InfoSecTube
1.71K subscribers
681 photos
44 videos
273 files
1.71K links
Subscribe to this channel if… you enjoy fun and educational videos about technology & CyberSecurity & ...
YouTube Channel:
https://youtube.com/c/InfoSecTube


Contact:
@InfoSecTube_Bot
Download Telegram
🔥 چت جی پی تی پلاس شده 2 دلار بعضی جاها 1 دلار!! !

بچه ها OpenAI اومده یه آفر فوق العاده محدود گذاشته که خیلی راحت میتونید اشتراک پلاس رو فقط با 2 دلار اکانت شخصی خودتون فعالسازی کنید!

این فرصت خوب واقعا کوتاهه و هنوز بعد چند روز معلوم نیست قراره تا کی بمونه

☠️حتما یادتون باشه قبل از بیل بعدیتون غیرفعالش کنید:)


https://chatgpt.com/?promo_campaign=team1dollar#team-pricing

https://chatgpt.com/?numSeats=5&selectedPlan=month&promo_campaign=team1dollar#team-pricing-seat-selection-direct

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
👎3👍1
🌐 What are SYN Cookies—and what do they teach us about secure design?

🛡 SYN Cookies defend against SYN flood attacks (DoS).
Instead of storing info for every half-open TCP handshake, the server:

🔢 Encodes state into the TCP sequence number
🧠 Allocates memory only after receiving the final ACK

📌 This follows Principle P20: Reluctant Allocation
👉 Don’t commit resources until necessary
👉 Helps prevent resource exhaustion attacks

💡 Smart, efficient, secure.

#CyberSecurity #SYNcookies #TCP #DDoS #ReluctantAllocation #SecurityPrinciples #DoSProtection #InfoSec #NetworkSecurity
🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🧠 “Wait... That’s Not Normal.”
Your system's acting like Sherlock Holmes — quietly watching everything until something weird happens. That’s Anomaly-Based Detection in action. 🔍🕵️

🎯 How It Works:
Imagine your computer has a memory of what “normal” looks like:
💡 CPU at 15%
💡 Daily logins from Canada
💡 200MB/day in outbound traffic

Then one day...
⚠️ CPU spikes to 95%
⚠️ A login from Russia at 3AM
⚠️ 5GB of data leaves your server in an hour

Your system raises the alarm — because something's off.
No signature needed. Just deviation from normal 📉📈

🧪 Real-World Example:

👤 Employee logs in at 2AM from a location they’ve never used

🌊 Sudden flood of ICMP packets (ping storm) from an internal device

💬 A server process that never accessed the internet suddenly starts sending large payloads

All of these could mean:
👉 Zero-day malware
👉 Insider threat
👉 Compromised account

Why It’s Powerful:

Catches new, unknown attacks (zero-days)

Can spot insider threats or misbehaving users

Doesn’t rely on a predefined blacklist

But It’s Tricky:


High false positives
— unusual ≠ malicious

Needs time
to learn normal behavior

Constantly needs tuning to stay accurate

🧩 TL;DR
Anomaly-based systems don’t look for known threats — they look for weirdness.
When something breaks the pattern, they speak up.

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
InfoSecTube pinned «☠️Blockchain Layers : L0, L1, L2, L3 — The Secret to Speed, Security & Scalability! 🔒 | InfoSecTube 🎯@InfoSecTube 📌YouTube channel 🎁Boost Us»
🧠 3. Backpointer-Based Consistency (BBC)
🔍 What is it?
A technique where every object has a pointer back to its parent or reference holder.

🧩 Used in distributed and object-based file systems (like Ceph)

Key Idea:
You can verify consistency by following backpointers

Helps detect orphaned blocks, inconsistent metadata, or leaks

📌 Example:
If a file block has a pointer back to the inode, you can validate its ownership easily.

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
اگر کاربر #تلگرام Premium هستید، و محتویات و پست‌های کانال مورد توجهت قراره گرفته با Boost کردن کانال ما، در فعال کردن قابلیت انتشار استوری به ما کمک کنید تا بتوانیم محتواهای جذاب را در استوری تلگرام با شما به اشتراک بگذاریم 🚶‍♂️🚶‍♂️❤️🌻
👇👇
https://t.iss.one/boost/InfoSecTube
🎯 Reconnaissance: Know Thy Target

Before any hacker launches an attack, they don’t go in blind.
They study you. They learn your network’s habits, weaknesses, and hidden doors.
That’s the recon phase — the cyber version of casing a bank. 🕶📷

📘 “The attacker’s goal in the reconnaissance phase is to learn as much as possible about the target, including network topology, services, and users.”

🔍 How Recon Works:
Reconnaissance can be:
🟢 Passive (no contact with the target)
🔴 Active (direct probing of the target)

Either way, the attacker is building a blueprint of your digital footprint.

🧪 Examples:

🔎 whois to see domain ownership

🧠 nslookup to grab DNS records

🕵️‍♂️ Google dorking to dig up exposed PDFs, login portals, cameras

🌐 Attempting DNS zone transfers (if misconfigured 😬)

📂 Scraping metadata from public files (author names, file paths, usernames)

Even your job post saying “experience with Cisco routers” can be recon gold 💰

🛡 Why It Matters:
If an attacker knows your services, subdomains, employees, and tech stack — they already have the upper hand before sending a single exploit.

