Ankita Roy

Cybersecurity Incident Response Planning under ISO/IEC 27001 and ISO/IEC 27005 - PECB! I gained in-depth knowledge of incident response planning under ISO/IEC 27001 and ISO/IEC 27005 frameworks, equipping me with the skills to effectively manage and mitigate cybersecurity incidents. #cybersecurity #incidentresponse #PECB #ISO27001 #ISO27005

12

3 Comments

Hello my connections !! Here is my new blog that I have captured how I approached and pwned one of the OffSec proving grounds labs target named nibbles. https://lnkd.in/gN8FCnZY #cybersecurity #offensivesecurity #ethicalhacking #redteaming

28

🚨 Cyber Team Hacking Workshop 🎭 Excited to announce our upcoming 2-day hacking workshop on September 17th and 18th – and this isn’t just another “talk shop.” This is hands-on, REAL WORLD HACKING. 🕒 9 PM – 11 PM (IST) 💵 Just Rs. 199 👉 Register here: https://lnkd.in/gDB6RWeA 🌐 Online 📱 Join the WhatsApp group for updates: https://lnkd.in/gwvB8a67 Key Takeaways: Mastering Cloudflare Firewall Evasion OTP bypass techniques Navigating the dark web Hosting your own portfolio on the dark web Live demonstration of taking down a company’s defenses 🔥 LIMITED SPOTS AVAILABLE – Don’t miss out on the opportunity to learn cutting-edge hacking skills. Whether you’re a cybersecurity enthusiast or a professional looking to level up your skills, this is YOUR chance to step up. We start when the world halts. 🎭 #CyberSecurity #HackingWorkshop #EthicalHacking #DarkWeb #FirewallEvasion #BugBounty #OnlineWorkshop #CyberAttack #Hackers #TechWorkshop #CloudSecurity #RedTeam #PenTesting #SecurityAwareness #DigitalForensics #EthicalHacker #CyberDefense #Infosec #TechTraining #HackersLife #LearnToHack

40

I've published a writeup for ALL forensics challenges from ICMTC CTF 2024 (Qualifications phase). I hope all readers derive benefits from reading it ❤️. Thanks to (Military Technical College – الكلية الفنية العسكرية). #ICMTC #CTF #cybersecurtiy #digitalforensics

28

2 Comments

✍️ Ready to Kickstart your Journey on the path of Cyber Security. Few things we all need to remember is: 1. Being Consistent. 2. Stop Jumping over from this to that. 3. Time Management. 4. Failure is not permanent until you don't want to get back up. 5. Always ready to learn new things. 6. Stay up-to-date with new technology, techniques, and threats. These are just few things that my 3 years college life and learning journey for Cyber Security taught me. There is always a chance to learn something. So, keep going. Happy Learning y'all 😊🤩!!!! #Cyber #consistency #learning #failure #new #techniques #Security

20

3 Comments

Tomorrow I'll be giving a Workshop on "Source Code Security like a Pro: Offensive & Defensive Approach" at null - The Open Security Community Bangalore chapter. So, the question is, will we be delving into complex code and discussing the importance of knowing how to be a perfect coder to be a perfect source code auditor? Well, the answer is, we, security engineers (novices at coding), only conduct source code auditing of "perfect coders (SDEs)." How do we do that? Do you need to be good at DSA? Do you need experience in coding? Do you need to be a hacker who stares at a black screen with lots of green text? See you all tomorrow! #SoftwareEngineering #infosec #bugbounty #bangalore #meetups #null

69

2 Comments

Who is "kiberphant0m," the Threat Actor Behind the BSNL Security Data Breach? 🕵️‍♂️💻 'kiberphant0m,' a notorious Blackhat hacker infamous on the Dark Web. This alias has recently claimed responsibility for the breach of Bharat Sanchar Nigam Limited (BSNL), India’s prominent telecom company. 'kiberphant0m' is no stranger to high-profile cyber attacks. According to their Telegram group, this threat actor boasts possession of data from major financial institutions across the US, UK, Egypt, and India. The critical data stolen from these institutions is being sold on the dark web, posing a significant threat to global cybersecurity. BSNL Breach Details: This marks the second time in six months that BSNL has fallen victim to a data breach. This recent attack has resulted in the leak of 278GB of sensitive data, including: International Mobile Subscriber Identity (IMSI) numbers SIM card details Home location register data Critical security keys Alarmingly, this data is priced at just $5000 on the dark web. Key Questions Arising: ❓Were the necessary steps not taken after the first breach? ❓Is the security of customer data not the top priority? ❓ How effective and swift is the incident response team? ❓ What will be the long-term impact of this breach? Call to Action: Organizations must reassess their cybersecurity strategies, ensure all vulnerabilities are addressed, and prioritize customer data protection. It’s not just about responding to incidents, but proactively preventing them. Stay informed, stay secure! 🌐🔒 #CyberSecurity #DataBreach #BSNL #CyberThreats #Infosec #CyberAwareness

