Network Security Channel – Telegram
Network Security Channel
@Engineer_Computer
2.55K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.55K subscribers
Network Security Channel
Kubernetes-Security-101.pdf
3.1 MB
کتاب رایگان امنیت کوبرنتیس
@Engineer_Computer
348 views
Network Security Channel
Web Application Lab Setup Guide .pdf
1.1 MB
نحوه برپایی یک آزمایشگاه برنامه تحت وب برای تست نفوذ

@Engineer_Computer
354 views
Network Security Channel
Suspicious Traffic Detection .pdf
668.8 KB
شناسایی برخی ترافیک های نرمال و آنرمال در شبکه
@Engineer_Computer
359 views
Network Security Channel
Malware analysis
1. Scam .pdf files
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/rise-in-deceptive-pdf-the-gateway-to-malicious-payloads

2. ComPromptMized: Unleashing 0-click Worms that Target GenAI-Powered Applications
https://sites.google.com/view/compromptmized

3. Malicious traffic detection system
https://github.com/stamparm/maltrail

4. CryptoChameleon: New Phishing Tactics Exhibited in FCC-Targeted Attack
https://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit

@Engineer_Computer
McAfee Blog
Rise in Deceptive PDF: The Gateway to Malicious Payloads | McAfee Blog
Authored by Yashvi Shah and Preksha Saxena McAfee Labs has recently observed a significant surge in the distribution of prominent malware through PDF
238 views
Network Security Channel
WB_PLC_mal.pdf
13.9 MB
@Engineer_Computer
❤1
212 views
Network Security Channel
Outbreak_Alerts_Rep.pdf
10.3 MB
Analytics
Outbreak Alerts Annual Report 2023

Challenges to the Cyber Landscape in 2024:The cybersecurity landscape is ever changing, marked by the continual emergence of new threats. Being aware of
the primary challenges enables organizations to remain vigilant against evolving risks and adjust their cybersecurity strategy accordingly.
@Engineer_Computer
❤2
247 views
Network Security Channel
CryptoCrime_Rep_2024.pdf
20.8 MB
Analytics
Threat Research
The 2024 Crypto Crime Report:
The latest trends in ransomware, scams, hacking

@Engineer_Computer
❤2
248 views
Network Security Channel
یارای جدید : YARA-X

توانمندیها و دلایل ایجاد،همچنین نحوه ساپورت از یارای فعلی را در لینک زیر بخوانید

https://blog.virustotal.com/2024/05/yara-is-dead-long-live-yara-x.html?m=1

@Engineer_Computer
Virustotal
YARA is dead, long live YARA-X
For over 15 years, YARA has been growing and evolving until it became an indispensable tool in every malware researcher's toolbox. Througho...
👍2
246 views
Network Security Channel
یکی از اون چیزایی که باید بدونید چیه :
VMware PowerCLI is a command-line and noscripting tool built on PowerShell

@Engineer_Computer

https://developer.broadcom.com/tools/vmware-powercli/latest
👍2
228 views
Network Security Channel
نحوه استفاده از PowerCLI
@Engineer_Computer

**در برخی از کیس های فارنزیک استفاده از این مجموعه دستورات برای حوزه مجازی سازی ، بسیار راهگشا است .

https://www.altaro.com/vmware/vmware-powercli-guide/
Altaro DOJO | VMware
Getting Started with VMware PowerCLI – A Beginner's Guide
Did you know that VMware PowerCLI allows IT Pros to not only perform most vSphere admin tasks but also automate them? Learn how to get started with it.
245 views
Network Security Channel
NMAP Commands.pdf
83.5 KB
۱۲ اسلاید از دستورات کاربردی NMAP
@Engineer_Computer
408 views
Network Security Channel
#Browser V8 Heap #Sandbox #Escape
اخیرا روشی در کنفرانس OffensiveCon 2024 مطرح شده در خصوص دور زدن Sandbox مرورگر Chrome با موتور اجرایی V8.

این روش مطرح شده به این صورت است که مهاجم بواسطه یک آسیب پذیری Memory Corruption توان خواندن و نوشتن در منطقه حافظه Sandbox را پیدا میکند، لذا بواسطه تعریف چند HeapObj امکان دسترسی به  Base Address ساختمان PTR Table شده و مقدار آدرس را با نوع محتوای عددی، دریافت میشود.

