Claude Mythos: The AI That Hacked Every OS and Escaped Its Own Cage
https://medium.com/@shubhamnv2/claude-mythos-the-ai-that-hacked-every-os-and-escaped-its-own-cage-2eabae94b898
https://medium.com/@shubhamnv2/claude-mythos-the-ai-that-hacked-every-os-and-escaped-its-own-cage-2eabae94b898
🔥3👍1
Another platform that reports on info breaches. There is also a lot of information here. Even some breach forums that have been announcing a lot of data leaks recently do not have such valuable information. In addition, links to download leaks are also provided, of course, sample files.
#TH #OSINT #DataLeak #BreachForum
#TH #OSINT #DataLeak #BreachForum
🔐 MISP — Threat Intelligence sharing platformasi
MISP (Malware Information Sharing Platform) — bu kiberxavfsizlik tahdidlarini aniqlash, tahlil qilish va ulashish uchun mo‘ljallangan open-source platforma.
✅ IOC (Indicators of Compromise) ma’lumotlarini boshqarish
✅ Threat Intelligence almashish
✅ Incident Response jarayonlarini tezlashtirish
✅ SIEM va boshqa xavfsizlik tizimlari bilan integratsiya
Bugungi kunda tashkilotlar MISP orqali zararli IP, domain, hash va boshqa tahdid indikatorlarini real vaqt rejimida almashib, kiberhujumlarga tezkor javob qaytarish imkoniyatiga ega bo'ladilar.
#MISP #CyberSecurity #ThreatIntelligence #SOC #BlueTeam #InfoSec #CyberDefense
MISP (Malware Information Sharing Platform) — bu kiberxavfsizlik tahdidlarini aniqlash, tahlil qilish va ulashish uchun mo‘ljallangan open-source platforma.
✅ IOC (Indicators of Compromise) ma’lumotlarini boshqarish
✅ Threat Intelligence almashish
✅ Incident Response jarayonlarini tezlashtirish
✅ SIEM va boshqa xavfsizlik tizimlari bilan integratsiya
Bugungi kunda tashkilotlar MISP orqali zararli IP, domain, hash va boshqa tahdid indikatorlarini real vaqt rejimida almashib, kiberhujumlarga tezkor javob qaytarish imkoniyatiga ega bo'ladilar.
#MISP #CyberSecurity #ThreatIntelligence #SOC #BlueTeam #InfoSec #CyberDefense
❤2
🛡 OpenCTI — Cyber Threat Intelligence platformasi
OpenCTI (Open Cyber Threat Intelligence) — bu kiber tahdidlar haqidagi ma’lumotlarni yig‘ish, tahlil qilish va vizual boshqarish uchun yaratilgan open-source platforma.
🔎 Threat actor’larni kuzatish
📊 Attack pattern va campaign’larni tahlil qilish
🔗 IOC va TTP’larni bog‘lash
🤝 MISP, MITRE ATT&CK va boshqa tizimlar bilan integratsiya
OpenCTI analitiklarga tahdidlar o‘rtasidagi bog‘liqlikni ko‘rish va murakkab hujumlarni chuqur tahlil qilish imkonini beradi.
Cyber Threat Intelligence’ni markazlashgan holda boshqarish — zamonaviy SOC va Blue Team’ning muhim qismi desa ham bo'ladi. 🚀
#OpenCTI #CyberSecurity #ThreatIntelligence #MITREATTACK #SOC #BlueTeam #InfoSec #CyberDefense
OpenCTI (Open Cyber Threat Intelligence) — bu kiber tahdidlar haqidagi ma’lumotlarni yig‘ish, tahlil qilish va vizual boshqarish uchun yaratilgan open-source platforma.
🔎 Threat actor’larni kuzatish
📊 Attack pattern va campaign’larni tahlil qilish
🔗 IOC va TTP’larni bog‘lash
🤝 MISP, MITRE ATT&CK va boshqa tizimlar bilan integratsiya
OpenCTI analitiklarga tahdidlar o‘rtasidagi bog‘liqlikni ko‘rish va murakkab hujumlarni chuqur tahlil qilish imkonini beradi.
