tgindex

Cybersecurity and Digital Forensics

описание

#CyberSecurity #InfoSec (Information Security) #DigitalForensics #CyberAware #ITSecurity #DataProtection #Hacking #ThreatDetection #CyberThreats #MalwareAnalysis

← к каналу@DigitalForensicAndCyberSecurity
897
подписчиков
Охват к подписчикам
115,9%
ERR
Реакции к просмотрам
0,12%
26 на 21 постов
Пересылки к просмотрам
0,65%
139
Постов в день
0,0
всего 21

Где отзываются чаще

доля реакций к просмотрам
  • 13 июл. 2024 г.🔍 Exciting News! 🔍 Based on the poll earlier, I'm starting a 30-day foundation course on digital forensics! 🖥️💼 Join me as we explore from computer systems to analyzing digital evidence. Whether you're new or refreshing your knowledge, this course offers a comprehensive overview. Expect daily updates, study materials, and practical exercises to grasp the essentials. Let's dive into digital forensics together! Join the journey and share your insights. Here's to 30 days of learning! 🎉💻 #DigitalForensics #LearningJourney #CyberSecurity0,70%
  • 24 апр.Pentration Testing, Beginners To Expert! • Phase 1 – History; • Phase 2 – Web and Server Technology; • Phase 3 – Setting up the lab with BurpSuite and bWAPP; • Phase 4 – Mapping the application and attack surface; • Phase 5 – Understanding and exploiting OWASP top 10 vulnerabilities; • Phase 6 – Session management testing; • Phase 7 – Bypassing client-side controls; • Phase 8 – Attacking authentication/login; • Phase 9 - Attacking access controls (IDOR, Priv esc, hidden files and directories); • Phase 10 – Attacking Input validations (All injections, XSS and mics); • Phase 11 – Generating and testing error codes; • Phase 12 – Weak cryptography testing; • Phase 13 – Business logic vulnerability. https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes0,38%
  • 20 дек. 2024 г.🖥FREE Reverse Engineering Self-Study Course This free course will help you learn Windows programming in C in depth. During this course, you will learn the concepts of Win32API and reverse engineering in a practical and step-by-step manner using the free IDA software in x86 and x64 environments. Course content: This course contains 30 different chapters that cover all aspects of Windows programming with C language. ⏺ GitHub #GitHub #Reverse #Windows Sorin's team0,36%
  • 9 янв. 2025 г.1. Data Deletion and Recovery: - Deletion: - Files are not erased but marked as free space in the file system. - Data Recovery: - Techniques to recover deleted files by accessing unallocated space. 2. File Carving: - Definition: - Extracting files based on file signatures without relying on file system metadata. - Tools: - Foremost, Scalpel, PhotoRec. 3. Recovering Data from Damaged Media: - Challenges: - Physical damage, corrupted sectors, or logical errors. - Techniques: - Using specialized tools like ddrescue to clone and recover data. - Logical recovery by repairing file system structures. 4. Data Recovery Tools: - PhotoRec: - Open-source tool for file carving and recovering deleted files. - R-Studio: - Commercial tool for recovering data from various file systems. - TestDisk: - Used for repairing damaged file systems and recovering lost partitions. Study Materials: - Books: - "Guide to Computer Forensics and Investigations" by Bill Nelson, Amelia Phillips, and Christopher Steuart - Online Resources: - [Understanding Data Recovery](https://www.howtogeek.com/125521/how-data-recovery-works/) - [Introduction to File Carving](https://www.sans.org/reading-room/whitepapers/forensics/file-carving-techniques-better-forensic-analysis-34285) Tutorials: - [Data Recovery and File Carving Overview](https://www.youtube.com/watch?v=8nGe5V6PPYE) Practical Tutorials: - Recovering Deleted Files with PhotoRec: - [PhotoRec Tutorial](https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step) - [PhotoRec Video Tutorial](https://www.youtube.com/watch?v=F8X4A_jAnrk)0,24%
  • 14 дек. 2024 г.Password Hunting – Linux Privilege Escalation. • Password Hunting – Filenames and File Contents; - Hunting for Interesting Filenames; - Hunting for Interesting Strings Inside Files; • Password Hunting – Web Files / Config Files; - Passwords in Config Files; - Passwords in Other Web Files (WebDav Example); - Cracking the WebDav Password with Hashcat; • Password Hunting – Hidden Files and Folders; - Passwords in Unique (Custom) Hidden Folder and File; - Passwords in Bash History Files; - Passwords in SSH Keys; - Cracking an SSH Key using John the Ripper; • Password Hunting – MySQL; - Password Hashes in a Custom Database Part 1 – MD5 Hashes; - Cracking Custom Database Hashes Using Hashcat; - Password Hashes in a Custom Database Part 2 – Base64 Decode; • Password Hunting – /var/backups Folder; - Cracking Shadow Hashes with Hashcat; • Passwords Hunting – Password Protected Files; - Cracking the RAR Files Password Using John the Ripper; • Password Hunting with Tools – LinPEAS; • Want to stay up to date with the latest hacks? In this post we will be exploring the art of password hunting on a target Linux machine as a means to escalate privileges either horizontally or vertically. We will review various techniques to hunt for passwords, as well as some common locations they are stored. During our hunt, we will uncover credentials in scripts, config files, filenames, hashes and much more! https://juggernaut-sec.com/password-hunting-lpe/ #cracking #Hashcat #Linux0,23%
