ROSECURIFY
Subscribe
~/ seclog/ #114

Seclog - #114

21 curated links

g3n3r4l14

  1. Meshtastic (meshtastic.org)

    An open-source, encrypted mesh networking communication protocol.

  2. LOLC2 (lolc2.github.io)

    A lightweight and easy-to-use command and control (C2) framework.

  3. LOTTunnels (lottunnels.github.io)

    A proxy-based security tunneling tool for penetration testers and researchers.

  4. Infosec 101 for Activists (infosecforactivists.org)

    A cybersecurity guide tailored for activists and journalists.

  5. Elon Musk’s X blocks links to Signal (disruptionist.com)

    X is reportedly blocking links to Signal, the encrypted messaging service.

  6. Hacking cars in JavaScript (charliegerard.dev)

    Running replay attacks in the browser with HackRF to manipulate vehicle systems.

  7. Removing Jeff Bezos From My Bed (trufflesecurity.com)

    An unusual cybersecurity investigation uncovering security flaws.

  8. Achieving RCE in a Japanese chat tool (flatt.tech)

    Exploiting an outdated Electron feature to achieve remote code execution.

  9. How to Backdoor Large Language Models (blog.sshh.io)

    Exploring methods of injecting backdoors into AI models.

  10. SSRF on Sliver C2 teamserver (blog.chebuya.com)

    A new vulnerability (CVE-2025-27090) allowing SSRF via spoofed callbacks.

  11. AWS IAM User Enumeration Vulnerability (rhinosecuritylabs.com)

    A newly discovered issue (CVE-2025-0693) allowing unauthorized AWS IAM user enumeration.

  12. NSA Cyber Tactics Exposed (inversecos.com)

    A look at NSA’s cyber strategies from China’s perspective.

  13. Fun with Timing Attacks (ostro.ws)

    A deep dive into timing-based cybersecurity exploits.

  14. Boofuzz (boofuzz.readthedocs.io)

    A powerful network protocol fuzzing tool for security testing. Explore on GitHub

X1

  1. The Importance of Penetration Testing Reports (@BHinfoSecurity)

    A pentester’s primary job is writing a great report; hacking is just the fun part.

g1thub6

  1. AI-Infra-Guard (github.com)

    A security assessment tool for discovering risks in AI infrastructure. Explore on GitHub

  2. OpenSSH Account Takeover (CVE-2023-38408) (github.com)

    A proof-of-concept exploit for an OpenSSH vulnerability. Explore on GitHub

  3. Subtrace (github.com)

    A Wireshark-like tool for monitoring traffic in Docker containers. Explore on GitHub

  4. Passkey Raider (github.com)

    A Burp Suite extension for testing Passkey authentication systems. Explore on GitHub

  5. Tailpipe (github.com)

    An open-source SIEM tool for instant log insights using SQL and DuckDB. Explore on GitHub

  6. M365TokenRepeater (github.com)

    A tool for analyzing authentication flows in Microsoft 365. Explore on GitHub

← All Seclogs