32

7 Comments

🚀 Day 15: Exploring IDOR Vulnerabilities with Burp Suite! 🚀 Today, I took a deep dive into Insecure Direct Object References (IDOR) as part of my bug bounty training with Defronix Cyber Security Academy under the guidance of Nitesh Singh sir. 🛡️🔍 🔓 IDOR vulnerabilities allow attackers to access sensitive information or modify resources by manipulating object references. Through Burp Suite , I practiced: - Identifying IDOR vulnerabilities in web applications. - Manipulating parameters to simulate unauthorized access. - Understanding how to secure endpoints to prevent exploitation. Every day, I’m gaining more insights into web security, and this journey continues to be incredibly rewarding! 💪🔐 #Cybersecurity #BugBounty #IDOR #BurpSuite #WebSecurity #DefronixAcademy #LearningJourney

1

SofaWiki 3.9.2 Cross Site Scripting #shreateh #Cybersecurity #InfoSec #DataSecurity #NetworkSecurity #CyberThreats #VulnerabilityManagement #ITSecurity #CyberDefense #CyberAwareness #SecurityIncident #DataPrivacy #CyberAttacks #CyberProtection #CyberRisk #SecurityBreaches #EthicalHacking #CyberEducation #SecurityOperations #CyberResilience #CyberIntelligence

2

🚀 SOC Level 1 Progress: Completed the Diamond Model Room! 🔐 Another milestone in my SOC Level 1 journey on TryHackMe! This time, I completed the Diamond Model room, where I explored the four core features of the Diamond Model of Intrusion Analysis. 🔍 Key Components Covered: Adversary: Understanding the threat actors and their motivations. Victim: Identifying the target and the reasons behind the attack. Capability: The tools, techniques, and methods attackers use. Infrastructure: The resources and systems used by adversaries to carry out their attacks. 💡 I also delved into the Event Meta Features and the Social-Political & Technology Components, which provide a deeper context into how and why attacks happen. 🎥 I streamed the session live, breaking down these concepts and sharing insights on how the Diamond Model helps in analyzing and mitigating threats. Catch the video for a detailed walkthrough! 🔗 Watch the live session here: https://lnkd.in/gjN-4Ke4 #SOC #DiamondModel #Cybersecurity #ThreatAnalysis #TryHackMe #SOCAnalyst #InfoSec #ContinuousLearning #CyberDefense

12

One more triage!!! Severity : High Simple rule to follow, spend more time with recon you'll end up finding good vulnerabilities. Said by my mentor - Mayank Gandhi TMG Security Thanks for the target: Aditya Saxena #Bugbounty #bughunting #vpd #rdp #hacking #ethicalhacking

101

6 Comments

🚀 SOC Level 1 Progress: Completed the Unified Kill Chain Room! 🔐 I’ve just completed the Unified Kill Chain room as part of my SOC Level 1 journey on TryHackMe! This framework goes beyond traditional models by establishing the phases of an attack, helping to identify and mitigate risks to IT assets. 🔍 What I Covered:** - Kill Chain Basics: Understanding how attackers move through stages to compromise systems. - Threat Modelling: How to map and predict adversary behavior. - Unified Kill Chain: A breakdown of the attack phases and how to defend at each point:  - Initial Foothold  - Network Propagation  - Action on Objectives 💡 This framework offers a more comprehensive view of how attackers operate, helping SOC analysts strengthen defense mechanisms across multiple stages. 🎥 I also streamed this session live, answering a subscriber's question and providing insights into how to become a soc analyst at end of live and a seperate video. You can catch the session here, and I’ve made a separate response in English as well! 📺 🔗 Watch the video here: https://lnkd.in/g-6Qnyhb https://lnkd.in/gbdNtzw4 #SOC #UnifiedKillChain #Cybersecurity #ThreatModelling #TryHackMe #SOCAnalyst #ContinuousLearning #InfoSec #CyberDefense

