🟣قسمت دوم منتشر شد🟣
در این قسمت با انواع مدل های ماشین لرنینگ آشنا می شوید و کاربرد آنها را یادمیگیرید.

Machine learning security- Ml Types

🔉@infosectube
📌youtube channel

🛎سری آموزش های دوره کامل Owasp

🌀Owasp Master Class- Command Injection 2

مدرس: میثم منصف

🔉@infosectube
📌youtube channel

🛎سری آموزش های دوره کامل Owasp

🌀Owasp Master Class- Same Origin Policy (SOP)

مدرس: میثم منصف

🔉@infosectube
📌youtube channel

🛎سری آموزش های دوره کامل Owasp

🌀Owasp Master Class- XSS


مدرس: میثم منصف

🔉@infosectube
📌youtube channel

🛎Censys is a platform designed to help security professionals with several tasks related to internet-connected devices:

🌀Discovery: Censys can be used to discover new devices that are accessible on the internet. This is helpful for organizations that want to understand their entire attack surface, including devices that they may not be aware of.
🌀Monitoring: Censys can be used to monitor devices over time for changes in configuration or vulnerabilities. This can help security professionals to identify and respond to potential threats.
🌀Analysis: Censys can be used to analyze data about internet-connected devices, such as the types of devices, the operating systems they are running, and the services they are offering.
Censys works by regularly scanning the internet for publicly accessible devices. It then collects data about these devices, such as their IP addresses, operating systems, and the services they are running.

🔉@infosectube
📌youtube channel

😈Project Sonar is an initiative by Rapid7. It conducts large-scale internet surveys that gather information on various aspects of publicly accessible devices and systems.

Here's a breakdown of Project Sonar's key points:

Function: It scans the internet across more than 70 different services and protocols to gain insights into security vulnerabilities.
Data Collection: Project Sonar collects data like:
🔻SSL certificates
🔻DNS records
🔻Open ports and services running on devices
Data Usage: The gathered data is used for multiple purposes:
Informing Rapid7's security reports and vulnerability research
Developing security products by Rapid7
Making the data publicly available for further security research (accessible on Rapid7 Open Data: https://opendata.rapid7.com)
Benefits:
🔻Helps identify internet-wide exposure to common security weaknesses.
🔻Enables researchers to gain valuable insights into the global internet landscape.


🔉@infosectube
📌youtube channel

❌Federated Learning: Attacks, Defenses, Opportunities, and Challenges

Using dispersed data and training, federated learning (FL) moves AI capabilities to edge devices or does tasks locally. Many consider FL the start of a new era in AI, yet it is still security, and pri and privacy concerns must be discovered, analyzed, and recorded before widespread usage and adoption. A solid comprehension of risk variables allows an FL practitioner to construct a secure environment and provide researchers with a clear perspective of potential study fields, making FL the best solution in situations where security and privacy are primary issues. This research aims features to help bridge the gap between current federated AI and broad adoption in the future. In this paper, we present a comprehensive existing challenges and defense measures to evaluate its robustness and reliability. According to our study, security concerns regarding FL are more frequent than privacy issues. Communication bottlenecks, poisoning, and backdoor attacks final part, we detail future research that will assist FL in adapting to real-world settings.

❌Link

🔉@infosectube
📌youtube channel

🔻🔻Red Teaming LLM Applications🔻🔻

What you’ll learn in this course:

Learn how to test and find vulnerabilities in your LLM applications to make them safer. In this course, you’ll attack various chatbot applications using prompt injections to see how the system reacts and understand security failures. LLM failures can lead to legal liability, reputational damage, and costly service disruptions. This course helps you mitigate these risks proactively. Learn industry-proven red teaming techniques to proactively test, attack, and improve the robustness of your LLM applications.

Link

🔉@infosectube
📌youtube channel

🟣سری آموزش های دوره owasp master class🟣

🔻Owasp Master Class- HTTP -Part1
🔻Owasp Master Class- HTTP -Part2
🔻Owasp Master Class- HTTP -Part3
🔻Owasp Master Class- HTTP -Part4
🔻Owasp Master Class- HTTP -Part5
🔻Owasp Master Class- HTTP -Part6

مدرس: میثم منصف

🔉@infosectube
📌youtube channel

🟣سری آموزش های دوره owasp master class🟣

🔻Owasp Master Class- Bypass Uploader
🔻Owasp Master Class- SQL INJECTION
🔻Owasp Master Class- XXE
🔻Owasp Master Class- Broken Authentication
🔻Owasp Master Class- Web Service
🔻Owasp Master Class- Web Headers
مدرس: میثم منصف

🔉@infosectube
📌youtube channel

#تعرفه خدمات فنی تخصصی انفورماتیک سال ۱۴۰۳
سازمان نظام صنفی رایانه‌ای کشور
نسخه ۱.۰۲ (اردیبهشت ماه ۱۴۰۳)
🔉@infosectube
📌youtube channel

https://t.iss.one/hamster_kombat_boT/start?startapp=kentId432906482
Play with me, become cryptoexchange CEO and get a token airdrop!
💸 2k Coins as a first-time gift
🔥 25k Coins if you have Telegram Premium

🟣سری آموزش های دوره owasp master class🟣

🔻Owasp Master Class- BurpSuite and Command Injection

🔻Owasp Master Class- Command Injection 2
🔻Owasp Master Class- Same Origin Policy (SOP)
🔻Owasp Master Class- XSS
🔻Owasp Master Class- CORS Misconfigurations
🔻Owasp Master Class- Solve Challanges
مدرس: میثم منصف

🔉@infosectube
📌youtube channel

🔻Shellcode Injection🔻

Shellcode injection (also known as Portable Executable (PE) injection) is a popular means of process injection that involves writing malicious code into another process’s virtual address space and executing it within it.
Steps involved with shellcode injection include:
1)Opening a handle to the victim process.
2)Allocating memory within the target process.
3)Writing shellcode into allocated memory space
4)initiating its execution via new threads.

