Network Security Channel – Telegram
Network Security Channel
@Engineer_Computer
2.55K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.55K subscribers
Network Security Channel
پی لود جاوا اسکریپت، غیر قابل تشخیص توسط فایروال
https://elliotonsecurity.com/creating-fully-undetectable-javnoscript-payloads-to-evade-next-generation-firewalls/

⁩@Engineer_Computer
228 views
Network Security Channel
Windows Credentials Attack • Mitigation • Defense.pdf.pdf
1.8 MB
پاورپوینت سنز
امنیت تعیین هویت و تصدیق آن
دفاع ، حمله و تشخیص
⁩@Engineer_Computer
221 views
Network Security Channel
23_0913_ia_23_333_ia_u_homeland_threat_assessment_2024_508C_V6_13Sep23.pdf
3.8 MB
#DHS #Threat #Assessment
#2024
⁩@Engineer_Computer
446 views
Network Security Channel
مدل مسوولیت اشتراکی هوش مصنوعی
از مایکروسافت
https://learn.microsoft.com/fi-fi/azure/security/fundamentals/shared-responsibility-ai

⁩@Engineer_Computer
Docs
AI shared responsibility model - Microsoft Azure
Understand the shared responsibility model and which tasks are handled by the AI platform or application provider, and which tasks are handled by you.
191 views
Network Security Channel
https://github.com/Maldev-Academy/MaldevAcademyLdr.1

⁩@Engineer_Computer
GitHub
GitHub - Maldev-Academy/MaldevAcademyLdr.1: RunPE implementation with multiple evasive techniques (1)
RunPE implementation with multiple evasive techniques (1) - Maldev-Academy/MaldevAcademyLdr.1
165 views
Network Security Channel
https://github.com/zer0condition/mhydeath

⁩@Engineer_Computer
GitHub
GitHub - zer0condition/mhydeath: Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes. - zer0condition/mhydeath
153 views
Network Security Channel
https://github.com/MHaggis/ShellSweep

⁩@Engineer_Computer
GitHub
GitHub - MHaggis/ShellSweep: ShellSweeping the evil.
ShellSweeping the evil. Contribute to MHaggis/ShellSweep development by creating an account on GitHub.
138 views
Network Security Channel
https://github.com/mertdas/RedPersist/tree/main/RedPersist/Persist

⁩@Engineer_Computer
GitHub
RedPersist/RedPersist/Persist at main · mertdas/RedPersist
Contribute to mertdas/RedPersist development by creating an account on GitHub.
156 views
Network Security Channel
https://github.com/Chocapikk/CVE-2023-29357/blob/main/exploit.py

⁩@Engineer_Computer
GitHub
CVE-2023-29357/exploit.py at main · Chocapikk/CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability - Chocapikk/CVE-2023-29357
175 views
Network Security Channel
https://github.com/Nero22k/cve-2023-29360

⁩@Engineer_Computer
GitHub
GitHub - Nero22k/cve-2023-29360: Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver
Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver - Nero22k/cve-2023-29360
212 views
Network Security Channel
آشنایی با مشاغل

مهندس کشف و پاسخ

شرح وظایف در یک شرکت بصورت مثال

https://boards.greenhouse.io/notion/jobs/5781225003

⁩@Engineer_Computer
job-boards.greenhouse.io
Notion
191 views
Network Security Channel
CISSP Updated Course content 2024.pdf
371.9 KB
تغییرات در سرفصل آزمون جدید CISSP
⁩@Engineer_Computer
217 views
Network Security Channel
گذر از آنتی ویروس برای حرکت عرضی در شبکه و بین هاست ها
ابزار WMIHACKER


استفاده از ابزارهای معمول نظیرWMIEXEC, PSEXEC یک سرویس یا یک کال به پراسس win32 ایجاد می‌کند این فعالیت توسط آنتی ویروس درحال شنود است لذا شما دستگیر میشوید !! صد درصد.
با ابزار زیر ، آنتی ویروس دور خورده می‌شود بدون نیاز به پورت ۴۴۵


