Network Security Channel
@Engineer_Computer
2.57K subscribers
5.33K photos
3.42K videos
5.56K files
4.44K links
شروع از سال 1395
✅ Security Operation Center (SOC)
✅ Bug Bounty
✅ Vulnerability
✅ Pentest
✅ Hardening
✅ Linux
✅ Reasearch
✅ Security Network
✅ Security Researcher
✅ DevSecOps
✅ Blue Team
✅ Red Team
Download Telegram
About
Blog
Apps
Platform
Join
Network Security Channel
2.57K subscribers
Network Security Channel
#Pentest with Kali Linux
آموزشی جامع و نایاب که از تیم سازنده سیستم عامل کالی لینوکس منتشر و ترجمه شده.در این دوره شما کار با تمامی ابزار های کالی را در برمیگیرید.
@Engineer_Computer
710 views
Network Security Channel
⭕️ در این مقاله محقق یک تکنیک جدید برای کشف دامنه را شرح میده و نحوه استفاده از اون رو در تست نفوذ، باگ بانتی و ... نشون میده.

https://swarm.ptsecurity.com/discovering-domains-via-a-time-correlation-attack/
#Recon #BugBounty #Pentest
@Engineer_Computer
PT SWARM
Discovering Domains via a Time-Correlation Attack on Certificate Transparency
New attack on certificate transparency reveals previously unknown domains!
212 views
Network Security Channel
⭕️ در این مقاله محقق با chain کردن آسیب پذیری هایی ‌که درحالت عادی در اکثر برنامه های باگ بانتی قابل قبول نیستن رو تبدیل به آسیب پذیری account takeover کرده

https://medium.com/@renwa/the-underrated-bugs-clickjacking-css-injection-drag-drop-xss-cookie-bomb-login-logout-csrf-84307a98fffa
#BugBounty #Pentest #web_security
@Engineer_Computer
Medium
The Underrated Bugs, Clickjacking, CSS Injection, Drag-Drop XSS, Cookie Bomb, Login+Logout CSRF…
Story of 3 bug bounty writeups which I use low bugs and chain them together for higher impact.
319 views
Network Security Channel
⭕️ در این مقاله محقق با تزریق CSS از طریق Client Side Path Traversal با Open Redirect تونسته اطلاعات شخصی کاربر رو استخراج کنه

https://mr-medi.github.io/research/2022/11/04/practical-client-side-path-traversal-attacks.html
#BugBounty #Pentest #web_security
@Engineer_Computer
133 views
Network Security Channel
⭕️ محقق توی این مقاله تکنیک های مختلف دور زدن شناسایی filename بر روی وب اپلیکیشن های بر پایه جاوا رو جمع آوری کرده

https://pyn3rd.github.io/2022/05/07/Arbitrary-File-Upload-Tricks-In-Java/
#BugBounty #JAVA #Servlet #Pentest #web_security
@Engineer_Computer
Pyn3Rd
Arbitrary File Upload Tricks In Java
0x01 ForewordsRecently I see some discussions about arbitrary file upload in Java environment on Internet. The main takling points are how to bypass file name detection when uploading arbitrary file.
147 views
Network Security Channel
⭕️ توی این مقاله از portswigger محقق به نحوه اکسپلویت XSS در تگ meta و hidden input ها با استفاده از فانکشنالیتی popover در مرورگر پرداخته

https://portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags
#BugBounty #Pentest #web_security
@Engineer_Computer
120 views
Network Security Channel
⭕️آسیب پذیری با شماره CVE-2023-29357 برای Microsoft SharePoint Server ثبت شده که اکسپلویت اون در گیت هاب در دسترس است.
تارگت های زیادی در ایران آسیب پذیر هستند، لطفا بروزرسانی کنید.


https://github.com/Chocapikk/CVE-2023-29357/tree/main
#exploit #pentest #redteam
@Engineer_Computer
GitHub
GitHub - Chocapikk/CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability - Chocapikk/CVE-2023-29357
196 views
Network Security Channel
CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege

https://github.com/Chocapikk/CVE-2023-29357/tree/main
#exploit #pentest #redteam #git

@Engineer_Computer
GitHub
GitHub - Chocapikk/CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability - Chocapikk/CVE-2023-29357
180 views
Network Security Channel
Pentration Testing Checklist.pdf.pdf
1001.3 KB
#pentest #checklist
@Engineer_Computer
🔥1
310 views
Network Security Channel
👩‍💻For those of you interested in learning AWS Security and Penetration Testing, here is my best list of shared and compiled resources:

🔗https://github.com/redskycyber/Cloud-Security/blob/main/AWS-Security-Pentesting-Resources.md

#AWS #pentest
@Engineer_Computer
GitHub
Cloud-Security/AWS-Security-Pentesting-Resources.md at main · redskycyber/Cloud-Security
This Repo serves as a collection of shared security and penetration testing resources for the cloud. - redskycyber/Cloud-Security
115 views
Network Security Channel
burpsuite_pro_v2024.1.1.1.7z
682.9 MB
Burp Suite Professional v2024.1.1.1 + BurpBounty_Pro 2.8.0 + JDK 18

NOTE - Run this version With Java SE JDK 18

Released Thursday, 8 February 2024
 #pentest #security
@Engineer_Computer
498 views
Network Security Channel
💢 پورت اسکنر naabu به زبان Go نوشته شده است و قابلیت اسکن های SYN با سرعت بالا را دارد.

🔍 https://github.com/projectdiscovery/naabu


#pentest
#tools

@Engineer_Computer
GitHub
GitHub - projectdiscovery/naabu: A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used…
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests - project...
227 views