→ Ciekawe → Start Learning

Question		Answer
NIST start learning		National Institute of Standards and Technology
RAID start learning		Redundant Array of Independent Disks zwiekszenie niezawodnosci, redundancy, zwiekszenie wydajnosci jest to sposób na polaczenie kilka dyskow fizycznych ktore sa widziane przez system jako jeden dysk logiczny
SSO start learning		Single Sing-On np oauth, logujesz sie raz i masz dostep do wielu usług
ITIL start learning		Information Technology Infrastructure Library zbiór najlepszych praktyk zarządzania usługami informatycznymi
SOC start learning		Security Operations Center
AAA start learning		Authentication Authorization Accounting to identify, to give permission, to log an audit trail
NTFS start learning		New Technology File System System plików czyli metoda przechowywania plików, zarządzania plikami
FAT start learning		File Allocation Table System plików
show desktop shortcut start learning		Win+D
rename shortcut start learning		F2
hidden menu start learning		Win+X
DR/BC start learning		Disaster Recovery/Business Continuity
DAM start learning		Database Activity Monitoring
EDR start learning		Endpoint Detection and Response pozwala usunac proces, usunac plik EDR monitoruje: tworzenie procesów, modyfikacje rejestrów
LDAP start learning		Lightweight Directory Access Protocol
squid start learning		proxy software tcp hit to jest cache tcp miss nie ma cache np przechowuje cache, odciaza serwery http, usprawnia dzialanie
AD start learning		Active Directory Usługa katalogowa czyli hierarchiczna baza danych zawierająca użytkownikow, aplikacje, urzadzenia sieciowe
PUP start learning		Potentially Unwanted Programs
RAT start learning		Remote Access Trojan
frame start learning		layer 2
packet start learning		layer 3
segment start learning		layer 4
hierarchia w systemie start learning		hardware->kernel->Shell/GNOME/KDE->User
SOAR start learning		Security Orchestration, Automation and Response
PTES start learning		Penetration Testing Execution Standard
DLP start learning		Data Loss Prevention set of tools and processes to ensure that no sensitive dara is lost
IR process start learning		preparation, detection&analysis, containment eradication & recovery, post-incident activity
ATP start learning		Advance Threat Protection
IOC start learning		Indicators Of Compromise
IOA start learning		Indicators Of Attack
EFS start learning		Encrypting File System
WFH start learning		Work From Home
TTP start learning		Technics Tactics and Procedures
CVSS start learning		Common Vulnerability Scoring System
SAST DAST IAST start learning		(Static, Dynamic, Interactive) Application Security Testing
CI/CD start learning		Continuous Integration/Continuous Deployment
WAF start learning		Web Application Firewall
XML start learning		Extensible Markup Language <quiz>xd</quiz>
csv, xls start learning		csv - comma-separated values, plain text separated by commas, xls - microsoft excel, holds info about worksheets, xlsx > 2007
DevSecOps start learning		DevOps Dev-ma byc szybko Ops-ensures quality, sec-integrated, automated, continuous security
OSS start learning		Open Source Software
MDM start learning		Mobile Device Managment Allows to control the content allowed, redtrict access to smth, lock device if stolen
NAC start learning		Network Access Control Restriciting unauthorized users
SIEM start learning		Securitt Information and Event Managment makes data "human accessible" Data aggregator, search and reporting system, rules, makes alerts
normalization start learning		turning raw data into strict format
UBA(UEBA) start learning		User(and Entity) Behavior Analytics comparing historical user behavior to identify a compromise
PoS start learning		Point of Sale
birthday attack start learning		polega na znalezieniu kolizji funkcji hashujacej(md5 np mialo z tym problem)
skimming attack start learning		skimmer to to gowno w bankomacie co kradnie dane, skimming attack polega na kradziezy danych z karty
buffer overflow start learning		put more data in variable than variable can hold
memory leak start learning		memory that is no longer needed is not deleted,(free up memory) nie zwalniamy zarezerwowanej pamieci, moze prowadzi do ataku DoS
IT/OT start learning		Information Technology/Operational Technology OT to np SCADA, PLC, ICS(Industrial Control Systems)
logic bomb start learning		trigger malicious code while specific conditons met np time bomb sie wlacza w piatek 13
NFC start learning		Near Field Communication
wardriving, warflying, warwalking start learning		idziesz, jedzeisz przez miasto i szukasz wifi
pivot/pivoting start learning		utilizing compromised network/system to perform attacks on other systems in the same network
DAD triad start learning		Disclosure, Alternation, Denial
HSTS start learning		Http Strict Transport Security its just a header strict-transport-security: preload is a list of safe websites informs browsers that the site should only be acceses using HTTPS
IEEE 802.1X start learning		standard kontroli dostepu w sieciach przewodowych i bezprzewodowych
IAAS, PAAS, SAAS start learning		(Infrastructure, Platform, Software) as a service I - virtualization and you got whole machine to manage(os included) P - you onlyanage application and datagt
typosquatting/cybersquatting start learning		okupowanie domain name jakiejs firmy, okupowanie domain name podobnego do nazwy glownej domeny firmy
apt update vs upgrade start learning		update gets information about latest version of packages, upgrade installs them
. so file in unix start learning		so -share object, dynamic libraries
x86 start learning		32bit
dll vs static start learning		dll to te pliki dll, a biblioteka statyczna jest embed into exe file
vishing start learning		voice phishing
http status codes start learning		1xx info 2xx success 3xx redirect 4xx client error 5xx server error
dwa najpopularniejsze silniki przegladarki internetowej start learning		gecko - mozilla, blink - google/czesc projektu chromium
multiplexing start learning		multiple signals combined into one signal over shared medium
hol blocking start learning		head of line blocking happens when a line of packets is held in queue by a first packet(to maintain order)
