Network Security Channel – Telegram
Network Security Channel
@Engineer_Computer
2.55K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.55K subscribers
Network Security Channel
Reverse engineering of Android Phoenix RAT
Analysis: https://cryptax.medium.com/reverse-engineering-of-android-phoenix-b59693c03bd3
Phoenix overview: https://cryptax.medium.com/android-phoenix-authors-claims-sample-identification-and-trends-f199cbc9901d

@Engineer_Computer
Medium
Reverse engineering of Android/Phoenix
Android/Phoenix is a malicious Remote Access Tool. Its main goal is to extensively spy on the victim’s phone (grab all screenshots, steal…
106 views
Network Security Channel
JSON Smuggling: A far-fetched intrusion detection evasion technique

https://grimminck.medium.com/json-smuggling-a-far-fetched-intrusion-detection-evasion-technique-51ed8f5ee05f

@Engineer_Computer
Medium
JSON Smuggling: A far-fetched intrusion detection evasion technique
TL:DR Insignificant whitespaces in the JSON standard can be used to encode data without breaking the format. This could aid malicious…
117 views
Network Security Channel
Zero-Day (via CVE-2023-45866): Exploiting Zero-click Android Bluetooth vulnerability to inject keystrokes without pairing.

https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/

@Engineer_Computer
Mobile Hacker
Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing Mobile Hacker
[update 2024-02-19] This vulnerability can be even used to remotely wipe data of targeted Android smartphone. Using this vulnerability it is possible to guess user lock screen PIN. After five incorrect PINs device is locked out for 30 seconds. This operation…
153 views
Network Security Channel
Bypassing Wi-Fi Encryption by Manipulating Transmit Queues.

https://www.usenix.org/system/files/usenixsecurity23-schepers.pdf

@Engineer_Computer
153 views
Network Security Channel
آخرین قربانی حملات SQL Injection و XSS

https://www.bleepingcomputer.com/news/security/hackers-steal-data-of-2-million-in-sql-injection-xss-attacks/

@Engineer_Computer
BleepingComputer
Hackers steal data of 2 million in SQL injection, XSS attacks
A threat group named 'ResumeLooters' has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site noscripting (XSS) attacks.
183 views
Network Security Channel
رسیدگی کنید
در کاتالوگ KEV درج شده است

CVE-2023-29357
شیر پوینت

https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html

@Engineer_Computer
159 views
Network Security Channel
🔖Extract domains from a list of subdomains or URLs. :
cat subdomainslist.txt | while read line; do python -c "import tldextract;domain = tldextract.extract('$line');extracted=str(domain.domain)+'.'+str(domain.suffix);print(extracted) if domain.domain != '' and extracted[-1] != '.' else False"; done


If you know a better way to extract domains from a list of subdomains, please comment below👇🏻

#BugBounty #BugBountyTools
— Share & Support Us —
@Engineer_Computer
158 views
Network Security Channel
Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Three

https://medium.com/@aliraah/creating-a-recon-database-with-flask-mongodb-rest-api-and-chatgpt-part-three-cee1633de873

@Engineer_Computer
Medium
Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Three
Hellow world!
131 views
Network Security Channel
https://falconforce.nl/soaphound-tool-to-collect-active-directory-data-via-adws/

@Engineer_Computer
FalconForce
SOAPHound — tool to collect Active Directory data via ADWS - FalconForce
SOAPHound is a custom-developed .NET data collector tool to enumerate Active Directory environments via the ADWS protocol.
131 views
Network Security Channel
https://github.com/duy-31/CVE-2023-35636/tree/main

@Engineer_Computer
GitHub
GitHub - duy-31/CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC - duy-31/CVE-2023-35636
124 views
Network Security Channel
https://github.com/Cracked5pider/Stardust

@Engineer_Computer
GitHub
GitHub - Cracked5pider/Stardust: A modern 32/64-bit position independent implant template
A modern 32/64-bit position independent implant template - GitHub - Cracked5pider/Stardust: A modern 32/64-bit position independent implant template
119 views
Network Security Channel
مطمئن شین که Outlook شما وصله شده!

هکرها می‌تونن از راه دور، رمزهای ورود به سیستم ویندوز 🔑 NTLM شما رو سرقت کنن

آسیب پذیری CVE-2023-35636 در قابلیت تقویم Outlook وجود داره که از طریق دعوت‌نامه هایی که به‌طور خاص ساخته شده‌ن، راه‌اندازی می‌شه

جزئیات در اینجا: https://thehackernews.com/2024/01/researchers-uncover-outlook.html

#امنیت_سایبری #هک #آسیب_پذیری
#cybersecurity #hacking #vulnerability

@Engineer_Computer
140 views
Network Security Channel
🔍 موتورهای جستجو برای پن‌تسترها

🔍 Search Engine for Pentesters

#searchengine #pentester #cyber #hacking #cybersecurity

@Engineer_Computer
👍1
184 views
Network Security Channel
رودمپ پیشنهادی برای ورود به #ردتیم
https://xmind.app/m/9Zcnkq

@Engineer_Computer
Xmind
Red Team Roadmap[2024]
A Mind Map about Red Team Roadmap[2024] submitted by Soheil Hashemi on Feb 11, 2024. Created with Xmind.
214 views
Network Security Channel
بررسی محل هایی از رجیستری که بد افزارها برای لانچ خود در هنگام بوت سیستم استفاده می‌کنند.

یک کوئری اسپلانک برای نگاه به این محل ها را در لینک زیر می‌بینیم

https://research.splunk.com/endpoint/f5f6af30-7aa7-4295-bfe9-07fe87c01a4b/

@Engineer_Computer
Splunk Security Content
Detection: Registry Keys Used For Persistence
Updated Date: 2025-09-18 ID: f5f6af30-7aa7-4295-bfe9-07fe87c01a4b Author: Jose Hernandez, David Dorsey, Teoderick Contreras, Rod Soto, Splunk Type: TTP Product: Splunk Enterprise Security Denoscription The following analytic identifies modifications to registry…
157 views
Network Security Channel
https://github.com/oldboy21/SyscallMeMaybe

@Engineer_Computer
GitHub
GitHub - oldboy21/SyscallMeMaybe: Implementation of Indirect Syscall technique to pop a calc.exe
Implementation of Indirect Syscall technique to pop a calc.exe - oldboy21/SyscallMeMaybe
141 views
Network Security Channel
https://github.com/cosad3s/hfinder

@Engineer_Computer
GitHub
GitHub - cosad3s/hfinder: Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE
Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE - cosad3s/hfinder
124 views
Network Security Channel
https://blog.slowerzs.net/posts/thievingfox/
https://github.com/Slowerzs/ThievingFox/

@Engineer_Computer
Slowerzs' blog
ThievingFox - Remotely retrieving credentials from password managers and Windows utilities
111 views
Network Security Channel
a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it effectively useless if ran morethan 5 minutes the system freezes to death.
https://github.com/cpu0x00/EternelSuspention

@Engineer_Computer
GitHub
GitHub - cpu0x00/EternelSuspention: a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making…
a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless - GitHub - cpu0x00/EternelSuspention: a simple poc showcasing the ability of an adm...
117 views
Network Security Channel
Disable Windows Defender (+ UAC Bypass, + Upgrade to SYSTEM)
https://github.com/EvilGreys/Disable-Windows-Defender-

@Engineer_Computer
127 views
Network Security Channel
https://github.com/pedrib/PoC/blob/master/tools/mikrotik_jailbreak.py

@Engineer_Computer
128 views