Foued SAIDI

🩸Top Digital Forensics Tools 🧬Network Forensic Tools - Nmap - Wireshark - Xplico - Snort - TCPDump - The Slueth Kit 📱Mobile Forensics Tools - Elcomspoft iOS Forensic Toolkit - Mobile Verification Toolkit - Oxygen Forensic - MOBILedit - Cellebrite UFED - MSAB XRY ☢️Malware Analysis Tools - Wireshark - YARA - Malwarebytes - VirusTotal - Cuckoo Sandbox - IDA Pro 🗃️Data Recovery Tools - Recuva - EaseUS Data Recovery - TestDisk - Stellar Data Recovery - PhotoRec - Disk Drill ✉️Email Forensic Tools - MailXaminer - MailPro+ - Xtraxtor - Aid4Mail - eMailTrackerPro - Autopsy 🔍OSINT Tools - Maltego - Nmap - OSINT Framework - Shodan - Recon-ng - TheHavester ⚠️Live Forensics Tools - OS Forensics - Encase Live - CAINE - F-Response - Kali Linux Forensic Mode 📥Memory Forensics Tools - Volatility - DumpIt - memDump - Access data FTK Imager - Hibernation Recon - WindowSCOPE ☁️Cloud Forensic Tools - Magnet AXIOM - MSAB XRY Cloud - Azure CLI 🔖#infosec #cybersecurity #hacking #pentesting #security

١٥

ANALYSING REMCOS MALWARE : ASIF ALI #malwareanalysis #malware #threatdetection #monitoring #remcos #riskmanagement #cybersecurity #infosec #appsec #blueteam #soc #socanalyst #malwaredetection #malwareanalyst #vapt #itsecurity #system

١٠٥

٤ تعليق

Top Digital Forensics Tools 🧬 Network Forensic Tools - Nmap - Wireshark - Xplico - Snort - TCPDump - The Slueth Kit 📱 Mobile Forensics Tools - Elcomspoft iOS Forensic Toolkit - Mobile Verification Toolkit - Oxygen Forensic - MOBILedit - Cellebrite UFED - MSAB XRY ☢️ Malware Analysis Tools - Wireshark - YARA - Malwarebytes - VirusTotal - Cuckoo Sandbox - IDA Pro 🗃️ Data Recovery Tools - Recuva - EaseUS Data Recovery - TestDisk - Stellar Data Recovery - PhotoRec - Disk Drill ✉️ Email Forensic Tools - MailXaminer - MailPro+ - Xtraxtor - Aid4Mail - eMailTrackerPro - Autopsy 🔍 OSINT Tools - Maltego - Nmap - OSINT Framework - Shodan - Recon-ng - TheHavester ⚠️ Live Forensics Tools - OS Forensics - Encase Live - CAINE - F-Response - Kali Linux Forensic Mode 📥 Memory Forensics Tools - Volatility - DumpIt - memDump - Access data FTK Imager - Hibernation Recon - WindowSCOPE ☁️ Cloud Forensic Tools - Magnet AXIOM - MSAB XRY Cloud - Azure CLI #infosec #cybersecurity #hacking #pentesting #security

٥

٢ تعليق

🩸Top Digital Forensics Tools 🧬Network Forensic Tools - Nmap - Wireshark - Xplico - Snort - TCPDump - The Slueth Kit 📱Mobile Forensics Tools - Elcomspoft iOS Forensic Toolkit - Mobile Verification Toolkit - Oxygen Forensic - MOBILedit - Cellebrite UFED - MSAB XRY ☢️Malware Analysis Tools - Wireshark - YARA - Malwarebytes - VirusTotal - Cuckoo Sandbox - IDA Pro 🗃️Data Recovery Tools - Recuva - EaseUS Data Recovery - TestDisk - Stellar Data Recovery - PhotoRec - Disk Drill ✉️Email Forensic Tools - MailXaminer - MailPro+ - Xtraxtor - Aid4Mail - eMailTrackerPro - Autopsy 🔍OSINT Tools - Maltego - Nmap - OSINT Framework - Shodan - Recon-ng - TheHavester ⚠️Live Forensics Tools - OS Forensics - Encase Live - CAINE - F-Response - Kali Linux Forensic Mode 📥Memory Forensics Tools - Volatility - DumpIt - memDump - Access data FTK Imager - Hibernation Recon - WindowSCOPE ☁️Cloud Forensic Tools - Magnet AXIOM - MSAB XRY Cloud - Azure CLI 🔖#infosec #cybersecurity #hacking #pentesting #security