🧩 TL;DR
Recon is the hacker’s homework phase.
The more they know about you, the better they plan the next move.
🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🚨 Drive-By Download Attack Chain – How You Get Hacked Without Clicking 🎯🖱

Drive-by downloads are stealthy cyberattacks where just visiting a website can infect your system — no clicks required. Often delivered through compromised ad networks, these attacks can hit even legitimate websites.
💥 Realistic Attack Sequence:
1️⃣ Legit Site, Malicious Ad
A trusted website loads ads from a third-party network. One of these ads contains hidden malicious JavaScript.

2️⃣ Redirection Game
The script redirects the user’s browser to an attacker-controlled site — silently, in the background.

3️⃣ Exploit Trigger
The malicious site checks your system for vulnerabilities (e.g., outdated browser, Flash, Java, PDF reader).
It then launches an exploit — like a heap spray or zero-day PDF bug.

4️⃣ Silent Infection
If the exploit works, the attacker downloads and runs malware on your device — spyware, ransomware, or even remote access tools — without your consent or any visible download.

⚠️ Why It’s Dangerous:
No user interaction needed

Targets even high-traffic, reputable sites

Often part of malvertising campaigns

Used in nation-state espionage and mass malware distribution

🛡 Protection Tips:
🔒 Keep browsers and plugins fully updated
🛑 Use ad blockers and script blockers
🌐 Use secure browsers with sandboxing
🔍 Enable click-to-play for Flash and Java
🧼 Regularly scan for malware with reputable tools

📌 One bad ad is all it takes. Stay paranoid, stay patched.

#DriveByDownload #Malvertising #WebSecurity #CyberAttack #ExploitChain #InfoSec #BrowserSecurity #AdNetworkHacks #MalwareDistribution #StaySafeOnline

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
InfoSecTube pinned «🔐 How to Keep Your Crypto Safe in 2025 | Stop SIM Swaps, Phishing, & ATO Hacks Link: https://youtu.be/ROADQd_EK9g 🎯@InfoSecTube 📌YouTube channel 🎁Boost Us»
🧠 What Is the Process List and PCB in an OS?

Every time you run a program, the OS doesn’t just launch it blindly — it carefully tracks it. But how? Through something called the Process List and Process Control Blocks (PCBs). 🧩

📋 What’s the Process List?
It’s a data structure in the kernel that keeps track of all active processes in the system — like a real-time to-do list for the OS.

📦 Each process has an entry in this list, called a Process Control Block (PCB).

🧱 What’s Inside a PCB?
A PCB is a structure that stores everything the OS needs to manage and resume a process, including:

🔢 Process ID (PID)

🧠 CPU registers & state

🗂 Memory mappings

🔄 Scheduling info (priority, state)

🧵 Pointers to parent/child processes

🛡 Permissions and user IDs

🧪 Example:
When you run:

firefox &

The OS:

Creates a PCB with all relevant info for firefox

Adds it to the process list

Uses it to track, schedule, or kill firefox later

📌 When ps, top, or htop show running processes — they’re accessing data from the process list!

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🐱Zero Trust is a security framework that operates on the principle of "never trust, always verify," meaning that no user, device, or application should be trusted by default, and access to resources should be verified before granting permission. It's a modern security approach that moves away from the traditional perimeter-based security model, where everything inside the network was assumed to be safe.

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🍿Rate limiting is a technique used to control the number of requests a client can make within a specific timeframe to prevent abuse, overload, and ensure fair usage of resources. It involves setting thresholds for the maximum number of requests within a window, and subsequent requests exceeding the limit are delayed, throttled, or blocked.
Types:
IP-based: Limits based on the client's IP address.
Server-based: Limits based on the server's capabilities.
Geography-based: Limits based on the user's location.
🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🔍 Scenario: Protocol Misuse in IoT Smart Locks

🔐 The lock uses TLS to talk to the cloud — sounds secure, right?
😬 But all devices share the same certificate & private key!

🚨 What could go wrong?


🧨 One device hacked = all locks compromised
🔓 Attacker can impersonate any lock
📡 Can decrypt all traffic
Breaks confidentiality, authenticity
🔗 Violates P1: Security is a Weakest-Link Problem

🛠 Fix it:

Give each device a unique key pair & certificate
Use a manufacturer CA
Or deploy short-lived certs + secure enrollment

Don’t let convenience destroy security!

#IoTSecurity #TLS #PKI #DeviceSecurity #SmartLock #CyberSecurity #ZeroTrust #SecurityPrinciples #WeakestLink #InfoSec

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
مفهومِ Mixture-of-Recursions (MoR) در حوزه مدل‌های زبانی بزرگ خلاصه‌اش اینه که MoR با استفاده از یک روش هوشمندانه فقط برای «توکن‌های سخت‌تر» از پردازش عمیق‌تر استفاده می‌کنه ... یعنی اون بخش‌هایی از متن که نیاز به دقت بیشتر دارن، چند بار در یک بلاک پردازشی مشترک چرخ داده می‌شن.

