NEW BOT Телеграм, страница - 174848637

Sys-Admin Up

1.06K subscribers

132 photos

4 videos

127 files

2.23K links

InfoSec, Hacks, Perks, Tools, IT/IS Courses, CVE… Contains part of the news that was not included in the Sys-Admin & InfoSec Channel (@sysadm_in_channel)

Download Telegram

About

Blog

Apps

Platform

1.06K subscribers

Executing Code Using Microsoft Teams Updater

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/executing-code-using-microsoft-teams-updater/

Executing Code Using Microsoft Teams Updater | Trustwave

Red Teamers like to hunt for new methods of code execution through “legitimate” channels, and I’m no exception to that rule.

2.68K viewsYevgeniy Goncharov, 12:34

https://torrentfreak.com/widevine-dump-leaked-code-downloads-hd-video-from-disney-amazon-and-netflix-211227/

'Widevine Dump": Leaked Code Downloads HD Video from Disney+, Amazon, and Netflix * TorrentFreak

A GitHub user has published repositories that allow people to download HD video from platforms, including Disney+, Amazon, and Netflix.

217 viewsYevgeniy Goncharov, 03:31

https://www.sprocketsecurity.com/blog/how-to-exploit-log4j-vulnerabilities-in-vmware-vcenter

Sprocket Security

How to exploit Log4j vulnerabilities in VMWare vCenter

A vulnerability was recently disclosed for the Java logging library, Log4j. The vulnerability is wide-reaching and affects both open source projects and enterprise software, meaning we need to understand how to ID and remediate it in our network environments.…

212 viewsYevgeniy Goncharov, 03:58

https://www.jetbrains.com/help/phpstorm/using-the-advanced-vagrant-features-in-product.html#shared-folders

Using the Advanced Vagrant Features in PhpStorm | PhpStorm

205 viewsYevgeniy Goncharov, 04:14

https://www.zdnet.com/education/computers-tech/best-online-masters-network-security/

Best online master's in network security | ZDNet

Help organizations fight against a growing number of cyberthreats with one of the best online network security master's programs.

219 viewsYevgeniy Goncharov, 04:16

Forwarded from Sys-Admin InfoSec

BLD Project Service - Configurations for Browsers, Devices, Routers

Hey, today I created GitHub wiki page with simple denoscriptions of steps for BLD Configuring on/in your Browsers and Devices:

DoH/Dot
• Google Chrome
• Mozilla Firefox
• Brave
• Edge
• Android (with Private DNS feature version 9+)
• iOS/MacOS
• Standard IP DNS service
• Details on official repo

What is BLD Service - Free & Secure Service from Sys-Admin for prevention - tracking, advertising, malicious and etc..

Details
• General README.md
• Wiki page
• Current BLD official site lab.sys-adm.in site

184 viewsYevgeniy Goncharov, 14:34

QNAP NAS devices hit in surge of ech0raix ransomware attacks

https://www.bleepingcomputer.com/news/security/qnap-nas-devices-hit-in-surge-of-ech0raix-ransomware-attacks/

A Deep Dive into DoubleFeature, Equation Group’s Post-Exploitation Dashboard

https://research.checkpoint.com/2021/a-deep-dive-into-doublefeature-equation-groups-post-exploitation-dashboard/

BleepingComputer

QNAP NAS devices hit in surge of ech0raix ransomware attacks

Users of QNAP network-attached storage (NAS) devices are reporting attacks on their systems with the eCh0raix ransomware, also known as QNAPCrypt.

2.84K viewsYevgeniy Goncharov, edited 17:53

Learn JavaScript (the language and more) by doing it. Fix failing tests. Keep all learnings.

https://jskatas.org/

213 viewsYevgeniy Goncharov, edited 17:58

Linux для себя - русскоязычное подробное руководство по созданию Linux-системы, используя лишь исходные тексты необходимого программного обеспечения. Это руководство - самостоятельное ответвление от проекта Linux From Scratch.

https://lx4u.ru/

Linux для себя :: Создайте свою собственную Linux систему!

