icoa-cli 2.9.3 → 2.12.0

package/translations/th/demo.json

@@ -0,0 +1,332 @@
+[
+  {
+    "number": 1,
+    "text": "อัลกอริทึมใดที่ไม่ใช่ symmetric cipher?",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES",
+      "B": "RSA",
+      "C": "DES",
+      "D": "Blowfish"
+    }
+  },
+  {
+    "number": 2,
+    "text": "SQL injection อาศัยช่องโหว่ใด?",
+    "category": "Web Security",
+    "options": {
+      "A": "Buffer overflow ใน web server",
+      "B": "Input จากผู้ใช้ที่ไม่ได้ถูกกรองใน database queries",
+      "C": "Encryption algorithms ที่อ่อนแอ",
+      "D": "Firewall rules ที่ตั้งค่าผิด"
+    }
+  },
+  {
+    "number": 3,
+    "text": "HTTP status code ใดที่แสดงสถานะ \"Forbidden\"?",
+    "category": "Web Security",
+    "options": {
+      "A": "401",
+      "B": "404",
+      "C": "403",
+      "D": "500"
+    }
+  },
+  {
+    "number": 4,
+    "text": "วัตถุประสงค์หลักของ nonce ในการเข้ารหัสลับคืออะไร?",
+    "category": "Cryptography",
+    "options": {
+      "A": "เข้ารหัสข้อมูลที่จัดเก็บอยู่",
+      "B": "ป้องกัน replay attacks",
+      "C": "สร้างรหัสผ่านแบบสุ่ม",
+      "D": "บีบอัดข้อมูลก่อนการเข้ารหัส"
+    }
+  },
+  {
+    "number": 5,
+    "text": "เครื่องมือใดที่นิยมใช้สำหรับการจับแพ็กเก็ตเครือข่าย?",
+    "category": "Network",
+    "options": {
+      "A": "Burp Suite",
+      "B": "Ghidra",
+      "C": "Wireshark",
+      "D": "John the Ripper"
+    }
+  },
+  {
+    "number": 6,
+    "text": "XSS ย่อมาจากอะไรในด้านความปลอดภัยทางไซเบอร์?",
+    "category": "Web Security",
+    "options": {
+      "A": "Extended Security System",
+      "B": "Cross-Site Scripting",
+      "C": "XML Secure Socket",
+      "D": "Cross-Server Sharing"
+    }
+  },
+  {
+    "number": 7,
+    "text": "หน้าที่หลักของไฟร์วอลล์คืออะไร?",
+    "category": "Network",
+    "options": {
+      "A": "เข้ารหัสข้อมูลเครือข่าย",
+      "B": "กรองทราฟฟิกเครือข่ายตามกฎความปลอดภัย",
+      "C": "ตรวจจับไวรัสในไฟล์",
+      "D": "เร่งความเร็วการเชื่อมต่ออินเทอร์เน็ต"
+    }
+  },
+  {
+    "number": 8,
+    "text": "มัลแวร์ประเภทใดที่ปลอมแปลงตัวเองเป็นซอฟต์แวร์ที่ดูเหมือนถูกต้องตามกฎหมาย?",
+    "category": "Malware",
+    "options": {
+      "A": "Worm",
+      "B": "Ransomware",
+      "C": "Trojan",
+      "D": "Adware"
+    }
+  },
+  {
+    "number": 9,
+    "text": "โปรโตคอลใดให้การสื่อสารที่ปลอดภัยบนเว็บ?",
+    "category": "Network",
+    "options": {
+      "A": "HTTP",
+      "B": "FTP",
+      "C": "HTTPS",
+      "D": "SMTP"
+    }
+  },
+  {
+    "number": 10,
+    "text": "cryptographic hash คืออะไร?",
+    "category": "Cryptography",
+    "options": {
+      "A": "คีย์การเข้ารหัสที่ย้อนกลับได้",
+      "B": "ฟังก์ชันทางเดียวที่สร้างไดเจสต์ขนาดคงที่",
+      "C": "โปรโตคอลการยืนยันตัวตน",
+      "D": "ลายเซ็นดิจิทัลประเภทหนึ่ง"
+    }
+  },
+  {
+    "number": 11,
+    "text": "เครื่องมือใดที่ใช้สำหรับ binary analysis?",
+    "category": "Reverse Engineering",
+    "options": {
+      "A": "Nmap",
+      "B": "SQLMap",
