Hardik Jain

Some security teams and their members be like:- 1. Qualys and nessus chala deta hu, Red team bn gyi huehuehue🤡 2. Pentest? Ye kya bol rha hai vro? Av toh 4 ticket open kiye JIRA pr, qki Cookie attributes nai tha request mein. wo b toh pentest hai na? 🤡🤡 3. Are Are Are!!!! In-depth q ja rha bhai?? Qualys, tenable and acunatix toh hai hi Scan kr dega🤡🤡🤡🤡 Hamara toh Bug bounty program hai, hm P1 k liye $800 dete hain😾😾😾 4. Bhai tune XSS, Request smuggling report kiye toh kya hua? Documentation mein 1 extra line q add kr di? Documentation is important. Tujhe nhi aata pentest. And ironically they would be able to justify they are CORRECT.

118

2 Comments

Day122 of learning on TryHackMe, completed Intro to SIEM room 🚀 Delving into Security Information and Event Management (SIEM) has been an eye-opening experience, equipping me with crucial skills to detect and respond to cybersecurity threats effectively. Grateful for the hands-on learning experience and looking forward to applying these skills in real-world scenarios! #Siem #wazuh #Splunk #logmonitoring

3

1 Comment

𝐇𝐮𝐫𝐫𝐲!! 𝐖𝐞 𝐚𝐫𝐞 𝐥𝐢𝐯𝐞 𝐰𝐢𝐭𝐡 𝐒𝐚𝐧𝐲𝐚𝐦 𝐢𝐧 𝟑𝟎 𝐦𝐢𝐧𝐮𝐭𝐞𝐬 𝑻𝒉𝒓𝒆𝒂𝒕 𝑯𝒖𝒏𝒕𝒊𝒏𝒈 𝒊𝒏 𝑨𝒄𝒕𝒊𝒐𝒏: 𝑺𝒕𝒓𝒂𝒕𝒆𝒈𝒊𝒆𝒔 𝒇𝒐𝒓 𝑬𝒇𝒇𝒆𝒄𝒕𝒊𝒗𝒆 𝑻𝒉𝒓𝒆𝒂𝒕 𝑯𝒖𝒏𝒕𝒊𝒏𝒈 📅 𝐃𝐚𝐭𝐞: 24 Apr (Wed)    ⏰ 𝐓𝐢𝐦𝐞: 8 – 10 PM (IST) 👉𝐒𝐏𝐄𝐀𝐊𝐄𝐑: Sanyam Negi   🔗 𝕎𝕖𝕓𝕚𝕟𝕒𝕣 𝕝𝕚𝕟𝕜 : https://lnkd.in/gNVUHSM8 𝐀𝐠𝐞𝐧𝐝𝐚 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐌𝐚𝐬𝐭𝐞𝐫𝐜𝐥𝐚𝐬𝐬: 👉 Introduction to Threat Hunting 👉 Data Collection and Analysis 👉 Understanding Indicators of Compromise (IoC) 👉 Threat Hunting Techniques 👉 Threat Hunting – Practica

2

Completed ISO27001 room on TryHackMe Introduction to ISO/ISO 27001 is a non-technical yet comprehensive theoretical Room provided by TryHackMe, 😊❤️ covering foundational principles essential for maintaining ISO 27001 certification within an organization. These concepts must be mastered by Information Security Officers, Lead Auditors, IT Managers, CISOs, and individuals aspiring to advance in the Governance, Risk, and Compliance (GRC) career path with the fundamental knowledge required for effective implementation and management of ISO 27001 standards. #tryhackme #iso27001

14

Bug Bounty Hunting by Nextgen Cybersafe this bootcamp is to much informative and Q/A sessions also conducted. Topics Coverd --- vulnerability related to Cross Site Scripting (XSS), SQL Injection, SSRF Race conditions vulnerability Cookie based vulnerability Burp Suite Nmap Tools and Tech

15

1 Comment

Got the opportunity to attend #bluehatindia (supposedly a top-tier security conference for researchers) few days back. Compared to other equivalent security conferences or even BlueHat USA, I was deeply disappointed with the quality of content and topics presented (except few obvious sessions). It felt more like a local chapter event rather than a conference initiated by Microsoft MSRC. I was surprised by the panel's choices—how did they came with select such generic content for such prestigious conference? We really need to step up our game in India. Conferences here have a lot of catching up to do compared to international standards. There's so much potential for improvement, and I'm hopeful that future events will better reflect the high standards we expect. #Bluehat #MSRC

60

2 Comments

Topics covered: -> Incident Handling -> Cyber Kill Chain -> Incident Handling Process Overview -> Preparation Stage (Part 1) -> Preparation Stage (Part 2) -> Detection & Analysis Stage (Part 1) -> Detection & Analysis Stage (Part 2) -> Containment, Eradication, & Recovery Stage -> Post-Incident Activity Stage https://lnkd.in/dnbRTRsN

1

Version 1.0 of "The Windows Forensic Journey" is out !!! The goal is to create a "bible" that will hold the most basic forensic artifacts in Windows and to have a short explanation on them. I am going to update it every couple of months. If you have any suggestions/correction/asks please send them to me. In this version I have included: LNK files, RDP cache, Prefetch, File Explorer Searches, Activity History, Run MRU and Recent Docs (by file/extension/folder). Have a nice read ;-) You can also follow me on twitter - @boutnaru (https://lnkd.in/dkYSgHHZ). Also, you can read my other writeups on medium - https://lnkd.in/drU__sCj. You can find my free eBooks at https://lnkd.in/dCQ57Fqb. #Windows #Kenrel #TheWindowsForensicJourney #Security #infosec #DevSecOps #DevOps #dfir #OperratingSystems #OS #Learning #Forensic

