Cybersecurity and Digital Forensics

Pentration Testing, Beginners To Expert! •  Phase 1 – History; •  Phase 2 – Web and Server Technology; •  Phase 3 – Setting up the lab with BurpSuite and bWAPP; •  Phase 4 – Mapping the application and attack surface; •  Phase 5 – Understanding and exploiting OWASP top 10 vulnerabilities; •  Phase 6 – Session management testing; •  Phase 7 – Bypassing client-side controls; •  Phase 8 – Attacking authentication/login; •  Phase 9 - Attacking access controls (IDOR, Priv esc, hidden files and directories); •  Phase 10 – Attacking Input validations (All injections, XSS and mics); •  Phase 11 – Generating and testing error codes; •  Phase 12 – Weak cryptography testing; •  Phase 13 – Business logic vulnerability. https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

🖥 X-OSINT This is an OSINT tool designed to gather useful, credible, and valid information about phone numbers, email addresses, IP addresses, and more features to come in future updates. Features of this tool include: 1. Host Lookup: Identifies and retrieves information about a host (server) on the network. 2. Port Scan: Detects open ports on a host and the services associated with them. 3. Subdomain Enumeration: Finds all subdomains associated with a main domain. 4. CVE Exploit Search: Looks up known vulnerabilities (CVEs) that can potentially be exploited. 5. DNS Query: Searches the Domain Name System (DNS) to retrieve information about a domain or IP address. In Summary: X-OSINT is a powerful tool for collecting information from public sources, useful for research, cybersecurity, and other fields. https://github.com/TermuxHackz/X-osint ●▬۩❁ @DigitalForensicAndCyberSecurity❁۩▬● #OSINT #IP #Mail #DNS #CVE

🚨 New Malware Tactics Bypass Traditional Defenses If your SOC can’t afford to miss a single threat, this session is for you.  📍Cases & Detection Tips for SOCs In real time, ANY.RUN experts will: — Share insights into strengthening SOC expertise  — Demonstrate and break down examples of evasion techniques — Offer detection strategies for ClickFix, phishing kits, and Living-Off-the-Land (LotL) attacks 👥 Who should attend?  ↳ SOC analysts (all tiers), security managers, and CISOs ready to level up resilience. 📅 When? ↳ September 17 | 03:00 PM GMT Join a FREE webinar on how to have an upper hand → click here to register. -----

macOS Red Teaming. •  Gathering System Information Using IOPlatformExpertDevice; •  Targeting Browser and Diagnostic Logs; •  Manipulating the TCC Database Using PackageKit; •  Leveraging Application Bundles and User-Specific Data; •  Taking Over Electron App TCC Permissions with electroniz3r; •  Exploiting Keychain Access; •  Signing Your Payload; •  Exploiting Installer Packages; •  Exploiting DMG Files for Distribution; •  Leveraging HealthInspector Utility; •  Generating Shared Secrets and Accessing Computer$ Password; •  Over-Pass-The-Hash; •  Kerberoasting; •  User Level Persistence with Launch Agents; •  User Level Persistence with Login Items; •  Folder Action Scripts; •  Dylib Insertion/Hijack; •  Evasion Techniques with XPC on macOS; •  Process Injection on macOS; •  In-Memory Loading on macOS.

CVE-2024-22116: RCE in Zabbix, 9.9 rating 🔥 Lack of escaping for script parameters allows an attacker to execute arbitrary code. Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2 Vendor's advisory: https://support.zabbix.com/browse/ZBX-25016 #zabbix

https://www.researchgate.net/profile/Subodh-Tiwari-4/stats/report/weekly/2025-04-20

🔍 Linux Persistence Detection Engineering – Part 1 The first part of the Linux Persistence Detection Engineering series explores fundamental persistence techniques used by attackers to maintain unauthorized access to Linux systems. Understanding these mechanisms is crucial for developing effective detection and threat-hunting strategies. 🛠️ Key Persistence Techniques: 1️⃣ Cron Job & Systemd Service Abuse – Attackers create malicious cron jobs or systemd services to execute payloads persistently. 2️⃣ Shell Profile Manipulation – Modifying .bashrc, .bash_profile, or .zshrc ensures commands run every time a user logs in. 3️⃣ SSH Backdoors – Attackers modify SSH configurations or implant rogue keys in ~/.ssh/authorized_keys for persistent remote access. Each section covers: ✅ Theoretical background ✅ Practical implementation ✅ Detection methods using SIEM & Endpoint rules ✅ Threat hunting with ES|QL & OSQuery 📖 Read more: Elastic Security Labs – Part 1 #LinuxSecurity #ThreatDetection #ElasticSecurity #CyberThreats