Cyber Threat Intelligence’ni markazlashgan holda boshqarish — zamonaviy SOC va Blue Team’ning muhim qismi desa ham bo'ladi. 🚀
#OpenCTI #CyberSecurity #ThreatIntelligence #MITREATTACK #SOC #BlueTeam #InfoSec #CyberDefense
👍4🔥2👎1
🌐 OTX AlienVault — Open Threat Exchange platformasi
OTX (Open Threat Exchange) by AlienVault — bu dunyo bo‘ylab kiber tahdidlar haqidagi ma’lumotlarni almashish uchun yaratilgan eng yirik open threat intelligence platformalaridan biri.
⚡️ Real-time IOC ma’lumotlari
🦠 Malware va phishing indikatorlari
🔍 Threat hunting uchun foydali feed’lar
🤝 Global cybersecurity community bilan hamkorlik
OTX orqali xavfsizlik mutaxassislari zararli IP, domain, hash va boshqa indikatorlarni kuzatib borishi hamda yangi tahdidlarga tezkor javob qaytarishi mumkin.
Threat Intelligence — bu faqat ma’lumot emas, balki himoya strategiyasidir. 🛡
#OTX #AlienVault #ThreatIntelligence #CyberSecurity #ThreatHunting #SOC #BlueTeam #InfoSec
OTX (Open Threat Exchange) by AlienVault — bu dunyo bo‘ylab kiber tahdidlar haqidagi ma’lumotlarni almashish uchun yaratilgan eng yirik open threat intelligence platformalaridan biri.
⚡️ Real-time IOC ma’lumotlari
🦠 Malware va phishing indikatorlari
🔍 Threat hunting uchun foydali feed’lar
🤝 Global cybersecurity community bilan hamkorlik
OTX orqali xavfsizlik mutaxassislari zararli IP, domain, hash va boshqa indikatorlarni kuzatib borishi hamda yangi tahdidlarga tezkor javob qaytarishi mumkin.
Threat Intelligence — bu faqat ma’lumot emas, balki himoya strategiyasidir. 🛡
#OTX #AlienVault #ThreatIntelligence #CyberSecurity #ThreatHunting #SOC #BlueTeam #InfoSec
❤1👎1
Forwarded from JavaSec
Bugun Active Directory'ning eng eski, eng kuchli, lekin hali ham real muhitlarda uchraydigan zaifligi haqida gaplashamiz... 😱
Domain Admin'ni 10 daqiqada, hech qanday parol crack qilmasdan, hech qanday CVE ishlatmasdan olish mumkinligini bilasizmi?
Faqat bitta noto'g'ri belgilangan checkbox kifoya.
Unconstrained Delegation o'zi nima?🤔
Kerberos'da delegation — bir service boshqa user nomidan boshqa service'ga ulanishi uchun ruxsat. Misol: IIS server foydalanuvchi nomidan MSSQL'ga so'rov yuboradi.
Lekin Unconstrained — bu eng erkin shakli. Domain admin shunday sozlagan:
Mantiq oddiy ko'rinadi. Lekin asl xavf shu yerda.
Lekin tabiiy savol tug'iladi — Domain Admin nega oddiy serverga ulansin?🌚
Kutib o'tirmaymiz. SpoolSample degan tool bor — Microsoft'ning Print Spooler service'idagi MS-RPRN protocol'ini abuse qiladi. Bitta komanda:
Bu DC'ga so'rov yuboradi: "Mening serverim'ga ulanib printer holatini tekshirib bersang-chi". DC bu so'rovni bajaradi — SRV01'ga authenticate bo'ladi. Va Unconstrained yoqilgani uchun — o'zining
Rubeus'ni
Domain Controller'ning computer account TGT'si qo'limizda.
Mimikatz'ga ticket'ni import qilamiz:
Natija —
Domain compromised. krbtgt qo'limizda. Forest tugadi. 🏳️
Eng katta xato — "biz Kerberos ishlatyapmiz, hammasi xavfsiz" deb o'ylash.
