CVE-2026-25769 - RCE Wazuh Cluster
*
Exploit

RelayKing-Depth



NTLM релей сканер. Сканирует по SMB, LDAP/S, MSSQL, HTTP/S, RPC, WinRM. Находит WebDAV WebClient, CVE-2025-33073 (NTLM reflection), NTLMv1 + PrinterBug / PetitPotam и т.п.

https://www.depthsecurity.com/blog/introducing-relayking-relay-to-royalty/

🇺🇿 O‘zbekistonda ilk Bug Bounty platformasi — Oq Doppi
Prezidentimiz tomonidan belgilangan 2030-yilgacha kiberxavfsizlikni rivojlantirish strategiyasiga muvofiq, mamlakatimizda axborot tizimlari xavfsizligini ta’minlash va zaifliklarni oldindan aniqlash muhim vazifalardan biridir.
Shu yo‘nalishda TuranSecurity tomonidan O‘zbekistonda birinchi Bug Bounty platformasi — Oq Doppi ishga tushirildi.

🔎 Bug Bounty nima?
Bu kompaniyalarga o‘z tizimlaridagi xavfsizlik zaifliklarini mustaqil va professional ethical (white hat) mutaxassislar yordamida aniqlash imkonini beradigan zamonaviy yondashuvdir. Natijada muammolar erta bosqichda aniqlanadi va xavflar oldi olinadi.

🎩 Nega “Oq Doppi”?
“White hat hacker” — tizimlarni himoya qilish uchun ishlaydigan mutaxassislarni anglatadi.
“Oq Doppi” esa ushbu tushunchaning milliy talqini bo‘lib, ishonch, himoya va mas’uliyat ramzidir.

🤝 Siz uchun qanday foyda beradi?
• Tizimlaringizdagi zaifliklarni real mutaxassislar aniqlaydi
• Xavfsizlik darajasi sezilarli darajada oshadi
• Muammolarni oldindan bartaraf etish imkoniyati
• Qonuniy va nazorat ostidagi test muhiti

🚀 Platforma bugundan ishga tushdi
Birinchi scope doirasida 2 ta dastur ochildi:
• TuranSec — *.turansec.uz
• Oq Doppi — platformaning o‘zi
🛡 Agar siz kompaniya bo‘lsangiz — tizimlaringizni himoya qiling
🛡 Agar siz mutaxassis bo‘lsangiz — o‘z bilimingizni amalda sinab ko‘ring

Oq Doppi — ishonchli va zamonaviy kiberxavfsizlik yechimi.

Havola: https://oqdoppi.uz

#OqDoppi #CyberSecurity #BugBounty #Uzbekistan #TuranSecurity

👩‍💻 Docker Security.

• На сайте hacktricks есть очень объемная Wiki по безопасной настройке Docker. Крайне много информации по Socket, Capabilities, Escape from Containers и т.д. Рекомендую к изучению:

• Basic Docker Engine Security:
➡️Secure Access to Docker Engine;
➡️Security of Container Images;
➡️Image Scanning;
➡️Docker Image Signing.
• Containers Security Features:
➡️Namespaces;
➡️cgroups;
➡️Capabilities;
➡️Seccomp in Docker;
➡️AppArmor in Docker.

#Docker #Security

TheHive For SOC
Test Case

#SOC #TheHive #BlueTeam #Test

KslKatz

Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest cleartext passwords (if enabled) from LSASS using a Microsoft-signed driver.

))

From Russia Guys )

The OSINT Tools Library is new project from Osint Newsletter and Jake Creps

And this isn’t just a simple collection of tools. Each instrument’s page contains the following sections: what does it do, how to use, cost, data processing, use in reporting.

https://tools.osintnewsletter.com/osint-tools/google-lens

WindVector

Detailed info on winds and air currents. It features an online map, a 3D model of atmospheric layers, and the ability to view historical data for past dates. It is useful for investigating natural disasters and aviation accidents.

https://windvector.app/

#geoint

#BLueTeam #SOC #OpenSource

Vulnerability Management section completed !

#SOC #BlueTeam