🔥 Malware Datasets for Research & Analysis 🔥 📌 If you're looking for malware datasets for digital forensics, cybersecurity research, and machine learning, check out these resources: 1️⃣ BODMAS: Blue Hexagon Open Dataset 🔗 BODMAS Dataset 2️⃣ Malware Detection Dataset (Kaggle) 🔗 Malware Detection | Kaggle 3️⃣ Malware Memory Analysis Dataset (CIC) 🔗 Malware Memory Analysis Dataset 4️⃣ DikeDataset: Labeled Malicious & Benign Files 🔗 DikeDataset on GitHub 5️⃣ Virus-MNIST: Malware Image Dataset 🔗 Virus-MNIST on arXiv 6️⃣ MalDICT: Massive Malware Dataset 🔗 MalDICT on arXiv ⚠️ Disclaimer: Handle these datasets with caution! Always use a secure, isolated environment to preventt system compromise. 📢 Join our community for more cybersecurity & digital forensics resources: 🔗 Digital Forensic & Cyber Security Channel

😈 Reverse Engineer's Toolkit A collection of tools for those interested in reverse engineering and malware analysis on x86 & x64 Windows systems. 🔗 GitHub: Reverse Engineer's Toolkit 📢 Join the Team: https://t.me/DigitalForensicAndCyberSecurity #Reverse #Malware #CyberSecurity

👁 Uncle Spfus – Spoof MAC Address & Hostname A tool that automates MAC address and hostname spoofing. It uses macchanger but also verifies whether the MAC address remains spoofed after connecting to a network. This is crucial because some network configurations might reset the MAC to its original state. 🔗 GitHub: Uncle Spfus #CyberSecurity #MACSpoofing #Privacy

🛡 Ultimate Recon & Threat Intelligence Toolkit 🛡 🔍 Enhance your Threat Intelligence, OSINT, and Pentesting with these powerful tools! 🚨 Threat Intelligence: 🔹 BinaryEdge | GreyNoise | FOFA 🔹 Zoomeye | LeakIX | URLScan 🔹 SOCRadar | Pulsedive 💻 Code Search: 🔹 Grep.app | SearchCode | PublicWWW 🌍 Server Search: 🔹 Shodan | Onyphe | Censys | IVRE 🔎 Attack Surface Discovery: 🔹 Netlas | FullHunt | BinaryEdge 🕵️ OSINT & Recon: 🔹 IntelX – OSINT search 🔹 Hunter – Email lookup 🔹 WiGLE – Wi-Fi hotspot search 🔹 crt.sh – SSL/TLS certificate search 🔹 Vulners – Vulnerability research #Info #Pentest #Recon #OSINT #CyberSecurity #ThreatIntel #RedTeam #BugBounty Just copy and paste this into Telegram, and all links will be clickable!

Pentration Testing, Beginners To Expert! •  Phase 1 – History; •  Phase 2 – Web and Server Technology; •  Phase 3 – Setting up the lab with BurpSuite and bWAPP; •  Phase 4 – Mapping the application and attack surface; •  Phase 5 – Understanding and exploiting OWASP top 10 vulnerabilities; •  Phase 6 – Session management testing; •  Phase 7 – Bypassing client-side controls; •  Phase 8 – Attacking authentication/login; •  Phase 9 - Attacking access controls (IDOR, Priv esc, hidden files and directories); •  Phase 10 – Attacking Input validations (All injections, XSS and mics); •  Phase 11 – Generating and testing error codes; •  Phase 12 – Weak cryptography testing; •  Phase 13 – Business logic vulnerability. https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Vulnhuntr - tool to identify remotely exploitable vulnerabilities using LLMs and static code analysis https://github.com/protectai/vulnhuntr // World's first autonomous AI-discovered 0-day vulnerabilities

CVE-2024-8672: Code Injection in Widget Options WordPress Plugin, 9.9 rating 🔥 The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution. Search at Netlas.io: 👉 Link: https://nt.ls/xOEZp 👉 Dork: http.body:"plugins/widget-options" Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution ●▬۩❁ ❁۩▬●

Geek girl 👩‍💻: 1. Malware Analysis Toolkit for static and dynamic analysis Windows PE files 2. kramer_decryptor - Decrypt/deobfuscate compiled python scripts which have been encrypted/obfuscated by Kramer 3. Qu1cksc0pe - All-in-One malware analysis tool ●▬۩❁❁۩▬● 0x01 - Killing Windows Kernel Mitigations 0x02 - Introduction to Windows Kernel UaFs 0x03 - Approaching the Modern Windows Kernel Heap 0x04 - Introduction to Windows Kernel Write What Where Vulnerabilities 0x05 - Introduction to Windows Kernel Type Confusion Vulnerabilities ●▬۩❁ ❁۩▬● #kernel