🧠 نکات جالب مقاله:


فقط از یک بلاک ترنسفورمر مشترک استفاده می‌شه.

برای توکن‌هایی که «نیاز به فکر بیشتری» دارن، اون بلاک چند بار تکرار می‌شه.


نتیجه: مدل با نصف تعداد پارامترها و دو برابر سرعت، کیفیت مشابه یا حتی بهتر می‌ده!

این روش مثل داشتن soft experts برای توکن‌های چالش‌برانگیز عمل می‌کنه. ایده‌ای خلاقانه‌ست که باعث می‌شه محاسبات فقط جایی استفاده بشن که واقعاً لازمن.

https://www.alphaxiv.org/abs/2507.10524
🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🔎 Vulnerability Assessment: Security Check-Up Time

Think of this like a routine health check — but for your network.
No breaking in, no stress tests — just a scanner asking politely:
🗣 “Hey... is this door locked? Are you running outdated software?”

📘 “Vulnerability scanners check for known weaknesses, misconfigurations, or missing patches in target systems.”

🩺 What It Does:

Scans your systems for known vulnerabilities (e.g., CVEs)

Flags misconfigurations, weak SSL settings, or unpatched services

Usually non-intrusive — it checks, but doesn’t poke too hard

Perfect for regular security hygiene

🧪 Real-World Examples:

🛠 Nessus finds a Windows server missing a critical SMB patch

🔓 OpenVAS detects open ports running outdated FTP

🔐 Qualys warns about weak TLS ciphers and exposed admin panels

⚠️ What It Doesn't Do:

It doesn’t exploit — just detects

It won’t find zero-days or custom misconfigurations

Results still need a human touch to triage and fix

🧩 TL;DR
A vulnerability scanner is like a security X-ray — it shows you the weak spots before an attacker does.
Run them regularly. Patch what they find. Repeat. 🔁

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
📚 OS Concepts — What is Journaling in File Systems? 🧾💾
Ever wondered how your file system survives a crash without losing everything? Meet journaling!

🔹 What is Journaling?
It’s like a safety notebook 📝
📍 The OS logs (journals) changes before doing them for real
🧯 Helps recover cleanly after a crash!

🔧 How it works:

Log operation to the journal

Apply changes to disk

On crash: Use journal to replay or rollback

📌 Types:

🟢 Writeback → Metadata only

🟡 Ordered → Metadata first, then data

🔴 Full → Metadata + data (most reliable)

Used in:

ext3, ext4, xfs, NTFS
Not in ext2, FAT32

🧠 Journaling = Crash-proof file system!

#OS #Journaling #FileSystem #ext4 #CrashRecovery #InfoSecTube

🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🛡 HSTS: HTTP Strict Transport Security – Your Silent TLS Bodyguard 🔐🌐

HSTS (HTTP Strict Transport Security) is a web security policy mechanism that helps protect websites and users from protocol downgrade attacks and cookie hijacking.

🔧 What Does HSTS Do?

When a site sends an HSTS header like:


Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

…it tells browsers:

Only connect via HTTPS (not HTTP)
Never allow fallback to insecure HTTP
Enforce this policy for a set time (e.g., 1 year)
Optionally apply to subdomains
Preload it into browsers for instant protection

🛠 HSTS as a Tool for TLS Hardening
Think of HSTS as a lock-in tool for HTTPS:


🔒 Prevents SSL stripping (e.g., in a Man-in-the-Middle attack)
🚫 Blocks attempts to downgrade to HTTP
📦 Helps secure cookies and authentication tokens
📈 Boosts TLS adoption and trustworthiness of your domain



🎯@InfoSecTube
📌YouTube channel
🎁Boost Us
🔴 افزایش امنیت APIها با Token-Based Authentication و JWT

🔸 یکی از مهم‌ترین دغدغه‌های توسعه‌دهندگان در طراحی سرویس‌های مبتنی بر وب، حفظ امنیت ارتباط بین کلاینت و سرور است. احراز هویت مبتنی بر توکن، راهکاری مدرن برای حل این چالش محسوب می‌شود.

🔹 در سیستم Token-Based Authentication، پس از ورود موفق کاربر، سرور یک توکن رمزنگاری‌شده به نام JWT (JSON Web Token) تولید و به کلاینت ارسال می‌کند. این توکن شامل اطلاعات کاربر و تاریخ انقضا بوده و در هر درخواست بعدی، به‌همراه درخواست به سرور ارسال می‌شود. برخلاف کوکی‌ها، JWT نیازی به ذخیره شدن در سرور ندارد، بنابراین ساختار stateless برای سرورها فراهم می‌شود که در مقیاس‌های بالا بسیار مفید است. همچنین، استفاده از الگوریتم‌هایی مانند HS256 یا RS256 امنیت توکن‌ها را تضمین می‌کند.

⭕️ نتیجه ی نهایی این است که JWT با ترکیب سادگی، کارایی و امنیت، به استانداردی محبوب در توسعه‌ی APIهای مدرن تبدیل شده است.
🎯@InfoSecTube
📌YouTube channel
🎁Boost Us