+      "C": "Ghidra",
+      "D": "Nikto"
+    }
+  },
+  {
+    "number": 12,
+    "text": "การโจมตีแบบใดที่จัดการคำขอ DNS เพื่อเปลี่ยนเส้นทางการรับส่งข้อมูล?",
+    "category": "Network",
+    "options": {
+      "A": "Phishing",
+      "B": "DNS Spoofing",
+      "C": "SQL Injection",
+      "D": "Brute Force"
+    }
+  },
+  {
+    "number": 13,
+    "text": "พอร์ตมาตรฐานสำหรับ SSH คืออะไร?",
+    "category": "Network",
+    "options": {
+      "A": "21",
+      "B": "22",
+      "C": "80",
+      "D": "443"
+    }
+  },
+  {
+    "number": 14,
+    "text": "การพิสูจน์ตัวตนแบบสองปัจจัย (2FA) คืออะไร?",
+    "category": "Authentication",
+    "options": {
+      "A": "การใช้รหัสผ่านสองอันที่แตกต่างกัน",
+      "B": "การยืนยันตัวตนด้วยข้อมูลรับรองสองประเภทที่แตกต่างกัน",
+      "C": "การเข้ารหัสข้อมูลสองครั้ง",
+      "D": "การเชื่อมต่อผ่านสองเครือข่าย"
+    }
+  },
+  {
+    "number": 15,
+    "text": "คำสั่ง Linux ใดที่แสดง open ports บนระบบ?",
+    "category": "Linux",
+    "options": {
+      "A": "ls -la",
+      "B": "netstat -tulpn",
+      "C": "chmod 777",
+      "D": "cat /etc/passwd"
+    }
+  },
+  {
+    "number": 16,
+    "text": "การโจมตีแบบ Man-in-the-Middle (MitM) คืออะไร?",
+    "category": "Network",
+    "options": {
+      "A": "การเข้าถึงเซิร์ฟเวอร์โดยไม่ได้รับอนุญาต",
+      "B": "การดักจับและแก้ไขการสื่อสารระหว่างสองฝ่าย",
+      "C": "การส่งคำขอจำนวนมากเพื่อทำให้เซิร์ฟเวอร์ทำงานเกินกำลัง",
+      "D": "การเดารหัสผ่านด้วยวิธี brute force"
+    }
+  },
+  {
+    "number": 17,
+    "text": "ข้อใดต่อไปนี้คือ hash algorithm?",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES-256",
+      "B": "SHA-256",
+      "C": "RSA-2048",
+      "D": "Diffie-Hellman"
+    }
+  },
+  {
+    "number": 18,
+    "text": "อะไรคือหลักการของ Least Privilege?",
+    "category": "Security",
+    "options": {
+      "A": "ให้ root access แก่ผู้ใช้ทั้งหมด",
+      "B": "ให้สิทธิ์เฉพาะที่จำเป็นในการทำงาน",
+      "C": "ใช้รหัสผ่านที่สั้นที่สุดเท่าที่จะเป็นไปได้",
+      "D": "ปิดใช้งาน firewalls ทั้งหมด"
+    }
+  },
+  {
+    "number": 19,
+    "text": "เครื่องมือใดที่นิยมใช้สำหรับการ port scanning?",
+    "category": "Network",
+    "options": {
+      "A": "Wireshark",
+      "B": "Metasploit",
+      "C": "Nmap",
+      "D": "Hashcat"
+    }
+  },
+  {
+    "number": 20,
+    "text": "Ransomware คืออะไร?",
+    "category": "Malware",
+    "options": {
+      "A": "ซอฟต์แวร์ที่แสดงโฆษณาที่ไม่พึงประสงค์",
+      "B": "ซอฟต์แวร์ที่เข้ารหัสไฟล์และเรียกร้องค่าไถ่เพื่อถอดรหัส",
+      "C": "ซอฟต์แวร์ที่บันทึกการกดแป้นพิมพ์",
+      "D": "ซอฟต์แวร์ที่จำลองตัวเองแพร่กระจายไปทั่วเครือข่าย"
+    }
+  },
+  {
+    "number": 21,
+    "text": "ความแตกต่างระหว่างการเข้ารหัสแบบสมมาตร (symmetric encryption) และแบบอสมมาตร (asymmetric encryption) คืออะไร?",
+    "category": "Cryptography",
+    "options": {
+      "A": "แบบสมมาตรใช้กุญแจชุดเดียวกันในการเข้ารหัสและถอดรหัส ในขณะที่แบบอสมมาตรใช้กุญแจสองชุดที่แตกต่างกัน",
+      "B": "แบบสมมาตรทำงานช้ากว่าแบบอสมมาตร",
