CVE-2022-27666: Linux LPE ("this vulnerability affects the latest Ubuntu, Fedora, and Debian")

https://github.com/plummm/CVE-2022-27666

#git #exploit #pentest

Spring4Shell Proof Of Concept:

https://github.com/BobTheShoplifter/Spring4Shell-POC

#git #exploit #pentest

Mass dorks
https://github.com/Alice666x/MassDork_SQLinjector

​😵‍💫 Phishing. Browser within a browser.

No, today we will not talk about a well-known meme, today we will talk about a new method of phishing attacks.

🖖🏻 Hello user_name.

• Back in 2020, Ragnar Locker (ransomware) was installed on the victim's PC using a virtual machine. Those. the locker dragged a full-fledged virtual machine to the attacked host, in which it was launched, then it got access to the host file system and encrypted the data. Perfect bypass of anti-virus protection, isn't it? By the way, Ragnar Locker was aimed at business. An example is the attack on the electricity supplier Energias de Portugal. Presumably, 10 terabytes of data were stolen from them, and the attackers demanded 1,580 bitcoins for decryption.

• But today we will talk about something else, although the direction and idea of ​​such attacks will be similar to the style described above. The essence of this method is to simulate a browser window in a browser, for example, to phish authentication data.

• Suppose that the victim goes to a certain resource, wants to log in using a Google/Microsoft/Apple account, clicks on the appropriate button, then a window with a login form appears, the victim looks at the address bar and checks the legitimacy of the resource, enters data and they are successfully sent to the attacker ...

• Thanks to the magic of HTML, CSS and JavaScript, it is almost impossible to distinguish between a real and a phishing window (example), including the URL: https://mrd0x.com/browser-in-the-browser-phishing-attack/

• If you are interested in this method, then you can download various login forms (for different services) on GitHub, the repo includes various templates for Windows and Mac, and has several design options (dark and light mode). Will be useful for social engineers and Red Team: https://github.com/mrd0x/BITB

Your S.E. #SI #Phishing‌‌


Such posts are only posted in our github channel

​🔐 We encrypt the correspondence. openkeychain.

“Without encryption, we will lose all privacy. This is our new battlefield."
- Edward Snowden

🖖🏻 Hello user_name.

• Protecting your data from prying eyes - in some cases it can be a matter of life and death, and relying on others in this matter means trusting them with your data. The useful OpenKeychain application for your #Android device will help protect your correspondence from prying eyes on your own.

• #OpenKeychain is open source, security tested by Cure53, seamlessly integrates with K-9 Mail, Conversations Jabber, and can even transfer encrypted files to the EDS (Encrypted Data Store) application. All you need is to generate a key and send it to whoever you want to exchange messages with.

• How to install and configure Conversations/OpenKeychain can be found here: https://t.me/tvoijazz/391

• Homepage: http://www.openkeychain.org
• GitHub: https://github.com/open-keychain/open-keychain
• F-Droid: https://f-droid.org/en/packages/org.sufficientlysecure.keychain/
• 4PDA: https://4pda.to/forum/index.php?showtopic=772103

Your S.E.‌‌

​🔖 A selection of useful information and resources.

💬 Hello user_name.

📌 Today I have collected enough useful information for you to study in various fields. Hope you find what you've been looking for. Add to favorites so as not to lose.

➖ More than 100K resources on various topics. Starting from books on programming, ending with various blogs of software developers.
https://github.com/sindresorhus/awesome

https://tw

itter.com/awesome__re

➖ A huge n

umber of resources on the topic of searching and collecting information from open sources.
https://github.com/jivoi/awesome-osint

➖ Information security, forensics, cryptography, CTF, etc.
https://github.com/carpedm20/awesome-hacking

➖ List of Honeypots (Traps for hackers). Manuals, tools, instructions, etc.
https://github.com/paralax/awesome-honeypots

➖ List of tools and resources for malware analysis.
https://github.com/rshipp/awesome-malware-analysis

➖ List of frameworks, libraries, software and resources related to Python.
https://github.com/vinta/a

wesome-python

➖ List of various PHP libr

aries, resources and cheat sheets.
https://github.com/zia

doz/awesome-php

➖ List of CTFs, librar

ies, resources, software and tutorials.
https://github.com/apsdehal/awesome-ctf

➖ A collection of resources related to Android security + software and various guides.
https://github.com/ashishb/android-security-awesome

https://githu

b.com/JStumpp/awesome-android

➖ Web applica

tion security. XSS, CSV and SQL Injection, ClickJacking and hundreds more.
https://github.com/qazbnm456/awesome-web-security

