NEW BOT Телеграм, страница

🚀 Как достигать своих целей с Live Driving (c)

Например: "Выспаться", "Выучить английский", "Запустить свой проект", "Быть счастливым" - все эти цели вполне осуществимы, я бы сказал, что они жизненно важны.

Тем не менее, руки не доходят до собственных проектов, а счастье кажется где-то в далеком "светлом" будущем, которое может и не наступить.

Оглядись вокруг - мы уже в нужном месте, в нужное время, прямо здесь и сейчас. Все уже случилось!

😎 Некоторое время назад я создал свою точку опоры для достижения целей, которую назвал Live Driving - посредник между человеком и окружающим миром на пути к достижению целей.

Мы встречались 29 октября в Алматы - было здорово, как и всегда на наших встречах. Также есть мысль о встрече в Астане.

🔻 Кто хочет получить позитив, добро пожаловать - заполните форму участия в Live Driving.

Please open Telegram to view this post

VIEW IN TELEGRAM

2.65K viewsYevgeniy Goncharov, 08:14

Sys-Admin Up

.NET Assembly Obfuscation for Memory Scanner Evasion

-- https://www.r-tec.net/r-tec-blog-net-assembly-obfuscation-for-memory-scanner-evasion.html

www.r-tec.net

.NET Assembly Obfuscation for Memory Scanner Evasion

This blog post will give a short overview of how in-memory .NET assembly execution commonly works and what detection mechanisms exist.

386 viewsYevgeniy Goncharov, 09:42

Sys-Admin Up

https://github.com/hktalent/scan4all

GitHub

GitHub - GhostTroops/scan4all: Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints;…

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)... - ...

454 viewsYevgeniy Goncharov, 16:22

Sys-Admin Up

https://github.com/openpubkey/openpubkey

GitHub

GitHub - openpubkey/openpubkey: Reference implementation of OpenPubkey

Reference implementation of OpenPubkey. Contribute to openpubkey/openpubkey development by creating an account on GitHub.

407 viewsYevgeniy Goncharov, 01:09

Sys-Admin Up

Cyber kill chain vs MITRE ATTCK

432 viewsYevgeniy Goncharov, 04:42

Sys-Admin Up

Tools for CyberSec. Sorted by categories.

🔹

Exploitation:
- Burp Suite
- Cobalt Strike
- Core Impact
- ExploitDB
- Metasploit Framework
- SQL Map
- ZAP

🔹

Forensics:
- Autopsy
- Binwalk
- Foremost
- Guymager
- SluethKit
- Volatility
- Wireshark

🔹

Information Gathering:
- Amass
- Censys
- Gobuster
- Maltego
- Nmap
- OSINT Framework
- Recon-NG
- Shodan
- TheHarvester

🔹

Password Cracking:
- Cain & Abel
- Hashcat
- Hydra
- John The Ripper
- Medusa
- OPHCrack
- THC-Hydra

🔹

Software Engineering:
- Evilginx
- EvilURL
- GoPhish
- HiddenEye
- SET
- SocialFish

🔹

Vulnerability Scanning:
- Acunetix
- AppScan
- Invicti
- LYNIS
- Nessus
- Nexpose
- OpenVAS
- Retina

🔹

Web Application Assessment:
- App Spider
- Burp Suite
- Gobuster
- Nikto
- OWASP ZAP
- WPScan
- ZAP

🔹

Wireless Hacking:
- Aircrack-NG
- Airgeddon
- Airsnort
- Kismet
- Netstumbler
- Reaver
- TCPDump
- Wifite

#tools

Please open Telegram to view this post

VIEW IN TELEGRAM

486 viewsYevgeniy Goncharov, 02:01

Sys-Admin Up

Home Grown Red Team: LNK Phishing Revisited In 2023

-- https://assume-breach.medium.com/home-grown-red-team-lnk-phishing-revisited-in-2023-364daf70a06a

Medium

Home Grown Red Team: LNK Phishing Revisited In 2023

All right so macros are out, ISOs, zips and password protected zips are all getting flagged. What’s an APT to do? Well, LNK files are still…

3.01K viewsYevgeniy Goncharov, 02:03

Sys-Admin Up

Extending NGINX with Rust (an Alternative to C)

-- https://www.nginx.com/blog/extending-nginx-with-rust-an-alternative-to-c/

F5, Inc.

