ROSECURIFY
Subscribe
~/ seclog/ #12

Seclog - #12

25 curated links

g3n3r4l19

  1. DNS DriveBy: Stealthy GPS Tracking Using Open Wi-Fi (hackster.io)
  2. X41 Audited Git | X41 D-SEC (x41-dsec.de)
  3. You Move, They Follow: Uncovering Iran’s Mobile Legal Intercept System - The Citizen Lab (citizenlab.ca)
  4. Project Bishop: Clustering Web Pages – NCC Group Research (research.nccgroup.com)
  5. StaffEng Security - tl;dr sec (tldrsec.com)
  6. Sudoedit bypass in Sudo <= 1.9.12p1 CVE-2023-22809 (synacktiv.com)
  7. XML Security in Java (semgrep.dev)
  8. AWS CloudTrail vulnerability: Undocumented API allows CloudTrail bypass | Datadog Security Labs (securitylabs.datadoghq.com)
  9. AWS Phishing: Four Ways - High Signal Security (ramimac.me)
  10. GraphQL exploitation – All you need to know – Cybervelia | Cyber Security (cybervelia.com)
  11. Year 2038 problem - Wikiwand (wikiwand.com)
  12. CORS Bypass via dot (hahwul.com)
  13. Making Clouds Rain :: Remote Code Execution in Microsoft Office 365 (srcincite.io)
  14. This man thought opening a TXT file is fine, he thought wrong. macOS CVE-2019-8761 - Paulos Yibelo - Blog (paulosyibelo.com)
  15. Security in the age of LLMs (mufeedvh.com)
  16. Defense Techniques: Reporting Phish – text/plain (textslashplain.com)
  17. PandoraFMS - Pre-Auth Remote Code Execution | Esjay’s Blog (3sjay.github.io)
  18. Exploiting CVE-2021-3490 for Container Escapes | CrowdStrike (crowdstrike.com)
  19. Optimizing Wordlists with Masks · Cyber & Stuff (jakewnuk.com)

g1thub6

  1. MaximeBeasse/KeyDecoder: KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds. (github.com)
  2. alcionai/corso: Free, Secure, and Open-Source Backup for Microsoft 365 (github.com)
  3. r0oth3x49/ghauri: An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws (github.com)
  4. joelsernamoreno/EvilCrow-Keylogger: WiFi keylogger with Micro SD slot, based on the Atmega32U4 microcontroller and the ESP32-PICO module (github.com)
  5. trickest/dsieve: Filter and enrich a list of subdomains by level (github.com)
  6. orf/aws-creds-scanner: This repo scans pypi, rubygems and hexpm for AWS keys (github.com)
← All Seclogs