اینبار وصله اثر نمی‌کند؛ کل دستگاه باید عوض شود !!
ماجرای مشکلات ایمیل گیتوی باراکودا
#آکادمی_روزبه
https://krebsonsecurity.com/2023/06/barracuda-urges-replacing-not-patching-its-email-security-gateways/
ماجرای مشکلات ایمیل گیتوی باراکودا
#آکادمی_روزبه
https://krebsonsecurity.com/2023/06/barracuda-urges-replacing-not-patching-its-email-security-gateways/
Krebs on Security
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways
It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying software updates. But experts say that is exactly…
انجام حمله ( ویدئو بعلاوه کد در گیت هاب)
https://github.com/t3l3machus/toxssin
By default, toxssin’s JavaScript poison automatically spreads across the elements and information of a webpage, abusing the XMLHttpRequest object to intercept:
cookies (if HttpOnly not present),
keystrokes (technically, an active keylogger),
paste events,
input change events,
file selections,
form submissions,
server responses (to form submissions or clicking hyperlinks that target different pages and not internal parts of the same page),
table data (static as well as updates on tables after a page has finished loading),
Most importantly, toxssin:
⛳️attempts to create XSS persistence while the user browses the website by intercepting http requests & responses and re-writing the document, creating the illusion of navigating when actually the document’s location never changes,
⛳️supports session management (you can use it to exploit multiple targets at the same time e.g., by running an XSS-based phishing campaign or exploiting stored XSS),
⛳️supports custom JS script execution against sessions (after a browser gets hooked, you can run custom JS scripts against it),
automatically logs every session.
https://youtu.be/Z9I4UJUBrrY
https://github.com/t3l3machus/toxssin
By default, toxssin’s JavaScript poison automatically spreads across the elements and information of a webpage, abusing the XMLHttpRequest object to intercept:
cookies (if HttpOnly not present),
keystrokes (technically, an active keylogger),
paste events,
input change events,
file selections,
form submissions,
server responses (to form submissions or clicking hyperlinks that target different pages and not internal parts of the same page),
table data (static as well as updates on tables after a page has finished loading),
Most importantly, toxssin:
⛳️attempts to create XSS persistence while the user browses the website by intercepting http requests & responses and re-writing the document, creating the illusion of navigating when actually the document’s location never changes,
⛳️supports session management (you can use it to exploit multiple targets at the same time e.g., by running an XSS-based phishing campaign or exploiting stored XSS),
⛳️supports custom JS script execution against sessions (after a browser gets hooked, you can run custom JS scripts against it),
automatically logs every session.
https://youtu.be/Z9I4UJUBrrY
GitHub
GitHub - t3l3machus/toxssin: An XSS exploitation command-line interface and payload generator.
An XSS exploitation command-line interface and payload generator. - t3l3machus/toxssin
تابحال به اکانت WDAGUtilityaccount در ویندوز؛ توجه کرده اید؟
Microsoft Defender Application Guard
#آکادمی_روزبه
https://windowsreport.com/wdagutilityaccount/
Microsoft Defender Application Guard
#آکادمی_روزبه
https://windowsreport.com/wdagutilityaccount/
Windows Report
WDAGUtilityAccount: What is it & Should you Disable it?
If you are wondering what the WDAGUtilityAccount user account is on your PC, this guide contains everything you need to know about it.
