NEW BOT Телеграм, страница

Security Analysis

⭕️ توی این بلاگ توضیحاتی داده درمورد بالا بردن سطح دسترسی در Active Directory.
اکثر این روش هایی که منجر به گرفتن دسترسی بالاتر توسط هکر میشه علتش کانفیگ نا امن و درحالت دیفالت نگه داشتن کانفیگ های Active Directory و بطور کلی بگیم انجام ندادن هاردنینگ توسط شخص مسئول در سازمان شما هست.
⭕️ اگر توی Red Team فعالیت دارید اسکریپت invoke ACLpwn در Powershell بصورت اتوماتیک کار شناسایی تنظیمات ناامن رو انجام میده و به شما توی بالا بردن سطح دسترسی کمک میکنه.

#Redteam #Pentest #AD #ACL #pwn
@securation

3.14K views10:06

Security Analysis

⭕️ Advanced Client Side Exploitation Using BeEF

https://de.slideshare.net/1N3/man-in-the-browser-advanced-client-side-exploitation-using-beef
#infosec #pentest #redteam
@securation

www.slideshare.net

Advanced Client Side Exploitation Using BeEF

Q2 2017 Phoenix ISSA Chapter Meeting - 04/11/2017

1.96K views14:16

Security Analysis

https://medium.com/@thebugbountyhunter/review-netlas-io-for-bug-bounty-c062a87b544f

Medium

Review Netlas.io for Bug Bounty

Hi community!

2.08K views13:47

Security Analysis

https://blog.dixitaditya.com/2021/11/19/account-takeover-chain.html

All Things Security

Exploiting OAuth: Journey to Account Takeover

This is a chain of four different vulnerabilities that allowed me to exploit the OAuth flow to take over the victim's account.

1.71K views17:56

Security Analysis

⭕️ DevOps Roadmap

#devOps #RoadMap
@securation

1.83K views09:09

Security Analysis

⭕️ Tool designed to dump and parse LSASS using a single file

https://github.com/icyguider/DumpNParse
#lsass #dump
@securation

GitHub

GitHub - icyguider/DumpNParse: A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0. - icyguider/DumpNParse

1.79K views09:13

Security Analysis

⭕️ Google Dork Cheatsheet

#dork @securation

👍1

1.9K views06:40

Security Analysis

⭕️ List privileged services that don't come with Windows 10

https://gist.github.com/wdormann/89ed779933fe205fb52ecf3eacf5ff40

#Red_Team #Powershell
@securation

Gist

List privileged services that don't come with Windows 10

List privileged services that don't come with Windows 10 - privileged.ps1

1.76K viewsedited 06:44

Security Analysis

⭕️ Reverse engineering and modifying Android apps with JADX & Frida

https://httptoolkit.tech/blog/android-reverse-engineering/

#reverse #re #android #jadx #frida
@securation

Httptoolkit

Reverse engineering & modifying Android apps with JADX & Frida

I get a lot of emails from users who want to know exactly what their favourite Android app is doing, and want to tweak and change how that works for...

1.81K views10:33

Security Analysis

⭕️ UAC Bypass using DLL Injection

https://github.com/shubham0d/UAC-bypass-using-dll-injection
#dll #uac #bypass
@securation

GitHub

GitHub - shubham0d/UAC-bypass-using-dll-injection: A small project to bypass UAC in windows 10/8/7 using dll injection technique

A small project to bypass UAC in windows 10/8/7 using dll injection technique - shubham0d/UAC-bypass-using-dll-injection

3.75K views12:17

Security Analysis

CVE-2021-42321POC.py

7.7 KB

⭕️PoC of MS Exchange RCE via mspaint.exe

@securation

7.91K viewsedited 12:51

Security Analysis

⭕️ Investigates Abusing Windows Server Update Services (WSUS) to Enable NTLM Relaying Attacks

https://www.gosecure.net/blog/2021/11/22/gosecure-investigates-abusing-windows-server-update-services-wsus-to-enable-ntlm-relaying-attacks/
#wsus #windows #relay
@securation

GoSecure

GoSecure Investigates Abusing Windows Server Update Services (WSUS) to Enable NTLM Relaying Attacks

WSUS client automatically authenticates with NTLM as the current user or the machine account, allowing relay for remote code execution or lateral movement.

