ROSECURIFY
Subscribe
~/ seclog/ #17

Seclog - #17

31 curated links

g3n3r4l15

  1. Unauthorized access to organization secrets in GitHub — Ophion Security (ophionsecurity.com)
  2. Scaling Appsec at Netflix (Part 2) (netflixtechblog.com)
  3. Google Online Security Blog: OSV and the Vulnerability Life Cycle (security.googleblog.com)
  4. How to intercept, observe & mock WebRTC traffic (httptoolkit.com)
  5. A Cyber Alarm – PoC Parrot (pwndefend.com)
  6. EP 44: How does ChatGPT work? - by Alex Xu (blog.bytebytego.com)
  7. 1847140 Argo CD reconciles apps outside configured namespaces when sharding is enabled (hackerone.com)
  8. Prompt Injection Attacks on Large Language Models (schneier.com)
  9. Fixing the Next 10,000 Aliasing Bugs (blog.polybdenum.com)
  10. containerd completes fuzzing audit | Cloud Native Computing Foundation (cncf.io)
  11. The diminishing returns of DAST (boringappsec.substack.com)
  12. 0xffsec Handbook: The Pentester's Guide (0xffsec.com)
  13. How Container Networking Works: Practical Explanation (iximiuz.com)
  14. Segfault / GUI | The Hacker’s Choice (thc.org)
  15. A New Vector For “Dirty” Arbitrary File Write to RCE (blog.doyensec.com)

X1

  1. Matt Jay on Twitter: "Currently reading: @TheDFIRReport year in review. " (@mattjay)

y0utube2

  1. Fuzz like a pro: ERC20 properties, example usage, and Echidna cheat codes (youtube.com)
  2. Security Begins with Secure Development Environments (youtube.com)

g1thub13

  1. crypto/elliptic: specific unreduced P-256 scalars produce incorrect results (CVE-2023-24532) · Issue 58647 (github.com)
  2. nemesida-waf/waf-bypass (github.com)
  3. dom-sec/awesome-physec (github.com)
  4. UberGuidoZ/Flipper (github.com)
  5. CosmodiumCS/SpiderCat (github.com)
  6. AloneMonkey/frida-ios-dump (github.com)
  7. jas502n/Grafana-CVE-2021-43798 (github.com)
  8. gyaansastra/CVE-2023-21716 (github.com)
  9. corkami/collisions (github.com)
  10. Orange-Cyberdefense/KeePwn (github.com)
  11. c0rdis/security-champions-playbook (github.com)
  12. ant4g0nist/webgl-fuzzer (github.com)
  13. cisagov/decider (github.com)
← All Seclogs