11

Nitin Sharma is thrilled to share the launch of a new Wazuh SIEM lab for Parrot CTFs. This lab is designed to enhance your skills in detecting and analyzing security events using Wazuh, an open-source SIEM solution. In this lab, you will dive into: - Detecting failed login attempts and sudo attempts on Linux systems. - Monitoring file creation, modification in the Temp directory, and process creation on Windows. This #lab is a crucial step in mastering security monitoring, incident response, and threat detection across your organization's infrastructure. Perfect for those looking to sharpen their #SIEM and #security skills! Looking forward to hearing your feedback and seeing how you apply these insights! 🔍💻 https://lnkd.in/gXXh6Krh #Wazuh #SIEM #CyberSecurity #ParrotCTF #Infosec #ContinuousLearning

26

#VaptWithAnmol Since July 2024, an ongoing phishing campaign has been using copyright infringement themes to mislead victims into downloading a fresh version of the Rhadamanthys information stealer. Check Point, a cybersecurity firm, is following the large-scale effort under the name CopyRh(ight)adamantys. The target regions are the United States, Europe, East Asia, and South America. The attacks are remarkable for the use of version 0.7 of the Rhadamanthys stealer, which, as reported by Recorded Future's Insikt Group early last month, uses artificial intelligence (AI) for optical character recognition (OCR). The Israeli company stated that the behaviour corresponds with a campaign published by Cisco Talos last week that targeted Facebook business and advertising account users in Taiwan to deliver Lumma or Rhadamanthys stealer malware. The attack chains are distinguished by the use of spear-phishing tactics, which involve sending email messages claiming supposed copyright breaches while impersonating well-known firms. The RAR archive consists of three components: a legal executable that is vulnerable to DLL side-loading, a malicious DLL carrying the stealer payload, and a decoy document. #security #securityawareness #knowledgesharing #learning #growth #vapt #penetrationtesting #vulnerability

1

Intro to Hacking 0x02: Same-Origin Policy | XSS 101 | Telugu | తెలుగు Discussing basics of browsers, Same-Origin Policy, SOP Bypass and XSS Added English subtitles this time. https://lnkd.in/g3Y4z35f Reposts are appreciated 😅 #infosec #security #xss #sop #telugu

26

2 Comments

In continuation to my yesterday's post and questions I got... Here are some simple practices for your SOC and SIEM Implementation: 1. Prioritisation - Focus on high-impact scenarios first - Align with threat landscape - Consider business context - Address regulatory requirements 2. Tuning - Regular rule optimisation - False positive reduction - Performance impact assessment - Baseline establishment 3. Response Procedures - Clear escalation paths - Documented playbooks - Automated responses where appropriate - Regular testing and updates 4. Monitoring & Maintenance - 24/7 coverage - Regular rule reviews - Updated threat intelligence - Performance optimisation 5. Documentation & Reporting - Detailed alert documentation - Incident tracking - Metrics and KPIs - Trend analysis Key Considerations: 1. Environment-specific customisation 2. Regular updates based on threat intelligence 3. Balance between coverage and manageability 4. Integration with incident response procedures 5. Compliance requirement alignment 6. What and how far would you want to automate 7. How and when to use AI across all the practices 8. Overall Governance, Audit and Control While this provides a foundation for SOC operations, it should be customised based on: - Organisation size and industry - Specific threats and risks - Available resources - Regulatory requirements - Technology stack Share more in comments…

35

#VaptWithAnmol Information has surfaced regarding a security vulnerability in Styra's Open Policy Agent (OPA) that has since been fixed and that, if properly exploited, would have resulted in the disclosure of New Technology LAN Manager (NTLM) hashes. Inadequate input validation is the root cause of the problem, which can allow unauthorised access by disclosing the Net-NTLMv2 hash of the user currently logged into the Windows device that is running the OPA application. The local user's NTLM hash is transmitted to the distant server throughout this operation. By using this technique, an attacker can obtain the credentials and use them to relay authentication or crack hashes offline. "By exploiting this vulnerability, an attacker can relay the client's NTLM authentication details to the Active Directory Certificate Services (ADCS), and request a user certificate to leverage for further authentication in the domain." #security #securityawareness #knowledgesharing #learning #growth #vapt #penetrationtesting #vulnerability

3