ROSECURIFY
Subscribe
~/ seclog/ #36

Seclog - #36

26 curated links

g3n3r4l14

  1. AWS WAF Bypass: invalid JSON object and unicode escape sequences (blog.sicuranext.com)
  2. Streamlining Websocket Pentesting with wsrepl (blog.doyensec.com)
  3. Melting the DNS Iceberg: Taking over your infrastructure Kaminsky style (sec-consult.com)
  4. How hackers may steal your Ethers and why does eth\sign function (officercia.mirror.xyz)
  5. Securing macOS: A Closer Look At Built-In macOS Application Security (picussecurity.com)
  6. RedTeam Pentesting - Blog - Bringing Monsoon to the Next Level (blog.redteam-pentesting.de)
  7. Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform (samcurry.net)
  8. How Secrets Leak in CI/CD Pipelines (trufflesecurity.com)
  9. SVG Security Risks - not just a scalable graphic (securesystems.de)
  10. Server-Side Spreadsheet Injection - Formula Injection to… (bishopfox.com)
  11. Serverless Functions Post-Mortem (matduggan.com)
  12. Don’t you (forget NLP): Prompt injection with control characters in ChatGPT (dropbox.tech)
  13. New techniques and tools for web race conditions (portswigger.net)
  14. Downfall Attacks (downfall.page)

g1thub12

  1. ignis-sec/puff (github.com)
  2. omar2535/GraphQLer (github.com)
  3. doyensec/wsrepl (github.com)
  4. scipag/websocket\fuzzer (github.com)
  5. henry-richard7/Browser-password-stealer (github.com)
  6. nullenc0de/ChromeAudit (github.com)
  7. LemonSec/johnnyapplethief (github.com)
  8. yunuscadirci/XboxOneDirectoryTraversal (github.com)
  9. padok-team/cognito-scanner (github.com)
  10. adityatelange/bhhb (github.com)
  11. Escape-Technologies/goctopus (github.com)
  12. hahwul/noir (github.com)
← All Seclogs