Forwarded from Proxy Bar
CVE-2025-32463 sudo
chwoot chwoot
Если честно, то я не много не понял чего CISO, да и остальные так возбудились. Дырке 2 месяца, POC 2 месяца. Да и мы тут писали\линковали уже.
Ну ладно, пусть будет.
А, ну разве что под самую свежую суду работает
EXPLOIT
#linux #sudo #lpe
chwoot chwoot
Если честно, то я не много не понял чего CISO, да и остальные так возбудились. Дырке 2 месяца, POC 2 месяца. Да и мы тут писали\линковали уже.
Ну ладно, пусть будет.
А, ну разве что под самую свежую суду работает
sudo -V
Sudo версии 1.9.17p1
Модуль политики sudoers версии 1.9.17p1
Файл грамматики sudoers версии 50
Sudoers I/O plugin version 1.9.17p1
Sudoers audit plugin version 1.9.17p1
EXPLOIT
#linux #sudo #lpe
Forwarded from Cat Seclist
Practical_Purple_Teaming_The_Art_of_Collaborative_Defense_Practical.pdf
6 MB
Forwarded from Turan Security
Flagshare - TuranSec (Shaptoli) jamosining kichik guruhi Qirg'iziston, Bishkek shahrida o'tkazilgan Cyber Ordo CTF musobaqasida 1-o'rinni qo'lga kiritdi, musobaqa Cyber Kün 2025 xalqaro konferensiyasi doirasida bo'lib o'tdi.
Junior jamoamizni birinchi xalqaro yutug'i bilan tabriklaymiz🔥
______
Our team Flagshare - junior branch of TuranSec (Shaptoli) took 1st place at Cyber Ordo part of Cyber Kün 2025 international conference which organized at Bishkek, Kyrgyzstan.
We congratulate them with first international win🔥
@TuranSecurity | www.turansec.uz
Junior jamoamizni birinchi xalqaro yutug'i bilan tabriklaymiz🔥
______
Our team Flagshare - junior branch of TuranSec (Shaptoli) took 1st place at Cyber Ordo part of Cyber Kün 2025 international conference which organized at Bishkek, Kyrgyzstan.
We congratulate them with first international win🔥
@TuranSecurity | www.turansec.uz
❤2
Turan Security
Photo
Congratulations, my friends. May you achieve even greater results in the future, Insha'Allah. 🔥🔥🔥
Shaptoli is family, not a team❤️
Shaptoli is family, not a team❤️
❤5
Forwarded from Life-Hack - Хакер
HackTheBox CTF Cheatsheet
#pentest #ctf #полезное #обучение
Этот шпаргалка предназначена для игроков в CTF и новичков, чтобы помочь им отсортировать лаборатории Hack The Box по операционной системе и сложности. В списке содержатся разборы Hack The Box от hackingarticles.
🔗 Ссылка на GitHub
LH | News | OSINT | AI
#pentest #ctf #полезное #обучение
Этот шпаргалка предназначена для игроков в CTF и новичков, чтобы помочь им отсортировать лаборатории Hack The Box по операционной системе и сложности. В списке содержатся разборы Hack The Box от hackingarticles.
LH | News | OSINT | AI
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from Turan Security
7-8-oktyabr kunlari “Kiberxavfsizlik sammiti – Markaziy Yevroosiyo, Cyberkent 3.0” doirasida tashkil qilingan CTF musobaqasida Turan Security kiberxavfsizlik tashkiloti mutaxassislari muvaffaqiyatli qatnashdi.
Jamoamiz a'zolari musobaqaning final bosqichida "Blue team" yo'nalishida 1-o'rin, "Red team" yo'nalishida 2-o'rin va "CTF MASTER" yo'nalishida 3-o'rinni egallashdi.
Bu xabarni tashqaridan o'qigan odamga bu shunchaki yaxshi xabar bo'lib eshitiladi. Lekin, bu natijalar jamoani tinimsiz mehnati va uzoq muddatli tayyorgarligi sababli.
Tadbir tashkilotchilarga o'z minnatdorchiligimizni bildiramiz. Musobaqada qatnashgan jamoalarni va eng asosiysi Turan Security jamoamizni tabriklaymiz.
@TuranSecurity | www.turansec.uz
Jamoamiz a'zolari musobaqaning final bosqichida "Blue team" yo'nalishida 1-o'rin, "Red team" yo'nalishida 2-o'rin va "CTF MASTER" yo'nalishida 3-o'rinni egallashdi.
Bu xabarni tashqaridan o'qigan odamga bu shunchaki yaxshi xabar bo'lib eshitiladi. Lekin, bu natijalar jamoani tinimsiz mehnati va uzoq muddatli tayyorgarligi sababli.
Tadbir tashkilotchilarga o'z minnatdorchiligimizni bildiramiz. Musobaqada qatnashgan jamoalarni va eng asosiysi Turan Security jamoamizni tabriklaymiz.
@TuranSecurity | www.turansec.uz
🔥3👍2🎉1
Forwarded from AppSec Guy
First image is taken at previous Cyberkent 2.0 (2024). Second one is from the last Cyberkent 3.0
This time, my team showed TuranSec's capability to work on multiple complex processes (blue team, red team, etc) at once and make it in perfect quality at the same time.
This is not some PR words, just recap of how team did it.
So, here we are, expanded, learned a lot.
This time, my team showed TuranSec's capability to work on multiple complex processes (blue team, red team, etc) at once and make it in perfect quality at the same time.
This is not some PR words, just recap of how team did it.
So, here we are, expanded, learned a lot.
🔥4👍2
https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.
#Endpoint #Security #Windows
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.
#Endpoint #Security #Windows