بررسی ساختار توکن های JWT
و حملهsignature stripping
#آکادمی_روزبه
https://medium.com/geekculture/jwt-signature-stripping-attack-a-practical-primer-2d8f9ca00c2f
و حملهsignature stripping
#آکادمی_روزبه
https://medium.com/geekculture/jwt-signature-stripping-attack-a-practical-primer-2d8f9ca00c2f
Medium
JWT Signature Stripping Attack: A Practical Primer
JSON Web Tokens (JWT in short) is used in almost every modern web application these days. It is also a common tool used in token-based authentication implementations. (Whether it is the right tool…
یک فریم ورک برای استفاده امن از LLMها در شرکت‌ها
#آکادمی_روزبه
https://boringappsec.substack.com/p/edition-22-a-framework-to-securely
#آکادمی_روزبه
https://boringappsec.substack.com/p/edition-22-a-framework-to-securely
Boring AppSec
Edition 22: A framework to securely use LLMs in companies - Part 2: Managing risk
In this edition, we will focus on managing risk for applications leveraging 3rd party LLMs
دستیار هوش مصنوعی اسپلانک
تبدیل جملات انگلیسی به کامند های SPL
#آکادمی_روزبه
https://www.splunk.com/en_us/blog/platform/flatten-the-spl-learning-curve-introducing-splunk-ai-assistant-for-spl.html
تبدیل جملات انگلیسی به کامند های SPL
#آکادمی_روزبه
https://www.splunk.com/en_us/blog/platform/flatten-the-spl-learning-curve-introducing-splunk-ai-assistant-for-spl.html
Splunk
Flatten the SPL Learning Curve: Introducing Splunk AI Assistant for SPL | Splunk
At .conf23, we announced the preview release of Splunk AI Assistant - Splunk's first offering powered by generative AI.
new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.
#آکادمی_روزبه
https://shorsec.io/blog/dll-notification-injection/
#آکادمی_روزبه
https://shorsec.io/blog/dll-notification-injection/
آکادمی آموزش روزبه 📚
ابزاری برای آسان نمودن هک WormGPT توسط این ابزار ؛ هکر های تازه کار می‌توانند در سطح بالاتری اقدامات خرابکارانه را انجام دهند. 😱 #آکادمی_روزبه https://www.scmagazine.com/news/threat-intelligence/crimeware-tool-wormgpt-ai-bec
#آکادمی_روزبه
https://www.siliconrepublic.com/enterprise/wormgpt-fraudgpt-chatgpt-generative-ai-cyberattacks
https://www.siliconrepublic.com/enterprise/wormgpt-fraudgpt-chatgpt-generative-ai-cyberattacks
Silicon Republic
WormGPT and FraudGPT: The dark side of generative AI
Hackers are turning to generative AI alternatives to ChatGPT - like WormGPT and FraudGPT - as a way to create their own forms of malware.
Types of Authority Documents
#آکادمی_روزبه
https://learngrc.substack.com/p/the-nature-and-types-of-authority
#آکادمی_روزبه
https://learngrc.substack.com/p/the-nature-and-types-of-authority
نیاز به ارزیابی مجدد استاندارد های امنیتی ابزارهای CoM و SoM
#آکادمی_روزبه
https://blog.fraktal.fi/shielded-secrets-the-need-to-reassess-som-and-com-security-standards-784bd5401694
#آکادمی_روزبه
https://blog.fraktal.fi/shielded-secrets-the-need-to-reassess-som-and-com-security-standards-784bd5401694
Medium
Shielded Secrets: The Need to Reassess SoM and CoM Security Standards
Beyond the tech jargon, how safe are SoMs and CoMs in our devices? Dive with us to uncover alarming vulnerabilities.
مشکلات اخیر در حوزه ابری مایکروسافت ، دپارتمان امنیت ملی را مجبور به مداخله برای ارتقای امنیت کرده است
#آکادمی_روزبه
https://www.darkreading.com/cloud/microsoft-cloud-woes-inspire-dhs-security-review
#آکادمی_روزبه
https://www.darkreading.com/cloud/microsoft-cloud-woes-inspire-dhs-security-review
Dark Reading
Microsoft Cloud Security Woes Inspire DHS Security Review
Can the government help fix what's wrong in cloud security? An upcoming investigation is going to try.
آشنایی با مفاهیم
#آکادمی_روزبه
https://www.networkworld.com/article/3574014/what-is-sase-a-cloud-service-that-marries-sd-wan-with-security.html
#آکادمی_روزبه
https://www.networkworld.com/article/3574014/what-is-sase-a-cloud-service-that-marries-sd-wan-with-security.html
Network World
What is SASE? A cloud service that marries SD-WAN with security
Secure access service edge is a Gartner model for streamlining network access, improving security, boosting network performance and reducing the number of vendors and devices IT pros have to deal with.
تحلیل عمیق حمله فیشینگ
#آکادمی_روزبه
https://www.huntress.com/blog/gone-phishing-an-analysis-of-a-targeted-user-attack
#آکادمی_روزبه
https://www.huntress.com/blog/gone-phishing-an-analysis-of-a-targeted-user-attack
Huntress
Gone Phishing: An Analysis of a Targeted User Attack | Huntress
Get an inside look at how threat actors use phishing and social engineering tactics to target users and infiltrate organizations.
تولید لاگ برای مقاصد تست
توسط ابزاری از مایکروسافت
#آکادمی_روزبه
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
توسط ابزاری از مایکروسافت
#آکادمی_روزبه
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
Docs
eventcreate
Reference article for the eventcreate command, which enables an administrator to create a custom event in a specified event log.
آکادمی آموزش روزبه 📚
تولید لاگ برای مقاصد تست توسط ابزاری از مایکروسافت #آکادمی_روزبه https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
برای تولید لاگ سیسمان ، این ابزار پیشنهاد می‌شود
#آکادمی_روزبه
https://github.com/ScarredMonk/SysmonSimulator/tree/main
#آکادمی_روزبه
https://github.com/ScarredMonk/SysmonSimulator/tree/main
GitHub
GitHub - ScarredMonk/SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the…
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams. - ScarredMonk/SysmonS...
چرا LNK. فایل ها مهم اند ( تصویر فوق)
استفاده از LECmdبرای تحلیل لینک ( LNK)فایل ها : ویدئوی زیر
#آکادمی_روزبه
https://www.youtube.com/watch?v=wu4-nREmzGM
استفاده از LECmdبرای تحلیل لینک ( LNK)فایل ها : ویدئوی زیر
#آکادمی_روزبه
https://www.youtube.com/watch?v=wu4-nREmzGM