🌐 Cyberqupiya: Достигли 209 пользователей! 🌐

С радостью сообщаем, что сообщество Cyberqupiya расширяется, и нас теперь 209! 🎉 На платформе доступно уже 27 задач, которые помогут вам прокачать навыки в области кибербезопасности.

Присоединяйтесь к нам, решайте задачи на cyberqupiya.kz и станьте частью нашего сообщества! Вступайте в группу Telegram для общения, поддержки и обмена опытом: t.me/chatgoofu 🤝

🔐 Давайте вместе развивать свои знания и навыки в кибербезопасности!

#REDTEAM #LOLAD

📚 Living Off The Land and Exploitation Active Directory
https://lolad-project.github.io/

эхх скидки на offsec -20%

https://www.offsec.com/pricing/individual/

👺 Obfuscating a Mimikatz Downloader to Evade Defender (2024)

#REDTEAM #EVASION

https://medium.com/@luisgerardomoret_69654/obfuscating-a-mimikatz-downloader-to-evade-defender-2024-b3a9098f0ae7

👺 Redteam management

https://github.com/CyberSecurityUP/Red-Team-Management

🦄 Open SysConf 2024

https://www.youtube.com/live/Egn302kDVDo

Living Off The Land Applications: Sowing the seeds for application exploitation ease.https://lolapps-project.github.io/

https://github.com/passtheticket/CVE-2024-38200

NTLM The Last Ride
#Windows #Redteam

"Detecting and mitigating Active Directory compromises", 2024.

This guidance – authored by the Australian Signals Directorate (ASD), the Cybersecurity and Infrastructure Security
Agency (CISA), the National Security Agency (NSA), the Canadian Centre for Cyber Security (CCCS), the New Zealand
National Cyber Security Centre (NCSC-NZ), and the United Kingdom’s National Cyber Security Centre (NCSC-UK) – aims
to inform organisations about 17 common techniques used to target Active Directory as observed by the authoring
agencies. This guidance provides an overview of each technique and how it can be leveraged by malicious actors, as
well as recommended strategies to mitigate these techniques. By implementing the recommendations in this
guidance, organisations can significantly improve their Active Directory security, and therefore their overall network
security, to prevent intrusions by malicious actors.