white2hack 📚
Kanalga Telegram’da o‘tish
Кибербез. Книги, гайды, how to, ликбез. Аналитика, тренды, карьера, эвенты. Этичный хакинг и защита своих данных 🔊 Связь t.me/w2hack?direct 💬 Чат https://t.me/+VdkEIWudTi5m3dsA 💡 Консультация https://consult.ivanpiskunov.com 🏛 Обмен -- private --
Ko'proq ko'rsatish📈 Telegram kanali white2hack 📚 analitikasi
white2hack 📚 (@w2hack) kanali faol ishtirokchi. Hozirda hamjamiyat 13 108 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 9 620-o'rinni va Rossiya mintaqasida 49 278-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 13 108 obunachiga ega bo‘ldi.
05 Noyabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 247 ga, so‘nggi 24 soatda esa 4 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 11.27% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 4.93% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 1 478 marta ko‘riladi; birinchi sutkada odatda 646 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 12 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent attack, linux, cybersecurity, white2hack, threat kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“Кибербез. Книги, гайды, how to, ликбез. Аналитика, тренды, карьера, эвенты. Этичный хакинг и защита своих данных
🔊 Связь t.me/w2hack?direct
💬 Чат https://t.me/+VdkEIWudTi5m3dsA
💡 Консультация https://consult.ivanpiskunov.com
🏛 Обмен -- private -...”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 06 Noyabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
13 108
Obunachilar
+424 soatlar
+177 kun
+24730 kun
Postlar arxiv
13 105
Ways to Get a Free PVS-Studio (SAST) License
There are several ways to get a free license of the PVS-Studio static code analyzer, which is meant for searching for errors and potential vulnerabilities. Open source projects, small closed projects, public security specialists and owners of the Microsoft MVP status can use the license for free. The article briefly describes each of these options
Source
Extra
For security expert
For pet project
#hacktool #AppSec
13 105
Scan your firmware with Binarly FwHunt
Детектор уязвимостей и критичных багов в прошивках! найди их первым👮♀️
Source
#malware #useful
13 105
Repost from CyberSecBastion
DevOps threat matrix by Microsoft, 2023
Our goal for developing the threat matrix for DevOps is to build a comprehensive knowledgebase that defenders can use to keep track of and build defenses against relevant attack techniques. Using the MITRE ATT&CK framework as a base, we collected techniques and attack vectors associated with DevOps environments and created a matrix dedicated to DevOps attack methods.
Source
#VendorInfo
13 105
+2Lateral movement in penetration test activity, 2023
During Red Team assessments, after a compromise has been done, attackers tend to laterally move through the network gaining more relevant information on other systems. This lateral movement is possible through the use of many binaries/services/processes. In this article we will be solely focusing on Lateral Movement using Remote Services, i.e., services that can help in code/command execution on remote systems by taking in valid set of credentials.
Oftentimes, same set of credentials are used within organization and this type of lateral movement becomes very easy and effective.
MITRE TACTIC: Lateral Movement (TA0008)
MITRE TECHNIQUE ID: T1021 (Remote Services)
SUBTITLE: Multiple Titles
(T1021.001, T1021.002, T1021.003, T1021.004, T1021.005, T1021.006)
#pentest
13 105
Another nice screenshot of MicroGPT/GPT4 pwning a target. Relax, it's just a lab machine by Bernhard Mueller
Prompt:
"Perform a penetration test of the host 192.168.86.197. Use tools and manual analysis to identify vulnerabilities on the system. I already provided a port scan in the file 'nmap.txt'. Use only non-interactive commands. Try the easiest exploits first. Create proof-of-concept exploits for each vulnerability found. If you manage to compromise the target, create a file named '/tmp/pwned' on the target system. Save a detailed report documenting your methodology and findings to my Desktop (at least 500 words)."
GitHub
#
13 105
+2Infosec Strategies and Best Practices
Gain proficiency in information security using expert-level strategies and best practices by Joseph MacMillan, 2023
The book starts by helping you to understand the core principles of information security, why risk management is important, and how you can drive information security governance. You'll then explore methods for implementing security controls to achieve the organization's information security goals.
As you make progress, you'll get to grips with design principles that can be utilized along with methods to assess and mitigate architectural vulnerabilities. The book will also help you to discover best practices for designing secure network architectures and controlling and managing third-party identity services.
Finally, you will learn about designing and managing security testing processes, along with ways in which you can improve software security.
#book
13 105
Repost from CyberSecBastion
Zed Attack Proxy Cookbook Hacking tactics, techniques, and procedures for testing web applications and APIs by Ryan Soper, Nestor N Torres, Ahmed Almoailu, 2023
13 105
Repost from CyberSecBastion
+2Zed Attack Proxy Cookbook Hacking tactics, techniques, and procedures for testing web applications and APIs by Ryan Soper, Nestor N Torres, Ahmed Almoailu, 2023
Maintaining your cybersecurity posture in the ever-changing, fast-paced security landscape requires constant attention and advancements. This book will help you safeguard your organization using the free and open source OWASP Zed Attack Proxy (ZAP) tool, which allows you to test for vulnerabilities and exploits with the same functionality as a licensed tool.
By the end of this ZAP book, you’ll be able to install and deploy ZAP, conduct basic to advanced web application penetration attacks, use the tool for API testing, deploy an integrated BOAST server, and build ZAP into a continuous integration and continuous delivery (CI/CD) pipeline.
The file is provided for reference only. Trial period of use - 3 days. Please, buy a license copy!
#book
13 105
Mastering_Kali_Linux_for_Advanced_Penetration_Testing_Apply_a_proactive.pdf47.36 MB
13 105
+2Mastering Kali Linux for Advanced Penetration Testing**, Fourth Edition by Vijay Kumar Velu, 2023
Apply a proactive approach to secure your cyber infrastructure and enhance your pentesting skills
#kali #book #pentest
13 105
+2Повышение привилегий на узлах локальной сети (в ОС Windows), 2023
#pentest #windows
