网络安全笔记
@tsecrecord
7.43K subscribers
109 photos
3 videos
571 files
642 links
从零开始、持续积累、开放共享、共同成长（网络安全、AI方向）
Download Telegram
About
Blog
Apps
Platform
Join
网络安全笔记
7.43K subscribers
网络安全笔记
免费社工库限量邀请注册：https://t.me/FreeSGKbot?start=SGKACLVLUA
467 views
网络安全笔记
《Elastic Stack 实战手册》早鸟版.pdf
24.4 MB
461 views
网络安全笔记
437 views
网络安全笔记
https://t.me/YunPanPan
329 views
网络安全笔记
https://media.defcon.org/
media.defcon.org
All DEF CON video presentations, music, documentaries, pictures, villages, and Capture The Flag data that can be found.
287 views
网络安全笔记
https://t.me/Readfine
Telegram
[好读] ReadFine电子书屋
好读提供电子书一站式体验，包括评分|简介|封面，一键下载，享受读趣。在这里，因为有您的陪伴，阅读变得并不孤单。频道只负责搜索资源并不对内容负责。
交流群 @ReadfineChat

▎分类标签（只适用tg自带搜索）
科普、医学、心理、历史、近代史、世界史、政治、禁书、社科、科幻、商业、理财、管理、饮食、推理、法律、悬疑、奇幻、军事、经典、两性、哲学、小说、游历、教育、随笔、文学、文化、纪实、自我成长、耽美、宗教、回忆录
274 views
网络安全笔记
https://www.youtube.com/watch?v=lMh9E8l1-ks
YouTube
Lessons Learned Applying ATT&CK-Based SOC Assessments | SANS Security Operations Summit 2019
The ATT&CK framework has seen a rise in popularity in the security community, with more and more Security Operations Centers (SOCs) wanting to ATT&CK. To help SOCs get into the game of using ATT&CK, MITRE has developed a process to quickly gauge a SOC’s detective…
274 views
网络安全笔记
https://github.com/target/halogen
GitHub
GitHub - target/halogen: Automatically create YARA rules from malicious documents.
Automatically create YARA rules from malicious documents. - target/halogen
251 views
网络安全笔记
https://blog.talosintelligence.com/2021/10/threat-hunting-in-large-datasets-by.html
260 views
网络安全笔记
https://link.medium.com/hUGCN65xhkb
Medium
Connecting VERIS and MITRE ATT&CK®
Written by Jon Baker and Richard Struse.
286 views
网络安全笔记
https://t.me/RNetsec
Telegram
Netsec
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
282 views
网络安全笔记
34-Barak Sternberg - Extension Land: Exploits and Rootkits in Your Browser Extensions

https://www.youtube.com/watch?v=PpSftQuCEDw

35-Austin Allshouse - The Mechanics of Compromising Low Entropy RSA Keys

https://www.youtube.com/watch?v=BRsXsUEIU70

36-Rion Carter - Why does my security camera scream like a Banshee?

https://www.youtube.com/watch?v=JpL3lySZNeM

37-Kelly Kaoudis, Sick Codes - Rotten code, aging standards, & pwning IPv4 parsing

https://www.youtube.com/watch?v=_o1RPJAe4kU

38-Zhipeng Huo, Yuebin Sun, Chuanda Ding - Reveal and Exploit IPC Logic Bugs in Apple-@onhex_ir

https://www.youtube.com/watch?v=oAMZxKsZQp0

39-Tom Van Goethem, Mathy Vanhoef - Timeless Timing Attacks

https://www.youtube.com/watch?v=s5w4RG7-Y6g

40-Tianze Ding - Vulnerability Exchange: One Domain Account For More Than Exchange Server

https://www.youtube.com/watch?v=7h38rI8KT30

41-Thomas Roth - Hacking the Apple AirTags

https://www.youtube.com/watch?v=paxErRRsrTU

42-Tamas K Lengyel - Fuzzing Linux with Xen

https://www.youtube.com/watch?v=_dXC_I2ybr4

43-Slava Makkaveev - I know how to take over your Kindle with an e-book

https://www.youtube.com/watch?v=1jM_r-pe8Ss

44-Seth Kintigh - OTA remote code execution on the DEF CON 27 badge via NFMI

https://www.youtube.com/watch?v=sDCIjcUEFj0

45-Salvador Mendoza - PINATA PIN Automatic Try Attack

https://www.youtube.com/watch?v=VOIvEqjJNOY

46-Mickey Shkatov, Jesse Michael - High Stakes Updates: BIOS RCE OMG WTF BBQ

https://www.youtube.com/watch?v=qxWfkSonK7M

47-Michael Whiteley Katie Whiteley - Making the DEF CON 29 Badge-@onhex_ir

https://www.youtube.com/watch?v=H3kdq40PY3s

48-Martin Doyhenard - Response Smuggling: Pwning HTTP 1 1 Connections

https://www.youtube.com/watch?v=suxDcYViwao

49-Jiska, Alexander Heinrich - Wibbly Wobbly, Timey Wimey Whats Inside Apples U1 chip

