ROSECURIFY
Subscribe
~/ seclog/ #101

Seclog - #101

18 curated links

g3n3r4l14

  1. Paged Out! (pagedout.institute)

    A free magazine about programming, especially programming tricks.

  2. Pots and Pans, AKA an SSLVPN (labs.watchtowr.com)

    Analysis of Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474 vulnerabilities.

  3. Android and Google Pixel Vulnerabilities (blog.oversecured.com)

    Disclosure of 7 critical security flaws in Android and Pixel devices.

  4. Prompt Injection to Shell (0din.ai)

    Investigation of OpenAI's containerized ChatGPT environment vulnerabilities.

  5. iOS 18 Inactivity Reboot Analysis (naehrdine.blogspot.com)

    Deep dive into reverse engineering iOS 18's inactivity reboot mechanism.

  6. Okta Verify Bypass (gitlab-com.gitlab.io)

    Technical analysis of Okta verification bypass vulnerability.

  7. V8 Sandbox Bypass (issues.chromium.org)

    Analysis of stack corruption due to parameter count mismatch.

  8. Palo Alto Global Protect Credentials (shells.systems)

    Method for extracting plaintext credentials from Palo Alto Global Protect.

  9. AI in Security (franklyspeaking.substack.com)

    Comprehensive guide on implementing AI in security practices.

  10. Security and People (blog.yossarian.net)

    Analysis of securing people where they are.

  11. Predictable IDs & PII Leakages (shlomie.uk)

    Using AI to mass leak data in bug bounty hunting.

  12. Javascript Events & WAF Bypass (0x999.net)

    Exploring WAF bypasses via character normalization.

  13. Privacy-Focused Network Analysis (archive.md)

    Investigation into privacy-focused cellular networks.

  14. Sitecore RCE Vulnerability (assetnote.io)

    Analysis of achieving RCE in Sitecore 8.x - 10.x.

X2

  1. Burp Suite Pro Tip (@MasteringBurp)

    Feature highlight on hiding uninteresting headers in Burp Suite Pro.

  2. OpenAI Security Warning (@r_cky0)

    Cautionary tale about potential scams in ChatGPT API recommendations.

y0utube1

  1. DEF CON 32 - Splitting the Email Atom (youtube.com)

    Exploration of email parser exploitation to bypass access controls by Gareth Heyes. Watch Here

g1thub1

  1. IVRE Network Recon Framework (github.com)

    Self-hosted alternative to Shodan/ZoomEye/Censys with extensive network intelligence capabilities. Explore on GitHub

← All Seclogs