توجه : درج این نوع مقالات برای آگاهی تیم های آبی و تلاش برای به روزرسانی رولهای کشفی ایشان است


https://github.com/rootclay/WMIHACKER

⁩@Engineer_Computer
GitHub
GitHub - rootclay/WMIHACKER: A Bypass Anti-virus Software Lateral Movement Command Execution Tool
A Bypass Anti-virus Software Lateral Movement Command Execution Tool - rootclay/WMIHACKER
245 views
Network Security Channel
فیشینگ هایی بشدت به واقعیت نزدیک !

استفاده از Chat-GPT برای حملات

https://www.axios.com/2023/10/24/chatgpt-written-phishing-emails

@Engineer_Computer
Axios
ChatGPT-written phishing emails are already nearly as good as humans
ChatGPT's deceptive messages work almost as well as ones written by people, IBM found. And it's much faster.
👍1
175 views
Network Security Channel
EDR Internals & Bypasses.pdf
1.1 MB
پاورپوینت آشنایی با EDR و راههای دور خوردن آن
@Engineer_Computer
184 views
Network Security Channel
برای PoC های آسیب پذیری ها ، به مخزن زیر سری بزنید
https://github.com/trickest/cve

@Engineer_Computer
GitHub
GitHub - trickest/cve: Gather and update all available and newest CVEs with their PoC.
Gather and update all available and newest CVEs with their PoC. - trickest/cve
161 views
Network Security Channel
تحلیل هفته

https://posts.specterops.io/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater-2762e9667120

@Engineer_Computer
Medium
CVE-2023–4632: Local Privilege Escalation in Lenovo System Updater
Version: Lenovo Updater Version <= 5.08.01.0009
Operating System Tested On: Windows 10 22H2 (x64)
Vulnerability: Lenovo System Updater…
142 views
Network Security Channel
ابزارهای تست نفوذ فیزیکی

https://covertaccessteam.substack.com/p/rfid-cloning-arsenal-a-detailed-review

@Engineer_Computer
Substack
RFID Cloning Arsenal: A Detailed Review of Top Gear for Pen Testers
In the realm of physical penetration testing, having the right tools at your disposal is imperative for uncovering vulnerabilities within security systems.
162 views
Network Security Channel
مثالی دیگر از اینکه چرا نباید پسورد را در مرورگر ذخیره کرد

https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/new-ileakage-attack-steals-emails-passwords-from-apple-safari/amp/

@Engineer_Computer
www-bleepingcomputer-com.cdn.ampproject.org
New iLeakage attack steals emails, passwords from Apple Safari
Academic researchers created a new speculative side-channel attack they named iLeakage that works on all recent Apple devices and can extract sensitive information from the Safari web browser.
❤1
171 views
Network Security Channel
کد نویسی امن برای PLC ها

https://github.com/Fortiphyd/Secure_PLC_Coding

@Engineer_Computer
GitHub
GitHub - Fortiphyd/Secure_PLC_Coding: Documentation and guidance to practice secure coding for various PLC vendors
Documentation and guidance to practice secure coding for various PLC vendors - Fortiphyd/Secure_PLC_Coding
182 views
Network Security Channel
🌋استفاده از مخازن کد متن باز در سازمان و شرکتتان را مدیریت کنید

در لینک زیر ۳۵ آسیب پذیری روز صفر در محصول پرطرفدار Squid یافت شده است

ولی دوسال گذشته و وصله ای برای آنها نیامده !!

https://joshua.hu/squid-security-audit-35-0days-45-exploits

@Engineer_Computer
Joshua Rogers’ Scribbles
55 Vulnerabilities in Squid Caching Proxy and 35 0days
Notes from my large Squid audit: 55 vulnerabilities, many still unfixed, links to detailed writeups, and a reminder to re-evaluate Squid in sensitive environments.
164 views