Library Sec Official
Відкрити в Telegram
This is the channel where we share articles/book/writeups/etc, not necessarily authored by us, that we find interesting Backup channel : @BackupLSO
Показати більше8 637
Підписники
+924 години
+237 днів
+12230 день
Архів дописів
8 637
❤ Share & Support Us
🧩 #Malware_Analysis
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
🔖 Malware Analyst Professional - Level 1
Acquire specialized skills and knowledge needed to succeed in the dynamic field of cybersecurity.
What you will learn in the course:
- Laboratory hardening with isolation of Flare-VM and INetSim - Mapping from compilation to build for quick code recognition - Confident reading of PE headers and directory tables - Static sorting — hashes, strings, entropy, exposing packers - Unpacking UPX and custom shells to obtain payloads - High resolution dynamic telemetry using Procmon hooks and API - Network forensics and correlation of PCAP with sandbox events - Runtime analysis of the FlawedAmmyy RAT under debugger guidance - Creating accurate YARA rules from reverse engineering templates - Exploit analysis❤ Share & Support Us 🧩 #Malware_Analysis 📰 @BackupLSO 📚 @LibrarySecOfficial
8 637
📖 شکار عملی باگ بانتی : از Recon تا Bounty واقعی : متدولوژی و شناسایی و آسیب پذیری های دنیای واقعی
این کتاب معرفی کامل و کاربردیای به دنیای «باگ بانتی» ارائه میدهد. این برنامه برای علاقهمندان به امنیت سایبری، پنتسترها، و توسعهدهندگانی طراحی شده که میخواهند کشف آسیب پذیری ها در برنامه های واقعی را بیاموزند؛ تمرکز آن بر مهارت های عملی، متدولوژی های تست مدرن، و اصول هک اخلاقی است. توضیحات کتاب 💰 قیمت : ۳۶۰,۰۰۰ تومان 🔥 با تخفیف : ۳۰۰,۰۰۰ تومان ⚠️ مهلت تخفیف : تا فرداشب 💢 کد تخفیف : Library Sec 📌 جهت خرید به ایدی زیر پیام دهید: @THBxSupport
8 637
+1
📖 Active Directory Monitoring Detection Compendium by Zoran Savic, Nov 2025
This document defines a complete detection framework for on premise Active Directory monitoring using Elastic Security SIEM. It brings together every relevant detection rule that contributes to identifying compromise, persistence, or misuse within the directory environment. The rules are organized by attack phase and mapped to the MITRE ATT&CK framework to ensure full coverage across discovery, credential access, privilege escalation, persistence, and lateral movement.
❤ Share & Support Us
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
Practical Phishing Campaigns
This interactive course focuses on practical phishing methods and provides cybersecurity professionals with the knowledge necessary to conduct professional phishing operations.
This specialized and comprehensive course is designed to foster a deep understanding of cybersecurity practices, with an emphasis on ethical hacking methods aimed at protecting digital infrastructure. Through a series of detailed modules, participants will deepen their knowledge of modern security architectures, learn to set up and manage phishing simulations using tools like GoPhish, bypass multi-factor authentication with Evilginx, and explore advanced phishing and vishing strategies. The curriculum also covers essential setup procedures for domain and email registration, configuring AWS EC2 instances, and utilizing SMS phishing (smishing) for security testing.
❤ Share & Support Us
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
📃 The Ultimate Active Directory Attack Cheat Sheet: A Pentester's Field Guide, Karim Ashraf, upd. 2026
This guide is designed to be your comprehensive tactical field manual for dissecting Active Directory environments. It meticulously integrates common techniques, tools, and commands in a phased approach, drawing from expert sources and aiming for exhaustive detail for penetration testers and security professionals.
"First Of All There Is No Writeup Or Sheet Sheet Can Contains Every Thing Our This Cheat Sheet Is The Notes And The Details So Far Till Now in My Journey In AD Wish You Like It"
❤ Share & Support Us
🧩 #AD
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
Security Operations (SOC) 201
❤ Share & Support Us
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
🔖 Security Operations (SOC) 201
This is an intermediate-level security operations course designed to enhance your skills in detecting, investigating, and responding to complex cyber threats at scale. After gaining foundational knowledge and hands-on experience in security operations through SOC 101, the next logical step is to advance your career by applying advanced investigative methodologies and mastering the responsibilities of an incident responder and threat hunter.
❤ Share & Support Us
🧩 #SOC
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
50-playbook SOC Incident Response guide
❤ Share & Support Us
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
+1
50-playbook SOC Incident Response guide
🚨 A SOC without playbooks is just a team waiting to panic
Modern incident response is no longer just about “malware detected → isolate endpoint.”
