✅ بهترین ربات و سایت‌های دانلود مقاله با کد DOI
علاوه بر ربات تلگرامی سای هاب @scihubot از ربات @science_nexus_bot هم می توان برای دانلود رایگان مقالات و کتاب استفاده کرد. در این ربات می توان بر اساس موضوع کتاب، سال انتشار، مرتب سازی بر اساس جدید بودن و موارد دیگر جستجو را محدودتر و دقیق تر انجام داد.
با کلیک بر استارت در لینک زیر می توان دستورات آن را مشاهده کرد:
https://t.iss.one/science_nexus_bot
همچنین برای دانلود مقالات با کد DOI می‌توان از سایت‌های زیر هم بهره برد:

🔅 سایت های ایرانی:
https://paperdownloader.com/
https://paperhub.ir/
https://iranpaper.ir/
https://freepaper.me/
https://ardabil-sci.ir/
https://elearnica.ir/

🔅 سایت های خارجی (سای هاب):
https://sci.hubg.org/
https://sci-hub.ee
https://sci-hub.es.ht
https://sci-hub.is
https://sci-hub.it.nf
https://sci-hub.org.cn
https://sci-hub.ren
https://sci-hub.se
https://sci-hub.shop
https://sci-hub.st
https://sci-hub.tf
https://sci-hubtw.hkvisa.net
https://sci-hub.mksa.top/
https://sci-hub.ru/
https://sci-hub.is/
https://sci-hub.se
https://sci-hub.hkvisa.net/
https://gen.lib.rus.ec/scimag
https://gen.lib.rus.ec
See Also:
https://t.iss.one/Recommender_System/891
https://t.iss.one/Recommender_System/784
https://t.iss.one/Recommender_System/725
https://t.iss.one/Recommender_System/593
https://t.iss.one/Recommender_System/103
#آموزش #ایبوک #دانلود #ربات #رایگان #مقاله
#Free #Research #Download #Paper #Nexus #eBook #ResearchTools #Tools
کانال آموزش کامپیوتر
@Engineer_Computer

چگونه یک ژورنال مناسب برای ارسال مقاله انتخاب کنیم

#Journal #Paper #Writing #Submit
#Research #ResearchTools #Research_Tools
@Engineer_Computer

Research
Chatbots to ChatGPT in a Cybersecurity Space: Evolution, Vulnerabilities, Attacks, Challenges, and Future Recommendations 2023


#cybersecuritynews #research #future #businessadvisor #chatgpt #riskmitigation #vulnerability #threatintelligence

@Engineer_Computer

#DiyakoSecureBow

Analytics
2023 Data Breach Investigations Report:

Hello, and welcome first-time readers! Before you get started on the 2023 Data Breach Investigations Report (DBIR), it might be a good idea to take a look at this section first. (For those of you who are familiar with the report, please feel free to jump over to the introduction.) We have been doing this report for a while now, and we appreciate that the verbiage we use can be a bit obtuse at times. We use very deliberate naming conventions, terms and definitions and spend a lot of time making sure we are consistent throughout the report. Hopefully this section will help make all of those more familia

Breaking the string of end-of-year InfoSec milestones set in 2020 with SolarWinds Orion and in 2021
by Log4j, December 2022 was comparatively boring. Intelligence indicated several threat actors were abusing Microsoft developer accounts to get malicious drivers signed through their profiles to be used
in cyberattacks, including ransomware incidents and SIM swapping operations. The streak of months with attacks exploiting zero-day vulnerabilities was extended with reports of successful attacks on Microsoft, Apple, Fortinet and Citrix products. OWASSRF is a new attack chain exploiting on-premises Exchange Servers using the URL rewrite mitigations provided by Microsoft responding to September’s ProxyNotShell attack chain. The Play ransomware threat actors had exploited OWASSRF to attack at least eight victims. Among the best intelligence collections was a virtual order of battle of TA subordinate to Bureau 121 in the Reconnaissance General Bureau (RGB), North Korea’s military intelligence agency.
Special thanks to Dave Kennedy of the Verizon Threat Research Advisory Center (VTRAC) for his continued support and yearly contribution to this report.

