لیست ابزار های اضافه شده به کالی نسخه جدید
Dufflebag – Search exposed EBS volumes for secrets
Maryam – Open-source Intelligence (OSINT) Framework
Name –That-Hash – Do not know what type of hash it is? Name That Hash will name that hash type!
Proxmark3 – if you are into Proxmark3 and RFID hacking
Reverse Proxy Grapher – graphviz graph illustrating your reverse proxy flow
S3Scanner – Scan for open S3 buckets and dump the contents
Spraykatz – Credentials gathering tool automating remote procdump and parse of lsass process.
truffleHog – Searches through git repositories for high entropy strings and secrets, digging deep into commit history
Web of trust grapher (wotmate) – reimplement the defunct PGP pathfinder without needing anything other than your own keyring
#آکادمی_روزبه
Dufflebag – Search exposed EBS volumes for secrets
Maryam – Open-source Intelligence (OSINT) Framework
Name –That-Hash – Do not know what type of hash it is? Name That Hash will name that hash type!
Proxmark3 – if you are into Proxmark3 and RFID hacking
Reverse Proxy Grapher – graphviz graph illustrating your reverse proxy flow
S3Scanner – Scan for open S3 buckets and dump the contents
Spraykatz – Credentials gathering tool automating remote procdump and parse of lsass process.
truffleHog – Searches through git repositories for high entropy strings and secrets, digging deep into commit history
Web of trust grapher (wotmate) – reimplement the defunct PGP pathfinder without needing anything other than your own keyring
#آکادمی_روزبه
I'm attending What do you need to know about the log4j (Log4Shell) vulnerability?. Would you like to attend?
با شرکت در این رویداد سنز ، هر آنچه درباره آسیب پذیری خطرناک Log4j میخواهید بدانید را دریافت کنید
https://www.linkedin.com/video/event/urn:li:ugcPost:6875864769535070208
با شرکت در این رویداد سنز ، هر آنچه درباره آسیب پذیری خطرناک Log4j میخواهید بدانید را دریافت کنید
https://www.linkedin.com/video/event/urn:li:ugcPost:6875864769535070208
Linkedin
Sign Up | LinkedIn
500 million+ members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.
نگاهی به راهکار های آسیب پذیری ها ، از ملزومات برای تیمهای امنیت است
و از همه مهمتر ، زبان انگلیسی است .
https://github.com/infiniroot/nginx-mitigate-log4shell
و از همه مهمتر ، زبان انگلیسی است .
https://github.com/infiniroot/nginx-mitigate-log4shell
GitHub
GitHub - infiniroot/nginx-mitigate-log4shell: Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script
Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script - infiniroot/nginx-mitigate-log4shell
دومین آسیب پذیری Log4j
وصله کنید .
https://thehackernews.com/2021/12/second-log4j-vulnerability-cve-2021.html
وصله کنید .
https://thehackernews.com/2021/12/second-log4j-vulnerability-cve-2021.html
و اکنون تشخیص دهنده
It does: It checks local log files for indicators of exploitation attempts, even heavily obfuscated ones that string or regular expression based patterns wouldn't detect.
It doesn't find vulnerable applications
It doesn't and can't verify if the exploitation attempts were successful
https://github.com/Neo23x0/log4shell-detector
It does: It checks local log files for indicators of exploitation attempts, even heavily obfuscated ones that string or regular expression based patterns wouldn't detect.
It doesn't find vulnerable applications
It doesn't and can't verify if the exploitation attempts were successful
https://github.com/Neo23x0/log4shell-detector
GitHub
GitHub - Neo23x0/log4shell-detector: Detector for Log4Shell exploitation attempts
Detector for Log4Shell exploitation attempts. Contribute to Neo23x0/log4shell-detector development by creating an account on GitHub.
نسخه ES 7
https://splunkbase.splunk.com/app/263/#/overview
- Conquer alert fatigue with high-fidelity Risk-Based Alerting.
- Bring visibility across your hybrid environment with multicloud security monitoring.
- Conduct flexible investigations for effective threat hunting across security, IT and DevOps data sources.
https://splunkbase.splunk.com/app/263/#/overview
- Conquer alert fatigue with high-fidelity Risk-Based Alerting.
- Bring visibility across your hybrid environment with multicloud security monitoring.
- Conduct flexible investigations for effective threat hunting across security, IT and DevOps data sources.
Active Directory Security.pdf
3.9 MB
اسلاید های درس : امنیت اکتیو دایرکتوری
برنامه ریزی دولت انگلستان برای تبدیل شدن به قدرت سایبری را در زیر بخوانید
https://www.gov.uk/government/news/new-blueprint-to-protect-uk-from-cyber-threats
https://www.gov.uk/government/news/new-blueprint-to-protect-uk-from-cyber-threats
GOV.UK
New Blueprint to protect UK from Cyber Threats
A new National Cyber Strategy has been announced, setting out how we will protect and promote UK interests in rapidly evolving online world
Forwarded from مرکز آموزش نیراسیستم
❓نظرسنجی
چه زمانی را برای یادگیری مهارت های مورد نیاز بازارکار مناسب می دانید؟
چه زمانی را برای یادگیری مهارت های مورد نیاز بازارکار مناسب می دانید؟
Anonymous Poll
64%
از ابتدای تحصیل در دانشگاه
16%
بعد از ترم 3 مقطع کارشناسی
9%
بعد از ترم 5 مقطع کارشناسی
11%
پس از فارغ التحصیلی
میدونین Ntds.dit چیه ؟ حالا برای درکی از چگونگی دزدیده شدن اون ، ببینیم اینو
#مدرسهSOC
https://youtu.be/rioVumJB0Fo
#مدرسهSOC
https://youtu.be/rioVumJB0Fo
YouTube
Detecting NTDS.DIT Theft - ESENT Event Logs
In this episode, we'll take a look at the value of ESENT Event Logs in detecting potential theft of NTDS.DIT.
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***
📖 Chapters
00:00 - Intro
02:16 - Exporting…
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***
📖 Chapters
00:00 - Intro
02:16 - Exporting…
آشنایی با ساختار و معماری شبکه Tor
https://www.socinvestigation.com/the-tor-architecture-and-its-inherent-security-implications/
https://www.socinvestigation.com/the-tor-architecture-and-its-inherent-security-implications/
Security Investigation - Be the first to investigate
The Tor Architecture and its Inherent Security Implications - Security Investigation
Tor network is the least-worst option for protecting your privacy in a web browsing context, in its highest security mode. In the olden days, spy agencies use the dark web to silently share their details. Although the dark web is known for being a hazardous…