➖ List of the best applications and tools for Windows.
https://github.com/Awesome-Windows/Awesome

➖ List of applications and tools for Linux.
https://github.com/aleksandar-todorovic/awesome-linux

➖ A collection of Raspberry Pi tools, projects and resources.
https://github.com/

thibmaek/awesome-raspberry-pi

➖ A collection of p

entest resources, from tools to books.
https://github.com/enaqx/awesome-pentest

P.S. This list does not claim to be complete, if you have something to add to this list, write to the feedback bot in the channel description. Well, I remind you that you can find other useful information by hashtags in our group #Selection #Linux #Anonymity #Book #Course #Pentest #CTF #Raspberry #Android #Forensics

Share with your friends and stay with us.

Such posts are only posted on our github channel

T.me/githubx

​🔖 A selection of useful information and resources. Part 2.

🖖🏻 Hello user_name.

💬 The previous post collected a lot of reposts and views, thanks to your feedback and activity, we will supplement this list so that our other subscribers can find the necessary information in various areas in the field of information security.

• A list of hacking training resources where you can legally and safely practice your cybersecurity skills. The list includes a lot of resources, from remote banking systems that contain common vulnerabilities to a collection of web applications that are vulnerable to command injection.

https://github.com/joe-shenouda/awesome-cyber-skil

ls

  • A list of tips for protecting your digital sec

urity and privacy, with links to additional resources.

https://github.com/Lissy93/personal-security-checklist

• Lis

t of tools for network traffic research: Traffic Capture

, Traffic Analysis / Inspection, DNS Utilities, File Extraction and more...

https://github.com/caesar0301/awesome-pcaptools

• Web hacking. The list i

s intended for anyone who wants to learn about we

b application security, but does not have enough experience and knowledge in this area.

https://github.com/infoslack/awesome-web-hacking

• A hug

e list of software, libraries, documents, books, r

esources and interesting things about security.

https://github.com/sbilly/awesome-security

• C

ollection of resources, tools and other usef

ul materials for Cybersecurity Blue Team.

https://github.com/fabacab/awesome-cybersecurity-blue

team

  • Our list of literature, courses, articles and use

ful materials that are published in the second channel, there is a convenient menu for convenience and finding the right material on a specific topic.

https://github.com/SE-adm/Book

• Com

pleting the selection is a list 

of must-see films for anyone interested in the subject of information security. Personally, I recommend that you get acquainted with documentaries.

https://github.com/k4m4/movies-for-hackers

‼️

 The list does not claim to be complete, onc

e a month we will supplement this collection with new material. Share with friends and save to your favorites so you don't lose. You can find other useful information by hashtags in our group #Compilation #Linux #Anonymity #Book #Course #Pentest #CTF #Raspberry #Android #Forensic‌‌

Tomorrow i will add on list 3.

This is only exclusive to our new channel t.me/githubx

📖 CompTIA Network+ Practice Tests: Exam N10-008, 2nd Edition.

• Дата выхода: 26 Октября 2021 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)
• Цена в онлайн магазине: 35$

• VT.

• In the freshly revised Second Edition of CompTIA Network+ Practice Tests Exam N10-008, IT expert and author Craig Zacker delivers a set of accessible and useful practice tests for the updated Network+ Exam N10-008. You’ll prepare for the exam, learn the information you need in an industry interview, and get ready to excel in your first networking role.

• These practice tests will gauge your skills in deploying wired and wireless devices; understanding network documentation and the purpose of network services; work with datacenter, cloud, and virtual networking concepts; monitor network activity; and more.

🧩 Софт для чтения.

#CompTIA #Network #Eng

2022_Vulnerability.pdf

​🔖 A selection of useful information and resources. Part 3

🖖🏻 Hello user_name.

