Network Security Channel – Telegram
Network Security Channel
@Engineer_Computer
2.55K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.55K subscribers
Network Security Channel
Zero-Day (via CVE-2023-45866): Exploiting Zero-click Android Bluetooth vulnerability to inject keystrokes without pairing.

https://www.mobile-hacker.com/2024/01/23/exploiting-0-click-android-bluetooth-vulnerability-to-inject-keystrokes-without-pairing/

@Engineer_Computer
Mobile Hacker
Exploiting 0-click Android Bluetooth vulnerability to inject keystrokes without pairing Mobile Hacker
[update 2024-02-19] This vulnerability can be even used to remotely wipe data of targeted Android smartphone. Using this vulnerability it is possible to guess user lock screen PIN. After five incorrect PINs device is locked out for 30 seconds. This operation…
153 views
Network Security Channel
Bypassing Wi-Fi Encryption by Manipulating Transmit Queues.

https://www.usenix.org/system/files/usenixsecurity23-schepers.pdf

@Engineer_Computer
153 views
Network Security Channel
آخرین قربانی حملات SQL Injection و XSS

https://www.bleepingcomputer.com/news/security/hackers-steal-data-of-2-million-in-sql-injection-xss-attacks/

@Engineer_Computer
BleepingComputer
Hackers steal data of 2 million in SQL injection, XSS attacks
A threat group named 'ResumeLooters' has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site noscripting (XSS) attacks.
183 views
Network Security Channel
رسیدگی کنید
در کاتالوگ KEV درج شده است

CVE-2023-29357
شیر پوینت

https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html

@Engineer_Computer
159 views
Network Security Channel
🔖Extract domains from a list of subdomains or URLs. :
cat subdomainslist.txt | while read line; do python -c "import tldextract;domain = tldextract.extract('$line');extracted=str(domain.domain)+'.'+str(domain.suffix);print(extracted) if domain.domain != '' and extracted[-1] != '.' else False"; done


If you know a better way to extract domains from a list of subdomains, please comment below👇🏻

#BugBounty #BugBountyTools
— Share & Support Us —
@Engineer_Computer
158 views
Network Security Channel
Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Three

https://medium.com/@aliraah/creating-a-recon-database-with-flask-mongodb-rest-api-and-chatgpt-part-three-cee1633de873

@Engineer_Computer
Medium
Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Three
Hellow world!
131 views
Network Security Channel
https://falconforce.nl/soaphound-tool-to-collect-active-directory-data-via-adws/

@Engineer_Computer
FalconForce
SOAPHound — tool to collect Active Directory data via ADWS - FalconForce
SOAPHound is a custom-developed .NET data collector tool to enumerate Active Directory environments via the ADWS protocol.
131 views
Network Security Channel
https://github.com/duy-31/CVE-2023-35636/tree/main

@Engineer_Computer
GitHub
GitHub - duy-31/CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC - duy-31/CVE-2023-35636
124 views
Network Security Channel
https://github.com/Cracked5pider/Stardust

@Engineer_Computer
GitHub
GitHub - Cracked5pider/Stardust: A modern 32/64-bit position independent implant template
A modern 32/64-bit position independent implant template - GitHub - Cracked5pider/Stardust: A modern 32/64-bit position independent implant template
119 views
Network Security Channel
مطمئن شین که Outlook شما وصله شده!

هکرها می‌تونن از راه دور، رمزهای ورود به سیستم ویندوز 🔑 NTLM شما رو سرقت کنن

آسیب پذیری CVE-2023-35636 در قابلیت تقویم Outlook وجود داره که از طریق دعوت‌نامه هایی که به‌طور خاص ساخته شده‌ن، راه‌اندازی می‌شه

جزئیات در اینجا: https://thehackernews.com/2024/01/researchers-uncover-outlook.html

#امنیت_سایبری #هک #آسیب_پذیری
#cybersecurity #hacking #vulnerability

@Engineer_Computer
140 views
Network Security Channel
🔍 موتورهای جستجو برای پن‌تسترها

