YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)

•

Sichere ProgrammierungHow to Build a Dart Package Analytics Tool with the pub.dev API: Beyond the 30-Day Window(23.09.2026 um 23:01 Uhr)

•

Sichere ProgrammierungThe Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors(24.09.2026 um 00:40 Uhr)

•

Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)

•

Sichere ProgrammierungCloudflare Separates AI Training From Search Indexing With New Crawler Controls(24.09.2026 um 00:45 Uhr)

•

Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)

•

Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)

•

Sichere ProgrammierungWhat two Contentful builds taught us about content models and publishing boundaries(24.09.2026 um 00:56 Uhr)

•

Sichere ProgrammierungNIGHTCELL 7: When the Ravens Lied, a second Þrøngva album made in code(24.09.2026 um 01:05 Uhr)

•

Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)

•

YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)

•

Sichere ProgrammierungHow to Build a Dart Package Analytics Tool with the pub.dev API: Beyond the 30-Day Window(23.09.2026 um 23:01 Uhr)

•

Sichere ProgrammierungThe Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors(24.09.2026 um 00:40 Uhr)

•

Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)

•

Sichere ProgrammierungCloudflare Separates AI Training From Search Indexing With New Crawler Controls(24.09.2026 um 00:45 Uhr)

•

Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)

•

Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)

•

Sichere ProgrammierungWhat two Contentful builds taught us about content models and publishing boundaries(24.09.2026 um 00:56 Uhr)

•

Sichere ProgrammierungNIGHTCELL 7: When the Ravens Lied, a second Þrøngva album made in code(24.09.2026 um 01:05 Uhr)

•

Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

zSecurity: Hacking the Hackers

Video von zSecurity auf YouTube: Author: zSecurity - Bewertung: 4x - Views:4 A step-by-step guide teaching you how to discover and exploit IDOR vulnerabilities…

Videos & Konferenzen youtube.com 27.03.2025, 14:00 Uhr 2 Min. Lesezeit TA0040 · T1486 CWE-120

↗ Quelle (youtube.com)

Reagiere als Erste:r — dein Feedback zählt!

Author: zSecurity - Bewertung: 4x - Views:4

A step-by-step guide teaching you how to discover and exploit IDOR vulnerabilities + xp_cmdshell + local buffer overflow to hack a RaaS (Ransomware-as-a-Service) platform and gain full remote control over their servers.

🔴 Enhance your organisation’s cybersecurity with the power of Zero Trust and ThreatLocker👇

http://threatlocker.com/zsecurity

---------------------------------------------------------------

🌟 Hacking Masterclass & Memberships 👇

https://zsecurity.org/memberships/

🧠 My hacking courses 👇

https://zsecurity.org/courses/

---------------------------------------------------------------

zSecurity Company - https://zsecurity.com/

Community - https://zsecurity.org/

Facebook - https://www.facebook.com/zSecurty

Twitter - https://twitter.com/_zSecurity_

Instagram - https://www.instagram.com/zsecurity_org/

LinkedIn - https://www.linkedin.com/company/zsecurity-org/

TikTok - https://www.tiktok.com/@zsecurity_org

---------------------------------------------------------------

⚠️ This video is made for educational purposes only, we only test devices and systems that we own or have permission to test, you should not test the security of devices that you do not own or do not have permission to test. ⚠️

---------------------------------------------------------------

Resources:

Lab Link:

https://tryhackme.com/jr/zsecurity2024anniversaryctf

---------------------------------------------------------------

Time Stamps:

00:00 - intro

01:45 - Zero Trust with Threatlocker

03:09 - Exploiting IDOR Vulnerability

05:58 - Scanning the Server

06:52 - Gaining DB Access

08:38 - Exploiting cmd_xpshell

13:32 - Escalating Privileges

CTI Threat Relationship Graph4 Knoten / 3 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

IR-PLAYBOOK-RANSOMWARE

CRITICAL

SOC Incident Playbook: Ransomware Outbreak Containment

IsolationSofort

Betroffene Hosts sofort netzwerkseitig isolieren (VLAN trennen / Switch-Port sperren).

iptables -A INPUT -j DROP && iptables -A OUTPUT -j DROP

Credential RevocationSofort

Active Directory / PAM Dienstkonten & Kerberos Ticket TGT zurücksetzen (Pass-the-Hash unterbinden).

Reset-ADAccountPassword -Identity krbtgt

Forensic Preservation

RAM-Image und EDR-Volatilitäts-Snapshots vor einem System-Neustart sichern.

winpmem.exe -o memdump.raw / dd if=/dev/fmem of=mem.raw

Backup IntegritySofort

Immutable & Air-Gapped Backups prüfen; keine Live-Storage-Syncs im infizierten Subnetz zulassen.

Verify WORM-Storage Lock status

1-Click Detection Engineering: Sigma & YARA Rules

SOC Ready

title: Detect Exploitation - zSecurity: Hacking the Hackers
id: 29f1d1d6-d3cd-406b-ada2-3cc575cbcd01
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
  - attack.t1486

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "zSecurity: Hacking the Hackers" ascii wide
    condition:
        any of them
}