ROSECURIFY
Subscribe
~/ seclog/ #22

Seclog - #22

33 curated links

g3n3r4l18

  1. Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489) (blog.assetnote.io)
  2. Git Arbitrary Configuration Injection (CVE-2023-29007) (blog.ethiack.com)
  3. A Beginner’s Guide To BSidesSF (lastweekasavciso.com)
  4. AWS Codebuild - Token Leakage (cloud.hacktricks.xyz)
  5. Integrating DAST into DevSecOps (beaglesecurity.substack.com)
  6. CVE-2022-0540 - Authentication bypass in Seraph (blog.viettelcybersecurity.com)
  7. WebSockets are a Pain (blog.zsec.uk)
  8. 1651429 Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted (hackerone.com)
  9. Privilege escalation in AWS Elastic Kubernetes Service (EKS) (blog.calif.io)
  10. CVE Reference Rot (jerrygamblin.com)
  11. Supply Chain Security Jumps the Shark (postmodernsecurity.com)
  12. LLMs and Phishing - Schneier on Security (schneier.com)
  13. 1710564 Possible to spoof Origin in "Connected Sites" (hackerone.com)
  14. Argument Injection Vectors (sonarsource.github.io)
  15. API: critical dependency data for secure supply chains (security.googleblog.com)
  16. Triple Threat: NSO Group’s Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero-Click Exploit Chains (citizenlab.ca)
  17. Security best practices for Amazon S3 - Amazon Simple Storage Service (docs.aws.amazon.com)
  18. Mysk🇨🇦🇩🇪: "Google has just updated its 2F…" - DEF CON Social (defcon.social)

y0utube2

  1. Penetrating the Cloud: Uncovering Unknown Vulns (youtube.com)
  2. Coding with ChatGPT is so easy, a caveman could do it (youtube.com)

g1thub13

  1. advanced-security/enterprise-security-team (github.com)
  2. AdguardTeam/cname-trackers (github.com)
  3. pufferffish/wireproxy (github.com)
  4. sametsazak/mergen (github.com)
  5. quarkslab/pastis (github.com)
  6. akto-api-security/30-API-security-tests (github.com)
  7. WesleyWong420/RedTeamOps-Havoc-101 (github.com)
  8. GreyDGL/PentestGPT (github.com)
  9. stealthsploit/OneRuleToRuleThemStill (github.com)
  10. codingo/dorky (github.com)
  11. ethiack/CVE-2023-29007 (github.com)
  12. hmgle/graftcp (github.com)
  13. RhinoSecurityLabs/ccat (github.com)
← All Seclogs