/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/   → No delay

Уязвимости eSIM позволяют клонировать карты и шпионить за пользователями

Исследователи AG Security Research обнаружили уязвимости в технологии eSIM, используемой в современных смартфонах. Проблемы затрагивают программный пакет eUICC компании Kigen, который используют миллиарды устройств.

https://xakep.ru/2025/07/14/esim-problems/

⭕Top Free Blue Team Courses to Boost Your Cybersecurity Skills
The demand for Blue Team professionals — those focused on defense, detection, and response — is growing fast. If you're starting or leveling up in cybersecurity, here are some of the best free resources to get hands-on and stay ahead:
🔹 Blue Team Level 1 – Security Blue Team
Intro to SOC, SIEM, threat detection, Windows/Linux forensics.
🌐 securityblue.team
🔹 CyberDefenders
Gamified labs for SOC, DFIR, SIEM, and threat hunting.
🌐 cyberdefenders.org
🔹 IBM Cybersecurity Analyst – Coursera
Foundations, network defense, SOC tools, and incident response.
🌐 coursera.org
🔹 TryHackMe – Cyber Defence Path
Labs on Blue Team, malware analysis, SIEM, and more.
🌐 tryhackme.com
🔹 DFIR Training
Free forensics and incident response resources.
🌐 dfir.training
🔹 MITRE ATT&CK Defender Training
Learn how to apply MITRE ATT&CK for real-world defense.
🌐 attack.mitre.org
🔹 EDX – Cybersecurity Fundamentals by RIT
Core concepts and defensive strategies.
🌐 edx.org
🎯 Bonus: Google Cybersecurity Certificate (Coursera – free w/ aid)
🌐 coursera.org

Finally

JavaScript Analysis for Pentesters.

•  Вероятно, что это самое объемное руководство по анализу JavaScript-файлов для пентестеров на сегодняшний день:

•  Static Analysis:
- Gather JavaScript Code;
- Identify Endpoints;
- Detect Secrets;
- Locate Dangerous Functions;
- Discover Outdated Libraries.
•  Dynamic analysis:
- Basic Tools;
- Example Application;
- Client-Side Filtering;
- Finding the Entry Point;
- The Debugger;
- General Advice.
•  Obfuscation & Deobfuscation:
- Minification;
- Beautification;
- Source Maps;
- Minification and Analysis;
- Obfuscation;
- Deobfuscation;
- Obfuscation and Analysis.
•  Hands-On: Analyze obfuscated code:
- Example Application;
- Finding the Entry Point;
- Locating the Value of Interest;
- The Unpacking Function;
- Reconstructing the Signing Call;
- Decoding the Key;
- Signing Manipulated JWTs.
•  Local Overrides:
- Temporary Changes in Developer Tools;
- Persistent Changes in Developer Tools;
- Persistent Changes in Burp Suite.
•  Bypass code protection:
- Setup;
- Self Defending;
- Debug protection;
- Disable console output;
- General advice.
•  Wrapping Up:
- Some References.

#JavaScript #Pentest