Extending NGINX with Rust (an Alternative to C)

335 viewsYevgeniy Goncharov, 08:21

Sys-Admin Up

AvosLocker Ransomware (Update)

updated report from FBI and CISO (mitigation, IoC, mitre):

https://www.cisa.gov/sites/default/files/2023-10/aa23-284a-joint-csa-stopransomware-avoslocker-ransomware-update.pdf

3K viewsYevgeniy Goncharov, edited 11:59

Sys-Admin Up

xortigate-cve-2023-27997

Exploit for xortigate (CVE-2023-27997). It is not usable "as-is" and serves educational purposes:

https://github.com/lexfo/xortigate-cve-2023-27997

P.S. thx for the link @mehrrun

GitHub

GitHub - lexfo/xortigate-cve-2023-27997: xortigate-cve-2023-27997

xortigate-cve-2023-27997. Contribute to lexfo/xortigate-cve-2023-27997 development by creating an account on GitHub.

379 viewsYevgeniy Goncharov, edited 12:11

Sys-Admin Up

Microsoft AI Bounty Program

https://www.microsoft.com/en-us/msrc/bounty-ai

352 viewsYevgeniy Goncharov, edited 12:48

Sys-Admin Up

Misconfigurations and Weaknesses Known to be Used in Ransomware Campaigns

https://www.cisa.gov/stopransomware/misconfigurations-and-weaknesses-known-be-used-ransomware-campaigns

Cybersecurity and Infrastructure Security Agency CISA

Misconfigurations and Weaknesses Known to be Used in Ransomware Campaigns | CISA

This list provides information on weaknesses and misconfigurations that are commonly exploited by threat actors in ransomware campaigns. This list is different from the KEV catalog as it contains information not CVE based. CWE/Misconfiguration/ Vulnerable…

410 viewsYevgeniy Goncharov, 14:34

Sys-Admin Up

Scientists from University of Portsmouth - Our reality is simulation

The simulation hypothesis is a philosophical theory, in which the entire universe and our objective reality are just simulated constructs.

Big fundamental mathematical basis with comments, denoscriptions and graphics:

https://pubs.aip.org/ai/adv/article/13/10/105308/2915332/The-second-law-of-infodynamics-and-its

AIP Publishing

The second law of infodynamics and its implications for the simulated universe hypothesis

The simulation hypothesis is a philosophical theory, in which the entire universe and our objective reality are just simulated constructs. Despite the lack of e

379 viewsYevgeniy Goncharov, 03:32

Sys-Admin Up

CVE-2023-5178: Linux NVMe-oF/TCP Driver - UAF in `nvmet_tcp_free_crypto`

Due to a logical bug in the NVMe-oF/TCP subsystem in the Linux kernel, a malicious actor, with the ability to send messages to the NVMe-oF/TCP server (either LAN or WAN), can cause a UAF and a double free, which may lead to remote kernel code execution:

- https://www.openwall.com/lists/oss-security/2023/10/15/1

2.84K viewsYevgeniy Goncharov, edited 09:36

Sys-Admin Up

Открытый доклад "Безопасность и DNS" в этот четверг (19 октября) г.Алматы

В Алматы, в четверг 19 октября, в 19 часов в SmartPoint. Буду докладывать по данному сабжу.

Все мы знаем, что DNS это "наше все" без него не будет ничего толком работать, он везде, но мало кто уделяет роль этой службе с точки зрения киберсека.

Доку еще пишу, но думаю будет:
🔹Зачем нужен ДНС и как работает
🔹Как он может аффектить security
🔹Как он может аффектить пользователей
🔹DNS и Tread Intelligence
🔹Откуда ноги у OpenBLD.net DNS 😡

Примерно так. Вход свободный. Линка к сожалению не моя и только в LinkrdIn, там же агенда встречи.

Кто будет - до встреч ✌️))

Please open Telegram to view this post

VIEW IN TELEGRAM

2.63K viewsYevgeniy Goncharov, edited 12:24

Sys-Admin Up

ShellBot DDoS Malware Installed Through Hexadecimal Notation Addresses

https://asec.ahnlab.com/en/57635/

ASEC

ShellBot DDoS Malware Installed Through Hexadecimal Notation Addresses - ASEC

ShellBot DDoS Malware Installed Through Hexadecimal Notation Addresses ASEC

385 viewsYevgeniy Goncharov, 18:29

Sys-Admin Up

iso-27001-audit-check-list.pdf

1.9 MB