+      "C": "แบบอสมมาตรใช้ได้เฉพาะกับไฟล์ขนาดเล็ก",
+      "D": "ไม่มีความแตกต่างที่สำคัญ"
+    }
+  },
+  {
+    "number": 22,
+    "text": "ช่องโหว่ใดที่อนุญาตให้มีการรันโค้ดตามอำเภอใจ (arbitrary code execution) บนเว็บเซิร์ฟเวอร์?",
+    "category": "Web Security",
+    "options": {
+      "A": "CSRF",
+      "B": "Remote Code Execution (RCE)",
+      "C": "Clickjacking",
+      "D": "Open Redirect"
+    }
+  },
+  {
+    "number": 23,
+    "text": "OWASP คืออะไร?",
+    "category": "Security",
+    "options": {
+      "A": "ระบบปฏิบัติการด้านความปลอดภัย",
+      "B": "องค์กรที่เผยแพร่มาตรฐานและแนวทางปฏิบัติด้านความปลอดภัยทางเว็บ",
+      "C": "ไฟร์วอลล์ประเภทหนึ่ง",
+      "D": "ภาษาโปรแกรมสำหรับความปลอดภัย"
+    }
+  },
+  {
+    "number": 24,
+    "text": "คำสั่ง Linux ใดที่ใช้เปลี่ยนสิทธิ์การเข้าถึงไฟล์?",
+    "category": "Linux",
+    "options": {
+      "A": "chown",
+      "B": "chmod",
+      "C": "chgrp",
+      "D": "passwd"
+    }
+  },
+  {
+    "number": 25,
+    "text": "SSL/TLS certificate คืออะไร?",
+    "category": "Cryptography",
+    "options": {
+      "A": "ไฟล์ที่มีมัลแวร์",
+      "B": "เอกสารดิจิทัลที่ใช้ยืนยันตัวตนของเว็บไซต์",
+      "C": "คีย์ส่วนตัวสำหรับ SSH",
+      "D": "ฐานข้อมูลที่เข้ารหัสชนิดหนึ่ง"
+    }
+  },
+  {
+    "number": 26,
+    "text": "ข้อใดต่อไปนี้เป็นการโจมตีแบบ social engineering?",
+    "category": "Security",
+    "options": {
+      "A": "Buffer overflow",
+      "B": "Phishing",
+      "C": "SQL Injection",
+      "D": "Port scanning"
+    }
+  },
+  {
+    "number": 27,
+    "text": "คำสั่ง Linux \"grep\" ทำหน้าที่อะไร?",
+    "category": "Linux",
+    "options": {
+      "A": "บีบอัดไฟล์",
+      "B": "ค้นหารูปแบบข้อความในไฟล์",
+      "C": "แสดงกระบวนการที่ทำงานอยู่",
+      "D": "กำหนดค่าเครือข่าย"
+    }
+  },
+  {
+    "number": 28,
+    "text": "VPN คืออะไร?",
+    "category": "Network",
+    "options": {
+      "A": "ไวรัสชนิดหนึ่ง",
+      "B": "Virtual Private Network (VPN) ที่เข้ารหัส Internet traffic",
+      "C": "file transfer protocol",
+      "D": "vulnerability scanner"
+    }
+  },
+  {
+    "number": 29,
+    "text": "CSRF (Cross-Site Request Forgery) คืออะไร?",
+    "category": "Web Security",
+    "options": {
+      "A": "การโจมตีที่บังคับให้เบราว์เซอร์ของผู้ใช้ดำเนินการที่ไม่ได้รับอนุญาต",
+      "B": "วิธีการเข้ารหัสข้อมูล",
+      "C": "ประเภทของ network scanner",
+      "D": "เทคนิคการบีบอัดไฟล์"
+    }
+  },
+  {
+    "number": 30,
+    "text": "อะไรคือแนวทางปฏิบัติที่ดีที่สุดสำหรับการจัดเก็บรหัสผ่านในฐานข้อมูล?",
+    "category": "Security",
+    "options": {
+      "A": "Plain text",
+      "B": "เข้ารหัสด้วย AES",
+      "C": "Hashed ด้วย salt",
+      "D": "Encoded ใน Base64"
+    }
+  }
+]

package/translations/tr/demo.json

@@ -0,0 +1,332 @@
+[
+  {
+    "number": 1,
+    "text": "Hangi algoritma simetrik bir şifreleme algoritması DEĞİLDİR?",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES",
+      "B": "RSA",
+      "C": "DES",
+      "D": "Blowfish"