آشنایی با یک ابزار برای آنالیز استاتیک بدافزارها
PE-Studio
#آکادمی_روزبه
https://www.socinvestigation.com/pestudio-initial-malware-assessment-made-simple/
PE-Studio
#آکادمی_روزبه
https://www.socinvestigation.com/pestudio-initial-malware-assessment-made-simple/
Security Investigation - Be the first to investigate
Pestudio: Initial Malware Assessment Made Simple - Security Investigation
In my earlier blog post, I demonstrated the process of analyzing executable packers. In this current blog, we will explore additional static malware analysis tools. Prior to that, we will examine why it is crucial. Now-a-days, the significance of malware…
Insider Threat Mitigation Guide-1.pdf
8.3 MB
بهروشی برای پیشگیری از/ کاهش حمله از داخل ( عامل خودی)
#آکادمی_روزبه
#آکادمی_روزبه
آکادمی آموزش روزبه 📚
مهم نیست آنتی ویروس شما چه باشد یا XDRو EDR داشته باشید درنهایت همه ی آنها با Terminator دور می‌خورند!! #آکادمی_روزبه یک راهکار جبرانی : پایش اکانت ادمین و پرهیز از تخصیص ادمین به هر شخص به همراه آموزش به کاربران برای عدم استفاده از نرم افزارهای نامشخص…
👆👆در دارک وب ؛ ترمیناتور از ۳۰۰۰ تا ۳۰۰۰۰ دلار به فروش می‌رسد
ولی شما فعلا این را امتحان کنید
#آکادمی_روزبه
https://github.com/ZeroMemoryEx/Terminator
ولی شما فعلا این را امتحان کنید
#آکادمی_روزبه
https://github.com/ZeroMemoryEx/Terminator
GitHub
GitHub - ZeroMemoryEx/Terminator: Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes - ZeroMemoryEx/Terminator
📍تغییرات در نوع موتور جستجوی ویندوز ۱۰ و ۱۱
🔎آشنایی با ابزار تحلیل دیتابیس جستجوی ویندوز
#آکادمی_روزبه
#فارنزیک
https://www.aon.com/cyber-solutions/aon_cyber_labs/windows-search-index-the-forensic-artifact-youve-been-searching-for/
🔎آشنایی با ابزار تحلیل دیتابیس جستجوی ویندوز
#آکادمی_روزبه
#فارنزیک
https://www.aon.com/cyber-solutions/aon_cyber_labs/windows-search-index-the-forensic-artifact-youve-been-searching-for/
دزدیدن اتومبیل های بدون کلید
راهکارهای جبرانی را بخوانید
#آکادمی_روزبه
https://www.linkedin.com/posts/iamrahultyagi_watch-relay-attacks-on-cars-how-criminals-activity-7073955352890793985-2vrv?utm_source=share&utm_medium=member_android
راهکارهای جبرانی را بخوانید
#آکادمی_روزبه
https://www.linkedin.com/posts/iamrahultyagi_watch-relay-attacks-on-cars-how-criminals-activity-7073955352890793985-2vrv?utm_source=share&utm_medium=member_android
Linkedin
Rahul T. on LinkedIn: Watch: Relay Attacks on Cars: How Criminals Exploit Keyless Entry Systems…
Watch: Relay Attacks on Cars: How Criminals Exploit Keyless Entry Systems
About this Attack: A relay attack is a method used by criminals to steal cars with…
About this Attack: A relay attack is a method used by criminals to steal cars with…
پایش LED توسط دوربین در ۱۸ متری و استخراج کلید های رمزنگاری
#آکادمی_روزبه
https://arstechnica-com.cdn.ampproject.org/c/s/arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/amp/
#آکادمی_روزبه
https://arstechnica-com.cdn.ampproject.org/c/s/arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/amp/
🔅Vulnlab🔅 is a pentesting & red teaming lab environment by xct with about 50 vulnerable machines, ranging from standalone machines to big active directory environments with multiple forests that require bypassing modern defenses. The labs have various difficulties from easy to advanced and come with guidance in the form of notes, hints & walkthroughs. New content gets added on a regular basis.
#آکادمی_روزبه
همیشه بخوان
عمیق بیاموز
https://www.vulnlab.com/
#آکادمی_روزبه
همیشه بخوان
عمیق بیاموز
https://www.vulnlab.com/
حکمرانی ریسک هوش مصنوعی
قسمت دوم
#آکادمی_روزبه
https://www.blog.deploy-securely.com/p/governing-ai-risk-with-the-nist-rmf
قسمت دوم
#آکادمی_روزبه
https://www.blog.deploy-securely.com/p/governing-ai-risk-with-the-nist-rmf
Stackaware
Govern AI risk with the NIST RMF: policies, procedures, and compliance
Part 2 of a series on the National Institute of Standards and Technology's Artificial Intelligence Risk Management Framework.