دزدیدن اتومبیل های بدون کلید
راهکارهای جبرانی را بخوانید
#آکادمی_روزبه
https://www.linkedin.com/posts/iamrahultyagi_watch-relay-attacks-on-cars-how-criminals-activity-7073955352890793985-2vrv?utm_source=share&utm_medium=member_android
راهکارهای جبرانی را بخوانید
#آکادمی_روزبه
https://www.linkedin.com/posts/iamrahultyagi_watch-relay-attacks-on-cars-how-criminals-activity-7073955352890793985-2vrv?utm_source=share&utm_medium=member_android
Linkedin
Rahul T. on LinkedIn: Watch: Relay Attacks on Cars: How Criminals Exploit Keyless Entry Systems…
Watch: Relay Attacks on Cars: How Criminals Exploit Keyless Entry Systems
About this Attack: A relay attack is a method used by criminals to steal cars with…
About this Attack: A relay attack is a method used by criminals to steal cars with…
پایش LED توسط دوربین در ۱۸ متری و استخراج کلید های رمزنگاری
#آکادمی_روزبه
https://arstechnica-com.cdn.ampproject.org/c/s/arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/amp/
#آکادمی_روزبه
https://arstechnica-com.cdn.ampproject.org/c/s/arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/amp/
🔅Vulnlab🔅 is a pentesting & red teaming lab environment by xct with about 50 vulnerable machines, ranging from standalone machines to big active directory environments with multiple forests that require bypassing modern defenses. The labs have various difficulties from easy to advanced and come with guidance in the form of notes, hints & walkthroughs. New content gets added on a regular basis.
#آکادمی_روزبه
همیشه بخوان
عمیق بیاموز
https://www.vulnlab.com/
#آکادمی_روزبه
همیشه بخوان
عمیق بیاموز
https://www.vulnlab.com/
حکمرانی ریسک هوش مصنوعی
قسمت دوم
#آکادمی_روزبه
https://www.blog.deploy-securely.com/p/governing-ai-risk-with-the-nist-rmf
قسمت دوم
#آکادمی_روزبه
https://www.blog.deploy-securely.com/p/governing-ai-risk-with-the-nist-rmf
Stackaware
Govern AI risk with the NIST RMF: policies, procedures, and compliance
Part 2 of a series on the National Institute of Standards and Technology's Artificial Intelligence Risk Management Framework.
تلفیق AMSI و Sharepoint را انجام دهید تا از حملات در امان باشید
#آکادمی_روزبه
https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/configure-amsi-integration
#آکادمی_روزبه
https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/configure-amsi-integration
Docs
Configure AMSI integration with SharePoint Server - SharePoint Server
Learn to secure environments and respond to associated threats from the attacks through AMSI.
انجام SQL Injection و دور زدن WAF
#آکادمی_روزبه
https://mahmoudsec.blogspot.com/2023/02/sql-injection-utilizing-xml-functions.html
#آکادمی_روزبه
https://mahmoudsec.blogspot.com/2023/02/sql-injection-utilizing-xml-functions.html
Blogspot
SQL Injection: Utilizing XML Functions in Oracle and PostgreSQL to bypass WAFs
TL;DR. In this blog post we will be discussing how built-in XML functions in Oracle and PostgreSQL database management systems can be used t...
ویدئوی امروز
#آکادمی_روزبه
جاسوسی با هنر تلفیقی از فضای سایبری و فیزیکی
https://m.youtube.com/watch?v=0xlq4WSpUH8&feature=youtu.be
#آکادمی_روزبه
جاسوسی با هنر تلفیقی از فضای سایبری و فیزیکی
https://m.youtube.com/watch?v=0xlq4WSpUH8&feature=youtu.be
YouTube
Intrigue in Copenhagen: A Tale of High-Stakes Corporate Espionage
When Chinese tech giant Huawei learned it was set to lose a $200 million contract, a run-of-the-mill equipment deal spiraled into a saga of hidden microphones, drone encounters and covert surveillance, according to investigators for a Danish telecoms firm.…
با محاسبات آنتروپی ، وب شل پیدا کنید
#آکادمی_روزبه
"ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential webshell files in a specified directory.
https://github.com/MHaggis/ShellSweep
#آکادمی_روزبه
"ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential webshell files in a specified directory.
https://github.com/MHaggis/ShellSweep
GitHub
GitHub - MHaggis/ShellSweep: ShellSweeping the evil.
ShellSweeping the evil. Contribute to MHaggis/ShellSweep development by creating an account on GitHub.
This is a draft list of important vulnerability types for Artificial Intelligence (AI) applications built on Large Language Models (LLMs)
#آکادمی_روزبه
https://owasp.org/www-project-top-10-for-large-language-model-applications/descriptions/
#آکادمی_روزبه
https://owasp.org/www-project-top-10-for-large-language-model-applications/descriptions/
⛳️کلکسیون شواهد!!
در مخزن زیر ، محل شواهد و رد پاها برای انجام فارنزیک در سیستم عامل های مختلف آورده شده است.
#آکادمی_روزبه
The DFIR Artifact Museum is a community-driven archive of DFIR-related artifacts. It was created to provide a centralized location for examples of artifacts from various operating systems.
https://github.com/AndrewRathbun/DFIRArtifactMuseum
در مخزن زیر ، محل شواهد و رد پاها برای انجام فارنزیک در سیستم عامل های مختلف آورده شده است.
#آکادمی_روزبه
The DFIR Artifact Museum is a community-driven archive of DFIR-related artifacts. It was created to provide a centralized location for examples of artifacts from various operating systems.
https://github.com/AndrewRathbun/DFIRArtifactMuseum
GitHub
GitHub - AndrewRathbun/DFIRArtifactMuseum: The goal of this repo is to archive artifacts from all versions of various OS's and…
The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access t...
برای درک پایش و مانیتورینگ؛ ابتدا باید به موضوع مسلط شد .
درک RPC برای مهندسانِ کشف و تحلیل گران
#آکادمی_روزبه
https://ipc-research.readthedocs.io/en/latest/subpages/RPC.html
درک RPC برای مهندسانِ کشف و تحلیل گران
#آکادمی_روزبه
https://ipc-research.readthedocs.io/en/latest/subpages/RPC.html
🧨قابل توجه توسعه دهندگان نرم افزار
به هر مخزن ابزار و کدی اعتماد نکنید!
در لینک زیر؛ تحلیلی در خصوص یکی از مخازن متن باز کد را می‌خوانیم که حاوی کدهای مخرب است. این مساله می‌تواند در حمله زنجیره تامین موثر باشد
#آکادمی_روزبه
https://blog.virustotal.com/2023/06/inside-of-wasps-nest-deep-dive-into.html?m=1
به هر مخزن ابزار و کدی اعتماد نکنید!
در لینک زیر؛ تحلیلی در خصوص یکی از مخازن متن باز کد را می‌خوانیم که حاوی کدهای مخرب است. این مساله می‌تواند در حمله زنجیره تامین موثر باشد
#آکادمی_روزبه
https://blog.virustotal.com/2023/06/inside-of-wasps-nest-deep-dive-into.html?m=1
Virustotal
Inside of the WASP's nest: deep dive into PyPI-hosted malware
Photo by Matheus Queiroz on Unsplash In late 2022 we decided to start monitoring PyPI , arguably the most important Python repository, a...