+    }
+  },
+  {
+    "number": 2,
+    "text": "SQL injection neyi istismar eder?",
+    "category": "Web Security",
+    "options": {
+      "A": "Web server'daki Buffer overflow",
+      "B": "Veritabanı sorgularındaki temizlenmemiş kullanıcı girdisi",
+      "C": "Zayıf şifreleme algoritmaları",
+      "D": "Yanlış yapılandırılmış güvenlik duvarı kuralları"
+    }
+  },
+  {
+    "number": 3,
+    "text": "Which HTTP status code indicates \"Forbidden\"?",
+    "category": "Web Security",
+    "options": {
+      "A": "401",
+      "B": "404",
+      "C": "403",
+      "D": "500"
+    }
+  },
+  {
+    "number": 4,
+    "text": "Kriptografide bir nonce'ın birincil amacı nedir?",
+    "category": "Cryptography",
+    "options": {
+      "A": "Data at rest'i şifrelemek",
+      "B": "Replay attack'ları önlemek",
+      "C": "Random password'ler üretmek",
+      "D": "Encryption'dan önce veriyi sıkıştırmak"
+    }
+  },
+  {
+    "number": 5,
+    "text": "Ağ paketi yakalama için yaygın olarak hangi araç kullanılır?",
+    "category": "Network",
+    "options": {
+      "A": "Burp Suite",
+      "B": "Ghidra",
+      "C": "Wireshark",
+      "D": "John the Ripper"
+    }
+  },
+  {
+    "number": 6,
+    "text": "Siber güvenlikte XSS ne anlama gelir?",
+    "category": "Web Security",
+    "options": {
+      "A": "Extended Security System",
+      "B": "Cross-Site Scripting",
+      "C": "XML Secure Socket",
+      "D": "Cross-Server Sharing"
+    }
+  },
+  {
+    "number": 7,
+    "text": "Bir firewall'un birincil işlevi nedir?",
+    "category": "Network",
+    "options": {
+      "A": "Ağ verilerini şifrelemek",
+      "B": "Güvenlik kurallarına dayalı olarak ağ trafiğini filtrelemek",
+      "C": "Dosyalardaki virüsleri tespit etmek",
+      "D": "İnternet bağlantısını hızlandırmak"
+    }
+  },
+  {
+    "number": 8,
+    "text": "Hangi tür malware kendini meşru yazılım olarak gizler?",
+    "category": "Malware",
+    "options": {
+      "A": "Worm",
+      "B": "Ransomware",
+      "C": "Trojan",
+      "D": "Adware"
+    }
+  },
+  {
+    "number": 9,
+    "text": "Web üzerinde güvenli iletişim sağlayan protokol hangisidir?",
+    "category": "Network",
+    "options": {
+      "A": "HTTP",
+      "B": "FTP",
+      "C": "HTTPS",
+      "D": "SMTP"
+    }
+  },
+  {
+    "number": 10,
+    "text": "Kriptografik özet nedir?",
+    "category": "Cryptography",
+    "options": {
+      "A": "Geri döndürülebilir bir şifreleme anahtarı",
+      "B": "Sabit boyutlu bir özet üreten tek yönlü bir fonksiyon",
+      "C": "Bir kimlik doğrulama protokolü",
+      "D": "Bir tür dijital imza"
+    }
+  },
+  {
+    "number": 11,
+    "text": "İkili analiz için hangi araç kullanılır?",
+    "category": "Reverse Engineering",
+    "options": {
+      "A": "Nmap",
+      "B": "SQLMap",
+      "C": "Ghidra",
+      "D": "Nikto"
+    }
+  },
+  {
+    "number": 12,
+    "text": "Hangi saldırı, trafiği yönlendirmek için DNS isteklerini manipüle eder?",