💬 We continue to publish unique collections on various topics. Thanks to this information, you can improve your skill and get the necessary information - for free. Save to your favorites and check out the previous collections if for some reason you missed them:

• Starting our list with Awesome Shodan Search Queries - The list contains ready-made queries for searching control systems, webcams, printers , IoT devices, and much more...

https://github.com/jakejarvis/awesome-shodan-queries

• Wi-Fi Arsenal - Everything that affects the subject of Wi-Fi. A lot of useful software for all occasions. General information, tools for auditing Wi-Fi networks, monitoring, collecting information and dozens of other sections:

https://github.com/techge/wifi-arsenal

https://github.com/edelahozuah/awesome-wifi-security/

• List of information for hacking IoT devices. The list contains a collection of articles that deal with hacking various devices, from smart light bulbs to smart door locks:

https://github.com/nebgnahz/awesome-iot-hacks

• Forensics. Free open source tools and resources. Includes useful tools, books, articles and various resources:

https://github.com/Cugu/awesome-forensics

• Repository with a list of useful resources for the system administrator:

https://github.com/kahun/awesome-sysadmin

• Additional information on Cobalt Strike. And also, do not forget about our selection related to this framework.

https://github.com/zer0yu/Awesome-CobaltStrike

‼️ The list does not claim to be complete, as we find useful material, we will supplement this collection. Share with friends and save to your favorites so you don't lose. You can find other useful information by hashtags in our group #Selection #Linux #Anonymity #Book #Course #Pentest #CTF #Raspberry #Android #Forensic. Your S.E.‌‌

Such information is only published in our github channel.
t.me/githubx

​🔖 A selection of useful information and resources. Part 5

🖖🏻 Hello user_name.

💬 , thanks to this information you can upgrade your skill in the category you need and get unique knowledge - for free.

📌

• Starting with a collection of resources related to vehicle safety audits. The repository contains various tools, articles, books, videos, websites, equipment blogs and podcasts.

https://github.com/jaredthecoder/awesome-vehicle-security

• Huge list of PHP libraries and useful resources to learn.

https://github.com/ziadoz/awesome-php#security

• List of books, resources, tools, practice sites for reverse engineering.

https://github.com/tylerha97/awesome-reversing

• List of information security conferences from 2012 to 2022

https://github.com/PaulSec/awesome-sec-talks

• This repository lists static analysis tools for all programming languages, build tools, configuration files, and more.

https://github.com/analysis-tools-dev/static-analysis

• A collection of resources and useful material on the subject of cryptography.

https://github.com/sobolevn/awesome-cryptography

• A lot of useful material on the security of the Linux kernel.

https://github.com/xairy/linux-kernel-exploitation


‼️ The list does not claim to be complete, once a month we will supplement this collection with new material. Share with friends and save to your favorites so you don't lose. You can find other useful information by hashtags in our group #Selection #Linux #Anonymity #Book #Course #Pentest. Your S.E.‌‌

Such information is only published in our new github channel
t.me/githubx

📖 Cybersecurity: A Practical Engineering Approach.

• Дата выхода: 22 Апреля 2022 года.
Nobi• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• Cybersecurity: A Practical Engineering Approach introduces the implementation of a secure cyber architecture, beginning with the identification of security risks. It then builds solutions to mitigate risks by considering the technological justification of the solutions as well as their efficiency. The process follows an engineering process model. Each module builds on a subset of the risks, discussing the knowledge necessary to approach a solution, followed by the security control architecture design and the implementation. The modular approach allows students to focus on more manageable problems, making the learning process simpler and more attractive.

🧩 Софт для чтения.

#Cybersecurity #Eng

An extremely handy application that allows you to control an #Android device that is connected to a PC via USB.



https://github.com/Genymobile/scrcpy

Direct download for windows....

https://github.com/Genymobile/scrcpy/releases/download/v1.23/scrcpy-win64-v1.23.zip

📖 Cybersecurity: A Practical Engineering Approach.

• Дата выхода: 22 Апреля 2022 года.
Nobi• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• Cybersecurity: A Practical Engineering Approach introduces the implementation of a secure cyber architecture, beginning with the identification of security risks. It then builds solutions to mitigate risks by considering the technological justification of the solutions as well as their efficiency. The process follows an engineering process model. Each module builds on a subset of the risks, discussing the knowledge necessary to approach a solution, followed by the security control architecture design and the implementation. The modular approach allows students to focus on more manageable problems, making the learning process simpler and more attractive.

🧩 Софт для чтения.

#Cybersecurity #Eng

Photo

Cybersecurity A Practical Engineering Approach.pdf

Photo

The.Military.Balance.2022.epub