ROSECURIFY
Subscribe
~/ seclog/ #130

Seclog - #130

18 curated links

g3n3r4l14

  1. RegSeek – Windows Registry Forensics Reference (regseek.github.io)

    Search-ready cheat-sheet of registry artefacts for DFIR triage (regseek.github.io)

  2. Quasarops (hunt.quasarops.com)

    Diego Perez’s threat-hunting pipelines, detections and intel dashboards (hunt.quasarops.com)

  3. Bruteforcing the phone number of any Google user (brutecat.com)

    Enumeration flaw in Google’s recovery flow leaks linked numbers (brutecat.com)

  4. Phishing Cloud Credentials (AccessKeys) via MCP (blog.catgg.com)

    Abuses Model Context Protocol OAuth to steal AWS keys (blog.catgg.com)

  5. Escaping “<” and “>” in attributes (bughunters.google.com)

    Proper encoding blocks mutation-XSS gadget chains (bughunters.google.com)

  6. Two Botnets, One Flaw: Mirai spreads via Wazuh vulnerability (akamai.com)

    Mirai weaponises unsafe deserialization in agents (akamai.com)

  7. The Ultimate Double-Clickjacking PoC (jorianwoltjer.com)

    Multi-step UI-redress technique for responsible disclosure (jorianwoltjer.com)

  8. Getting started with Wirego (blog.quarkslab.com)

    Quarkslab’s Go-based Wireshark-over-ZMQ plugin walkthrough (blog.quarkslab.com)

  9. Bypassing GitHub Actions policies in the dumbest way possible (blog.yossarian.net)

    Nests reusable workflows to evade org allow-lists (blog.yossarian.net)

  10. Netflix Vulnerability: Dependency Confusion in Action (landh.tech)

    Real-world supply-chain hijack via internal package overlap (landh.tech)

  11. “Localhost tracking” explained (zeropartydata.es)

    Privacy deep-dive on Meta’s internal-IP analytics risk (zeropartydata.es)

  12. OBS WebSocket → RCE (jorianwoltjer.com)

    Misconfig in obs-websocket enables browser-to-system code-exec (jorianwoltjer.com)

  13. Fuzzing WebSockets for server-side vulnerabilities (arete06.com)

    Automates WS fuzzing with Backslash Scanner extensions (arete06.com)

  14. When Path Normalization Beats Middleware (omaralzughaibi.com)

    Auth-header bypass via normalized paths → full admin takeover (omaralzughaibi.com)

y0utube1

  1. Is Your Approach to Pipeline Security Flawed? (youtube.com)

    Patricia R. dissects common CI/CD blind spots and mitigations (youtube.com)

g1thub3

  1. ChrispyBacon-dev/DockFlare (github.com)

    Docker-label-driven Cloudflare Tunnel & Zero-Trust manager with web UI (github.com)

  2. Privado-Inc/privado (github.com)

    Static scanner that maps data flows and pre-fills Play Store Data-Safety (github.com)

  3. duty1g/subcat (github.com)

    Lightning-fast passive subdomain enumerator aggregating multiple sources (github.com)

← All Seclogs