NEW BOT Телеграм, страница

Sys-Admin Up

/ Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

— https://dirkjanm.io/obtaining-domain-admin-from-azure-ad-via-cloud-kerberos-trust/

dirkjanm.io

Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust

Many modern enterprises operate in a hybrid environment, where Active Directory is used together with Azure Active Directory. In most cases, identities will be synchronized from the on-premises Active Directory to Azure AD, and the on-premises AD remains…

263 viewsYevgeniy Goncharov, 11:46

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

Open SysConf'23 ⚡ День Х: 16 сентября (Суббота)

Парни и девочки, день Open SysConf'23 встречи - 16 сентября (суббота) 2023.

Подтягиваем ширинки, блузки, гладим шнурки и волосы (у кого есть) и намереваемся на встречу в этот прекрасный и уверен солнечный во всех отношениях день ☀️

Возможно нашей встрече не хватает именно твоего доклада..?

— Форма регистрации докладчика

Место проведения: выбирается. Локация: Казахстан, г.Алматы.

Всем Peace ✌️

235 viewsYevgeniy Goncharov, 13:18

Sys-Admin Up

Fake Security Researcher GitHub Repositories Deliver Malicious Implant

https://vulncheck.com/blog/fake-repos-deliver-malicious-implant

VulnCheck

VulnCheck - Outpace Adversaries

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

281 viewsYevgeniy Goncharov, 00:18

Sys-Admin Up

https://gist.github.com/ktsaou/df6556f0702f5263a3f82f6cfd9f5f30

Gist

Command line web server stress testing tool, implemented with curl and real-time statistics to netdata

Command line web server stress testing tool, implemented with curl and real-time statistics to netdata - stress-with-curl.sh

283 viewsYevgeniy Goncharov, 16:01

Sys-Admin Up

GPT-empowered penetration testing tool

PentestGPT:
https://github.com/GreyDGL/PentestGPT

GitHub

GitHub - GreyDGL/PentestGPT: A GPT-empowered penetration testing tool

A GPT-empowered penetration testing tool. Contribute to GreyDGL/PentestGPT development by creating an account on GitHub.

300 viewsYevgeniy Goncharov, edited 04:37

Sys-Admin Up

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

PyRDP:

https://github.com/GoSecure/pyrdp

GitHub

GitHub - GoSecure/pyrdp: RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or…

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact - GoSecure/pyrdp

342 viewsYevgeniy Goncharov, 07:51

Sys-Admin Up

CONPRO2023.pdf

2.1 MB

De-Anonymizing Users’ Geographical Data on the Strava Heatmap

370 viewsYevgeniy Goncharov, edited 07:59

Sys-Admin Up

Linux Tools Diagnostic Map

#tools

551 viewsYevgeniy Goncharov, edited 15:34

Sys-Admin Up

https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/

JUMPSEC Labs

Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware

TL;DR

370 viewsYevgeniy Goncharov, 05:26

Sys-Admin Up

BlackLotus Mitigation Guide from NSA

https://media.defense.gov/2023/Jun/22/2003245723/-1/-1/0/CSI_BlackLotus_Mitigation_Guide.PDF

2.66K viewsYevgeniy Goncharov, 04:34

Sys-Admin Up

GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking

https://blog.aquasec.com/github-dataset-research-reveals-millions-potentially-vulnerable-to-repojacking

Aqua

GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking

Millions of GitHub repositories are potentially vulnerable to RepoJacking, which if exploited may lead to code execution on environments

331 viewsYevgeniy Goncharov, 04:37

Sys-Admin Up

https://github.com/t3l3machus/Villain

#review #tool

GitHub

GitHub - t3l3machus/Villain: Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based…

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and ...

315 viewsYevgeniy Goncharov, 07:08

Sys-Admin Up

Ad-Attack.pdf

1.4 MB

Few AD attack ways from windows and Linux

311 viewsYevgeniy Goncharov, edited 04:39

Sys-Admin Up

https://www.securityjoes.com/post/process-mockingjay-echoing-rwx-in-userland-to-achieve-code-execution

Security Joes

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution

Our research team is committed to continuously identifying potential security vulnerabilities and techniques that threat actors may exploit to bypass existing security controls. In this blog post, our team is detailing on a comprehensive research specifically…

280 viewsYevgeniy Goncharov, 07:10

Sys-Admin Up

Anatsa banking Trojan hits UK, US and DACH with new campaign

https://www.threatfabric.com/blogs/anatsa-hits-uk-and-dach-with-new-campaign

ThreatFabric

Anatsa banking Trojan hits UK, US and DACH with new campaign

Anatsa returns with a new campaign targeting UK, US and DACH supported by droppers on Google Play Store.

2.34K viewsYevgeniy Goncharov, 09:24

Sys-Admin Up

Awesome Azure Policy

https://github.com/globalbao/awesome-azure-policy

GitHub

GitHub - globalbao/awesome-azure-policy: A curated list of blogs, videos, tutorials, code, tools, noscripts, and anything useful…

A curated list of blogs, videos, tutorials, code, tools, noscripts, and anything useful to help you learn Azure Policy - by @JesseLoudon - globalbao/awesome-azure-policy

281 viewsYevgeniy Goncharov, edited 15:58

Sys-Admin Up

/ Linux 6.4 Released

https://lkml.org/lkml/2023/6/25/453

263 viewsYevgeniy Goncharov, 02:02

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

✍️ Notice: at the next week, all deprecated services will be disabled and all freed up resources will be included to OpenBLD.net DNS ecosystem.

Updates notice:
https://news.1rj.ru/str/sysadm_in_channel/4701

Take care of yourself. Peace ✌️

Sys-Admin InfoSec

OpenBLD.net DNS - Settings Updation Notice

- Who uses DoH/DoT bld.sys-adm.in (will deprecated) please switch to 🚀️️️️ ada.openbld.net
- Change/Update ✨️️️️️️iOS, macOS Profile
- If you are using DNS IP 109.234.39.72 (will deprecated) switch to 46.151.29.15…

233 viewsYevgeniy Goncharov, 03:46

Sys-Admin Up

2023 CWE Top 25 Most Dangerous Software Weaknesses

https://www.cisa.gov/news-events/alerts/2023/06/29/2023-cwe-top-25-most-dangerous-software-weaknesses

273 viewsYevgeniy Goncharov, 07:34

Sys-Admin Up

Malvertising: A stealthy precursor to infostealers and ransomware attacks

https://www.malwarebytes.com/blog/business/2023/06/malvertising-a-stealthy-precursor-to-infostealers-and-ransomware-attacks

Malwarebytes

Malvertising: A stealthy precursor to infostealers and ransomware attacks

Malvertising, the practice of using online ads to spread malware, can have dire consequences—and the problem only seems to be growing.

278 viewsYevgeniy Goncharov, 11:48