+    "category": "Network",
+    "options": {
+      "A": "Phishing",
+      "B": "DNS Spoofing",
+      "C": "SQL Injection",
+      "D": "Brute Force"
+    }
+  },
+  {
+    "number": 13,
+    "text": "SSH için standart port numarası kaçtır?",
+    "category": "Network",
+    "options": {
+      "A": "21",
+      "B": "22",
+      "C": "80",
+      "D": "443"
+    }
+  },
+  {
+    "number": 14,
+    "text": "İki faktörlü kimlik doğrulama (2FA) nedir?",
+    "category": "Authentication",
+    "options": {
+      "A": "İki farklı parola kullanmak",
+      "B": "Kimliği iki farklı türde kimlik bilgisiyle doğrulamak",
+      "C": "Verileri iki kez şifrelemek",
+      "D": "İki ağ üzerinden bağlanmak"
+    }
+  },
+  {
+    "number": 15,
+    "text": "Bir sistemde açık portları gösteren Linux komutu hangisidir?",
+    "category": "Linux",
+    "options": {
+      "A": "ls -la",
+      "B": "netstat -tulpn",
+      "C": "chmod 777",
+      "D": "cat /etc/passwd"
+    }
+  },
+  {
+    "number": 16,
+    "text": "Man-in-the-Middle (MitM) saldırısı nedir?",
+    "category": "Network",
+    "options": {
+      "A": "Bir sunucuya izinsiz erişme",
+      "B": "İki taraf arasındaki iletişimi kesme ve değiştirme",
+      "C": "Bir sunucuyu aşırı yüklemek için çok sayıda istek gönderme",
+      "D": "Parolaları brute force ile tahmin etme"
+    }
+  },
+  {
+    "number": 17,
+    "text": "Bunlardan hangisi bir hash algoritmasıdır?",
+    "category": "Cryptography",
+    "options": {
+      "A": "AES-256",
+      "B": "SHA-256",
+      "C": "RSA-2048",
+      "D": "Diffie-Hellman"
+    }
+  },
+  {
+    "number": 18,
+    "text": "En az ayrıcalık ilkesi nedir?",
+    "category": "Security",
+    "options": {
+      "A": "Tüm kullanıcılara root erişimi vermek",
+      "B": "Bir görevi yerine getirmek için yalnızca gerekli izinleri vermek",
+      "C": "Mümkün olan en kısa parolayı kullanmak",
+      "D": "Tüm firewall'ları devre dışı bırakmak"
+    }
+  },
+  {
+    "number": 19,
+    "text": "Port scanning için yaygın olarak hangi araç kullanılır?",
+    "category": "Network",
+    "options": {
+      "A": "Wireshark",
+      "B": "Metasploit",
+      "C": "Nmap",
+      "D": "Hashcat"
+    }
+  },
+  {
+    "number": 20,
+    "text": "ransomware nedir?",
+    "category": "Malware",
+    "options": {
+      "A": "İstenmeyen reklamlar gösteren yazılım",
+      "B": "Dosyaları şifreleyen ve şifreyi çözmek için ödeme talep eden yazılım",
+      "C": "Tuş vuruşlarını kaydeden yazılım",
+      "D": "Ağlar arasında çoğalan yazılım"
+    }
+  },
+  {
+    "number": 21,
+    "text": "Simetrik ve asimetrik şifreleme arasındaki fark nedir?",
+    "category": "Cryptography",
+    "options": {
+      "A": "Simetrik, şifreleme ve şifre çözme için aynı anahtarı kullanırken; asimetrik iki farklı anahtar kullanır.",
+      "B": "Simetrik, asimetrikten daha yavaştır.",
+      "C": "Asimetrik yalnızca küçük dosyalarla çalışır.",
+      "D": "Önemli bir fark yoktur."
