-time codes so the attacker can immediately take over the session (often bypassing MFA). 🥷 attacker will capture credentials in real-time & often bypass MFA and that is the biggest advantage of Dynamic Phishing. 💻 Explain the attack Chain Using Evliginx2: 1. The Lure (Step 1) 🕷🔗: The victim clicks a phishing link (e.g., sent via email) that points to the attacker's domain: https://login.fakemicrosoft.com . The victim's browser sends a request to the Evilginx2 server, thinking it is the login page. 2. The Proxy Request (Step 2) 📶: Instead of serving a fake static page, the Evilginx2 server silently forwards that request to the real Microsoft login URL (https://login.microsoftonline.com). 3. Fetching the Real Site (Step 3) ™️🌐 : Microsoft's server receives the request. Thinking it's a normal user, it responds by sending the code for the actual login page back to the Evilginx2 server. 4. Displaying the Trap (Step 4) 🔼🔽: Evilginx2 takes that real login page and serves it to the victim. Crucial Detail: The victim sees the exact real login page because it is the real code, just served from the wrong domain (fakemicrosoft.com). 5. The Interception (Step 5) 💻 : The victim enters their username and password. These credentials are sent to the Evilginx2 server first, not Microsoft. The attacker now captures the password. 6. The Relay (Step 6)👊 : Evilginx2 immediately uses those stolen credentials to log in to the real Microsoft server on the backend. Note: If MFA (2FA) were required, Evilginx would prompt the user for the code here, capture it, and relay that too (this is the "Real-Time" aspect). 7. The Theft (Step 7 - The "Gold") ✅™️ : Microsoft accepts the valid credentials and replies with a Session Cookie (the digital token that proves you are logged in). Evilginx2 captures and saves this cookie. This is the main goal. With this cookie, the attacker can open their own browser, inject the cookie, and access the victim's account without needing the password or MFA again. 8. The Clean Exit (Step 8) 💻🏃‍♂️ : To avoid raising suspicion, Evilginx2 finally redirects the victim to a totally different website (or the actual Microsoft dashboard). The victim thinks they just logged in normally, or perhaps that the page glitched, while the attacker now has full access to the account.

❓ If we say what are Phishing its probably will be an attack type used to trick victims to interact with fake page to steal there credentials or installing malware . 🐟Phishing: is a cybercrime where attackers pose as legitimate institutions (like banks, Google, or Microsoft) to trick individuals into revealing sensitive data. 🪟 Static Phishing: A legacy attack using a standalone, cloned webpage that harvests credentials but cannot interact with the real service or bypass Multi-Factor Authentication. 🖼️ Static Phishing templates: are a pre-packaged collection of code files (HTML, CSS, JavaScript, and images) designed to visually replicate a specific legitimate login page—such as Google, Microsoft, or Netflix—for the purpose of harvesting user credentials.

Nice Topic we will talk about it today 🎣 ⏳

🌟