Emrecan Arda

hello everyone. in today's article we are writing a port scanner tool with c++. I wish everyone a good reading and work. https://lnkd.in/da4wawK6 #cppprogramming #cybersecuritytools #ethicalhacking #networksecurity #portscanner #socketprogramming

3

Elber Cleber 3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass #shreateh #Cybersecurity #InfoSec #DataSecurity #NetworkSecurity #CyberThreats #VulnerabilityManagement #ITSecurity #CyberDefense #CyberAwareness #SecurityIncident #DataPrivacy #CyberAttacks #CyberProtection #CyberRisk #SecurityBreaches #EthicalHacking #CyberEducation #SecurityOperations #CyberResilience #CyberIntelligence

1

Elber Cleber 3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass #shreateh #Cybersecurity #InfoSec #DataSecurity #NetworkSecurity #CyberThreats #VulnerabilityManagement #ITSecurity #CyberDefense #CyberAwareness #SecurityIncident #DataPrivacy #CyberAttacks #CyberProtection #CyberRisk #SecurityBreaches #EthicalHacking #CyberEducation #SecurityOperations #CyberResilience #CyberIntelligence

1

Every hacker has that one go-to book📚🧑‍💻 For Umit Aksu "The Shellcoder's Handbook: Discovering and Exploiting Security Holes" was his guide to real exploitation back in the day📟👾🔐 🎧Spotify: https://lnkd.in/guQK8nDU 🎥YouTube: https://lnkd.in/gAxxE6g7 #cybersecuritypodcast #cybersecurityexperts #cybersecurity #cybersecurityawarenessmonth #cybersecurityawareness #ethicalhackers #tech #technology #techpodcast #it #itprofessional #itexperts #stem #computerscience #security #securityawareness #vulnerability #pc #exploit #vulnerability #hacker #hacking #bughunting #book #books #keeplearning #learn #felixlindner #hackerstofounders #chrismagistrado

15

3 Yorum

I challenge you to list top 4 Skills for #SOC detection engineers other than bellow… I’ll start. 1) Risk Management - Risk Identification, Threat Identification, Assets Ownership, Defense Strategy, Compensatory/Protective Controls, Residual Risk. 2) Software Engineering - Threat Modelling, Software Archtecture, Requirements Management, Use Case Diagrams, Data Flow Diagrams, Agile/Waterfall Development Models, Code Versioning, Testing, Software Quality and Control, Maturity Model. 3) Cyber Threat Intelligence - Attack Vectors, Attack Surfaces, Tatics, Techniques, Procedures, Indicators of Attack, Indicators of Compromise, Course of Actions, Threat Mitigation and Response. 4) Information Asset Core Skill - Hardware, Software Development, Operating Systems, Networking. If you don’t understand those, you can’t defend you business information systems.

41

2 Yorum

It was a wonderful experience contributing as a technical reviewer for ‘EDR Essentials’ title by Guven Boyraz published by Packt. Guven has covered the ins and outs of #EDR solutions with relevant technical examples explained in a simple manner. This book is highly recommended if you are looking to gain both fundamental and technical understanding of EDR. From a reviewer’s standpoint and as an individual, I highly appreciate the efforts made by Guven and entire Packt team. #endpointsecurity #cyberdefense #xdr #detectionandresponse #securityoperations

29

1 Yorum

🚨 Master Command Injection with Practical Insights 🚨 Dive deep into the world of Command Injection, one of the most critical vulnerabilities in cybersecurity. This guide by Talha Eroglu and Okan Yildiz walks you through understanding, exploiting, and mitigating command injection attacks. Whether you're a penetration tester or a developer, this resource is packed with actionable knowledge. What you’ll learn:    Exploitation Techniques: Real-world examples of exploiting vulnerabilities in web apps, DNS lookups, and more.    Reverse TCP Shells: Gain insights into setting up reverse shells for deeper penetration testing.    Burp Suite Integration: Step-by-step methods for testing command injection vulnerabilities.    Prevention Best Practices: Learn how to secure your applications with input validation, avoiding OS command execution, and using secure coding techniques. A must-read for anyone aiming to secure applications or sharpen their penetration testing skills. 🛡️ #Cybersecurity #CommandInjection #PenetrationTesting #SecureCoding #BurpSuite #InfoSec #ReverseShells #InputValidation

