ROSECURIFY
Subscribe
~/ seclog/ #32

Seclog - #32

20 curated links

g3n3r4l11

  1. Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust (dirkjanm.io)
  2. inDrive | Report 1861487 - inDriver Job - Admin Approval Bypass (hackerone.com)
  3. HackerOne | Report 2032778 - Internal machine learning API endpoint for CWE classification is vulnerable to path traversal (hackerone.com)
  4. Linux local electron application script-src: self bypass (mizu.re)
  5. How I Hacked CASIO F-91W digital watch (medium.com)
  6. Patch Diffing CVE-2023-28121 to Compromise a WooCommerce (rcesecurity.com)
  7. Full Disclosure - DOM-based XSS And Failures In Bug Bounty Hunting (kuldeep.io)
  8. RCE in GitLab's CLI tool (blog.takemyhand.xyz)
  9. A Journey Into Hacking Google Search Appliance (devco.re)
  10. Prompt Injection: How to Prevent It or Should We Prevent It? (utkusen.medium.com)
  11. Segfault | The Hacker’s Choice (thc.org)

y0utube1

  1. Hacking a Satellite News-Link CNN System. (youtube.com)

g1thub8

  1. SirBugs/CVE-2023-24488-PoC (github.com)
  2. RandomRobbieBF/CVE-2023-2982 (github.com)
  3. zzzteph/probable\subdomains (github.com)
  4. hakluke/hakstore (github.com)
  5. lauritzh/auth-request-analyser (github.com)
  6. orf/gping: Ping, but with a graph (github.com)
  7. sensepost/steampipe-plugin-projectdiscovery (github.com)
  8. gerobug/gerobug (github.com)
← All Seclogs