#developerslife #data #research #infosec #help #intelligence #military #analytics #microsoft

@Engineer_Computer

⭕ Reversing Citrix Gateway for XSS

تو این مقاله از assetnote به ریورس کردن باینری critix gateway و پیدا کردن یه crlf injection پرداخته میشه که‌ منجر به یه pre-auth xss میشه

https://blog.assetnote.io/2023/06/29/binary-reversing-citrix-xss/

#XSS #ghidra #research

@Engineer_Computer

⭕ Persistent PHP payloads in PNGs

تو این مقاله از محقق به نحوه مختلف تزریق کد php جهت دست یابی به code injection در یک تصویر رو بررسی میکنه

https://www.synacktiv.com/publications/persistent-php-payloads-in-pngs-how-to-inject-php-code-in-an-image-and-keep-it-there.html

#code_injection #web_security #research
@Engineer_Computer

info
Study materials for the Certified Red Team Pentesting (CRTP) exam
https://github.com/0xStarlight/CRTP-Notes

@Engineer_Computer

#businessadvisor #cyberdefense #data #cybersecurityawareness #cybersecuritytraining #cybercrime #cyberdefense #networksecurity
#securityaudit #intelligenceéconomique #analytics #research #mal #malware #reverseengineering #engineering #team #business #software #security
#BusinessSecureContinuity

⭕️ توی این مقاله از projectdiscovery به بررسی آسیب پذیری RCE موجود در Adobe ColdFusion پرداختن و برای اون تمپلیت نوکلئی توسعه دادن

https://blog.projectdiscovery.io/adobe-coldfusion-rce/
#CVE #web_security #research
@Engineer_Computer

#DiyakoSecureBow

Analytics
OWASP Top 10 API Security Risks - 2023

Risk:
1.
API1:2023 - Broken Object Level Authorization
Description:
APIs tend to expose endpoints that handle object identifiers, creating a wide attack surface of Object Level Access Control issues. Object level authorization checks should be considered in every function that accesses a data source using an ID from the user.

2.
API2:2023 - Broken Authentication
Authentication mechanisms are often implemented incorrectly, allowing attackers to compromise authentication tokens or to exploit implementation flaws to assume other user's identities temporarily or permanently. Compromising a system's ability to identify the client/user, compromises API security overall.

3.
API3:2023 - Broken Object Property Level Authorization
This category combines API3:2019 Excessive Data Exposure and API6:2019 - Mass Assignment, focusing on the root cause: the lack of or improper authorization validation at the object property level. This leads to information exposure or manipulation by unauthorized parties.

4.
API4:2023 - Unrestricted Resource Consumption
Satisfying API requests requires resources such as network bandwidth, CPU, memory, and storage. Other resources such as emails/SMS/phone calls or biometrics validation are made available by service providers via API integrations, and paid for per request. Successful attacks can lead to Denial of Service or an increase of operational costs.

5.
API5:2023 - Broken Function Level Authorization Complex access control policies with different hierarchies, groups, and roles, and an unclear separation between administrative and regular functions, tend to lead to authorization flaws. By exploiting these issues, attackers can gain access to other users’ resources and/or administrative functions.
https://owasp.org/API-Security/editions/2023/en/0x11-t10

@Engineer_Computer

#businessadvisor #cyberdefense #data #gpt4 #ai #cybersecurityawareness #cybersecuritytraining #cybercrime #cyberdefense #networksecurity
#securityaudit #intelligenceéconomique #analytics #research #mal #malware #reverseengineering #engineering #team #business #software #security

🔅 ارزیابی مجلات علمی بر اساس تجربیات سایر محققان و تجربیات انتشار آنها :
🔗 https://qoam.eu
🔗 https://scirev.org
#ابزار_پژوهش #ابزار_جستجو #مقاله_نویسی #ارزیابی_مجله
#Research #Tools #ResearchTools #Research_Tools #Journal #Review #Scientific #Efficient #Publish #Quality #Information #Popularity #Score #Compare #Open_Access #OpenAccess #FreeAccess #Free_Access #Academic
@Engineer_Computer

🔍 php-static-analysis-tools
- مجموعه گسترده ای از ابزارها برای تجزیه و تحلیل استاتیک کدهای PHP.

در صورت امکان دسترسی به کد منبع برنامه تحت مطالعه یا تحقیق در مورد پروژه های منبع باز می توان از آن برای پیدا کردن باگ ها استفاده کرد.

👉 GitHub

#tools #security #research
@Engineer_Computer