ROSECURIFY
Subscribe
~/ seclog/ #21

Seclog - #21

36 curated links

g3n3r4l18

  1. Finding and Exploiting Vulnerabilities in H.264 Decoders (wrv.github.io)
  2. Storing OAuth tokens (fusionauth.io)
  3. How to Fuzz JavaScript with Jest and Jazzer.js (code-intelligence.com)
  4. The Rule Of 2 (chromium.googlesource.com)
  5. XSS without HTML: Client-Side Template Injection with AngularJS (portswigger.net)
  6. We put GPT-4 in Semgrep to point out false positives & fix code (semgrep.dev)
  7. Tool Release – shouganaiyo-loader: A Tool to Force JVM Attaches (research.nccgroup.com)
  8. CAN Injection: keyless car theft (kentindell.github.io)
  9. Bypassing Amazon Kids+ Parental Controls (n00py.io)
  10. DevOps threat matrix (microsoft.com)
  11. LOLDrivers (loldrivers.io)
  12. How the Twitter Algorithm works in 2023 (steventey.com)
  13. A web security story from 2008: silently securing JSON.parse (dev.to)
  14. The Uninvited Guest: IDORs, Garage Doors, and Stolen Secrets (medium.com)
  15. The SSO Wall of Shame | A list of vendors that treat single sign-on as a luxury feature, not a core security requirement. (sso.tax)
  16. Apple Patching Two 0-Day Vulnerabilities in iOS and macOS (isc.sans.edu)
  17. WTFBins | Home (wtfbins.wtf)
  18. CVE - CVE-2023-29218 (cve.mitre.org)

X5

  1. Ax Sharma on Twitter: "BREAKING: eFile.. (@Ax_Sharma)
  2. vx-underground on Twitter: "IntelBroker..." (@vxunderground)
  3. Matt Jay on Twitter: "YubiKey and FIDO2 auth can make you virtually phishing proof? (@mattjay)
  4. Shir Tamari on Twitter: "Continuing the BingBang thread, (@shirtamari)
  5. Donncha Ó Cearbhaill on Twitter: "Super proud of our team at @AmnestyTech" / Twitter (@DonnchaC)

y0utube1

  1. Abusing IT Management Tools to Create C2 (youtube.com)

g1thub12

  1. phpMyFAQ Code Injection vulnerability · CVE-2023-1761 (github.com)
  2. HashiCorp Nomad vulnerable to unauthenticated client agent HTTP request privilege escalation · CVE-2023-1782 · GitHub Advisory Database (github.com)
  3. cloudflare/flan (github.com)
  4. GoSecure/pyrdp (github.com)
  5. plackyhacker/Shellcode-Injection-Techniques (github.com)
  6. musana/fuzzuli (github.com)
  7. DragoQCC/HardHatC2 (github.com)
  8. d3mondev/burp-vps-proxy (github.com)
  9. anrbn/GCP-Attack-Defense (github.com)
  10. elfenware/obliviate-web (github.com)
  11. chenjiandongx/sniffer (github.com)
  12. gbrls/kurl (github.com)
← All Seclogs