ROSECURIFY
Subscribe
~/ seclog/ #107

Seclog - #107

16 curated links

g3n3r4l12

  1. Orbit by Mozilla (orbitbymozilla.com)

    A powerful tool for creating custom secure browsing environments.

  2. Frida HandBook (learnfrida.info)

    Comprehensive guide to using Frida for application security analysis.

  3. Simple Prompts to get the System Prompts - eval.blog (eval.blog)

    Learn how to use simple prompts to understand system-level configurations.

  4. Building AI Agents to Solve Security Challenges | DevSec Blog (devsec-blog.com)

    AI agents can tackle security challenges effectively.

  5. Scaling Threat Modeling with AI: Generating 1000 Threat Models Using Gemini 2.0 and AI Security Analyzer - xvnpw personal blog (xvnpw.github.io)

    Dive into large-scale threat modeling powered by AI.

  6. From Pegasus to Predator - The evolution of Commercial Spyware on iOS - media.ccc.de (media.ccc.de)

    A deep dive into the development of iOS spyware.

  7. How We are Self Hosting Code Scanning at Reddit : r/RedditEng (reddit.com)

    Insights into Reddit's approach to self-hosted code scanning.

  8. When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying (permiso.io)

    Investigating vulnerabilities in hosted AI models.

  9. Bypassing Google's Magika & Bullying AI (s0md3v.github.io)

    Techniques for bypassing Google's Magika restrictions.

  10. 2024 CVE Data Review – JerryGamblin.com (jerrygamblin.com)

    A comprehensive review of CVEs from 2024.

  11. Remote Code Execution (RCE) Exploits - How Hackers Exploit from Home - Ocsaly Academy (ocsaly.com)

    Learn how attackers exploit RCE vulnerabilities and how to defend against them.

  12. A Signature Verification Bypass in Nuclei (CVE-2024-43405) | Wiz Blog (wiz.io)

    technical details behind CVE-2024-43405.

g1thub4

  1. mmaitre314/picklescan (github.com)

    A Python security scanner detecting malicious pickle files. Explore on GitHub

  2. NHAS/reverse\ssh (github.com)

    A reverse shell based on SSH. Explore on GitHub

  3. alufers/mitmproxy2swagger (github.com)

    Reverse-engineer REST APIs by capturing traffic. Explore on GitHub

  4. GangGreenTemperTatum/DOMspy (github.com)

    A web security research tool for testing DOM-based vulnerabilities. Explore on GitHub

← All Seclogs