NEW BOT Телеграм, страница

/ SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated proof-of-concept (PoC) exploits.

https://github.com/xaitax/SploitScan

GitHub

GitHub - xaitax/SploitScan: SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities…

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. - xaitax/SploitScan

398 viewsYevgeniy Goncharov, 05:11

Sys-Admin Up

Forwarded from OpenBLD.net (Yevgeniy Goncharov)

😡

OpenBLD.net growth with AlphaVPS

New OpenBLD points of presence have been added in the world thanks to AlphaVPS!

AlphaVPS.com - Fast & Cheap VPS, Cloud Servers and few servers from AlphaVPS stay which located in Bulgaria and Germany joined in to OpenBLD.net ecosystem.

As you know one of the our prioritites - fast DoH/DoT responses and 1GBit/s from AlphaVPS it is good base for this requirements.

One server already available for users (see status of Ada-h4), second server will be available in the next few days. Enjoy it 🚀

P.S. Few times ago I posted OpenBLD.net IPv6 Pre-Release notice, in few near weeks I'll plan implement DoH/DoT IPv6 for users in Europe, I'll tell about this later 😎...

Please open Telegram to view this post

VIEW IN TELEGRAM

301 viewsYevgeniy Goncharov, 07:58

Sys-Admin Up

Talos IOC data

this page with the latest indicators of compromise (IOCs):

https://github.com/Cisco-Talos/IOCs/tree/main

GitHub

GitHub - Cisco-Talos/IOCs: Indicators of Compromise

Indicators of Compromise. Contribute to Cisco-Talos/IOCs development by creating an account on GitHub.

412 viewsYevgeniy Goncharov, 14:00

Sys-Admin Up

Cobalt Strike Profiles for EDR Evasion

https://github.com/EvilGreys/Cobalt-Strike-Profiles-for-EDR-Evasion

345 viewsYevgeniy Goncharov, 19:41

Sys-Admin Up

Cvemap from ProjectDiscovery

Infomation in cvemap based on:
- Known Exploited Vulnerabilities Catalog (KEV)
- Exploit Prediction Scoring System (EPSS)
- Proofs of Concept (POCs)
- HackerOne CVE Discovery
- Nuclei Templates
- and more..

https://blog.projectdiscovery.io/announcing-cvemap-from-projectdiscovery/

318 viewsYevgeniy Goncharov, 10:03

Sys-Admin Up

Forwarded from OpenBLD.net (Yevgeniy Goncharov)

🚀 zDNS Released with Big Updates and Features

Few month ago I stared develop from scratch zDNS service, now it's can:

- Restrict DNS queries by type like as A, AAAA, HTTPS, CNAME, MX, PTR..
- Balancing DNS traffic between upstream servers
- Providing Prometheus metrics
- DNS responses caching by custom TTL
- Has few working modes - Zero Trust, Allow/Blocking
- Has separated "Permanent" mode with additional custom upstream DNS servers
- Can load allow/block lists from local and remote through HTTP(S)
- Create/Delete custom users with different configs and hosts files
- and more...

New opportunities, features, looking forward, and info about of new OpenBLD.net Personal Usage Testing pre-relase see here:

https://openbld.net/blog/zdns-big-updates-and-features/

Please open Telegram to view this post

VIEW IN TELEGRAM

314 viewsYevgeniy Goncharov, 10:11

Sys-Admin Up

Forwarded from Sys-Admin InfoSec

/ Phishing Microsoft Teams for initial access

https://pushsecurity.com/blog/phishing-microsoft-teams-for-initial-access/

Push Security

Phishing Microsoft Teams for initial access

In this article, we will cover a number of spoofing and phishing strategies that can be employed by external attackers to target an organization using Teams.

324 viewsYevgeniy Goncharov, 11:02

Sys-Admin Up

OSIN links from MISP

Includes a set of public OSINT feeds:

https://www.misp-project.org/feeds/

MISP Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing

MISP Default Feeds

MISP Threat Intelligence & Sharing

398 viewsYevgeniy Goncharov, 05:57

Sys-Admin Up

Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins

https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/

Sonarsource

Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins

This blog uncovers two vulnerabilities, a Critical and High severity, recently discovered by our research team. Exploiting these vulnerabilities, attackers have the potential to gain Remote Code Execution on a Jenkins instance.

324 viewsYevgeniy Goncharov, 08:29

Sys-Admin Up

/ Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/

The DFIR Report

Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

Key Takeaways In late December 2022, we observed threat actors exploiting a publicly exposed Remote Desktop Protocol (RDP) host, leading to data exfiltration and the deployment of Trigona ransomwar…

404 viewsYevgeniy Goncharov, 06:59

Sys-Admin Up

/ ExecIT - DLL Shellcode self-inyector/runner based on HWSyscalls, ideally thought to be executed with rundll32. May grant fileless execution if victim endpoint has access to attacker-controlled SMB share:

https://github.com/florylsk/ExecIT

323 viewsYevgeniy Goncharov, 07:44

Sys-Admin Up

SOC Analyst Interview Questions

https://letsdefend.io/blog/soc-analyst-interview-questions/

letsdefend.io

Blue Team Blog - LetsDefend

Cyber security blog about SOC Analyst, Incident Responder, and Detection Engineer for blue team training.

376 viewsYevgeniy Goncharov, 09:32

Sys-Admin Up

net/ipv6: Revert remove expired routes with a separated list of routes

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dade3f6a1e4e35a5ae916d5e78b3229ec34c78ec

Ref: https://nvd.nist.gov/vuln/detail/CVE-2023-6200

365 viewsYevgeniy Goncharov, 13:51

Sys-Admin Up

FACTION - Pen Test Report Generation and Assessment Collaboration

https://github.com/factionsecurity/faction