Muhammed

a Father, a husband and a software security engineer whose dream to be a pilot 😃🇸🇪

[Muhammed @MMBassem]

Yaaa😎

[AI Security Engineers @aiseceng]

🚨 Missed the eye-opening session on cloud native supply chain security by @sublimino at #DSC24? Don't worry, you can catch up on the recording! Explore the vulnerabilities & challenges of trusting the code we run in production.
Watch now: 🎥🔒 https://t.co/z3v0th27t3

[Bilgin Ibryam @bibryam]

Unleash your inner #SSH ninja! 🥷 with
"SSH Kung Fu"!

https://t.co/RFeYu7tWtd

[DefCamp @DefCampRO]

It's official. One of the largest #CTF competitions from the CEE is back. We’ve just scheduled the qualification phase for #DefCamp Capture the Flag (D-CTF), on @cyberedu_ro!

🚩 Register for #dctf here 🚩 https://t.co/GTsUkGqqxJ 🚩

Good luck at hacking before getting hacked!

[Python Crafted @PythonCrafted]

DevOps Crash Course (Docker, Terraform, and Github Actions)
#devops #docker #terraform #github
https://t.co/6B8ZrQfgSl

[Javarevisited @javarevisited]

How does HashMap work in Java?
1. internal working - https://t.co/k9WY6VjMt0
2. get and put working -https://t.co/4GawuxQn2p
3. core java courses - https://t.co/Ri7U7mOtpq Top 5-10-advanced-core-java-courses-for-experienced-developers.html

[Florian Hansemann @CyberWarship]

"Bypassing Windows Defender and PPL Protection to dump LSASS without Detection"

#infosec #pentest #redteam
https://t.co/7GnA7dIi51

[Javarevisited @javarevisited]

10 System design concepts you should learn.
1. Caching
2. DB Sharding
3. load-balancing
4. replication
5. fault-tolerance
6. high-avaibility
7. Performance
8. scalability
9. Performance
10. Indexing
learn more on DesignGuru - https://t.co/1cnctTTdSY

[Emad Shanab - أبو عبد الله @Alra3ees]

Nuclei Templates Collection:- Updated.

https://t.co/3tLlvAsLBr

[HackGit @hack_git]

🦀 REC2

REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs written in Rust.

https://t.co/FzU9LMoW5o

#infosec #pentesting #redteam

[Alex Xu @alexxubyte]

How do we transform a system to be Cloud Native?

The diagram below shows the action spectrum and adoption roadmap. You can use it as a blueprint for adopting cloud-native in your organization.

For a company to adopt cloud native architecture, there are 6 aspects in the spectrum:

1. Application definition development
2. Orchestration and management
3. Runtime
4. Provisioning
5. Observability
6. Serverless

Most companies start from Step 1 containerization and gradually adopt CI/CD, service orchestration. This microservice architecture significantly increases the number of instances to manage, so systematic testing and monitoring are required to increase plant observability.

In fact, a lot of companies stop at Step 4 without moving to service mesh and cloud-native networking due to the complexity and the required DevOps talent.

Over to you: Where does your system stand in the adoption roadmap?

Reference: Cloud & DevOps: Continuous Transformation by MIT
Redrawn by ByteByteGo

–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/uc5M7Cdq84

[0xor0ne @0xor0ne]

Introduction and practice to Linux kernel exploitation using CVE-2022-2602 as example

@LukeGix: https://t.co/YEj7ldOz9f
@kiks7_7: https://t.co/oyfoaewegv

#Linux #kernel #exploit #infosec #cybersecurity

[PT SWARM @ptswarm]

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity.

Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it.

Update your software ASAP!

[0xor0ne @0xor0ne]

Interesting writeup about MikroTik routers reverse engineering embedded/IoT by @hgarrereyn and @__comedian

Blog post: https://t.co/K5Dm9iQzZP
Slides (RECon): https://t.co/00xKQFPaGg

#iot #embedded #mikrotik #reverseengineering #cybsersecurity

[CODE WHITE GmbH @codewhitesec]

Exploiting ASP .NET TemplateParser to get RCE in Sitecore (CVE-2023-35813) and SharePoint (CVE-2023-33160) by @mwulftange in two parts: part 1 at https://t.co/viBnUPO9kU is live now and part 2 will follow in a few days...stay tuned!

[0xor0ne @0xor0ne]

Intro series on reverse engineering embedded/IoT devices bootloaders (U-Boot)
Credits @ShielderSec

Part 1: https://t.co/qkhvDR13V7
Part 2: https://t.co/elBPLmTPCM

#iot #embedded #uboot #infosec #reverseengineering

[Start.me @startme]

This is an interesting statistic: a page that didn't even reach the top three of most followed #OSINT pages on our platform has seen the more traffic than all of them combined! Can you tell us what's happening here? https://t.co/g6xaYqbOTv

[Alex Xu @alexxubyte]

OAuth 2.0 Flows

Authorization Code Flow: The most common OAuth flow. After user authentication, the client receives an authorization code and exchanges it for an access token and refresh token.

Client Credentials Flow: Designed for single-page applications. The access token is returned directly to the client without an intermediate authorization code.

Implicit Code Flow: Designed for single-page applications. The access token is returned directly to the client without an intermediate authorization code.

Resource Owner Password Grant Flow: Allows users to provide their username and password directly to the client, which then exchanges them for an access token.

Over to you - So which one do you think is something that you should use next in your application?

–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/uc5M7Cdq84

[LiveOverflow 🔴 @LiveOverflow]

In depth look at Zenbleed (CVE-2023-20593)

[0xor0ne @0xor0ne]

Interesting blog post on embedded devices reverse engineering (Brightway (Xiaomi) scooters)

https://t.co/xAyTqQjSND

#reverseengineering #cybersecurity #infotech

[Nicolas Krassas @Dinosn]

Reverse Engineering: Injection Series Part 4 — Blue Team Labs https://t.co/eU1KsZPV1o