{"uuid": "2405f5b2-19f4-4074-8cf6-2b27fb4b3d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "seen", "source": "https://t.me/referencebooks0/330", "content": "Hypersec:\nThievingFox\n\n\u0627\u0628\u0632\u0627\u0631 ThievingFox \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc post-exploitation\u00a0 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u0627\u0632 password managers \u0645\u062e\u062a\u0644\u0641 \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0633\u062a. \u0647\u0631 \u0645\u0627\u0698\u0648\u0644 \u0627\u0632 \u0645\u062a\u062f \u062e\u0627\u0635\u06cc \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 \u0628\u0647 \u067e\u0631\u0648\u0633\u0633 \u0647\u062f\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0648 \u0633\u067e\u0633 \u062a\u0648\u0627\u0628\u0639 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0627\u062a \u0647\u0648\u06a9 \u0645\u06cc \u06a9\u0646\u062f.\n\n https://github.com/Slowerzs/ThievingFox/\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n#tools\n\nWindows Terminal Tips, Tricks, and Productivity Hacks \n\n#windows\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nAdvanced Linux Detection and Forensics Cheatsheet\nby Defensive Security v0.1 [17/05/2024]\nhttps://www.linkedin.com/posts/soorinsec_advanced-linux-detection-and-forensics-cheatsheet-activity-7225407231867932672-isaN?utm_source=share&utm_medium=member_desktop\n\n#linux #forensics\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nFree Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques\u00a0 \n\n\u062f\u0648\u0631\u0647 \u0631\u0627\u06cc\u06af\u0627\u0646 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u0645\u0641\u0627\u0647\u06cc\u0645 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0648 \u062a\u06a9\u0646\u06cc\u06a9 \u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u062c\u0639\u0628\u0647 \u0633\u06cc\u0627\u0647 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f.\n\nhttp://class.malware.re \n\n#cybersecurity #Malware\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#blackhat #bash\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n\ud835\udde2\ud835\uddea\ud835\uddd4\ud835\udde6\ud835\udde3 \ud835\udde7\ud835\udde2\ud835\udde3 \ud835\udfed\ud835\udfec - \ud835\udde9\ud835\ude02\ud835\uddf9\ud835\uddfb\ud835\uddf2\ud835\uddff\ud835\uddee\ud835\uddef\ud835\uddf9\ud835\uddf2 \ud835\udddf\ud835\udddf\ud835\udde0 \ud835\uddd4\ud835\uddfd\ud835\uddfd\ud835\uddf9\ud835\uddf6\ud835\uddf0\ud835\uddee\ud835\ude01\ud835\uddf6\ud835\uddfc\ud835\uddfb\ud835\ude00\n\nThe OWASP Top 10 for LLMs is a list of the most critical vulnerabilities found in applications utilizing LLMs. It was created to provide developers, data scientists, and security experts with practical, actionable, and concise security guidance to navigate the complex and evolving terrain of LLM security.\n\nLink \ud83d\udd17:-\nhttps://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki/Vulnerable-LLM-Applications\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#web3 #prompt #owasp\n\n DNS records: a comprehensive guide to better understanding and use\n\n\u0631\u06a9\u0648\u0631\u062f\u0647\u0627\u06cc DNS:\u00a0 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u062c\u0627\u0645\u0639 \u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0647\u062a\u0631\n\n[\u0644\u06cc\u0646\u06a9\u062f\u06cc\u0646 \u0633\u0648\u0631\u06cc\u0646 \n\n#DNS #DNS_Record \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 JumpServer \n\n\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 10 (CVE-2024-40628 \u0648 CVE-2024-40629) \u062f\u0631 JumpServer\u060c \u06cc\u06a9 \u0631\u0627\u0647\u06a9\u0627\u0631 PAM \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u060c \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u0646\u062f \u062a\u0627 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0634\u0645\u0627 \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u0686\u0631\u0627 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u0647\u0645 \u0627\u0633\u062a\u061f\n\n\u0627\u0628\u0632\u0627\u0631 JumpServer\u00a0\u00a0 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0628\u0633\u06cc\u0627\u0631 \u0645\u062d\u0628\u0648\u0628 \u0627\u0633\u062a: \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0627\u0632 JumpServer \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0628\u0631 \u067e\u0627\u06cc\u0647 JumpServer \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f: \u0627\u06cc\u0646 \u0628\u062f\u0627\u0646 \u0645\u0639\u0646\u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062f\u0631 \u0633\u0627\u06cc\u0631 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc PAM \u0628\u0648\u0645\u06cc \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0636\u0631\u0648\u0631\u06cc:\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc JumpServer: \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc JumpServer \u0631\u0627 \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\u0628\u0631\u0631\u0633\u06cc PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc: \u0627\u06af\u0631 \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0628\u0627 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u0646\u200c\u0647\u0627 \u062a\u0645\u0627\u0633 \u0628\u06af\u06cc\u0631\u06cc\u062f \u062a\u0627 \u0627\u0632 \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f.\n\n\nCVE-2024-40628: https://nvd.nist.gov/vuln/detail/CVE-2024-40628\nCVE-2024-40629: https://nvd.nist.gov/vuln/detail/CVE-2024-40629\n\n#cve #pam #JumpServer \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646", "creation_timestamp": "2024-08-04T18:47:46.000000Z"}