ROSECURIFY
Subscribe
~/ seclog/ #34

Seclog - #34

22 curated links

g3n3r4l16

  1. Why ORMs and Prepared Statements Can't (Always) Win (sonarsource.com)
  2. DDoS threat report for 2023 Q2 (blog.cloudflare.com)
  3. How to get rid of AWS access keys – Part 3: Replacing the authentication (wiz.io)
  4. Mongoose Prototype Pollution Vulnerability vulnerability found in mongoose (huntr.dev)
  5. Advisory: ShareFile Pre-Auth RCE (CVE-2023-24489) (blog.assetnote.io)
  6. Introducing: Security’s Social Problem (postmodernsecurity.com)
  7. How CodeQL works: Summary (sim4n6.beehiiv.com)
  8. THE LAWS OF IDENTITY (identityblog.com)
  9. Firstyear's blog-a-log (fy.blackhats.net.au)
  10. AWS Access Key ID formats (awsteele.com)
  11. BYOS - Bundle Your Own Stealer (research.checkpoint.com)
  12. The Death of Infosec Twitter (cyentia.com)
  13. Practice Your Security Prompting Skills (schneier.com)
  14. : PE & RCE Vulnerabilities in Google Cloud Build (orca.security)
  15. CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent (qualys.com)
  16. Hunting for Nginx Alias Traversals in the wild (labs.hakaioffsec.com)

y0utube2

  1. Vulnerabilities and Misconfigurations in GitHub Actions (youtube.com)
  2. Security's Social Problem: Introduction (youtube.com)

g1thub4

  1. irsl/curlshell: reverse shell using curl (github.com)
  2. jasperan/whatsapp-osint: WhatsApp spy (github.com)
  3. rosenpass/rosenpass (github.com)
  4. owasp-amass/open-asset-model (github.com)
← All Seclogs