Lightweight Netflow collector

— https://github.com/vmxdev/xenoeye/

Cybersecurity Career Path

Offensive, Defensive, Researcher, Engineer, Officer:

— https://github.com/rezaduty/cybersecurity-career-path

Hacking Your Cloud: Tokens Edition 2.0

Office and Microsoft 365 tokens can add some interesting dynamics to Azure and Microsoft 365 services penetration testing. There are a few different ways of getting JWT tokens… These methods are useful when attempting to bypass MFA restrictions and access cloud workloads that are unrestricted by location in conditional access. Most enterprises only restrict access to cloud workloads with MFA in conditional access..:

— https://www.trustedsec.com/blog/hacking-your-cloud-tokens-edition-2-0/

Improve Onboarding through the Magic of Storytelling

4 simple steps for team lead for convenient new technical employe adaptation

— https://aminrb.me/blog/onboarding-storytelling/

30 Cool, Easy & Fun Python Projects with Source Code [2023]

— https://hackr.io/blog/python-projects

Intro to Data Structures & Algorithms

Free course from Udacity. This course will introduce you to common data structures and algorithms in Python:

— https://www.udacity.com/course/data-structures-and-algorithms-in-python--ud513

Linux Kernel: Spectre v2 SMT mitigations problem

— https://github.com/google/security-research/security/advisories/GHSA-mj4w-6495-6crx

CISA - Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Security-byDesign and -Default

— https://www.cisa.gov/sites/default/files/2023-04/principles_approaches_for_security-by-design-default_508_0.pdf

Attack Surface Analyzer

Attack Surface Analyzer is a Microsoft developed open source security tool that analyzes the attack surface of a target system and reports on potential security vulnerabilities introduced during the installation of software or system misconfiguration:

— https://github.com/microsoft/AttackSurfaceAnalyzer

Good News and New Changes in Sys-Admin Open BLD ecosystem

99.9% uptime - https://lab.sys-adm.in

New security concepts
- Security - Open BLD ecosystem fundamentally changed preventing/attacking mitigation mechanisms, now Sys-Admin Open BLD infrastructire has centralized automated hacking IP mitigation system
- Updates - With open Sys-Admin activitieas now we are have two new instruments which can change security protection prism whis based on open source tools/instruments: ip2drop 🧘, cactusd 🌵
- Speed - Extremely improved speed (🏎 faster than IBM Quad9)

Results
- Open BLD ecosystem servers partially migrated from fail2ban to ip2drop
- All servers has new firewall settings and improvements (like as ipset)

Enjoy this - https://lab.sys-adm.in

Free Elastic training

Observability with ELK with practice:

— https://www.elastic.co/training/free

Sandbox Escape in vm2@3.9.16. PoC.

There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException() which can be used to escape the sandbox and run arbitrary code in host context.

https://gist.github.com/leesh3288/381b230b04936dd4d74aaf90cc8bb244

Credits: https://github.com/advisories/GHSA-7jxr-cg7f-gpgv

Get started using Attack simulation training

If your organization has Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2, which includes Threat Investigation and Response capabilities, you can use Attack simulation training in the Microsoft 365:

— More details…

Just put it here.. - https://github.com/fin3ss3g0d/evilgophish

Designing and Developing Modern Applications

free Zoom Conference. I known personally some participiants from speakers, so shoult be interecting, maybe:

— https://akvelon.global/devday2023/

EDR Telemetry

This repo provides a list of telemetry features from EDR products and other endpoint agents such as Sysmon broken down by category. The main motivation behind this project is to enable security practitioners to compare and evaluate the telemetry potential from those tools while encouraging EDR vendors to be more transparent about the telemetry features they do provide to their users and customers:

— https://github.com/tsale/EDR-Telemetry

Discord DLL hijacking / Automation via Excel Macros

— https://github.com/MitchHS/Discord-DLL-Hijacking

Massive Abuse of Abandoned Eval PHP WordPress Plugin

https://blog.sucuri.net/2023/04/massive-abuse-of-abandoned-evalphp-wordpress-plugin.html

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes:

— https://github.com/infosecB/LOOBins