ROSECURIFY
Subscribe
~/ seclog/ #19

Seclog - #19

24 curated links

g3n3r4l17

  1. My Cloud Desktop (rohitsalecha.com)
  2. Tips For Securing CI/CD Pipelines (devops.com)
  3. PHP filter chains: file read from error-based oracle (synacktiv.com)
  4. Parallels Desktop Toolgate Vulnerability (blog.impalabs.com)
  5. Move, Patch, Get Out the Way: 2022 Zero-Day Exploitation Continues at an Elevated Pace (mandiant.com)
  6. JMX Exploitation Revisited (codewhitesec.blogspot.com)
  7. EJS - Server Side Prototype Pollution gadgets to RCE (mizu.re)
  8. How Your NFTs Could Have Been Stolen in Just One Click (permasecure.io)
  9. Privacy Violations Shutdown OpenAI ChatGPT and Beg Investigation (flyingpenguin.com)
  10. A guided tour of the 2023 Threat Detection Report (redcanary.com)
  11. C4 Audit Report - The Graph (trustindistrust.com)
  12. C4 Audit Report - Trader Joe v2 (trustindistrust.com)
  13. Harvesting Logs for Fun and Profit (beny23.github.io)
  14. Attack Surface Management (philvenables.com)
  15. Practical Introduction to BLE GATT Reverse Engineering: Hacking the Domyos EL500 (jcjc-dev.com)
  16. Telegram & Discord Security Best Practices (officercia.mirror.xyz)
  17. OpenAI (ChatGPT) Vulnerability Remediation Concept Work (kondukto.io)

X2

  1. GitHub Says: "Security tip of the day: fuzz your code." (@github)
  2. "holy FUCK. Windows Snipping Tool is vulnerable to Acropalypse tool" (@David3141593)

y0utube1

  1. Client-side path traversal vulnerability class explained - $6,580 GitLab bug bounty (youtube.com)

g1thub4

  1. Zeus-Labs/ZeusCloud (github.com)
  2. netsecurity-as/recon365 (github.com)
  3. archanchoudhury/SOC-OpenSource (github.com)
  4. BishopFox/Imperva\gzip\WAF\Bypass (github.com)
← All Seclogs