Купить живой трафик

2 руб / подписчик

Статистика Избранное

Sys-Admin Up

Гео и язык канала: Казахстан, Английский

Категория: Технологии

InfoSec, Hacks, Perks, Tools, IT/IS Courses, CVE… Contains part of the news that was not included in the Sys-Admin & InfoSec Channel (@sysadm_in_channel)

Связанные каналы | Похожие каналы

Гео и язык канала

Казахстан, Английский

Категория

Технологии

Статистика

Избранное

Фильтр публикаций

Скрывать удаленные

Скрывать репосты

Sys-Admin Up

22 Apr, 06:06

https://github.com/m14r41/scan4secrets

GitHub - m14r41/scan4secrets: SAST and DAST Scan Supported with 400 plus rules available for secrets and allow you add your own wordlist as well. lightweight source code scanner and for URL that detects hardcoded secrets like API keys, credentials, and sensitive information across files and folders...

SAST and DAST Scan Supported with 400 plus rules available for secrets and allow you add your own wordlist as well. lightweight source code scanner and for URL that detects hardcoded secrets like ...

79 0 5

Sys-Admin Up

21 Apr, 18:16

NVISO-BRICKSTORM-Report.pdf

BRICKSTORM Backdoor Analysis

118 0 2

Sys-Admin Up

17 Apr, 07:20

MITRE Ends? US Geoverment ends support MITRE. CVE released emergency article about it:

https://www.thecvefoundation.org/home

Letter:

https://www.linkedin.com/posts/tib3rius_breaking-from-a-reliable-source-mitre-activity-7317960862332293120-t6yt

CVE Foundation

FOR IMMEDIATE RELEASE April 16, 2025 CVE Foundation Launched to Secure the Future of the CVE Program [Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term viability, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program, a

1.5k 2 6

Sys-Admin Up

9 Apr, 09:47

Network-Security-Checklist.pdf

Checklist for Network Security

355 0 15

Sys-Admin Up

8 Apr, 13:05

Threat actors leverage tax season to deploy tax-themed phishing campaigns

https://www.microsoft.com/en-us/security/blog/2025/04/03/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns/

Threat actors leverage tax season to deploy tax-themed phishing campaigns | Microsoft Security Blog

As Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including RaccoonO365, AHKBot, Latrodectus, BruteRatel C...

2.4k 2 3

Sys-Admin Up

8 Apr, 13:01

CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation

https://www.huntress.com/blog/crushftp-cve-2025-31161-auth-bypass-and-post-exploitation

CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation | Huntress

Huntress observed in-the-wild exploitation of CVE-2025-31161, an authentication bypass vulnerability in versions of CrushFTP and further post-exploitation leveraging MeshCentral and other malware.

244 0 4

Sys-Admin Up

5 Apr, 13:29

OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code

https://cybersecuritynews.com/openvpn-vulnerability-let-attackers-crash-servers/

P.S. Thx Denis for the link 🫶

OpenVPN Vulnerability Let Attackers Crash Servers & Execute Remote Code

The OpenVPN community released version 2.6.14 on April 2, 2025, specifically to address this server-side vulnerability.

319 0 9

Sys-Admin Up

3 Apr, 14:27

wsrp4echo - 0day Chain Vulnerability

Web Services for Remote Portlets (WSRP) is an OASIS-approved network protocol standard designed for communications with remote portlets. Uses in:

- Oracle WebCenter
- IBM WebSphere
- Microsoft SharePoint

https://medium.com/@aryanchehreghani/wsrp4echo-0day-chain-vulnerability-fd2c395dc45b

P.S. Thx Reaza for the link 🤝

wsrp4echo - 0day Chain Vulnerability

Message From wsrp4echo : Hello. I’m wsrp4echo. I’m not just a vulnerability — I’m a chain reaction. Born not from a bug, but from trust…

2.2k 2 8

Sys-Admin Up

1 Apr, 10:40

Red Teaming with LLMS.pdf

Practical Techniques for Attacking AI Systems

269 0 10

Sys-Admin Up

28 Mar, 23:21

Computer Systems Fundamentals

https://w3.cs.jmu.edu/kirkpams/OpenCSF/Books/csf/html/index.html

349 0 10

Sys-Admin Up

27 Mar, 12:42

european_salary_analytics.pdf

European IT Salary Analysis

394 0 13

Sys-Admin Up

27 Mar, 12:40

https://github.com/edoardottt/csprecon

GitHub - edoardottt/csprecon: Discover new target domains using Content Security Policy

Discover new target domains using Content Security Policy - GitHub - edoardottt/csprecon: Discover new target domains using Content Security Policy

357 0 5

Sys-Admin Up

27 Mar, 06:02

https://github.com/M507/RamiGPT

GitHub - M507/RamiGPT: Autonomous Privilege Escalation using OpenAI

Autonomous Privilege Escalation using OpenAI. Contribute to M507/RamiGPT development by creating an account on GitHub.

323 0 5

Sys-Admin Up

26 Mar, 15:27

Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

https://blog.cloudflare.com/open-sourcing-openpubkey-ssh-opkssh-integrating-single-sign-on-with-ssh/

Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project. This enables users and organizations to configure SSH to work with single sign-on technologies like OpenID Connect, removing the need to manually manage & configure SSH keys without adding a trusted party other than your ...

313 0 4

Sys-Admin Up

25 Mar, 11:44

https://cybernews.com/security/keenetic-router-data-leak-puts-users-at-risk/

Massive Keenetic data leak uncovered: 1M households could be exposed

Users of Keenetic routers, mainly in Russia, have been exposed in a major data leak revealing sensitive credentials, device details, network configurations, and logs.

290 0 1

Sys-Admin Up

23 Mar, 18:55

https://www.ptsecurity.com/ru-ru/research/threatscape/

Уязвимости и угрозы

284 0 4

Sys-Admin Up

21 Mar, 14:11

Linux-Privilege-Escalation-Cheat.pdf

Linux Privilege Escalation Cheat

323 0 16

Sys-Admin Up

20 Mar, 15:02

60 Million downloads with Vapor from Google Play

Vaport report:

- https://go.integralads.com/rs/469-VBI-606/images/AMER_VAPOR_THREAT_REPORT_IAS.pdf

340 0 3

Sys-Admin Up

13 Mar, 10:44

https://github.com/dstotijn/hetty

GitHub - dstotijn/hetty: An HTTP toolkit for security research.

An HTTP toolkit for security research. Contribute to dstotijn/hetty development by creating an account on GitHub.

421 0 7

Sys-Admin Up

10 Mar, 00:19

https://github.com/yehia-mamdouh/ZeroProbe

GitHub - yehia-mamdouh/ZeroProbe: ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It provides a set of enumeration tools to identify security vulnerabilities, analyze system protections, and facilitate exploit develo...

ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It provides a set of enumeration tools to identify security vulne...

447 0 4

Показано 20 последних публикаций.

969

подписчиков

Статистика канала

Популярное в канале

Threat actors leverage tax season to deploy tax-themed phishing campaigns https://www.microsoft....

wsrp4echo - 0day Chain Vulnerability Web Services for Remote Portlets (WSRP) is an OASIS-approve...

MITRE Ends? US Geoverment ends support MITRE. CVE released emergency article about it: https://w...

European IT Salary Analysis

https://github.com/edoardottt/csprecon