🔍 Search Engine for Pentesters

#searchengine #pentester #cyber #hacking #cybersecurity

@Engineer_Computer
👍1
184 views
Network Security Channel
رودمپ پیشنهادی برای ورود به #ردتیم
https://xmind.app/m/9Zcnkq

@Engineer_Computer
Xmind
Red Team Roadmap[2024]
A Mind Map about Red Team Roadmap[2024] submitted by Soheil Hashemi on Feb 11, 2024. Created with Xmind.
214 views
Network Security Channel
بررسی محل هایی از رجیستری که بد افزارها برای لانچ خود در هنگام بوت سیستم استفاده می‌کنند.

یک کوئری اسپلانک برای نگاه به این محل ها را در لینک زیر می‌بینیم

https://research.splunk.com/endpoint/f5f6af30-7aa7-4295-bfe9-07fe87c01a4b/

@Engineer_Computer
Splunk Security Content
Detection: Registry Keys Used For Persistence
Updated Date: 2025-09-18 ID: f5f6af30-7aa7-4295-bfe9-07fe87c01a4b Author: Jose Hernandez, David Dorsey, Teoderick Contreras, Rod Soto, Splunk Type: TTP Product: Splunk Enterprise Security Denoscription The following analytic identifies modifications to registry…
157 views
Network Security Channel
https://github.com/oldboy21/SyscallMeMaybe

@Engineer_Computer
GitHub
GitHub - oldboy21/SyscallMeMaybe: Implementation of Indirect Syscall technique to pop a calc.exe
Implementation of Indirect Syscall technique to pop a calc.exe - oldboy21/SyscallMeMaybe
141 views
Network Security Channel
https://github.com/cosad3s/hfinder

@Engineer_Computer
GitHub
GitHub - cosad3s/hfinder: Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE
Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE - cosad3s/hfinder
124 views
Network Security Channel
https://blog.slowerzs.net/posts/thievingfox/
https://github.com/Slowerzs/ThievingFox/

@Engineer_Computer
Slowerzs' blog
ThievingFox - Remotely retrieving credentials from password managers and Windows utilities
111 views
Network Security Channel
a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it effectively useless if ran morethan 5 minutes the system freezes to death.
https://github.com/cpu0x00/EternelSuspention

@Engineer_Computer
GitHub
GitHub - cpu0x00/EternelSuspention: a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making…
a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless - GitHub - cpu0x00/EternelSuspention: a simple poc showcasing the ability of an adm...
117 views
Network Security Channel
Disable Windows Defender (+ UAC Bypass, + Upgrade to SYSTEM)
https://github.com/EvilGreys/Disable-Windows-Defender-

@Engineer_Computer
127 views
Network Security Channel
https://github.com/pedrib/PoC/blob/master/tools/mikrotik_jailbreak.py

@Engineer_Computer
128 views
Network Security Channel
☠️   آسیب پذیری 9 از 10 در فورتی گیت

بنا به گزارش the hacker news، یک آسیب پذیری جدی با شدت 9.6 در FortiOS SSL VPN مشاهده شده که به صورت فعال توسط مهاجمان مورد استفاده قرار گرفته ولی جزییات خاصی در دست نیست.
این باگ امنیتی به مهاجمان احراز هویت نشده، امکان می دهد از راه دور، کدها و یا کامندهای مورد نظر خود را از طریق درخواست های HTTP اجرا کنند.

برای جلوگیری از این آسیب پذیری ها، همین الان فریمورهای بیش از 80 مدل مخلف فورتی نت را از لینک زیر دانلود کنید.👇👇👇

دانلود فریمور فورتی گیت

@Engineer_Computer
163 views
Network Security Channel
تحلیل ؛ واکاوی و نقد یک پرونده تهیه شده فارنزیک از دیدگاه یک فرد خبره
و نشان دادن ایرادات آن
https://www.bullshithunting.com/p/bullshit-hunting-digital-forensics

@Engineer_Computer
Bullshithunting
Bullshit Hunting: Digital Forensics Edition
A guest post from a seasoned forensicator.
167 views