+    }
+  },
+  {
+    "number": 22,
+    "text": "Hangi güvenlik açığı, bir web sunucusunda rastgele kod yürütülmesine izin verir?",
+    "category": "Web Security",
+    "options": {
+      "A": "CSRF",
+      "B": "Remote Code Execution (RCE)",
+      "C": "Clickjacking",
+      "D": "Open Redirect"
+    }
+  },
+  {
+    "number": 23,
+    "text": "OWASP nedir?",
+    "category": "Security",
+    "options": {
+      "A": "Bir güvenlik işletim sistemi",
+      "B": "Web güvenliği standartları ve rehberleri yayınlayan bir kuruluş",
+      "C": "Bir firewall türü",
+      "D": "Güvenlik için bir programlama dili"
+    }
+  },
+  {
+    "number": 24,
+    "text": "Dosya izinlerini hangi Linux komutu değiştirir?",
+    "category": "Linux",
+    "options": {
+      "A": "chown",
+      "B": "chmod",
+      "C": "chgrp",
+      "D": "passwd"
+    }
+  },
+  {
+    "number": 25,
+    "text": "Bir SSL/TLS sertifikası nedir?",
+    "category": "Cryptography",
+    "options": {
+      "A": "Malware içeren bir dosya",
+      "B": "Bir web sitesi kimliğini doğrulayan dijital bir belge",
+      "C": "SSH için bir özel anahtar",
+      "D": "Şifrelenmiş bir veritabanı türü"
+    }
+  },
+  {
+    "number": 26,
+    "text": "Aşağıdakilerden hangisi bir sosyal mühendislik saldırısıdır?",
+    "category": "Security",
+    "options": {
+      "A": "Buffer overflow",
+      "B": "Phishing",
+      "C": "SQL Injection",
+      "D": "Port scanning"
+    }
+  },
+  {
+    "number": 27,
+    "text": "Linux komutu \"grep\" ne yapar?",
+    "category": "Linux",
+    "options": {
+      "A": "Dosyaları sıkıştırır",
+      "B": "Dosyalarda metin desenlerini arar",
+      "C": "Aktif süreçleri gösterir",
+      "D": "Ağı yapılandırır"
+    }
+  },
+  {
+    "number": 28,
+    "text": "VPN nedir?",
+    "category": "Network",
+    "options": {
+      "A": "Bir tür virüs",
+      "B": "İnternet trafiğini şifreleyen bir Virtual Private Network",
+      "C": "Bir File Transfer Protocol",
+      "D": "Bir Vulnerability Scanner"
+    }
+  },
+  {
+    "number": 29,
+    "text": "CSRF (Cross-Site Request Forgery) nedir?",
+    "category": "Web Security",
+    "options": {
+      "A": "Kullanıcının tarayıcısını yetkisiz eylemler gerçekleştirmeye zorlayan bir saldırı",
+      "B": "Bir veri şifreleme yöntemi",
+      "C": "Bir ağ tarayıcı türü",
+      "D": "Bir dosya sıkıştırma tekniği"
+    }
+  },
+  {
+    "number": 30,
+    "text": "Veritabanında parolaları depolamak için en iyi uygulama nedir?",
+    "category": "Security",
+    "options": {
+      "A": "Plain text",
+      "B": "AES ile şifrelenmiş",
+      "C": "Salt ile hash'lenmiş",
+      "D": "Base64 ile kodlanmış"
+    }
+  }
+]