Source Byte
Открыть в Telegram
هشیار کسی باید کز عشق بپرهیزد وین طبع که من دارم با عقل نیامیزد Saadi Shirazi 187
Больше7 834
Подписчики
-524 часа
-207 дней
+11630 день
Архив постов
7 831
Ultimate Blockchain Security Handbook: Advanced Cybersecurity Techniques and Strategies for Risk Management, Threat Modeling, Pen Testing, and Smart Contract Defense for Blockchain by Taha Sajid, 2023
7 831
Ultimate Blockchain Security Handbook: Advanced Cybersecurity Techniques and Strategies for Risk Management, Threat Modeling, Pen Testing, and Smart Contract Defense for Blockchain by Taha Sajid, 2023
The book will help you identify and remediate your Blockchain solution bugs before others do. Covering the latest threats and vulnerabilities, as well as effective mitigation strategies, it takes you on a journey from the security foundations of blockchain technology to implementing advanced security solutions for blockchain applications. It helps you identify, assess, and mitigate risks using a variety of tools and techniques, including threat modeling, penetration testing, vulnerability scanning, attack analysis, and security audits.
Table of Contents
1. Blockchain Security Overview
2. Blockchain Security Variations
3. Attack Vectors Management on Blockchain
4. Blockchain Application Exploitation
5. Blockchain Application Audit
6. Blockchain Security Solution
#book
7 831
для чего нужен процесс dllhost.exe
https://nasbench.medium.com/what-is-the-dllhost-exe-process-actually-running-ef9fe4c19c08
7 831
i don't know if is it still working or not :
read this blog
Is it possible to install IDA Pro without owning installation password?Sure, why not?
7 831
𝗠𝗔𝗟𝗪𝗔𝗥𝗘 𝗥𝗘𝗦𝗢𝗨𝗥𝗖𝗘𝗦 👾
•Malpedia 🔗:-
https://malpedia.caad.fkie.fraunhofer.de/
•Interactive Online Malware Analysis Sandbox 🔗:-
https://app.any.run/
•Free Automated Malware Analysis Service 🔗:-
https://hybrid-analysis.com/
•VirusTotal 🔗:-
https://www.virustotal.com/gui/
•Maltiverse 🔗:-
https://maltiverse.com/search
•Malware News Search 🔗:-
https://cse.google.com/cse?cx=003248445720253387346:turlh5vi4xc
•AlienVault Open Threat Exchange 🔗:-
https://otx.alienvault.com/
•Jotti's malware scan 🔗:-
https://virusscan.jotti.org/
•IObit Cloud 🔗:-
https://cloud.iobit.com/index.php
•theZoo 🔗:-
https://github.com/ytisf/theZoo
•Vx-underground(.)org :-
https://vx-underground.org/
•VX Heaven :-
https://vx-underground.org/archive/VxHeaven/index.html
• APT notes/data 🔗:-
https://github.com/aptnotes/data
•Exploit-database-papers 🔗:-
https://github.com/offensive-security/exploitdb-papers
•Exploitdb-bin-sploits 🔗:-
https://github.com/offensive-security/exploitdb-bin-sploits
7 831
AD Penetration Testing Lab
Active Directory Lab for Penetration Testing
GitHub
How to setup
#pentest #windows
7 831
Repost from Cyber Detective
How to verify leak data?
Leak data verification 9-steps checklist for investigators.
https://techjournalism.medium.com/how-to-verify-leak-data-3b0c8d8b764a
Author twitter.com/Techjournalisto
7 831
I would highly recommend learning following things:
Win32 API
Networking (Communicate over HTTP/s, DNS, ICMP)
Encryption (basic use of Aes, Xor, Rc4, etc.)
Injection Techniques
Learn how to use Debuggers.
Read the source code of already existing open source C2s like Metasploits Meterpreter, Empire Framework, SharpC2, Shadow.
These projects contain so much info and code on how to:
make malware modular using reflective loaders/code injection, communicate with the C2, and more.
Here are all of my personal malware development resources i have collected:
https://github.com/rootkit-io/awesome-malware-development
https://github.com/rootkit-io/malware-and-exploitdev-resources
https://www.youtube.com/watch?v=LuUhox_C5yg&list=PL1jK3K11NINhvnr7Y3iGu8eLKec72Sl7D
https://pre.empt.dev/
https://0xpat.github.io/
https://www.guitmz.com/
https://www.hackinbo.it/slides/1574880712_How%20to%20write%20malware%20and%20learn%20how%20to%20fight%20it%21.pdf
https://cocomelonc.github.io/
https://0x00sec.org/c/malware/56
https://institute.sektor7.net/red-team-operator-malware-development-essentials (you can find this course leaked online)
https://institute.sektor7.net/rto-maldev-intermediate (you can find this course leaked online)
https://institute.sektor7.net/rto-maldev-adv1 (you can find this course leaked online)
https://captmeelo.com/
https://www.vx-underground.org/
https://google.com/
https://c3rb3ru5d3d53c.github.io/posts/
https://unprotect.it/
https://www.youtube.com/watch?v=xCEKzqLTvqg&list=PL-aDiCywOtNXxR8EGzp773K3sgKQlAlG0
https://github.com/chvancooten/maldev-for-dummies/blob/main/Slides/Malware%20Development%20for%20Dummies%20-%20Hack%20in%20Paris%2030-06-2022%20%26%2001-07-2022.pdf
7 831
Excellent series for learning the basic of ELF file format internals
Part 1:
intezer.com/blog/research/ex…
Part 2:
intezer.com/blog/malware-ana…
Part 3:
intezer.com/blog/malware-ana…
Part 4:
intezer.com/blog/malware-ana…
7 831
Repost from OnHex
🔴 نشریه ی tmpout که قبلا در کانال معرفیش کرده بودیم ، یه نشریه تخصصی در حوزه امنیت برای سیستمهای لینوکسی هستش.
شماره ی سوم این نشریه بعد از 20 ماه منتشر شده. اگه علاقمند به این حوزه هستید ، برای دسترسی به نشریه میتونید از لینکهای زیر استفاده کنید.
- شماره 1
- شماره 2
- شماره 3
➡️ @onhex_ir
➡️ onhexgroup.ir
7 831
Англоязычная серия книг Hacking exposed от авторов Stuart McClure, Joel Scambray and George Kurtz
В паке представлены книги:
+ Hacking exposed malware & rootkits
+ Hacking Exposed Web applications
+ Hacking Exposed Computer Forensic
+ Hacking Exposed Windows, 3rd Edition
+ Hacking Exposed Linux
#book #linux #windows #pentest
Уже доступно! Исследование Telegram 2025 — ключевые инсайты года 
