Pablo Cyber

Don’t be a Cyber fool. Sometimes people call me Juan, sometimes they call me Pablo.

[Krishna Agrawal @Krishnasagrawal]

🚨Anthropic just showed a 24-minute workshop on how to actually do prompts for Claude.

Taught by the people who built it.

Free. No registration. No paywall.

I've seen $300 courses that don't cover what they teach in the first 8 minutes.

Watch it and bookmark it now!

Video Credit : Respective owner

[Radec @realradec]

nah a psp spread is insane 💀

[Mehdi @MehdiHacks]

Want to extend your SDR or spectrum analyzer’s range? Most cap at 6GHz, but a down-converter shifts higher frequencies into measurable ranges. I use one from Lotus Communication Systems (made in USA) to analyze signals up to 14GHz!

Example photo attached: A 12GHz signal converted to 3GHz.
It’s software-defined, so I can adjust the LO frequency. (e.g., 8GHz input + 2GHz LO = 6GHz & 10GHz outputs. Mixers produce both sum and difference of the 2 signals, so it's also an up-converter)

Note: These mixers degrade phase noise & amplitude of the input signal.

[cemaxecuter @cemaxecuter]

Messing with gain value and changed bandwidth from 9 to 10. This is using the Uhd based conf and LibreSDR. @thebaldgeek

[cemaxecuter @cemaxecuter]

5Ghoul w/ LibreSDR against vulnerable modem ✅ (had to swap out docker b210 bin)..

[Science girl @sciencegirl]

The physics of light

Sound on

[Grzegorz Tworek @0gtweet]

A very friendly reminder, especially for non-corporate PCs protected with BitLocker: if you are not sure if you have your Recovery Password handy, you can display it any moment with "manage-bde -protectors -get c:"
Store the password in your password manager and make its backup!

[LetsDefend @LetsDefendIO]

Starting a SOC Analyst Career

[hacker.house @hackerfantastic]

Governments that want to backdoor end2end (e2e) encrypted communications in use by the public should lead by example... Fear any government that uses cryptography to hide its secret communications but takes issue with you doing the same.

[cemaxecuter @cemaxecuter]

Just grabbed one of these babies in case I need to put any 'sniffers' to the test – you know, to test that FCC Remote ID requirement 😉 @electronicats #ComplianceIsKey

[Mike Miller @mikemillercyber]

Dear Cyber Security Career Seeker: If You Don't get Grease on your Hands, You Won't Succeed.

When I'm mentoring, the most common thing I hear is "I want to be in Cyber Security". This excites me. This is a great field to work in. However, when someone says they want to get into Cyber Security it is like saying they want to play sports. Which sport do you want to play? Do you want to be on offensive security? How about Governance, Risk, and Compliance (GRC)? Even better, how about defensive security?

Any of these paths that you choose can still be extremely confusing. Picking a path is important, otherwise it can be overwhelming. However, even after choosing a direction, the path isn't always clear.

What if you aren't learning the right SIEM for the next job you apply for? Maybe you are learning Splunk, but what if your next job requires something else? What if your bootcamp is teaching you Nexpose, but there seems to be more demand for Nessus? I hear OpenVas is good, so should you be learning that? Maybe?

Let me make this easy for you. No matter what tool you use, they all have one thing in common. It is one thing that hasn't changed much at all and is at the core of how everything works, including every network as well as the entire internet. It's this simple thing called TCP/IP. What is it? It stands for Transmission Control Protocol / Internet Protocol. Without getting technical, it is what makes every single device you have work. The cell phone you carry, uses TCP/IP. Your laptop, uses TCP/IP. EVERYTHING that communicates over the internet uses TCP/IP.

Every defensive tool uses TCP/IP. Every offensive tool uses TCP/IP. If you understand it, you have the ability to understand any tool that exists. If you learn how TCP/IP works and how to analyze network packets you will be way ahead of most.

Think of it like this. TCP/IP is basically the motor of the internet. If you learn how cylinders, pistons, crankshafts, valves, and heads work, it doesn't matter what make or model the motor is placed in, you will still understand it. If you take an auto mechanics class, they don't start by teaching you different models of cars. They start by teaching you how the motor works.

Don't getting stuck worrying about which tool to learn. Learn the fundamentals and learn them well. If you want to be a blue teamer, understanding TCP/IP and knowing how to analyze packets will give you the ability to drive any SIEM out there. If you want to be a Penetration Tester, understanding TCP/IP and packets will help you determine your game plan for attack. If you are pursuing GRC, understanding how the internet works will play a major part in helping an organization secure itself.

If you're not willing to get greasy tearing the motor down, leave the tools in the tool chest. If you ARE willing, you'll learn how to keep it running forever.

Are you willing to get grease on your hands?

