ROSECURIFY
Subscribe
~/ seclog/ #115

Seclog - #115

25 curated links

g3n3r4l16

  1. badkeys (badkeys.info)
  2. Prompt Injection Attacks for Dummies (devanshbatham.hashnode.dev)

    A comprehensive guide to understanding and preventing prompt injection attacks.

  3. Credmaster2 - WhyNotSecurity (whynotsecurity.com)

    Exploring Gmail user enumeration techniques.

  4. An 18 years old bug (mizu.re)

    An analysis of a long-standing vulnerability.

  5. Using Mind Maps in Application Security Testing (schellman.com)

    Enhancing security testing with mind maps.

  6. How to gain code execution on millions of people and hundreds of popular apps (kibty.town)

    Uncovering mass exploitation techniques.

  7. Ranking MFA Methods - From Least to Most Secure (labs.jumpsec.com)

    A comparative analysis of MFA methods.

  8. Substack Domain Takeover (blog.nietaanraken.nl)

    Investigating a domain takeover vulnerability.

  9. SOTI Security Defenders’ Guide 2025 (akamai.com)

    Insights into 2025 cybersecurity trends.

  10. How to Hack AI Agents and Applications (josephthacker.com)

    Tactics for exploiting AI systems.

  11. Evil Crow RF: A Portable Radio Frequency Device (mobile-hacker.com)

    Exploring RF hacking tools.

  12. An iCloud Backdoor Would Make Our Phones Less Safe (schneier.com)

    Analysis of potential iCloud vulnerabilities.

  13. Bybit Hack Report (docsend.com)

    An in-depth look at the Bybit hack.

  14. GitLab Account Takeover via Password Reset (hackerone.com)

    A HackerOne report on a critical vulnerability.

  15. OWASP LLM Exploit Generation v1.0 (genaisecurityproject.com)

    A guide to LLM & AI security risks.

  16. Pwn everything Bounce everywhere all at once (part 2) (blog.quarkslab.com)

    Advanced exploitation techniques.

X4

  1. Safe{Wallet} Statement on Targeted Attack on Bybit (x.com)

    Official response to the Bybit attack.

  2. Grok Web App Security (@wunderwuzzi23)

    Enhancements in Content Security Policy to prevent data leakage.

  3. Lazarus Draining 1.5 Billion (@s1r1u5_)

    Analysis of the malicious JS attack on Safe{Wallet}.

  4. 1-Line RAT (@hackerschoice)

    Reverse remote shell access via browser.

g1thub5

  1. CVE-2025-25279 (github.com)

    Details on a critical vulnerability. Explore on GitHub

  2. Wayback Machine OSINT Framework (github.com)

    Chronos for historical OSINT. Explore on GitHub

  3. Camtruder (github.com)

    Advanced RTSP camera discovery tool. Explore on GitHub

  4. FuzzyAI (github.com)

    Automated LLM fuzzing tool. Explore on GitHub

  5. TruffleHog Explorer (github.com)

    Web-based tool for TruffleHog data analysis. Explore on GitHub

← All Seclogs