Chunki Kerberos'ning o'zi xavfsiz emas — uning sozlamasi xavfsiz qiladi. Bitta
Telegram📱 Linkedin 📱
Domain Admin'ni 10 daqiqada, hech qanday parol crack qilmasdan, hech qanday CVE ishlatmasdan olish mumkinligini bilasizmi?
Faqat bitta noto'g'ri belgilangan checkbox kifoya.
Tasavvur qiling. Internal pentest'dasiz. Klassik vektorlar yopiq — Kerberoasting natijasiz, NTLM relay'da SMB signing yoqilgan, ASREP-roasting bo'sh. Bir necha soat urinib ko'rasiz. Keyin enumeration paytida bittagina komanda ishlatasiz:
Get-NetComputer -Unconstrained
Va bitta server chiqadi. Shu lahzadan boshlab — hammasi tugadi.
Unconstrained Delegation o'zi nima?
Kerberos'da delegation — bir service boshqa user nomidan boshqa service'ga ulanishi uchun ruxsat. Misol: IIS server foydalanuvchi nomidan MSSQL'ga so'rov yuboradi.
Lekin Unconstrained — bu eng erkin shakli. Domain admin shunday sozlagan:
"Bu serverga to'liq ishonaman. U istalgan service nomidan istalgan joyga kira oladi."
Mantiq oddiy ko'rinadi. Lekin asl xavf shu yerda.
Foydalanuvchi shu serverga authenticate bo'lganda — KDC uning TGT'sini ham server'ga birga yuboradi. Server bu TGT'ni LSASS xotirasida saqlaydi. Foydalanuvchi keyin "logout" qilsa ham — TGT cache'da qoladi.
Server compromise bo'lsa — o'sha userning butun identity'si siznikida.
Lekin tabiiy savol tug'iladi — Domain Admin nega oddiy serverga ulansin?
Kutib o'tirmaymiz. SpoolSample degan tool bor — Microsoft'ning Print Spooler service'idagi MS-RPRN protocol'ini abuse qiladi. Bitta komanda:
SpoolSample.exe dc01 srv01Bu DC'ga so'rov yuboradi: "Mening serverim'ga ulanib printer holatini tekshirib bersang-chi". DC bu so'rovni bajaradi — SRV01'ga authenticate bo'ladi. Va Unconstrained yoqilgani uchun — o'zining
DC01$ TGT'sini birga yuboradi. ⚡️Print Spooler default holatda yoqilgan. Domain Controllers'da ham yoqilgan. 2024-yilning oxiriga kelib ham — hali yoqilgan muhitlar bor.
Rubeus'ni
monitor /interval:5 mode'da ishga tushiramiz. SpoolSample otamiz. Bir necha sekunddan keyin terminalda:[*] Found new TGT: DC01$@CHILD.JAVASEC.LOCALDomain Controller'ning computer account TGT'si qo'limizda.
Bu yerda yangi savol: Computer account'da local admin huquqi yo'q-ku? To'g'ri. Lekin DC computer account'da boshqa narsa bor —
DCSync
huquqi.
Mimikatz'ga ticket'ni import qilamiz:
kerberos::ptt dc01.kirbi
lsadump::dcsync /domain:child.javasec.local /user:Administrator
Natija —
Hash NTLM: e7d6a507...Domain compromised. krbtgt qo'limizda. Forest tugadi. 🏳️
Eng katta xato — "biz Kerberos ishlatyapmiz, hammasi xavfsiz" deb o'ylash.
Chunki Kerberos'ning o'zi xavfsiz emas — uning sozlamasi xavfsiz qiladi. Bitta
Trust this computer for delegation to any service checkbox'i — va butun forest tugaydi.Telegram
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1
28M Telegram userlari menimcha olishga arziydi albatta OSINT va Threat Intellegence bilan shug'ullanadiganlar uchun bu ajyoib topilma bo'ladi. Holbuki barcha bu yo'nalish bilan shug'ullanadiganlarning o'zlari yig'adigan databasa lari bo'ladi va bu yondashuv ish jarayonida juda ham qo'l keladi.