https://www.youtube.com/watch?v=k1H7fiVlTPA

50-Ionut Cernica - Hack the hackers Leaking data over SSL TLS

https://www.youtube.com/watch?v=WNXEuFaRUkU

51-Dan Petro - You're Doing IoT RNG

https://www.youtube.com/watch?v=Zuqw0-jZh9Y

52-Agent X - A look inside security at the New York Times

https://www.youtube.com/watch?v=U2-8MNx8nsg

53-Zabrocki, Matrosov - Glitching RISC-V chips: MTVEC corruption for hardening ISA

https://www.youtube.com/watch?v=iz_Y1lOtX08

54-Claire Vacherot - Sneak into buildings with KNXnetIP

https://www.youtube.com/watch?v=QofeTV39kQE

55-Ian Vitek - Central Bank Digital Currency, Threats and Vulnerabilities

https://www.youtube.com/watch?v=-MK0bn3Ys_M

56-Dennis Giese - Robots with lasers and cameras but no security Liberating your vacuum

https://www.youtube.com/watch?v=EWqFxQpRbv8

57-Yuhao Weng, Steven Seeley, Zhiniang Peng - An Attack Surface Tour of SharePoint Server

https://www.youtube.com/watch?v=mVXrl4W1jOU

58-Guillaume Fournier, Sylvain Afchain, Sylvain Baubeau - eBPF, I thought we were friends!

https://www.youtube.com/watch?v=5zixNDolLrg

59-Eugene Lim, Glenice Tan, Tan Kee Hock - Hacking Humans with AI as a Service

https://www.youtube.com/watch?v=tWWhRbzhkrg

60-Dimitry 'Op Nomad' Snezhkov - Use of Offensive Enclaves In Adversarial Operations

https://www.youtube.com/watch?v=WWGkaGBtn2Q

61-Dimitry 'Op Nomad' Snezhkov - Racketeer Toolkit: Prototyping Controlled Ransomware Ops

https://www.youtube.com/watch?v=VJ8aqReB118

62-Vivek Nair - Time Turner Hacking RF Attendance Systems To Be in Two Places at Once

https://www.youtube.com/watch?v=NdAIeXy2zoY
YouTube
DEF CON 29 - Barak Sternberg - Extension Land: Exploits and Rootkits in Your Browser Extensions
Browser extensions are installed anywhere, they serve as an integral part of our day-to-day web routine, from AdBlockers to Auto-Translators. But - do we know what is running inside of them? Do we know what goes deep-down inside their communication routines?…
336 views
网络安全笔记
https://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection/
Microsoft News
Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection
Microsoft found a vulnerability (CVE-2021-30892) that could allow an attacker to bypass System Integrity Protection (SIP) in macOS. We shared our findings with Apple via coordinated vulnerability disclosure, and a fix was released October 26.
292 views
网络安全笔记
2021年非洲黑客恶意软件开发研讨会
https://github.com/chr0n1k/AH2021Workshop
GitHub
GitHub - chr0n1k/AH2021Workshop: Malware development for red teaming workshop
Malware development for red teaming workshop. Contribute to chr0n1k/AH2021Workshop development by creating an account on GitHub.
297 views
网络安全笔记
https://github.com/TareqAlKhatib/ATTACK_data_sources
GitHub
GitHub - TareqAlKhatib/ATTACK_data_sources
Contribute to TareqAlKhatib/ATTACK_data_sources development by creating an account on GitHub.
291 views
网络安全笔记
https://medium.com/@tareq.alkhatib/how-to-use-att-cks-application-datasource-cf4143b03eea
Medium
How To Use ATT&CK’s Application Datasource
Summary: The “Application Log” ATT&CK datasource contains widely different log types. This blog offers a breakdown of the subcategories…
294 views
网络安全笔记
https://github.com/horsicq/XMachOViewer
GitHub
GitHub - horsicq/XMachOViewer: XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS
XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS - horsicq/XMachOViewer
248 views
网络安全笔记
#蓝队工具 识别不同云内部和跨云的特权升级路径
https://github.com/carlospolop/PurplePanda
GitHub
GitHub - carlospolop/PurplePanda: Identify privilege escalation paths within and across different clouds
Identify privilege escalation paths within and across different clouds - carlospolop/PurplePanda
275 viewsZer0, 
网络安全笔记
#蓝队工具 恶意软件模拟工具
271 viewsZer0, 
网络安全笔记
https://github.com/FourCoreLabs/firedrill
GitHub
GitHub - FourCoreLabs/firedrill: firedrill is a malware simulation harness for evaluating your security controls
firedrill is a malware simulation harness for evaluating your security controls - FourCoreLabs/firedrill
306 viewsZer0, 
网络安全笔记
The DFIR Report
314 viewsZer0,