ROSECURIFY
Subscribe
~/ seclog/ #129

Seclog - #129

13 curated links

g3n3r4l9

  1. Disclosed ․ Online (reddit.com)

    Directory that aggregates bug-bounty researcher profiles from HackerOne, Bugcrowd, GitHub, and more. (reddit.com)

  2. Have I Been Squatted? (haveibeensquatted.com)

    Fast typosquatting-discovery tool that maps look-alike domains and offers defence guidance. (haveibeensquatted.com)

  3. On the 10th Anniversary of the Snowden Revelations (electrospaces.net)

    Updated retrospective on key NSA leaks and their continuing impact (updated 7 Apr 2025). (electrospaces.net)

  4. Incident Response in AWS: Scoping Strategies (medium.com)

    Fresh Medium post (6 days ago) showing how to pivot on CloudTrail artefacts for rapid scoping. (medium.com)

  5. Covert Web-to-App Tracking via Localhost on Android (localmess.github.io)

    Research revealing Meta & Yandex apps quietly listening on fixed local ports for tracking. (localmess.github.io)

  6. Roundcube ≤ 1.6.10 Post-Auth RCE (CVE-2025-49113) (fearsoff.org)

    Deep dive into a PHP deserialization flaw that yields full remote code-execution. (fearsoff.org)

  7. Analyzing IPv4 Trades with gnuplot (ipv4a-5539ad.gitlab.io)

    Demo project exploring IPv4 supply-and-demand trends during the IPv6 transition. (ipv4a-5539ad.gitlab.io)

  8. The Ultimate Guide to JWT Vulnerabilities & Attacks (pentesterlab.com)

    Hands-on PentesterLab guide to exploiting and defending JWT flaws. (pentesterlab.com)

  9. AI bugSWAT in Tokyo & 2025 Hacker Roadshow (bughunters.google.com)

    Google Bug Hunters’ inside look at their live AI hacking event and top findings. (x.com)

X1

  1. “I left a server online with VNC wide open…” (@Xtrato)

    James Woolley shares what attackers did when handed an exposed VNC box. (x.com)

y0utube1

  1. Undercover Journalist Unpacks Essential Tools to Escape Detection (youtube.com)

    Practical OPSEC tips for reporters working in hostile environments. (youtube.com)

g1thub2

  1. frida-script-gen (github.com)

    CLI that scans Android APKs for root/SSL-pinning checks and auto-generates Frida bypass hooks. (github.com)

  2. assetnote/surf (github.com)

    Go tool that filters massive host lists to surface cloud-based SSRF candidates for escalation. (github.com)

← All Seclogs