Network Security Channel
@Engineer_Computer
2.76K subscribers
5.35K photos
3.42K videos
5.59K files
4.45K links
⭕️Start Channel From 2017⭕️
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.76K subscribers
Network Security Channel
امکان ارتقای دسترسی با توجه به آسیب پذیری در Installer ویندوز

https://sec-consult.com/blog/detail/msi-installer-repair-to-system-a-detailed-journey/

@Engineer_Computer
SEC Consult
Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey
Repair functions of Microsoft Windows MSI installers can be vulnerable in several ways, for instance allowing local attackers to escalate their privileges to SYSTEM rights. This vulnerability is referenced as CVE-2024-38014.
269 views
Network Security Channel
🗒 Server Side Template Injection Payload List

{7*7}
*{7*7}
{{7*7}}
[[7*7]]
${7*7}
@(7*7)
<?=7*7?>
<%= 7*7 %>
${= 7*7}
{{= 7*7}}
${{7*7}}
#{7*7}
[=7*7]

اگر 49 بدهد ، هدف آسیب پذیر است
@Engineer_Computer
299 views
Network Security Channel
🗒Open Redirect via Non\-Latin Subdomain in vcc\-\*\.8x8\.com/AGUI/test\.php
https://hackerone.com/reports/2331473

@Engineer_Computer
HackerOne
8x8 disclosed on HackerOne: Open Redirect via Non-Latin Subdomain...
@pentestor reported an issue where a filter that prevents the usage of [1-9] and [a-z] characters in the `subdomain` parameter can be bypassed by utilizing a non-Latin domain. The report...
310 views
Network Security Channel
🗒 One-click Account Take Over

https://dynnyd20.medium.com/one-click-account-take-over-e500929656ea

@Engineer_Computer
Medium
One-click Account Take Over
Hello, my friends!
349 views
Network Security Channel
🗒 Login Bypass

https://rajput623929.medium.com/bug-bounty-tutorial-login-bypass-technique-d7508856b2a1

@Engineer_Computer
361 views
Network Security Channel
Source Code Panel Web + Client + Instruction.zip
82 MB
🗒 XSSLite Stealer‌‌

@Engineer_Computer
382 viewsedited  
Network Security Channel
CEHv13 Version Change Document.pdf
3.4 MB
CEH v13
تغییرات v.12 نسبت به ورژن v.13 رو ببینید
@Engineer_Computer
442 views
Network Security Channel
چرا حمله به اکتیو دایرکتوری میتونه از لینوکس راحت تر باشه

https://gatari.dev/posts/the-art-of-exploiting-ad-from-linux/

@Engineer_Computer
382 views
Network Security Channel
۱۱ ابزار هک جدید در نسخه جدید کالی

https://www.kali.org/blog/kali-linux-2024-3-release/

@Engineer_Computer
Kali Linux
Kali Linux 2024.3 Release (Multiple transitions)
With summer coming to an end, so are package migrations, and Kali 2024.3 can now be released. You can now start downloading or upgrading if you have an existing Kali installation. The summary of the changelog since the 2024.2 release from June is: Qualcomm…
384 views
Network Security Channel
SANS SEC 511-2-2023.pdf
14.3 MB
#SEC511 #2023 #Persian
@Engineer_Computer
420 views
Network Security Channel
خبر جدید اینکه lockheed martin هم هک شد...!

Major US Military Supplier Hacked by EvilWeb: Reports
@Engineer_Computer
311 views
Network Security Channel
متریک های شکار تهدیدات
https://zendannyy.substack.com/p/threat-hunting-metrics-the-good-and

@Engineer_Computer
Substack
Threat Hunting Metrics: The Good Metrics to Focus On
The “Good” Metrics
292 views
Network Security Channel
آشنایی با مفهومی مهم برای SOC

بسیار کاربردی در رول نویسی و هانت

https://redcanary.com/blog/threat-detection/better-know-a-data-source/process-integrity-levels/

@Engineer_Computer
Red Canary
Better know a data source: Process integrity levels | Red Canary
Impossible to spoof, process integrity levels dictate trust between securable objects, offering great visibility into privilege escalation.
248 views
Network Security Channel
مقاله ی خوب بخوانیم

امروز درمورد متریک های هانت مطلبی داشتم.

اما یک مقاله کاملتر در این زمینه در لینک زیر هست که توصیه میکنم بخونید

اگر سخت بود و نتونستید بخاطر شرایط تحریم اکانت مدیوم داشته باشید لینک مقاله رو در سایت readmedium دات کام بگذارید سپس مقاله کامل رو دریافت کنید


https://kostas-ts.medium.com/threat-hunting-metrics-the-good-the-bad-and-the-ugly-d662907379b2
Medium
Threat Hunting Metrics: The Good, The Bad and The Ugly
Threat hunting is a crucial aspect of information security, but measuring its effectiveness can be challenging. In this article, we will…
348 views
Network Security Channel
Microsoft - GDPR & Generative AI - A guide for customers.pdf
3.3 MB
از مایکروسافت بخوانیم :
GDPR & Generative AI
@Engineer_Computer
335 views
Network Security Channel
Windows+ATT&CK_Logging+Cheat+Sheet_ver_Sept_2018.pdf
1.1 MB
🔆 جدول رویداد های ویندوز در تناظر با تکنیک های جدول مایتره

⛳️ یعنی برای کشف یک تکنیک نفوذ و حمله ای که نام برده شده است چه Event ID در لاگ برای کشف وجود دارد

#cybersecurity #threathunting #cyberforensics
@Engineer_Computer
431 views
Network Security Channel
چالش کمبود امنیت هنوز باقی است

برخلاف برخی نظر ها
هنوز کمبود نیروی انسانی امنیت در دنیا چالش است

#cybersecurity

https://www.darkreading.com/cybersecurity-operations/cyber-staffing-shortages-remain-cisos-biggest-challenge

@Engineer_Computer
Darkreading
Cyber Staffing Shortages Remain CISOs' Biggest Challenge
Besides operational issues connected to a talent shortage, the cost of running security platforms — and their training costs — also keeps CISOs up at night.
359 views
Network Security Channel
#استخدام

کارشناس DLP

دریافتی خالص ۳۰ م تومان
پاداش بهره وری تا ۵ م تومان

مسلط به سکوریتی پلاس ، سنز ۵۰۴

ارسال رزومه به
detect@chmail.ir

ترجیحا مسلط به DLP و رجکس نویسی

آموزش‌های لازم داده خواهد شد

حتما درج شود کارشناس DLP

@Engineer_Computer
371 views
Network Security Channel
Ransomware Report Cyentia and CIS.pdf
1.8 MB
آخرین ترند ها و ریسک ها در باج افزارها
@Engineer_Computer
343 views
Network Security Channel
این دوره هارو به اکانت یودمیتون اضافه کنید تا برداشته نشده
موضوع :
Beyond Hacks: Ethical Hacking Practice Test

Link :
1.
https://www.udemy.com/course/beyond-hacks2024-pro-eh-tests-unofficial-module-12-to-16/?couponCode=1A574D25CA480F9C66DB

2.
https://www.udemy.com/course/beyond-hacks-2024-pro-ceh-tests-unofficial-module-7-to-12/?couponCode=E8753FE7AD7E4B80F9DC

@Engineer_Computer
467 views