ROSECURIFY
Subscribe
~/ seclog/ #16

Seclog - #16

19 curated links

g3n3r4l11

  1. Salt Labs | Traveling with OAuth - Account Takeover on (salt.security)
  2. Unauthenticated RCE in Goanywhere - vsociety (vicarius.io)
  3. Skylight Cyber | A-Salt: attacking SaltStack (skylightcyber.com)
  4. Oxy is Cloudflare's Rust-based next generation proxy framework (blog.cloudflare.com)
  5. Abusing Maven's pom.xml - hn security (security.humanativaspa.it)
  6. DNS Hijacking: In-Depth — Officer's Blog (officercia.mirror.xyz)
  7. DNS Abuse Techniques Matrix (first.org)

    Also :

  8. Don't JSFuck with me: Part 1 – Trickster Dev (trickster.dev)
  9. Exploiting Distroless Images (form3.tech)
  10. 1700734 Shop App - Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account (hackerone.com)
  11. Rosenpass (rosenpass.eu)

y0utube2

  1. Bug Patterns in Solidity and Smart Contract Auditing (youtube.com)
  2. NahamCon2022EU: Hunting for Amazon Cognito Security Misconfigurations (youtube.com)

g1thub6

  1. rizemon/exploit-writing-for-oswe (github.com)
  2. greshake/llm-security: New ways of breaking app-integrated LLMs (github.com)
  3. authomize/okta\scim\attack\tool (github.com)
  4. fbkcs/ThunderDNS (github.com)
  5. gojue/ecapture (github.com)
  6. Limmen/awesome-rl-for-cybersecurity (github.com)
← All Seclogs