Today’s SOC teams need to respond to incidents like:
• Unauthorized SaaS OAuth app abuse
• CI/CD supply chain poisoning
• Cloud IAM privilege escalation
• Third-party vendor compromise
• API abuse via compromised automation scripts
• Persistent cloud backdoor accounts
• Misconfigured reverse proxy exploitation
• Man-in-the-Middle in hybrid environments
• Session hijacking via token replay
• Encrypted DNS tunneling for exfiltration
❤ Share & Support Us
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
🔖 Ethical Hacker Bootcamp (2026)
This is an innovative program specifically designed for individuals looking to start a career in ethical hacking, as well as for those aiming to advance their professional skills. The program stands out for its strong emphasis on hands-on practice, offering a dynamic and interactive learning environment that greatly benefits students who learn best by doing.
📍 Introduction to OSINT
📍 PNPT Training
📍 Active Directory Hacking & Defense
❤ Share & Support Us
🧩 #ethical_hacking
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
Hi everyone last week there was a wave of Telegram channel blocks in the OSINT community, and my second channel @osintgit was among those affected. Most channels have already been restored, but mine remains blocked. Please help forward the following message to Telegram support:
The @osintgit channel has been blocked. It contained links to articles, presentations from the author’s conference talks, and publicly available tools related to information security. The channel never published personal data or any other prohibited content. Please unblock this channel and remove the restrictions on.
Colleagues in the field have already managed to get the message through; with enough visibility we can do the same.
Please send the message to Telegram support bots:
@PressBot
@AmeliaTearheart
@BotSupport
Also use Telegram Support: Open Settings → “Ask a Question” → proceed to the question.
And email their official addresses:
dmca@telegram.org
security@telegram.org
recover@telegram.org
abuse@telegram.org
support@telegram.org
I would be grateful for reposts of this post it greatly increases the chances of getting the channel unblocked.
8 637
Windows & Active Directory Exploitation Cheat Sheet and Command Reference
❤ Share & Support Us
🧩 #AD #Cheat_Sheet
📰 @BackupLSO
📚 @LibrarySecOfficial
8 637
Windows & Active Directory Exploitation Cheat Sheet and Command Reference
The landscape of Windows and Active Directory (AD) exploitation is complex and ever-evolving. A comprehensive cheat sheet and command reference are crucial for cybersecurity professionals.
Here’s a deep dive into essential techniques and tools for Windows & AD exploitation:
⚙️ General Exploitation Tools: Techniques like PowerShell AMSI Bypass and one-liners streamline the execution of scripts and commands, bypassing security measures.
🕵️ Enumeration: PowerView facilitates extensive AD enumeration, identifying users, computers, OUs, and GPOs.
🚀 Exploitation Techniques: Powercat for reverse shells and various methods for privilege escalation, including PowerUp and UAC Bypass.
🌐 Lateral Movement: Detailed strategies using BloodHound, Kerberoasting, AS-REP roasting, token manipulation, and Mimikatz for advanced lateral movement within networks.
🔒 Persistence: Establishing persistence via startup folders, Mimikatz skeleton key attack, and modifying security descriptors for WMI and PowerShell Remoting access.
🛠 Post-Exploitation: Techniques for dumping secrets using Mimikatz and alternative methods, disabling Defender, and setting up proxying with Chisel.
📊 Detailed Command Reference: From creating reverse shells with Powercat to executing commands with schtasks, WMI, and PowerShell Remoting, the cheat sheet covers extensive command usage.
Web version
GitHub
#windows
8 637
Repost from Try Hack Box
📖 شکار عملی باگ بانتی : از Recon تا Bounty واقعی : متدولوژی و شناسایی و آسیب پذیری های دنیای واقعی
این کتاب معرفی کامل و کاربردیای به دنیای «باگ بانتی» ارائه میدهد. این برنامه برای علاقهمندان به امنیت سایبری، پنتسترها، و توسعهدهندگانی طراحی شده که میخواهند کشف آسیب پذیری ها در برنامه های واقعی را بیاموزند؛ تمرکز آن بر مهارت های عملی، متدولوژی های تست مدرن، و اصول هک اخلاقی است. توضیحات کتاب نمونه کتاب 💰 قیمت : ۳۶۰,۰۰۰ تومان 🔥 با تخفیف : ۳۱۰،۰۰۰ تومان 📌 جهت خرید به ایدی زیر پیام دهید: @THBxSupport
8 637
Hello — does anyone have the book "AI For Hackers"? Please send it to us : @LibrarySecOfficialBot
Вже доступно! Дослідження Telegram за 2025 — головні інсайти року 
