Channel Public Channel

Security Analysis

@securation

- Offensive Security (Red Teaming / PenTesting)
-AI Security
- BlueTeam (OperationSec, TreatHunting, DFIR)
- Reverse Engineering / Malware Analysis
- Web Security
- Cryptography
- Steganography
- Forensics
@DrPwner

Open in Telegram

Subscribers: 12.6K
Photos: 370
Videos: 54
Links: 934

Showing posts older than #883 · Back to latest

Older Posts 19 shown

Post #881 1.65K Feb 5, 2022, 19:54 UTC

https://www.bleepingcomputer.com/news/technology/cloudflare-launches-a-paid-public-bug-bounty-program/

BleepingComputer Cloudflare launches a paid public bug bounty program Cloudflare, an American company focused on web infrastructure and website security, has announced the launch of a new public bug bounty program.

Post #879 1.85K Feb 4, 2022, 18:04 UTC

⭕️ Multiple HTTP Redirects to Bypass SSRF Protections

https://infosecwriteups.com/multiple-http-redirects-to-bypass-ssrf-protections-45c894e5d41c
#SSRF #Exploit #Infosec
@securation

Post #878 1.75K Feb 4, 2022, 16:40 UTC

⭕️ Microsoft Defender Advance Hunting Cheat Sheet

https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries/blob/master/MTPAHCheatSheetv01-dark.pdf
@securation

Post #873 1.69K Feb 4, 2022, 08:28 UTC

https://youtu.be/49F0co_VrTY?t=285

YouTube Bypassing Firewalls with DNS Tunnelling (Defence Evasion, Exfiltration and Command & Control) In this video we'll be exploring how to attack, detect and defend against DNS Tunnelling, a technique that can bypass certain firewall restrictions and provide an attacker with a command & control and data transfer channel. It can also be used to bypass many…

Post #871 1.7K Feb 3, 2022, 08:13 UTC

⭕️ این هم از اسکریپت ماینر Jason Statham. که Cadosecurity اون رو در سرویس دهنده های کلود پیدا کرده ماین میکرده :)
احتمالا طرف عاشق جیسون استاتهام بوده :)

#malware #coinstop
@securation

Post #870 1.63K Feb 3, 2022, 07:58 UTC

https://blog.sevagas.com/?MSDT-DLL-Hijack-UAC-bypass

Sevagas MSDT DLL Hijack UAC bypass - [ Sevagas] UAC Bypass via DLL hijacking of Microsoft Support Diagnostic Tool (MSDT). The UAC bypass method described here is based on DLL hijacking which (...)

Post #869 1.66K Feb 3, 2022, 07:52 UTC

⭕️Kubernetes protection in Amazon GuardDuty

GuardDuty can now monitor Kubernetes clusters within your AWS environment.

https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html

#aws #protection #security
@securation

Amazon GuardDuty EKS Protection - Amazon GuardDuty Learn how GuardDuty can monitor EKS clusters within your AWS environment.

Post #867 1.8K Feb 1, 2022, 18:33 UTC

⭕️ همه چیز درباره ریموت کنترل‌های هاپینگ و امنیتشون.

لینک بلاگ

#keeloq_encryption
#sfr
@securation

سیسوگ همه چیز درباره ریموت کنترل‌های هاپینگ - سیسوگ ریموت‌های هاپینگ چطور کار می‌کنند که قادر هستند امنیت بیشتری را تامین کنند. آیا واقعاً ریموت‌های هاپینگ دارای امنیت بیشتری هستند؟

Post #866 2.03K Feb 1, 2022, 14:05 UTC

⭕️ تکنیک های مختلفی که توی Account Takeover بکار برده میشه.

#Tackeover #mindmap
@securation

Post #865 1.72K Feb 1, 2022, 09:56 UTC

Emulating File I/O for In-Memory Fuzzing

https://www.signal-labs.com/blog/emulating-fileio-fuzzing
#memory #fuzzing
@securation

Signal Labs Emulating File I/O for In-Memory Fuzzing | Advanced Offensive Cybersecurity Training Using hooks & file I/O emulation to redirect disk I/O operations to memory, removing disk I/O & related syscalls during fuzzing (which also enables using snapshot-fuzzers that don't support disk I/O).

Post #864 Jan 31, 2022, 18:47 UTC

Security Analysis pinned «This channel has been created to share some of the good stuff in solving the CTF challenges. Our try will be to put writeup to some of the CTF challenges. t.me/ctfplay»

Post #863 1.79K Jan 31, 2022, 18:20 UTC

https://noob3xploiter.medium.com/how-to-get-started-hacking-django-applications-f407564df9c7

Medium How to get started hacking django applications Django is a python based web framework. In this writeup, i will teach you how to analyze django based applications . For this writeup, i…

Post #862 1.83K Jan 31, 2022, 17:25 UTC

⭕️ A Windows user minidump C++ parser library

https://github.com/0vercl0k/udmp-parser/

GitHub GitHub - 0vercl0k/udmp-parser: A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings. A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings. - 0vercl0k/udmp-parser

Post #861 1.89K Jan 31, 2022, 15:46 UTC

This channel has been created to share some of the good stuff in solving the CTF challenges. Our try will be to put writeup to some of the CTF challenges.

t.me/ctfplay

Telegram CTF Community | Hints This channel has been created to share some of the good stuff in solving the CTF challenges. Our try will be to put writeup to some of the CTF challenges.

Post #860 1.87K Jan 31, 2022, 15:41 UTC

https://epi052.gitlab.io/notes-to-self/blog/2022-01-17-fuzzing-101-with-libafl-part-5/

epi's notes-to-self Fuzzing101 with LibAFL - Part V: Fuzzing LibXML2 | epi's notes-to-self Part 5 of a series covering fuzzer development using LibAFL

Post #859 1.81K Jan 31, 2022, 14:19 UTC

https://machevalia.blog/remote-code-execution-in-tgz-file-upload/

Post #858 2.03K Jan 29, 2022, 19:31 UTC

HTTP Security headers quick reference

https://web.dev/security-headers/
#http #secure
@securation

web.dev Security headers quick reference | Articles | web.dev This article lists the most important security headers you can use to protect your website. Use it to understand web-based security features, learn how to implement them on your website, and as a reference for when you need a reminder.

Post #855 1.93K Jan 29, 2022, 08:39 UTC

https://github.com/Ignitetechnologies/BurpSuite-For-Pentester

GitHub GitHub - Ignitetechnologies/BurpSuite-For-Pentester: This cheatsheet is built for the Bug Bounty Hunters and penetration testers… This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite". - ...

Post #854 1.69K Jan 29, 2022, 08:21 UTC

Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot

https://voidstarsec.com/blog//2022/01/27/uart-uboot-and-usb

Older posts →