ROSECURIFY
Subscribe
~/ seclog/ #15

Seclog - #15

19 curated links

g3n3r4l18

  1. I Read The DoD Zero Trust Doc, Here's What You Need To Know... (lastweekasavciso.com)
  2. Explained from First Principles (explained-from-first-principles.com)
  3. EmojiDeploy: Smile! Your Azure Web Service Got RCE’d Ermetic (ermetic.com)
  4. SS - Monitor Socket Connections (earda.net)
  5. Prototype Pollution Leads to Remote Code Execution in Node.js (arxiv.org)
  6. OWASP Kubernetes Top 10 – Sysdig (sysdig.com)
  7. Airbnb’s Approach to Access Management at Scale (medium.com)
  8. How to use granular geographic match rules with AWS WAF | AWS Security Blog (aws.amazon.com)
  9. AWS EKS Playground using Terraform | Rohit Salecha (rohitsalecha.com)
  10. Threat Hunting Series: Detection Engineering VS Threat Hunting (kostas-ts.medium.com)
  11. Exploiting API Framework Flexibility (attackshipsonfi.re)
  12. yayi - Managing several SSH identities explained (yayimorphology.org)
  13. Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass (h1pmnh.github.io)
  14. Threat Modelling Cloud Platform Services by Example: Google Cloud Storage – NCC Group Research (research.nccgroup.com)
  15. Home - zrok (zrok.io)
  16. Poste.io (poste.io)

    ~ complete mail server

  17. 12ft Ladder (12ft.io)
  18. — The European public DNS that makes your Internet safer (dns0.eu)

g1thub1

  1. nemesida-waf/waf-bypass: Check your WAF before an attacker does this one (github.com)
← All Seclogs