1.87K views06:41

Security Analysis

⭕️ Security Testing and Enumeration of WebSockets

https://github.com/PalindromeLabs/STEWS
#websockets #web
@securation

GitHub

GitHub - PalindromeLabs/STEWS: A Security Tool for Enumerating WebSockets

A Security Tool for Enumerating WebSockets. Contribute to PalindromeLabs/STEWS development by creating an account on GitHub.

1.96K views10:42

Security Analysis

Best of Red Teaming and Blue Teaming Cheatsheet.pdf

1.7 MB

⭕️ برگ تقلب های مفید و کاربردی Blue Team و Red Teaming

#Red_team #Blue_Team #CheatSheet
@securation

2.36K views07:38

Security Analysis

⭕️ Wireless Penetration Testing Articles

https://github.com/Ignitetechnologies/Wireless-Penetration-Testing
#Wireless
@securation

2K views12:06

Security Analysis

⭕️ IDApython Scripts for Analyzing Golang Binaries

https://github.com/SentineLabs/AlphaGolang
#reverse #binaries #python #Go
@securation

1.91K views16:42

Security Analysis

⭕️Bug bounty methodology

https://medium.com/geekculture/bug-bounty-methodology-v4-0-demonstrated-8e9cb6ed1b12
@securation

Medium

Bug bounty methodology V4.0 — Demonstrated

A practical demonstration of my bug bounty methodology

1.92K viewsedited 09:12

Security Analysis

⭕️ A Glossary of Blind SSRF Chains

https://blog.assetnote.io/2021/01/13/blind-ssrf-chains/
#ssrf #blindssrf #tools #articles
@securation

1.79K views11:32

Security Analysis

⭕️ هکرهای کره شمالی که قبلا توی شبکه های اجتماعی محققین امنیت سایبری رو مورد هدف قرار داده بودند و توسط گوگل شناسایی شدند , این دفعه به عنوان استخدام کننده ی سامسونگ ظاهر شدن و فایل PDF مخرب رو فرستادن واسه شرکت های امنیتی کره جنوبی و گفتن این فایل شرح وظایف شماست توی سامسونگ:))

⭕️ جالب تر اینه که دریافت کنندگان وقتی شکایت میکردن که چرا فایل pdf باز نمیشه ایمیل میزدن و هکرها درجواب توصیه میکردند به لینکی که Secure PDF Reader هست و میگفتن با این نرم افزار باز میشه.

آخر سر هم گوگل گفته این نرم افزار نسخه modified شده PDFTRON هست و بکدور داشته.

خلاصه که تکنیک های جالب مهندسی اجتماعی اینطوری جواب میده :)

https://therecord.media/north-korean-hackers-posed-as-samsung-recruiters-to-target-security-researchers/
#مهندسی_اجتماعی #فیشینگ #بدافزار

@securation

Google

New campaign targeting security researchers

Details on an ongoing campaign, which we attribute to a government-backed entity based in North Korea, targeting security researchers working on vulnerability research and development.

1.99K views12:40

Security Analysis

⭕️ Hunting for buggy authentication/authorization services on github

https://xvnpw.github.io/posts/hunting_for_buggy_authentication_authorization_services_on_github/
#bugbounty
@securation

1.93K views21:17

Security Analysis

This media is not supported in your browser

VIEW IN TELEGRAM

⭕️ Exploiting CVE-2021-43267

heap overflow vulnerability in the TIPC subsystem of the Linux kernel
https://haxx.in/posts/pwning-tipc/
#heap #kernel #linkux #binexp
@securation

1.94K views09:18

About

Blog

Apps

Platform