quic start learning		quick udp internet connections quic ensures reliability it remoces tcp-based head of line blocking, it makes tls handshake faster
race conditions start learning		when two processes/threads attempts to access same resource at thr same time common issue for multithreaded applications
path do logow linuxowych/windowsowych web servers start learning		np /var/log/apache2 /var/log/nginx/access. log np error. log/access. log np Program Files/Apache/logs/access. log
sysmon start learning		system monitor - usługa systemowa rejestrujaca eventy
tcp/udp nazwa ramed layer 4 start learning		tcp - segment udp - datagram
tcp/ip layers start learning		app/transport/internet/network interface
rainbow table start learning		precomputed table of hashes
netbios, porty windows file share start learning		windows file share 135-139,445 netbios to protokol umozliwiajacy laczenie sie aplikacji w sieci
kerberos/ldap in ad start learning		kerberos os default authentication and authorization protocol, ldap also is auth protocol if you want to havre linux/mac in ad you use ldap or samba
web server/application server start learning		web server handles httl requests, app server holds business logic apache - web server, apache tomcat - app server
post/put/patch start learning		post tworzy nowy obiekt, put aktualizuje lub tworzy nowy obiekt(wymaga kompletu danych, podobnie jak post) patch akutalizuje obiekt, obiekt musi istniec, przesyla tylko dane ktore maja byc zaktualizowane post - gdy chcemy stworzyc, put gdy chcemy zaktualizowac(czesto blokuje sie tworzenie nowych obiektow), patch gdy obiekt ma ogromne ilosci danych, wtedy chcemy tylko przesylac te dane ktore chcemy zaktualizowac a nie komplet danych jak w przypadku PUT
noc vs soc start learning		noc analysis performance, wants system to respond network(security) operation center soc investigates
reverse proxy vs load balancer start learning		load balancer is spreading the load among servers load balancer is specific thing reverse proxy can be a load balancer but also is caching, can provide security, ssl acceleration(removing ssl)
linux remove file/directory start learning		rm file. txt / rm -r dir -r usuwa caly directory z innymi rzeczami w srodku razem z subdirectory
/etc/passwd vs /usr/bin/passwd start learning		kontener na hasla vs komenda
rwx vs rws start learning		rws wtedy s to suid(set user id) czyli uruchamiajac ten plik uruchamiamy go z uprawnieniami tego kto stworzyl plik a nie ze swoimi uprawnieniami
exploit/payload/vulnerability start learning		exploit takes advantage of vulnerability, vulnerability is a flaw in a design, coding, logic, that can be exploited payload is a code that will run on the target system
vpr start learning		vulnerability priority ranking made by tanable it is a vulnerability scoring system
firmware start learning		oprogramowanie wbudowane, zainstalowane na stale w urzadzenii zapewniajace podstawowe procedury jego obslugi np firmware w oscyloskopie, no raczej go nie zmieniasz masz wbudowane oprogramowanie na stale i jest git
pgp start learning		pretty good privacy, software that implementa ecnryption
cyber kill chain start learning		recon, weaponization, delivery, exploitation, installation, c2, accomplishing goals
threat intelligence start learning		data collected and analyzed is used to provide information about current and potenital attacks against organization
firmware/driver/os start learning		firmware is built in into ROM, it is fixed code e. x BIOS or firmware for gpu, driver tells OS how to communicate with the device os can be updated obviously firmware low level tasks, os high level tasks
serial vs pararell transmission start learning		serial oznacza ze bity sa przesylane w ustalonej kolejnosci a pararell ze kilka bitow jest przesylanych rownolegle za pomoca kilku roznych kanalow pararell jest szybsze ale mniej reliable
watering hole attack start learning		zwierzeta na sawannie podchodza do wody zeby sie napic i krokodyl atakuje czyli stawiasz stronke i czekasz az ktos na nia wejdzie, wtedy jakis drive by download czy cos
ISO/OSI start learning		Internation Standards Organization Open Systems Interconnection
RTO, RPO start learning		Recovery Time Objective - how quickly after disaster you must be back i production RPO - Recovery Point Objective - how much you can afford to lose
. run files in linux start learning		its like exe, executable file in linux
horizontal/verical/box scan start learning		horizontal - one port many ip, vertical - many ports one ip box is combination of both
RPC start learning		Remote Procedure Call, client server protocol, klient wysyla dane w ustalonym formacie a serwer realizuje usluge
adapter vs interface start learning		adapter - piece of hardware(works on datalink level), network interface is software construct(works on ip level)
promisc vs monitor mode start learning		promisc is getting all the traffic(without promisc you would analyze only packets sources or destined to you, so you can still sniff but you won't get packets that are not destined to you) monitor mode it is on wlan and it allows to sniff all traffic on channel(even encrypted ones with WPA)
dpkg -l start learning		lists all of installed packages on system
find command start learning		syntax: find where what; if not specified where, it will look recursively(current driectory and subdirectories) inne przydatne: -type (f lub d) -perm, find -name "text. txt"; find -name ". py"; find /home/kali/Desktop -name "xdd*"
ws-discovery start learning		web services discovery, multicast discovery protocol that locates services on local network
rx tx start learning		rx - received bytes, tx - transmited bytes
FIPS start learning		Federal Information Processing Standard
ENS start learning		Endpoint Security
symlink start learning		dowiazanie symboliczne, mozemy sprawic ze plik znajdzie sie w danym miejscu, mimo ze bedzie w innym
NEWS start learning		Notable Event Weather Sport
. tar. gz start learning		tar is archive stored many files in single file,. tar is not compressing . gz is compressing

ciekawe

You must sign in to write a comment

More