Roadmap for Cybersecurity 👾

@geekcode 😈

⌨️ Google CTF: Skills Repository

Job sets along with Google CTF solutions between 2017 and 2023.

⏺ Link to CTF

#CTF #geeks

@geekcode 😈

How to get started with Cyber Security

⏰ Wednesday, 04 Oct 2023 4:00PM IST (04 Oct 2023 10:30 UTC)


https://www.sans.org/webcasts/how-get-started-cyber-security/

#event

@geekcode 😈

AWS PENTESTING

https://github.com/redskycyber/Cloud-Security/blob/main/AWS-Security-Pentesting-Resources.md

Join us : @geekcode 😈

🤓WhatWeb - WhatWeb's next generation web scanner identifies websites.
Its purpose is to answer the question: “What kind of website is this?”

WhatWeb recognizes web technologies including content management systems (CMS), blogging platforms, statistical/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1,800 plugins, each of which recognizes something different .

WhatWeb also identifies version numbers, email addresses, account IDs, web platform modules, SQL errors, and more.

🔗GitHub

@geekcode

😈 Hacker IntelBroker claims to have stolen Apple source codes

IntelBroker on BreachForums claimed to have stolen the source code for several internal tools from Apple.

🔍 According to the report, “Apple.com suffered a data breach in June 2024,” which led to the disclosure of information. IntelBroker claims that as a result it has obtained the source code for the following internal company tools: AppleConnect-SSO, Apple-HWE-Confluence-Advanced and AppleMacroPlugin.

Little is known about Apple-HWE-Confluence-Advanced and AppleMacroPlugin. But AppleConnect-SSO is an authentication system that allows you to access certain applications on the Apple network. This system is known to be integrated with the Directory Services database to provide secure access to internal resources.

@cyberagents

Monitor file system changes using fsmon
▪️supports Linux, iOS, OS X, Android
▪️identify when are binaries loaded (root)
▪️get dropped payloads (root)
▪️identify when are which files opened at app's runtime (db, txt, log, temp...) (non-root)

https://www.mobile-hacker.com/2024/06/24/monitoring-android-file-system-with-fsmon/

@geekcode

😈 50 Methods For Lsass Dump.

Without going too deep into theory, Local Security Authority Subsystem Service (also known as LSASS) is a process (executable file C:\Windows\System32\lsass.exe) responsible for managing various authentication subsystems of the #Windows OS. Among his tasks: checking the “creds” of local and domain accounts during various scenarios of requesting access to the system, generating security tokens for active user sessions, working with Security Support Providers (SSP), etc.

This article introduces 50 methods for extracting authentication data from LSASS memory:

https://redteamrecipe.com/50-methods-for-lsass-dumprtc0002

#Pentest #AD

@geekcode 🕵️‍♂️

CrowdStrike's recent update has led to major disruptions for businesses worldwide, causing Windows workstations to crash.

This incident affects businesses across various sectors, from airlines to hospitals.

Read : https://thehackernews.com/2024/07/faulty-crowdstrike-update-crashes.html

@cyberagents