ROSECURIFY
Subscribe
~/ seclog/ #121

Seclog - #121

25 curated links

g3n3r4l13

  1. Cybench (cybench.github.io)

    A JVM performance benchmarking and profiling platform.

  2. DNM Buyer’s Bible (darknetbible.info)

    A practical guide for darknet markets and privacy preservation.

  3. Threat Modeling GitHub (srajangupta.substack.com)

    A breakdown of GitHub's intentionally vulnerable design through threat modeling.

  4. Next Token Prediction & LLMs (s1r1us.ninja)

    How predicting the next token can be weaponized in LLMs.

  5. 0-Click RCE on SuperNote E-Ink (prizmlabs.io)

    Remote rootkit-style vulnerability in SuperNote tablets.

  6. MCP Tool Poisoning (lbeurerkellner.github.io)

    Exploiting and hijacking MCP clients through tool poisoning.

  7. Agent2Agent Protocol (A2A) (developers.googleblog.com)

    Google’s new protocol enabling agent-to-agent interoperability.

  8. Prompt Engineering (kaggle.com)

    A technical whitepaper on crafting prompts to guide AI output.

  9. AI Vulnerability Discovery (schneier.com)

    Can AI discover and exploit vulnerabilities? A Schneier analysis.

  10. Langflow Python RCE (horizon3.ai)

    Unauthenticated RCE in Langflow via exec() abuse.

  11. pgAdmin RCE (CVE-2025-2945) (py0zz1.tistory.com)

    Exploit write-up for a critical pgAdmin remote code execution flaw.

  12. .NET Deobfuscation (cyber.wtf)

    Reverse-engineering obfuscated .NET binaries.

  13. Anti-EDR Compendium (blog.deeb.ch)

    A deep technical dive into how EDRs work—and how attackers bypass them.

X2

  1. AI MVP Security Checklist (@prajwaltomar_)

    A must-read checklist before launching any AI-based MVP. View on X

  2. CVE-2025-30406 PoC (@_JohnHammond)

    A working proof-of-concept for a newly added CVE on CISA's KEV list. View on X

y0utube3

  1. From Zero to Zero Day (youtube.com)

    The hacker journey of Jonathan Jacobi and real-world 0day stories. Watch Here

  2. Is Cursor or Windsurf Safe? (youtube.com)

    Evaluating the security of two popular AI tools. Watch Here

  3. Hacking Happy Hour Ep.118 (youtube.com)

    A casual talk on 0days, SQLi, and red team news. Watch Here

g1thub7

  1. mcp-scan (github.com)

    A scanning tool designed for identifying security issues in MCP servers. Explore on GitHub

  2. looking-glass (github.com)

    A tool for indexing, querying, and repeating searches through codebases. Explore on GitHub

  3. CVE-2025-30065 PoC (github.com)

    A working proof-of-concept for the named CVE. Explore on GitHub

  4. blutter (github.com)

    A reverse engineering toolkit for Flutter mobile applications. Explore on GitHub

  5. CVE-2025-22457 PoC (github.com)

    A public exploit for CVE-2025-22457. Explore on GitHub

  6. RF-Clown (github.com)

    BLE and Bluetooth jammer using ESP32 and nRF24L01 hardware. Explore on GitHub

  7. passphrase-wordlist (github.com)

    A comprehensive wordlist and hashcat rule set for cracking long passphrases. Explore on GitHub

← All Seclogs