  • 15 янв. 2025 г.🖥 X-OSINT This is an OSINT tool designed to gather useful, credible, and valid information about phone numbers, email addresses, IP addresses, and more features to come in future updates. Features of this tool include: 1. Host Lookup: Identifies and retrieves information about a host (server) on the network. 2. Port Scan: Detects open ports on a host and the services associated with them. 3. Subdomain Enumeration: Finds all subdomains associated with a main domain. 4. CVE Exploit Search: Looks up known vulnerabilities (CVEs) that can potentially be exploited. 5. DNS Query: Searches the Domain Name System (DNS) to retrieve information about a domain or IP address. In Summary: X-OSINT is a powerful tool for collecting information from public sources, useful for research, cybersecurity, and other fields. https://github.com/TermuxHackz/X-osint ●▬۩❁ @DigitalForensicAndCyberSecurity❁۩▬● #OSINT #IP #Mail #DNS #CVE0,22%
  • 7 мая 2025 г.CVE-2024-22116: RCE in Zabbix, 9.9 rating 🔥 Lack of escaping for script parameters allows an attacker to execute arbitrary code. Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2 Vendor's advisory: https://support.zabbix.com/browse/ZBX-25016 #zabbix0,15%
  • 13 сент. 2025 г.🚨 New Malware Tactics Bypass Traditional Defenses If your SOC can’t afford to miss a single threat, this session is for you. 📍Cases & Detection Tips for SOCs In real time, ANY.RUN experts will: — Share insights into strengthening SOC expertise — Demonstrate and break down examples of evasion techniques — Offer detection strategies for ClickFix, phishing kits, and Living-Off-the-Land (LotL) attacks 👥 Who should attend? ↳ SOC analysts (all tiers), security managers, and CISOs ready to level up resilience. 📅 When? ↳ September 17 | 03:00 PM GMT Join a FREE webinar on how to have an upper hand → click here to register. -----0,14%
  • 23 нояб.🖥 X-OSINT This is an OSINT tool designed to gather useful, credible, and valid information about phone numbers, email addresses, IP addresses, and more features to come in future updates. Features of this tool include: 1. Host Lookup: Identifies and retrieves information about a host (server) on the network. 2. Port Scan: Detects open ports on a host and the services associated with them. 3. Subdomain Enumeration: Finds all subdomains associated with a main domain. 4. CVE Exploit Search: Looks up known vulnerabilities (CVEs) that can potentially be exploited. 5. DNS Query: Searches the Domain Name System (DNS) to retrieve information about a domain or IP address. In Summary: X-OSINT is a powerful tool for collecting information from public sources, useful for research, cybersecurity, and other fields. https://github.com/TermuxHackz/X-osint ●▬۩❁ @DigitalForensicAndCyberSecurity❁۩▬● #OSINT #IP #Mail #DNS #CVE0,13%
  • 12 февр. 2025 г.CVE-2024-8672: Code Injection in Widget Options WordPress Plugin, 9.9 rating 🔥 The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution. Search at Netlas.io: 👉 Link: https://nt.ls/xOEZp 👉 Dork: http.body:"plugins/widget-options" Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution ●▬۩❁ ❁۩▬●0,12%
  • 4 мар. 2025 г.😈 Reverse Engineer's Toolkit A collection of tools for those interested in reverse engineering and malware analysis on x86 & x64 Windows systems. 🔗 GitHub: Reverse Engineer's Toolkit 📢 Join the Team: https://t.me/DigitalForensicAndCyberSecurity #Reverse #Malware #CyberSecurity0,09%
  • 26 мар. 2025 г.🔍 Linux Persistence Detection Engineering – Part 1 The first part of the Linux Persistence Detection Engineering series explores fundamental persistence techniques used by attackers to maintain unauthorized access to Linux systems. Understanding these mechanisms is crucial for developing effective detection and threat-hunting strategies. 🛠️ Key Persistence Techniques: 1️⃣ Cron Job & Systemd Service Abuse – Attackers create malicious cron jobs or systemd services to execute payloads persistently. 2️⃣ Shell Profile Manipulation – Modifying .bashrc, .bash_profile, or .zshrc ensures commands run every time a user logs in. 3️⃣ SSH Backdoors – Attackers modify SSH configurations or implant rogue keys in ~/.ssh/authorized_keys for persistent remote access. Each section covers: ✅ Theoretical background ✅ Practical implementation ✅ Detection methods using SIEM & Endpoint rules ✅ Threat hunting with ES|QL & OSQuery 📖 Read more: Elastic Security Labs – Part 1 #LinuxSecurity #ThreatDetection #ElasticSecurity #CyberThreats0,08%