اما همانطور که میدانید Sandbox ها از Control Flow Integrity استفاده میکنند برای ترسیم پرش ها و اشاره های درون یک برنامه، محقق اینجا میکوشد تا بواسطه HeapObjها یک اشاره گر External را تعریف کرده تا از منطقه Trust حافظه خارج شده و اقدام به فراخوانی Gadget در بیرون حافظه کند.

که این موضوع موجب میشود محقق بتواند یک پردازش بیرون از Sandbox را ایجاد کرده و مکانیزم را دور بزند، این مسئله در پی باگی در نحوه پوشش Sandbox موتور اجرایی V8 رخ میدهد که External Object ها را Isolate نمیکند.
@Engineer_Computer
257 views
Network Security Channel
ابزاری برای جمع آوری ادله دیجیتال قبل از اخذ ایمیج فارنزیک

**نوشته شده توسط عضو سابق FBI و مدرس فعلی سنز

https://www.kroll.com/en/services/cyber-risk/incident-response-litigation-support/kroll-artifact-parser-extractor-kape

@Engineer_Computer
Kroll
Kroll Artifact Parser and Extractor (KAPE) is an efficient and highly configurable triage program that will target essentially…
275 views
Network Security Channel
This media is not supported in your browser
VIEW IN TELEGRAM
💥شماتیکی از انواع اتک های شبکه در لایه های
مختلف OSI
@Engineer_Computer
👍1
370 views
Network Security Channel
Awesome security hardening.

• مجموعه ای حجیم از مواد مختلف با موضوع افزایش امنیت. از راهنمایی های دقیق تا ابزارها و معیارهای اساسی:

• Security Hardening Guides and Best Practices;
— Hardening Guide Collections;
— GNU/Linux;
- Red Hat Enterprise Linux - RHEL;
- CentOS;
- SUSE;
- Ubuntu;
— Windows;
— macOS;
— Network Devices;
- Switches;
- Routers;
- IPv6;
- Firewalls;
— Virtualization - VMware;
— Containers - Docker - Kubernetes;
— Services;
- SSH;
- TLS/SSL;
- Web Servers;
- Mail Servers;
- FTP Servers;
- Database Servers;
- Active Directory;
- ADFS;
- Kerberos;
- LDAP;
- DNS;
- NTP;
- NFS;
- CUPS;
— Authentication - Passwords;
— Hardware - CPU - BIOS - UEFI;
— Cloud;
• Tools;
— Tools to check security hardening;
- GNU/Linux;
- Windows;
- Network Devices;
- TLS/SSL;
- SSH;
- Hardware - CPU - BIOS - UEFI;
- Docker;
- Cloud;
— Tools to apply security hardening;
- GNU/Linux;
- Windows;
- TLS/SSL;
- Cloud;
— Password Generators;
• Books;
• Other Awesome Lists;
— Other Awesome Security Lists.

#Security #hardening
@Engineer_Computer
GitHub
GitHub - decalage2/awesome-security-hardening: A collection of awesome security hardening guides, tools and other resources
A collection of awesome security hardening guides, tools and other resources - decalage2/awesome-security-hardening
611 views
Network Security Channel
Offensive Sqecurity
ReflectiveLoading And InflativeLoading
https://winslow1984.com/books/malware/page/reflectiveloading-and-inflativeloading

https://github.com/senzee1984/InflativeLoading

Red Team Tactics
1. Adventures in Fortinet Decryption
https://bishopfox.com/blog/further-adventures-in-fortinet-decryption

@Engineer_Computer
Winslow1984
ReflectiveLoading And ... | Winslow Blog
CobaltStrike's Beacon is essentially a DLL. The raw format payload is a patched DLL file. Through in...
264 views
Network Security Channel
Threat_Hunting_FNs.pdf
1.4 MB
@Engineer_Computer
250 views
Network Security Channel
Cloud_Edge_Net.pdf
14.2 MB
Tech book
Cloud and Edge Networking 2023.
@Engineer_Computer
281 views