Network Security Channel – Telegram
Network Security Channel
@Engineer_Computer
2.55K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.55K subscribers
Network Security Channel
DoD DevSecOps Guide.pdf
1.2 MB
راهنمای DevSecOps وزارت دفاع آمریکا
@Engineer_Computer
288 views
Network Security Channel
فورتی نت هک شد!

به گزارش خبرگزاری ها 440 گیگابایت از دیتاهای این شرکت توسط هکرها سرقت شده است.سرقت این اطلاعات از microsoft sharepoint server بوده است.
@Engineer_Computer
🗿1
268 views
Network Security Channel
یک گزارش APT بخونیم

https://intel471.com/blog/threat-hunting-case-study-uncovering-fin7?utm_content=307648580&utm_medium=social&utm_source=linkedin&hss_channel=lcp-3744600

@Engineer_Computer
Intel 471
Threat hunting case study: Uncovering FIN7
FIN7 is one of the most persistent and capable financially motivated threat actor groups. Here's how to threat hunt for signs of a FIN7 intrusion.
305 views
Network Security Channel
امکان ارتقای دسترسی با توجه به آسیب پذیری در Installer ویندوز

https://sec-consult.com/blog/detail/msi-installer-repair-to-system-a-detailed-journey/

@Engineer_Computer
SEC Consult
Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey
Repair functions of Microsoft Windows MSI installers can be vulnerable in several ways, for instance allowing local attackers to escalate their privileges to SYSTEM rights. This vulnerability is referenced as CVE-2024-38014.
263 views
Network Security Channel
🗒 Server Side Template Injection Payload List

{7*7}
*{7*7}
{{7*7}}
[[7*7]]
${7*7}
@(7*7)
<?=7*7?>
<%= 7*7 %>
${= 7*7}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]

اگر 49 بدهد ، هدف آسیب پذیر است
@Engineer_Computer
288 views
Network Security Channel
🗒Open Redirect via Non\-Latin Subdomain in vcc\-\*\.8x8\.com/AGUI/test\.php
https://hackerone.com/reports/2331473

@Engineer_Computer
HackerOne
8x8 Bounty disclosed on HackerOne: Open Redirect via Non-Latin...
@pentestor reported an issue where a filter that prevents the usage of [1-9] and [a-z] characters in the `subdomain` parameter can be bypassed by utilizing a non-Latin domain. The report...
297 views
Network Security Channel
🗒 One-click Account Take Over

https://dynnyd20.medium.com/one-click-account-take-over-e500929656ea

@Engineer_Computer
Medium
One-click Account Take Over
Hello, my friends!
333 views
Network Security Channel
🗒 Login Bypass

https://rajput623929.medium.com/bug-bounty-tutorial-login-bypass-technique-d7508856b2a1

@Engineer_Computer
341 views
Network Security Channel
Source Code Panel Web + Client + Instruction.zip
82 MB
🗒 XSSLite Stealer‌‌

@Engineer_Computer
362 viewsedited  
Network Security Channel
CEHv13 Version Change Document.pdf
3.4 MB
CEH v13
تغییرات v.12 نسبت به ورژن v.13 رو ببینید
@Engineer_Computer
419 views
Network Security Channel
چرا حمله به اکتیو دایرکتوری میتونه از لینوکس راحت تر باشه

https://gatari.dev/posts/the-art-of-exploiting-ad-from-linux/

@Engineer_Computer
367 views
Network Security Channel
۱۱ ابزار هک جدید در نسخه جدید کالی

https://www.kali.org/blog/kali-linux-2024-3-release/

@Engineer_Computer
Kali Linux
Kali Linux 2024.3 Release (Multiple transitions)
With summer coming to an end, so are package migrations, and Kali 2024.3 can now be released. You can now start downloading or upgrading if you have an existing Kali installation. The summary of the changelog since the 2024.2 release from June is: Qualcomm…
367 views
Network Security Channel
SANS SEC 511-2-2023.pdf
14.3 MB
#SEC511 #2023 #Persian
@Engineer_Computer
402 views
Network Security Channel
خبر جدید اینکه lockheed martin هم هک شد...!

Major US Military Supplier Hacked by EvilWeb: Reports
@Engineer_Computer
299 views
Network Security Channel
متریک های شکار تهدیدات
https://zendannyy.substack.com/p/threat-hunting-metrics-the-good-and

@Engineer_Computer
Substack
Threat Hunting Metrics: The Good Metrics to Focus On
The “Good” Metrics
283 views
Network Security Channel
آشنایی با مفهومی مهم برای SOC

بسیار کاربردی در رول نویسی و هانت

https://redcanary.com/blog/threat-detection/better-know-a-data-source/process-integrity-levels/

@Engineer_Computer
Red Canary
Better know a data source: Process integrity levels | Red Canary
Impossible to spoof, process integrity levels dictate trust between securable objects, offering great visibility into privilege escalation.
239 views
Network Security Channel
مقاله ی خوب بخوانیم

امروز درمورد متریک های هانت مطلبی داشتم.

اما یک مقاله کاملتر در این زمینه در لینک زیر هست که توصیه میکنم بخونید

اگر سخت بود و نتونستید بخاطر شرایط تحریم اکانت مدیوم داشته باشید لینک مقاله رو در سایت readmedium دات کام بگذارید سپس مقاله کامل رو دریافت کنید


https://kostas-ts.medium.com/threat-hunting-metrics-the-good-the-bad-and-the-ugly-d662907379b2
Medium
Threat Hunting Metrics: The Good, The Bad and The Ugly
Threat hunting is a crucial aspect of information security, but measuring its effectiveness can be challenging. In this article, we will…
337 views
Network Security Channel
Microsoft - GDPR & Generative AI - A guide for customers.pdf
3.3 MB
از مایکروسافت بخوانیم :
GDPR & Generative AI
@Engineer_Computer
327 views
Network Security Channel
Windows+ATT&CK_Logging+Cheat+Sheet_ver_Sept_2018.pdf
1.1 MB
🔆 جدول رویداد های ویندوز در تناظر با تکنیک های جدول مایتره

⛳️ یعنی برای کشف یک تکنیک نفوذ و حمله ای که نام برده شده است چه Event ID در لاگ برای کشف وجود دارد

#cybersecurity #threathunting #cyberforensics
@Engineer_Computer
421 views
Network Security Channel
چالش کمبود امنیت هنوز باقی است

برخلاف برخی نظر ها
هنوز کمبود نیروی انسانی امنیت در دنیا چالش است

#cybersecurity

https://www.darkreading.com/cybersecurity-operations/cyber-staffing-shortages-remain-cisos-biggest-challenge

@Engineer_Computer
Darkreading
Cyber Staffing Shortages Remain CISOs' Biggest Challenge
Besides operational issues connected to a talent shortage, the cost of running security platforms — and their training costs — also keeps CISOs up at night.
354 views
Network Security Channel
#استخدام

کارشناس DLP

دریافتی خالص ۳۰ م تومان
پاداش بهره وری تا ۵ م تومان

مسلط به سکوریتی پلاس ، سنز ۵۰۴

ارسال رزومه به
detect@chmail.ir

ترجیحا مسلط به DLP و رجکس نویسی

آموزش‌های لازم داده خواهد شد

حتما درج شود کارشناس DLP

@Engineer_Computer
367 views