🖥 X-OSINT This is an OSINT tool designed to gather useful, credible, and valid information about phone numbers, email addresses, IP addresses, and more features to come in future updates. Features of this tool include: 1. Host Lookup: Identifies and retrieves information about a host (server) on the network. 2. Port Scan: Detects open ports on a host and the services associated with them. 3. Subdomain Enumeration: Finds all subdomains associated with a main domain. 4. CVE Exploit Search: Looks up known vulnerabilities (CVEs) that can potentially be exploited. 5. DNS Query: Searches the Domain Name System (DNS) to retrieve information about a domain or IP address. In Summary: X-OSINT is a powerful tool for collecting information from public sources, useful for research, cybersecurity, and other fields. https://github.com/TermuxHackz/X-osint ●▬۩❁ @DigitalForensicAndCyberSecurity❁۩▬● #OSINT #IP #Mail #DNS #CVE

1. Data Deletion and Recovery:    - Deletion:      - Files are not erased but marked as free space in the file system.    - Data Recovery:      - Techniques to recover deleted files by accessing unallocated space. 2. File Carving:    - Definition:      - Extracting files based on file signatures without relying on file system metadata.    - Tools:      - Foremost, Scalpel, PhotoRec. 3. Recovering Data from Damaged Media:    - Challenges:      - Physical damage, corrupted sectors, or logical errors.    - Techniques:      - Using specialized tools like ddrescue to clone and recover data.      - Logical recovery by repairing file system structures. 4. Data Recovery Tools:    - PhotoRec:      - Open-source tool for file carving and recovering deleted files.    - R-Studio:      - Commercial tool for recovering data from various file systems.    - TestDisk:      - Used for repairing damaged file systems and recovering lost partitions. Study Materials: - Books:   - "Guide to Computer Forensics and Investigations" by Bill Nelson, Amelia Phillips, and Christopher Steuart - Online Resources:   - [Understanding Data Recovery](https://www.howtogeek.com/125521/how-data-recovery-works/)   - [Introduction to File Carving](https://www.sans.org/reading-room/whitepapers/forensics/file-carving-techniques-better-forensic-analysis-34285) Tutorials: - [Data Recovery and File Carving Overview](https://www.youtube.com/watch?v=8nGe5V6PPYE) Practical Tutorials: - Recovering Deleted Files with PhotoRec:   - [PhotoRec Tutorial](https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step)   - [PhotoRec Video Tutorial](https://www.youtube.com/watch?v=F8X4A_jAnrk)

Restoring Reflective Code Loading on macOS https://objective-see.org/blog/blog_0x7C.html ]-> Slides ]-> Reflective Code Loader PoC ●▬۩❁ ❁۩▬●

🖥FREE Reverse Engineering Self-Study Course This free course will help you learn Windows programming in C in depth. During this course, you will learn the concepts of Win32API and reverse engineering in a practical and step-by-step manner using the free IDA software in x86 and x64 environments. Course content: This course contains 30 different chapters that cover all aspects of Windows programming with C language. ⏺ GitHub #GitHub #Reverse #Windows Sorin's team

Password Hunting – Linux Privilege Escalation. •  Password Hunting – Filenames and File Contents; - Hunting for Interesting Filenames; - Hunting for Interesting Strings Inside Files; •  Password Hunting – Web Files / Config Files; - Passwords in Config Files; - Passwords in Other Web Files (WebDav Example); - Cracking the WebDav Password with Hashcat; •  Password Hunting – Hidden Files and Folders; - Passwords in Unique (Custom) Hidden Folder and File; - Passwords in Bash History Files; - Passwords in SSH Keys; - Cracking an SSH Key using John the Ripper; •  Password Hunting – MySQL; - Password Hashes in a Custom Database Part 1 – MD5 Hashes; - Cracking Custom Database Hashes Using Hashcat; - Password Hashes in a Custom Database Part 2 – Base64 Decode; •  Password Hunting – /var/backups Folder; - Cracking Shadow Hashes with Hashcat; •  Passwords Hunting – Password Protected Files; - Cracking the RAR Files Password Using John the Ripper; •  Password Hunting with Tools – LinPEAS; •  Want to stay up to date with the latest hacks? In this post we will be exploring the art of password hunting on a target Linux machine as a means to escalate privileges either horizontally or vertically. We will review various techniques to hunt for passwords, as well as some common locations they are stored. During our hunt, we will uncover credentials in scripts, config files, filenames, hashes and much more! https://juggernaut-sec.com/password-hunting-lpe/ #cracking #Hashcat #Linux