٥

#Alhamduillah Personally, my contribution is available in the MITRE Attack Framework for the April version. Update Links : https://lnkd.in/eciN4YZ4 Contribution List : https://lnkd.in/erMWn_rh Contribution Links : 1 - https://lnkd.in/eK58f2W9 2- https://lnkd.in/e8drJfm7 #mitre #attack #framework

٣

١ تعليق واحد

Dante ✅ Au programme : - Enumeration - Exploit Development - Lateral Movement / Tunneling - Privilege Escalation - Situational Awareness - Web Application Attacks #HackTheBox #CyberSecurity #Pentest #RedTeam

٣٣

Hi Guy's 100 Day's 100 Real Exam Quiz I will post daily one quiz i have 💯 of CSA exams questions C|SA - Certified SOC Analyst Day 05 - Quiz 05 Question: n attacker exploits the logic validation mechanisms of an e-commerce website. He successfully purchases a product worth $100 for $10 by modifying the URL exchanged between the client and the server. Original URL: https://lnkd.in/dQbFHxFp Modified URL: https://lnkd.in/dmchSWC6 Identify the attack depicted in the above scenario. A. Denial-of-Service Attack B. SQL Injection Attack C. Parameter Tampering Attack D. Session Fixation Attack post your correct answers i will react as love 💖 #SOC #SIEM #Exam #Questions #Quiz #CSA #C|SA #Certified #SQL #SQLinjection #Cybersecurity #Cyber #Security #Blueteam #DDOS #Session #Attack

٦

٥ تعليق

Alhamdulilah, Bi Idhnillah i scored my first "high" severity vulnerability. Finding type: Leaking Production API KEY in postman collection Always look for pre-configured API Keys when working with a postman collection, Look for it in collection variables, individual requests, and environments that come pre-configured with the collection #bugbounty #bugbountytips

