ROSECURIFY
Subscribe
~/ seclog/ #30

Seclog - #30

21 curated links

g3n3r4l9

  1. Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware (labs.jumpsec.com)
  2. Swing VPN app is a DDOS botnet | Greek geek (lecromee.github.io)
  3. 5 Challenges to Implementing DevSecOps and How to Overcome Them (insights.sei.cmu.edu)
  4. AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice (gosecure.net)
  5. Testing a new encrypted messaging app's extraordinary claims (crnkovic.dev)
  6. EJS Vulnerabilities in CTF (blog.huli.tw)
  7. Introduction to container security - Part 1 (s3cur3.it)
  8. Detecting and decrypting Sliver C2 – a threat hunter's guide (immersivelabs.com)
  9. DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)

y0utube3

  1. Hacking Google Cloud? (youtube.com)
  2. Authentication Vulnerabilities (youtube.com)
  3. Scale Your Cloud Infrastructure (Hosting CTFs) (youtube.com)

g1thub9

  1. yuske/server-side-prototype-pollution (github.com)
  2. CERT-Polska/Artemis (github.com)
  3. transmissions11/solcurity (github.com)
  4. mindedsecurity/semgrep-rules-android-security (github.com)
  5. tenable/EscalateGPT (github.com)
  6. hakluke/hakcheckurl (github.com)
  7. pgrok/pgrok (github.com)
  8. BishopFox/jsluice (github.com)
  9. joshhighet/ransomwatch (github.com)
← All Seclogs