36

🔎 Security Audit Logs -Reviewing security audit logs in an IT system is one of the easiest ways to verify that access control mechanisms are working as intended. -Reviewing audit logs is primarily a detective control. -NIST Special Publication 800-92 suggests the following log types should be collected and audited. -Audit logs are valuable for: ▶️ Security, Compliance and Troubleshooting 📌 Network Security Software/Hardware: -Antivirus logs, IDS/IPS Logs, Remote Access Software such as VPN logs, Web proxy, Vulnerability management, Authentication Servers, Routers and Firewalls etc. 📌 Operating System: -System events, audit records, applications, client requests and server responses, usage information, significant operational actions, etc. 📌 Centralized Logging: -Should be automated, secure and even administrators should have limited access. -Often a central repository is hashed and never touched, and a secondary copy is analyzed to ensure integrity. -Logs should have a retention policy to ensure we are compliant and we keep the logs as long as we need them. -Checking logs is often an afterthought and rarely done, where do we start? -Since they are often keeping everything, there can be 10's of millions of lines of log info, we need to implement systems to automate this as much as makes sense.

29

The Role of Security Validation to Reduce and Quantify Cyber Risk – Volkan Ertürk – RSA24 #4 - SC Media: The Role of Security Validation to Reduce and Quantify Cyber Risk – Volkan Ertürk – RSA24 #4  SC Media #CyberSecurity #InfoSec #SecurityInsights

1

What is Network Automation: The Key to Efficiency and Security https://lnkd.in/dyhD8JKE #cybersecurity #network #networkmonitoring #NetworkSecurity #ethicalhacking #pentesting 

4

Elber Cleber 3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

1

Elber Cleber 3 Broadcast Multi-Purpose Platform 1.0.0 Authentication Bypass #shreateh #exploit #hacker #computer #cybersecurity #blackleaders #technology #vulnerability #vulnerabilityisstrength #vulnerable #infosec #security #tech #hacking #programming #hackers #coding #safety #cybersec

1

ShadowRoot Ransomware Group report is now online. I have conducted an analysis of an attack mechanism belonging to the ShadowRoot Ransomware group targeting Turkey. The report below contains an analysis of ransomware malware attributed to the ShadowRoot group, which is believed to be Russia-based, and which targets various business structures in Turkey. This report and the analysis process have been shared as open source, and I have conveyed the methods you can use during digital forensic examination without alteration. The main purpose of this effort is to ensure that potentially APT-linked malicious actors, targeting a specific country, are analyzed by other communities without causing further systemic damage, and to facilitate the rapid development of defense methods by sharing evidence as open source. This work includes both operational and experimental approaches and is intended to serve as a guide for cybersecurity professionals. Follow-up reports will also be shared. The next analysis report will include images of the machines and other additional exe files. The report has been submitted to the required units within the country. Hope it proves useful. Happy hunting. ^-^/ #cybersecurity #informationsecurity #threathunting #threatintelligence #ransomware #digitalforensics

72

3 Yorum

Windows Event Log Clear Activity Detect 📄 Descr 🈁 Technique 🔐 Detection Rule https://lnkd.in/d4WcSKxu #SOC #BlueTeam #SiberGüvenlik #Detection #ThreatHunting #Incident #Windowss #EventLog #Siem

41

𝗞𝗤𝗟 𝗔𝗱𝘃𝗲𝗻𝘁 𝗖𝗮𝗹𝗲𝗻𝗱𝗮𝗿 📅 - 𝗗𝗮𝘆 14: "Registry Key Modification to Disable SmartScreen Filter Scan for the Internet Zone" by Emre Ay , MBA Is difficult to complete an entire KQL Advent Calendar alone so I really appreciate the different contributions from the community to achieve this christmas objective! 🎄 📅 . This time, Emre Ay , MBA, is providing a really useful KQL oriented to protect users from potentially harmful pages that has malicious content. This query detects the suspicious modification of associated registry key to turn off SmartScreen Filter Scan settings allowing the threat actors to access to pages that malicious content that SmartScreen hasn't scanned. Additional info about the register keys: https://lnkd.in/eT_-Bb-6 KQL Query by Emre Ay , MBA: DeviceRegistryEvents | where Timestamp >= ago(7d) | where RegistryKey == "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3" | where RegistryValueName == "2301" | where RegistryValueType == "Dword" | where RegistryValueData == "3" | where IsInitiatingProcessRemoteSession == true #kqlquery #threathunting #cybersecurity

28

A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution (#CVE-2024-34021) A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary #OS command (#CVE-2024-39607) Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc. (#CVE-2024-40883) #cybersecurity

6

C2 Tracker: The Importance of Monitoring Command and Control https://lnkd.in/dy7HQ25N #networkmonitoring #cybersecurity #ethicalhacking #c2tracker #snort #networklisten

3