#OSINT #TH #BreachForum #DataLeak
#OSINT #TH #BreachForum #DataLeak
🌚2
SecList for CyberStudents
28M Telegram userlari menimcha olishga arziydi albatta OSINT va Threat Intellegence bilan shug'ullanadiganlar uchun bu ajyoib topilma bo'ladi. Holbuki barcha bu yo'nalish bilan shug'ullanadiganlarning o'zlari yig'adigan databasa lari bo'ladi va bu yondashuv…
Hali o'zim analiz qilmadim. Lekin analiz qilganlarning aytishlaricha 3k dan ortiq uz ga taaluqli telefon raqamlar bor ekan 👀
😐9😁1
🚨 Critical Uber API Vulnerability | UUIDs Are NOT Security ($2,000 Bounty)
Real-world BOLA vulnerability affecting Uber APIs. In this video I explain how missing object-level authorization allowed access to sensitive restaurant analytics using UUID manipulation + Burp Suite.
🎥 https://youtu.be/LLagPYt-cjc
#cybersecurity #bugbounty #api #owasp
Real-world BOLA vulnerability affecting Uber APIs. In this video I explain how missing object-level authorization allowed access to sensitive restaurant analytics using UUID manipulation + Burp Suite.
🎥 https://youtu.be/LLagPYt-cjc
#cybersecurity #bugbounty #api #owasp
YouTube
Critical Uber API Vulnerability | UUIDs Are NOT Security ($2,000 Bounty) | BOLA Vulnerability PoC
🚨 Critical Uber API Vulnerability — UUIDs Are NOT Security ($2,000 Bounty)
In this video, we perform a deep technical analysis of a real-world Uber API vulnerability involving BOLA (Broken Object Level Authorization) — one of the most critical and common…
In this video, we perform a deep technical analysis of a real-world Uber API vulnerability involving BOLA (Broken Object Level Authorization) — one of the most critical and common…
https://t.me/yetimdasturchi/3654 aytganlariday oxiri vazelin bilan tugaydi bu ketishda))
🤣21🗿12💩4😁3🔥2❤1
Source: https://github.com/twintproject/
Twint or use Snscrape For Free
Platforms Supported by snscrape:
Twitter (X)
TikTok
YouTube
Reddit
GitHub
Facebook Pages (limited)
Wikipedia
Instagram (partial support)
Others (if applicable)
#OSINT #Twint #TI #X #CyberSecurity #Snscrape
Twint or use Snscrape For Free
Platforms Supported by snscrape:
Twitter (X)
TikTok
YouTube
GitHub
Facebook Pages (limited)
Wikipedia
Instagram (partial support)
Others (if applicable)
#OSINT #Twint #TI #X #CyberSecurity #Snscrape
❤1🤔1
Qilayotgan ishlaringiz umuman yaxshi emas aslida....
Undan ko'ra haqiqiy proof bo'lishga harakat qilinglar! BF da buni elon qilish sizlarga hech nima bermaydi... Subdomainlarga qarasak men ham hech qachon bularga etibor bermagan ekanim oldinlari. Ko'zdan chetda qolgan subdomainlardan SQLi chiqish ehtimoli juda yuqori bo'ladi. To'g'ri BlackHat tajriba orttirish uchun yaxshidir ammo buni jar solish yaxshi emas, shunchalik info ga qiziqsang o'zing uchun olib qoy bo'ldi.... Aytgancha bu qonunga xilof hisoblanadi,,,,
#BF #DataLeak #SomeSubdomains
Undan ko'ra haqiqiy proof bo'lishga harakat qilinglar! BF da buni elon qilish sizlarga hech nima bermaydi... Subdomainlarga qarasak men ham hech qachon bularga etibor bermagan ekanim oldinlari. Ko'zdan chetda qolgan subdomainlardan SQLi chiqish ehtimoli juda yuqori bo'ladi. To'g'ri BlackHat tajriba orttirish uchun yaxshidir ammo buni jar solish yaxshi emas, shunchalik info ga qiziqsang o'zing uchun olib qoy bo'ldi.... Aytgancha bu qonunga xilof hisoblanadi,,,,
#BF #DataLeak #SomeSubdomains
🔥12🌭5🤣4💯2👍1😁1🍾1😎1👾1