Want to Work with me? Visit me at ➡https://t.co/GcdJet8jHq⬅.

#cybersecurity #informationsecurity #infosec #leadershipbyexample

[HackGit @hack_git]

TelegramRAT

Cross Platform Telegram based RAT that communicates via telegram to evade network restrictions

https://t.co/BlsCVPpzCX

#infosec #pentesting #redteam #cybersecurity

[☆オードリーAudrey☆ @aitaikimochi]

I found out something about the Circle of Malius painting from the FF16 artbook that was quite interesting.

There are three depictions of this mural in the artbook that clearly shows the absolute gigantic scale that is Leviathan.

If you see closely in this photo, Titan and Odin are both standing on something black with fins sticking out.

In the artbook's depiction, Leviathan's entire body clearly wraps behind Shiva, twists behind Ramuh and Garuda, goes under Titan's feet, and wraps under Sleipnir's hooves.

Its tail then goes way further down this painting mural, which means that Leviathan is probably the largest Eikon out of all of them.

I wonder how such a gigantic Eikon went missing??

[X @TheMsterDoctor1]

nmap -sS -sV -Pn -O -A -sC iptarget

-sS: SYN Scan
-sV: Version/Service Info
-Pn: skip host discovery
-O: OS scan
-A: OS version Detection
-sC: equivalent to --script=default

#BugBounty #bugbountytip

[Mike Miller @mikemillercyber]

Dear Cyber Security Wannabe, Want a Career in Cyber Security? Here are 11 Training Videos that will help you become a SOC Analyst.

Knowledge is Power.

No one cares how you gain your knowledge. They just care that you know it. When you can describe how your use your favorite SIEM, have a deep conversation about packet analysis, or how to tune an IDS, they aren't going to care whether you acquired your knowledge through a boot camp, college, or YouTube.

I have found 11 video resources that will help you fine tune your skills in Defensive security so that you can become a valuable SOC Analyst. I have put the full article with Links on my blog.

🔵 SIEM Tools:
Splunk
IBM QRadar
LogRhythm
Alienvault
Full article with Links - https://t.co/PM4IaFzzVe

🔵IDS Tools:
Snort
OSSEC
Full article with Links - https://t.co/PM4IaFzzVe

🔵EDR/XDR Tools:
CrowdStrike
Carbon Black
SentinelOne
Defender for Endpoint
Full article with Links - https://t.co/PM4IaFzzVe

🦈Wireshark - Everything the internet does uses packets. Being able to break down and analyze packets to fully understand them and know what they are doing will truly help you understand nearly any SOC tool that you touch.
Full article with Links - https://t.co/PM4IaFzzVe

These are just SOME of the tools to learn, however, if you understand these and can communicate clearly about them, you are paving the way to a great future working from your pajamas. Remember, the more knowledge you have, the more powerful force you will become in this great field.

Want to Work with Me? There are Three Ways I can Help:

1. If you want to break into Cyber, let's talk at ➡https://t.co/GcdJet8jHq⬅.

2. If you are already in Cyber but stuck, let's talk. ⬆

3. If your organization needs a security provider that rates in the Top 250 in the United States (Pentesting, vCISO services, Security Assessments), let's talk. My PMs are always open. I'll hook you up.

#cybersecurity #infosec #informationsecurity #security

[Het Mehta @hetmehtaa]

Search Engines for Hunters -

1. https://t.co/oPKhVGWUVf - Google Dorks
2. https://t.co/vRSwQaUBDG - Servers
3. https://t.co/FkE3SxjcDP - Emails
4. https://t.co/pvje86VL19 - Vulnerabilities
5. https://t.co/o9cADXdoop - Attack surface
6. https://t.co/2UL7FY1tBM - Attack surface

#Infosec #BugBounty

[Daniel Kelley @danielmakelley]

4 Great Resources To Study For CompTIA Security+

• Jason Dion's Udemy Series
• Professor Messer's Security+ Videos
• Darril Gibson's "Get Certified Get Ahead"
• CompTIA Security+ Practice Exams

[Daniel Kelley @danielmakelley]

29. Packet Storm Security—Browse latest vulnerabilities and exploits.
30. SearchCode—Search 75 billion lines of code from 40 million projects.

[Daniel Kelley @danielmakelley]

25. GreyNoise—Search for devices connected to the internet.
26. Hunter—Search for email addresses belonging to a website.
27. Censys—Assessing attack surface for internet connected devices.
28. IntelligenceX—Search Tor, I2P, data leaks, domains, and emails.

[Daniel Kelley @danielmakelley]

21. CRT sh—Search for certs that have been logged by CT.
22. Wigle—Database of wireless networks, with statistics.
23. PublicWWW—Marketing and affiliate marketing research.
24. Binary Edge—Scans the internet for threat intelligence.