ROSECURIFY
Subscribe
~/ seclog/ #40

Seclog - #40

19 curated links

g3n3r4l12

  1. How does the Linux Kernel start a Process (iq.thc.org)
  2. The bogus CVE problem (lwn.net)
  3. HTTP Request Splitting vulnerabilities exploitation (offzone.moscow)
  4. Finding things in JavaScript: Where are we today? (jswzl.io)
  5. Orbeon Forms: The Final Form? On A Journey To RCE (labs.watchtowr.com)
  6. DevTunnels for C2 (syonsecurity.com)
  7. Bypass Cloudtrail Detection using AWS Appstream - Cloud Security! (saransh-rana.gitbook.io)
  8. An Overview of Software Supply Chain Security (tldrsec.com)
  9. curl | Report 2072338 - CVE-2023-38039: HTTP header allocation DOS (hackerone.com)
  10. Analyzing Security Vulnerabilities in XWiki: In-Depth Examination (blog.securelayer7.net)
  11. (Research) Exploiting HTTP Parsers Inconsistencies (rafa.hashnode.dev)
  12. CVE-2023-38146: Arbitrary Code Execution via Windows Themes (exploits.forsale)

y0utube1

  1. Windows Security Research: A Practical Guide for Beginners to find 0 days (youtube.com)

g1thub6

  1. krol3/container-security-checklist (github.com)
  2. e1abrador/web.Monitor: (github.com)
  3. CyberCX-STA/PurpleOps (github.com)
  4. MrTiz/CVE-2023-35671 (github.com)
  5. NSEcho/furlzz (github.com)
  6. redrays-io/WS\RaceCondition\PoC (github.com)
← All Seclogs