=========================================
#cybersecurity #infosectube #hacking #shellcode
=========================================
🔉@infosectube
📌youtube channel

🔻Reflective DLL Injection🔻

Shellcode injection (also known as Portable Executable (PE) injection) is a popular means of process injection that involves writing malicious code into another process’s virtual address space and executing it within it.

More



=========================================
#cybersecurity #infosectube #hacking #Reflective_DLL_Injection

=========================================
🔉@infosectube
📌youtube channel

gargoyle is a technique for hiding all of a program’s executable code in non-executable memory. At some programmer-defined interval, gargoyle will wake up–and with some ROP trickery–mark itself executable and do some work.


=========================================
#cybersecurity #infosectube #hacking #gargoyle

=========================================
🔉@infosectube
📌youtube channel

🔴 ثبت نام برای Google CTF 2024 باز شده:

امکان ثبت نام و تیم سازی برای CTF گوگل باز شده که اگه علاقمند بودید میتونید ثبت نام کنید.

مسابقات امسال 21 تا 23 ژوئن/1 تا 3 تیر برگزار میشه.

موضوع چالشها مهندسی معکوس، وب ، pwn ، رمزنگاری ، فارنزیک و ... هستش. چالش های مهندسی معکوس و PWN سالهای قبل رو که بررسی میکردم بیشتر روی لینوکس، مرورگرها و فایلهای پایتونی بود. ویندوزی خیلی ندارن.

برای ثبت نام میتونید از این لینک استفاده کنید. برای مشاهده چالش های سالهای قبل بهمراه پاسخها هم میتونید از این لینک استفاده کنید.


جوایز :
نفر اول: 12345 دلار
نفر دوم: 5432.1 دلار
نفر سوم: 3210 دلار

=========================================
#cybersecurity #infosectube #hacking #CTF #GOOGLE

=========================================
🔉@infosectube
📌youtube channel

How to install WSL LINUX/UBUNTU on windows 10/11 (Windows Subsystem for Linux)

🔻Open PowerShell or Windows Command Prompt (cmd) in administrator mode by right-clicking and selecting “Run as administrator”

wsl --install -d Ubuntu-24.04

🔻Restart your system


==========================
#cybersecurity #infosectube #hacking #WSL

===========================
🔉@infosectube
📌youtube channel
🎁Boost Us

🔒 نکات مهم در امنیت وب: Headers

چند هدر مهم در امنیت وب:

1. X-Frame-Options:
این هدر به وب‌سایت‌ها اجازه می‌دهد تا مشخص کنند که آیا مرورگرها مجاز به اجازه نمایش وب‌سایت در یک فریم (Frame) هستند یا خیر. می‌توانید با استفاده از این هدر از حملات clickjacking جلوگیری کنید.

X-Frame-Options: DENY
X-Frame-Options: SAMEORIGIN

2. Content-Security-Policy (CSP):
با فعال‌سازی CSP، وب‌سایت می‌تواند مشخص کند که تنها از منابع معتبر (مانند خود وب‌سایت، CDN مورد اعتماد، و ...) می‌تواند اطلاعات را بارگذاری کند، و از اجرای کدهای ناامن مانند inline JavaScript یا eval() جلوگیری کند. این کار می‌تواند به شدت از حملات XSS و سرقت اطلاعات کاربران جلوگیری کند.

Content-Security-Policy: default-src 'self'

3. Strict-Transport-Security (HSTS):
این هدر به مرورگر اعلام می‌کند که فقط از ارتباطات HTTPS با سرور مورد نظر استفاده کند. این می‌تواند از حملات MITM (Man-in-the-Middle) جلوگیری کند.

Strict-Transport-Security: max-age=<expire-time>
Strict-Transport-Security: max-age=<expire-time>; includeSubDomains
Strict-Transport-Security: max-age=<expire-time>; includeSubDomains; preload

4.Referrer-Policy:
این هدر به وب‌سایت‌ها امکان می‌دهد که کنترل کنند که آیا مرورگر باید referrer را به صفحات دیگر ارسال کند یا خیر، و در صورت ارسال، چه قسمت‌هایی از URL باید ارسال شود.Referrer یک عنوان است که مشخص می‌کند از کدام صفحه وب یا منبع منتقل شده است.با استفاده از این هدر، وب‌سایت‌ها می‌توانند از افشای اطلاعات حساسی مانند URL صفحاتی که کاربر درخواست می‌دهد، جلوگیری کنند و حریم خصوصی کاربران را حفظ کنند.

Referrer-Policy: no-referrer
Referrer-Policy: no-referrer-when-downgrade
Referrer-Policy: origin
Referrer-Policy: origin-when-cross-origin
Referrer-Policy: same-origin
Referrer-Policy: strict-origin
Referrer-Policy: strict-origin-when-cross-origin
Referrer-Policy: unsafe-url

==========================
#cybersecurity #infosectube #hacking #header

===========================
🔉@infosectube
📌youtube channel
🎁Boost Us

🔰Freedium: Your paywall breakthrough for Medium!

❌How to Bypass:

The author made this story available to Medium members only. Upgrade to instantly unlock this story plus other member-only benefits.



🕸https://freedium.cfd/


==========================
#cybersecurity #infosectube #hacking #writeup #medium #free

===========================
🔉@infosectube
📌youtube channel
🎁Boost Us