44

🎉 Successfully conquered PortSwigger Lab: Exploiting a Mass Assignment Vulnerability! 🎉 🔬 LAB DETAILS 🔬 🔍 Lab Title: Exploiting a Mass Assignment Vulnerability 🔗 Lab URL: https://lnkd.in/giU-uCua 🌟 Lab Level: PRACTITIONER ✅ Status: Solved 🔒 Challenge: The lab required finding and exploiting a mass assignment vulnerability to purchase a Lightweight l33t Leather Jacket. 🛠️ MISSION ACCOMPLISHED 🛠️ 🔓 Objective: Successfully discovered and exploited the mass assignment vulnerability to buy a Lightweight l33t Leather Jacket. 👨‍💻 Ready to identify and address mass assignment vulnerabilities effectively! #PortSwiggerLab #Cybersecurity #PractitionerAchievement #LabCompleted #InfoSecJourney 🌐🚀

7

Requirement 8 of PCI DSS is about identifying access. It also is about restricting access to unique IDs. Meaning that everyone who accesses the CDE is fully identifiable for non-repudiation. Setting lockouts for failed logins and automatic logouts after 15 minutes. We also need to be able to identify any source, both logically and physically, for users and apps/systems.

1

I am looking for someone who can talk in OWASP Patna on topics like bug bounties, Pentesting or similar to that. Let me know if you are interested in sharing something about hacking. #bugbounty #hacking

27

Just Got My Badge  MITRE ATT&CK® Cyber Threat Intelligence--Narrative Reporting. 1. Cyber Threat Intelligence from Narrative Reporting 1.2 Finding & Researching the Behavior 1.3 Translating the Behavior into a Tactic 1.4 Identifying Techniques & Sub-Techniques 1.5 Mapping To A Narrative Point 1.6 Hedging Your Biases Completed! Study Threat Intelligence -- Narrative Reporting : ╔══════╗╔══════╗╔══════╗╔══════╗╔══════╗ Cybereason Cobalt Kitty - Original Report Cybereason Cobalt Kitty - Highlights Only Cybereason Cobalt Kitty - Tactic Hints Cybereason Cobalt Kitty - Answers ╚══════╝╚══════╝╚══════╝╚══════╝╚══════╝ ╔══════╗╔══════╗╔══════╗╔══════╗ FireEye APT39 - Original Report FireEye APT39 - Highlights Only FireEye APT39 - Answers ╚══════╝╚══════╝╚══════╝╚══════╝ ╔══════╗╔══════╗╔══════╗╔══════╗╔══════╗╔══════╗ MuddyWater Operations in Lebanon & Oman - Original Report MuddyWater Operations in Lebanon & Oman - Highlights Only MuddyWater Operations in Lebanon & Oman - Answer ╚══════╝╚══════╝╚══════╝╚══════╝╚══════╝╚══════╝

4

i have successfully cleared the defensive security room. here i learn various topic of defensive security such as 1)Security Operations Center (SOC) 2)Threat Intelligence 3)Digital Forensics and Incident Response (DFIR) 4)Malware Analysis https://lnkd.in/gZUXSprQ

1

Case Study of the FormBook Malware #1 In this video I have explained the basic Internet connection mechanism of the formbook malware by going through the decompiled malware. #research #malwareanalysis

16

Topics covered: -> Bug Bounty Programs -> Writing a Good Report -> Interacting with Organizations/BBP Hosts -> Example 1: Reporting Stored XSS -> Example 2: Reporting CSRF -> Example 3: Reporting RCE https://lnkd.in/d_227dDK

1

Cybersecurity Incident Response Planning under ISO/IEC 27001 and ISO/IEC 27005 - PECB! I gained in-depth knowledge of incident response planning under ISO/IEC 27001 and ISO/IEC 27005 frameworks, equipping me with the skills to effectively manage and mitigate cybersecurity incidents. #cybersecurity #incidentresponse #PECB #ISO27001 #ISO27005

11

3 Comments

#Day86 #Cybersecurity!!! Day 86: Understanding Error Logs 🚀 Error logs are invaluable in the world of software development and IT. They serve as a detailed record of what goes wrong within an application or system, providing crucial insights for troubleshooting and improving performance. 🌟 Why Error Logs Matter: 1. Diagnostics: They help identify the root cause of issues quickly. 2. Accountability:Track and document errors for accountability and audit purposes. 3. Performance Tuning: Analyze logs to optimize system performance. 4. Proactive Monitoring: Spot patterns and prevent future issues. 🔍 Best Practices for Managing Error Logs: 1. Centralize Your Logs:Use tools like ELK Stack or Splunk for aggregation. 2. Prioritize Errors: Focus on resolving critical errors first. 3. Automate Alerts:Set up alerts for specific log entries to respond swiftly. 4. Regular Reviews: Periodically review logs to detect underlying issues. Error logs are more than just a record of mistakes—they are a roadmap to a more robust, reliable system. By effectively managing and analyzing these logs, we can ensure smoother operations and deliver a better user experience. #TechInsights #ErrorLogs #Day86 #SoftwareDevelopment #IT #PerformanceOptimization

8

1 Comment

Incident Handling Process #incidentresponse #cybersecurity #soc #socanalyst #htb #monitoring #xdr #edr #analysis #vapt #blueteam #logmanagement #threatdetection #riskprotection #handbook #infosec #appsec #bugbounty #redteam

84

2 Comments