Подробное руководство по созданию собственной Linux системы из исходного кода

254 viewsYevgeniy Goncharov, edited 05:29

Redline Stealer Targeting Accounts Saved to Web Browser with Automatic Login Feature Included

https://asec.ahnlab.com/en/29885/

Redline Stealer Targeting Accounts Saved to Web Browser with Automatic Login Feature Included - ASEC

While investigating a recent breach case of the internal network of a certain company, AhnLab ASEC analysis team has confirmed that the VPN account used to access the company network was leaked from the PC of a certain employee who was working from home.…

214 viewsYevgeniy Goncharov, edited 07:54

Аккурат под трудовой будень попалось

ни слов, только ритм… 🎧

https://www.youtube.com/watch?v=KIGXGkzjAoc

Bad Company - The Nine

Composer: Fresh & Maldini of the mighty Bad Company
Label: BC Recordings
Catalogue: VDBCR001
Format: 12"
Release Date: 1998
Genre: Drum & Bass / Techstep

245 viewsYevgeniy Goncharov, edited 11:58

Log4PowerShell (CVE-2021-44228) Proof of Concept

https://github.com/aalex954/Log4PowerShell

GitHub - aalex954/Log4PowerShell: A Log4j writeup and Docker based PoC written in PowerShell

A Log4j writeup and Docker based PoC written in PowerShell - aalex954/Log4PowerShell

218 viewsYevgeniy Goncharov, 12:12

PHP LFI with Nginx Assistance

https://bierbaumer.net/security/php-lfi-with-nginx-assistance/

220 viewsYevgeniy Goncharov, edited 12:14

Practical bruteforce of military grade AES-1024

https://rc3.world/2021/public_fahrplan#3c5f6844-cdc8-5a1a-a342-d93b43546a82

Flagpro: The new malware used by BlackTech

https://insight-jp.nttsecurity.com/post/102hf3q/flagpro-the-new-malware-used-by-blacktech

2.69K viewsYevgeniy Goncharov, edited 15:35

The 3-2-1 Backup Strategy

https://www.backblaze.com/blog/the-3-2-1-backup-strategy/

Backblaze Blog | Cloud Storage & Cloud Backup

Data Backup Strategies: Why the 3-2-1 Backup Strategy is the Best

A Backblaze survey found 54% of people know someone who’s lost data. Learn how the 3-2-1 backup rule can help prevent data loss and keep your files secure.

223 viewsYevgeniy Goncharov, edited 18:18

https://blog.logrocket.com/how-to-build-blockchain-from-scratch-go/

How to build a blockchain with Go - LogRocket Blog

This tutorial aims to teach you how blockchains work by guiding you through building one from scratch with Go.

249 viewsYevgeniy Goncharov, 18:30

ADExplorerSnapshot is an AD Explorer snapshot ingestor for BloodHound

https://github.com/c3c/ADExplorerSnapshot.py

264 viewsYevgeniy Goncharov, edited 18:39

https://www.cloudsavvyit.com/15158/10-tools-that-complement-docker/

10 Tools That Complement Docker

Docker is the best known containerization platform but it doesn’t exist in isolation. An entire ecosystem of complementary tools and spin-off projects has sprung up around the shift to containers.

301 viewsYevgeniy Goncharov, 08:39

GoodbyeDPI — Deep Packet Inspection circumvention utility

https://github.com/ValdikSS/GoodbyeDPI

GitHub - ValdikSS/GoodbyeDPI: GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)

GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows) - ValdikSS/GoodbyeDPI

379 viewsYevgeniy Goncharov, edited 21:35

https://github.com/hoppscotch/hoppscotch

GitHub - hoppscotch/hoppscotch: Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web…

Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia - hoppscotch/hoppscotch

312 viewsYevgeniy Goncharov, 08:52

http://crunchtools.com/the-state-of-enterprise-linux-in-2022/

326 viewsYevgeniy Goncharov, 09:44