٥٢

🚨 𝐒𝐭𝐚𝐲 𝐕𝐢𝐠𝐢𝐥𝐚𝐧𝐭 𝐀𝐠𝐚𝐢𝐧𝐬𝐭 𝐑𝐞𝐦𝐨𝐭𝐞 𝐂𝐨𝐝𝐞 𝐄𝐱𝐞𝐜𝐮𝐭𝐢𝐨𝐧 (𝐑𝐂𝐄) 𝐓𝐡𝐫𝐞𝐚𝐭𝐬! 🚨⁣ ⁣ Remote Code Execution (RCE) is a critical vulnerability that poses significant risks to both web applications and server security. From injecting malicious code to exploiting deserialization flaws, the methods of RCE attacks are varied and increasingly sophisticated.⁣ ⁣ 🔍 𝐖𝐡𝐲 𝐒𝐡𝐨𝐮𝐥𝐝 𝐘𝐨𝐮 𝐂𝐚𝐫𝐞?⁣ RCE attacks can lead to severe consequences, including:⁣ - 𝐃𝐚𝐭𝐚 𝐁𝐫𝐞𝐚𝐜𝐡𝐞𝐬: Unauthorized access to sensitive information.⁣ - 𝐒𝐲𝐬𝐭𝐞𝐦 𝐂𝐨𝐦𝐩𝐫𝐨𝐦𝐢𝐬𝐞: Control of systems for malicious activities.⁣ - 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐃𝐢𝐬𝐫𝐮𝐩𝐭𝐢𝐨𝐧: Downtime and loss of productivity.⁣ - 𝐑𝐞𝐩𝐮𝐭𝐚𝐭𝐢𝐨𝐧 𝐃𝐚𝐦𝐚𝐠𝐞: Erosion of trust among customers and stakeholders.⁣ ⁣ 🔧 𝐌𝐢𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐞𝐬:⁣ To protect your systems from RCE vulnerabilities, consider the following measures:⁣ 1. 𝐑𝐞𝐠𝐮𝐥𝐚𝐫 𝐔𝐩𝐝𝐚𝐭𝐞𝐬: Keep your software and systems up to date with the latest security patches.⁣ 2. 𝐂𝐨𝐝𝐞 𝐑𝐞𝐯𝐢𝐞𝐰𝐬: Conduct regular reviews and use static analysis tools to identify vulnerabilities before deployment.⁣ 3. 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐠𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧: Restrict access to critical systems to limit the impact of potential attacks.⁣ 4. 𝐖𝐞𝐛 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐅𝐢𝐫𝐞𝐰𝐚𝐥𝐥𝐬 (𝐖𝐀𝐅𝐬): Deploy WAFs to monitor and filter HTTP traffic, blocking attempts to exploit vulnerabilities.⁣ ⁣ 🌟 𝐈𝐧𝐬𝐩𝐢𝐫𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐨𝐦 𝐍𝐨𝐭𝐚𝐛𝐥𝐞 𝐂𝐚𝐬𝐞𝐬:⁣ - 𝐄𝐪𝐮𝐢𝐟𝐚𝐱 𝐁𝐫𝐞𝐚𝐜𝐡 (𝐀𝐩𝐚𝐜𝐡𝐞 𝐒𝐭𝐫𝐮𝐭𝐬): Highlighted the importance of securing web application frameworks.⁣ - 𝐖𝐚𝐧𝐧𝐚𝐂𝐫𝐲 𝐑𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 (𝐄𝐭𝐞𝐫𝐧𝐚𝐥 𝐁𝐥𝐮𝐞): Demonstrated the rapid spread and devastating impact of RCE exploits.⁣ - 𝐇𝐞𝐚𝐫𝐭𝐛𝐥𝐞𝐞𝐝 (𝐎𝐩𝐞𝐧𝐒𝐒𝐋): Showed the widespread implications of vulnerabilities in foundational software libraries.⁣ ⁣ 🔗 𝐒𝐭𝐚𝐲 𝐔𝐩𝐝𝐚𝐭𝐞𝐝:⁣ Keeping abreast of the latest trends and best practices in cybersecurity is crucial. Regularly review security advisories, participate in professional forums, and attend cybersecurity webinars to stay informed.⁣ ⁣ 👥 𝐄𝐧𝐠𝐚𝐠𝐞 𝐚𝐧𝐝 𝐒𝐡𝐚𝐫𝐞:⁣ Have you encountered RCE vulnerabilities in your work? How did you address them? Share your experiences and insights in the comments. Let's learn from each other and build a more secure digital environment!⁣ ⁣ Credit:Sumit Jain #𝐂𝐲𝐛𝐞𝐫𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 #𝐑𝐞𝐦𝐨𝐭𝐞𝐂𝐨𝐝𝐞𝐄𝐱𝐞𝐜𝐮𝐭𝐢𝐨𝐧 #𝐑𝐂𝐄 #𝐃𝐚𝐭𝐚𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 #𝐈𝐓𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 #𝐈𝐧𝐟𝐨𝐒𝐞𝐜 #𝐂𝐲𝐛𝐞𝐫𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬⁣

٦

My write up of Data, an easy linux machine from Vulnlab. It is also one of the OSCP like machine from TJNull's list. Link : https://lnkd.in/gKUkmyBs . Please have a read. I also write on Hashnode - https://lnkd.in/gt9hwHUN #oscp #penetrationtesting #vulnlab #data #easymachine #pwned

١٦

How to bypass 2FA? (via manipulation) 🔴 Status Code Manipulation Manipulating the response status code of a request to make the application perform unintended actions. 🟢 How to do it? 1. Enter any 2FA code and intercept request 2. Change the response code from 4xx to 200 OK 3. Forward the request and hopefully you bypassed it! (let me know if you do!) Do you want to crush bug bounties in 2024? ↳ Follow Eman Ćatić for tips!

٥٨

٦ تعليق