ROSECURIFY
Subscribe
~/ seclog/ #28

Seclog - #28

16 curated links

g3n3r4l12

  1. Infecting SSH Public Keys with backdoors (blog.thc.org)
  2. A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF (jub0bs.com)
  3. Stealing the Information of Millions of People (newsletter.threat.dev)
  4. Bypassing The Internet Blackout (zertux.net)
  5. Introducing Scraping Kit (labs.lares.com)
  6. 1749129 - Side-channel attack can deanonymize users (potential risk to journalists and activists) (bugzilla.mozilla.org)
  7. The Case For Improving Crypto Wallet Security (blog.doyensec.com)
  8. Report 1923672 - Account takeover due to insufficient URL validation on RelayState parameter (hackerone.com)
  9. Building a Tor Hidden Service From Scratch - Part 1 (bentasker.co.uk)
  10. Report 1946534 - Open redirect due to scanning QR code via brave browser (hackerone.com)
  11. Analyzing Broken User Authentication Threats to JSON Web Tokens (akamai.com)
  12. CVExploits (cvexploits.io)

y0utube1

  1. BSidesSF 2023 - You don’t have to patch! (Pedro Fortuna, Jasvir Nagra) (youtube.com)

g1thub3

  1. runs arbitrary commands from a remote server · Issue 4659 · acmesh-official/acme.sh (github.com)
  2. MatrixTM/MHDDoS (github.com)
  3. yarrick/iodine (github.com)
← All Seclogs