SanSec
168 subscribers
147 photos
11 videos
38 files
125 links
Penetration Tester | BSCP | CMPen - Android | 14x CVE
Download Telegram
Jo'natganimga 6 oy bo'gandi

CVE cooming soon

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42674
🔥3
This media is not supported in your browser
VIEW IN TELEGRAM
🇺🇿 Milliy raqamli xavfsizlikda yangi bosqich

Kiberxavfsizlik - bugun davlat ahamiyatidagi masala. Himoya qanchalik
tez bo'lsa, zarar shunchalik kam.

Logbit jamoasi - mahalliy muhandislar - mamlakatimizda ishlab chiqilgan
birinchi avtonom pentester sun'iy intellektni taqdim etadi:

😎 DotHex - 31 milliard parametrli AI kiber audit mutaxassisi

Dothex oddiy skaner emas. U zaiflikni mustaqil aniqlaydi, kodda
tasdiqlaydi, tuzatmani yozadi va joriy etishga tayyorlaydi.

🔎 Topadi - zaiflikni aniqlaydi
✅ Tasdiqlaydi - kodda haqiqiy xavf ekanini tekshiradi
🔧 Tuzatadi - tuzatma kodini o'zi yozadi
🚀 Yetkazadi - sinovdan o'tkazadi va ishlab chiqarishga tayyorlaydi

🔐 Yakuniy qaror — inson qo'lida. Har bir o'zgarish mas'ul mutaxassis
tasdig'idan so'ng qo'llaniladi.
🏢 To'liq lokal ishlaydi - maxfiy ma'lumotlar serveringizdan chiqmaydi.

Isbotlangan natijalar:
• Google'ga 2 ta zaiflik rasman oshkor qilindi
• O'zbek korxonalarida 10+ kritik zaiflik aniqlandi

Milliy infratuzilma uchun!
❤‍🔥1
Forwarded from LabX
🔥 Firelab is now on GitHub!

A lightweight Firebase tool for pentesters and developers. Inspect tokens, compare access, and explore your data through an interactive graph.

https://github.com/theLabXHQ/firelab

By the community, for the community. 🇺🇿
Please open Telegram to view this post
VIEW IN TELEGRAM
Cloudflare JA3/JA4 Fingerprinting Bypass

Cloudflare JA3 va JA4 orqali mijozning TLS ulanish xususiyatlarini tahlil qilib, trafikni fingerprint asosida filtrlashi mumkin. Burp Suite yaratgan TLS fingerprint brauzernikidan farq qilsa, so‘rovlar bloklanishi mumkin.

Buni chetlab o‘tish usullaridan biri fpproxy kabi upstream proxy’dan foydalanishdir. uTLS yordamida Chrome’ga xos TLS ClientHello parametrlarini taqlid qilish va HTTP/2 ALPN sozlamalarini moslashtirish mumkin.

Trafik zanjiri:

Burp Suite → fpproxy (127.0.0.1:8899) → Target

Shu orqali nishon serverga yuboriladigan TLS ulanishi Chrome fingerprintiga yaqinlashtiriladi va fingerprint asosidagi bloklashni chetlab o‘tish mumkin. Biroq JA3/JA4 yagona himoya mezoni bo‘lmagani uchun bu usul barcha Cloudflare qoidalarini chetlab o‘tishni kafolatlamaydi.
🔥3
129

IQ Test - discloses the level of your intelligence easily and for free.

Download it now:
Google Play: http://play.google.com/store/apps/details?id=cz.digerati.iqtest

Huawei AppGallery: https://appgallery.huawei.com/#/app/C102468097

App Store: https://apps.apple.com/app/fluid-iq-test/id6746418590
Sertifikat bilan "50 million" laqabli banner berishdiyu hich bomasa

https://xn--r1a.website/SecListForCyberStudents/2471
🤣5
Mundooo oylab qarasam dardimi etgani birorta odam yogakan
❤1👍1
CVE-2026-105106
CVE-2026-105107
🔥4❤1
SanSec
CVE-2026-105106
AI siz topilgan yagona CVE yim. 1 yarim yil avval topganman, yarim yil avval report berganman
🔥5❤1
Har bir gapni va har bir niyatni to'g'ri qilish kerak ekan, u hazil yoki jahl bo'lsa ham...
🔥7
🔥3
Forwarded from The Hacker News
This media is not supported in your browser
VIEW IN TELEGRAM
‼️ One answered Telegram call was enough to run attacker code on Android, researchers say.

All an attacker needed was a regular Telegram account. No link or file to open.

Fixed in Telegram for Android 12.10.4.

Details ↓ https://thehackernews.com/2026/10/telegram-android-flaw-lets-attackers.html
❤1
Proyektda critical zaiflik chiqmasa.
Team lead:
🤣9
Охирги вақтларда Ўзбекистон фуқароларининг шахсий маълумотлари сизиб кетгани ҳақида хабарлар пайдо бўлиб турибди. Gazeta киберхавфсизлик мутахассиси Акмал Содиқов билан суҳбатлашиб, бундай ҳолатлар сабаблари, хавфлари ҳамда мутахассислар ва оддий фойдаланувчилар нима қилиши ҳақида сўради.

https://www.gazeta.uz/uz/2026/11/05/kiberxavfsizlik-himoya/

Telegram | Instagram | YouTube
🔥2